Jan 23 18:29:03.035170 kernel: Linux version 6.12.66-flatcar (build@pony-truck.infra.kinvolk.io) (x86_64-cros-linux-gnu-gcc (Gentoo Hardened 14.3.1_p20250801 p4) 14.3.1 20250801, GNU ld (Gentoo 2.45 p3) 2.45.0) #1 SMP PREEMPT_DYNAMIC Fri Jan 23 15:50:57 -00 2026 Jan 23 18:29:03.035208 kernel: Command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200n8 console=tty0 flatcar.first_boot=detected flatcar.oem.id=hetzner verity.usrhash=ee2a61adbfdca0d8850a6d1564f6a5daa8e67e4645be01ed76a79270fe7c1051 Jan 23 18:29:03.035222 kernel: BIOS-provided physical RAM map: Jan 23 18:29:03.035232 kernel: BIOS-e820: [mem 0x0000000000000000-0x000000000009ffff] usable Jan 23 18:29:03.035246 kernel: BIOS-e820: [mem 0x0000000000100000-0x000000007ed3efff] usable Jan 23 18:29:03.035255 kernel: BIOS-e820: [mem 0x000000007ed3f000-0x000000007edfffff] reserved Jan 23 18:29:03.036106 kernel: BIOS-e820: [mem 0x000000007ee00000-0x000000007f8ecfff] usable Jan 23 18:29:03.036120 kernel: BIOS-e820: [mem 0x000000007f8ed000-0x000000007fb6cfff] reserved Jan 23 18:29:03.036131 kernel: BIOS-e820: [mem 0x000000007fb6d000-0x000000007fb7efff] ACPI data Jan 23 18:29:03.036141 kernel: BIOS-e820: [mem 0x000000007fb7f000-0x000000007fbfefff] ACPI NVS Jan 23 18:29:03.036151 kernel: BIOS-e820: [mem 0x000000007fbff000-0x000000007ff7bfff] usable Jan 23 18:29:03.036160 kernel: BIOS-e820: [mem 0x000000007ff7c000-0x000000007fffffff] reserved Jan 23 18:29:03.036175 kernel: BIOS-e820: [mem 0x00000000e0000000-0x00000000efffffff] reserved Jan 23 18:29:03.036185 kernel: BIOS-e820: [mem 0x00000000feffc000-0x00000000feffffff] reserved Jan 23 18:29:03.036196 kernel: BIOS-e820: [mem 0x00000000ffc00000-0x00000000ffffffff] reserved Jan 23 18:29:03.036207 kernel: BIOS-e820: [mem 0x0000000100000000-0x0000000179ffffff] usable Jan 23 18:29:03.036218 kernel: BIOS-e820: [mem 0x000000fd00000000-0x000000ffffffffff] reserved Jan 23 18:29:03.036232 kernel: NX (Execute Disable) protection: active Jan 23 18:29:03.036242 kernel: APIC: Static calls initialized Jan 23 18:29:03.036252 kernel: e820: update [mem 0x7dfab018-0x7dfb4a57] usable ==> usable Jan 23 18:29:03.036283 kernel: e820: update [mem 0x7df6f018-0x7dfaa657] usable ==> usable Jan 23 18:29:03.036293 kernel: e820: update [mem 0x7dc01018-0x7dc3c657] usable ==> usable Jan 23 18:29:03.036304 kernel: extended physical RAM map: Jan 23 18:29:03.036314 kernel: reserve setup_data: [mem 0x0000000000000000-0x000000000009ffff] usable Jan 23 18:29:03.036324 kernel: reserve setup_data: [mem 0x0000000000100000-0x000000007dc01017] usable Jan 23 18:29:03.036334 kernel: reserve setup_data: [mem 0x000000007dc01018-0x000000007dc3c657] usable Jan 23 18:29:03.036344 kernel: reserve setup_data: [mem 0x000000007dc3c658-0x000000007df6f017] usable Jan 23 18:29:03.036358 kernel: reserve setup_data: [mem 0x000000007df6f018-0x000000007dfaa657] usable Jan 23 18:29:03.036368 kernel: reserve setup_data: [mem 0x000000007dfaa658-0x000000007dfab017] usable Jan 23 18:29:03.036378 kernel: reserve setup_data: [mem 0x000000007dfab018-0x000000007dfb4a57] usable Jan 23 18:29:03.036388 kernel: reserve setup_data: [mem 0x000000007dfb4a58-0x000000007ed3efff] usable Jan 23 18:29:03.036398 kernel: reserve setup_data: [mem 0x000000007ed3f000-0x000000007edfffff] reserved Jan 23 18:29:03.036408 kernel: reserve setup_data: [mem 0x000000007ee00000-0x000000007f8ecfff] usable Jan 23 18:29:03.036418 kernel: reserve setup_data: [mem 0x000000007f8ed000-0x000000007fb6cfff] reserved Jan 23 18:29:03.036428 kernel: reserve setup_data: [mem 0x000000007fb6d000-0x000000007fb7efff] ACPI data Jan 23 18:29:03.036438 kernel: reserve setup_data: [mem 0x000000007fb7f000-0x000000007fbfefff] ACPI NVS Jan 23 18:29:03.036448 kernel: reserve setup_data: [mem 0x000000007fbff000-0x000000007ff7bfff] usable Jan 23 18:29:03.036458 kernel: reserve setup_data: [mem 0x000000007ff7c000-0x000000007fffffff] reserved Jan 23 18:29:03.036472 kernel: reserve setup_data: [mem 0x00000000e0000000-0x00000000efffffff] reserved Jan 23 18:29:03.036482 kernel: reserve setup_data: [mem 0x00000000feffc000-0x00000000feffffff] reserved Jan 23 18:29:03.036498 kernel: reserve setup_data: [mem 0x00000000ffc00000-0x00000000ffffffff] reserved Jan 23 18:29:03.036509 kernel: reserve setup_data: [mem 0x0000000100000000-0x0000000179ffffff] usable Jan 23 18:29:03.036523 kernel: reserve setup_data: [mem 0x000000fd00000000-0x000000ffffffffff] reserved Jan 23 18:29:03.036533 kernel: efi: EFI v2.7 by Ubuntu distribution of EDK II Jan 23 18:29:03.036545 kernel: efi: SMBIOS=0x7f988000 SMBIOS 3.0=0x7f986000 ACPI=0x7fb7e000 ACPI 2.0=0x7fb7e014 MEMATTR=0x7e01b198 RNG=0x7fb73018 Jan 23 18:29:03.036555 kernel: random: crng init done Jan 23 18:29:03.036566 kernel: efi: Remove mem137: MMIO range=[0xffc00000-0xffffffff] (4MB) from e820 map Jan 23 18:29:03.036576 kernel: e820: remove [mem 0xffc00000-0xffffffff] reserved Jan 23 18:29:03.036587 kernel: secureboot: Secure boot disabled Jan 23 18:29:03.036597 kernel: SMBIOS 3.0.0 present. Jan 23 18:29:03.036607 kernel: DMI: Hetzner vServer/Standard PC (Q35 + ICH9, 2009), BIOS 20171111 11/11/2017 Jan 23 18:29:03.036622 kernel: DMI: Memory slots populated: 1/1 Jan 23 18:29:03.036632 kernel: Hypervisor detected: KVM Jan 23 18:29:03.036643 kernel: last_pfn = 0x7ff7c max_arch_pfn = 0x10000000000 Jan 23 18:29:03.036653 kernel: kvm-clock: Using msrs 4b564d01 and 4b564d00 Jan 23 18:29:03.036663 kernel: kvm-clock: using sched offset of 13214629765 cycles Jan 23 18:29:03.036674 kernel: clocksource: kvm-clock: mask: 0xffffffffffffffff max_cycles: 0x1cd42e4dffb, max_idle_ns: 881590591483 ns Jan 23 18:29:03.036686 kernel: tsc: Detected 2399.998 MHz processor Jan 23 18:29:03.036698 kernel: e820: update [mem 0x00000000-0x00000fff] usable ==> reserved Jan 23 18:29:03.036724 kernel: e820: remove [mem 0x000a0000-0x000fffff] usable Jan 23 18:29:03.036735 kernel: last_pfn = 0x17a000 max_arch_pfn = 0x10000000000 Jan 23 18:29:03.036750 kernel: MTRR map: 4 entries (2 fixed + 2 variable; max 18), built from 8 variable MTRRs Jan 23 18:29:03.036761 kernel: x86/PAT: Configuration [0-7]: WB WC UC- UC WB WP UC- WT Jan 23 18:29:03.036772 kernel: last_pfn = 0x7ff7c max_arch_pfn = 0x10000000000 Jan 23 18:29:03.036782 kernel: Using GB pages for direct mapping Jan 23 18:29:03.036793 kernel: ACPI: Early table checksum verification disabled Jan 23 18:29:03.036804 kernel: ACPI: RSDP 0x000000007FB7E014 000024 (v02 BOCHS ) Jan 23 18:29:03.036815 kernel: ACPI: XSDT 0x000000007FB7D0E8 000054 (v01 BOCHS BXPC 00000001 01000013) Jan 23 18:29:03.036831 kernel: ACPI: FACP 0x000000007FB79000 0000F4 (v03 BOCHS BXPC 00000001 BXPC 00000001) Jan 23 18:29:03.036842 kernel: ACPI: DSDT 0x000000007FB7A000 002443 (v01 BOCHS BXPC 00000001 BXPC 00000001) Jan 23 18:29:03.036852 kernel: ACPI: FACS 0x000000007FBDD000 000040 Jan 23 18:29:03.036863 kernel: ACPI: APIC 0x000000007FB78000 000080 (v03 BOCHS BXPC 00000001 BXPC 00000001) Jan 23 18:29:03.036874 kernel: ACPI: HPET 0x000000007FB77000 000038 (v01 BOCHS BXPC 00000001 BXPC 00000001) Jan 23 18:29:03.036886 kernel: ACPI: MCFG 0x000000007FB76000 00003C (v01 BOCHS BXPC 00000001 BXPC 00000001) Jan 23 18:29:03.036897 kernel: ACPI: WAET 0x000000007FB75000 000028 (v01 BOCHS BXPC 00000001 BXPC 00000001) Jan 23 18:29:03.036912 kernel: ACPI: BGRT 0x000000007FB74000 000038 (v01 INTEL EDK2 00000002 01000013) Jan 23 18:29:03.036923 kernel: ACPI: Reserving FACP table memory at [mem 0x7fb79000-0x7fb790f3] Jan 23 18:29:03.036933 kernel: ACPI: Reserving DSDT table memory at [mem 0x7fb7a000-0x7fb7c442] Jan 23 18:29:03.036944 kernel: ACPI: Reserving FACS table memory at [mem 0x7fbdd000-0x7fbdd03f] Jan 23 18:29:03.036955 kernel: ACPI: Reserving APIC table memory at [mem 0x7fb78000-0x7fb7807f] Jan 23 18:29:03.036966 kernel: ACPI: Reserving HPET table memory at [mem 0x7fb77000-0x7fb77037] Jan 23 18:29:03.036976 kernel: ACPI: Reserving MCFG table memory at [mem 0x7fb76000-0x7fb7603b] Jan 23 18:29:03.036991 kernel: ACPI: Reserving WAET table memory at [mem 0x7fb75000-0x7fb75027] Jan 23 18:29:03.037001 kernel: ACPI: Reserving BGRT table memory at [mem 0x7fb74000-0x7fb74037] Jan 23 18:29:03.037013 kernel: No NUMA configuration found Jan 23 18:29:03.037024 kernel: Faking a node at [mem 0x0000000000000000-0x0000000179ffffff] Jan 23 18:29:03.037035 kernel: NODE_DATA(0) allocated [mem 0x179ff6dc0-0x179ffdfff] Jan 23 18:29:03.037046 kernel: Zone ranges: Jan 23 18:29:03.037057 kernel: DMA [mem 0x0000000000001000-0x0000000000ffffff] Jan 23 18:29:03.037068 kernel: DMA32 [mem 0x0000000001000000-0x00000000ffffffff] Jan 23 18:29:03.037083 kernel: Normal [mem 0x0000000100000000-0x0000000179ffffff] Jan 23 18:29:03.037094 kernel: Device empty Jan 23 18:29:03.037104 kernel: Movable zone start for each node Jan 23 18:29:03.037115 kernel: Early memory node ranges Jan 23 18:29:03.037126 kernel: node 0: [mem 0x0000000000001000-0x000000000009ffff] Jan 23 18:29:03.037137 kernel: node 0: [mem 0x0000000000100000-0x000000007ed3efff] Jan 23 18:29:03.037148 kernel: node 0: [mem 0x000000007ee00000-0x000000007f8ecfff] Jan 23 18:29:03.037159 kernel: node 0: [mem 0x000000007fbff000-0x000000007ff7bfff] Jan 23 18:29:03.037173 kernel: node 0: [mem 0x0000000100000000-0x0000000179ffffff] Jan 23 18:29:03.037184 kernel: Initmem setup node 0 [mem 0x0000000000001000-0x0000000179ffffff] Jan 23 18:29:03.037195 kernel: On node 0, zone DMA: 1 pages in unavailable ranges Jan 23 18:29:03.037206 kernel: On node 0, zone DMA: 96 pages in unavailable ranges Jan 23 18:29:03.037217 kernel: On node 0, zone DMA32: 193 pages in unavailable ranges Jan 23 18:29:03.037228 kernel: On node 0, zone DMA32: 786 pages in unavailable ranges Jan 23 18:29:03.037239 kernel: On node 0, zone Normal: 132 pages in unavailable ranges Jan 23 18:29:03.037254 kernel: On node 0, zone Normal: 24576 pages in unavailable ranges Jan 23 18:29:03.037287 kernel: ACPI: PM-Timer IO Port: 0x608 Jan 23 18:29:03.037298 kernel: ACPI: LAPIC_NMI (acpi_id[0xff] dfl dfl lint[0x1]) Jan 23 18:29:03.037309 kernel: IOAPIC[0]: apic_id 0, version 17, address 0xfec00000, GSI 0-23 Jan 23 18:29:03.037320 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 0 global_irq 2 dfl dfl) Jan 23 18:29:03.037331 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 5 global_irq 5 high level) Jan 23 18:29:03.037342 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 high level) Jan 23 18:29:03.037357 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 10 global_irq 10 high level) Jan 23 18:29:03.037368 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 11 global_irq 11 high level) Jan 23 18:29:03.037379 kernel: ACPI: Using ACPI (MADT) for SMP configuration information Jan 23 18:29:03.037390 kernel: ACPI: HPET id: 0x8086a201 base: 0xfed00000 Jan 23 18:29:03.037401 kernel: CPU topo: Max. logical packages: 1 Jan 23 18:29:03.037413 kernel: CPU topo: Max. logical dies: 1 Jan 23 18:29:03.037438 kernel: CPU topo: Max. dies per package: 1 Jan 23 18:29:03.037449 kernel: CPU topo: Max. threads per core: 1 Jan 23 18:29:03.037461 kernel: CPU topo: Num. cores per package: 2 Jan 23 18:29:03.037472 kernel: CPU topo: Num. threads per package: 2 Jan 23 18:29:03.037486 kernel: CPU topo: Allowing 2 present CPUs plus 0 hotplug CPUs Jan 23 18:29:03.037498 kernel: kvm-guest: APIC: eoi() replaced with kvm_guest_apic_eoi_write() Jan 23 18:29:03.037509 kernel: [mem 0x80000000-0xdfffffff] available for PCI devices Jan 23 18:29:03.037520 kernel: Booting paravirtualized kernel on KVM Jan 23 18:29:03.037532 kernel: clocksource: refined-jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1910969940391419 ns Jan 23 18:29:03.037548 kernel: setup_percpu: NR_CPUS:512 nr_cpumask_bits:2 nr_cpu_ids:2 nr_node_ids:1 Jan 23 18:29:03.037559 kernel: percpu: Embedded 60 pages/cpu s207832 r8192 d29736 u1048576 Jan 23 18:29:03.037570 kernel: pcpu-alloc: s207832 r8192 d29736 u1048576 alloc=1*2097152 Jan 23 18:29:03.037583 kernel: pcpu-alloc: [0] 0 1 Jan 23 18:29:03.037600 kernel: kvm-guest: PV spinlocks disabled, no host support Jan 23 18:29:03.037620 kernel: Kernel command line: rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200n8 console=tty0 flatcar.first_boot=detected flatcar.oem.id=hetzner verity.usrhash=ee2a61adbfdca0d8850a6d1564f6a5daa8e67e4645be01ed76a79270fe7c1051 Jan 23 18:29:03.037643 kernel: Dentry cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) Jan 23 18:29:03.037661 kernel: Inode-cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Jan 23 18:29:03.037679 kernel: Fallback order for Node 0: 0 Jan 23 18:29:03.037694 kernel: Built 1 zonelists, mobility grouping on. Total pages: 1022792 Jan 23 18:29:03.037727 kernel: Policy zone: Normal Jan 23 18:29:03.037745 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Jan 23 18:29:03.037761 kernel: software IO TLB: area num 2. Jan 23 18:29:03.037783 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1 Jan 23 18:29:03.037795 kernel: ftrace: allocating 40097 entries in 157 pages Jan 23 18:29:03.037807 kernel: ftrace: allocated 157 pages with 5 groups Jan 23 18:29:03.037824 kernel: Dynamic Preempt: voluntary Jan 23 18:29:03.037841 kernel: rcu: Preemptible hierarchical RCU implementation. Jan 23 18:29:03.037860 kernel: rcu: RCU event tracing is enabled. Jan 23 18:29:03.037873 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=2. Jan 23 18:29:03.037888 kernel: Trampoline variant of Tasks RCU enabled. Jan 23 18:29:03.037900 kernel: Rude variant of Tasks RCU enabled. Jan 23 18:29:03.037913 kernel: Tracing variant of Tasks RCU enabled. Jan 23 18:29:03.037932 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Jan 23 18:29:03.037951 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=2 Jan 23 18:29:03.037968 kernel: RCU Tasks: Setting shift to 1 and lim to 1 rcu_task_cb_adjust=1 rcu_task_cpu_ids=2. Jan 23 18:29:03.037980 kernel: RCU Tasks Rude: Setting shift to 1 and lim to 1 rcu_task_cb_adjust=1 rcu_task_cpu_ids=2. Jan 23 18:29:03.037992 kernel: RCU Tasks Trace: Setting shift to 1 and lim to 1 rcu_task_cb_adjust=1 rcu_task_cpu_ids=2. Jan 23 18:29:03.038007 kernel: NR_IRQS: 33024, nr_irqs: 440, preallocated irqs: 16 Jan 23 18:29:03.038021 kernel: rcu: srcu_init: Setting srcu_struct sizes based on contention. Jan 23 18:29:03.038039 kernel: Console: colour dummy device 80x25 Jan 23 18:29:03.038056 kernel: printk: legacy console [tty0] enabled Jan 23 18:29:03.038073 kernel: printk: legacy console [ttyS0] enabled Jan 23 18:29:03.038084 kernel: ACPI: Core revision 20240827 Jan 23 18:29:03.038096 kernel: clocksource: hpet: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604467 ns Jan 23 18:29:03.038113 kernel: APIC: Switch to symmetric I/O mode setup Jan 23 18:29:03.038126 kernel: x2apic enabled Jan 23 18:29:03.038144 kernel: APIC: Switched APIC routing to: physical x2apic Jan 23 18:29:03.038162 kernel: ..TIMER: vector=0x30 apic1=0 pin1=2 apic2=-1 pin2=-1 Jan 23 18:29:03.038178 kernel: clocksource: tsc-early: mask: 0xffffffffffffffff max_cycles: 0x229835b7123, max_idle_ns: 440795242976 ns Jan 23 18:29:03.038189 kernel: Calibrating delay loop (skipped) preset value.. 4799.99 BogoMIPS (lpj=2399998) Jan 23 18:29:03.038201 kernel: x86/cpu: User Mode Instruction Prevention (UMIP) activated Jan 23 18:29:03.038216 kernel: Last level iTLB entries: 4KB 512, 2MB 255, 4MB 127 Jan 23 18:29:03.038229 kernel: Last level dTLB entries: 4KB 512, 2MB 255, 4MB 127, 1GB 0 Jan 23 18:29:03.038246 kernel: Spectre V1 : Mitigation: usercopy/swapgs barriers and __user pointer sanitization Jan 23 18:29:03.040754 kernel: Spectre V2 : Mitigation: Enhanced / Automatic IBRS Jan 23 18:29:03.040776 kernel: Spectre V2 : mitigation: Enabling conditional Indirect Branch Prediction Barrier Jan 23 18:29:03.040790 kernel: Speculative Store Bypass: Mitigation: Speculative Store Bypass disabled via prctl Jan 23 18:29:03.040802 kernel: active return thunk: srso_alias_return_thunk Jan 23 18:29:03.040822 kernel: Speculative Return Stack Overflow: Mitigation: Safe RET Jan 23 18:29:03.040833 kernel: Transient Scheduler Attacks: Forcing mitigation on in a VM Jan 23 18:29:03.040845 kernel: Transient Scheduler Attacks: Vulnerable: Clear CPU buffers attempted, no microcode Jan 23 18:29:03.040857 kernel: x86/fpu: Supporting XSAVE feature 0x001: 'x87 floating point registers' Jan 23 18:29:03.040869 kernel: x86/fpu: Supporting XSAVE feature 0x002: 'SSE registers' Jan 23 18:29:03.040881 kernel: x86/fpu: Supporting XSAVE feature 0x004: 'AVX registers' Jan 23 18:29:03.040892 kernel: x86/fpu: Supporting XSAVE feature 0x020: 'AVX-512 opmask' Jan 23 18:29:03.040907 kernel: x86/fpu: Supporting XSAVE feature 0x040: 'AVX-512 Hi256' Jan 23 18:29:03.040919 kernel: x86/fpu: Supporting XSAVE feature 0x080: 'AVX-512 ZMM_Hi256' Jan 23 18:29:03.040931 kernel: x86/fpu: Supporting XSAVE feature 0x200: 'Protection Keys User registers' Jan 23 18:29:03.040942 kernel: x86/fpu: xstate_offset[2]: 576, xstate_sizes[2]: 256 Jan 23 18:29:03.040954 kernel: x86/fpu: xstate_offset[5]: 832, xstate_sizes[5]: 64 Jan 23 18:29:03.040965 kernel: x86/fpu: xstate_offset[6]: 896, xstate_sizes[6]: 512 Jan 23 18:29:03.040976 kernel: x86/fpu: xstate_offset[7]: 1408, xstate_sizes[7]: 1024 Jan 23 18:29:03.040992 kernel: x86/fpu: xstate_offset[9]: 2432, xstate_sizes[9]: 8 Jan 23 18:29:03.041003 kernel: x86/fpu: Enabled xstate features 0x2e7, context size is 2440 bytes, using 'compacted' format. Jan 23 18:29:03.041015 kernel: Freeing SMP alternatives memory: 32K Jan 23 18:29:03.041027 kernel: pid_max: default: 32768 minimum: 301 Jan 23 18:29:03.041038 kernel: LSM: initializing lsm=lockdown,capability,landlock,selinux,ima Jan 23 18:29:03.041049 kernel: landlock: Up and running. Jan 23 18:29:03.041061 kernel: SELinux: Initializing. Jan 23 18:29:03.041076 kernel: Mount-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Jan 23 18:29:03.041088 kernel: Mountpoint-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Jan 23 18:29:03.041100 kernel: smpboot: CPU0: AMD EPYC-Genoa Processor (family: 0x19, model: 0x11, stepping: 0x0) Jan 23 18:29:03.041111 kernel: Performance Events: Fam17h+ core perfctr, AMD PMU driver. Jan 23 18:29:03.041123 kernel: ... version: 0 Jan 23 18:29:03.041135 kernel: ... bit width: 48 Jan 23 18:29:03.041147 kernel: ... generic registers: 6 Jan 23 18:29:03.041162 kernel: ... value mask: 0000ffffffffffff Jan 23 18:29:03.041173 kernel: ... max period: 00007fffffffffff Jan 23 18:29:03.041185 kernel: ... fixed-purpose events: 0 Jan 23 18:29:03.041196 kernel: ... event mask: 000000000000003f Jan 23 18:29:03.041208 kernel: signal: max sigframe size: 3376 Jan 23 18:29:03.041219 kernel: rcu: Hierarchical SRCU implementation. Jan 23 18:29:03.041231 kernel: rcu: Max phase no-delay instances is 400. Jan 23 18:29:03.041243 kernel: Timer migration: 1 hierarchy levels; 8 children per group; 1 crossnode level Jan 23 18:29:03.041258 kernel: smp: Bringing up secondary CPUs ... Jan 23 18:29:03.041313 kernel: smpboot: x86: Booting SMP configuration: Jan 23 18:29:03.041324 kernel: .... node #0, CPUs: #1 Jan 23 18:29:03.041336 kernel: smp: Brought up 1 node, 2 CPUs Jan 23 18:29:03.041347 kernel: smpboot: Total of 2 processors activated (9599.99 BogoMIPS) Jan 23 18:29:03.041360 kernel: Memory: 3873088K/4091168K available (14336K kernel code, 2445K rwdata, 31636K rodata, 15532K init, 2508K bss, 212448K reserved, 0K cma-reserved) Jan 23 18:29:03.041379 kernel: devtmpfs: initialized Jan 23 18:29:03.041402 kernel: x86/mm: Memory block size: 128MB Jan 23 18:29:03.041419 kernel: ACPI: PM: Registering ACPI NVS region [mem 0x7fb7f000-0x7fbfefff] (524288 bytes) Jan 23 18:29:03.041435 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Jan 23 18:29:03.041453 kernel: futex hash table entries: 512 (order: 3, 32768 bytes, linear) Jan 23 18:29:03.041471 kernel: pinctrl core: initialized pinctrl subsystem Jan 23 18:29:03.041488 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Jan 23 18:29:03.041503 kernel: audit: initializing netlink subsys (disabled) Jan 23 18:29:03.041525 kernel: audit: type=2000 audit(1769192938.423:1): state=initialized audit_enabled=0 res=1 Jan 23 18:29:03.041542 kernel: thermal_sys: Registered thermal governor 'step_wise' Jan 23 18:29:03.041559 kernel: thermal_sys: Registered thermal governor 'user_space' Jan 23 18:29:03.041574 kernel: cpuidle: using governor menu Jan 23 18:29:03.041591 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Jan 23 18:29:03.041608 kernel: dca service started, version 1.12.1 Jan 23 18:29:03.041625 kernel: PCI: ECAM [mem 0xe0000000-0xefffffff] (base 0xe0000000) for domain 0000 [bus 00-ff] Jan 23 18:29:03.041647 kernel: PCI: Using configuration type 1 for base access Jan 23 18:29:03.041664 kernel: kprobes: kprobe jump-optimization is enabled. All kprobes are optimized if possible. Jan 23 18:29:03.041681 kernel: HugeTLB: registered 1.00 GiB page size, pre-allocated 0 pages Jan 23 18:29:03.041718 kernel: HugeTLB: 16380 KiB vmemmap can be freed for a 1.00 GiB page Jan 23 18:29:03.041734 kernel: HugeTLB: registered 2.00 MiB page size, pre-allocated 0 pages Jan 23 18:29:03.041751 kernel: HugeTLB: 28 KiB vmemmap can be freed for a 2.00 MiB page Jan 23 18:29:03.041769 kernel: ACPI: Added _OSI(Module Device) Jan 23 18:29:03.041792 kernel: ACPI: Added _OSI(Processor Device) Jan 23 18:29:03.041811 kernel: ACPI: Added _OSI(Processor Aggregator Device) Jan 23 18:29:03.041828 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Jan 23 18:29:03.041845 kernel: ACPI: Interpreter enabled Jan 23 18:29:03.041863 kernel: ACPI: PM: (supports S0 S5) Jan 23 18:29:03.041880 kernel: ACPI: Using IOAPIC for interrupt routing Jan 23 18:29:03.041892 kernel: PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug Jan 23 18:29:03.041914 kernel: PCI: Using E820 reservations for host bridge windows Jan 23 18:29:03.041932 kernel: ACPI: Enabled 2 GPEs in block 00 to 3F Jan 23 18:29:03.041949 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff]) Jan 23 18:29:03.042427 kernel: acpi PNP0A08:00: _OSC: OS supports [ExtendedConfig ASPM ClockPM Segments MSI HPX-Type3] Jan 23 18:29:03.042787 kernel: acpi PNP0A08:00: _OSC: platform does not support [PCIeHotplug LTR] Jan 23 18:29:03.043110 kernel: acpi PNP0A08:00: _OSC: OS now controls [PME AER PCIeCapability] Jan 23 18:29:03.043135 kernel: PCI host bridge to bus 0000:00 Jan 23 18:29:03.043462 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0x0cf7 window] Jan 23 18:29:03.043737 kernel: pci_bus 0000:00: root bus resource [io 0x0d00-0xffff window] Jan 23 18:29:03.043993 kernel: pci_bus 0000:00: root bus resource [mem 0x000a0000-0x000bffff window] Jan 23 18:29:03.044246 kernel: pci_bus 0000:00: root bus resource [mem 0x80000000-0xdfffffff window] Jan 23 18:29:03.044535 kernel: pci_bus 0000:00: root bus resource [mem 0xf0000000-0xfebfffff window] Jan 23 18:29:03.044822 kernel: pci_bus 0000:00: root bus resource [mem 0xc000000000-0xc7ffffffff window] Jan 23 18:29:03.045076 kernel: pci_bus 0000:00: root bus resource [bus 00-ff] Jan 23 18:29:03.050113 kernel: pci 0000:00:00.0: [8086:29c0] type 00 class 0x060000 conventional PCI endpoint Jan 23 18:29:03.050472 kernel: pci 0000:00:01.0: [1af4:1050] type 00 class 0x030000 conventional PCI endpoint Jan 23 18:29:03.050772 kernel: pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x807fffff pref] Jan 23 18:29:03.051100 kernel: pci 0000:00:01.0: BAR 2 [mem 0xc060500000-0xc060503fff 64bit pref] Jan 23 18:29:03.051442 kernel: pci 0000:00:01.0: BAR 4 [mem 0x8138a000-0x8138afff] Jan 23 18:29:03.051787 kernel: pci 0000:00:01.0: ROM [mem 0xffff0000-0xffffffff pref] Jan 23 18:29:03.052102 kernel: pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] Jan 23 18:29:03.052433 kernel: pci 0000:00:02.0: [1b36:000c] type 01 class 0x060400 PCIe Root Port Jan 23 18:29:03.052832 kernel: pci 0000:00:02.0: BAR 0 [mem 0x81389000-0x81389fff] Jan 23 18:29:03.053115 kernel: pci 0000:00:02.0: PCI bridge to [bus 01] Jan 23 18:29:03.053508 kernel: pci 0000:00:02.0: bridge window [mem 0x81200000-0x812fffff] Jan 23 18:29:03.053807 kernel: pci 0000:00:02.0: bridge window [mem 0xc060000000-0xc0600fffff 64bit pref] Jan 23 18:29:03.054094 kernel: pci 0000:00:02.1: [1b36:000c] type 01 class 0x060400 PCIe Root Port Jan 23 18:29:03.054429 kernel: pci 0000:00:02.1: BAR 0 [mem 0x81388000-0x81388fff] Jan 23 18:29:03.054736 kernel: pci 0000:00:02.1: PCI bridge to [bus 02] Jan 23 18:29:03.055235 kernel: pci 0000:00:02.1: bridge window [mem 0x81100000-0x811fffff] Jan 23 18:29:03.066421 kernel: pci 0000:00:02.2: [1b36:000c] type 01 class 0x060400 PCIe Root Port Jan 23 18:29:03.066940 kernel: pci 0000:00:02.2: BAR 0 [mem 0x81387000-0x81387fff] Jan 23 18:29:03.067092 kernel: pci 0000:00:02.2: PCI bridge to [bus 03] Jan 23 18:29:03.067236 kernel: pci 0000:00:02.2: bridge window [mem 0x81000000-0x810fffff] Jan 23 18:29:03.067407 kernel: pci 0000:00:02.2: bridge window [mem 0xc060100000-0xc0601fffff 64bit pref] Jan 23 18:29:03.067557 kernel: pci 0000:00:02.3: [1b36:000c] type 01 class 0x060400 PCIe Root Port Jan 23 18:29:03.067734 kernel: pci 0000:00:02.3: BAR 0 [mem 0x81386000-0x81386fff] Jan 23 18:29:03.067897 kernel: pci 0000:00:02.3: PCI bridge to [bus 04] Jan 23 18:29:03.068056 kernel: pci 0000:00:02.3: bridge window [mem 0xc060200000-0xc0602fffff 64bit pref] Jan 23 18:29:03.068220 kernel: pci 0000:00:02.4: [1b36:000c] type 01 class 0x060400 PCIe Root Port Jan 23 18:29:03.068419 kernel: pci 0000:00:02.4: BAR 0 [mem 0x81385000-0x81385fff] Jan 23 18:29:03.068582 kernel: pci 0000:00:02.4: PCI bridge to [bus 05] Jan 23 18:29:03.068743 kernel: pci 0000:00:02.4: bridge window [mem 0x80f00000-0x80ffffff] Jan 23 18:29:03.068907 kernel: pci 0000:00:02.4: bridge window [mem 0xc060300000-0xc0603fffff 64bit pref] Jan 23 18:29:03.069086 kernel: pci 0000:00:02.5: [1b36:000c] type 01 class 0x060400 PCIe Root Port Jan 23 18:29:03.069244 kernel: pci 0000:00:02.5: BAR 0 [mem 0x81384000-0x81384fff] Jan 23 18:29:03.073148 kernel: pci 0000:00:02.5: PCI bridge to [bus 06] Jan 23 18:29:03.073312 kernel: pci 0000:00:02.5: bridge window [mem 0x80e00000-0x80efffff] Jan 23 18:29:03.073473 kernel: pci 0000:00:02.5: bridge window [mem 0xc060400000-0xc0604fffff 64bit pref] Jan 23 18:29:03.073654 kernel: pci 0000:00:02.6: [1b36:000c] type 01 class 0x060400 PCIe Root Port Jan 23 18:29:03.073811 kernel: pci 0000:00:02.6: BAR 0 [mem 0x81383000-0x81383fff] Jan 23 18:29:03.073952 kernel: pci 0000:00:02.6: PCI bridge to [bus 07] Jan 23 18:29:03.074098 kernel: pci 0000:00:02.6: bridge window [mem 0x80c00000-0x80dfffff] Jan 23 18:29:03.074237 kernel: pci 0000:00:02.6: bridge window [mem 0xc000000000-0xc01fffffff 64bit pref] Jan 23 18:29:03.074413 kernel: pci 0000:00:02.7: [1b36:000c] type 01 class 0x060400 PCIe Root Port Jan 23 18:29:03.074555 kernel: pci 0000:00:02.7: BAR 0 [mem 0x81382000-0x81382fff] Jan 23 18:29:03.074698 kernel: pci 0000:00:02.7: PCI bridge to [bus 08] Jan 23 18:29:03.074884 kernel: pci 0000:00:02.7: bridge window [mem 0x80a00000-0x80bfffff] Jan 23 18:29:03.075029 kernel: pci 0000:00:02.7: bridge window [mem 0xc020000000-0xc03fffffff 64bit pref] Jan 23 18:29:03.075179 kernel: pci 0000:00:03.0: [1b36:000c] type 01 class 0x060400 PCIe Root Port Jan 23 18:29:03.076378 kernel: pci 0000:00:03.0: BAR 0 [mem 0x81381000-0x81381fff] Jan 23 18:29:03.076534 kernel: pci 0000:00:03.0: PCI bridge to [bus 09] Jan 23 18:29:03.076677 kernel: pci 0000:00:03.0: bridge window [mem 0x80800000-0x809fffff] Jan 23 18:29:03.076831 kernel: pci 0000:00:03.0: bridge window [mem 0xc040000000-0xc05fffffff 64bit pref] Jan 23 18:29:03.076983 kernel: pci 0000:00:1f.0: [8086:2918] type 00 class 0x060100 conventional PCI endpoint Jan 23 18:29:03.077123 kernel: pci 0000:00:1f.0: quirk: [io 0x0600-0x067f] claimed by ICH6 ACPI/GPIO/TCO Jan 23 18:29:03.077280 kernel: pci 0000:00:1f.2: [8086:2922] type 00 class 0x010601 conventional PCI endpoint Jan 23 18:29:03.077421 kernel: pci 0000:00:1f.2: BAR 4 [io 0x6040-0x605f] Jan 23 18:29:03.077563 kernel: pci 0000:00:1f.2: BAR 5 [mem 0x81380000-0x81380fff] Jan 23 18:29:03.077717 kernel: pci 0000:00:1f.3: [8086:2930] type 00 class 0x0c0500 conventional PCI endpoint Jan 23 18:29:03.077857 kernel: pci 0000:00:1f.3: BAR 4 [io 0x6000-0x603f] Jan 23 18:29:03.078009 kernel: pci 0000:01:00.0: [1af4:1041] type 00 class 0x020000 PCIe Endpoint Jan 23 18:29:03.078166 kernel: pci 0000:01:00.0: BAR 1 [mem 0x81200000-0x81200fff] Jan 23 18:29:03.079353 kernel: pci 0000:01:00.0: BAR 4 [mem 0xc060000000-0xc060003fff 64bit pref] Jan 23 18:29:03.079542 kernel: pci 0000:01:00.0: ROM [mem 0xfff80000-0xffffffff pref] Jan 23 18:29:03.079716 kernel: pci 0000:00:02.0: PCI bridge to [bus 01] Jan 23 18:29:03.079888 kernel: pci 0000:02:00.0: [1b36:000d] type 00 class 0x0c0330 PCIe Endpoint Jan 23 18:29:03.080035 kernel: pci 0000:02:00.0: BAR 0 [mem 0x81100000-0x81103fff 64bit] Jan 23 18:29:03.080175 kernel: pci 0000:00:02.1: PCI bridge to [bus 02] Jan 23 18:29:03.081001 kernel: pci 0000:03:00.0: [1af4:1043] type 00 class 0x078000 PCIe Endpoint Jan 23 18:29:03.081162 kernel: pci 0000:03:00.0: BAR 1 [mem 0x81000000-0x81000fff] Jan 23 18:29:03.081325 kernel: pci 0000:03:00.0: BAR 4 [mem 0xc060100000-0xc060103fff 64bit pref] Jan 23 18:29:03.081468 kernel: pci 0000:00:02.2: PCI bridge to [bus 03] Jan 23 18:29:03.081621 kernel: pci 0000:04:00.0: [1af4:1045] type 00 class 0x00ff00 PCIe Endpoint Jan 23 18:29:03.081776 kernel: pci 0000:04:00.0: BAR 4 [mem 0xc060200000-0xc060203fff 64bit pref] Jan 23 18:29:03.081923 kernel: pci 0000:00:02.3: PCI bridge to [bus 04] Jan 23 18:29:03.082080 kernel: pci 0000:05:00.0: [1af4:1044] type 00 class 0x00ff00 PCIe Endpoint Jan 23 18:29:03.082224 kernel: pci 0000:05:00.0: BAR 1 [mem 0x80f00000-0x80f00fff] Jan 23 18:29:03.082383 kernel: pci 0000:05:00.0: BAR 4 [mem 0xc060300000-0xc060303fff 64bit pref] Jan 23 18:29:03.082524 kernel: pci 0000:00:02.4: PCI bridge to [bus 05] Jan 23 18:29:03.082674 kernel: pci 0000:06:00.0: [1af4:1048] type 00 class 0x010000 PCIe Endpoint Jan 23 18:29:03.082830 kernel: pci 0000:06:00.0: BAR 1 [mem 0x80e00000-0x80e00fff] Jan 23 18:29:03.082974 kernel: pci 0000:06:00.0: BAR 4 [mem 0xc060400000-0xc060403fff 64bit pref] Jan 23 18:29:03.083114 kernel: pci 0000:00:02.5: PCI bridge to [bus 06] Jan 23 18:29:03.083121 kernel: acpiphp: Slot [0] registered Jan 23 18:29:03.083282 kernel: pci 0000:07:00.0: [1af4:1041] type 00 class 0x020000 PCIe Endpoint Jan 23 18:29:03.083441 kernel: pci 0000:07:00.0: BAR 1 [mem 0x80c00000-0x80c00fff] Jan 23 18:29:03.083607 kernel: pci 0000:07:00.0: BAR 4 [mem 0xc000000000-0xc000003fff 64bit pref] Jan 23 18:29:03.083852 kernel: pci 0000:07:00.0: ROM [mem 0xfff80000-0xffffffff pref] Jan 23 18:29:03.084002 kernel: pci 0000:00:02.6: PCI bridge to [bus 07] Jan 23 18:29:03.084011 kernel: acpiphp: Slot [0-2] registered Jan 23 18:29:03.084154 kernel: pci 0000:00:02.7: PCI bridge to [bus 08] Jan 23 18:29:03.084161 kernel: acpiphp: Slot [0-3] registered Jan 23 18:29:03.084323 kernel: pci 0000:00:03.0: PCI bridge to [bus 09] Jan 23 18:29:03.084334 kernel: ACPI: PCI: Interrupt link LNKA configured for IRQ 10 Jan 23 18:29:03.084351 kernel: ACPI: PCI: Interrupt link LNKB configured for IRQ 10 Jan 23 18:29:03.084359 kernel: ACPI: PCI: Interrupt link LNKC configured for IRQ 11 Jan 23 18:29:03.084366 kernel: ACPI: PCI: Interrupt link LNKD configured for IRQ 11 Jan 23 18:29:03.084372 kernel: ACPI: PCI: Interrupt link LNKE configured for IRQ 10 Jan 23 18:29:03.084380 kernel: ACPI: PCI: Interrupt link LNKF configured for IRQ 10 Jan 23 18:29:03.084386 kernel: ACPI: PCI: Interrupt link LNKG configured for IRQ 11 Jan 23 18:29:03.084393 kernel: ACPI: PCI: Interrupt link LNKH configured for IRQ 11 Jan 23 18:29:03.084399 kernel: ACPI: PCI: Interrupt link GSIA configured for IRQ 16 Jan 23 18:29:03.084405 kernel: ACPI: PCI: Interrupt link GSIB configured for IRQ 17 Jan 23 18:29:03.084411 kernel: ACPI: PCI: Interrupt link GSIC configured for IRQ 18 Jan 23 18:29:03.084417 kernel: ACPI: PCI: Interrupt link GSID configured for IRQ 19 Jan 23 18:29:03.084423 kernel: ACPI: PCI: Interrupt link GSIE configured for IRQ 20 Jan 23 18:29:03.084432 kernel: ACPI: PCI: Interrupt link GSIF configured for IRQ 21 Jan 23 18:29:03.084438 kernel: ACPI: PCI: Interrupt link GSIG configured for IRQ 22 Jan 23 18:29:03.084446 kernel: ACPI: PCI: Interrupt link GSIH configured for IRQ 23 Jan 23 18:29:03.084452 kernel: iommu: Default domain type: Translated Jan 23 18:29:03.084461 kernel: iommu: DMA domain TLB invalidation policy: lazy mode Jan 23 18:29:03.084467 kernel: efivars: Registered efivars operations Jan 23 18:29:03.084473 kernel: PCI: Using ACPI for IRQ routing Jan 23 18:29:03.084479 kernel: PCI: pci_cache_line_size set to 64 bytes Jan 23 18:29:03.084486 kernel: e820: reserve RAM buffer [mem 0x7dc01018-0x7fffffff] Jan 23 18:29:03.084492 kernel: e820: reserve RAM buffer [mem 0x7df6f018-0x7fffffff] Jan 23 18:29:03.084498 kernel: e820: reserve RAM buffer [mem 0x7dfab018-0x7fffffff] Jan 23 18:29:03.084506 kernel: e820: reserve RAM buffer [mem 0x7ed3f000-0x7fffffff] Jan 23 18:29:03.084512 kernel: e820: reserve RAM buffer [mem 0x7f8ed000-0x7fffffff] Jan 23 18:29:03.084518 kernel: e820: reserve RAM buffer [mem 0x7ff7c000-0x7fffffff] Jan 23 18:29:03.084524 kernel: e820: reserve RAM buffer [mem 0x17a000000-0x17bffffff] Jan 23 18:29:03.084674 kernel: pci 0000:00:01.0: vgaarb: setting as boot VGA device Jan 23 18:29:03.084848 kernel: pci 0000:00:01.0: vgaarb: bridge control possible Jan 23 18:29:03.084989 kernel: pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none Jan 23 18:29:03.085002 kernel: vgaarb: loaded Jan 23 18:29:03.085008 kernel: hpet0: at MMIO 0xfed00000, IRQs 2, 8, 0 Jan 23 18:29:03.085014 kernel: hpet0: 3 comparators, 64-bit 100.000000 MHz counter Jan 23 18:29:03.085020 kernel: clocksource: Switched to clocksource kvm-clock Jan 23 18:29:03.085027 kernel: VFS: Disk quotas dquot_6.6.0 Jan 23 18:29:03.085034 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Jan 23 18:29:03.085040 kernel: pnp: PnP ACPI init Jan 23 18:29:03.085194 kernel: system 00:04: [mem 0xe0000000-0xefffffff window] has been reserved Jan 23 18:29:03.085202 kernel: pnp: PnP ACPI: found 5 devices Jan 23 18:29:03.085209 kernel: clocksource: acpi_pm: mask: 0xffffff max_cycles: 0xffffff, max_idle_ns: 2085701024 ns Jan 23 18:29:03.085215 kernel: NET: Registered PF_INET protocol family Jan 23 18:29:03.085221 kernel: IP idents hash table entries: 65536 (order: 7, 524288 bytes, linear) Jan 23 18:29:03.085228 kernel: tcp_listen_portaddr_hash hash table entries: 2048 (order: 3, 32768 bytes, linear) Jan 23 18:29:03.085237 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Jan 23 18:29:03.085244 kernel: TCP established hash table entries: 32768 (order: 6, 262144 bytes, linear) Jan 23 18:29:03.085250 kernel: TCP bind hash table entries: 32768 (order: 8, 1048576 bytes, linear) Jan 23 18:29:03.085256 kernel: TCP: Hash tables configured (established 32768 bind 32768) Jan 23 18:29:03.085659 kernel: UDP hash table entries: 2048 (order: 4, 65536 bytes, linear) Jan 23 18:29:03.085672 kernel: UDP-Lite hash table entries: 2048 (order: 4, 65536 bytes, linear) Jan 23 18:29:03.085681 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Jan 23 18:29:03.085690 kernel: NET: Registered PF_XDP protocol family Jan 23 18:29:03.085874 kernel: pci 0000:01:00.0: ROM [mem 0xfff80000-0xffffffff pref]: can't claim; no compatible bridge window Jan 23 18:29:03.086031 kernel: pci 0000:07:00.0: ROM [mem 0xfff80000-0xffffffff pref]: can't claim; no compatible bridge window Jan 23 18:29:03.086193 kernel: pci 0000:00:02.6: bridge window [io 0x1000-0x0fff] to [bus 07] add_size 1000 Jan 23 18:29:03.086350 kernel: pci 0000:00:02.7: bridge window [io 0x1000-0x0fff] to [bus 08] add_size 1000 Jan 23 18:29:03.086490 kernel: pci 0000:00:03.0: bridge window [io 0x1000-0x0fff] to [bus 09] add_size 1000 Jan 23 18:29:03.086841 kernel: pci 0000:00:02.6: bridge window [io 0x1000-0x1fff]: assigned Jan 23 18:29:03.087011 kernel: pci 0000:00:02.7: bridge window [io 0x2000-0x2fff]: assigned Jan 23 18:29:03.087155 kernel: pci 0000:00:03.0: bridge window [io 0x3000-0x3fff]: assigned Jan 23 18:29:03.087348 kernel: pci 0000:01:00.0: ROM [mem 0x81280000-0x812fffff pref]: assigned Jan 23 18:29:03.087502 kernel: pci 0000:00:02.0: PCI bridge to [bus 01] Jan 23 18:29:03.087645 kernel: pci 0000:00:02.0: bridge window [mem 0x81200000-0x812fffff] Jan 23 18:29:03.087821 kernel: pci 0000:00:02.0: bridge window [mem 0xc060000000-0xc0600fffff 64bit pref] Jan 23 18:29:03.087980 kernel: pci 0000:00:02.1: PCI bridge to [bus 02] Jan 23 18:29:03.088144 kernel: pci 0000:00:02.1: bridge window [mem 0x81100000-0x811fffff] Jan 23 18:29:03.088323 kernel: pci 0000:00:02.2: PCI bridge to [bus 03] Jan 23 18:29:03.088466 kernel: pci 0000:00:02.2: bridge window [mem 0x81000000-0x810fffff] Jan 23 18:29:03.088615 kernel: pci 0000:00:02.2: bridge window [mem 0xc060100000-0xc0601fffff 64bit pref] Jan 23 18:29:03.088766 kernel: pci 0000:00:02.3: PCI bridge to [bus 04] Jan 23 18:29:03.088907 kernel: pci 0000:00:02.3: bridge window [mem 0xc060200000-0xc0602fffff 64bit pref] Jan 23 18:29:03.089045 kernel: pci 0000:00:02.4: PCI bridge to [bus 05] Jan 23 18:29:03.089224 kernel: pci 0000:00:02.4: bridge window [mem 0x80f00000-0x80ffffff] Jan 23 18:29:03.089420 kernel: pci 0000:00:02.4: bridge window [mem 0xc060300000-0xc0603fffff 64bit pref] Jan 23 18:29:03.089562 kernel: pci 0000:00:02.5: PCI bridge to [bus 06] Jan 23 18:29:03.089713 kernel: pci 0000:00:02.5: bridge window [mem 0x80e00000-0x80efffff] Jan 23 18:29:03.089853 kernel: pci 0000:00:02.5: bridge window [mem 0xc060400000-0xc0604fffff 64bit pref] Jan 23 18:29:03.089997 kernel: pci 0000:07:00.0: ROM [mem 0x80c80000-0x80cfffff pref]: assigned Jan 23 18:29:03.090137 kernel: pci 0000:00:02.6: PCI bridge to [bus 07] Jan 23 18:29:03.090293 kernel: pci 0000:00:02.6: bridge window [io 0x1000-0x1fff] Jan 23 18:29:03.090435 kernel: pci 0000:00:02.6: bridge window [mem 0x80c00000-0x80dfffff] Jan 23 18:29:03.090575 kernel: pci 0000:00:02.6: bridge window [mem 0xc000000000-0xc01fffffff 64bit pref] Jan 23 18:29:03.090724 kernel: pci 0000:00:02.7: PCI bridge to [bus 08] Jan 23 18:29:03.090866 kernel: pci 0000:00:02.7: bridge window [io 0x2000-0x2fff] Jan 23 18:29:03.091010 kernel: pci 0000:00:02.7: bridge window [mem 0x80a00000-0x80bfffff] Jan 23 18:29:03.091166 kernel: pci 0000:00:02.7: bridge window [mem 0xc020000000-0xc03fffffff 64bit pref] Jan 23 18:29:03.091320 kernel: pci 0000:00:03.0: PCI bridge to [bus 09] Jan 23 18:29:03.091459 kernel: pci 0000:00:03.0: bridge window [io 0x3000-0x3fff] Jan 23 18:29:03.091598 kernel: pci 0000:00:03.0: bridge window [mem 0x80800000-0x809fffff] Jan 23 18:29:03.091746 kernel: pci 0000:00:03.0: bridge window [mem 0xc040000000-0xc05fffffff 64bit pref] Jan 23 18:29:03.091883 kernel: pci_bus 0000:00: resource 4 [io 0x0000-0x0cf7 window] Jan 23 18:29:03.092016 kernel: pci_bus 0000:00: resource 5 [io 0x0d00-0xffff window] Jan 23 18:29:03.092163 kernel: pci_bus 0000:00: resource 6 [mem 0x000a0000-0x000bffff window] Jan 23 18:29:03.092331 kernel: pci_bus 0000:00: resource 7 [mem 0x80000000-0xdfffffff window] Jan 23 18:29:03.092472 kernel: pci_bus 0000:00: resource 8 [mem 0xf0000000-0xfebfffff window] Jan 23 18:29:03.092604 kernel: pci_bus 0000:00: resource 9 [mem 0xc000000000-0xc7ffffffff window] Jan 23 18:29:03.092756 kernel: pci_bus 0000:01: resource 1 [mem 0x81200000-0x812fffff] Jan 23 18:29:03.092974 kernel: pci_bus 0000:01: resource 2 [mem 0xc060000000-0xc0600fffff 64bit pref] Jan 23 18:29:03.093125 kernel: pci_bus 0000:02: resource 1 [mem 0x81100000-0x811fffff] Jan 23 18:29:03.093290 kernel: pci_bus 0000:03: resource 1 [mem 0x81000000-0x810fffff] Jan 23 18:29:03.093432 kernel: pci_bus 0000:03: resource 2 [mem 0xc060100000-0xc0601fffff 64bit pref] Jan 23 18:29:03.093671 kernel: pci_bus 0000:04: resource 2 [mem 0xc060200000-0xc0602fffff 64bit pref] Jan 23 18:29:03.093837 kernel: pci_bus 0000:05: resource 1 [mem 0x80f00000-0x80ffffff] Jan 23 18:29:03.093976 kernel: pci_bus 0000:05: resource 2 [mem 0xc060300000-0xc0603fffff 64bit pref] Jan 23 18:29:03.094120 kernel: pci_bus 0000:06: resource 1 [mem 0x80e00000-0x80efffff] Jan 23 18:29:03.094256 kernel: pci_bus 0000:06: resource 2 [mem 0xc060400000-0xc0604fffff 64bit pref] Jan 23 18:29:03.094418 kernel: pci_bus 0000:07: resource 0 [io 0x1000-0x1fff] Jan 23 18:29:03.094558 kernel: pci_bus 0000:07: resource 1 [mem 0x80c00000-0x80dfffff] Jan 23 18:29:03.094693 kernel: pci_bus 0000:07: resource 2 [mem 0xc000000000-0xc01fffffff 64bit pref] Jan 23 18:29:03.094843 kernel: pci_bus 0000:08: resource 0 [io 0x2000-0x2fff] Jan 23 18:29:03.095005 kernel: pci_bus 0000:08: resource 1 [mem 0x80a00000-0x80bfffff] Jan 23 18:29:03.095143 kernel: pci_bus 0000:08: resource 2 [mem 0xc020000000-0xc03fffffff 64bit pref] Jan 23 18:29:03.095322 kernel: pci_bus 0000:09: resource 0 [io 0x3000-0x3fff] Jan 23 18:29:03.095468 kernel: pci_bus 0000:09: resource 1 [mem 0x80800000-0x809fffff] Jan 23 18:29:03.095608 kernel: pci_bus 0000:09: resource 2 [mem 0xc040000000-0xc05fffffff 64bit pref] Jan 23 18:29:03.095617 kernel: ACPI: \_SB_.GSIG: Enabled at IRQ 22 Jan 23 18:29:03.095623 kernel: PCI: CLS 0 bytes, default 64 Jan 23 18:29:03.095630 kernel: PCI-DMA: Using software bounce buffering for IO (SWIOTLB) Jan 23 18:29:03.095636 kernel: software IO TLB: mapped [mem 0x0000000077ffd000-0x000000007bffd000] (64MB) Jan 23 18:29:03.095646 kernel: clocksource: tsc: mask: 0xffffffffffffffff max_cycles: 0x229835b7123, max_idle_ns: 440795242976 ns Jan 23 18:29:03.095652 kernel: Initialise system trusted keyrings Jan 23 18:29:03.095658 kernel: workingset: timestamp_bits=39 max_order=20 bucket_order=0 Jan 23 18:29:03.095665 kernel: Key type asymmetric registered Jan 23 18:29:03.095671 kernel: Asymmetric key parser 'x509' registered Jan 23 18:29:03.095677 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 250) Jan 23 18:29:03.095683 kernel: io scheduler mq-deadline registered Jan 23 18:29:03.095692 kernel: io scheduler kyber registered Jan 23 18:29:03.095698 kernel: io scheduler bfq registered Jan 23 18:29:03.095852 kernel: pcieport 0000:00:02.0: PME: Signaling with IRQ 24 Jan 23 18:29:03.095993 kernel: pcieport 0000:00:02.0: AER: enabled with IRQ 24 Jan 23 18:29:03.096134 kernel: pcieport 0000:00:02.1: PME: Signaling with IRQ 25 Jan 23 18:29:03.096287 kernel: pcieport 0000:00:02.1: AER: enabled with IRQ 25 Jan 23 18:29:03.096429 kernel: pcieport 0000:00:02.2: PME: Signaling with IRQ 26 Jan 23 18:29:03.096572 kernel: pcieport 0000:00:02.2: AER: enabled with IRQ 26 Jan 23 18:29:03.096721 kernel: pcieport 0000:00:02.3: PME: Signaling with IRQ 27 Jan 23 18:29:03.096864 kernel: pcieport 0000:00:02.3: AER: enabled with IRQ 27 Jan 23 18:29:03.097006 kernel: pcieport 0000:00:02.4: PME: Signaling with IRQ 28 Jan 23 18:29:03.097145 kernel: pcieport 0000:00:02.4: AER: enabled with IRQ 28 Jan 23 18:29:03.097298 kernel: pcieport 0000:00:02.5: PME: Signaling with IRQ 29 Jan 23 18:29:03.097450 kernel: pcieport 0000:00:02.5: AER: enabled with IRQ 29 Jan 23 18:29:03.097945 kernel: pcieport 0000:00:02.6: PME: Signaling with IRQ 30 Jan 23 18:29:03.098130 kernel: pcieport 0000:00:02.6: AER: enabled with IRQ 30 Jan 23 18:29:03.099374 kernel: pcieport 0000:00:02.7: PME: Signaling with IRQ 31 Jan 23 18:29:03.099578 kernel: pcieport 0000:00:02.7: AER: enabled with IRQ 31 Jan 23 18:29:03.099593 kernel: ACPI: \_SB_.GSIH: Enabled at IRQ 23 Jan 23 18:29:03.099836 kernel: pcieport 0000:00:03.0: PME: Signaling with IRQ 32 Jan 23 18:29:03.100022 kernel: pcieport 0000:00:03.0: AER: enabled with IRQ 32 Jan 23 18:29:03.100036 kernel: ioatdma: Intel(R) QuickData Technology Driver 5.00 Jan 23 18:29:03.100046 kernel: ACPI: \_SB_.GSIF: Enabled at IRQ 21 Jan 23 18:29:03.100054 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Jan 23 18:29:03.100063 kernel: 00:00: ttyS0 at I/O 0x3f8 (irq = 4, base_baud = 115200) is a 16550A Jan 23 18:29:03.100078 kernel: i8042: PNP: PS/2 Controller [PNP0303:KBD,PNP0f13:MOU] at 0x60,0x64 irq 1,12 Jan 23 18:29:03.100088 kernel: serio: i8042 KBD port at 0x60,0x64 irq 1 Jan 23 18:29:03.100098 kernel: serio: i8042 AUX port at 0x60,0x64 irq 12 Jan 23 18:29:03.100108 kernel: input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input0 Jan 23 18:29:03.101454 kernel: rtc_cmos 00:03: RTC can wake from S4 Jan 23 18:29:03.101626 kernel: rtc_cmos 00:03: registered as rtc0 Jan 23 18:29:03.101785 kernel: rtc_cmos 00:03: setting system clock to 2026-01-23T18:29:00 UTC (1769192940) Jan 23 18:29:03.101923 kernel: rtc_cmos 00:03: alarms up to one day, y3k, 242 bytes nvram, hpet irqs Jan 23 18:29:03.101933 kernel: amd_pstate: The CPPC feature is supported but currently disabled by the BIOS. Please enable it if your BIOS has the CPPC option. Jan 23 18:29:03.101942 kernel: amd_pstate: the _CPC object is not present in SBIOS or ACPI disabled Jan 23 18:29:03.101948 kernel: efifb: probing for efifb Jan 23 18:29:03.101956 kernel: efifb: framebuffer at 0x80000000, using 4000k, total 4000k Jan 23 18:29:03.101965 kernel: efifb: mode is 1280x800x32, linelength=5120, pages=1 Jan 23 18:29:03.101972 kernel: efifb: scrolling: redraw Jan 23 18:29:03.101979 kernel: efifb: Truecolor: size=8:8:8:8, shift=24:16:8:0 Jan 23 18:29:03.101985 kernel: Console: switching to colour frame buffer device 160x50 Jan 23 18:29:03.101992 kernel: fb0: EFI VGA frame buffer device Jan 23 18:29:03.101998 kernel: pstore: Using crash dump compression: deflate Jan 23 18:29:03.102005 kernel: pstore: Registered efi_pstore as persistent store backend Jan 23 18:29:03.102012 kernel: NET: Registered PF_INET6 protocol family Jan 23 18:29:03.102021 kernel: Segment Routing with IPv6 Jan 23 18:29:03.102027 kernel: In-situ OAM (IOAM) with IPv6 Jan 23 18:29:03.102034 kernel: NET: Registered PF_PACKET protocol family Jan 23 18:29:03.102040 kernel: Key type dns_resolver registered Jan 23 18:29:03.102047 kernel: IPI shorthand broadcast: enabled Jan 23 18:29:03.102054 kernel: sched_clock: Marking stable (2036012125, 236436991)->(2298056967, -25607851) Jan 23 18:29:03.102061 kernel: registered taskstats version 1 Jan 23 18:29:03.102070 kernel: Loading compiled-in X.509 certificates Jan 23 18:29:03.102077 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 6.12.66-flatcar: ed4528912f8413ae803010e63385bcf7ed197cf1' Jan 23 18:29:03.102083 kernel: Demotion targets for Node 0: null Jan 23 18:29:03.102090 kernel: Key type .fscrypt registered Jan 23 18:29:03.102097 kernel: Key type fscrypt-provisioning registered Jan 23 18:29:03.102103 kernel: ima: No TPM chip found, activating TPM-bypass! Jan 23 18:29:03.102110 kernel: ima: Allocated hash algorithm: sha1 Jan 23 18:29:03.102119 kernel: ima: No architecture policies found Jan 23 18:29:03.102126 kernel: clk: Disabling unused clocks Jan 23 18:29:03.102132 kernel: Freeing unused kernel image (initmem) memory: 15532K Jan 23 18:29:03.102139 kernel: Write protecting the kernel read-only data: 47104k Jan 23 18:29:03.102146 kernel: Freeing unused kernel image (rodata/data gap) memory: 1132K Jan 23 18:29:03.102152 kernel: Run /init as init process Jan 23 18:29:03.102160 kernel: with arguments: Jan 23 18:29:03.102169 kernel: /init Jan 23 18:29:03.102176 kernel: with environment: Jan 23 18:29:03.102182 kernel: HOME=/ Jan 23 18:29:03.102189 kernel: TERM=linux Jan 23 18:29:03.102195 kernel: ACPI: bus type USB registered Jan 23 18:29:03.102202 kernel: usbcore: registered new interface driver usbfs Jan 23 18:29:03.102209 kernel: usbcore: registered new interface driver hub Jan 23 18:29:03.102218 kernel: usbcore: registered new device driver usb Jan 23 18:29:03.102395 kernel: xhci_hcd 0000:02:00.0: xHCI Host Controller Jan 23 18:29:03.102545 kernel: xhci_hcd 0000:02:00.0: new USB bus registered, assigned bus number 1 Jan 23 18:29:03.102693 kernel: xhci_hcd 0000:02:00.0: hcc params 0x00087001 hci version 0x100 quirks 0x0000000000000010 Jan 23 18:29:03.102850 kernel: xhci_hcd 0000:02:00.0: xHCI Host Controller Jan 23 18:29:03.102995 kernel: xhci_hcd 0000:02:00.0: new USB bus registered, assigned bus number 2 Jan 23 18:29:03.103139 kernel: xhci_hcd 0000:02:00.0: Host supports USB 3.0 SuperSpeed Jan 23 18:29:03.103338 kernel: hub 1-0:1.0: USB hub found Jan 23 18:29:03.103500 kernel: hub 1-0:1.0: 4 ports detected Jan 23 18:29:03.103663 kernel: usb usb2: We don't know the algorithms for LPM for this host, disabling LPM. Jan 23 18:29:03.103841 kernel: hub 2-0:1.0: USB hub found Jan 23 18:29:03.103998 kernel: hub 2-0:1.0: 4 ports detected Jan 23 18:29:03.104010 kernel: SCSI subsystem initialized Jan 23 18:29:03.104016 kernel: libata version 3.00 loaded. Jan 23 18:29:03.104161 kernel: ahci 0000:00:1f.2: version 3.0 Jan 23 18:29:03.104170 kernel: ACPI: \_SB_.GSIA: Enabled at IRQ 16 Jan 23 18:29:03.104320 kernel: ahci 0000:00:1f.2: AHCI vers 0001.0000, 32 command slots, 1.5 Gbps, SATA mode Jan 23 18:29:03.104461 kernel: ahci 0000:00:1f.2: 6/6 ports implemented (port mask 0x3f) Jan 23 18:29:03.104615 kernel: ahci 0000:00:1f.2: flags: 64bit ncq only Jan 23 18:29:03.104854 kernel: scsi host0: ahci Jan 23 18:29:03.105075 kernel: scsi host1: ahci Jan 23 18:29:03.105251 kernel: scsi host2: ahci Jan 23 18:29:03.105422 kernel: scsi host3: ahci Jan 23 18:29:03.105575 kernel: scsi host4: ahci Jan 23 18:29:03.105741 kernel: scsi host5: ahci Jan 23 18:29:03.105750 kernel: ata1: SATA max UDMA/133 abar m4096@0x81380000 port 0x81380100 irq 38 lpm-pol 1 Jan 23 18:29:03.105757 kernel: ata2: SATA max UDMA/133 abar m4096@0x81380000 port 0x81380180 irq 38 lpm-pol 1 Jan 23 18:29:03.105763 kernel: ata3: SATA max UDMA/133 abar m4096@0x81380000 port 0x81380200 irq 38 lpm-pol 1 Jan 23 18:29:03.105770 kernel: ata4: SATA max UDMA/133 abar m4096@0x81380000 port 0x81380280 irq 38 lpm-pol 1 Jan 23 18:29:03.105777 kernel: ata5: SATA max UDMA/133 abar m4096@0x81380000 port 0x81380300 irq 38 lpm-pol 1 Jan 23 18:29:03.105786 kernel: ata6: SATA max UDMA/133 abar m4096@0x81380000 port 0x81380380 irq 38 lpm-pol 1 Jan 23 18:29:03.105958 kernel: usb 1-1: new high-speed USB device number 2 using xhci_hcd Jan 23 18:29:03.105968 kernel: hid: raw HID events driver (C) Jiri Kosina Jan 23 18:29:03.105975 kernel: ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) Jan 23 18:29:03.105981 kernel: ata5: SATA link down (SStatus 0 SControl 300) Jan 23 18:29:03.105988 kernel: ata1.00: LPM support broken, forcing max_power Jan 23 18:29:03.105997 kernel: ata1.00: ATAPI: QEMU DVD-ROM, 2.5+, max UDMA/100 Jan 23 18:29:03.106005 kernel: ata1.00: applying bridge limits Jan 23 18:29:03.106011 kernel: ata3: SATA link down (SStatus 0 SControl 300) Jan 23 18:29:03.106018 kernel: ata4: SATA link down (SStatus 0 SControl 300) Jan 23 18:29:03.106024 kernel: ata1.00: LPM support broken, forcing max_power Jan 23 18:29:03.106031 kernel: ata1.00: configured for UDMA/100 Jan 23 18:29:03.106037 kernel: ata6: SATA link down (SStatus 0 SControl 300) Jan 23 18:29:03.106044 kernel: ata2: SATA link down (SStatus 0 SControl 300) Jan 23 18:29:03.106214 kernel: scsi 0:0:0:0: CD-ROM QEMU QEMU DVD-ROM 2.5+ PQ: 0 ANSI: 5 Jan 23 18:29:03.106222 kernel: usbcore: registered new interface driver usbhid Jan 23 18:29:03.106229 kernel: usbhid: USB HID core driver Jan 23 18:29:03.106807 kernel: sr 0:0:0:0: [sr0] scsi3-mmc drive: 4x/4x cd/rw xa/form2 tray Jan 23 18:29:03.106820 kernel: cdrom: Uniform CD-ROM driver Revision: 3.20 Jan 23 18:29:03.106987 kernel: virtio_scsi virtio5: 2/0/0 default/read/poll queues Jan 23 18:29:03.107150 kernel: sr 0:0:0:0: Attached scsi CD-ROM sr0 Jan 23 18:29:03.107669 kernel: scsi host6: Virtio SCSI HBA Jan 23 18:29:03.107866 kernel: scsi 6:0:0:0: Direct-Access QEMU QEMU HARDDISK 2.5+ PQ: 0 ANSI: 5 Jan 23 18:29:03.108407 kernel: input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:02.1/0000:02:00.0/usb1/1-1/1-1:1.0/0003:0627:0001.0001/input/input2 Jan 23 18:29:03.108619 kernel: hid-generic 0003:0627:0001.0001: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:02:00.0-1/input0 Jan 23 18:29:03.108802 kernel: sd 6:0:0:0: Power-on or device reset occurred Jan 23 18:29:03.108965 kernel: sd 6:0:0:0: [sda] 160006144 512-byte logical blocks: (81.9 GB/76.3 GiB) Jan 23 18:29:03.109126 kernel: sd 6:0:0:0: [sda] Write Protect is off Jan 23 18:29:03.109306 kernel: sd 6:0:0:0: [sda] Mode Sense: 63 00 00 08 Jan 23 18:29:03.109469 kernel: sd 6:0:0:0: [sda] Write cache: enabled, read cache: enabled, doesn't support DPO or FUA Jan 23 18:29:03.109622 kernel: GPT:Primary header thinks Alt. header is not at the end of the disk. Jan 23 18:29:03.109648 kernel: GPT:25804799 != 160006143 Jan 23 18:29:03.109655 kernel: GPT:Alternate GPT header not at the end of the disk. Jan 23 18:29:03.109662 kernel: GPT:25804799 != 160006143 Jan 23 18:29:03.109668 kernel: GPT: Use GNU Parted to correct GPT errors. Jan 23 18:29:03.109674 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Jan 23 18:29:03.109924 kernel: sd 6:0:0:0: [sda] Attached SCSI disk Jan 23 18:29:03.109935 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Jan 23 18:29:03.109946 kernel: device-mapper: uevent: version 1.0.3 Jan 23 18:29:03.109952 kernel: device-mapper: ioctl: 4.48.0-ioctl (2023-03-01) initialised: dm-devel@lists.linux.dev Jan 23 18:29:03.109959 kernel: device-mapper: verity: sha256 using shash "sha256-generic" Jan 23 18:29:03.109966 kernel: raid6: avx512x4 gen() 19699 MB/s Jan 23 18:29:03.109973 kernel: raid6: avx512x2 gen() 21287 MB/s Jan 23 18:29:03.109979 kernel: raid6: avx512x1 gen() 24043 MB/s Jan 23 18:29:03.109985 kernel: raid6: avx2x4 gen() 44169 MB/s Jan 23 18:29:03.109994 kernel: raid6: avx2x2 gen() 56258 MB/s Jan 23 18:29:03.110001 kernel: raid6: avx2x1 gen() 47642 MB/s Jan 23 18:29:03.110007 kernel: raid6: using algorithm avx2x2 gen() 56258 MB/s Jan 23 18:29:03.110013 kernel: raid6: .... xor() 36454 MB/s, rmw enabled Jan 23 18:29:03.110020 kernel: raid6: using avx512x2 recovery algorithm Jan 23 18:29:03.110026 kernel: xor: automatically using best checksumming function avx Jan 23 18:29:03.110033 kernel: Btrfs loaded, zoned=no, fsverity=no Jan 23 18:29:03.110041 kernel: BTRFS: device fsid ae5f9861-c401-42b4-99c9-2e3fe0b343c2 devid 1 transid 34 /dev/mapper/usr (254:0) scanned by mount (183) Jan 23 18:29:03.110048 kernel: BTRFS info (device dm-0): first mount of filesystem ae5f9861-c401-42b4-99c9-2e3fe0b343c2 Jan 23 18:29:03.110055 kernel: BTRFS info (device dm-0): using crc32c (crc32c-intel) checksum algorithm Jan 23 18:29:03.110061 kernel: BTRFS info (device dm-0): enabling ssd optimizations Jan 23 18:29:03.110068 kernel: BTRFS info (device dm-0): disabling log replay at mount time Jan 23 18:29:03.110075 kernel: BTRFS info (device dm-0): enabling free space tree Jan 23 18:29:03.110081 kernel: loop: module loaded Jan 23 18:29:03.110090 kernel: loop0: detected capacity change from 0 to 100560 Jan 23 18:29:03.110097 kernel: squashfs: version 4.0 (2009/01/31) Phillip Lougher Jan 23 18:29:03.110104 systemd[1]: Successfully made /usr/ read-only. Jan 23 18:29:03.110115 systemd[1]: systemd 257.9 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +IPE +SMACK +SECCOMP -GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL +ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBCRYPTSETUP_PLUGINS +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE +TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -BTF -XKBCOMMON +UTMP -SYSVINIT +LIBARCHIVE) Jan 23 18:29:03.110122 systemd[1]: Detected virtualization kvm. Jan 23 18:29:03.110129 systemd[1]: Detected architecture x86-64. Jan 23 18:29:03.110138 systemd[1]: Running in initrd. Jan 23 18:29:03.110145 systemd[1]: No hostname configured, using default hostname. Jan 23 18:29:03.110152 systemd[1]: Hostname set to . Jan 23 18:29:03.110158 systemd[1]: Initializing machine ID from SMBIOS/DMI UUID. Jan 23 18:29:03.110165 systemd[1]: Queued start job for default target initrd.target. Jan 23 18:29:03.110172 systemd[1]: Unnecessary job was removed for dev-mapper-usr.device - /dev/mapper/usr. Jan 23 18:29:03.110180 systemd[1]: Started clevis-luks-askpass.path - Forward Password Requests to Clevis Directory Watch. Jan 23 18:29:03.110187 systemd[1]: Started systemd-ask-password-console.path - Dispatch Password Requests to Console Directory Watch. Jan 23 18:29:03.110195 systemd[1]: Expecting device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device - /dev/disk/by-label/EFI-SYSTEM... Jan 23 18:29:03.110202 systemd[1]: Expecting device dev-disk-by\x2dlabel-OEM.device - /dev/disk/by-label/OEM... Jan 23 18:29:03.110209 systemd[1]: Expecting device dev-disk-by\x2dlabel-ROOT.device - /dev/disk/by-label/ROOT... Jan 23 18:29:03.110216 systemd[1]: Expecting device dev-disk-by\x2dpartlabel-USR\x2dA.device - /dev/disk/by-partlabel/USR-A... Jan 23 18:29:03.110225 systemd[1]: Reached target cryptsetup-pre.target - Local Encrypted Volumes (Pre). Jan 23 18:29:03.110232 systemd[1]: Reached target cryptsetup.target - Local Encrypted Volumes. Jan 23 18:29:03.110239 systemd[1]: Reached target initrd-usr-fs.target - Initrd /usr File System. Jan 23 18:29:03.110245 systemd[1]: Reached target paths.target - Path Units. Jan 23 18:29:03.110252 systemd[1]: Reached target slices.target - Slice Units. Jan 23 18:29:03.110272 systemd[1]: Reached target swap.target - Swaps. Jan 23 18:29:03.110279 systemd[1]: Reached target timers.target - Timer Units. Jan 23 18:29:03.110288 systemd[1]: Listening on iscsid.socket - Open-iSCSI iscsid Socket. Jan 23 18:29:03.110295 systemd[1]: Listening on iscsiuio.socket - Open-iSCSI iscsiuio Socket. Jan 23 18:29:03.110301 systemd[1]: Listening on systemd-journald-audit.socket - Journal Audit Socket. Jan 23 18:29:03.110308 systemd[1]: Listening on systemd-journald-dev-log.socket - Journal Socket (/dev/log). Jan 23 18:29:03.110315 systemd[1]: Listening on systemd-journald.socket - Journal Sockets. Jan 23 18:29:03.110322 systemd[1]: Listening on systemd-networkd.socket - Network Service Netlink Socket. Jan 23 18:29:03.110329 systemd[1]: Listening on systemd-udevd-control.socket - udev Control Socket. Jan 23 18:29:03.110338 systemd[1]: Listening on systemd-udevd-kernel.socket - udev Kernel Socket. Jan 23 18:29:03.110344 systemd[1]: Reached target sockets.target - Socket Units. Jan 23 18:29:03.110351 systemd[1]: afterburn-network-kargs.service - Afterburn Initrd Setup Network Kernel Arguments was skipped because no trigger condition checks were met. Jan 23 18:29:03.110358 systemd[1]: Starting ignition-setup-pre.service - Ignition env setup... Jan 23 18:29:03.110365 systemd[1]: Starting kmod-static-nodes.service - Create List of Static Device Nodes... Jan 23 18:29:03.110372 systemd[1]: Finished network-cleanup.service - Network Cleanup. Jan 23 18:29:03.110381 systemd[1]: systemd-battery-check.service - Check battery level during early boot was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/class/power_supply). Jan 23 18:29:03.110388 systemd[1]: Starting systemd-fsck-usr.service... Jan 23 18:29:03.110394 systemd[1]: Starting systemd-journald.service - Journal Service... Jan 23 18:29:03.110401 systemd[1]: Starting systemd-modules-load.service - Load Kernel Modules... Jan 23 18:29:03.110408 systemd[1]: Starting systemd-vconsole-setup.service - Virtual Console Setup... Jan 23 18:29:03.110417 systemd[1]: Finished ignition-setup-pre.service - Ignition env setup. Jan 23 18:29:03.110424 systemd[1]: Finished kmod-static-nodes.service - Create List of Static Device Nodes. Jan 23 18:29:03.110431 systemd[1]: Finished systemd-fsck-usr.service. Jan 23 18:29:03.110464 systemd-journald[321]: Collecting audit messages is enabled. Jan 23 18:29:03.110493 systemd[1]: Starting systemd-tmpfiles-setup-dev-early.service - Create Static Device Nodes in /dev gracefully... Jan 23 18:29:03.110504 systemd[1]: Finished systemd-vconsole-setup.service - Virtual Console Setup. Jan 23 18:29:03.110515 kernel: audit: type=1130 audit(1769192943.055:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:03.110526 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Jan 23 18:29:03.110540 systemd[1]: Starting dracut-cmdline-ask.service - dracut ask for additional cmdline parameters... Jan 23 18:29:03.110551 kernel: Bridge firewalling registered Jan 23 18:29:03.110561 systemd[1]: Finished systemd-modules-load.service - Load Kernel Modules. Jan 23 18:29:03.110569 kernel: audit: type=1130 audit(1769192943.078:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:03.110576 systemd[1]: Finished systemd-tmpfiles-setup-dev-early.service - Create Static Device Nodes in /dev gracefully. Jan 23 18:29:03.110584 kernel: audit: type=1130 audit(1769192943.086:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:03.110590 systemd[1]: Starting systemd-sysctl.service - Apply Kernel Variables... Jan 23 18:29:03.110600 systemd[1]: Starting systemd-tmpfiles-setup-dev.service - Create Static Device Nodes in /dev... Jan 23 18:29:03.110607 systemd-journald[321]: Journal started Jan 23 18:29:03.110622 systemd-journald[321]: Runtime Journal (/run/log/journal/2b562402d7a1448ca32ed48ce7177adf) is 8M, max 76M, 68M free. Jan 23 18:29:03.055000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:03.078000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:03.086000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:03.074351 systemd-modules-load[322]: Inserted module 'br_netfilter' Jan 23 18:29:03.116297 systemd[1]: Started systemd-journald.service - Journal Service. Jan 23 18:29:03.116000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:03.122657 kernel: audit: type=1130 audit(1769192943.116:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:03.127770 systemd[1]: Starting systemd-tmpfiles-setup.service - Create System Files and Directories... Jan 23 18:29:03.129442 systemd[1]: Finished dracut-cmdline-ask.service - dracut ask for additional cmdline parameters. Jan 23 18:29:03.131000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:03.137672 kernel: audit: type=1130 audit(1769192943.131:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:03.137442 systemd[1]: Starting dracut-cmdline.service - dracut cmdline hook... Jan 23 18:29:03.139977 systemd[1]: Finished systemd-sysctl.service - Apply Kernel Variables. Jan 23 18:29:03.146456 kernel: audit: type=1130 audit(1769192943.140:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:03.140000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:03.149669 systemd-tmpfiles[351]: /usr/lib/tmpfiles.d/var.conf:14: Duplicate line for path "/var/log", ignoring. Jan 23 18:29:03.150222 systemd[1]: Finished systemd-tmpfiles-setup-dev.service - Create Static Device Nodes in /dev. Jan 23 18:29:03.158370 kernel: audit: type=1130 audit(1769192943.150:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:03.150000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:03.153383 systemd[1]: Starting systemd-resolved.service - Network Name Resolution... Jan 23 18:29:03.152000 audit: BPF prog-id=6 op=LOAD Jan 23 18:29:03.165292 kernel: audit: type=1334 audit(1769192943.152:9): prog-id=6 op=LOAD Jan 23 18:29:03.165488 systemd[1]: Finished systemd-tmpfiles-setup.service - Create System Files and Directories. Jan 23 18:29:03.166000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:03.168782 dracut-cmdline[353]: Using kernel command line parameters: rd.driver.pre=btrfs SYSTEMD_SULOGIN_FORCE=1 rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200n8 console=tty0 flatcar.first_boot=detected flatcar.oem.id=hetzner verity.usrhash=ee2a61adbfdca0d8850a6d1564f6a5daa8e67e4645be01ed76a79270fe7c1051 Jan 23 18:29:03.174455 kernel: audit: type=1130 audit(1769192943.166:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:03.211629 systemd-resolved[359]: Positive Trust Anchors: Jan 23 18:29:03.212238 systemd-resolved[359]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Jan 23 18:29:03.212243 systemd-resolved[359]: . IN DS 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16 Jan 23 18:29:03.212279 systemd-resolved[359]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 170.0.0.192.in-addr.arpa 171.0.0.192.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa ipv4only.arpa resolver.arpa corp home internal intranet lan local private test Jan 23 18:29:03.233947 systemd-resolved[359]: Defaulting to hostname 'linux'. Jan 23 18:29:03.234912 systemd[1]: Started systemd-resolved.service - Network Name Resolution. Jan 23 18:29:03.235000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:03.235925 systemd[1]: Reached target nss-lookup.target - Host and Network Name Lookups. Jan 23 18:29:03.271291 kernel: Loading iSCSI transport class v2.0-870. Jan 23 18:29:03.284281 kernel: iscsi: registered transport (tcp) Jan 23 18:29:03.303658 kernel: iscsi: registered transport (qla4xxx) Jan 23 18:29:03.303762 kernel: QLogic iSCSI HBA Driver Jan 23 18:29:03.335396 systemd[1]: Starting systemd-network-generator.service - Generate network units from Kernel command line... Jan 23 18:29:03.372489 systemd[1]: Finished systemd-network-generator.service - Generate network units from Kernel command line. Jan 23 18:29:03.374000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:03.376132 systemd[1]: Reached target network-pre.target - Preparation for Network. Jan 23 18:29:03.467343 systemd[1]: Finished dracut-cmdline.service - dracut cmdline hook. Jan 23 18:29:03.468000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:03.471554 systemd[1]: Starting dracut-pre-udev.service - dracut pre-udev hook... Jan 23 18:29:03.474478 systemd[1]: Starting parse-ip-for-networkd.service - Write systemd-networkd units from cmdline... Jan 23 18:29:03.532632 systemd[1]: Finished dracut-pre-udev.service - dracut pre-udev hook. Jan 23 18:29:03.534000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:03.537000 audit: BPF prog-id=7 op=LOAD Jan 23 18:29:03.537000 audit: BPF prog-id=8 op=LOAD Jan 23 18:29:03.538492 systemd[1]: Starting systemd-udevd.service - Rule-based Manager for Device Events and Files... Jan 23 18:29:03.584156 systemd-udevd[595]: Using default interface naming scheme 'v257'. Jan 23 18:29:03.594337 systemd[1]: Started systemd-udevd.service - Rule-based Manager for Device Events and Files. Jan 23 18:29:03.595000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:03.597122 systemd[1]: Starting dracut-pre-trigger.service - dracut pre-trigger hook... Jan 23 18:29:03.637407 dracut-pre-trigger[646]: rd.md=0: removing MD RAID activation Jan 23 18:29:03.662005 systemd[1]: Finished parse-ip-for-networkd.service - Write systemd-networkd units from cmdline. Jan 23 18:29:03.662000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:03.663000 audit: BPF prog-id=9 op=LOAD Jan 23 18:29:03.664393 systemd[1]: Starting systemd-networkd.service - Network Configuration... Jan 23 18:29:03.678812 systemd[1]: Finished dracut-pre-trigger.service - dracut pre-trigger hook. Jan 23 18:29:03.679000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:03.680805 systemd[1]: Starting systemd-udev-trigger.service - Coldplug All udev Devices... Jan 23 18:29:03.731943 systemd-networkd[721]: lo: Link UP Jan 23 18:29:03.731956 systemd-networkd[721]: lo: Gained carrier Jan 23 18:29:03.733000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:03.733840 systemd[1]: Started systemd-networkd.service - Network Configuration. Jan 23 18:29:03.734300 systemd[1]: Reached target network.target - Network. Jan 23 18:29:03.778971 systemd[1]: Finished systemd-udev-trigger.service - Coldplug All udev Devices. Jan 23 18:29:03.779000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:03.782392 systemd[1]: Starting dracut-initqueue.service - dracut initqueue hook... Jan 23 18:29:03.898906 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device - QEMU_HARDDISK ROOT. Jan 23 18:29:03.908081 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device - QEMU_HARDDISK EFI-SYSTEM. Jan 23 18:29:03.929011 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device - QEMU_HARDDISK USR-A. Jan 23 18:29:03.934379 systemd[1]: Starting disk-uuid.service - Generate new UUID for disk GPT if necessary... Jan 23 18:29:03.947440 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device - QEMU_HARDDISK OEM. Jan 23 18:29:03.960342 disk-uuid[771]: Primary Header is updated. Jan 23 18:29:03.960342 disk-uuid[771]: Secondary Entries is updated. Jan 23 18:29:03.960342 disk-uuid[771]: Secondary Header is updated. Jan 23 18:29:03.974461 kernel: cryptd: max_cpu_qlen set to 1000 Jan 23 18:29:03.982802 kernel: input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input3 Jan 23 18:29:04.008283 kernel: AES CTR mode by8 optimization enabled Jan 23 18:29:04.012464 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Jan 23 18:29:04.012992 systemd[1]: Stopped systemd-vconsole-setup.service - Virtual Console Setup. Jan 23 18:29:04.021471 kernel: kauditd_printk_skb: 12 callbacks suppressed Jan 23 18:29:04.021488 kernel: audit: type=1131 audit(1769192944.013:23): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:04.013000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:04.014172 systemd[1]: Stopping systemd-vconsole-setup.service - Virtual Console Setup... Jan 23 18:29:04.023509 systemd[1]: Starting systemd-vconsole-setup.service - Virtual Console Setup... Jan 23 18:29:04.025186 systemd-networkd[721]: eth1: Found matching .network file, based on potentially unpredictable interface name: /usr/lib/systemd/network/zz-default.network Jan 23 18:29:04.025191 systemd-networkd[721]: eth1: Configuring with /usr/lib/systemd/network/zz-default.network. Jan 23 18:29:04.026080 systemd-networkd[721]: eth1: Link UP Jan 23 18:29:04.026248 systemd-networkd[721]: eth1: Gained carrier Jan 23 18:29:04.026256 systemd-networkd[721]: eth1: Found matching .network file, based on potentially unpredictable interface name: /usr/lib/systemd/network/zz-default.network Jan 23 18:29:04.031276 systemd-networkd[721]: eth0: Found matching .network file, based on potentially unpredictable interface name: /usr/lib/systemd/network/zz-default.network Jan 23 18:29:04.031280 systemd-networkd[721]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Jan 23 18:29:04.032579 systemd-networkd[721]: eth0: Link UP Jan 23 18:29:04.032761 systemd-networkd[721]: eth0: Gained carrier Jan 23 18:29:04.032769 systemd-networkd[721]: eth0: Found matching .network file, based on potentially unpredictable interface name: /usr/lib/systemd/network/zz-default.network Jan 23 18:29:04.048000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:04.046865 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Jan 23 18:29:04.046958 systemd[1]: Stopped systemd-vconsole-setup.service - Virtual Console Setup. Jan 23 18:29:04.055599 kernel: audit: type=1130 audit(1769192944.048:24): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:04.054194 systemd[1]: Starting systemd-vconsole-setup.service - Virtual Console Setup... Jan 23 18:29:04.053000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:04.069401 kernel: audit: type=1131 audit(1769192944.053:25): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:04.090772 systemd-networkd[721]: eth0: DHCPv4 address 46.62.141.192/32, gateway 172.31.1.1 acquired from 172.31.1.1 Jan 23 18:29:04.102793 systemd[1]: Finished systemd-vconsole-setup.service - Virtual Console Setup. Jan 23 18:29:04.103000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:04.109288 kernel: audit: type=1130 audit(1769192944.103:26): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:04.117008 systemd[1]: Finished dracut-initqueue.service - dracut initqueue hook. Jan 23 18:29:04.118117 systemd[1]: Reached target remote-fs-pre.target - Preparation for Remote File Systems. Jan 23 18:29:04.124120 kernel: audit: type=1130 audit(1769192944.117:27): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:04.117000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:04.123692 systemd[1]: Reached target remote-cryptsetup.target - Remote Encrypted Volumes. Jan 23 18:29:04.124523 systemd[1]: Reached target remote-fs.target - Remote File Systems. Jan 23 18:29:04.126598 systemd[1]: Starting dracut-pre-mount.service - dracut pre-mount hook... Jan 23 18:29:04.140303 systemd-networkd[721]: eth1: DHCPv4 address 10.0.0.4/32 acquired from 10.0.0.1 Jan 23 18:29:04.147668 systemd[1]: Finished dracut-pre-mount.service - dracut pre-mount hook. Jan 23 18:29:04.147000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:04.154279 kernel: audit: type=1130 audit(1769192944.147:28): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:05.002239 disk-uuid[772]: Warning: The kernel is still using the old partition table. Jan 23 18:29:05.002239 disk-uuid[772]: The new table will be used at the next reboot or after you Jan 23 18:29:05.002239 disk-uuid[772]: run partprobe(8) or kpartx(8) Jan 23 18:29:05.002239 disk-uuid[772]: The operation has completed successfully. Jan 23 18:29:05.018320 systemd[1]: disk-uuid.service: Deactivated successfully. Jan 23 18:29:05.018567 systemd[1]: Finished disk-uuid.service - Generate new UUID for disk GPT if necessary. Jan 23 18:29:05.020000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:05.022553 systemd[1]: Starting ignition-setup.service - Ignition (setup)... Jan 23 18:29:05.048107 kernel: audit: type=1130 audit(1769192945.020:29): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:05.048148 kernel: audit: type=1131 audit(1769192945.020:30): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:05.020000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:05.099025 kernel: BTRFS: device label OEM devid 1 transid 11 /dev/sda6 (8:6) scanned by mount (892) Jan 23 18:29:05.099083 kernel: BTRFS info (device sda6): first mount of filesystem 65a96faf-6d02-485d-b2fc-84eb49ece660 Jan 23 18:29:05.104858 kernel: BTRFS info (device sda6): using crc32c (crc32c-intel) checksum algorithm Jan 23 18:29:05.118391 kernel: BTRFS info (device sda6): enabling ssd optimizations Jan 23 18:29:05.118446 kernel: BTRFS info (device sda6): turning on async discard Jan 23 18:29:05.122898 kernel: BTRFS info (device sda6): enabling free space tree Jan 23 18:29:05.143310 kernel: BTRFS info (device sda6): last unmount of filesystem 65a96faf-6d02-485d-b2fc-84eb49ece660 Jan 23 18:29:05.144590 systemd[1]: Finished ignition-setup.service - Ignition (setup). Jan 23 18:29:05.159345 kernel: audit: type=1130 audit(1769192945.145:31): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:05.145000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:05.149586 systemd[1]: Starting ignition-fetch-offline.service - Ignition (fetch-offline)... Jan 23 18:29:05.379800 ignition[911]: Ignition 2.24.0 Jan 23 18:29:05.381188 ignition[911]: Stage: fetch-offline Jan 23 18:29:05.381302 ignition[911]: no configs at "/usr/lib/ignition/base.d" Jan 23 18:29:05.381328 ignition[911]: no config dir at "/usr/lib/ignition/base.platform.d/hetzner" Jan 23 18:29:05.381941 ignition[911]: parsed url from cmdline: "" Jan 23 18:29:05.381958 ignition[911]: no config URL provided Jan 23 18:29:05.381994 ignition[911]: reading system config file "/usr/lib/ignition/user.ign" Jan 23 18:29:05.402226 kernel: audit: type=1130 audit(1769192945.388:32): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:05.388000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:05.387116 systemd[1]: Finished ignition-fetch-offline.service - Ignition (fetch-offline). Jan 23 18:29:05.382205 ignition[911]: no config at "/usr/lib/ignition/user.ign" Jan 23 18:29:05.391138 systemd[1]: Starting ignition-fetch.service - Ignition (fetch)... Jan 23 18:29:05.382225 ignition[911]: failed to fetch config: resource requires networking Jan 23 18:29:05.382620 ignition[911]: Ignition finished successfully Jan 23 18:29:05.435404 ignition[917]: Ignition 2.24.0 Jan 23 18:29:05.435429 ignition[917]: Stage: fetch Jan 23 18:29:05.435690 ignition[917]: no configs at "/usr/lib/ignition/base.d" Jan 23 18:29:05.435709 ignition[917]: no config dir at "/usr/lib/ignition/base.platform.d/hetzner" Jan 23 18:29:05.435889 ignition[917]: parsed url from cmdline: "" Jan 23 18:29:05.435898 ignition[917]: no config URL provided Jan 23 18:29:05.435915 ignition[917]: reading system config file "/usr/lib/ignition/user.ign" Jan 23 18:29:05.435931 ignition[917]: no config at "/usr/lib/ignition/user.ign" Jan 23 18:29:05.435969 ignition[917]: GET http://169.254.169.254/hetzner/v1/userdata: attempt #1 Jan 23 18:29:05.444390 ignition[917]: GET result: OK Jan 23 18:29:05.444539 ignition[917]: parsing config with SHA512: ad6bc1b008dc7a9c8e2004224376a7cc8acba6cd8e0ce7ae716cc29b73febd581497464612f30fb625656be86e0a72263eb8a6dde8c3bbaeac450ad5b339c99e Jan 23 18:29:05.459804 unknown[917]: fetched base config from "system" Jan 23 18:29:05.459823 unknown[917]: fetched base config from "system" Jan 23 18:29:05.460116 ignition[917]: fetch: fetch complete Jan 23 18:29:05.459837 unknown[917]: fetched user config from "hetzner" Jan 23 18:29:05.460127 ignition[917]: fetch: fetch passed Jan 23 18:29:05.460213 ignition[917]: Ignition finished successfully Jan 23 18:29:05.469012 systemd[1]: Finished ignition-fetch.service - Ignition (fetch). Jan 23 18:29:05.469000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:05.472124 systemd[1]: Starting ignition-kargs.service - Ignition (kargs)... Jan 23 18:29:05.518660 ignition[924]: Ignition 2.24.0 Jan 23 18:29:05.518684 ignition[924]: Stage: kargs Jan 23 18:29:05.518991 ignition[924]: no configs at "/usr/lib/ignition/base.d" Jan 23 18:29:05.519011 ignition[924]: no config dir at "/usr/lib/ignition/base.platform.d/hetzner" Jan 23 18:29:05.520040 ignition[924]: kargs: kargs passed Jan 23 18:29:05.520122 ignition[924]: Ignition finished successfully Jan 23 18:29:05.526705 systemd[1]: Finished ignition-kargs.service - Ignition (kargs). Jan 23 18:29:05.527000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:05.530460 systemd[1]: Starting ignition-disks.service - Ignition (disks)... Jan 23 18:29:05.570529 ignition[930]: Ignition 2.24.0 Jan 23 18:29:05.570549 ignition[930]: Stage: disks Jan 23 18:29:05.570820 ignition[930]: no configs at "/usr/lib/ignition/base.d" Jan 23 18:29:05.570838 ignition[930]: no config dir at "/usr/lib/ignition/base.platform.d/hetzner" Jan 23 18:29:05.571907 ignition[930]: disks: disks passed Jan 23 18:29:05.571979 ignition[930]: Ignition finished successfully Jan 23 18:29:05.575987 systemd[1]: Finished ignition-disks.service - Ignition (disks). Jan 23 18:29:05.577000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:05.578243 systemd[1]: Reached target initrd-root-device.target - Initrd Root Device. Jan 23 18:29:05.579093 systemd[1]: Reached target local-fs-pre.target - Preparation for Local File Systems. Jan 23 18:29:05.580483 systemd[1]: Reached target local-fs.target - Local File Systems. Jan 23 18:29:05.581861 systemd[1]: Reached target sysinit.target - System Initialization. Jan 23 18:29:05.583198 systemd[1]: Reached target basic.target - Basic System. Jan 23 18:29:05.586440 systemd[1]: Starting systemd-fsck-root.service - File System Check on /dev/disk/by-label/ROOT... Jan 23 18:29:05.654073 systemd-fsck[938]: ROOT: clean, 15/1631200 files, 112378/1617920 blocks Jan 23 18:29:05.658760 systemd[1]: Finished systemd-fsck-root.service - File System Check on /dev/disk/by-label/ROOT. Jan 23 18:29:05.659000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:05.662307 systemd[1]: Mounting sysroot.mount - /sysroot... Jan 23 18:29:05.772399 systemd-networkd[721]: eth1: Gained IPv6LL Jan 23 18:29:05.833317 kernel: EXT4-fs (sda9): mounted filesystem eebf2bdd-2461-4b18-9f37-721daf86511d r/w with ordered data mode. Quota mode: none. Jan 23 18:29:05.835350 systemd[1]: Mounted sysroot.mount - /sysroot. Jan 23 18:29:05.837114 systemd[1]: Reached target initrd-root-fs.target - Initrd Root File System. Jan 23 18:29:05.840897 systemd[1]: Mounting sysroot-oem.mount - /sysroot/oem... Jan 23 18:29:05.844689 systemd[1]: Mounting sysroot-usr.mount - /sysroot/usr... Jan 23 18:29:05.848958 systemd[1]: Starting flatcar-metadata-hostname.service - Flatcar Metadata Hostname Agent... Jan 23 18:29:05.852444 systemd[1]: ignition-remount-sysroot.service - Remount /sysroot read-write for Ignition was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Jan 23 18:29:05.853392 systemd[1]: Reached target ignition-diskful.target - Ignition Boot Disk Setup. Jan 23 18:29:05.861322 systemd[1]: Mounted sysroot-usr.mount - /sysroot/usr. Jan 23 18:29:05.869987 kernel: BTRFS: device label OEM devid 1 transid 11 /dev/sda6 (8:6) scanned by mount (946) Jan 23 18:29:05.870027 kernel: BTRFS info (device sda6): first mount of filesystem 65a96faf-6d02-485d-b2fc-84eb49ece660 Jan 23 18:29:05.874888 kernel: BTRFS info (device sda6): using crc32c (crc32c-intel) checksum algorithm Jan 23 18:29:05.874891 systemd[1]: Starting initrd-setup-root.service - Root filesystem setup... Jan 23 18:29:05.897294 kernel: BTRFS info (device sda6): enabling ssd optimizations Jan 23 18:29:05.897333 kernel: BTRFS info (device sda6): turning on async discard Jan 23 18:29:05.897344 kernel: BTRFS info (device sda6): enabling free space tree Jan 23 18:29:05.908811 systemd[1]: Mounted sysroot-oem.mount - /sysroot/oem. Jan 23 18:29:05.959990 coreos-metadata[948]: Jan 23 18:29:05.959 INFO Fetching http://169.254.169.254/hetzner/v1/metadata/hostname: Attempt #1 Jan 23 18:29:05.963154 coreos-metadata[948]: Jan 23 18:29:05.961 INFO Fetch successful Jan 23 18:29:05.963154 coreos-metadata[948]: Jan 23 18:29:05.962 INFO wrote hostname ci-4547-1-0-a-6fe2345582 to /sysroot/etc/hostname Jan 23 18:29:05.967101 systemd[1]: Finished flatcar-metadata-hostname.service - Flatcar Metadata Hostname Agent. Jan 23 18:29:05.968000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-metadata-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:06.028714 systemd-networkd[721]: eth0: Gained IPv6LL Jan 23 18:29:06.131565 systemd[1]: Finished initrd-setup-root.service - Root filesystem setup. Jan 23 18:29:06.132000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:06.134842 systemd[1]: Starting ignition-mount.service - Ignition (mount)... Jan 23 18:29:06.137466 systemd[1]: Starting sysroot-boot.service - /sysroot/boot... Jan 23 18:29:06.164876 systemd[1]: sysroot-oem.mount: Deactivated successfully. Jan 23 18:29:06.170353 kernel: BTRFS info (device sda6): last unmount of filesystem 65a96faf-6d02-485d-b2fc-84eb49ece660 Jan 23 18:29:06.200210 systemd[1]: Finished sysroot-boot.service - /sysroot/boot. Jan 23 18:29:06.200000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:06.208228 ignition[1047]: INFO : Ignition 2.24.0 Jan 23 18:29:06.208228 ignition[1047]: INFO : Stage: mount Jan 23 18:29:06.208228 ignition[1047]: INFO : no configs at "/usr/lib/ignition/base.d" Jan 23 18:29:06.208228 ignition[1047]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/hetzner" Jan 23 18:29:06.208228 ignition[1047]: INFO : mount: mount passed Jan 23 18:29:06.208228 ignition[1047]: INFO : Ignition finished successfully Jan 23 18:29:06.213000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:06.212755 systemd[1]: Finished ignition-mount.service - Ignition (mount). Jan 23 18:29:06.216672 systemd[1]: Starting ignition-files.service - Ignition (files)... Jan 23 18:29:06.243840 systemd[1]: Mounting sysroot-oem.mount - /sysroot/oem... Jan 23 18:29:06.282606 kernel: BTRFS: device label OEM devid 1 transid 11 /dev/sda6 (8:6) scanned by mount (1058) Jan 23 18:29:06.282674 kernel: BTRFS info (device sda6): first mount of filesystem 65a96faf-6d02-485d-b2fc-84eb49ece660 Jan 23 18:29:06.289085 kernel: BTRFS info (device sda6): using crc32c (crc32c-intel) checksum algorithm Jan 23 18:29:06.303639 kernel: BTRFS info (device sda6): enabling ssd optimizations Jan 23 18:29:06.303721 kernel: BTRFS info (device sda6): turning on async discard Jan 23 18:29:06.307923 kernel: BTRFS info (device sda6): enabling free space tree Jan 23 18:29:06.315583 systemd[1]: Mounted sysroot-oem.mount - /sysroot/oem. Jan 23 18:29:06.362253 ignition[1075]: INFO : Ignition 2.24.0 Jan 23 18:29:06.362253 ignition[1075]: INFO : Stage: files Jan 23 18:29:06.364540 ignition[1075]: INFO : no configs at "/usr/lib/ignition/base.d" Jan 23 18:29:06.364540 ignition[1075]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/hetzner" Jan 23 18:29:06.364540 ignition[1075]: DEBUG : files: compiled without relabeling support, skipping Jan 23 18:29:06.369112 ignition[1075]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Jan 23 18:29:06.369112 ignition[1075]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Jan 23 18:29:06.374113 ignition[1075]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Jan 23 18:29:06.375147 ignition[1075]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Jan 23 18:29:06.376198 ignition[1075]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Jan 23 18:29:06.376038 unknown[1075]: wrote ssh authorized keys file for user: core Jan 23 18:29:06.381935 ignition[1075]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/etc/flatcar/update.conf" Jan 23 18:29:06.382782 ignition[1075]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/etc/flatcar/update.conf" Jan 23 18:29:06.382782 ignition[1075]: INFO : files: op(4): [started] processing unit "etcd-member.service" Jan 23 18:29:06.384464 ignition[1075]: INFO : files: op(4): op(5): [started] writing systemd drop-in "20-clct-etcd-member.conf" at "/sysroot/etc/systemd/system/etcd-member.service.d/20-clct-etcd-member.conf" Jan 23 18:29:06.386826 ignition[1075]: INFO : files: op(4): op(5): [finished] writing systemd drop-in "20-clct-etcd-member.conf" at "/sysroot/etc/systemd/system/etcd-member.service.d/20-clct-etcd-member.conf" Jan 23 18:29:06.386826 ignition[1075]: INFO : files: op(4): [finished] processing unit "etcd-member.service" Jan 23 18:29:06.386826 ignition[1075]: INFO : files: op(6): [started] processing unit "coreos-metadata.service" Jan 23 18:29:06.389930 ignition[1075]: INFO : files: op(6): op(7): [started] writing systemd drop-in "00-custom-metadata.conf" at "/sysroot/etc/systemd/system/coreos-metadata.service.d/00-custom-metadata.conf" Jan 23 18:29:06.389930 ignition[1075]: INFO : files: op(6): op(7): [finished] writing systemd drop-in "00-custom-metadata.conf" at "/sysroot/etc/systemd/system/coreos-metadata.service.d/00-custom-metadata.conf" Jan 23 18:29:06.389930 ignition[1075]: INFO : files: op(6): [finished] processing unit "coreos-metadata.service" Jan 23 18:29:06.389930 ignition[1075]: INFO : files: op(8): [started] setting preset to enabled for "etcd-member.service" Jan 23 18:29:06.389930 ignition[1075]: INFO : files: op(8): [finished] setting preset to enabled for "etcd-member.service" Jan 23 18:29:06.395000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:06.396405 ignition[1075]: INFO : files: createResultFile: createFiles: op(9): [started] writing file "/sysroot/etc/.ignition-result.json" Jan 23 18:29:06.396405 ignition[1075]: INFO : files: createResultFile: createFiles: op(9): [finished] writing file "/sysroot/etc/.ignition-result.json" Jan 23 18:29:06.396405 ignition[1075]: INFO : files: files passed Jan 23 18:29:06.396405 ignition[1075]: INFO : Ignition finished successfully Jan 23 18:29:06.394025 systemd[1]: Finished ignition-files.service - Ignition (files). Jan 23 18:29:06.399298 systemd[1]: Starting ignition-quench.service - Ignition (record completion)... Jan 23 18:29:06.403954 systemd[1]: Starting initrd-setup-root-after-ignition.service - Root filesystem completion... Jan 23 18:29:06.421130 systemd[1]: ignition-quench.service: Deactivated successfully. Jan 23 18:29:06.422000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:06.422375 systemd[1]: Finished ignition-quench.service - Ignition (record completion). Jan 23 18:29:06.424000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:06.440448 initrd-setup-root-after-ignition[1107]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Jan 23 18:29:06.442930 initrd-setup-root-after-ignition[1107]: grep: /sysroot/usr/share/flatcar/enabled-sysext.conf: No such file or directory Jan 23 18:29:06.443865 initrd-setup-root-after-ignition[1111]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Jan 23 18:29:06.448485 systemd[1]: Finished initrd-setup-root-after-ignition.service - Root filesystem completion. Jan 23 18:29:06.449000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:06.450236 systemd[1]: Reached target ignition-complete.target - Ignition Complete. Jan 23 18:29:06.453398 systemd[1]: Starting initrd-parse-etc.service - Mountpoints Configured in the Real Root... Jan 23 18:29:06.526065 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Jan 23 18:29:06.527409 systemd[1]: Finished initrd-parse-etc.service - Mountpoints Configured in the Real Root. Jan 23 18:29:06.528000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:06.528000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:06.528892 systemd[1]: Reached target initrd-fs.target - Initrd File Systems. Jan 23 18:29:06.530258 systemd[1]: Reached target initrd.target - Initrd Default Target. Jan 23 18:29:06.532549 systemd[1]: dracut-mount.service - dracut mount hook was skipped because no trigger condition checks were met. Jan 23 18:29:06.534402 systemd[1]: Starting dracut-pre-pivot.service - dracut pre-pivot and cleanup hook... Jan 23 18:29:06.575258 systemd[1]: Finished dracut-pre-pivot.service - dracut pre-pivot and cleanup hook. Jan 23 18:29:06.576000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:06.580153 systemd[1]: Starting initrd-cleanup.service - Cleaning Up and Shutting Down Daemons... Jan 23 18:29:06.614695 systemd[1]: Unnecessary job was removed for dev-mapper-usr.device - /dev/mapper/usr. Jan 23 18:29:06.615992 systemd[1]: Stopped target nss-lookup.target - Host and Network Name Lookups. Jan 23 18:29:06.617774 systemd[1]: Stopped target remote-cryptsetup.target - Remote Encrypted Volumes. Jan 23 18:29:06.619632 systemd[1]: Stopped target timers.target - Timer Units. Jan 23 18:29:06.621515 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Jan 23 18:29:06.623000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:06.621855 systemd[1]: Stopped dracut-pre-pivot.service - dracut pre-pivot and cleanup hook. Jan 23 18:29:06.624578 systemd[1]: Stopped target initrd.target - Initrd Default Target. Jan 23 18:29:06.626651 systemd[1]: Stopped target basic.target - Basic System. Jan 23 18:29:06.628356 systemd[1]: Stopped target ignition-complete.target - Ignition Complete. Jan 23 18:29:06.630181 systemd[1]: Stopped target ignition-diskful.target - Ignition Boot Disk Setup. Jan 23 18:29:06.631902 systemd[1]: Stopped target initrd-root-device.target - Initrd Root Device. Jan 23 18:29:06.633910 systemd[1]: Stopped target initrd-usr-fs.target - Initrd /usr File System. Jan 23 18:29:06.635754 systemd[1]: Stopped target remote-fs.target - Remote File Systems. Jan 23 18:29:06.637526 systemd[1]: Stopped target remote-fs-pre.target - Preparation for Remote File Systems. Jan 23 18:29:06.639321 systemd[1]: Stopped target sysinit.target - System Initialization. Jan 23 18:29:06.641177 systemd[1]: Stopped target local-fs.target - Local File Systems. Jan 23 18:29:06.643007 systemd[1]: Stopped target swap.target - Swaps. Jan 23 18:29:06.644768 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Jan 23 18:29:06.646000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:06.644951 systemd[1]: Stopped dracut-pre-mount.service - dracut pre-mount hook. Jan 23 18:29:06.647633 systemd[1]: Stopped target cryptsetup.target - Local Encrypted Volumes. Jan 23 18:29:06.649579 systemd[1]: Stopped target cryptsetup-pre.target - Local Encrypted Volumes (Pre). Jan 23 18:29:06.651240 systemd[1]: clevis-luks-askpass.path: Deactivated successfully. Jan 23 18:29:06.652950 systemd[1]: Stopped clevis-luks-askpass.path - Forward Password Requests to Clevis Directory Watch. Jan 23 18:29:06.654147 systemd[1]: dracut-initqueue.service: Deactivated successfully. Jan 23 18:29:06.655000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:06.654415 systemd[1]: Stopped dracut-initqueue.service - dracut initqueue hook. Jan 23 18:29:06.657037 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Jan 23 18:29:06.658000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:06.657236 systemd[1]: Stopped initrd-setup-root-after-ignition.service - Root filesystem completion. Jan 23 18:29:06.661000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:06.659117 systemd[1]: ignition-files.service: Deactivated successfully. Jan 23 18:29:06.662000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-metadata-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:06.659322 systemd[1]: Stopped ignition-files.service - Ignition (files). Jan 23 18:29:06.661410 systemd[1]: flatcar-metadata-hostname.service: Deactivated successfully. Jan 23 18:29:06.661661 systemd[1]: Stopped flatcar-metadata-hostname.service - Flatcar Metadata Hostname Agent. Jan 23 18:29:06.666428 systemd[1]: Stopping ignition-mount.service - Ignition (mount)... Jan 23 18:29:06.667501 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Jan 23 18:29:06.670000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:06.667726 systemd[1]: Stopped kmod-static-nodes.service - Create List of Static Device Nodes. Jan 23 18:29:06.673588 systemd[1]: Stopping sysroot-boot.service - /sysroot/boot... Jan 23 18:29:06.676385 systemd[1]: systemd-tmpfiles-setup.service: Deactivated successfully. Jan 23 18:29:06.676625 systemd[1]: Stopped systemd-tmpfiles-setup.service - Create System Files and Directories. Jan 23 18:29:06.679000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:06.679650 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Jan 23 18:29:06.680476 systemd[1]: Stopped systemd-udev-trigger.service - Coldplug All udev Devices. Jan 23 18:29:06.681000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:06.682000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:06.681972 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Jan 23 18:29:06.682138 systemd[1]: Stopped dracut-pre-trigger.service - dracut pre-trigger hook. Jan 23 18:29:06.694629 systemd[1]: initrd-cleanup.service: Deactivated successfully. Jan 23 18:29:06.696080 systemd[1]: Finished initrd-cleanup.service - Cleaning Up and Shutting Down Daemons. Jan 23 18:29:06.698000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:06.698000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:06.713129 ignition[1131]: INFO : Ignition 2.24.0 Jan 23 18:29:06.713129 ignition[1131]: INFO : Stage: umount Jan 23 18:29:06.718424 ignition[1131]: INFO : no configs at "/usr/lib/ignition/base.d" Jan 23 18:29:06.718424 ignition[1131]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/hetzner" Jan 23 18:29:06.718424 ignition[1131]: INFO : umount: umount passed Jan 23 18:29:06.718424 ignition[1131]: INFO : Ignition finished successfully Jan 23 18:29:06.719000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:06.722000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:06.725000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:06.716577 systemd[1]: ignition-mount.service: Deactivated successfully. Jan 23 18:29:06.728000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:06.716811 systemd[1]: Stopped ignition-mount.service - Ignition (mount). Jan 23 18:29:06.720410 systemd[1]: ignition-disks.service: Deactivated successfully. Jan 23 18:29:06.720540 systemd[1]: Stopped ignition-disks.service - Ignition (disks). Jan 23 18:29:06.733000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:06.724419 systemd[1]: ignition-kargs.service: Deactivated successfully. Jan 23 18:29:06.724534 systemd[1]: Stopped ignition-kargs.service - Ignition (kargs). Jan 23 18:29:06.725561 systemd[1]: ignition-fetch.service: Deactivated successfully. Jan 23 18:29:06.725678 systemd[1]: Stopped ignition-fetch.service - Ignition (fetch). Jan 23 18:29:06.728456 systemd[1]: Stopped target network.target - Network. Jan 23 18:29:06.729570 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Jan 23 18:29:06.729708 systemd[1]: Stopped ignition-fetch-offline.service - Ignition (fetch-offline). Jan 23 18:29:06.733435 systemd[1]: Stopped target paths.target - Path Units. Jan 23 18:29:06.737354 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Jan 23 18:29:06.744000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:06.737475 systemd[1]: Stopped systemd-ask-password-console.path - Dispatch Password Requests to Console Directory Watch. Jan 23 18:29:06.745000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup-pre comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:06.738317 systemd[1]: Stopped target slices.target - Slice Units. Jan 23 18:29:06.739138 systemd[1]: Stopped target sockets.target - Socket Units. Jan 23 18:29:06.740357 systemd[1]: iscsid.socket: Deactivated successfully. Jan 23 18:29:06.740444 systemd[1]: Closed iscsid.socket - Open-iSCSI iscsid Socket. Jan 23 18:29:06.741487 systemd[1]: iscsiuio.socket: Deactivated successfully. Jan 23 18:29:06.741563 systemd[1]: Closed iscsiuio.socket - Open-iSCSI iscsiuio Socket. Jan 23 18:29:06.742556 systemd[1]: systemd-journald-audit.socket: Deactivated successfully. Jan 23 18:29:06.742615 systemd[1]: Closed systemd-journald-audit.socket - Journal Audit Socket. Jan 23 18:29:06.743644 systemd[1]: ignition-setup.service: Deactivated successfully. Jan 23 18:29:06.743760 systemd[1]: Stopped ignition-setup.service - Ignition (setup). Jan 23 18:29:06.744798 systemd[1]: ignition-setup-pre.service: Deactivated successfully. Jan 23 18:29:06.744883 systemd[1]: Stopped ignition-setup-pre.service - Ignition env setup. Jan 23 18:29:06.746065 systemd[1]: Stopping systemd-networkd.service - Network Configuration... Jan 23 18:29:06.747913 systemd[1]: Stopping systemd-resolved.service - Network Name Resolution... Jan 23 18:29:06.753722 systemd[1]: sysroot-boot.mount: Deactivated successfully. Jan 23 18:29:06.755005 systemd[1]: sysroot-boot.service: Deactivated successfully. Jan 23 18:29:06.755211 systemd[1]: Stopped sysroot-boot.service - /sysroot/boot. Jan 23 18:29:06.756000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:06.757000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:06.757186 systemd[1]: initrd-setup-root.service: Deactivated successfully. Jan 23 18:29:06.757293 systemd[1]: Stopped initrd-setup-root.service - Root filesystem setup. Jan 23 18:29:06.759773 systemd[1]: systemd-resolved.service: Deactivated successfully. Jan 23 18:29:06.759000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:06.759888 systemd[1]: Stopped systemd-resolved.service - Network Name Resolution. Jan 23 18:29:06.762000 audit: BPF prog-id=6 op=UNLOAD Jan 23 18:29:06.761501 systemd[1]: systemd-networkd.service: Deactivated successfully. Jan 23 18:29:06.762000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:06.761620 systemd[1]: Stopped systemd-networkd.service - Network Configuration. Jan 23 18:29:06.764000 audit: BPF prog-id=9 op=UNLOAD Jan 23 18:29:06.763656 systemd[1]: Stopped target network-pre.target - Preparation for Network. Jan 23 18:29:06.764793 systemd[1]: systemd-networkd.socket: Deactivated successfully. Jan 23 18:29:06.764830 systemd[1]: Closed systemd-networkd.socket - Network Service Netlink Socket. Jan 23 18:29:06.767345 systemd[1]: Stopping network-cleanup.service - Network Cleanup... Jan 23 18:29:06.767833 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Jan 23 18:29:06.770000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:06.767880 systemd[1]: Stopped parse-ip-for-networkd.service - Write systemd-networkd units from cmdline. Jan 23 18:29:06.771000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:06.770367 systemd[1]: systemd-sysctl.service: Deactivated successfully. Jan 23 18:29:06.772000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:06.770410 systemd[1]: Stopped systemd-sysctl.service - Apply Kernel Variables. Jan 23 18:29:06.771856 systemd[1]: systemd-modules-load.service: Deactivated successfully. Jan 23 18:29:06.771897 systemd[1]: Stopped systemd-modules-load.service - Load Kernel Modules. Jan 23 18:29:06.772633 systemd[1]: Stopping systemd-udevd.service - Rule-based Manager for Device Events and Files... Jan 23 18:29:06.787460 systemd[1]: systemd-udevd.service: Deactivated successfully. Jan 23 18:29:06.787610 systemd[1]: Stopped systemd-udevd.service - Rule-based Manager for Device Events and Files. Jan 23 18:29:06.788000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:06.790445 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Jan 23 18:29:06.790495 systemd[1]: Closed systemd-udevd-control.socket - udev Control Socket. Jan 23 18:29:06.790851 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Jan 23 18:29:06.793000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:06.790880 systemd[1]: Closed systemd-udevd-kernel.socket - udev Kernel Socket. Jan 23 18:29:06.791948 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Jan 23 18:29:06.795000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:06.791990 systemd[1]: Stopped dracut-pre-udev.service - dracut pre-udev hook. Jan 23 18:29:06.796000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:06.794892 systemd[1]: dracut-cmdline.service: Deactivated successfully. Jan 23 18:29:06.794940 systemd[1]: Stopped dracut-cmdline.service - dracut cmdline hook. Jan 23 18:29:06.796533 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Jan 23 18:29:06.796576 systemd[1]: Stopped dracut-cmdline-ask.service - dracut ask for additional cmdline parameters. Jan 23 18:29:06.799706 systemd[1]: Starting initrd-udevadm-cleanup-db.service - Cleanup udev Database... Jan 23 18:29:06.803105 systemd[1]: systemd-network-generator.service: Deactivated successfully. Jan 23 18:29:06.803000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:06.803229 systemd[1]: Stopped systemd-network-generator.service - Generate network units from Kernel command line. Jan 23 18:29:06.804241 systemd[1]: systemd-tmpfiles-setup-dev.service: Deactivated successfully. Jan 23 18:29:06.806000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:06.804374 systemd[1]: Stopped systemd-tmpfiles-setup-dev.service - Create Static Device Nodes in /dev. Jan 23 18:29:06.807000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:06.806359 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Jan 23 18:29:06.806408 systemd[1]: Stopped systemd-vconsole-setup.service - Virtual Console Setup. Jan 23 18:29:06.808022 systemd[1]: network-cleanup.service: Deactivated successfully. Jan 23 18:29:06.810000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:06.810337 systemd[1]: Stopped network-cleanup.service - Network Cleanup. Jan 23 18:29:06.815970 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Jan 23 18:29:06.816000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:06.816000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:06.816093 systemd[1]: Finished initrd-udevadm-cleanup-db.service - Cleanup udev Database. Jan 23 18:29:06.816692 systemd[1]: Reached target initrd-switch-root.target - Switch Root. Jan 23 18:29:06.818464 systemd[1]: Starting initrd-switch-root.service - Switch Root... Jan 23 18:29:06.850312 systemd[1]: Switching root. Jan 23 18:29:06.889121 systemd-journald[321]: Journal stopped Jan 23 18:29:08.407956 systemd-journald[321]: Received SIGTERM from PID 1 (systemd). Jan 23 18:29:08.408024 kernel: SELinux: policy capability network_peer_controls=1 Jan 23 18:29:08.408042 kernel: SELinux: policy capability open_perms=1 Jan 23 18:29:08.408055 kernel: SELinux: policy capability extended_socket_class=1 Jan 23 18:29:08.408065 kernel: SELinux: policy capability always_check_network=0 Jan 23 18:29:08.408073 kernel: SELinux: policy capability cgroup_seclabel=1 Jan 23 18:29:08.408085 kernel: SELinux: policy capability nnp_nosuid_transition=1 Jan 23 18:29:08.408094 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Jan 23 18:29:08.408106 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Jan 23 18:29:08.408115 kernel: SELinux: policy capability userspace_initial_context=0 Jan 23 18:29:08.408125 systemd[1]: Successfully loaded SELinux policy in 74.950ms. Jan 23 18:29:08.408140 systemd[1]: Relabeled /dev/, /dev/shm/, /run/ in 16.428ms. Jan 23 18:29:08.408150 systemd[1]: systemd 257.9 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +IPE +SMACK +SECCOMP -GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL +ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBCRYPTSETUP_PLUGINS +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE +TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -BTF -XKBCOMMON +UTMP -SYSVINIT +LIBARCHIVE) Jan 23 18:29:08.408162 systemd[1]: Detected virtualization kvm. Jan 23 18:29:08.408172 systemd[1]: Detected architecture x86-64. Jan 23 18:29:08.408182 systemd[1]: Detected first boot. Jan 23 18:29:08.408192 systemd[1]: Hostname set to . Jan 23 18:29:08.408202 systemd[1]: Initializing machine ID from SMBIOS/DMI UUID. Jan 23 18:29:08.408211 zram_generator::config[1174]: No configuration found. Jan 23 18:29:08.408227 kernel: Guest personality initialized and is inactive Jan 23 18:29:08.408236 kernel: VMCI host device registered (name=vmci, major=10, minor=258) Jan 23 18:29:08.408248 kernel: Initialized host personality Jan 23 18:29:08.408275 kernel: NET: Registered PF_VSOCK protocol family Jan 23 18:29:08.408285 systemd[1]: Populated /etc with preset unit settings. Jan 23 18:29:08.408294 systemd[1]: initrd-switch-root.service: Deactivated successfully. Jan 23 18:29:08.408304 systemd[1]: Stopped initrd-switch-root.service - Switch Root. Jan 23 18:29:08.408319 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Jan 23 18:29:08.408332 systemd[1]: Created slice system-addon\x2dconfig.slice - Slice /system/addon-config. Jan 23 18:29:08.408356 systemd[1]: Created slice system-addon\x2drun.slice - Slice /system/addon-run. Jan 23 18:29:08.408367 systemd[1]: Created slice system-getty.slice - Slice /system/getty. Jan 23 18:29:08.408376 systemd[1]: Created slice system-modprobe.slice - Slice /system/modprobe. Jan 23 18:29:08.408386 systemd[1]: Created slice system-serial\x2dgetty.slice - Slice /system/serial-getty. Jan 23 18:29:08.408395 systemd[1]: Created slice system-system\x2dcloudinit.slice - Slice /system/system-cloudinit. Jan 23 18:29:08.408408 systemd[1]: Created slice system-systemd\x2dfsck.slice - Slice /system/systemd-fsck. Jan 23 18:29:08.408417 systemd[1]: Created slice user.slice - User and Session Slice. Jan 23 18:29:08.408427 systemd[1]: Started clevis-luks-askpass.path - Forward Password Requests to Clevis Directory Watch. Jan 23 18:29:08.408437 systemd[1]: Started systemd-ask-password-console.path - Dispatch Password Requests to Console Directory Watch. Jan 23 18:29:08.408447 systemd[1]: Started systemd-ask-password-wall.path - Forward Password Requests to Wall Directory Watch. Jan 23 18:29:08.408457 systemd[1]: Set up automount boot.automount - Boot partition Automount Point. Jan 23 18:29:08.408467 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount - Arbitrary Executable File Formats File System Automount Point. Jan 23 18:29:08.408479 systemd[1]: Expecting device dev-disk-by\x2dlabel-OEM.device - /dev/disk/by-label/OEM... Jan 23 18:29:08.408489 systemd[1]: Expecting device dev-ttyS0.device - /dev/ttyS0... Jan 23 18:29:08.408499 systemd[1]: Reached target cryptsetup-pre.target - Local Encrypted Volumes (Pre). Jan 23 18:29:08.408509 systemd[1]: Reached target cryptsetup.target - Local Encrypted Volumes. Jan 23 18:29:08.408518 systemd[1]: Stopped target initrd-switch-root.target - Switch Root. Jan 23 18:29:08.408529 systemd[1]: Stopped target initrd-fs.target - Initrd File Systems. Jan 23 18:29:08.408540 systemd[1]: Stopped target initrd-root-fs.target - Initrd Root File System. Jan 23 18:29:08.408550 systemd[1]: Reached target integritysetup.target - Local Integrity Protected Volumes. Jan 23 18:29:08.408560 systemd[1]: Reached target remote-cryptsetup.target - Remote Encrypted Volumes. Jan 23 18:29:08.408571 systemd[1]: Reached target remote-fs.target - Remote File Systems. Jan 23 18:29:08.408580 systemd[1]: Reached target remote-veritysetup.target - Remote Verity Protected Volumes. Jan 23 18:29:08.408590 systemd[1]: Reached target slices.target - Slice Units. Jan 23 18:29:08.408602 systemd[1]: Reached target swap.target - Swaps. Jan 23 18:29:08.408611 systemd[1]: Reached target veritysetup.target - Local Verity Protected Volumes. Jan 23 18:29:08.408621 systemd[1]: Listening on systemd-coredump.socket - Process Core Dump Socket. Jan 23 18:29:08.408631 systemd[1]: Listening on systemd-creds.socket - Credential Encryption/Decryption. Jan 23 18:29:08.408641 systemd[1]: Listening on systemd-journald-audit.socket - Journal Audit Socket. Jan 23 18:29:08.408650 systemd[1]: Listening on systemd-mountfsd.socket - DDI File System Mounter Socket. Jan 23 18:29:08.408660 systemd[1]: Listening on systemd-networkd.socket - Network Service Netlink Socket. Jan 23 18:29:08.408672 systemd[1]: Listening on systemd-nsresourced.socket - Namespace Resource Manager Socket. Jan 23 18:29:08.408681 systemd[1]: Listening on systemd-oomd.socket - Userspace Out-Of-Memory (OOM) Killer Socket. Jan 23 18:29:08.408693 systemd[1]: Listening on systemd-udevd-control.socket - udev Control Socket. Jan 23 18:29:08.408703 systemd[1]: Listening on systemd-udevd-kernel.socket - udev Kernel Socket. Jan 23 18:29:08.408712 systemd[1]: Listening on systemd-userdbd.socket - User Database Manager Socket. Jan 23 18:29:08.408722 systemd[1]: Mounting dev-hugepages.mount - Huge Pages File System... Jan 23 18:29:08.408731 systemd[1]: Mounting dev-mqueue.mount - POSIX Message Queue File System... Jan 23 18:29:08.408753 systemd[1]: Mounting media.mount - External Media Directory... Jan 23 18:29:08.408763 systemd[1]: proc-xen.mount - /proc/xen was skipped because of an unmet condition check (ConditionVirtualization=xen). Jan 23 18:29:08.408774 systemd[1]: Mounting sys-kernel-debug.mount - Kernel Debug File System... Jan 23 18:29:08.408783 systemd[1]: Mounting sys-kernel-tracing.mount - Kernel Trace File System... Jan 23 18:29:08.408793 systemd[1]: Mounting tmp.mount - Temporary Directory /tmp... Jan 23 18:29:08.408803 systemd[1]: var-lib-machines.mount - Virtual Machine and Container Storage (Compatibility) was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Jan 23 18:29:08.408815 systemd[1]: Reached target machines.target - Containers. Jan 23 18:29:08.408825 systemd[1]: Starting flatcar-tmpfiles.service - Create missing system files... Jan 23 18:29:08.408834 systemd[1]: ignition-delete-config.service - Ignition (delete config) was skipped because no trigger condition checks were met. Jan 23 18:29:08.408844 systemd[1]: Starting kmod-static-nodes.service - Create List of Static Device Nodes... Jan 23 18:29:08.408855 systemd[1]: Starting modprobe@configfs.service - Load Kernel Module configfs... Jan 23 18:29:08.408864 systemd[1]: Starting modprobe@dm_mod.service - Load Kernel Module dm_mod... Jan 23 18:29:08.408874 systemd[1]: Starting modprobe@drm.service - Load Kernel Module drm... Jan 23 18:29:08.408885 systemd[1]: Starting modprobe@efi_pstore.service - Load Kernel Module efi_pstore... Jan 23 18:29:08.408895 systemd[1]: Starting modprobe@fuse.service - Load Kernel Module fuse... Jan 23 18:29:08.408905 systemd[1]: Starting modprobe@loop.service - Load Kernel Module loop... Jan 23 18:29:08.408917 systemd[1]: setup-nsswitch.service - Create /etc/nsswitch.conf was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Jan 23 18:29:08.408929 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Jan 23 18:29:08.408939 systemd[1]: Stopped systemd-fsck-root.service - File System Check on Root Device. Jan 23 18:29:08.408949 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Jan 23 18:29:08.408958 systemd[1]: Stopped systemd-fsck-usr.service. Jan 23 18:29:08.408969 systemd[1]: systemd-hibernate-clear.service - Clear Stale Hibernate Storage Info was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/HibernateLocation-8cf2644b-4b0b-428f-9387-6d876050dc67). Jan 23 18:29:08.408978 systemd[1]: Starting systemd-journald.service - Journal Service... Jan 23 18:29:08.408990 systemd[1]: Starting systemd-modules-load.service - Load Kernel Modules... Jan 23 18:29:08.409000 kernel: fuse: init (API version 7.41) Jan 23 18:29:08.409010 systemd[1]: Starting systemd-network-generator.service - Generate network units from Kernel command line... Jan 23 18:29:08.409020 systemd[1]: Starting systemd-remount-fs.service - Remount Root and Kernel File Systems... Jan 23 18:29:08.409030 systemd[1]: Starting systemd-udev-load-credentials.service - Load udev Rules from Credentials... Jan 23 18:29:08.409040 systemd[1]: Starting systemd-udev-trigger.service - Coldplug All udev Devices... Jan 23 18:29:08.409050 kernel: ACPI: bus type drm_connector registered Jan 23 18:29:08.409059 systemd[1]: xenserver-pv-version.service - Set fake PV driver version for XenServer was skipped because of an unmet condition check (ConditionVirtualization=xen). Jan 23 18:29:08.409071 systemd[1]: Mounted dev-hugepages.mount - Huge Pages File System. Jan 23 18:29:08.409081 systemd[1]: Mounted dev-mqueue.mount - POSIX Message Queue File System. Jan 23 18:29:08.409092 systemd[1]: Mounted media.mount - External Media Directory. Jan 23 18:29:08.409104 systemd[1]: Mounted sys-kernel-debug.mount - Kernel Debug File System. Jan 23 18:29:08.409117 systemd[1]: Mounted sys-kernel-tracing.mount - Kernel Trace File System. Jan 23 18:29:08.409127 systemd[1]: Mounted tmp.mount - Temporary Directory /tmp. Jan 23 18:29:08.409137 systemd[1]: Finished kmod-static-nodes.service - Create List of Static Device Nodes. Jan 23 18:29:08.409147 systemd[1]: modprobe@configfs.service: Deactivated successfully. Jan 23 18:29:08.409157 systemd[1]: Finished modprobe@configfs.service - Load Kernel Module configfs. Jan 23 18:29:08.409167 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jan 23 18:29:08.409176 systemd[1]: Finished modprobe@dm_mod.service - Load Kernel Module dm_mod. Jan 23 18:29:08.409188 systemd[1]: modprobe@drm.service: Deactivated successfully. Jan 23 18:29:08.409198 systemd[1]: Finished modprobe@drm.service - Load Kernel Module drm. Jan 23 18:29:08.409208 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jan 23 18:29:08.409218 systemd[1]: Finished modprobe@efi_pstore.service - Load Kernel Module efi_pstore. Jan 23 18:29:08.409227 systemd[1]: modprobe@fuse.service: Deactivated successfully. Jan 23 18:29:08.409237 systemd[1]: Finished modprobe@fuse.service - Load Kernel Module fuse. Jan 23 18:29:08.409247 systemd[1]: modprobe@loop.service: Deactivated successfully. Jan 23 18:29:08.409258 systemd[1]: Finished modprobe@loop.service - Load Kernel Module loop. Jan 23 18:29:08.411286 systemd[1]: Finished systemd-modules-load.service - Load Kernel Modules. Jan 23 18:29:08.411297 systemd[1]: Finished systemd-network-generator.service - Generate network units from Kernel command line. Jan 23 18:29:08.411326 systemd-journald[1243]: Collecting audit messages is enabled. Jan 23 18:29:08.411348 systemd[1]: Finished systemd-remount-fs.service - Remount Root and Kernel File Systems. Jan 23 18:29:08.411367 systemd[1]: Finished systemd-udev-load-credentials.service - Load udev Rules from Credentials. Jan 23 18:29:08.411380 systemd[1]: Reached target network-pre.target - Preparation for Network. Jan 23 18:29:08.411390 systemd-journald[1243]: Journal started Jan 23 18:29:08.411407 systemd-journald[1243]: Runtime Journal (/run/log/journal/2b562402d7a1448ca32ed48ce7177adf) is 8M, max 76M, 68M free. Jan 23 18:29:08.130000 audit[1]: EVENT_LISTENER pid=1 uid=0 auid=4294967295 tty=(none) ses=4294967295 subj=system_u:system_r:kernel_t:s0 comm="systemd" exe="/usr/lib/systemd/systemd" nl-mcgrp=1 op=connect res=1 Jan 23 18:29:08.251000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:08.255000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:08.259000 audit: BPF prog-id=14 op=UNLOAD Jan 23 18:29:08.259000 audit: BPF prog-id=13 op=UNLOAD Jan 23 18:29:08.265000 audit: BPF prog-id=15 op=LOAD Jan 23 18:29:08.266000 audit: BPF prog-id=16 op=LOAD Jan 23 18:29:08.266000 audit: BPF prog-id=17 op=LOAD Jan 23 18:29:08.358000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:08.365000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:08.365000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:08.373000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:08.373000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:08.378000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:08.378000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:08.385000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:08.385000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:08.389000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:08.389000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:08.394000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:08.394000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:08.397000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:08.401000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:08.403000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Jan 23 18:29:08.403000 audit[1243]: SYSCALL arch=c000003e syscall=46 success=yes exit=60 a0=4 a1=7fff7c529ca0 a2=4000 a3=0 items=0 ppid=1 pid=1243 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 23 18:29:08.403000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Jan 23 18:29:08.405000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:08.408000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-load-credentials comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:07.946158 systemd[1]: Queued start job for default target multi-user.target. Jan 23 18:29:07.964600 systemd[1]: Unnecessary job was removed for dev-sda6.device - /dev/sda6. Jan 23 18:29:07.965840 systemd[1]: systemd-journald.service: Deactivated successfully. Jan 23 18:29:08.415303 systemd[1]: Listening on systemd-importd.socket - Disk Image Download Service Socket. Jan 23 18:29:08.415325 systemd[1]: remount-root.service - Remount Root File System was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Jan 23 18:29:08.424006 systemd[1]: Reached target local-fs.target - Local File Systems. Jan 23 18:29:08.424068 systemd[1]: Listening on systemd-sysext.socket - System Extension Image Management. Jan 23 18:29:08.424089 systemd[1]: systemd-binfmt.service - Set Up Additional Binary Formats was skipped because no trigger condition checks were met. Jan 23 18:29:08.427278 systemd[1]: systemd-confext.service - Merge System Configuration Images into /etc/ was skipped because no trigger condition checks were met. Jan 23 18:29:08.437219 systemd[1]: Starting systemd-hwdb-update.service - Rebuild Hardware Database... Jan 23 18:29:08.437251 systemd[1]: systemd-pstore.service - Platform Persistent Storage Archival was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jan 23 18:29:08.445173 systemd[1]: Starting systemd-random-seed.service - Load/Save OS Random Seed... Jan 23 18:29:08.445206 systemd[1]: systemd-repart.service - Repartition Root Disk was skipped because no trigger condition checks were met. Jan 23 18:29:08.451774 systemd[1]: Starting systemd-sysctl.service - Apply Kernel Variables... Jan 23 18:29:08.458513 systemd[1]: Starting systemd-sysext.service - Merge System Extension Images into /usr/ and /opt/... Jan 23 18:29:08.458544 systemd[1]: Started systemd-journald.service - Journal Service. Jan 23 18:29:08.460000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:08.462000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:08.462500 systemd[1]: Finished flatcar-tmpfiles.service - Create missing system files. Jan 23 18:29:08.478000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:08.478605 systemd[1]: Finished systemd-random-seed.service - Load/Save OS Random Seed. Jan 23 18:29:08.483948 systemd[1]: Reached target first-boot-complete.target - First Boot Complete. Jan 23 18:29:08.487395 systemd[1]: Starting systemd-journal-flush.service - Flush Journal to Persistent Storage... Jan 23 18:29:08.492442 systemd[1]: Starting systemd-machine-id-commit.service - Save Transient machine-id to Disk... Jan 23 18:29:08.503398 kernel: loop1: detected capacity change from 0 to 50784 Jan 23 18:29:08.499888 systemd[1]: Starting systemd-sysusers.service - Create System Users... Jan 23 18:29:08.518907 systemd[1]: Finished systemd-sysctl.service - Apply Kernel Variables. Jan 23 18:29:08.519000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:08.521359 systemd-journald[1243]: Time spent on flushing to /var/log/journal/2b562402d7a1448ca32ed48ce7177adf is 46.472ms for 1348 entries. Jan 23 18:29:08.521359 systemd-journald[1243]: System Journal (/var/log/journal/2b562402d7a1448ca32ed48ce7177adf) is 8M, max 588.1M, 580.1M free. Jan 23 18:29:08.588979 systemd-journald[1243]: Received client request to flush runtime journal. Jan 23 18:29:08.589094 kernel: loop2: detected capacity change from 0 to 8 Jan 23 18:29:08.589120 kernel: loop3: detected capacity change from 0 to 111560 Jan 23 18:29:08.538000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:08.579000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:08.537479 systemd[1]: Finished systemd-udev-trigger.service - Coldplug All udev Devices. Jan 23 18:29:08.577932 systemd[1]: Finished systemd-machine-id-commit.service - Save Transient machine-id to Disk. Jan 23 18:29:08.592638 systemd[1]: Finished systemd-journal-flush.service - Flush Journal to Persistent Storage. Jan 23 18:29:08.594000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:08.600000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:08.600256 systemd[1]: Finished systemd-sysusers.service - Create System Users. Jan 23 18:29:08.602000 audit: BPF prog-id=18 op=LOAD Jan 23 18:29:08.603000 audit: BPF prog-id=19 op=LOAD Jan 23 18:29:08.603000 audit: BPF prog-id=20 op=LOAD Jan 23 18:29:08.606000 audit: BPF prog-id=21 op=LOAD Jan 23 18:29:08.604522 systemd[1]: Starting systemd-oomd.service - Userspace Out-Of-Memory (OOM) Killer... Jan 23 18:29:08.609421 systemd[1]: Starting systemd-resolved.service - Network Name Resolution... Jan 23 18:29:08.612484 systemd[1]: Starting systemd-tmpfiles-setup-dev.service - Create Static Device Nodes in /dev... Jan 23 18:29:08.618296 kernel: loop4: detected capacity change from 0 to 50784 Jan 23 18:29:08.618000 audit: BPF prog-id=22 op=LOAD Jan 23 18:29:08.619000 audit: BPF prog-id=23 op=LOAD Jan 23 18:29:08.619000 audit: BPF prog-id=24 op=LOAD Jan 23 18:29:08.620375 systemd[1]: Starting systemd-userdbd.service - User Database Manager... Jan 23 18:29:08.623000 audit: BPF prog-id=25 op=LOAD Jan 23 18:29:08.623000 audit: BPF prog-id=26 op=LOAD Jan 23 18:29:08.623000 audit: BPF prog-id=27 op=LOAD Jan 23 18:29:08.628859 systemd[1]: Starting systemd-nsresourced.service - Namespace Resource Manager... Jan 23 18:29:08.635294 kernel: loop5: detected capacity change from 0 to 8 Jan 23 18:29:08.643289 kernel: loop6: detected capacity change from 0 to 111560 Jan 23 18:29:08.656512 (sd-merge)[1320]: Using extensions 'containerd-flatcar.raw', 'docker-flatcar.raw', 'oem-hetzner.raw'. Jan 23 18:29:08.663908 systemd-tmpfiles[1319]: ACLs are not supported, ignoring. Jan 23 18:29:08.664156 systemd-tmpfiles[1319]: ACLs are not supported, ignoring. Jan 23 18:29:08.666664 (sd-merge)[1320]: Merged extensions into '/usr'. Jan 23 18:29:08.668000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:08.668408 systemd[1]: Started systemd-userdbd.service - User Database Manager. Jan 23 18:29:08.674000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:08.674775 systemd[1]: Finished systemd-sysext.service - Merge System Extension Images into /usr/ and /opt/. Jan 23 18:29:08.679433 systemd[1]: Starting ensure-sysext.service... Jan 23 18:29:08.681445 systemd[1]: Starting systemd-tmpfiles-setup.service - Create System Files and Directories... Jan 23 18:29:08.686000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:08.686725 systemd[1]: Finished systemd-tmpfiles-setup-dev.service - Create Static Device Nodes in /dev. Jan 23 18:29:08.706598 systemd-nsresourced[1322]: Not setting up BPF subsystem, as functionality has been disabled at compile time. Jan 23 18:29:08.706709 systemd[1]: Reload requested from client PID 1330 ('systemctl') (unit ensure-sysext.service)... Jan 23 18:29:08.706718 systemd[1]: Reloading... Jan 23 18:29:08.726272 systemd-tmpfiles[1331]: /usr/lib/tmpfiles.d/nfs-utils.conf:6: Duplicate line for path "/var/lib/nfs/sm", ignoring. Jan 23 18:29:08.727036 systemd-tmpfiles[1331]: /usr/lib/tmpfiles.d/nfs-utils.conf:7: Duplicate line for path "/var/lib/nfs/sm.bak", ignoring. Jan 23 18:29:08.727660 systemd-tmpfiles[1331]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Jan 23 18:29:08.731791 systemd-tmpfiles[1331]: ACLs are not supported, ignoring. Jan 23 18:29:08.732430 systemd-tmpfiles[1331]: ACLs are not supported, ignoring. Jan 23 18:29:08.747795 systemd-tmpfiles[1331]: Detected autofs mount point /boot during canonicalization of boot. Jan 23 18:29:08.749496 systemd-tmpfiles[1331]: Skipping /boot Jan 23 18:29:08.779442 systemd-tmpfiles[1331]: Detected autofs mount point /boot during canonicalization of boot. Jan 23 18:29:08.779576 systemd-tmpfiles[1331]: Skipping /boot Jan 23 18:29:08.813303 zram_generator::config[1377]: No configuration found. Jan 23 18:29:08.866387 systemd-oomd[1317]: No swap; memory pressure usage will be degraded Jan 23 18:29:08.866779 systemd-resolved[1318]: Positive Trust Anchors: Jan 23 18:29:08.866789 systemd-resolved[1318]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Jan 23 18:29:08.866793 systemd-resolved[1318]: . IN DS 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16 Jan 23 18:29:08.866814 systemd-resolved[1318]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 170.0.0.192.in-addr.arpa 171.0.0.192.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa ipv4only.arpa resolver.arpa corp home internal intranet lan local private test Jan 23 18:29:08.884488 systemd-resolved[1318]: Using system hostname 'ci-4547-1-0-a-6fe2345582'. Jan 23 18:29:08.981564 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Jan 23 18:29:08.981903 systemd[1]: Reloading finished in 274 ms. Jan 23 18:29:09.011053 systemd[1]: Started systemd-nsresourced.service - Namespace Resource Manager. Jan 23 18:29:09.011000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-nsresourced comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:09.012024 systemd[1]: Started systemd-oomd.service - Userspace Out-Of-Memory (OOM) Killer. Jan 23 18:29:09.012000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-oomd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:09.012537 systemd[1]: Started systemd-resolved.service - Network Name Resolution. Jan 23 18:29:09.012000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:09.013148 systemd[1]: Finished systemd-hwdb-update.service - Rebuild Hardware Database. Jan 23 18:29:09.013000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:09.023000 audit: BPF prog-id=28 op=LOAD Jan 23 18:29:09.029290 kernel: kauditd_printk_skb: 122 callbacks suppressed Jan 23 18:29:09.029331 kernel: audit: type=1334 audit(1769192949.023:153): prog-id=28 op=LOAD Jan 23 18:29:09.023000 audit: BPF prog-id=25 op=UNLOAD Jan 23 18:29:09.030771 kernel: audit: type=1334 audit(1769192949.023:154): prog-id=25 op=UNLOAD Jan 23 18:29:09.023000 audit: BPF prog-id=29 op=LOAD Jan 23 18:29:09.033556 kernel: audit: type=1334 audit(1769192949.023:155): prog-id=29 op=LOAD Jan 23 18:29:09.023000 audit: BPF prog-id=30 op=LOAD Jan 23 18:29:09.038227 kernel: audit: type=1334 audit(1769192949.023:156): prog-id=30 op=LOAD Jan 23 18:29:09.038254 kernel: audit: type=1334 audit(1769192949.024:157): prog-id=26 op=UNLOAD Jan 23 18:29:09.024000 audit: BPF prog-id=26 op=UNLOAD Jan 23 18:29:09.024000 audit: BPF prog-id=27 op=UNLOAD Jan 23 18:29:09.040999 systemd[1]: Finished systemd-tmpfiles-setup.service - Create System Files and Directories. Jan 23 18:29:09.041443 kernel: audit: type=1334 audit(1769192949.024:158): prog-id=27 op=UNLOAD Jan 23 18:29:09.027000 audit: BPF prog-id=31 op=LOAD Jan 23 18:29:09.046189 kernel: audit: type=1334 audit(1769192949.027:159): prog-id=31 op=LOAD Jan 23 18:29:09.046215 kernel: audit: type=1334 audit(1769192949.027:160): prog-id=21 op=UNLOAD Jan 23 18:29:09.046231 kernel: audit: type=1334 audit(1769192949.028:161): prog-id=32 op=LOAD Jan 23 18:29:09.046253 kernel: audit: type=1334 audit(1769192949.028:162): prog-id=22 op=UNLOAD Jan 23 18:29:09.027000 audit: BPF prog-id=21 op=UNLOAD Jan 23 18:29:09.028000 audit: BPF prog-id=32 op=LOAD Jan 23 18:29:09.028000 audit: BPF prog-id=22 op=UNLOAD Jan 23 18:29:09.028000 audit: BPF prog-id=33 op=LOAD Jan 23 18:29:09.028000 audit: BPF prog-id=34 op=LOAD Jan 23 18:29:09.028000 audit: BPF prog-id=23 op=UNLOAD Jan 23 18:29:09.028000 audit: BPF prog-id=24 op=UNLOAD Jan 23 18:29:09.030000 audit: BPF prog-id=35 op=LOAD Jan 23 18:29:09.030000 audit: BPF prog-id=18 op=UNLOAD Jan 23 18:29:09.030000 audit: BPF prog-id=36 op=LOAD Jan 23 18:29:09.030000 audit: BPF prog-id=37 op=LOAD Jan 23 18:29:09.030000 audit: BPF prog-id=19 op=UNLOAD Jan 23 18:29:09.030000 audit: BPF prog-id=20 op=UNLOAD Jan 23 18:29:09.030000 audit: BPF prog-id=38 op=LOAD Jan 23 18:29:09.030000 audit: BPF prog-id=15 op=UNLOAD Jan 23 18:29:09.031000 audit: BPF prog-id=39 op=LOAD Jan 23 18:29:09.031000 audit: BPF prog-id=40 op=LOAD Jan 23 18:29:09.031000 audit: BPF prog-id=16 op=UNLOAD Jan 23 18:29:09.031000 audit: BPF prog-id=17 op=UNLOAD Jan 23 18:29:09.054000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:09.066938 systemd[1]: Reached target nss-lookup.target - Host and Network Name Lookups. Jan 23 18:29:09.067454 systemd[1]: proc-xen.mount - /proc/xen was skipped because of an unmet condition check (ConditionVirtualization=xen). Jan 23 18:29:09.068782 systemd[1]: Starting audit-rules.service - Load Audit Rules... Jan 23 18:29:09.071431 systemd[1]: Starting clean-ca-certificates.service - Clean up broken links in /etc/ssl/certs... Jan 23 18:29:09.071847 systemd[1]: ignition-delete-config.service - Ignition (delete config) was skipped because no trigger condition checks were met. Jan 23 18:29:09.072811 systemd[1]: Starting modprobe@configfs.service - Load Kernel Module configfs... Jan 23 18:29:09.077568 systemd[1]: Starting modprobe@dm_mod.service - Load Kernel Module dm_mod... Jan 23 18:29:09.083327 systemd[1]: Starting modprobe@efi_pstore.service - Load Kernel Module efi_pstore... Jan 23 18:29:09.085124 systemd[1]: Starting modprobe@fuse.service - Load Kernel Module fuse... Jan 23 18:29:09.088462 systemd[1]: Starting modprobe@loop.service - Load Kernel Module loop... Jan 23 18:29:09.088897 systemd[1]: systemd-binfmt.service - Set Up Additional Binary Formats was skipped because no trigger condition checks were met. Jan 23 18:29:09.089035 systemd[1]: systemd-confext.service - Merge System Configuration Images into /etc/ was skipped because no trigger condition checks were met. Jan 23 18:29:09.089990 systemd[1]: Starting ldconfig.service - Rebuild Dynamic Linker Cache... Jan 23 18:29:09.091310 systemd[1]: systemd-hibernate-clear.service - Clear Stale Hibernate Storage Info was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/HibernateLocation-8cf2644b-4b0b-428f-9387-6d876050dc67). Jan 23 18:29:09.092000 audit: BPF prog-id=41 op=LOAD Jan 23 18:29:09.092432 systemd[1]: Starting systemd-journal-catalog-update.service - Rebuild Journal Catalog... Jan 23 18:29:09.093000 audit: BPF prog-id=42 op=LOAD Jan 23 18:29:09.094737 systemd[1]: Starting systemd-udevd.service - Rule-based Manager for Device Events and Files... Jan 23 18:29:09.095000 audit: BPF prog-id=7 op=UNLOAD Jan 23 18:29:09.097000 audit: BPF prog-id=8 op=UNLOAD Jan 23 18:29:09.100470 systemd[1]: Starting systemd-update-utmp.service - Record System Boot/Shutdown in UTMP... Jan 23 18:29:09.100776 systemd[1]: xenserver-pv-version.service - Set fake PV driver version for XenServer was skipped because of an unmet condition check (ConditionVirtualization=xen). Jan 23 18:29:09.102050 systemd[1]: modprobe@configfs.service: Deactivated successfully. Jan 23 18:29:09.102231 systemd[1]: Finished modprobe@configfs.service - Load Kernel Module configfs. Jan 23 18:29:09.103000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:09.103000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:09.113415 systemd[1]: Mounting sys-kernel-config.mount - Kernel Configuration File System... Jan 23 18:29:09.116593 systemd[1]: proc-xen.mount - /proc/xen was skipped because of an unmet condition check (ConditionVirtualization=xen). Jan 23 18:29:09.116724 systemd[1]: ignition-delete-config.service - Ignition (delete config) was skipped because no trigger condition checks were met. Jan 23 18:29:09.120921 systemd[1]: Starting modprobe@configfs.service - Load Kernel Module configfs... Jan 23 18:29:09.121372 systemd[1]: systemd-binfmt.service - Set Up Additional Binary Formats was skipped because no trigger condition checks were met. Jan 23 18:29:09.121505 systemd[1]: systemd-confext.service - Merge System Configuration Images into /etc/ was skipped because no trigger condition checks were met. Jan 23 18:29:09.121564 systemd[1]: systemd-hibernate-clear.service - Clear Stale Hibernate Storage Info was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/HibernateLocation-8cf2644b-4b0b-428f-9387-6d876050dc67). Jan 23 18:29:09.127000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:09.127000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:09.121621 systemd[1]: xenserver-pv-version.service - Set fake PV driver version for XenServer was skipped because of an unmet condition check (ConditionVirtualization=xen). Jan 23 18:29:09.125100 systemd[1]: modprobe@loop.service: Deactivated successfully. Jan 23 18:29:09.126634 systemd[1]: Finished modprobe@loop.service - Load Kernel Module loop. Jan 23 18:29:09.127592 systemd[1]: Mounted sys-kernel-config.mount - Kernel Configuration File System. Jan 23 18:29:09.139000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:09.139000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:09.138180 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jan 23 18:29:09.139431 systemd[1]: Finished modprobe@efi_pstore.service - Load Kernel Module efi_pstore. Jan 23 18:29:09.141704 systemd[1]: proc-xen.mount - /proc/xen was skipped because of an unmet condition check (ConditionVirtualization=xen). Jan 23 18:29:09.141910 systemd[1]: ignition-delete-config.service - Ignition (delete config) was skipped because no trigger condition checks were met. Jan 23 18:29:09.151362 systemd[1]: Starting modprobe@drm.service - Load Kernel Module drm... Jan 23 18:29:09.152000 audit[1427]: SYSTEM_BOOT pid=1427 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Jan 23 18:29:09.157321 systemd[1]: Starting modprobe@loop.service - Load Kernel Module loop... Jan 23 18:29:09.157738 systemd[1]: systemd-binfmt.service - Set Up Additional Binary Formats was skipped because no trigger condition checks were met. Jan 23 18:29:09.157879 systemd[1]: systemd-confext.service - Merge System Configuration Images into /etc/ was skipped because no trigger condition checks were met. Jan 23 18:29:09.157945 systemd[1]: systemd-hibernate-clear.service - Clear Stale Hibernate Storage Info was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/HibernateLocation-8cf2644b-4b0b-428f-9387-6d876050dc67). Jan 23 18:29:09.158022 systemd[1]: systemd-pstore.service - Platform Persistent Storage Archival was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jan 23 18:29:09.158088 systemd[1]: xenserver-pv-version.service - Set fake PV driver version for XenServer was skipped because of an unmet condition check (ConditionVirtualization=xen). Jan 23 18:29:09.163021 systemd-udevd[1426]: Using default interface naming scheme 'v257'. Jan 23 18:29:09.168171 systemd[1]: Finished ensure-sysext.service. Jan 23 18:29:09.168000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ensure-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:09.169121 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jan 23 18:29:09.171000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:09.171000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:09.172000 audit: BPF prog-id=43 op=LOAD Jan 23 18:29:09.170993 systemd[1]: Finished modprobe@dm_mod.service - Load Kernel Module dm_mod. Jan 23 18:29:09.181009 systemd[1]: Starting systemd-timesyncd.service - Network Time Synchronization... Jan 23 18:29:09.185219 systemd[1]: Finished systemd-update-utmp.service - Record System Boot/Shutdown in UTMP. Jan 23 18:29:09.188000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:09.203903 systemd[1]: Finished clean-ca-certificates.service - Clean up broken links in /etc/ssl/certs. Jan 23 18:29:09.204000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:09.205824 systemd[1]: modprobe@fuse.service: Deactivated successfully. Jan 23 18:29:09.206000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:09.206000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:09.206549 systemd[1]: Finished modprobe@fuse.service - Load Kernel Module fuse. Jan 23 18:29:09.207566 systemd[1]: modprobe@drm.service: Deactivated successfully. Jan 23 18:29:09.208000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:09.208000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:09.208251 systemd[1]: Finished modprobe@drm.service - Load Kernel Module drm. Jan 23 18:29:09.210551 systemd[1]: modprobe@loop.service: Deactivated successfully. Jan 23 18:29:09.214000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:09.214000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:09.214862 systemd[1]: Finished modprobe@loop.service - Load Kernel Module loop. Jan 23 18:29:09.220986 systemd[1]: Mounting sys-fs-fuse-connections.mount - FUSE Control File System... Jan 23 18:29:09.223000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Jan 23 18:29:09.223000 audit[1465]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffe7c59a1d0 a2=420 a3=0 items=0 ppid=1416 pid=1465 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/bin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 23 18:29:09.224000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:09.223000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Jan 23 18:29:09.223623 systemd[1]: systemd-repart.service - Repartition Root Disk was skipped because no trigger condition checks were met. Jan 23 18:29:09.225221 augenrules[1465]: No rules Jan 23 18:29:09.223649 systemd[1]: update-ca-certificates.service - Update CA bundle at /etc/ssl/certs/ca-certificates.crt was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Jan 23 18:29:09.224080 systemd[1]: Finished systemd-journal-catalog-update.service - Rebuild Journal Catalog. Jan 23 18:29:09.224714 systemd[1]: modprobe@configfs.service: Deactivated successfully. Jan 23 18:29:09.224939 systemd[1]: Finished modprobe@configfs.service - Load Kernel Module configfs. Jan 23 18:29:09.228434 systemd[1]: audit-rules.service: Deactivated successfully. Jan 23 18:29:09.228699 systemd[1]: Finished audit-rules.service - Load Audit Rules. Jan 23 18:29:09.237496 systemd[1]: Mounted sys-fs-fuse-connections.mount - FUSE Control File System. Jan 23 18:29:09.256906 systemd[1]: Started systemd-udevd.service - Rule-based Manager for Device Events and Files. Jan 23 18:29:09.262584 systemd[1]: Starting systemd-networkd.service - Network Configuration... Jan 23 18:29:09.296253 systemd[1]: Started systemd-timesyncd.service - Network Time Synchronization. Jan 23 18:29:09.297004 systemd[1]: Reached target time-set.target - System Time Set. Jan 23 18:29:09.370111 systemd-networkd[1477]: lo: Link UP Jan 23 18:29:09.370119 systemd-networkd[1477]: lo: Gained carrier Jan 23 18:29:09.377849 systemd[1]: Started systemd-networkd.service - Network Configuration. Jan 23 18:29:09.378577 systemd[1]: Reached target network.target - Network. Jan 23 18:29:09.381398 systemd[1]: Starting systemd-networkd-persistent-storage.service - Enable Persistent Storage in systemd-networkd... Jan 23 18:29:09.382588 systemd[1]: Starting systemd-networkd-wait-online.service - Wait for Network to be Configured... Jan 23 18:29:09.395495 systemd[1]: Condition check resulted in dev-ttyS0.device - /dev/ttyS0 being skipped. Jan 23 18:29:09.417965 systemd[1]: Finished systemd-networkd-persistent-storage.service - Enable Persistent Storage in systemd-networkd. Jan 23 18:29:09.419781 systemd-networkd[1477]: eth1: Found matching .network file, based on potentially unpredictable interface name: /usr/lib/systemd/network/zz-default.network Jan 23 18:29:09.419831 systemd-networkd[1477]: eth1: Configuring with /usr/lib/systemd/network/zz-default.network. Jan 23 18:29:09.421050 systemd-networkd[1477]: eth1: Link UP Jan 23 18:29:09.421184 systemd-networkd[1477]: eth1: Gained carrier Jan 23 18:29:09.421195 systemd-networkd[1477]: eth1: Found matching .network file, based on potentially unpredictable interface name: /usr/lib/systemd/network/zz-default.network Jan 23 18:29:09.430805 systemd-networkd[1477]: eth0: Found matching .network file, based on potentially unpredictable interface name: /usr/lib/systemd/network/zz-default.network Jan 23 18:29:09.430812 systemd-networkd[1477]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Jan 23 18:29:09.432812 systemd-networkd[1477]: eth0: Link UP Jan 23 18:29:09.437255 systemd-networkd[1477]: eth0: Gained carrier Jan 23 18:29:09.437342 systemd-networkd[1477]: eth0: Found matching .network file, based on potentially unpredictable interface name: /usr/lib/systemd/network/zz-default.network Jan 23 18:29:09.460508 systemd-networkd[1477]: eth1: DHCPv4 address 10.0.0.4/32 acquired from 10.0.0.1 Jan 23 18:29:09.462495 systemd-timesyncd[1454]: Network configuration changed, trying to establish connection. Jan 23 18:29:09.481536 kernel: mousedev: PS/2 mouse device common for all mice Jan 23 18:29:09.491349 systemd-networkd[1477]: eth0: DHCPv4 address 46.62.141.192/32, gateway 172.31.1.1 acquired from 172.31.1.1 Jan 23 18:29:09.491862 systemd-timesyncd[1454]: Network configuration changed, trying to establish connection. Jan 23 18:29:09.492173 systemd-timesyncd[1454]: Network configuration changed, trying to establish connection. Jan 23 18:29:09.517285 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXPWRBN:00/input/input4 Jan 23 18:29:09.531293 kernel: ACPI: button: Power Button [PWRF] Jan 23 18:29:09.578793 systemd[1]: Condition check resulted in dev-virtio\x2dports-org.qemu.guest_agent.0.device - /dev/virtio-ports/org.qemu.guest_agent.0 being skipped. Jan 23 18:29:09.579513 systemd[1]: proc-xen.mount - /proc/xen was skipped because of an unmet condition check (ConditionVirtualization=xen). Jan 23 18:29:09.579695 systemd[1]: ignition-delete-config.service - Ignition (delete config) was skipped because no trigger condition checks were met. Jan 23 18:29:09.581766 systemd[1]: Starting modprobe@dm_mod.service - Load Kernel Module dm_mod... Jan 23 18:29:09.583033 systemd[1]: Starting modprobe@efi_pstore.service - Load Kernel Module efi_pstore... Jan 23 18:29:09.588357 systemd[1]: Starting modprobe@loop.service - Load Kernel Module loop... Jan 23 18:29:09.588807 systemd[1]: systemd-binfmt.service - Set Up Additional Binary Formats was skipped because no trigger condition checks were met. Jan 23 18:29:09.589079 systemd[1]: systemd-confext.service - Merge System Configuration Images into /etc/ was skipped because no trigger condition checks were met. Jan 23 18:29:09.589143 systemd[1]: systemd-hibernate-clear.service - Clear Stale Hibernate Storage Info was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/HibernateLocation-8cf2644b-4b0b-428f-9387-6d876050dc67). Jan 23 18:29:09.589163 systemd[1]: update-ca-certificates.service - Update CA bundle at /etc/ssl/certs/ca-certificates.crt was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Jan 23 18:29:09.589171 systemd[1]: xenserver-pv-version.service - Set fake PV driver version for XenServer was skipped because of an unmet condition check (ConditionVirtualization=xen). Jan 23 18:29:09.599255 kernel: [drm] pci: virtio-vga detected at 0000:00:01.0 Jan 23 18:29:09.599315 kernel: Console: switching to colour dummy device 80x25 Jan 23 18:29:09.599328 kernel: virtio-pci 0000:00:01.0: vgaarb: deactivate vga console Jan 23 18:29:09.599570 kernel: [drm] features: -virgl +edid -resource_blob -host_visible Jan 23 18:29:09.599584 kernel: [drm] features: -context_init Jan 23 18:29:09.608347 kernel: [drm] number of scanouts: 1 Jan 23 18:29:09.608387 kernel: [drm] number of cap sets: 0 Jan 23 18:29:09.616564 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jan 23 18:29:09.616809 systemd[1]: Finished modprobe@dm_mod.service - Load Kernel Module dm_mod. Jan 23 18:29:09.630663 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jan 23 18:29:09.630886 systemd[1]: Finished modprobe@efi_pstore.service - Load Kernel Module efi_pstore. Jan 23 18:29:09.632241 systemd[1]: systemd-pstore.service - Platform Persistent Storage Archival was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jan 23 18:29:09.636347 kernel: [drm] Initialized virtio_gpu 0.1.0 for 0000:00:01.0 on minor 0 Jan 23 18:29:09.636882 systemd[1]: modprobe@loop.service: Deactivated successfully. Jan 23 18:29:09.637096 systemd[1]: Finished modprobe@loop.service - Load Kernel Module loop. Jan 23 18:29:09.637350 systemd[1]: systemd-repart.service - Repartition Root Disk was skipped because no trigger condition checks were met. Jan 23 18:29:09.644826 kernel: i801_smbus 0000:00:1f.3: Enabling SMBus device Jan 23 18:29:09.645131 kernel: i801_smbus 0000:00:1f.3: SMBus using PCI interrupt Jan 23 18:29:09.646206 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device - QEMU_HARDDISK OEM. Jan 23 18:29:09.648314 kernel: i2c i2c-0: Memory type 0x07 not supported yet, not instantiating SPD Jan 23 18:29:09.649411 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service - File System Check on /dev/disk/by-label/OEM... Jan 23 18:29:09.661723 kernel: fbcon: virtio_gpudrmfb (fb0) is primary device Jan 23 18:29:09.661783 kernel: Console: switching to colour frame buffer device 160x50 Jan 23 18:29:09.674060 kernel: virtio-pci 0000:00:01.0: [drm] fb0: virtio_gpudrmfb frame buffer device Jan 23 18:29:09.685989 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service - File System Check on /dev/disk/by-label/OEM. Jan 23 18:29:09.706997 ldconfig[1423]: /sbin/ldconfig: /usr/lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Jan 23 18:29:09.711859 systemd[1]: Finished ldconfig.service - Rebuild Dynamic Linker Cache. Jan 23 18:29:09.716330 systemd[1]: Starting systemd-update-done.service - Update is Completed... Jan 23 18:29:09.723302 kernel: EDAC MC: Ver: 3.0.0 Jan 23 18:29:09.740372 systemd[1]: Finished systemd-update-done.service - Update is Completed. Jan 23 18:29:09.740636 systemd[1]: Reached target sysinit.target - System Initialization. Jan 23 18:29:09.740820 systemd[1]: Started motdgen.path - Watch for update engine configuration changes. Jan 23 18:29:09.740904 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path - Watch for a cloud-config at /var/lib/flatcar-install/user_data. Jan 23 18:29:09.740970 systemd[1]: Started google-oslogin-cache.timer - NSS cache refresh timer. Jan 23 18:29:09.741144 systemd[1]: Started logrotate.timer - Daily rotation of log files. Jan 23 18:29:09.741380 systemd[1]: Started mdadm.timer - Weekly check for MD array's redundancy information.. Jan 23 18:29:09.742649 systemd[1]: Started systemd-sysupdate-reboot.timer - Reboot Automatically After System Update. Jan 23 18:29:09.742787 systemd[1]: Started systemd-sysupdate.timer - Automatic System Update. Jan 23 18:29:09.742840 systemd[1]: Started systemd-tmpfiles-clean.timer - Daily Cleanup of Temporary Directories. Jan 23 18:29:09.742890 systemd[1]: update-engine-stub.timer - Update Engine Stub Timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Jan 23 18:29:09.742912 systemd[1]: Reached target paths.target - Path Units. Jan 23 18:29:09.742957 systemd[1]: Reached target timers.target - Timer Units. Jan 23 18:29:09.744694 systemd[1]: Listening on dbus.socket - D-Bus System Message Bus Socket. Jan 23 18:29:09.746840 systemd[1]: Starting docker.socket - Docker Socket for the API... Jan 23 18:29:09.751227 systemd[1]: Listening on sshd-unix-local.socket - OpenSSH Server Socket (systemd-ssh-generator, AF_UNIX Local). Jan 23 18:29:09.753044 systemd[1]: Listening on sshd-vsock.socket - OpenSSH Server Socket (systemd-ssh-generator, AF_VSOCK). Jan 23 18:29:09.753128 systemd[1]: Reached target ssh-access.target - SSH Access Available. Jan 23 18:29:09.758104 systemd[1]: Listening on sshd.socket - OpenSSH Server Socket. Jan 23 18:29:09.759438 systemd[1]: Listening on systemd-hostnamed.socket - Hostname Service Socket. Jan 23 18:29:09.764395 systemd[1]: Listening on docker.socket - Docker Socket for the API. Jan 23 18:29:09.767994 systemd[1]: Reached target sockets.target - Socket Units. Jan 23 18:29:09.770876 systemd[1]: Reached target basic.target - Basic System. Jan 23 18:29:09.774105 systemd[1]: addon-config@oem.service - Configure Addon /oem was skipped because no trigger condition checks were met. Jan 23 18:29:09.774147 systemd[1]: addon-run@oem.service - Run Addon /oem was skipped because no trigger condition checks were met. Jan 23 18:29:09.776376 systemd[1]: Starting containerd.service - containerd container runtime... Jan 23 18:29:09.786303 systemd[1]: Starting coreos-metadata.service - Flatcar Metadata Agent... Jan 23 18:29:09.791861 systemd[1]: Starting dbus.service - D-Bus System Message Bus... Jan 23 18:29:09.797404 systemd[1]: Starting dracut-shutdown.service - Restore /run/initramfs on shutdown... Jan 23 18:29:09.801029 systemd[1]: Starting enable-oem-cloudinit.service - Enable cloudinit... Jan 23 18:29:09.806475 systemd[1]: Starting extend-filesystems.service - Extend Filesystems... Jan 23 18:29:09.808361 systemd[1]: flatcar-setup-environment.service - Modifies /etc/environment for CoreOS was skipped because of an unmet condition check (ConditionPathExists=/oem/bin/flatcar-setup-environment). Jan 23 18:29:09.812736 jq[1556]: false Jan 23 18:29:09.812448 systemd[1]: Starting google-oslogin-cache.service - NSS cache refresh... Jan 23 18:29:09.822243 systemd[1]: Starting motdgen.service - Generate /run/flatcar/motd... Jan 23 18:29:09.827216 systemd[1]: Started qemu-guest-agent.service - QEMU Guest Agent. Jan 23 18:29:09.840456 systemd[1]: Starting ssh-key-proc-cmdline.service - Install an ssh key from /proc/cmdline... Jan 23 18:29:09.844088 systemd[1]: Starting sshd-keygen.service - Generate sshd host keys... Jan 23 18:29:09.853443 systemd[1]: Starting systemd-logind.service - User Login Management... Jan 23 18:29:09.855352 systemd[1]: tcsd.service - TCG Core Services Daemon was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Jan 23 18:29:09.857472 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Jan 23 18:29:09.862224 systemd[1]: Starting update-engine.service - Update Engine... Jan 23 18:29:09.871569 systemd[1]: Starting update-ssh-keys-after-ignition.service - Run update-ssh-keys once after Ignition... Jan 23 18:29:09.878406 google_oslogin_nss_cache[1559]: oslogin_cache_refresh[1559]: Refreshing passwd entry cache Jan 23 18:29:09.878409 oslogin_cache_refresh[1559]: Refreshing passwd entry cache Jan 23 18:29:09.896530 google_oslogin_nss_cache[1559]: oslogin_cache_refresh[1559]: Failure getting users, quitting Jan 23 18:29:09.896530 google_oslogin_nss_cache[1559]: oslogin_cache_refresh[1559]: Produced empty passwd cache file, removing /etc/oslogin_passwd.cache.bak. Jan 23 18:29:09.896530 google_oslogin_nss_cache[1559]: oslogin_cache_refresh[1559]: Refreshing group entry cache Jan 23 18:29:09.896341 oslogin_cache_refresh[1559]: Failure getting users, quitting Jan 23 18:29:09.896365 oslogin_cache_refresh[1559]: Produced empty passwd cache file, removing /etc/oslogin_passwd.cache.bak. Jan 23 18:29:09.896417 oslogin_cache_refresh[1559]: Refreshing group entry cache Jan 23 18:29:09.897793 systemd[1]: Finished dracut-shutdown.service - Restore /run/initramfs on shutdown. Jan 23 18:29:09.898806 google_oslogin_nss_cache[1559]: oslogin_cache_refresh[1559]: Failure getting groups, quitting Jan 23 18:29:09.899304 oslogin_cache_refresh[1559]: Failure getting groups, quitting Jan 23 18:29:09.899631 google_oslogin_nss_cache[1559]: oslogin_cache_refresh[1559]: Produced empty group cache file, removing /etc/oslogin_group.cache.bak. Jan 23 18:29:09.899682 oslogin_cache_refresh[1559]: Produced empty group cache file, removing /etc/oslogin_group.cache.bak. Jan 23 18:29:09.900090 coreos-metadata[1553]: Jan 23 18:29:09.899 INFO Fetching http://169.254.169.254/hetzner/v1/metadata: Attempt #1 Jan 23 18:29:09.901870 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Jan 23 18:29:09.902081 systemd[1]: Condition check resulted in enable-oem-cloudinit.service - Enable cloudinit being skipped. Jan 23 18:29:09.903444 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Jan 23 18:29:09.909446 systemd[1]: Finished ssh-key-proc-cmdline.service - Install an ssh key from /proc/cmdline. Jan 23 18:29:09.911420 coreos-metadata[1553]: Jan 23 18:29:09.911 INFO Fetch successful Jan 23 18:29:09.911420 coreos-metadata[1553]: Jan 23 18:29:09.911 INFO Fetching http://169.254.169.254/hetzner/v1/metadata/private-networks: Attempt #1 Jan 23 18:29:09.911420 coreos-metadata[1553]: Jan 23 18:29:09.911 INFO Fetch successful Jan 23 18:29:09.911484 extend-filesystems[1558]: Found /dev/sda6 Jan 23 18:29:09.913215 systemd[1]: google-oslogin-cache.service: Deactivated successfully. Jan 23 18:29:09.913631 systemd[1]: Finished google-oslogin-cache.service - NSS cache refresh. Jan 23 18:29:09.923525 jq[1567]: true Jan 23 18:29:09.928578 extend-filesystems[1558]: Found /dev/sda9 Jan 23 18:29:09.940147 extend-filesystems[1558]: Checking size of /dev/sda9 Jan 23 18:29:09.954695 systemd[1]: motdgen.service: Deactivated successfully. Jan 23 18:29:09.956170 systemd[1]: Finished motdgen.service - Generate /run/flatcar/motd. Jan 23 18:29:09.978888 update_engine[1566]: I20260123 18:29:09.975524 1566 main.cc:92] Flatcar Update Engine starting Jan 23 18:29:09.979081 extend-filesystems[1558]: Resized partition /dev/sda9 Jan 23 18:29:09.980287 extend-filesystems[1602]: resize2fs 1.47.3 (8-Jul-2025) Jan 23 18:29:09.982888 systemd[1]: Starting systemd-vconsole-setup.service - Virtual Console Setup... Jan 23 18:29:10.003059 kernel: EXT4-fs (sda9): resizing filesystem from 1617920 to 18410491 blocks Jan 23 18:29:09.996454 systemd[1]: Started dbus.service - D-Bus System Message Bus. Jan 23 18:29:09.995051 dbus-daemon[1554]: [system] SELinux support is enabled Jan 23 18:29:10.005673 jq[1589]: true Jan 23 18:29:10.008986 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service - Load cloud-config from /usr/share/oem/cloud-config.yml was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Jan 23 18:29:10.013881 update_engine[1566]: I20260123 18:29:10.012372 1566 update_check_scheduler.cc:74] Next update check in 3m38s Jan 23 18:29:10.010526 systemd[1]: Reached target system-config.target - Load system-provided cloud configs. Jan 23 18:29:10.011919 systemd[1]: user-cloudinit-proc-cmdline.service - Load cloud-config from url defined in /proc/cmdline was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Jan 23 18:29:10.012036 systemd[1]: Reached target user-config.target - Load user-provided cloud configs. Jan 23 18:29:10.012803 systemd[1]: Started update-engine.service - Update Engine. Jan 23 18:29:10.028833 sshd_keygen[1577]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Jan 23 18:29:10.035403 systemd[1]: Started locksmithd.service - Cluster reboot manager. Jan 23 18:29:10.040842 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Jan 23 18:29:10.041075 systemd[1]: Stopped systemd-vconsole-setup.service - Virtual Console Setup. Jan 23 18:29:10.053806 systemd[1]: Starting systemd-vconsole-setup.service - Virtual Console Setup... Jan 23 18:29:10.084477 systemd-logind[1565]: New seat seat0. Jan 23 18:29:10.091020 systemd-logind[1565]: Watching system buttons on /dev/input/event3 (Power Button) Jan 23 18:29:10.091042 systemd-logind[1565]: Watching system buttons on /dev/input/event0 (AT Translated Set 2 keyboard) Jan 23 18:29:10.091331 systemd[1]: Started systemd-logind.service - User Login Management. Jan 23 18:29:10.122217 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Jan 23 18:29:10.122501 systemd[1]: Stopped systemd-vconsole-setup.service - Virtual Console Setup. Jan 23 18:29:10.128980 systemd[1]: Finished coreos-metadata.service - Flatcar Metadata Agent. Jan 23 18:29:10.132701 systemd[1]: packet-phone-home.service - Report Success to Packet was skipped because no trigger condition checks were met. Jan 23 18:29:10.137594 systemd[1]: Starting systemd-vconsole-setup.service - Virtual Console Setup... Jan 23 18:29:10.207248 systemd[1]: Finished sshd-keygen.service - Generate sshd host keys. Jan 23 18:29:10.215784 systemd[1]: Starting issuegen.service - Generate /run/issue... Jan 23 18:29:10.246315 bash[1646]: Updated "/home/core/.ssh/authorized_keys" Jan 23 18:29:10.246447 containerd[1590]: time="2026-01-23T18:29:10Z" level=warning msg="Ignoring unknown key in TOML" column=1 error="strict mode: fields in the document are missing in the target struct" file=/usr/share/containerd/config.toml key=subreaper row=8 Jan 23 18:29:10.246447 containerd[1590]: time="2026-01-23T18:29:10.245161238Z" level=info msg="starting containerd" revision=fcd43222d6b07379a4be9786bda52438f0dd16a1 version=v2.1.5 Jan 23 18:29:10.247323 systemd[1]: Finished update-ssh-keys-after-ignition.service - Run update-ssh-keys once after Ignition. Jan 23 18:29:10.254970 containerd[1590]: time="2026-01-23T18:29:10.254933762Z" level=warning msg="Configuration migrated from version 2, use `containerd config migrate` to avoid migration" t="6.51µs" Jan 23 18:29:10.254970 containerd[1590]: time="2026-01-23T18:29:10.254964852Z" level=info msg="loading plugin" id=io.containerd.content.v1.content type=io.containerd.content.v1 Jan 23 18:29:10.255027 containerd[1590]: time="2026-01-23T18:29:10.254996742Z" level=info msg="loading plugin" id=io.containerd.image-verifier.v1.bindir type=io.containerd.image-verifier.v1 Jan 23 18:29:10.255027 containerd[1590]: time="2026-01-23T18:29:10.255006332Z" level=info msg="loading plugin" id=io.containerd.internal.v1.opt type=io.containerd.internal.v1 Jan 23 18:29:10.256418 containerd[1590]: time="2026-01-23T18:29:10.255129772Z" level=info msg="loading plugin" id=io.containerd.warning.v1.deprecations type=io.containerd.warning.v1 Jan 23 18:29:10.256418 containerd[1590]: time="2026-01-23T18:29:10.255148182Z" level=info msg="loading plugin" id=io.containerd.snapshotter.v1.blockfile type=io.containerd.snapshotter.v1 Jan 23 18:29:10.256418 containerd[1590]: time="2026-01-23T18:29:10.255197212Z" level=info msg="skip loading plugin" error="no scratch file generator: skip plugin" id=io.containerd.snapshotter.v1.blockfile type=io.containerd.snapshotter.v1 Jan 23 18:29:10.256418 containerd[1590]: time="2026-01-23T18:29:10.255206852Z" level=info msg="loading plugin" id=io.containerd.snapshotter.v1.btrfs type=io.containerd.snapshotter.v1 Jan 23 18:29:10.256503 containerd[1590]: time="2026-01-23T18:29:10.256419613Z" level=info msg="skip loading plugin" error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" id=io.containerd.snapshotter.v1.btrfs type=io.containerd.snapshotter.v1 Jan 23 18:29:10.256503 containerd[1590]: time="2026-01-23T18:29:10.256433833Z" level=info msg="loading plugin" id=io.containerd.snapshotter.v1.devmapper type=io.containerd.snapshotter.v1 Jan 23 18:29:10.256503 containerd[1590]: time="2026-01-23T18:29:10.256443553Z" level=info msg="skip loading plugin" error="devmapper not configured: skip plugin" id=io.containerd.snapshotter.v1.devmapper type=io.containerd.snapshotter.v1 Jan 23 18:29:10.256503 containerd[1590]: time="2026-01-23T18:29:10.256449553Z" level=info msg="loading plugin" id=io.containerd.snapshotter.v1.erofs type=io.containerd.snapshotter.v1 Jan 23 18:29:10.256685 containerd[1590]: time="2026-01-23T18:29:10.256661883Z" level=info msg="skip loading plugin" error="EROFS unsupported, please `modprobe erofs`: skip plugin" id=io.containerd.snapshotter.v1.erofs type=io.containerd.snapshotter.v1 Jan 23 18:29:10.257243 containerd[1590]: time="2026-01-23T18:29:10.256699573Z" level=info msg="loading plugin" id=io.containerd.snapshotter.v1.native type=io.containerd.snapshotter.v1 Jan 23 18:29:10.257243 containerd[1590]: time="2026-01-23T18:29:10.256811233Z" level=info msg="loading plugin" id=io.containerd.snapshotter.v1.overlayfs type=io.containerd.snapshotter.v1 Jan 23 18:29:10.257243 containerd[1590]: time="2026-01-23T18:29:10.257029523Z" level=info msg="loading plugin" id=io.containerd.snapshotter.v1.zfs type=io.containerd.snapshotter.v1 Jan 23 18:29:10.257243 containerd[1590]: time="2026-01-23T18:29:10.257079343Z" level=info msg="skip loading plugin" error="lstat /var/lib/containerd/io.containerd.snapshotter.v1.zfs: no such file or directory: skip plugin" id=io.containerd.snapshotter.v1.zfs type=io.containerd.snapshotter.v1 Jan 23 18:29:10.257243 containerd[1590]: time="2026-01-23T18:29:10.257087463Z" level=info msg="loading plugin" id=io.containerd.event.v1.exchange type=io.containerd.event.v1 Jan 23 18:29:10.257243 containerd[1590]: time="2026-01-23T18:29:10.257125173Z" level=info msg="loading plugin" id=io.containerd.monitor.task.v1.cgroups type=io.containerd.monitor.task.v1 Jan 23 18:29:10.257444 containerd[1590]: time="2026-01-23T18:29:10.257373523Z" level=info msg="loading plugin" id=io.containerd.metadata.v1.bolt type=io.containerd.metadata.v1 Jan 23 18:29:10.258138 containerd[1590]: time="2026-01-23T18:29:10.257459323Z" level=info msg="metadata content store policy set" policy=shared Jan 23 18:29:10.259806 systemd[1]: Starting sshkeys.service... Jan 23 18:29:10.277547 containerd[1590]: time="2026-01-23T18:29:10.277515762Z" level=info msg="loading plugin" id=io.containerd.gc.v1.scheduler type=io.containerd.gc.v1 Jan 23 18:29:10.277984 containerd[1590]: time="2026-01-23T18:29:10.277946312Z" level=info msg="loading plugin" id=io.containerd.differ.v1.erofs type=io.containerd.differ.v1 Jan 23 18:29:10.278562 containerd[1590]: time="2026-01-23T18:29:10.278185392Z" level=info msg="skip loading plugin" error="could not find mkfs.erofs: exec: \"mkfs.erofs\": executable file not found in $PATH: skip plugin" id=io.containerd.differ.v1.erofs type=io.containerd.differ.v1 Jan 23 18:29:10.278562 containerd[1590]: time="2026-01-23T18:29:10.278225052Z" level=info msg="loading plugin" id=io.containerd.differ.v1.walking type=io.containerd.differ.v1 Jan 23 18:29:10.278562 containerd[1590]: time="2026-01-23T18:29:10.278235722Z" level=info msg="loading plugin" id=io.containerd.lease.v1.manager type=io.containerd.lease.v1 Jan 23 18:29:10.278562 containerd[1590]: time="2026-01-23T18:29:10.278244852Z" level=info msg="loading plugin" id=io.containerd.service.v1.containers-service type=io.containerd.service.v1 Jan 23 18:29:10.282545 containerd[1590]: time="2026-01-23T18:29:10.278253642Z" level=info msg="loading plugin" id=io.containerd.service.v1.content-service type=io.containerd.service.v1 Jan 23 18:29:10.282545 containerd[1590]: time="2026-01-23T18:29:10.278871552Z" level=info msg="loading plugin" id=io.containerd.service.v1.diff-service type=io.containerd.service.v1 Jan 23 18:29:10.282545 containerd[1590]: time="2026-01-23T18:29:10.278885142Z" level=info msg="loading plugin" id=io.containerd.service.v1.images-service type=io.containerd.service.v1 Jan 23 18:29:10.282545 containerd[1590]: time="2026-01-23T18:29:10.278904482Z" level=info msg="loading plugin" id=io.containerd.service.v1.introspection-service type=io.containerd.service.v1 Jan 23 18:29:10.282545 containerd[1590]: time="2026-01-23T18:29:10.278913932Z" level=info msg="loading plugin" id=io.containerd.service.v1.namespaces-service type=io.containerd.service.v1 Jan 23 18:29:10.282545 containerd[1590]: time="2026-01-23T18:29:10.278922342Z" level=info msg="loading plugin" id=io.containerd.service.v1.snapshots-service type=io.containerd.service.v1 Jan 23 18:29:10.282545 containerd[1590]: time="2026-01-23T18:29:10.278929182Z" level=info msg="loading plugin" id=io.containerd.shim.v1.manager type=io.containerd.shim.v1 Jan 23 18:29:10.282545 containerd[1590]: time="2026-01-23T18:29:10.278942252Z" level=info msg="loading plugin" id=io.containerd.runtime.v2.task type=io.containerd.runtime.v2 Jan 23 18:29:10.282545 containerd[1590]: time="2026-01-23T18:29:10.279047972Z" level=info msg="loading plugin" id=io.containerd.service.v1.tasks-service type=io.containerd.service.v1 Jan 23 18:29:10.282545 containerd[1590]: time="2026-01-23T18:29:10.279066122Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.containers type=io.containerd.grpc.v1 Jan 23 18:29:10.282545 containerd[1590]: time="2026-01-23T18:29:10.279076922Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.content type=io.containerd.grpc.v1 Jan 23 18:29:10.282545 containerd[1590]: time="2026-01-23T18:29:10.279084802Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.diff type=io.containerd.grpc.v1 Jan 23 18:29:10.282545 containerd[1590]: time="2026-01-23T18:29:10.279092502Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.events type=io.containerd.grpc.v1 Jan 23 18:29:10.282545 containerd[1590]: time="2026-01-23T18:29:10.279099712Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.images type=io.containerd.grpc.v1 Jan 23 18:29:10.282789 containerd[1590]: time="2026-01-23T18:29:10.279108932Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.introspection type=io.containerd.grpc.v1 Jan 23 18:29:10.282789 containerd[1590]: time="2026-01-23T18:29:10.279116712Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.leases type=io.containerd.grpc.v1 Jan 23 18:29:10.282789 containerd[1590]: time="2026-01-23T18:29:10.279125012Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.namespaces type=io.containerd.grpc.v1 Jan 23 18:29:10.282789 containerd[1590]: time="2026-01-23T18:29:10.279132912Z" level=info msg="loading plugin" id=io.containerd.sandbox.store.v1.local type=io.containerd.sandbox.store.v1 Jan 23 18:29:10.282789 containerd[1590]: time="2026-01-23T18:29:10.279140312Z" level=info msg="loading plugin" id=io.containerd.transfer.v1.local type=io.containerd.transfer.v1 Jan 23 18:29:10.282789 containerd[1590]: time="2026-01-23T18:29:10.279163112Z" level=info msg="loading plugin" id=io.containerd.cri.v1.images type=io.containerd.cri.v1 Jan 23 18:29:10.282789 containerd[1590]: time="2026-01-23T18:29:10.279202392Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\" for snapshotter \"overlayfs\"" Jan 23 18:29:10.282789 containerd[1590]: time="2026-01-23T18:29:10.279211292Z" level=info msg="Start snapshots syncer" Jan 23 18:29:10.282789 containerd[1590]: time="2026-01-23T18:29:10.279225002Z" level=info msg="loading plugin" id=io.containerd.cri.v1.runtime type=io.containerd.cri.v1 Jan 23 18:29:10.282973 containerd[1590]: time="2026-01-23T18:29:10.279436893Z" level=info msg="starting cri plugin" config="{\"containerd\":{\"defaultRuntimeName\":\"runc\",\"runtimes\":{\"runc\":{\"runtimeType\":\"io.containerd.runc.v2\",\"runtimePath\":\"\",\"PodAnnotations\":null,\"ContainerAnnotations\":null,\"options\":{\"BinaryName\":\"\",\"CriuImagePath\":\"\",\"CriuWorkPath\":\"\",\"IoGid\":0,\"IoUid\":0,\"NoNewKeyring\":false,\"Root\":\"\",\"ShimCgroup\":\"\",\"SystemdCgroup\":true},\"privileged_without_host_devices\":false,\"privileged_without_host_devices_all_devices_allowed\":false,\"cgroupWritable\":false,\"baseRuntimeSpec\":\"\",\"cniConfDir\":\"\",\"cniMaxConfNum\":0,\"snapshotter\":\"\",\"sandboxer\":\"podsandbox\",\"io_type\":\"\"}},\"ignoreBlockIONotEnabledErrors\":false,\"ignoreRdtNotEnabledErrors\":false},\"cni\":{\"binDir\":\"\",\"binDirs\":[\"/opt/cni/bin\"],\"confDir\":\"/etc/cni/net.d\",\"maxConfNum\":1,\"setupSerially\":false,\"confTemplate\":\"\",\"ipPref\":\"\",\"useInternalLoopback\":false},\"enableSelinux\":true,\"selinuxCategoryRange\":1024,\"maxContainerLogLineSize\":16384,\"disableApparmor\":false,\"restrictOOMScoreAdj\":false,\"disableProcMount\":false,\"unsetSeccompProfile\":\"\",\"tolerateMissingHugetlbController\":true,\"disableHugetlbController\":true,\"device_ownership_from_security_context\":false,\"ignoreImageDefinedVolumes\":false,\"netnsMountsUnderStateDir\":false,\"enableUnprivilegedPorts\":true,\"enableUnprivilegedICMP\":true,\"enableCDI\":true,\"cdiSpecDirs\":[\"/etc/cdi\",\"/var/run/cdi\"],\"drainExecSyncIOTimeout\":\"0s\",\"ignoreDeprecationWarnings\":null,\"containerdRootDir\":\"/var/lib/containerd\",\"containerdEndpoint\":\"/run/containerd/containerd.sock\",\"rootDir\":\"/var/lib/containerd/io.containerd.grpc.v1.cri\",\"stateDir\":\"/run/containerd/io.containerd.grpc.v1.cri\"}" Jan 23 18:29:10.282973 containerd[1590]: time="2026-01-23T18:29:10.279469743Z" level=info msg="loading plugin" id=io.containerd.podsandbox.controller.v1.podsandbox type=io.containerd.podsandbox.controller.v1 Jan 23 18:29:10.283084 containerd[1590]: time="2026-01-23T18:29:10.279499813Z" level=info msg="loading plugin" id=io.containerd.sandbox.controller.v1.shim type=io.containerd.sandbox.controller.v1 Jan 23 18:29:10.283084 containerd[1590]: time="2026-01-23T18:29:10.279579333Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.sandbox-controllers type=io.containerd.grpc.v1 Jan 23 18:29:10.283084 containerd[1590]: time="2026-01-23T18:29:10.279593133Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.sandboxes type=io.containerd.grpc.v1 Jan 23 18:29:10.283084 containerd[1590]: time="2026-01-23T18:29:10.279601063Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.snapshots type=io.containerd.grpc.v1 Jan 23 18:29:10.283084 containerd[1590]: time="2026-01-23T18:29:10.279608343Z" level=info msg="loading plugin" id=io.containerd.streaming.v1.manager type=io.containerd.streaming.v1 Jan 23 18:29:10.283084 containerd[1590]: time="2026-01-23T18:29:10.279620973Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.streaming type=io.containerd.grpc.v1 Jan 23 18:29:10.283084 containerd[1590]: time="2026-01-23T18:29:10.279628753Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.tasks type=io.containerd.grpc.v1 Jan 23 18:29:10.283084 containerd[1590]: time="2026-01-23T18:29:10.279636443Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.transfer type=io.containerd.grpc.v1 Jan 23 18:29:10.283084 containerd[1590]: time="2026-01-23T18:29:10.279643353Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.version type=io.containerd.grpc.v1 Jan 23 18:29:10.283084 containerd[1590]: time="2026-01-23T18:29:10.279656313Z" level=info msg="loading plugin" id=io.containerd.monitor.container.v1.restart type=io.containerd.monitor.container.v1 Jan 23 18:29:10.283084 containerd[1590]: time="2026-01-23T18:29:10.279676043Z" level=info msg="loading plugin" id=io.containerd.tracing.processor.v1.otlp type=io.containerd.tracing.processor.v1 Jan 23 18:29:10.283084 containerd[1590]: time="2026-01-23T18:29:10.279684153Z" level=info msg="skip loading plugin" error="skip plugin: tracing endpoint not configured" id=io.containerd.tracing.processor.v1.otlp type=io.containerd.tracing.processor.v1 Jan 23 18:29:10.283084 containerd[1590]: time="2026-01-23T18:29:10.279690143Z" level=info msg="loading plugin" id=io.containerd.internal.v1.tracing type=io.containerd.internal.v1 Jan 23 18:29:10.283258 containerd[1590]: time="2026-01-23T18:29:10.279697463Z" level=info msg="skip loading plugin" error="skip plugin: tracing endpoint not configured" id=io.containerd.internal.v1.tracing type=io.containerd.internal.v1 Jan 23 18:29:10.283258 containerd[1590]: time="2026-01-23T18:29:10.279703593Z" level=info msg="loading plugin" id=io.containerd.ttrpc.v1.otelttrpc type=io.containerd.ttrpc.v1 Jan 23 18:29:10.283258 containerd[1590]: time="2026-01-23T18:29:10.279710143Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.healthcheck type=io.containerd.grpc.v1 Jan 23 18:29:10.283258 containerd[1590]: time="2026-01-23T18:29:10.279717233Z" level=info msg="loading plugin" id=io.containerd.nri.v1.nri type=io.containerd.nri.v1 Jan 23 18:29:10.283258 containerd[1590]: time="2026-01-23T18:29:10.279726293Z" level=info msg="runtime interface created" Jan 23 18:29:10.283258 containerd[1590]: time="2026-01-23T18:29:10.279730723Z" level=info msg="created NRI interface" Jan 23 18:29:10.283258 containerd[1590]: time="2026-01-23T18:29:10.279736763Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.cri type=io.containerd.grpc.v1 Jan 23 18:29:10.283258 containerd[1590]: time="2026-01-23T18:29:10.279744483Z" level=info msg="Connect containerd service" Jan 23 18:29:10.283258 containerd[1590]: time="2026-01-23T18:29:10.279770053Z" level=info msg="using experimental NRI integration - disable nri plugin to prevent this" Jan 23 18:29:10.287104 systemd[1]: issuegen.service: Deactivated successfully. Jan 23 18:29:10.287987 containerd[1590]: time="2026-01-23T18:29:10.287829286Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Jan 23 18:29:10.288323 systemd[1]: Finished issuegen.service - Generate /run/issue. Jan 23 18:29:10.300012 systemd[1]: Starting systemd-user-sessions.service - Permit User Sessions... Jan 23 18:29:10.310586 systemd[1]: Created slice system-coreos\x2dmetadata\x2dsshkeys.slice - Slice /system/coreos-metadata-sshkeys. Jan 23 18:29:10.314468 systemd[1]: Starting coreos-metadata-sshkeys@core.service - Flatcar Metadata Agent (SSH Keys)... Jan 23 18:29:10.324241 locksmithd[1609]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Jan 23 18:29:10.325492 systemd[1]: Finished systemd-vconsole-setup.service - Virtual Console Setup. Jan 23 18:29:10.335678 systemd[1]: Finished systemd-user-sessions.service - Permit User Sessions. Jan 23 18:29:10.343990 systemd[1]: Started getty@tty1.service - Getty on tty1. Jan 23 18:29:10.349427 systemd[1]: Started serial-getty@ttyS0.service - Serial Getty on ttyS0. Jan 23 18:29:10.350545 systemd[1]: Reached target getty.target - Login Prompts. Jan 23 18:29:10.355621 coreos-metadata[1672]: Jan 23 18:29:10.355 INFO Fetching http://169.254.169.254/hetzner/v1/metadata/public-keys: Attempt #1 Jan 23 18:29:10.356578 coreos-metadata[1672]: Jan 23 18:29:10.356 INFO Fetch successful Jan 23 18:29:10.366909 unknown[1672]: wrote ssh authorized keys file for user: core Jan 23 18:29:10.384465 containerd[1590]: time="2026-01-23T18:29:10.383767896Z" level=info msg="Start subscribing containerd event" Jan 23 18:29:10.384465 containerd[1590]: time="2026-01-23T18:29:10.383855716Z" level=info msg="Start recovering state" Jan 23 18:29:10.384465 containerd[1590]: time="2026-01-23T18:29:10.383947416Z" level=info msg="Start event monitor" Jan 23 18:29:10.384465 containerd[1590]: time="2026-01-23T18:29:10.383956086Z" level=info msg="Start cni network conf syncer for default" Jan 23 18:29:10.384465 containerd[1590]: time="2026-01-23T18:29:10.383986456Z" level=info msg="Start streaming server" Jan 23 18:29:10.384465 containerd[1590]: time="2026-01-23T18:29:10.383993736Z" level=info msg="Registered namespace \"k8s.io\" with NRI" Jan 23 18:29:10.384465 containerd[1590]: time="2026-01-23T18:29:10.384014086Z" level=info msg="runtime interface starting up..." Jan 23 18:29:10.384465 containerd[1590]: time="2026-01-23T18:29:10.384019556Z" level=info msg="starting plugins..." Jan 23 18:29:10.384465 containerd[1590]: time="2026-01-23T18:29:10.384031976Z" level=info msg="Synchronizing NRI (plugin) with current runtime state" Jan 23 18:29:10.384705 containerd[1590]: time="2026-01-23T18:29:10.384677626Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Jan 23 18:29:10.385222 containerd[1590]: time="2026-01-23T18:29:10.385175667Z" level=info msg=serving... address=/run/containerd/containerd.sock Jan 23 18:29:10.385470 containerd[1590]: time="2026-01-23T18:29:10.385354377Z" level=info msg="containerd successfully booted in 0.142242s" Jan 23 18:29:10.385537 systemd[1]: Started containerd.service - containerd container runtime. Jan 23 18:29:10.400294 kernel: EXT4-fs (sda9): resized filesystem to 18410491 Jan 23 18:29:10.419090 extend-filesystems[1602]: Filesystem at /dev/sda9 is mounted on /; on-line resizing required Jan 23 18:29:10.419090 extend-filesystems[1602]: old_desc_blocks = 1, new_desc_blocks = 9 Jan 23 18:29:10.419090 extend-filesystems[1602]: The filesystem on /dev/sda9 is now 18410491 (4k) blocks long. Jan 23 18:29:10.425695 extend-filesystems[1558]: Resized filesystem in /dev/sda9 Jan 23 18:29:10.420026 systemd[1]: extend-filesystems.service: Deactivated successfully. Jan 23 18:29:10.420306 systemd[1]: Finished extend-filesystems.service - Extend Filesystems. Jan 23 18:29:10.428425 update-ssh-keys[1689]: Updated "/home/core/.ssh/authorized_keys" Jan 23 18:29:10.428921 systemd[1]: Finished coreos-metadata-sshkeys@core.service - Flatcar Metadata Agent (SSH Keys). Jan 23 18:29:10.432196 systemd[1]: Finished sshkeys.service. Jan 23 18:29:11.147572 systemd-networkd[1477]: eth1: Gained IPv6LL Jan 23 18:29:11.148605 systemd-timesyncd[1454]: Network configuration changed, trying to establish connection. Jan 23 18:29:11.149293 systemd-networkd[1477]: eth0: Gained IPv6LL Jan 23 18:29:11.150153 systemd-timesyncd[1454]: Network configuration changed, trying to establish connection. Jan 23 18:29:11.155192 systemd[1]: Finished systemd-networkd-wait-online.service - Wait for Network to be Configured. Jan 23 18:29:11.157521 systemd[1]: Reached target network-online.target - Network is Online. Jan 23 18:29:11.164257 systemd[1]: Starting etcd-member.service - etcd (System Application Container)... Jan 23 18:29:11.169689 systemd[1]: Starting nvidia.service - NVIDIA Configure Service... Jan 23 18:29:11.176591 (-wrapper)[1696]: etcd-member.service: Referenced but unset environment variable evaluates to an empty string: ETCD_OPTS Jan 23 18:29:11.229904 systemd[1]: Finished nvidia.service - NVIDIA Configure Service. Jan 23 18:29:11.412182 systemd[1]: Starting docker.service - Docker Application Container Engine... Jan 23 18:29:11.441964 (dockerd)[1716]: docker.service: Referenced but unset environment variable evaluates to an empty string: DOCKER_CGROUPS, DOCKER_OPTS, DOCKER_OPT_BIP, DOCKER_OPT_IPMASQ, DOCKER_OPT_MTU Jan 23 18:29:11.884257 dockerd[1716]: time="2026-01-23T18:29:11.883846591Z" level=info msg="Starting up" Jan 23 18:29:11.886031 dockerd[1716]: time="2026-01-23T18:29:11.885910442Z" level=info msg="OTEL tracing is not configured, using no-op tracer provider" Jan 23 18:29:11.905945 dockerd[1716]: time="2026-01-23T18:29:11.905900220Z" level=info msg="Creating a containerd client" address=/var/run/docker/libcontainerd/docker-containerd.sock timeout=1m0s Jan 23 18:29:11.974766 dockerd[1716]: time="2026-01-23T18:29:11.974509949Z" level=info msg="Loading containers: start." Jan 23 18:29:11.992308 kernel: Initializing XFRM netlink socket Jan 23 18:29:12.401452 systemd-timesyncd[1454]: Network configuration changed, trying to establish connection. Jan 23 18:29:12.403183 systemd-timesyncd[1454]: Network configuration changed, trying to establish connection. Jan 23 18:29:12.419477 systemd-timesyncd[1454]: Network configuration changed, trying to establish connection. Jan 23 18:29:12.482905 systemd-networkd[1477]: docker0: Link UP Jan 23 18:29:12.483926 systemd-timesyncd[1454]: Network configuration changed, trying to establish connection. Jan 23 18:29:12.488969 dockerd[1716]: time="2026-01-23T18:29:12.488873563Z" level=info msg="Loading containers: done." Jan 23 18:29:12.527324 dockerd[1716]: time="2026-01-23T18:29:12.526453868Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Jan 23 18:29:12.527324 dockerd[1716]: time="2026-01-23T18:29:12.526730619Z" level=info msg="Docker daemon" commit=6430e49a55babd9b8f4d08e70ecb2b68900770fe containerd-snapshotter=false storage-driver=overlay2 version=28.0.4 Jan 23 18:29:12.527324 dockerd[1716]: time="2026-01-23T18:29:12.526949649Z" level=info msg="Initializing buildkit" Jan 23 18:29:12.567546 dockerd[1716]: time="2026-01-23T18:29:12.567325205Z" level=info msg="Completed buildkit initialization" Jan 23 18:29:12.576408 dockerd[1716]: time="2026-01-23T18:29:12.576355029Z" level=info msg="Daemon has completed initialization" Jan 23 18:29:12.576520 dockerd[1716]: time="2026-01-23T18:29:12.576432409Z" level=info msg="API listen on /run/docker.sock" Jan 23 18:29:12.576939 systemd[1]: Started docker.service - Docker Application Container Engine. Jan 23 18:29:12.579525 etcd-wrapper[1701]: Error response from daemon: No such container: etcd-member Jan 23 18:29:12.603562 etcd-wrapper[1911]: Error response from daemon: No such container: etcd-member Jan 23 18:29:12.652997 etcd-wrapper[1931]: Unable to find image 'quay.io/coreos/etcd:v3.5.16' locally Jan 23 18:29:14.108720 etcd-wrapper[1931]: v3.5.16: Pulling from coreos/etcd Jan 23 18:29:14.527763 etcd-wrapper[1931]: 804c8aba2cc6: Pulling fs layer Jan 23 18:29:14.528469 etcd-wrapper[1931]: 2ae710cd8bfe: Pulling fs layer Jan 23 18:29:14.528469 etcd-wrapper[1931]: d462aa345367: Pulling fs layer Jan 23 18:29:14.528619 etcd-wrapper[1931]: 0f8b424aa0b9: Pulling fs layer Jan 23 18:29:14.528619 etcd-wrapper[1931]: d557676654e5: Pulling fs layer Jan 23 18:29:14.528619 etcd-wrapper[1931]: c8022d07192e: Pulling fs layer Jan 23 18:29:14.528619 etcd-wrapper[1931]: d858cbc252ad: Pulling fs layer Jan 23 18:29:14.528619 etcd-wrapper[1931]: 1069fc2daed1: Pulling fs layer Jan 23 18:29:14.528619 etcd-wrapper[1931]: b40161cd83fc: Pulling fs layer Jan 23 18:29:14.528921 etcd-wrapper[1931]: 5318d93a3a65: Pulling fs layer Jan 23 18:29:14.528921 etcd-wrapper[1931]: 307c1adadb60: Pulling fs layer Jan 23 18:29:14.528921 etcd-wrapper[1931]: fbb01d9e9dc9: Pulling fs layer Jan 23 18:29:14.528921 etcd-wrapper[1931]: fbfea02ac3cf: Pulling fs layer Jan 23 18:29:14.528921 etcd-wrapper[1931]: 8c26e4bf18e2: Pulling fs layer Jan 23 18:29:14.528921 etcd-wrapper[1931]: 1e59a65f8816: Pulling fs layer Jan 23 18:29:14.528921 etcd-wrapper[1931]: ffbd4ca5f0bd: Pulling fs layer Jan 23 18:29:14.529249 etcd-wrapper[1931]: b40161cd83fc: Waiting Jan 23 18:29:14.529249 etcd-wrapper[1931]: 5318d93a3a65: Waiting Jan 23 18:29:14.530571 etcd-wrapper[1931]: 307c1adadb60: Waiting Jan 23 18:29:14.530571 etcd-wrapper[1931]: fbb01d9e9dc9: Waiting Jan 23 18:29:14.530571 etcd-wrapper[1931]: fbfea02ac3cf: Waiting Jan 23 18:29:14.530571 etcd-wrapper[1931]: 8c26e4bf18e2: Waiting Jan 23 18:29:14.530571 etcd-wrapper[1931]: 1e59a65f8816: Waiting Jan 23 18:29:14.530571 etcd-wrapper[1931]: ffbd4ca5f0bd: Waiting Jan 23 18:29:14.530571 etcd-wrapper[1931]: 0f8b424aa0b9: Waiting Jan 23 18:29:14.530571 etcd-wrapper[1931]: d557676654e5: Waiting Jan 23 18:29:14.530571 etcd-wrapper[1931]: c8022d07192e: Waiting Jan 23 18:29:14.530571 etcd-wrapper[1931]: d858cbc252ad: Waiting Jan 23 18:29:14.530571 etcd-wrapper[1931]: 1069fc2daed1: Waiting Jan 23 18:29:14.952025 etcd-wrapper[1931]: 2ae710cd8bfe: Verifying Checksum Jan 23 18:29:14.952025 etcd-wrapper[1931]: 2ae710cd8bfe: Download complete Jan 23 18:29:14.985241 etcd-wrapper[1931]: 804c8aba2cc6: Verifying Checksum Jan 23 18:29:14.985486 etcd-wrapper[1931]: 804c8aba2cc6: Download complete Jan 23 18:29:15.032505 etcd-wrapper[1931]: 804c8aba2cc6: Pull complete Jan 23 18:29:15.065138 systemd[1]: var-lib-docker-overlay2-19084f749d8718cbde5da5e25b5e1dd62bc36a6b68bc648220b11efa02113fcb-merged.mount: Deactivated successfully. Jan 23 18:29:15.081241 etcd-wrapper[1931]: 2ae710cd8bfe: Pull complete Jan 23 18:29:15.085950 etcd-wrapper[1931]: d462aa345367: Verifying Checksum Jan 23 18:29:15.085950 etcd-wrapper[1931]: d462aa345367: Download complete Jan 23 18:29:15.369977 etcd-wrapper[1931]: 0f8b424aa0b9: Verifying Checksum Jan 23 18:29:15.369977 etcd-wrapper[1931]: 0f8b424aa0b9: Download complete Jan 23 18:29:15.495089 etcd-wrapper[1931]: c8022d07192e: Verifying Checksum Jan 23 18:29:15.495089 etcd-wrapper[1931]: c8022d07192e: Download complete Jan 23 18:29:15.496924 etcd-wrapper[1931]: d557676654e5: Verifying Checksum Jan 23 18:29:15.497400 etcd-wrapper[1931]: d557676654e5: Download complete Jan 23 18:29:15.788708 etcd-wrapper[1931]: d858cbc252ad: Verifying Checksum Jan 23 18:29:15.788708 etcd-wrapper[1931]: d858cbc252ad: Download complete Jan 23 18:29:15.895886 etcd-wrapper[1931]: 1069fc2daed1: Verifying Checksum Jan 23 18:29:15.895886 etcd-wrapper[1931]: 1069fc2daed1: Download complete Jan 23 18:29:15.903875 systemd[1]: Created slice system-sshd.slice - Slice /system/sshd. Jan 23 18:29:15.908720 systemd[1]: Started sshd@0-46.62.141.192:22-4.153.228.146:44084.service - OpenSSH per-connection server daemon (4.153.228.146:44084). Jan 23 18:29:15.914402 etcd-wrapper[1931]: b40161cd83fc: Verifying Checksum Jan 23 18:29:15.915528 etcd-wrapper[1931]: b40161cd83fc: Download complete Jan 23 18:29:15.940752 etcd-wrapper[1931]: d462aa345367: Pull complete Jan 23 18:29:15.965028 etcd-wrapper[1931]: 0f8b424aa0b9: Pull complete Jan 23 18:29:15.995818 etcd-wrapper[1931]: d557676654e5: Pull complete Jan 23 18:29:16.022474 etcd-wrapper[1931]: c8022d07192e: Pull complete Jan 23 18:29:16.044433 etcd-wrapper[1931]: d858cbc252ad: Pull complete Jan 23 18:29:16.047194 systemd[1]: var-lib-docker-overlay2-b2eb59f6b276902f36b03a4e7ab084eb475cdf42e88f713e02fb3ddf17021864-merged.mount: Deactivated successfully. Jan 23 18:29:16.069162 systemd[1]: var-lib-docker-overlay2-5236220acd51e83235bc845824e3b49cc069f94adc3047c51131cdc5a886c425-merged.mount: Deactivated successfully. Jan 23 18:29:16.072762 etcd-wrapper[1931]: 1069fc2daed1: Pull complete Jan 23 18:29:16.091904 systemd[1]: var-lib-docker-overlay2-0fcc15fa042941a5f8db338c9e884615861830d89362ce4aa175d065438a2425-merged.mount: Deactivated successfully. Jan 23 18:29:16.108334 etcd-wrapper[1931]: b40161cd83fc: Pull complete Jan 23 18:29:16.212274 etcd-wrapper[1931]: 5318d93a3a65: Verifying Checksum Jan 23 18:29:16.212274 etcd-wrapper[1931]: 5318d93a3a65: Download complete Jan 23 18:29:16.240823 etcd-wrapper[1931]: 5318d93a3a65: Pull complete Jan 23 18:29:16.336120 etcd-wrapper[1931]: 307c1adadb60: Verifying Checksum Jan 23 18:29:16.336120 etcd-wrapper[1931]: 307c1adadb60: Download complete Jan 23 18:29:16.367170 etcd-wrapper[1931]: 307c1adadb60: Pull complete Jan 23 18:29:16.554479 etcd-wrapper[1931]: fbb01d9e9dc9: Verifying Checksum Jan 23 18:29:16.554479 etcd-wrapper[1931]: fbb01d9e9dc9: Download complete Jan 23 18:29:16.613874 sshd[1959]: Accepted publickey for core from 4.153.228.146 port 44084 ssh2: RSA SHA256:FsLS6z7i21aNxkbTri9TFsF1k0iVr3y/E3bcCjvhLFU Jan 23 18:29:16.619894 sshd-session[1959]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) Jan 23 18:29:16.637559 systemd[1]: Created slice user-500.slice - User Slice of UID 500. Jan 23 18:29:16.640102 systemd[1]: Starting user-runtime-dir@500.service - User Runtime Directory /run/user/500... Jan 23 18:29:16.656538 systemd-logind[1565]: New session 1 of user core. Jan 23 18:29:16.672770 systemd[1]: Finished user-runtime-dir@500.service - User Runtime Directory /run/user/500. Jan 23 18:29:16.678904 systemd[1]: Starting user@500.service - User Manager for UID 500... Jan 23 18:29:16.691741 (systemd)[2010]: pam_unix(systemd-user:session): session opened for user core(uid=500) by core(uid=0) Jan 23 18:29:16.695455 systemd-logind[1565]: New session 2 of user core. Jan 23 18:29:16.848752 systemd[2010]: Queued start job for default target default.target. Jan 23 18:29:16.855523 systemd[2010]: Created slice app.slice - User Application Slice. Jan 23 18:29:16.855552 systemd[2010]: Started systemd-tmpfiles-clean.timer - Daily Cleanup of User's Temporary Directories. Jan 23 18:29:16.855565 systemd[2010]: Reached target paths.target - Paths. Jan 23 18:29:16.855722 systemd[2010]: Reached target timers.target - Timers. Jan 23 18:29:16.858611 systemd[2010]: Starting dbus.socket - D-Bus User Message Bus Socket... Jan 23 18:29:16.860416 systemd[2010]: Starting systemd-tmpfiles-setup.service - Create User Files and Directories... Jan 23 18:29:16.877017 systemd[2010]: Finished systemd-tmpfiles-setup.service - Create User Files and Directories. Jan 23 18:29:16.880189 systemd[2010]: Listening on dbus.socket - D-Bus User Message Bus Socket. Jan 23 18:29:16.881218 systemd[2010]: Reached target sockets.target - Sockets. Jan 23 18:29:16.881440 systemd[2010]: Reached target basic.target - Basic System. Jan 23 18:29:16.881484 systemd[2010]: Reached target default.target - Main User Target. Jan 23 18:29:16.881514 systemd[2010]: Startup finished in 175ms. Jan 23 18:29:16.882641 systemd[1]: Started user@500.service - User Manager for UID 500. Jan 23 18:29:16.885928 etcd-wrapper[1931]: fbb01d9e9dc9: Pull complete Jan 23 18:29:16.888415 systemd[1]: Started session-1.scope - Session 1 of User core. Jan 23 18:29:16.895003 etcd-wrapper[1931]: fbfea02ac3cf: Download complete Jan 23 18:29:16.958340 etcd-wrapper[1931]: 1e59a65f8816: Verifying Checksum Jan 23 18:29:16.958546 etcd-wrapper[1931]: 1e59a65f8816: Download complete Jan 23 18:29:16.974302 etcd-wrapper[1931]: 8c26e4bf18e2: Verifying Checksum Jan 23 18:29:16.974447 etcd-wrapper[1931]: 8c26e4bf18e2: Download complete Jan 23 18:29:17.032428 etcd-wrapper[1931]: fbfea02ac3cf: Pull complete Jan 23 18:29:17.135944 systemd[1]: var-lib-docker-overlay2-f4878425f8cf496f3001d197a85c571e8a2f0fe7fd916a96637f071a33c00004-merged.mount: Deactivated successfully. Jan 23 18:29:17.153773 etcd-wrapper[1931]: 8c26e4bf18e2: Pull complete Jan 23 18:29:17.164708 systemd[1]: var-lib-docker-overlay2-dcf6edb4bfa844f26022d0440c1df575cb9745f12c7c296cbe213b517f3106d2-merged.mount: Deactivated successfully. Jan 23 18:29:17.171616 etcd-wrapper[1931]: 1e59a65f8816: Pull complete Jan 23 18:29:17.276774 systemd[1]: Started sshd@1-46.62.141.192:22-4.153.228.146:44096.service - OpenSSH per-connection server daemon (4.153.228.146:44096). Jan 23 18:29:17.342252 etcd-wrapper[1931]: ffbd4ca5f0bd: Download complete Jan 23 18:29:17.365504 etcd-wrapper[1931]: ffbd4ca5f0bd: Pull complete Jan 23 18:29:17.376557 etcd-wrapper[1931]: Digest: sha256:d967d98a12dc220a1a290794711dba7eba04b8ce465e12b02383d1bfbb33e159 Jan 23 18:29:17.379721 etcd-wrapper[1931]: Status: Downloaded newer image for quay.io/coreos/etcd:v3.5.16 Jan 23 18:29:17.453680 containerd[1590]: time="2026-01-23T18:29:17.453506050Z" level=info msg="connecting to shim 45b4fdd9e2581a52c105a0b4d3a5f0969a8b06b204ea875c860c6ef19039e2b6" address="unix:///run/containerd/s/85f89a4a2a92cf62dfd2e36152b2b419a8e93a7d2d46457aadaab2856138e47a" namespace=moby protocol=ttrpc version=3 Jan 23 18:29:17.502569 systemd[1]: Started docker-45b4fdd9e2581a52c105a0b4d3a5f0969a8b06b204ea875c860c6ef19039e2b6.scope - libcontainer container 45b4fdd9e2581a52c105a0b4d3a5f0969a8b06b204ea875c860c6ef19039e2b6. Jan 23 18:29:17.633243 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:29:17.631317Z","caller":"flags/flag.go:113","msg":"recognized and used environment variable","variable-name":"ETCD_DATA_DIR","variable-value":"/var/lib/etcd"} Jan 23 18:29:17.633243 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:29:17.631480Z","caller":"flags/flag.go:113","msg":"recognized and used environment variable","variable-name":"ETCD_NAME","variable-value":"2b562402d7a1448ca32ed48ce7177adf"} Jan 23 18:29:17.633243 etcd-wrapper[1931]: {"level":"warn","ts":"2026-01-23T18:29:17.631512Z","caller":"flags/flag.go:93","msg":"unrecognized environment variable","environment-variable":"ETCD_IMAGE_URL=quay.io/coreos/etcd"} Jan 23 18:29:17.633243 etcd-wrapper[1931]: {"level":"warn","ts":"2026-01-23T18:29:17.631523Z","caller":"flags/flag.go:93","msg":"unrecognized environment variable","environment-variable":"ETCD_IMAGE_TAG=v3.5.16"} Jan 23 18:29:17.633243 etcd-wrapper[1931]: {"level":"warn","ts":"2026-01-23T18:29:17.631532Z","caller":"flags/flag.go:93","msg":"unrecognized environment variable","environment-variable":"ETCD_USER=etcd"} Jan 23 18:29:17.633243 etcd-wrapper[1931]: {"level":"warn","ts":"2026-01-23T18:29:17.631539Z","caller":"flags/flag.go:93","msg":"unrecognized environment variable","environment-variable":"ETCD_SSL_DIR=/etc/ssl/certs"} Jan 23 18:29:17.633243 etcd-wrapper[1931]: {"level":"warn","ts":"2026-01-23T18:29:17.631572Z","caller":"embed/config.go:689","msg":"Running http and grpc server on single port. This is not recommended for production."} Jan 23 18:29:17.633243 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:29:17.631644Z","caller":"etcdmain/etcd.go:73","msg":"Running: ","args":["/usr/local/bin/etcd","--listen-peer-urls=http://10.0.0.4:2380","--listen-client-urls=http://0.0.0.0:2379","--initial-advertise-peer-urls=http://10.0.0.4:2380","--advertise-client-urls=http://10.0.0.4:2379","--discovery=https://discovery.etcd.io/62343e3130358df8737d41a86c56deb2"]} Jan 23 18:29:17.633243 etcd-wrapper[1931]: {"level":"warn","ts":"2026-01-23T18:29:17.631725Z","caller":"embed/config.go:689","msg":"Running http and grpc server on single port. This is not recommended for production."} Jan 23 18:29:17.633243 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:29:17.631737Z","caller":"embed/etcd.go:128","msg":"configuring peer listeners","listen-peer-urls":["http://10.0.0.4:2380"]} Jan 23 18:29:17.634286 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:29:17.632007Z","caller":"embed/etcd.go:136","msg":"configuring client listeners","listen-client-urls":["http://0.0.0.0:2379"]} Jan 23 18:29:17.634286 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:29:17.632169Z","caller":"embed/etcd.go:311","msg":"starting an etcd server","etcd-version":"3.5.16","git-sha":"f20bbad","go-version":"go1.22.7","go-os":"linux","go-arch":"amd64","max-cpu-set":2,"max-cpu-available":2,"member-initialized":false,"name":"2b562402d7a1448ca32ed48ce7177adf","data-dir":"/var/lib/etcd","wal-dir":"","wal-dir-dedicated":"","member-dir":"/var/lib/etcd/member","force-new-cluster":false,"heartbeat-interval":"100ms","election-timeout":"1s","initial-election-tick-advance":true,"snapshot-count":100000,"max-wals":5,"max-snapshots":5,"snapshot-catchup-entries":5000,"initial-advertise-peer-urls":["http://10.0.0.4:2380"],"listen-peer-urls":["http://10.0.0.4:2380"],"advertise-client-urls":["http://10.0.0.4:2379"],"listen-client-urls":["http://0.0.0.0:2379"],"listen-metrics-urls":[],"cors":["*"],"host-whitelist":["*"],"initial-cluster":"2b562402d7a1448ca32ed48ce7177adf=http://10.0.0.4:2380","initial-cluster-state":"new","initial-cluster-token":"https://discovery.etcd.io/62343e3130358df8737d41a86c56deb2","quota-backend-bytes":2147483648,"max-request-bytes":1572864,"max-concurrent-streams":4294967295,"pre-vote":true,"initial-corrupt-check":false,"corrupt-check-time-interval":"0s","compact-check-time-enabled":false,"compact-check-time-interval":"1m0s","auto-compaction-mode":"periodic","auto-compaction-retention":"0s","auto-compaction-interval":"0s","discovery-url":"https://discovery.etcd.io/62343e3130358df8737d41a86c56deb2","discovery-proxy":"","downgrade-check-interval":"5s"} Jan 23 18:29:17.635830 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:29:17.635519Z","caller":"etcdserver/backend.go:81","msg":"opened backend db","path":"/var/lib/etcd/member/snap/db","took":"2.898301ms"} Jan 23 18:29:17.967780 sshd[2039]: Accepted publickey for core from 4.153.228.146 port 44096 ssh2: RSA SHA256:FsLS6z7i21aNxkbTri9TFsF1k0iVr3y/E3bcCjvhLFU Jan 23 18:29:17.970848 sshd-session[2039]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) Jan 23 18:29:17.982956 systemd-logind[1565]: New session 3 of user core. Jan 23 18:29:17.988506 systemd[1]: Started session-3.scope - Session 3 of User core. Jan 23 18:29:18.047388 systemd[1]: var-lib-docker-overlay2-a69dbcbf044cd3fe5c81f837215254087c96317ecea90c285bc75d158cbd9b21-merged.mount: Deactivated successfully. Jan 23 18:29:18.342001 sshd[2099]: Connection closed by 4.153.228.146 port 44096 Jan 23 18:29:18.343558 sshd-session[2039]: pam_unix(sshd:session): session closed for user core Jan 23 18:29:18.351218 systemd-logind[1565]: Session 3 logged out. Waiting for processes to exit. Jan 23 18:29:18.351836 systemd[1]: sshd@1-46.62.141.192:22-4.153.228.146:44096.service: Deactivated successfully. Jan 23 18:29:18.355107 systemd[1]: session-3.scope: Deactivated successfully. Jan 23 18:29:18.358717 systemd-logind[1565]: Removed session 3. Jan 23 18:29:18.479758 systemd[1]: Started sshd@2-46.62.141.192:22-4.153.228.146:44106.service - OpenSSH per-connection server daemon (4.153.228.146:44106). Jan 23 18:29:18.881922 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:29:18.880765Z","caller":"v2discovery/discovery.go:336","msg":"found self from discovery server","discovery-url":"https://discovery.etcd.io","self":"84afc9f0d5e63dd5"} Jan 23 18:29:18.881922 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:29:18.880873Z","caller":"v2discovery/discovery.go:342","msg":"found peer from discovery server","discovery-url":"https://discovery.etcd.io","peer":"15eb2e9460fb69a5"} Jan 23 18:29:18.881922 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:29:18.880887Z","caller":"v2discovery/discovery.go:342","msg":"found peer from discovery server","discovery-url":"https://discovery.etcd.io","peer":"5e70f16e3d77e6b8"} Jan 23 18:29:18.881922 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:29:18.880896Z","caller":"v2discovery/discovery.go:378","msg":"found all needed peers from discovery server","discovery-url":"https://discovery.etcd.io","found-peers":3} Jan 23 18:29:18.888028 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:29:18.887496Z","caller":"etcdserver/raft.go:505","msg":"starting local member","local-member-id":"84afc9f0d5e63dd5","cluster-id":"4d81068644ee6b5d"} Jan 23 18:29:18.888028 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:29:18.887570Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"84afc9f0d5e63dd5 switched to configuration voters=()"} Jan 23 18:29:18.888028 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:29:18.887625Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"84afc9f0d5e63dd5 became follower at term 0"} Jan 23 18:29:18.888028 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:29:18.887639Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"newRaft 84afc9f0d5e63dd5 [peers: [], term: 0, commit: 0, applied: 0, lastindex: 0, lastterm: 0]"} Jan 23 18:29:18.888028 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:29:18.887651Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"84afc9f0d5e63dd5 became follower at term 1"} Jan 23 18:29:18.888028 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:29:18.887692Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"84afc9f0d5e63dd5 switched to configuration voters=(1579407309140617637)"} Jan 23 18:29:18.888028 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:29:18.887715Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"84afc9f0d5e63dd5 switched to configuration voters=(1579407309140617637 6805204492736784056)"} Jan 23 18:29:18.889498 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:29:18.889170Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"84afc9f0d5e63dd5 switched to configuration voters=(1579407309140617637 6805204492736784056 9561082570148822485)"} Jan 23 18:29:18.892880 etcd-wrapper[1931]: {"level":"warn","ts":"2026-01-23T18:29:18.892433Z","caller":"auth/store.go:1241","msg":"simple token is not cryptographically signed"} Jan 23 18:29:18.894462 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:29:18.894198Z","caller":"mvcc/kvstore.go:423","msg":"kvstore restored","current-rev":1} Jan 23 18:29:18.895922 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:29:18.895528Z","caller":"etcdserver/quota.go:94","msg":"enabled backend quota with default value","quota-name":"v3-applier","quota-size-bytes":2147483648,"quota-size":"2.1 GB"} Jan 23 18:29:18.896931 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:29:18.896574Z","caller":"rafthttp/peer.go:133","msg":"starting remote peer","remote-peer-id":"15eb2e9460fb69a5"} Jan 23 18:29:18.896931 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:29:18.896639Z","caller":"rafthttp/pipeline.go:72","msg":"started HTTP pipelining with remote peer","local-member-id":"84afc9f0d5e63dd5","remote-peer-id":"15eb2e9460fb69a5"} Jan 23 18:29:18.899109 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:29:18.898740Z","caller":"rafthttp/stream.go:169","msg":"started stream writer with remote peer","local-member-id":"84afc9f0d5e63dd5","remote-peer-id":"15eb2e9460fb69a5"} Jan 23 18:29:18.900984 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:29:18.900690Z","caller":"rafthttp/peer.go:137","msg":"started remote peer","remote-peer-id":"15eb2e9460fb69a5"} Jan 23 18:29:18.900984 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:29:18.900754Z","caller":"rafthttp/transport.go:317","msg":"added remote peer","local-member-id":"84afc9f0d5e63dd5","remote-peer-id":"15eb2e9460fb69a5","remote-peer-urls":["http://10.0.0.3:2380"]} Jan 23 18:29:18.900984 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:29:18.900776Z","caller":"rafthttp/peer.go:133","msg":"starting remote peer","remote-peer-id":"5e70f16e3d77e6b8"} Jan 23 18:29:18.901348 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:29:18.900791Z","caller":"rafthttp/pipeline.go:72","msg":"started HTTP pipelining with remote peer","local-member-id":"84afc9f0d5e63dd5","remote-peer-id":"5e70f16e3d77e6b8"} Jan 23 18:29:18.901803 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:29:18.901586Z","caller":"rafthttp/stream.go:169","msg":"started stream writer with remote peer","local-member-id":"84afc9f0d5e63dd5","remote-peer-id":"15eb2e9460fb69a5"} Jan 23 18:29:18.901803 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:29:18.901630Z","caller":"rafthttp/stream.go:395","msg":"started stream reader with remote peer","stream-reader-type":"stream MsgApp v2","local-member-id":"84afc9f0d5e63dd5","remote-peer-id":"15eb2e9460fb69a5"} Jan 23 18:29:18.902376 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:29:18.902042Z","caller":"rafthttp/stream.go:395","msg":"started stream reader with remote peer","stream-reader-type":"stream Message","local-member-id":"84afc9f0d5e63dd5","remote-peer-id":"15eb2e9460fb69a5"} Jan 23 18:29:18.905148 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:29:18.904585Z","caller":"rafthttp/stream.go:169","msg":"started stream writer with remote peer","local-member-id":"84afc9f0d5e63dd5","remote-peer-id":"5e70f16e3d77e6b8"} Jan 23 18:29:18.905148 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:29:18.904573Z","caller":"rafthttp/peer_status.go:53","msg":"peer became active","peer-id":"15eb2e9460fb69a5"} Jan 23 18:29:18.905148 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:29:18.904723Z","caller":"rafthttp/stream.go:169","msg":"started stream writer with remote peer","local-member-id":"84afc9f0d5e63dd5","remote-peer-id":"5e70f16e3d77e6b8"} Jan 23 18:29:18.905668 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:29:18.904758Z","caller":"rafthttp/peer.go:137","msg":"started remote peer","remote-peer-id":"5e70f16e3d77e6b8"} Jan 23 18:29:18.905985 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:29:18.904768Z","caller":"rafthttp/stream.go:395","msg":"started stream reader with remote peer","stream-reader-type":"stream Message","local-member-id":"84afc9f0d5e63dd5","remote-peer-id":"5e70f16e3d77e6b8"} Jan 23 18:29:18.905985 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:29:18.905465Z","caller":"rafthttp/transport.go:317","msg":"added remote peer","local-member-id":"84afc9f0d5e63dd5","remote-peer-id":"5e70f16e3d77e6b8","remote-peer-urls":["http://10.0.0.2:2380"]} Jan 23 18:29:18.905985 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:29:18.905523Z","caller":"etcdserver/server.go:873","msg":"starting etcd server","local-member-id":"84afc9f0d5e63dd5","local-server-version":"3.5.16","cluster-version":"to_be_decided"} Jan 23 18:29:18.906734 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:29:18.904812Z","caller":"rafthttp/stream.go:395","msg":"started stream reader with remote peer","stream-reader-type":"stream MsgApp v2","local-member-id":"84afc9f0d5e63dd5","remote-peer-id":"5e70f16e3d77e6b8"} Jan 23 18:29:18.906734 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:29:18.904942Z","caller":"rafthttp/stream.go:412","msg":"established TCP streaming connection with remote peer","stream-reader-type":"stream Message","local-member-id":"84afc9f0d5e63dd5","remote-peer-id":"15eb2e9460fb69a5"} Jan 23 18:29:18.906734 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:29:18.904958Z","caller":"rafthttp/stream.go:412","msg":"established TCP streaming connection with remote peer","stream-reader-type":"stream MsgApp v2","local-member-id":"84afc9f0d5e63dd5","remote-peer-id":"15eb2e9460fb69a5"} Jan 23 18:29:18.906734 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:29:18.906511Z","caller":"v3rpc/health.go:61","msg":"grpc service status changed","service":"","status":"SERVING"} Jan 23 18:29:18.907134 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:29:18.906877Z","caller":"etcdserver/server.go:773","msg":"starting initial election tick advance","election-ticks":10} Jan 23 18:29:18.908335 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:29:18.907428Z","caller":"fileutil/purge.go:50","msg":"started to purge file","dir":"/var/lib/etcd/member/snap","suffix":"snap.db","max":5,"interval":"30s"} Jan 23 18:29:18.908916 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:29:18.908649Z","caller":"fileutil/purge.go:50","msg":"started to purge file","dir":"/var/lib/etcd/member/snap","suffix":"snap","max":5,"interval":"30s"} Jan 23 18:29:18.910306 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:29:18.909132Z","caller":"fileutil/purge.go:50","msg":"started to purge file","dir":"/var/lib/etcd/member/wal","suffix":"wal","max":5,"interval":"30s"} Jan 23 18:29:18.910306 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:29:18.908537Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"84afc9f0d5e63dd5 switched to configuration voters=(1579407309140617637 6805204492736784056 9561082570148822485)"} Jan 23 18:29:18.910306 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:29:18.909420Z","caller":"membership/cluster.go:421","msg":"added member","cluster-id":"4d81068644ee6b5d","local-member-id":"84afc9f0d5e63dd5","added-peer-id":"15eb2e9460fb69a5","added-peer-peer-urls":["http://10.0.0.3:2380"]} Jan 23 18:29:18.910306 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:29:18.909496Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"84afc9f0d5e63dd5 switched to configuration voters=(1579407309140617637 6805204492736784056 9561082570148822485)"} Jan 23 18:29:18.910306 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:29:18.909535Z","caller":"membership/cluster.go:421","msg":"added member","cluster-id":"4d81068644ee6b5d","local-member-id":"84afc9f0d5e63dd5","added-peer-id":"5e70f16e3d77e6b8","added-peer-peer-urls":["http://10.0.0.2:2380"]} Jan 23 18:29:18.910306 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:29:18.909579Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"84afc9f0d5e63dd5 switched to configuration voters=(1579407309140617637 6805204492736784056 9561082570148822485)"} Jan 23 18:29:18.910306 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:29:18.909608Z","caller":"membership/cluster.go:421","msg":"added member","cluster-id":"4d81068644ee6b5d","local-member-id":"84afc9f0d5e63dd5","added-peer-id":"84afc9f0d5e63dd5","added-peer-peer-urls":["http://10.0.0.4:2380"]} Jan 23 18:29:18.910306 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:29:18.909063Z","caller":"rafthttp/peer_status.go:53","msg":"peer became active","peer-id":"5e70f16e3d77e6b8"} Jan 23 18:29:18.910306 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:29:18.909684Z","caller":"rafthttp/stream.go:412","msg":"established TCP streaming connection with remote peer","stream-reader-type":"stream MsgApp v2","local-member-id":"84afc9f0d5e63dd5","remote-peer-id":"5e70f16e3d77e6b8"} Jan 23 18:29:18.911052 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:29:18.909730Z","caller":"embed/etcd.go:280","msg":"now serving peer/client/metrics","local-member-id":"84afc9f0d5e63dd5","initial-advertise-peer-urls":["http://10.0.0.4:2380"],"listen-peer-urls":["http://10.0.0.4:2380"],"advertise-client-urls":["http://10.0.0.4:2379"],"listen-client-urls":["http://0.0.0.0:2379"],"listen-metrics-urls":[]} Jan 23 18:29:18.911052 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:29:18.909758Z","caller":"rafthttp/stream.go:412","msg":"established TCP streaming connection with remote peer","stream-reader-type":"stream Message","local-member-id":"84afc9f0d5e63dd5","remote-peer-id":"5e70f16e3d77e6b8"} Jan 23 18:29:18.911052 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:29:18.909805Z","caller":"embed/etcd.go:600","msg":"serving peer traffic","address":"10.0.0.4:2380"} Jan 23 18:29:18.911052 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:29:18.909814Z","caller":"embed/etcd.go:572","msg":"cmux::serve","address":"10.0.0.4:2380"} Jan 23 18:29:18.911052 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:29:18.910567Z","caller":"rafthttp/stream.go:249","msg":"set message encoder","from":"84afc9f0d5e63dd5","to":"5e70f16e3d77e6b8","stream-type":"stream MsgApp v2"} Jan 23 18:29:18.911621 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:29:18.911083Z","caller":"rafthttp/stream.go:274","msg":"established TCP streaming connection with remote peer","stream-writer-type":"stream MsgApp v2","local-member-id":"84afc9f0d5e63dd5","remote-peer-id":"5e70f16e3d77e6b8"} Jan 23 18:29:18.911621 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:29:18.910674Z","caller":"rafthttp/stream.go:249","msg":"set message encoder","from":"84afc9f0d5e63dd5","to":"15eb2e9460fb69a5","stream-type":"stream Message"} Jan 23 18:29:18.911621 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:29:18.911195Z","caller":"rafthttp/stream.go:274","msg":"established TCP streaming connection with remote peer","stream-writer-type":"stream Message","local-member-id":"84afc9f0d5e63dd5","remote-peer-id":"15eb2e9460fb69a5"} Jan 23 18:29:18.911621 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:29:18.910908Z","caller":"rafthttp/stream.go:249","msg":"set message encoder","from":"84afc9f0d5e63dd5","to":"5e70f16e3d77e6b8","stream-type":"stream Message"} Jan 23 18:29:18.911621 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:29:18.911247Z","caller":"rafthttp/stream.go:274","msg":"established TCP streaming connection with remote peer","stream-writer-type":"stream Message","local-member-id":"84afc9f0d5e63dd5","remote-peer-id":"5e70f16e3d77e6b8"} Jan 23 18:29:18.911621 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:29:18.911030Z","caller":"rafthttp/stream.go:249","msg":"set message encoder","from":"84afc9f0d5e63dd5","to":"15eb2e9460fb69a5","stream-type":"stream MsgApp v2"} Jan 23 18:29:18.911621 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:29:18.911289Z","caller":"rafthttp/stream.go:274","msg":"established TCP streaming connection with remote peer","stream-writer-type":"stream MsgApp v2","local-member-id":"84afc9f0d5e63dd5","remote-peer-id":"15eb2e9460fb69a5"} Jan 23 18:29:18.958956 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:29:18.958500Z","caller":"etcdserver/server.go:796","msg":"initialized peer connections; fast-forwarding election ticks","local-member-id":"84afc9f0d5e63dd5","forward-ticks":8,"forward-duration":"800ms","election-ticks":10,"election-timeout":"1s","active-remote-members":2} Jan 23 18:29:19.141092 sshd[2105]: Accepted publickey for core from 4.153.228.146 port 44106 ssh2: RSA SHA256:FsLS6z7i21aNxkbTri9TFsF1k0iVr3y/E3bcCjvhLFU Jan 23 18:29:19.145342 sshd-session[2105]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) Jan 23 18:29:19.154347 systemd-logind[1565]: New session 4 of user core. Jan 23 18:29:19.162485 systemd[1]: Started session-4.scope - Session 4 of User core. Jan 23 18:29:19.380219 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:29:19.379792Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"84afc9f0d5e63dd5 [logterm: 1, index: 3, vote: 0] cast MsgPreVote for 15eb2e9460fb69a5 [logterm: 1, index: 3] at term 1"} Jan 23 18:29:19.382489 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:29:19.382030Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"84afc9f0d5e63dd5 [term: 1] received a MsgVote message with higher term from 15eb2e9460fb69a5 [term: 2]"} Jan 23 18:29:19.382489 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:29:19.382065Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"84afc9f0d5e63dd5 became follower at term 2"} Jan 23 18:29:19.382489 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:29:19.382081Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"84afc9f0d5e63dd5 [logterm: 1, index: 3, vote: 0] cast MsgVote for 15eb2e9460fb69a5 [logterm: 1, index: 3] at term 2"} Jan 23 18:29:19.384997 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:29:19.384466Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"raft.node: 84afc9f0d5e63dd5 elected leader 15eb2e9460fb69a5 at term 2"} Jan 23 18:29:19.391461 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:29:19.390795Z","caller":"etcdserver/server.go:2140","msg":"published local member to cluster through raft","local-member-id":"84afc9f0d5e63dd5","local-member-attributes":"{Name:2b562402d7a1448ca32ed48ce7177adf ClientURLs:[http://10.0.0.4:2379]}","request-path":"/0/members/84afc9f0d5e63dd5/attributes","cluster-id":"4d81068644ee6b5d","publish-timeout":"7s"} Jan 23 18:29:19.393128 systemd[1]: Started etcd-member.service - etcd (System Application Container). Jan 23 18:29:19.394429 systemd[1]: Reached target multi-user.target - Multi-User System. Jan 23 18:29:19.396109 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:29:19.390982Z","caller":"embed/serve.go:103","msg":"ready to serve client requests"} Jan 23 18:29:19.396109 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:29:19.391327Z","caller":"etcdmain/main.go:44","msg":"notifying init daemon"} Jan 23 18:29:19.396109 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:29:19.392316Z","caller":"etcdmain/main.go:50","msg":"successfully notified init daemon"} Jan 23 18:29:19.396109 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:29:19.393484Z","caller":"v3rpc/health.go:61","msg":"grpc service status changed","service":"","status":"SERVING"} Jan 23 18:29:19.396109 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:29:19.393971Z","caller":"embed/serve.go:187","msg":"serving client traffic insecurely; this is strongly discouraged!","traffic":"grpc+http","address":"[::]:2379"} Jan 23 18:29:19.395318 systemd[1]: Startup finished in 3.790s (kernel) + 4.612s (initrd) + 12.454s (userspace) = 20.856s. Jan 23 18:29:19.399010 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:29:19.396585Z","caller":"membership/cluster.go:584","msg":"set initial cluster version","cluster-id":"4d81068644ee6b5d","local-member-id":"84afc9f0d5e63dd5","cluster-version":"3.5"} Jan 23 18:29:19.399010 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:29:19.398362Z","caller":"api/capability.go:75","msg":"enabled capabilities for version","cluster-version":"3.5"} Jan 23 18:29:19.521012 sshd[2110]: Connection closed by 4.153.228.146 port 44106 Jan 23 18:29:19.521928 sshd-session[2105]: pam_unix(sshd:session): session closed for user core Jan 23 18:29:19.529068 systemd-logind[1565]: Session 4 logged out. Waiting for processes to exit. Jan 23 18:29:19.530503 systemd[1]: sshd@2-46.62.141.192:22-4.153.228.146:44106.service: Deactivated successfully. Jan 23 18:29:19.534231 systemd[1]: session-4.scope: Deactivated successfully. Jan 23 18:29:19.538310 systemd-logind[1565]: Removed session 4. Jan 23 18:29:23.907563 etcd-wrapper[1931]: {"level":"warn","ts":"2026-01-23T18:29:23.907144Z","caller":"rafthttp/probing_status.go:82","msg":"prober found high clock drift","round-tripper-name":"ROUND_TRIPPER_RAFT_MESSAGE","remote-peer-id":"5e70f16e3d77e6b8","clock-drift":"1.741290451s","rtt":"171.018µs"} Jan 23 18:29:23.907563 etcd-wrapper[1931]: {"level":"warn","ts":"2026-01-23T18:29:23.907171Z","caller":"rafthttp/probing_status.go:82","msg":"prober found high clock drift","round-tripper-name":"ROUND_TRIPPER_SNAPSHOT","remote-peer-id":"5e70f16e3d77e6b8","clock-drift":"1.741286538s","rtt":"163.985µs"} Jan 23 18:29:29.659636 systemd[1]: Started sshd@3-46.62.141.192:22-4.153.228.146:40468.service - OpenSSH per-connection server daemon (4.153.228.146:40468). Jan 23 18:29:30.344321 sshd[2118]: Accepted publickey for core from 4.153.228.146 port 40468 ssh2: RSA SHA256:FsLS6z7i21aNxkbTri9TFsF1k0iVr3y/E3bcCjvhLFU Jan 23 18:29:30.346454 sshd-session[2118]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) Jan 23 18:29:30.356127 systemd-logind[1565]: New session 5 of user core. Jan 23 18:29:30.361539 systemd[1]: Started session-5.scope - Session 5 of User core. Jan 23 18:29:30.719311 sshd[2122]: Connection closed by 4.153.228.146 port 40468 Jan 23 18:29:30.721519 sshd-session[2118]: pam_unix(sshd:session): session closed for user core Jan 23 18:29:30.729076 systemd-logind[1565]: Session 5 logged out. Waiting for processes to exit. Jan 23 18:29:30.729488 systemd[1]: sshd@3-46.62.141.192:22-4.153.228.146:40468.service: Deactivated successfully. Jan 23 18:29:30.733235 systemd[1]: session-5.scope: Deactivated successfully. Jan 23 18:29:30.736496 systemd-logind[1565]: Removed session 5. Jan 23 18:29:30.858397 systemd[1]: Started sshd@4-46.62.141.192:22-4.153.228.146:40474.service - OpenSSH per-connection server daemon (4.153.228.146:40474). Jan 23 18:29:31.545260 sshd[2128]: Accepted publickey for core from 4.153.228.146 port 40474 ssh2: RSA SHA256:FsLS6z7i21aNxkbTri9TFsF1k0iVr3y/E3bcCjvhLFU Jan 23 18:29:31.546705 sshd-session[2128]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) Jan 23 18:29:31.556360 systemd-logind[1565]: New session 6 of user core. Jan 23 18:29:31.564579 systemd[1]: Started session-6.scope - Session 6 of User core. Jan 23 18:29:31.910882 sshd[2132]: Connection closed by 4.153.228.146 port 40474 Jan 23 18:29:31.912552 sshd-session[2128]: pam_unix(sshd:session): session closed for user core Jan 23 18:29:31.920357 systemd[1]: sshd@4-46.62.141.192:22-4.153.228.146:40474.service: Deactivated successfully. Jan 23 18:29:31.923812 systemd[1]: session-6.scope: Deactivated successfully. Jan 23 18:29:31.926995 systemd-logind[1565]: Session 6 logged out. Waiting for processes to exit. Jan 23 18:29:31.928918 systemd-logind[1565]: Removed session 6. Jan 23 18:29:32.046659 systemd[1]: Started sshd@5-46.62.141.192:22-4.153.228.146:40486.service - OpenSSH per-connection server daemon (4.153.228.146:40486). Jan 23 18:29:32.732681 sshd[2138]: Accepted publickey for core from 4.153.228.146 port 40486 ssh2: RSA SHA256:FsLS6z7i21aNxkbTri9TFsF1k0iVr3y/E3bcCjvhLFU Jan 23 18:29:32.735514 sshd-session[2138]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) Jan 23 18:29:32.745288 systemd-logind[1565]: New session 7 of user core. Jan 23 18:29:32.750583 systemd[1]: Started session-7.scope - Session 7 of User core. Jan 23 18:29:33.109369 sshd[2142]: Connection closed by 4.153.228.146 port 40486 Jan 23 18:29:33.111595 sshd-session[2138]: pam_unix(sshd:session): session closed for user core Jan 23 18:29:33.119355 systemd-logind[1565]: Session 7 logged out. Waiting for processes to exit. Jan 23 18:29:33.119960 systemd[1]: sshd@5-46.62.141.192:22-4.153.228.146:40486.service: Deactivated successfully. Jan 23 18:29:33.124254 systemd[1]: session-7.scope: Deactivated successfully. Jan 23 18:29:33.127721 systemd-logind[1565]: Removed session 7. Jan 23 18:29:33.249482 systemd[1]: Started sshd@6-46.62.141.192:22-4.153.228.146:40502.service - OpenSSH per-connection server daemon (4.153.228.146:40502). Jan 23 18:29:33.943918 sshd[2148]: Accepted publickey for core from 4.153.228.146 port 40502 ssh2: RSA SHA256:FsLS6z7i21aNxkbTri9TFsF1k0iVr3y/E3bcCjvhLFU Jan 23 18:29:33.947005 sshd-session[2148]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) Jan 23 18:29:33.962192 systemd[1]: Started sshd@7-46.62.141.192:22-46.62.141.104:62314.service - OpenSSH per-connection server daemon (46.62.141.104:62314). Jan 23 18:29:33.969021 systemd-logind[1565]: New session 8 of user core. Jan 23 18:29:33.981562 systemd[1]: Started session-8.scope - Session 8 of User core. Jan 23 18:29:34.007812 sshd[2153]: Connection closed by 46.62.141.104 port 62314 Jan 23 18:29:34.010692 systemd[1]: sshd@7-46.62.141.192:22-46.62.141.104:62314.service: Deactivated successfully. Jan 23 18:29:34.218840 sudo[2158]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Jan 23 18:29:34.219619 sudo[2158]: pam_unix(sudo:session): session opened for user root(uid=0) by core(uid=500) Jan 23 18:29:34.233517 sudo[2158]: pam_unix(sudo:session): session closed for user root Jan 23 18:29:34.356253 sshd[2154]: Connection closed by 4.153.228.146 port 40502 Jan 23 18:29:34.357011 sshd-session[2148]: pam_unix(sshd:session): session closed for user core Jan 23 18:29:34.365091 systemd-logind[1565]: Session 8 logged out. Waiting for processes to exit. Jan 23 18:29:34.365578 systemd[1]: sshd@6-46.62.141.192:22-4.153.228.146:40502.service: Deactivated successfully. Jan 23 18:29:34.369686 systemd[1]: session-8.scope: Deactivated successfully. Jan 23 18:29:34.373569 systemd-logind[1565]: Removed session 8. Jan 23 18:29:34.494639 systemd[1]: Started sshd@8-46.62.141.192:22-4.153.228.146:40506.service - OpenSSH per-connection server daemon (4.153.228.146:40506). Jan 23 18:29:35.177325 sshd[2165]: Accepted publickey for core from 4.153.228.146 port 40506 ssh2: RSA SHA256:FsLS6z7i21aNxkbTri9TFsF1k0iVr3y/E3bcCjvhLFU Jan 23 18:29:35.179653 sshd-session[2165]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) Jan 23 18:29:35.189021 systemd-logind[1565]: New session 9 of user core. Jan 23 18:29:35.199555 systemd[1]: Started session-9.scope - Session 9 of User core. Jan 23 18:29:35.433677 sudo[2171]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Jan 23 18:29:35.434452 sudo[2171]: pam_unix(sudo:session): session opened for user root(uid=0) by core(uid=500) Jan 23 18:29:35.439357 sudo[2171]: pam_unix(sudo:session): session closed for user root Jan 23 18:29:35.452814 sudo[2170]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/systemctl restart audit-rules Jan 23 18:29:35.453558 sudo[2170]: pam_unix(sudo:session): session opened for user root(uid=0) by core(uid=500) Jan 23 18:29:35.473506 systemd[1]: Started sshd@9-46.62.141.192:22-46.62.141.104:62323.service - OpenSSH per-connection server daemon (46.62.141.104:62323). Jan 23 18:29:35.480057 systemd[1]: Starting audit-rules.service - Load Audit Rules... Jan 23 18:29:35.557000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Jan 23 18:29:35.559835 kernel: kauditd_printk_skb: 44 callbacks suppressed Jan 23 18:29:35.559938 kernel: audit: type=1305 audit(1769192975.557:205): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Jan 23 18:29:35.559995 augenrules[2199]: No rules Jan 23 18:29:35.562026 systemd[1]: audit-rules.service: Deactivated successfully. Jan 23 18:29:35.562736 systemd[1]: Finished audit-rules.service - Load Audit Rules. Jan 23 18:29:35.566309 kernel: audit: type=1300 audit(1769192975.557:205): arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffffc887de0 a2=420 a3=0 items=0 ppid=2178 pid=2199 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/bin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 23 18:29:35.557000 audit[2199]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffffc887de0 a2=420 a3=0 items=0 ppid=2178 pid=2199 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/bin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jan 23 18:29:35.567583 sudo[2170]: pam_unix(sudo:session): session closed for user root Jan 23 18:29:35.557000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Jan 23 18:29:35.563000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:35.591400 kernel: audit: type=1327 audit(1769192975.557:205): proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Jan 23 18:29:35.591767 kernel: audit: type=1130 audit(1769192975.563:206): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:35.591830 kernel: audit: type=1131 audit(1769192975.563:207): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:35.563000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:35.596359 sshd[2177]: Invalid user admin from 46.62.141.104 port 62323 Jan 23 18:29:35.568000 audit[2170]: USER_END pid=2170 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jan 23 18:29:35.607048 sshd[2177]: Received disconnect from 46.62.141.104 port 62323:11: Bye Bye [preauth] Jan 23 18:29:35.607048 sshd[2177]: Disconnected from invalid user admin 46.62.141.104 port 62323 [preauth] Jan 23 18:29:35.609292 kernel: audit: type=1106 audit(1769192975.568:208): pid=2170 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jan 23 18:29:35.617899 kernel: audit: type=1104 audit(1769192975.568:209): pid=2170 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jan 23 18:29:35.568000 audit[2170]: CRED_DISP pid=2170 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jan 23 18:29:35.612608 systemd[1]: sshd@9-46.62.141.192:22-46.62.141.104:62323.service: Deactivated successfully. Jan 23 18:29:35.607000 audit[2177]: USER_ERR pid=2177 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:35.628332 kernel: audit: type=1109 audit(1769192975.607:210): pid=2177 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:35.628431 kernel: audit: type=1131 audit(1769192975.612:211): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-46.62.141.192:22-46.62.141.104:62323 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:35.612000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-46.62.141.192:22-46.62.141.104:62323 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:35.649197 systemd[1]: Started sshd@10-46.62.141.192:22-46.62.141.104:62324.service - OpenSSH per-connection server daemon (46.62.141.104:62324). Jan 23 18:29:35.650000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-46.62.141.192:22-46.62.141.104:62324 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:35.661503 kernel: audit: type=1130 audit(1769192975.650:212): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-46.62.141.192:22-46.62.141.104:62324 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:35.692315 sshd[2169]: Connection closed by 4.153.228.146 port 40506 Jan 23 18:29:35.695568 sshd-session[2165]: pam_unix(sshd:session): session closed for user core Jan 23 18:29:35.699000 audit[2165]: USER_END pid=2165 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.153.228.146 addr=4.153.228.146 terminal=ssh res=success' Jan 23 18:29:35.699000 audit[2165]: CRED_DISP pid=2165 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=4.153.228.146 addr=4.153.228.146 terminal=ssh res=success' Jan 23 18:29:35.706000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-46.62.141.192:22-4.153.228.146:40506 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:35.705594 systemd-logind[1565]: Session 9 logged out. Waiting for processes to exit. Jan 23 18:29:35.705731 systemd[1]: sshd@8-46.62.141.192:22-4.153.228.146:40506.service: Deactivated successfully. Jan 23 18:29:35.710767 systemd[1]: session-9.scope: Deactivated successfully. Jan 23 18:29:35.716934 systemd-logind[1565]: Removed session 9. Jan 23 18:29:35.783582 sshd[2208]: Received disconnect from 46.62.141.104 port 62324:11: Bye Bye [preauth] Jan 23 18:29:35.783582 sshd[2208]: Disconnected from authenticating user root 46.62.141.104 port 62324 [preauth] Jan 23 18:29:35.784000 audit[2208]: USER_ERR pid=2208 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:35.786679 systemd[1]: sshd@10-46.62.141.192:22-46.62.141.104:62324.service: Deactivated successfully. Jan 23 18:29:35.786000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-46.62.141.192:22-46.62.141.104:62324 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:35.808000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-46.62.141.192:22-46.62.141.104:62327 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:35.808711 systemd[1]: Started sshd@11-46.62.141.192:22-46.62.141.104:62327.service - OpenSSH per-connection server daemon (46.62.141.104:62327). Jan 23 18:29:35.925571 sshd[2217]: Invalid user admin from 46.62.141.104 port 62327 Jan 23 18:29:35.945509 sshd[2217]: Received disconnect from 46.62.141.104 port 62327:11: Bye Bye [preauth] Jan 23 18:29:35.945509 sshd[2217]: Disconnected from invalid user admin 46.62.141.104 port 62327 [preauth] Jan 23 18:29:35.946000 audit[2217]: USER_ERR pid=2217 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:35.949451 systemd[1]: sshd@11-46.62.141.192:22-46.62.141.104:62327.service: Deactivated successfully. Jan 23 18:29:35.949000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-46.62.141.192:22-46.62.141.104:62327 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:35.970000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-46.62.141.192:22-46.62.141.104:62328 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:35.971018 systemd[1]: Started sshd@12-46.62.141.192:22-46.62.141.104:62328.service - OpenSSH per-connection server daemon (46.62.141.104:62328). Jan 23 18:29:36.062755 sshd[2223]: Invalid user user from 46.62.141.104 port 62328 Jan 23 18:29:36.069717 sshd[2223]: Received disconnect from 46.62.141.104 port 62328:11: Bye Bye [preauth] Jan 23 18:29:36.069717 sshd[2223]: Disconnected from invalid user user 46.62.141.104 port 62328 [preauth] Jan 23 18:29:36.069000 audit[2223]: USER_ERR pid=2223 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:36.072900 systemd[1]: sshd@12-46.62.141.192:22-46.62.141.104:62328.service: Deactivated successfully. Jan 23 18:29:36.073000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-46.62.141.192:22-46.62.141.104:62328 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:36.093000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-46.62.141.192:22-46.62.141.104:62330 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:36.093550 systemd[1]: Started sshd@13-46.62.141.192:22-46.62.141.104:62330.service - OpenSSH per-connection server daemon (46.62.141.104:62330). Jan 23 18:29:36.191287 sshd[2229]: Invalid user user2 from 46.62.141.104 port 62330 Jan 23 18:29:36.197948 sshd[2229]: Received disconnect from 46.62.141.104 port 62330:11: Bye Bye [preauth] Jan 23 18:29:36.197948 sshd[2229]: Disconnected from invalid user user2 46.62.141.104 port 62330 [preauth] Jan 23 18:29:36.197000 audit[2229]: USER_ERR pid=2229 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:36.202254 systemd[1]: sshd@13-46.62.141.192:22-46.62.141.104:62330.service: Deactivated successfully. Jan 23 18:29:36.202000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-46.62.141.192:22-46.62.141.104:62330 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:36.223000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-46.62.141.192:22-46.62.141.104:62333 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:36.223460 systemd[1]: Started sshd@14-46.62.141.192:22-46.62.141.104:62333.service - OpenSSH per-connection server daemon (46.62.141.104:62333). Jan 23 18:29:36.343615 sshd[2235]: Received disconnect from 46.62.141.104 port 62333:11: Bye Bye [preauth] Jan 23 18:29:36.343615 sshd[2235]: Disconnected from authenticating user root 46.62.141.104 port 62333 [preauth] Jan 23 18:29:36.343000 audit[2235]: USER_ERR pid=2235 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:36.347708 systemd[1]: sshd@14-46.62.141.192:22-46.62.141.104:62333.service: Deactivated successfully. Jan 23 18:29:36.348000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-46.62.141.192:22-46.62.141.104:62333 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:36.368000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-46.62.141.192:22-46.62.141.104:62335 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:36.368650 systemd[1]: Started sshd@15-46.62.141.192:22-46.62.141.104:62335.service - OpenSSH per-connection server daemon (46.62.141.104:62335). Jan 23 18:29:36.487354 sshd[2241]: Invalid user admin from 46.62.141.104 port 62335 Jan 23 18:29:36.493837 sshd[2241]: Received disconnect from 46.62.141.104 port 62335:11: Bye Bye [preauth] Jan 23 18:29:36.493837 sshd[2241]: Disconnected from invalid user admin 46.62.141.104 port 62335 [preauth] Jan 23 18:29:36.493000 audit[2241]: USER_ERR pid=2241 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:36.497696 systemd[1]: sshd@15-46.62.141.192:22-46.62.141.104:62335.service: Deactivated successfully. Jan 23 18:29:36.497000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-46.62.141.192:22-46.62.141.104:62335 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:36.519000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-46.62.141.192:22-46.62.141.104:62337 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:36.519792 systemd[1]: Started sshd@16-46.62.141.192:22-46.62.141.104:62337.service - OpenSSH per-connection server daemon (46.62.141.104:62337). Jan 23 18:29:36.641260 sshd[2247]: Invalid user user from 46.62.141.104 port 62337 Jan 23 18:29:36.647702 sshd[2247]: Received disconnect from 46.62.141.104 port 62337:11: Bye Bye [preauth] Jan 23 18:29:36.647702 sshd[2247]: Disconnected from invalid user user 46.62.141.104 port 62337 [preauth] Jan 23 18:29:36.647000 audit[2247]: USER_ERR pid=2247 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:36.651534 systemd[1]: sshd@16-46.62.141.192:22-46.62.141.104:62337.service: Deactivated successfully. Jan 23 18:29:36.651000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-46.62.141.192:22-46.62.141.104:62337 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:36.671000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-46.62.141.192:22-46.62.141.104:62339 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:36.671836 systemd[1]: Started sshd@17-46.62.141.192:22-46.62.141.104:62339.service - OpenSSH per-connection server daemon (46.62.141.104:62339). Jan 23 18:29:36.790772 sshd[2253]: Invalid user user2 from 46.62.141.104 port 62339 Jan 23 18:29:36.797093 sshd[2253]: Received disconnect from 46.62.141.104 port 62339:11: Bye Bye [preauth] Jan 23 18:29:36.797093 sshd[2253]: Disconnected from invalid user user2 46.62.141.104 port 62339 [preauth] Jan 23 18:29:36.797000 audit[2253]: USER_ERR pid=2253 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:36.801176 systemd[1]: sshd@17-46.62.141.192:22-46.62.141.104:62339.service: Deactivated successfully. Jan 23 18:29:36.801000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-46.62.141.192:22-46.62.141.104:62339 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:36.821000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-46.62.141.192:22-46.62.141.104:62341 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:36.821475 systemd[1]: Started sshd@18-46.62.141.192:22-46.62.141.104:62341.service - OpenSSH per-connection server daemon (46.62.141.104:62341). Jan 23 18:29:36.935124 sshd[2259]: Received disconnect from 46.62.141.104 port 62341:11: Bye Bye [preauth] Jan 23 18:29:36.935124 sshd[2259]: Disconnected from authenticating user root 46.62.141.104 port 62341 [preauth] Jan 23 18:29:36.935000 audit[2259]: USER_ERR pid=2259 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:36.939698 systemd[1]: sshd@18-46.62.141.192:22-46.62.141.104:62341.service: Deactivated successfully. Jan 23 18:29:36.940000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-46.62.141.192:22-46.62.141.104:62341 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:36.964000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-46.62.141.192:22-46.62.141.104:62343 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:36.965054 systemd[1]: Started sshd@19-46.62.141.192:22-46.62.141.104:62343.service - OpenSSH per-connection server daemon (46.62.141.104:62343). Jan 23 18:29:37.080857 sshd[2265]: Invalid user admin from 46.62.141.104 port 62343 Jan 23 18:29:37.087630 sshd[2265]: Received disconnect from 46.62.141.104 port 62343:11: Bye Bye [preauth] Jan 23 18:29:37.087630 sshd[2265]: Disconnected from invalid user admin 46.62.141.104 port 62343 [preauth] Jan 23 18:29:37.087000 audit[2265]: USER_ERR pid=2265 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:37.091573 systemd[1]: sshd@19-46.62.141.192:22-46.62.141.104:62343.service: Deactivated successfully. Jan 23 18:29:37.092000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-46.62.141.192:22-46.62.141.104:62343 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:37.115000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-46.62.141.192:22-46.62.141.104:62345 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:37.115670 systemd[1]: Started sshd@20-46.62.141.192:22-46.62.141.104:62345.service - OpenSSH per-connection server daemon (46.62.141.104:62345). Jan 23 18:29:37.235595 sshd[2271]: Invalid user user from 46.62.141.104 port 62345 Jan 23 18:29:37.242567 sshd[2271]: Received disconnect from 46.62.141.104 port 62345:11: Bye Bye [preauth] Jan 23 18:29:37.242567 sshd[2271]: Disconnected from invalid user user 46.62.141.104 port 62345 [preauth] Jan 23 18:29:37.242000 audit[2271]: USER_ERR pid=2271 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:37.247659 systemd[1]: sshd@20-46.62.141.192:22-46.62.141.104:62345.service: Deactivated successfully. Jan 23 18:29:37.248000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-46.62.141.192:22-46.62.141.104:62345 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:37.270000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-46.62.141.192:22-46.62.141.104:62347 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:37.271050 systemd[1]: Started sshd@21-46.62.141.192:22-46.62.141.104:62347.service - OpenSSH per-connection server daemon (46.62.141.104:62347). Jan 23 18:29:37.387144 sshd[2277]: Invalid user user2 from 46.62.141.104 port 62347 Jan 23 18:29:37.392939 sshd[2277]: Received disconnect from 46.62.141.104 port 62347:11: Bye Bye [preauth] Jan 23 18:29:37.392939 sshd[2277]: Disconnected from invalid user user2 46.62.141.104 port 62347 [preauth] Jan 23 18:29:37.393000 audit[2277]: USER_ERR pid=2277 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:37.396516 systemd[1]: sshd@21-46.62.141.192:22-46.62.141.104:62347.service: Deactivated successfully. Jan 23 18:29:37.396000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-46.62.141.192:22-46.62.141.104:62347 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:37.420000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-46.62.141.192:22-46.62.141.104:62350 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:37.418883 systemd[1]: Started sshd@22-46.62.141.192:22-46.62.141.104:62350.service - OpenSSH per-connection server daemon (46.62.141.104:62350). Jan 23 18:29:37.523540 sshd[2283]: Received disconnect from 46.62.141.104 port 62350:11: Bye Bye [preauth] Jan 23 18:29:37.523540 sshd[2283]: Disconnected from authenticating user root 46.62.141.104 port 62350 [preauth] Jan 23 18:29:37.523000 audit[2283]: USER_ERR pid=2283 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:37.527639 systemd[1]: sshd@22-46.62.141.192:22-46.62.141.104:62350.service: Deactivated successfully. Jan 23 18:29:37.528000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-46.62.141.192:22-46.62.141.104:62350 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:37.551215 systemd[1]: Started sshd@23-46.62.141.192:22-46.62.141.104:62351.service - OpenSSH per-connection server daemon (46.62.141.104:62351). Jan 23 18:29:37.553000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-46.62.141.192:22-46.62.141.104:62351 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:37.639382 sshd[2289]: Invalid user admin from 46.62.141.104 port 62351 Jan 23 18:29:37.645473 sshd[2289]: Received disconnect from 46.62.141.104 port 62351:11: Bye Bye [preauth] Jan 23 18:29:37.645473 sshd[2289]: Disconnected from invalid user admin 46.62.141.104 port 62351 [preauth] Jan 23 18:29:37.645000 audit[2289]: USER_ERR pid=2289 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:37.649180 systemd[1]: sshd@23-46.62.141.192:22-46.62.141.104:62351.service: Deactivated successfully. Jan 23 18:29:37.649000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-46.62.141.192:22-46.62.141.104:62351 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:37.673000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-46.62.141.192:22-46.62.141.104:62353 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:37.673371 systemd[1]: Started sshd@24-46.62.141.192:22-46.62.141.104:62353.service - OpenSSH per-connection server daemon (46.62.141.104:62353). Jan 23 18:29:37.790215 sshd[2295]: Invalid user user from 46.62.141.104 port 62353 Jan 23 18:29:37.798001 sshd[2295]: Received disconnect from 46.62.141.104 port 62353:11: Bye Bye [preauth] Jan 23 18:29:37.798001 sshd[2295]: Disconnected from invalid user user 46.62.141.104 port 62353 [preauth] Jan 23 18:29:37.797000 audit[2295]: USER_ERR pid=2295 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:37.803397 systemd[1]: sshd@24-46.62.141.192:22-46.62.141.104:62353.service: Deactivated successfully. Jan 23 18:29:37.803000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-46.62.141.192:22-46.62.141.104:62353 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:37.825655 systemd[1]: Started sshd@25-46.62.141.192:22-46.62.141.104:62355.service - OpenSSH per-connection server daemon (46.62.141.104:62355). Jan 23 18:29:37.825000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-46.62.141.192:22-46.62.141.104:62355 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:37.948175 sshd[2301]: Invalid user user2 from 46.62.141.104 port 62355 Jan 23 18:29:37.955695 sshd[2301]: Received disconnect from 46.62.141.104 port 62355:11: Bye Bye [preauth] Jan 23 18:29:37.955695 sshd[2301]: Disconnected from invalid user user2 46.62.141.104 port 62355 [preauth] Jan 23 18:29:37.955000 audit[2301]: USER_ERR pid=2301 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:37.959752 systemd[1]: sshd@25-46.62.141.192:22-46.62.141.104:62355.service: Deactivated successfully. Jan 23 18:29:37.960000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-46.62.141.192:22-46.62.141.104:62355 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:37.979000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-46.62.141.192:22-46.62.141.104:62357 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:37.979794 systemd[1]: Started sshd@26-46.62.141.192:22-46.62.141.104:62357.service - OpenSSH per-connection server daemon (46.62.141.104:62357). Jan 23 18:29:38.103765 sshd[2307]: Received disconnect from 46.62.141.104 port 62357:11: Bye Bye [preauth] Jan 23 18:29:38.103765 sshd[2307]: Disconnected from authenticating user root 46.62.141.104 port 62357 [preauth] Jan 23 18:29:38.103000 audit[2307]: USER_ERR pid=2307 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:38.107784 systemd[1]: sshd@26-46.62.141.192:22-46.62.141.104:62357.service: Deactivated successfully. Jan 23 18:29:38.108000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-46.62.141.192:22-46.62.141.104:62357 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:38.134756 systemd[1]: Started sshd@27-46.62.141.192:22-46.62.141.104:62359.service - OpenSSH per-connection server daemon (46.62.141.104:62359). Jan 23 18:29:38.134000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-46.62.141.192:22-46.62.141.104:62359 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:38.251409 sshd[2313]: Invalid user admin from 46.62.141.104 port 62359 Jan 23 18:29:38.258438 sshd[2313]: Received disconnect from 46.62.141.104 port 62359:11: Bye Bye [preauth] Jan 23 18:29:38.258438 sshd[2313]: Disconnected from invalid user admin 46.62.141.104 port 62359 [preauth] Jan 23 18:29:38.258000 audit[2313]: USER_ERR pid=2313 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:38.262300 systemd[1]: sshd@27-46.62.141.192:22-46.62.141.104:62359.service: Deactivated successfully. Jan 23 18:29:38.262000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-46.62.141.192:22-46.62.141.104:62359 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:38.283000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-46.62.141.192:22-46.62.141.104:62361 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:38.283221 systemd[1]: Started sshd@28-46.62.141.192:22-46.62.141.104:62361.service - OpenSSH per-connection server daemon (46.62.141.104:62361). Jan 23 18:29:38.406290 sshd[2319]: Invalid user user from 46.62.141.104 port 62361 Jan 23 18:29:38.413240 sshd[2319]: Received disconnect from 46.62.141.104 port 62361:11: Bye Bye [preauth] Jan 23 18:29:38.413240 sshd[2319]: Disconnected from invalid user user 46.62.141.104 port 62361 [preauth] Jan 23 18:29:38.413000 audit[2319]: USER_ERR pid=2319 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:38.417145 systemd[1]: sshd@28-46.62.141.192:22-46.62.141.104:62361.service: Deactivated successfully. Jan 23 18:29:38.417000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-46.62.141.192:22-46.62.141.104:62361 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:38.436917 systemd[1]: Started sshd@29-46.62.141.192:22-46.62.141.104:62363.service - OpenSSH per-connection server daemon (46.62.141.104:62363). Jan 23 18:29:38.436000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-46.62.141.192:22-46.62.141.104:62363 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:38.546186 sshd[2325]: Invalid user user2 from 46.62.141.104 port 62363 Jan 23 18:29:38.553257 sshd[2325]: Received disconnect from 46.62.141.104 port 62363:11: Bye Bye [preauth] Jan 23 18:29:38.553257 sshd[2325]: Disconnected from invalid user user2 46.62.141.104 port 62363 [preauth] Jan 23 18:29:38.553000 audit[2325]: USER_ERR pid=2325 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:38.557221 systemd[1]: sshd@29-46.62.141.192:22-46.62.141.104:62363.service: Deactivated successfully. Jan 23 18:29:38.557000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-46.62.141.192:22-46.62.141.104:62363 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:38.577000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@30-46.62.141.192:22-46.62.141.104:62365 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:38.577673 systemd[1]: Started sshd@30-46.62.141.192:22-46.62.141.104:62365.service - OpenSSH per-connection server daemon (46.62.141.104:62365). Jan 23 18:29:38.701956 sshd[2331]: Received disconnect from 46.62.141.104 port 62365:11: Bye Bye [preauth] Jan 23 18:29:38.701956 sshd[2331]: Disconnected from authenticating user root 46.62.141.104 port 62365 [preauth] Jan 23 18:29:38.701000 audit[2331]: USER_ERR pid=2331 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:38.705682 systemd[1]: sshd@30-46.62.141.192:22-46.62.141.104:62365.service: Deactivated successfully. Jan 23 18:29:38.705000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@30-46.62.141.192:22-46.62.141.104:62365 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:38.730000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@31-46.62.141.192:22-46.62.141.104:62367 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:38.730702 systemd[1]: Started sshd@31-46.62.141.192:22-46.62.141.104:62367.service - OpenSSH per-connection server daemon (46.62.141.104:62367). Jan 23 18:29:38.848172 sshd[2337]: Invalid user admin from 46.62.141.104 port 62367 Jan 23 18:29:38.855305 sshd[2337]: Received disconnect from 46.62.141.104 port 62367:11: Bye Bye [preauth] Jan 23 18:29:38.855305 sshd[2337]: Disconnected from invalid user admin 46.62.141.104 port 62367 [preauth] Jan 23 18:29:38.855000 audit[2337]: USER_ERR pid=2337 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:38.859104 systemd[1]: sshd@31-46.62.141.192:22-46.62.141.104:62367.service: Deactivated successfully. Jan 23 18:29:38.859000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@31-46.62.141.192:22-46.62.141.104:62367 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:38.880000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@32-46.62.141.192:22-46.62.141.104:62370 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:38.880184 systemd[1]: Started sshd@32-46.62.141.192:22-46.62.141.104:62370.service - OpenSSH per-connection server daemon (46.62.141.104:62370). Jan 23 18:29:39.021586 sshd[2343]: Invalid user user from 46.62.141.104 port 62370 Jan 23 18:29:39.028501 sshd[2343]: Received disconnect from 46.62.141.104 port 62370:11: Bye Bye [preauth] Jan 23 18:29:39.028501 sshd[2343]: Disconnected from invalid user user 46.62.141.104 port 62370 [preauth] Jan 23 18:29:39.028000 audit[2343]: USER_ERR pid=2343 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:39.032372 systemd[1]: sshd@32-46.62.141.192:22-46.62.141.104:62370.service: Deactivated successfully. Jan 23 18:29:39.032000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@32-46.62.141.192:22-46.62.141.104:62370 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:39.057413 systemd[1]: Started sshd@33-46.62.141.192:22-46.62.141.104:62372.service - OpenSSH per-connection server daemon (46.62.141.104:62372). Jan 23 18:29:39.057000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@33-46.62.141.192:22-46.62.141.104:62372 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:39.170761 sshd[2349]: Invalid user user2 from 46.62.141.104 port 62372 Jan 23 18:29:39.177211 sshd[2349]: Received disconnect from 46.62.141.104 port 62372:11: Bye Bye [preauth] Jan 23 18:29:39.177211 sshd[2349]: Disconnected from invalid user user2 46.62.141.104 port 62372 [preauth] Jan 23 18:29:39.177000 audit[2349]: USER_ERR pid=2349 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:39.180155 systemd[1]: sshd@33-46.62.141.192:22-46.62.141.104:62372.service: Deactivated successfully. Jan 23 18:29:39.180000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@33-46.62.141.192:22-46.62.141.104:62372 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:39.203000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@34-46.62.141.192:22-46.62.141.104:62374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:39.203429 systemd[1]: Started sshd@34-46.62.141.192:22-46.62.141.104:62374.service - OpenSSH per-connection server daemon (46.62.141.104:62374). Jan 23 18:29:39.309585 sshd[2355]: Received disconnect from 46.62.141.104 port 62374:11: Bye Bye [preauth] Jan 23 18:29:39.309585 sshd[2355]: Disconnected from authenticating user root 46.62.141.104 port 62374 [preauth] Jan 23 18:29:39.309000 audit[2355]: USER_ERR pid=2355 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:39.313385 systemd[1]: sshd@34-46.62.141.192:22-46.62.141.104:62374.service: Deactivated successfully. Jan 23 18:29:39.313000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@34-46.62.141.192:22-46.62.141.104:62374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:39.340000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@35-46.62.141.192:22-46.62.141.104:62376 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:39.340200 systemd[1]: Started sshd@35-46.62.141.192:22-46.62.141.104:62376.service - OpenSSH per-connection server daemon (46.62.141.104:62376). Jan 23 18:29:39.457513 sshd[2361]: Invalid user admin from 46.62.141.104 port 62376 Jan 23 18:29:39.464121 sshd[2361]: Received disconnect from 46.62.141.104 port 62376:11: Bye Bye [preauth] Jan 23 18:29:39.464121 sshd[2361]: Disconnected from invalid user admin 46.62.141.104 port 62376 [preauth] Jan 23 18:29:39.464000 audit[2361]: USER_ERR pid=2361 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:39.468122 systemd[1]: sshd@35-46.62.141.192:22-46.62.141.104:62376.service: Deactivated successfully. Jan 23 18:29:39.468000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@35-46.62.141.192:22-46.62.141.104:62376 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:39.488000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@36-46.62.141.192:22-46.62.141.104:62378 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:39.488499 systemd[1]: Started sshd@36-46.62.141.192:22-46.62.141.104:62378.service - OpenSSH per-connection server daemon (46.62.141.104:62378). Jan 23 18:29:39.608515 sshd[2367]: Invalid user user from 46.62.141.104 port 62378 Jan 23 18:29:39.615694 sshd[2367]: Received disconnect from 46.62.141.104 port 62378:11: Bye Bye [preauth] Jan 23 18:29:39.615694 sshd[2367]: Disconnected from invalid user user 46.62.141.104 port 62378 [preauth] Jan 23 18:29:39.615000 audit[2367]: USER_ERR pid=2367 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:39.620073 systemd[1]: sshd@36-46.62.141.192:22-46.62.141.104:62378.service: Deactivated successfully. Jan 23 18:29:39.620000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@36-46.62.141.192:22-46.62.141.104:62378 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:39.639000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@37-46.62.141.192:22-46.62.141.104:62380 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:39.639697 systemd[1]: Started sshd@37-46.62.141.192:22-46.62.141.104:62380.service - OpenSSH per-connection server daemon (46.62.141.104:62380). Jan 23 18:29:39.759056 sshd[2373]: Invalid user user2 from 46.62.141.104 port 62380 Jan 23 18:29:39.766334 sshd[2373]: Received disconnect from 46.62.141.104 port 62380:11: Bye Bye [preauth] Jan 23 18:29:39.766334 sshd[2373]: Disconnected from invalid user user2 46.62.141.104 port 62380 [preauth] Jan 23 18:29:39.766000 audit[2373]: USER_ERR pid=2373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:39.770127 systemd[1]: sshd@37-46.62.141.192:22-46.62.141.104:62380.service: Deactivated successfully. Jan 23 18:29:39.770000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@37-46.62.141.192:22-46.62.141.104:62380 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:39.796000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@38-46.62.141.192:22-46.62.141.104:62383 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:39.796587 systemd[1]: Started sshd@38-46.62.141.192:22-46.62.141.104:62383.service - OpenSSH per-connection server daemon (46.62.141.104:62383). Jan 23 18:29:39.915507 sshd[2379]: Received disconnect from 46.62.141.104 port 62383:11: Bye Bye [preauth] Jan 23 18:29:39.915507 sshd[2379]: Disconnected from authenticating user root 46.62.141.104 port 62383 [preauth] Jan 23 18:29:39.915000 audit[2379]: USER_ERR pid=2379 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:39.918456 systemd[1]: sshd@38-46.62.141.192:22-46.62.141.104:62383.service: Deactivated successfully. Jan 23 18:29:39.918000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@38-46.62.141.192:22-46.62.141.104:62383 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:39.980000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@39-46.62.141.192:22-46.62.141.104:62385 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:39.980875 systemd[1]: Started sshd@39-46.62.141.192:22-46.62.141.104:62385.service - OpenSSH per-connection server daemon (46.62.141.104:62385). Jan 23 18:29:40.097910 sshd[2385]: Invalid user admin from 46.62.141.104 port 62385 Jan 23 18:29:40.105154 sshd[2385]: Received disconnect from 46.62.141.104 port 62385:11: Bye Bye [preauth] Jan 23 18:29:40.105154 sshd[2385]: Disconnected from invalid user admin 46.62.141.104 port 62385 [preauth] Jan 23 18:29:40.105000 audit[2385]: USER_ERR pid=2385 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:40.108958 systemd[1]: sshd@39-46.62.141.192:22-46.62.141.104:62385.service: Deactivated successfully. Jan 23 18:29:40.109000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@39-46.62.141.192:22-46.62.141.104:62385 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:40.131000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@40-46.62.141.192:22-46.62.141.104:62387 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:40.131474 systemd[1]: Started sshd@40-46.62.141.192:22-46.62.141.104:62387.service - OpenSSH per-connection server daemon (46.62.141.104:62387). Jan 23 18:29:40.251851 sshd[2391]: Invalid user user from 46.62.141.104 port 62387 Jan 23 18:29:40.258333 sshd[2391]: Received disconnect from 46.62.141.104 port 62387:11: Bye Bye [preauth] Jan 23 18:29:40.258333 sshd[2391]: Disconnected from invalid user user 46.62.141.104 port 62387 [preauth] Jan 23 18:29:40.258000 audit[2391]: USER_ERR pid=2391 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:40.262146 systemd[1]: sshd@40-46.62.141.192:22-46.62.141.104:62387.service: Deactivated successfully. Jan 23 18:29:40.262000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@40-46.62.141.192:22-46.62.141.104:62387 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:40.285000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@41-46.62.141.192:22-46.62.141.104:62389 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:40.285868 systemd[1]: Started sshd@41-46.62.141.192:22-46.62.141.104:62389.service - OpenSSH per-connection server daemon (46.62.141.104:62389). Jan 23 18:29:40.404761 sshd[2397]: Invalid user user2 from 46.62.141.104 port 62389 Jan 23 18:29:40.411533 sshd[2397]: Received disconnect from 46.62.141.104 port 62389:11: Bye Bye [preauth] Jan 23 18:29:40.411533 sshd[2397]: Disconnected from invalid user user2 46.62.141.104 port 62389 [preauth] Jan 23 18:29:40.411000 audit[2397]: USER_ERR pid=2397 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:40.415817 systemd[1]: sshd@41-46.62.141.192:22-46.62.141.104:62389.service: Deactivated successfully. Jan 23 18:29:40.416000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@41-46.62.141.192:22-46.62.141.104:62389 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:40.435000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@42-46.62.141.192:22-46.62.141.104:62391 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:40.435676 systemd[1]: Started sshd@42-46.62.141.192:22-46.62.141.104:62391.service - OpenSSH per-connection server daemon (46.62.141.104:62391). Jan 23 18:29:40.558099 sshd[2403]: Received disconnect from 46.62.141.104 port 62391:11: Bye Bye [preauth] Jan 23 18:29:40.558099 sshd[2403]: Disconnected from authenticating user root 46.62.141.104 port 62391 [preauth] Jan 23 18:29:40.558000 audit[2403]: USER_ERR pid=2403 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:40.560817 kernel: kauditd_printk_skb: 99 callbacks suppressed Jan 23 18:29:40.560866 kernel: audit: type=1109 audit(1769192980.558:312): pid=2403 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:40.587695 systemd[1]: sshd@42-46.62.141.192:22-46.62.141.104:62391.service: Deactivated successfully. Jan 23 18:29:40.587000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@42-46.62.141.192:22-46.62.141.104:62391 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:40.598331 kernel: audit: type=1131 audit(1769192980.587:313): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@42-46.62.141.192:22-46.62.141.104:62391 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:40.604510 systemd[1]: Started sshd@43-46.62.141.192:22-46.62.141.104:62393.service - OpenSSH per-connection server daemon (46.62.141.104:62393). Jan 23 18:29:40.604000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@43-46.62.141.192:22-46.62.141.104:62393 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:40.615340 kernel: audit: type=1130 audit(1769192980.604:314): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@43-46.62.141.192:22-46.62.141.104:62393 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:40.709755 sshd[2409]: Invalid user admin from 46.62.141.104 port 62393 Jan 23 18:29:40.716820 sshd[2409]: Received disconnect from 46.62.141.104 port 62393:11: Bye Bye [preauth] Jan 23 18:29:40.716820 sshd[2409]: Disconnected from invalid user admin 46.62.141.104 port 62393 [preauth] Jan 23 18:29:40.716000 audit[2409]: USER_ERR pid=2409 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:40.720347 systemd[1]: sshd@43-46.62.141.192:22-46.62.141.104:62393.service: Deactivated successfully. Jan 23 18:29:40.732169 kernel: audit: type=1109 audit(1769192980.716:315): pid=2409 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:40.732238 kernel: audit: type=1131 audit(1769192980.720:316): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@43-46.62.141.192:22-46.62.141.104:62393 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:40.720000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@43-46.62.141.192:22-46.62.141.104:62393 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:40.755000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@44-46.62.141.192:22-46.62.141.104:62394 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:40.755409 systemd[1]: Started sshd@44-46.62.141.192:22-46.62.141.104:62394.service - OpenSSH per-connection server daemon (46.62.141.104:62394). Jan 23 18:29:40.767318 kernel: audit: type=1130 audit(1769192980.755:317): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@44-46.62.141.192:22-46.62.141.104:62394 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:40.864786 sshd[2415]: Invalid user user from 46.62.141.104 port 62394 Jan 23 18:29:40.871472 sshd[2415]: Received disconnect from 46.62.141.104 port 62394:11: Bye Bye [preauth] Jan 23 18:29:40.871472 sshd[2415]: Disconnected from invalid user user 46.62.141.104 port 62394 [preauth] Jan 23 18:29:40.871000 audit[2415]: USER_ERR pid=2415 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:40.874143 systemd[1]: sshd@44-46.62.141.192:22-46.62.141.104:62394.service: Deactivated successfully. Jan 23 18:29:40.883305 kernel: audit: type=1109 audit(1769192980.871:318): pid=2415 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:40.874000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@44-46.62.141.192:22-46.62.141.104:62394 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:40.895325 kernel: audit: type=1131 audit(1769192980.874:319): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@44-46.62.141.192:22-46.62.141.104:62394 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:40.909532 systemd[1]: Started sshd@45-46.62.141.192:22-46.62.141.104:62396.service - OpenSSH per-connection server daemon (46.62.141.104:62396). Jan 23 18:29:40.909000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@45-46.62.141.192:22-46.62.141.104:62396 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:40.922298 kernel: audit: type=1130 audit(1769192980.909:320): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@45-46.62.141.192:22-46.62.141.104:62396 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:41.016360 sshd[2421]: Invalid user user2 from 46.62.141.104 port 62396 Jan 23 18:29:41.022154 sshd[2421]: Received disconnect from 46.62.141.104 port 62396:11: Bye Bye [preauth] Jan 23 18:29:41.022154 sshd[2421]: Disconnected from invalid user user2 46.62.141.104 port 62396 [preauth] Jan 23 18:29:41.022000 audit[2421]: USER_ERR pid=2421 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:41.026421 systemd[1]: sshd@45-46.62.141.192:22-46.62.141.104:62396.service: Deactivated successfully. Jan 23 18:29:41.034326 kernel: audit: type=1109 audit(1769192981.022:321): pid=2421 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:41.026000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@45-46.62.141.192:22-46.62.141.104:62396 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:41.047188 systemd[1]: Started sshd@46-46.62.141.192:22-46.62.141.104:62399.service - OpenSSH per-connection server daemon (46.62.141.104:62399). Jan 23 18:29:41.047000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@46-46.62.141.192:22-46.62.141.104:62399 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:41.169252 sshd[2427]: Received disconnect from 46.62.141.104 port 62399:11: Bye Bye [preauth] Jan 23 18:29:41.169252 sshd[2427]: Disconnected from authenticating user root 46.62.141.104 port 62399 [preauth] Jan 23 18:29:41.169000 audit[2427]: USER_ERR pid=2427 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:41.172691 systemd[1]: sshd@46-46.62.141.192:22-46.62.141.104:62399.service: Deactivated successfully. Jan 23 18:29:41.173000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@46-46.62.141.192:22-46.62.141.104:62399 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:41.194000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@47-46.62.141.192:22-46.62.141.104:62401 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:41.194198 systemd[1]: Started sshd@47-46.62.141.192:22-46.62.141.104:62401.service - OpenSSH per-connection server daemon (46.62.141.104:62401). Jan 23 18:29:41.312504 sshd[2433]: Invalid user admin from 46.62.141.104 port 62401 Jan 23 18:29:41.318983 sshd[2433]: Received disconnect from 46.62.141.104 port 62401:11: Bye Bye [preauth] Jan 23 18:29:41.318983 sshd[2433]: Disconnected from invalid user admin 46.62.141.104 port 62401 [preauth] Jan 23 18:29:41.318000 audit[2433]: USER_ERR pid=2433 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:41.322569 systemd[1]: sshd@47-46.62.141.192:22-46.62.141.104:62401.service: Deactivated successfully. Jan 23 18:29:41.322000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@47-46.62.141.192:22-46.62.141.104:62401 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:41.342000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@48-46.62.141.192:22-46.62.141.104:62403 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:41.342454 systemd[1]: Started sshd@48-46.62.141.192:22-46.62.141.104:62403.service - OpenSSH per-connection server daemon (46.62.141.104:62403). Jan 23 18:29:41.462749 sshd[2439]: Invalid user user from 46.62.141.104 port 62403 Jan 23 18:29:41.469329 sshd[2439]: Received disconnect from 46.62.141.104 port 62403:11: Bye Bye [preauth] Jan 23 18:29:41.469444 sshd[2439]: Disconnected from invalid user user 46.62.141.104 port 62403 [preauth] Jan 23 18:29:41.469000 audit[2439]: USER_ERR pid=2439 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:41.473230 systemd[1]: sshd@48-46.62.141.192:22-46.62.141.104:62403.service: Deactivated successfully. Jan 23 18:29:41.473000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@48-46.62.141.192:22-46.62.141.104:62403 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:41.494000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@49-46.62.141.192:22-46.62.141.104:62405 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:41.494180 systemd[1]: Started sshd@49-46.62.141.192:22-46.62.141.104:62405.service - OpenSSH per-connection server daemon (46.62.141.104:62405). Jan 23 18:29:41.615888 sshd[2445]: Invalid user user2 from 46.62.141.104 port 62405 Jan 23 18:29:41.622871 sshd[2445]: Received disconnect from 46.62.141.104 port 62405:11: Bye Bye [preauth] Jan 23 18:29:41.622871 sshd[2445]: Disconnected from invalid user user2 46.62.141.104 port 62405 [preauth] Jan 23 18:29:41.622000 audit[2445]: USER_ERR pid=2445 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:41.626890 systemd[1]: sshd@49-46.62.141.192:22-46.62.141.104:62405.service: Deactivated successfully. Jan 23 18:29:41.627000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@49-46.62.141.192:22-46.62.141.104:62405 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:41.666000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@50-46.62.141.192:22-46.62.141.104:62407 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:41.666503 systemd[1]: Started sshd@50-46.62.141.192:22-46.62.141.104:62407.service - OpenSSH per-connection server daemon (46.62.141.104:62407). Jan 23 18:29:41.781179 sshd[2451]: Received disconnect from 46.62.141.104 port 62407:11: Bye Bye [preauth] Jan 23 18:29:41.781179 sshd[2451]: Disconnected from authenticating user root 46.62.141.104 port 62407 [preauth] Jan 23 18:29:41.781000 audit[2451]: USER_ERR pid=2451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:41.785195 systemd[1]: sshd@50-46.62.141.192:22-46.62.141.104:62407.service: Deactivated successfully. Jan 23 18:29:41.785000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@50-46.62.141.192:22-46.62.141.104:62407 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:41.806000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@51-46.62.141.192:22-46.62.141.104:62408 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:41.806759 systemd[1]: Started sshd@51-46.62.141.192:22-46.62.141.104:62408.service - OpenSSH per-connection server daemon (46.62.141.104:62408). Jan 23 18:29:41.921341 sshd[2457]: Invalid user admin from 46.62.141.104 port 62408 Jan 23 18:29:41.928447 sshd[2457]: Received disconnect from 46.62.141.104 port 62408:11: Bye Bye [preauth] Jan 23 18:29:41.928447 sshd[2457]: Disconnected from invalid user admin 46.62.141.104 port 62408 [preauth] Jan 23 18:29:41.928000 audit[2457]: USER_ERR pid=2457 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:41.932457 systemd[1]: sshd@51-46.62.141.192:22-46.62.141.104:62408.service: Deactivated successfully. Jan 23 18:29:41.932000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@51-46.62.141.192:22-46.62.141.104:62408 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:41.968000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@52-46.62.141.192:22-46.62.141.104:62410 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:41.968237 systemd[1]: Started sshd@52-46.62.141.192:22-46.62.141.104:62410.service - OpenSSH per-connection server daemon (46.62.141.104:62410). Jan 23 18:29:42.085111 sshd[2463]: Invalid user user from 46.62.141.104 port 62410 Jan 23 18:29:42.092240 sshd[2463]: Received disconnect from 46.62.141.104 port 62410:11: Bye Bye [preauth] Jan 23 18:29:42.092240 sshd[2463]: Disconnected from invalid user user 46.62.141.104 port 62410 [preauth] Jan 23 18:29:42.092000 audit[2463]: USER_ERR pid=2463 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:42.096378 systemd[1]: sshd@52-46.62.141.192:22-46.62.141.104:62410.service: Deactivated successfully. Jan 23 18:29:42.096000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@52-46.62.141.192:22-46.62.141.104:62410 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:42.120000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@53-46.62.141.192:22-46.62.141.104:62412 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:42.119995 systemd[1]: Started sshd@53-46.62.141.192:22-46.62.141.104:62412.service - OpenSSH per-connection server daemon (46.62.141.104:62412). Jan 23 18:29:42.234362 sshd[2469]: Invalid user user2 from 46.62.141.104 port 62412 Jan 23 18:29:42.240848 sshd[2469]: Received disconnect from 46.62.141.104 port 62412:11: Bye Bye [preauth] Jan 23 18:29:42.240848 sshd[2469]: Disconnected from invalid user user2 46.62.141.104 port 62412 [preauth] Jan 23 18:29:42.240000 audit[2469]: USER_ERR pid=2469 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:42.244876 systemd[1]: sshd@53-46.62.141.192:22-46.62.141.104:62412.service: Deactivated successfully. Jan 23 18:29:42.245000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@53-46.62.141.192:22-46.62.141.104:62412 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:42.265000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@54-46.62.141.192:22-46.62.141.104:62414 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:42.265457 systemd[1]: Started sshd@54-46.62.141.192:22-46.62.141.104:62414.service - OpenSSH per-connection server daemon (46.62.141.104:62414). Jan 23 18:29:42.388429 sshd[2475]: Received disconnect from 46.62.141.104 port 62414:11: Bye Bye [preauth] Jan 23 18:29:42.388429 sshd[2475]: Disconnected from authenticating user root 46.62.141.104 port 62414 [preauth] Jan 23 18:29:42.388000 audit[2475]: USER_ERR pid=2475 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:42.393175 systemd[1]: sshd@54-46.62.141.192:22-46.62.141.104:62414.service: Deactivated successfully. Jan 23 18:29:42.393000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@54-46.62.141.192:22-46.62.141.104:62414 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:42.410000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@55-46.62.141.192:22-46.62.141.104:62416 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:42.410673 systemd[1]: Started sshd@55-46.62.141.192:22-46.62.141.104:62416.service - OpenSSH per-connection server daemon (46.62.141.104:62416). Jan 23 18:29:42.529126 sshd[2481]: Invalid user admin from 46.62.141.104 port 62416 Jan 23 18:29:42.535824 sshd[2481]: Received disconnect from 46.62.141.104 port 62416:11: Bye Bye [preauth] Jan 23 18:29:42.535824 sshd[2481]: Disconnected from invalid user admin 46.62.141.104 port 62416 [preauth] Jan 23 18:29:42.535000 audit[2481]: USER_ERR pid=2481 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:42.539887 systemd[1]: sshd@55-46.62.141.192:22-46.62.141.104:62416.service: Deactivated successfully. Jan 23 18:29:42.540000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@55-46.62.141.192:22-46.62.141.104:62416 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:42.559000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@56-46.62.141.192:22-46.62.141.104:62420 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:42.559620 systemd[1]: Started sshd@56-46.62.141.192:22-46.62.141.104:62420.service - OpenSSH per-connection server daemon (46.62.141.104:62420). Jan 23 18:29:42.671342 sshd[2487]: Invalid user user from 46.62.141.104 port 62420 Jan 23 18:29:42.679081 sshd[2487]: Received disconnect from 46.62.141.104 port 62420:11: Bye Bye [preauth] Jan 23 18:29:42.679081 sshd[2487]: Disconnected from invalid user user 46.62.141.104 port 62420 [preauth] Jan 23 18:29:42.678000 audit[2487]: USER_ERR pid=2487 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:42.682903 systemd[1]: sshd@56-46.62.141.192:22-46.62.141.104:62420.service: Deactivated successfully. Jan 23 18:29:42.683000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@56-46.62.141.192:22-46.62.141.104:62420 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:42.699820 systemd-timesyncd[1454]: Contacted time server 129.70.132.33:123 (2.flatcar.pool.ntp.org). Jan 23 18:29:42.700068 systemd-timesyncd[1454]: Initial clock synchronization to Fri 2026-01-23 18:29:42.594937 UTC. Jan 23 18:29:42.705000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@57-46.62.141.192:22-46.62.141.104:62423 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:42.705530 systemd[1]: Started sshd@57-46.62.141.192:22-46.62.141.104:62423.service - OpenSSH per-connection server daemon (46.62.141.104:62423). Jan 23 18:29:42.823960 sshd[2493]: Invalid user user2 from 46.62.141.104 port 62423 Jan 23 18:29:42.830242 sshd[2493]: Received disconnect from 46.62.141.104 port 62423:11: Bye Bye [preauth] Jan 23 18:29:42.830242 sshd[2493]: Disconnected from invalid user user2 46.62.141.104 port 62423 [preauth] Jan 23 18:29:42.830000 audit[2493]: USER_ERR pid=2493 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:42.833970 systemd[1]: sshd@57-46.62.141.192:22-46.62.141.104:62423.service: Deactivated successfully. Jan 23 18:29:42.834000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@57-46.62.141.192:22-46.62.141.104:62423 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:42.852000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@58-46.62.141.192:22-46.62.141.104:62424 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:42.852521 systemd[1]: Started sshd@58-46.62.141.192:22-46.62.141.104:62424.service - OpenSSH per-connection server daemon (46.62.141.104:62424). Jan 23 18:29:42.981481 sshd[2499]: Received disconnect from 46.62.141.104 port 62424:11: Bye Bye [preauth] Jan 23 18:29:42.981481 sshd[2499]: Disconnected from authenticating user root 46.62.141.104 port 62424 [preauth] Jan 23 18:29:42.981000 audit[2499]: USER_ERR pid=2499 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:42.985951 systemd[1]: sshd@58-46.62.141.192:22-46.62.141.104:62424.service: Deactivated successfully. Jan 23 18:29:42.986000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@58-46.62.141.192:22-46.62.141.104:62424 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:43.005000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@59-46.62.141.192:22-46.62.141.104:62426 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:43.006441 systemd[1]: Started sshd@59-46.62.141.192:22-46.62.141.104:62426.service - OpenSSH per-connection server daemon (46.62.141.104:62426). Jan 23 18:29:43.108524 sshd[2505]: Invalid user admin from 46.62.141.104 port 62426 Jan 23 18:29:43.115504 sshd[2505]: Received disconnect from 46.62.141.104 port 62426:11: Bye Bye [preauth] Jan 23 18:29:43.115504 sshd[2505]: Disconnected from invalid user admin 46.62.141.104 port 62426 [preauth] Jan 23 18:29:43.114000 audit[2505]: USER_ERR pid=2505 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:43.119181 systemd[1]: sshd@59-46.62.141.192:22-46.62.141.104:62426.service: Deactivated successfully. Jan 23 18:29:43.118000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@59-46.62.141.192:22-46.62.141.104:62426 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:43.140000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@60-46.62.141.192:22-46.62.141.104:62428 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:43.140794 systemd[1]: Started sshd@60-46.62.141.192:22-46.62.141.104:62428.service - OpenSSH per-connection server daemon (46.62.141.104:62428). Jan 23 18:29:43.249099 sshd[2511]: Invalid user user from 46.62.141.104 port 62428 Jan 23 18:29:43.255504 sshd[2511]: Received disconnect from 46.62.141.104 port 62428:11: Bye Bye [preauth] Jan 23 18:29:43.255504 sshd[2511]: Disconnected from invalid user user 46.62.141.104 port 62428 [preauth] Jan 23 18:29:43.254000 audit[2511]: USER_ERR pid=2511 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:43.259209 systemd[1]: sshd@60-46.62.141.192:22-46.62.141.104:62428.service: Deactivated successfully. Jan 23 18:29:43.258000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@60-46.62.141.192:22-46.62.141.104:62428 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:43.278000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@61-46.62.141.192:22-46.62.141.104:62430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:43.280023 systemd[1]: Started sshd@61-46.62.141.192:22-46.62.141.104:62430.service - OpenSSH per-connection server daemon (46.62.141.104:62430). Jan 23 18:29:43.396523 sshd[2517]: Invalid user user2 from 46.62.141.104 port 62430 Jan 23 18:29:43.403165 sshd[2517]: Received disconnect from 46.62.141.104 port 62430:11: Bye Bye [preauth] Jan 23 18:29:43.403165 sshd[2517]: Disconnected from invalid user user2 46.62.141.104 port 62430 [preauth] Jan 23 18:29:43.402000 audit[2517]: USER_ERR pid=2517 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:43.406722 systemd[1]: sshd@61-46.62.141.192:22-46.62.141.104:62430.service: Deactivated successfully. Jan 23 18:29:43.406000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@61-46.62.141.192:22-46.62.141.104:62430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:43.426000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@62-46.62.141.192:22-46.62.141.104:62432 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:43.427677 systemd[1]: Started sshd@62-46.62.141.192:22-46.62.141.104:62432.service - OpenSSH per-connection server daemon (46.62.141.104:62432). Jan 23 18:29:43.554770 sshd[2523]: Received disconnect from 46.62.141.104 port 62432:11: Bye Bye [preauth] Jan 23 18:29:43.554770 sshd[2523]: Disconnected from authenticating user root 46.62.141.104 port 62432 [preauth] Jan 23 18:29:43.553000 audit[2523]: USER_ERR pid=2523 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:43.559046 systemd[1]: sshd@62-46.62.141.192:22-46.62.141.104:62432.service: Deactivated successfully. Jan 23 18:29:43.558000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@62-46.62.141.192:22-46.62.141.104:62432 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:43.580000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@63-46.62.141.192:22-46.62.141.104:62434 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:43.581164 systemd[1]: Started sshd@63-46.62.141.192:22-46.62.141.104:62434.service - OpenSSH per-connection server daemon (46.62.141.104:62434). Jan 23 18:29:43.693945 sshd[2529]: Invalid user admin from 46.62.141.104 port 62434 Jan 23 18:29:43.700815 sshd[2529]: Received disconnect from 46.62.141.104 port 62434:11: Bye Bye [preauth] Jan 23 18:29:43.700815 sshd[2529]: Disconnected from invalid user admin 46.62.141.104 port 62434 [preauth] Jan 23 18:29:43.699000 audit[2529]: USER_ERR pid=2529 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:43.703530 systemd[1]: sshd@63-46.62.141.192:22-46.62.141.104:62434.service: Deactivated successfully. Jan 23 18:29:43.702000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@63-46.62.141.192:22-46.62.141.104:62434 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:43.731000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@64-46.62.141.192:22-46.62.141.104:62436 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:43.732638 systemd[1]: Started sshd@64-46.62.141.192:22-46.62.141.104:62436.service - OpenSSH per-connection server daemon (46.62.141.104:62436). Jan 23 18:29:43.852422 sshd[2535]: Invalid user user from 46.62.141.104 port 62436 Jan 23 18:29:43.860314 sshd[2535]: Received disconnect from 46.62.141.104 port 62436:11: Bye Bye [preauth] Jan 23 18:29:43.860314 sshd[2535]: Disconnected from invalid user user 46.62.141.104 port 62436 [preauth] Jan 23 18:29:43.859000 audit[2535]: USER_ERR pid=2535 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:43.863073 systemd[1]: sshd@64-46.62.141.192:22-46.62.141.104:62436.service: Deactivated successfully. Jan 23 18:29:43.862000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@64-46.62.141.192:22-46.62.141.104:62436 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:43.880000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@65-46.62.141.192:22-46.62.141.104:62437 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:43.881839 systemd[1]: Started sshd@65-46.62.141.192:22-46.62.141.104:62437.service - OpenSSH per-connection server daemon (46.62.141.104:62437). Jan 23 18:29:43.956788 sshd[2541]: Invalid user user2 from 46.62.141.104 port 62437 Jan 23 18:29:43.962555 sshd[2541]: Received disconnect from 46.62.141.104 port 62437:11: Bye Bye [preauth] Jan 23 18:29:43.962555 sshd[2541]: Disconnected from invalid user user2 46.62.141.104 port 62437 [preauth] Jan 23 18:29:43.962000 audit[2541]: USER_ERR pid=2541 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:43.966151 systemd[1]: sshd@65-46.62.141.192:22-46.62.141.104:62437.service: Deactivated successfully. Jan 23 18:29:43.966000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@65-46.62.141.192:22-46.62.141.104:62437 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:43.984000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@66-46.62.141.192:22-46.62.141.104:62439 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:43.985868 systemd[1]: Started sshd@66-46.62.141.192:22-46.62.141.104:62439.service - OpenSSH per-connection server daemon (46.62.141.104:62439). Jan 23 18:29:44.108248 sshd[2547]: Received disconnect from 46.62.141.104 port 62439:11: Bye Bye [preauth] Jan 23 18:29:44.108248 sshd[2547]: Disconnected from authenticating user root 46.62.141.104 port 62439 [preauth] Jan 23 18:29:44.107000 audit[2547]: USER_ERR pid=2547 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:44.111787 systemd[1]: sshd@66-46.62.141.192:22-46.62.141.104:62439.service: Deactivated successfully. Jan 23 18:29:44.111000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@66-46.62.141.192:22-46.62.141.104:62439 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:44.138000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@67-46.62.141.192:22-46.62.141.104:62441 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:44.138409 systemd[1]: Started sshd@67-46.62.141.192:22-46.62.141.104:62441.service - OpenSSH per-connection server daemon (46.62.141.104:62441). Jan 23 18:29:44.257489 sshd[2553]: Invalid user admin from 46.62.141.104 port 62441 Jan 23 18:29:44.264159 sshd[2553]: Received disconnect from 46.62.141.104 port 62441:11: Bye Bye [preauth] Jan 23 18:29:44.264159 sshd[2553]: Disconnected from invalid user admin 46.62.141.104 port 62441 [preauth] Jan 23 18:29:44.263000 audit[2553]: USER_ERR pid=2553 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:44.267753 systemd[1]: sshd@67-46.62.141.192:22-46.62.141.104:62441.service: Deactivated successfully. Jan 23 18:29:44.267000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@67-46.62.141.192:22-46.62.141.104:62441 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:44.288000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@68-46.62.141.192:22-46.62.141.104:62443 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:44.289694 systemd[1]: Started sshd@68-46.62.141.192:22-46.62.141.104:62443.service - OpenSSH per-connection server daemon (46.62.141.104:62443). Jan 23 18:29:44.396287 sshd[2559]: Invalid user user from 46.62.141.104 port 62443 Jan 23 18:29:44.402951 sshd[2559]: Received disconnect from 46.62.141.104 port 62443:11: Bye Bye [preauth] Jan 23 18:29:44.402951 sshd[2559]: Disconnected from invalid user user 46.62.141.104 port 62443 [preauth] Jan 23 18:29:44.402000 audit[2559]: USER_ERR pid=2559 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:44.406896 systemd[1]: sshd@68-46.62.141.192:22-46.62.141.104:62443.service: Deactivated successfully. Jan 23 18:29:44.407000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@68-46.62.141.192:22-46.62.141.104:62443 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:44.428000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@69-46.62.141.192:22-46.62.141.104:62445 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:44.429282 systemd[1]: Started sshd@69-46.62.141.192:22-46.62.141.104:62445.service - OpenSSH per-connection server daemon (46.62.141.104:62445). Jan 23 18:29:44.548329 sshd[2565]: Invalid user user2 from 46.62.141.104 port 62445 Jan 23 18:29:44.555197 sshd[2565]: Received disconnect from 46.62.141.104 port 62445:11: Bye Bye [preauth] Jan 23 18:29:44.555197 sshd[2565]: Disconnected from invalid user user2 46.62.141.104 port 62445 [preauth] Jan 23 18:29:44.554000 audit[2565]: USER_ERR pid=2565 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:44.557994 systemd[1]: sshd@69-46.62.141.192:22-46.62.141.104:62445.service: Deactivated successfully. Jan 23 18:29:44.557000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@69-46.62.141.192:22-46.62.141.104:62445 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:44.567770 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:29:44.567209Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"84afc9f0d5e63dd5 [logterm: 2, index: 11, vote: 15eb2e9460fb69a5] cast MsgPreVote for 5e70f16e3d77e6b8 [logterm: 2, index: 11] at term 2"} Jan 23 18:29:44.569517 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:29:44.569128Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"84afc9f0d5e63dd5 [term: 2] received a MsgVote message with higher term from 5e70f16e3d77e6b8 [term: 3]"} Jan 23 18:29:44.569517 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:29:44.569217Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"84afc9f0d5e63dd5 became follower at term 3"} Jan 23 18:29:44.570085 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:29:44.569237Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"84afc9f0d5e63dd5 [logterm: 2, index: 11, vote: 0] cast MsgVote for 5e70f16e3d77e6b8 [logterm: 2, index: 11] at term 3"} Jan 23 18:29:44.570085 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:29:44.569329Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"raft.node: 84afc9f0d5e63dd5 lost leader 15eb2e9460fb69a5 at term 3"} Jan 23 18:29:44.573973 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:29:44.571518Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"raft.node: 84afc9f0d5e63dd5 elected leader 5e70f16e3d77e6b8 at term 3"} Jan 23 18:29:44.580000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@70-46.62.141.192:22-46.62.141.104:62446 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:44.580872 systemd[1]: Started sshd@70-46.62.141.192:22-46.62.141.104:62446.service - OpenSSH per-connection server daemon (46.62.141.104:62446). Jan 23 18:29:44.698584 sshd[2571]: Received disconnect from 46.62.141.104 port 62446:11: Bye Bye [preauth] Jan 23 18:29:44.698584 sshd[2571]: Disconnected from authenticating user root 46.62.141.104 port 62446 [preauth] Jan 23 18:29:44.697000 audit[2571]: USER_ERR pid=2571 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:44.702166 systemd[1]: sshd@70-46.62.141.192:22-46.62.141.104:62446.service: Deactivated successfully. Jan 23 18:29:44.701000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@70-46.62.141.192:22-46.62.141.104:62446 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:44.722000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@71-46.62.141.192:22-46.62.141.104:62449 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:44.723997 systemd[1]: Started sshd@71-46.62.141.192:22-46.62.141.104:62449.service - OpenSSH per-connection server daemon (46.62.141.104:62449). Jan 23 18:29:44.846093 sshd[2577]: Invalid user admin from 46.62.141.104 port 62449 Jan 23 18:29:44.853486 sshd[2577]: Received disconnect from 46.62.141.104 port 62449:11: Bye Bye [preauth] Jan 23 18:29:44.853486 sshd[2577]: Disconnected from invalid user admin 46.62.141.104 port 62449 [preauth] Jan 23 18:29:44.852000 audit[2577]: USER_ERR pid=2577 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:44.857731 systemd[1]: sshd@71-46.62.141.192:22-46.62.141.104:62449.service: Deactivated successfully. Jan 23 18:29:44.857000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@71-46.62.141.192:22-46.62.141.104:62449 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:44.874000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@72-46.62.141.192:22-46.62.141.104:62451 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:44.875827 systemd[1]: Started sshd@72-46.62.141.192:22-46.62.141.104:62451.service - OpenSSH per-connection server daemon (46.62.141.104:62451). Jan 23 18:29:44.998825 sshd[2583]: Invalid user user from 46.62.141.104 port 62451 Jan 23 18:29:45.006223 sshd[2583]: Received disconnect from 46.62.141.104 port 62451:11: Bye Bye [preauth] Jan 23 18:29:45.006223 sshd[2583]: Disconnected from invalid user user 46.62.141.104 port 62451 [preauth] Jan 23 18:29:45.006000 audit[2583]: USER_ERR pid=2583 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:45.010042 systemd[1]: sshd@72-46.62.141.192:22-46.62.141.104:62451.service: Deactivated successfully. Jan 23 18:29:45.010000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@72-46.62.141.192:22-46.62.141.104:62451 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:45.027000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@73-46.62.141.192:22-46.62.141.104:62453 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:45.029012 systemd[1]: Started sshd@73-46.62.141.192:22-46.62.141.104:62453.service - OpenSSH per-connection server daemon (46.62.141.104:62453). Jan 23 18:29:45.154011 sshd[2589]: Invalid user user2 from 46.62.141.104 port 62453 Jan 23 18:29:45.160818 sshd[2589]: Received disconnect from 46.62.141.104 port 62453:11: Bye Bye [preauth] Jan 23 18:29:45.160818 sshd[2589]: Disconnected from invalid user user2 46.62.141.104 port 62453 [preauth] Jan 23 18:29:45.159000 audit[2589]: USER_ERR pid=2589 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:45.164792 systemd[1]: sshd@73-46.62.141.192:22-46.62.141.104:62453.service: Deactivated successfully. Jan 23 18:29:45.164000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@73-46.62.141.192:22-46.62.141.104:62453 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:45.187152 systemd[1]: Started sshd@74-46.62.141.192:22-46.62.141.104:62456.service - OpenSSH per-connection server daemon (46.62.141.104:62456). Jan 23 18:29:45.186000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@74-46.62.141.192:22-46.62.141.104:62456 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:45.309173 sshd[2595]: Received disconnect from 46.62.141.104 port 62456:11: Bye Bye [preauth] Jan 23 18:29:45.309173 sshd[2595]: Disconnected from authenticating user root 46.62.141.104 port 62456 [preauth] Jan 23 18:29:45.309000 audit[2595]: USER_ERR pid=2595 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:45.312885 systemd[1]: sshd@74-46.62.141.192:22-46.62.141.104:62456.service: Deactivated successfully. Jan 23 18:29:45.313000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@74-46.62.141.192:22-46.62.141.104:62456 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:45.337000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@75-46.62.141.192:22-46.62.141.104:62459 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:45.338841 systemd[1]: Started sshd@75-46.62.141.192:22-46.62.141.104:62459.service - OpenSSH per-connection server daemon (46.62.141.104:62459). Jan 23 18:29:45.459355 sshd[2601]: Invalid user admin from 46.62.141.104 port 62459 Jan 23 18:29:45.466643 sshd[2601]: Received disconnect from 46.62.141.104 port 62459:11: Bye Bye [preauth] Jan 23 18:29:45.466643 sshd[2601]: Disconnected from invalid user admin 46.62.141.104 port 62459 [preauth] Jan 23 18:29:45.465000 audit[2601]: USER_ERR pid=2601 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:45.470649 systemd[1]: sshd@75-46.62.141.192:22-46.62.141.104:62459.service: Deactivated successfully. Jan 23 18:29:45.469000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@75-46.62.141.192:22-46.62.141.104:62459 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:45.491000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@76-46.62.141.192:22-46.62.141.104:62463 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:45.491558 systemd[1]: Started sshd@76-46.62.141.192:22-46.62.141.104:62463.service - OpenSSH per-connection server daemon (46.62.141.104:62463). Jan 23 18:29:45.590900 sshd[2607]: Invalid user user from 46.62.141.104 port 62463 Jan 23 18:29:45.597550 sshd[2607]: Received disconnect from 46.62.141.104 port 62463:11: Bye Bye [preauth] Jan 23 18:29:45.597550 sshd[2607]: Disconnected from invalid user user 46.62.141.104 port 62463 [preauth] Jan 23 18:29:45.607345 kernel: kauditd_printk_skb: 92 callbacks suppressed Jan 23 18:29:45.607433 kernel: audit: type=1109 audit(1769192985.597:414): pid=2607 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:45.597000 audit[2607]: USER_ERR pid=2607 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:45.600299 systemd[1]: sshd@76-46.62.141.192:22-46.62.141.104:62463.service: Deactivated successfully. Jan 23 18:29:45.600000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@76-46.62.141.192:22-46.62.141.104:62463 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:45.615606 kernel: audit: type=1131 audit(1769192985.600:415): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@76-46.62.141.192:22-46.62.141.104:62463 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:45.638000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@77-46.62.141.192:22-46.62.141.104:62464 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:45.639136 systemd[1]: Started sshd@77-46.62.141.192:22-46.62.141.104:62464.service - OpenSSH per-connection server daemon (46.62.141.104:62464). Jan 23 18:29:45.651357 kernel: audit: type=1130 audit(1769192985.638:416): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@77-46.62.141.192:22-46.62.141.104:62464 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:45.754200 sshd[2613]: Invalid user user2 from 46.62.141.104 port 62464 Jan 23 18:29:45.761411 sshd[2613]: Received disconnect from 46.62.141.104 port 62464:11: Bye Bye [preauth] Jan 23 18:29:45.761411 sshd[2613]: Disconnected from invalid user user2 46.62.141.104 port 62464 [preauth] Jan 23 18:29:45.760000 audit[2613]: USER_ERR pid=2613 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:45.765611 systemd[1]: sshd@77-46.62.141.192:22-46.62.141.104:62464.service: Deactivated successfully. Jan 23 18:29:45.764000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@77-46.62.141.192:22-46.62.141.104:62464 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:45.776892 kernel: audit: type=1109 audit(1769192985.760:417): pid=2613 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:45.776943 kernel: audit: type=1131 audit(1769192985.764:418): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@77-46.62.141.192:22-46.62.141.104:62464 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:45.796000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@78-46.62.141.192:22-46.62.141.104:62466 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:45.796154 systemd[1]: Started sshd@78-46.62.141.192:22-46.62.141.104:62466.service - OpenSSH per-connection server daemon (46.62.141.104:62466). Jan 23 18:29:45.809316 kernel: audit: type=1130 audit(1769192985.796:419): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@78-46.62.141.192:22-46.62.141.104:62466 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:45.908919 sshd[2619]: Received disconnect from 46.62.141.104 port 62466:11: Bye Bye [preauth] Jan 23 18:29:45.908919 sshd[2619]: Disconnected from authenticating user root 46.62.141.104 port 62466 [preauth] Jan 23 18:29:45.908000 audit[2619]: USER_ERR pid=2619 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:45.912110 systemd[1]: sshd@78-46.62.141.192:22-46.62.141.104:62466.service: Deactivated successfully. Jan 23 18:29:45.916583 kernel: audit: type=1109 audit(1769192985.908:420): pid=2619 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:45.916680 kernel: audit: type=1131 audit(1769192985.912:421): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@78-46.62.141.192:22-46.62.141.104:62466 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:45.912000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@78-46.62.141.192:22-46.62.141.104:62466 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:45.929000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@79-46.62.141.192:22-46.62.141.104:62468 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:45.930471 systemd[1]: Started sshd@79-46.62.141.192:22-46.62.141.104:62468.service - OpenSSH per-connection server daemon (46.62.141.104:62468). Jan 23 18:29:45.938305 kernel: audit: type=1130 audit(1769192985.929:422): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@79-46.62.141.192:22-46.62.141.104:62468 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:46.031993 sshd[2625]: Invalid user admin from 46.62.141.104 port 62468 Jan 23 18:29:46.039963 sshd[2625]: Received disconnect from 46.62.141.104 port 62468:11: Bye Bye [preauth] Jan 23 18:29:46.039963 sshd[2625]: Disconnected from invalid user admin 46.62.141.104 port 62468 [preauth] Jan 23 18:29:46.047386 kernel: audit: type=1109 audit(1769192986.038:423): pid=2625 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:46.038000 audit[2625]: USER_ERR pid=2625 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:46.043788 systemd[1]: sshd@79-46.62.141.192:22-46.62.141.104:62468.service: Deactivated successfully. Jan 23 18:29:46.043000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@79-46.62.141.192:22-46.62.141.104:62468 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:46.065000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@80-46.62.141.192:22-46.62.141.104:62470 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:46.066456 systemd[1]: Started sshd@80-46.62.141.192:22-46.62.141.104:62470.service - OpenSSH per-connection server daemon (46.62.141.104:62470). Jan 23 18:29:46.173161 sshd[2631]: Invalid user user from 46.62.141.104 port 62470 Jan 23 18:29:46.179498 sshd[2631]: Received disconnect from 46.62.141.104 port 62470:11: Bye Bye [preauth] Jan 23 18:29:46.179498 sshd[2631]: Disconnected from invalid user user 46.62.141.104 port 62470 [preauth] Jan 23 18:29:46.179000 audit[2631]: USER_ERR pid=2631 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:46.183593 systemd[1]: sshd@80-46.62.141.192:22-46.62.141.104:62470.service: Deactivated successfully. Jan 23 18:29:46.182000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@80-46.62.141.192:22-46.62.141.104:62470 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:46.207858 systemd[1]: Started sshd@81-46.62.141.192:22-46.62.141.104:62472.service - OpenSSH per-connection server daemon (46.62.141.104:62472). Jan 23 18:29:46.207000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@81-46.62.141.192:22-46.62.141.104:62472 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:46.313236 sshd[2637]: Invalid user user2 from 46.62.141.104 port 62472 Jan 23 18:29:46.319117 sshd[2637]: Received disconnect from 46.62.141.104 port 62472:11: Bye Bye [preauth] Jan 23 18:29:46.319117 sshd[2637]: Disconnected from invalid user user2 46.62.141.104 port 62472 [preauth] Jan 23 18:29:46.319000 audit[2637]: USER_ERR pid=2637 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:46.322978 systemd[1]: sshd@81-46.62.141.192:22-46.62.141.104:62472.service: Deactivated successfully. Jan 23 18:29:46.323000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@81-46.62.141.192:22-46.62.141.104:62472 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:46.347953 systemd[1]: Started sshd@82-46.62.141.192:22-46.62.141.104:62473.service - OpenSSH per-connection server daemon (46.62.141.104:62473). Jan 23 18:29:46.347000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@82-46.62.141.192:22-46.62.141.104:62473 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:46.434190 sshd[2643]: Received disconnect from 46.62.141.104 port 62473:11: Bye Bye [preauth] Jan 23 18:29:46.434190 sshd[2643]: Disconnected from authenticating user root 46.62.141.104 port 62473 [preauth] Jan 23 18:29:46.434000 audit[2643]: USER_ERR pid=2643 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:46.437888 systemd[1]: sshd@82-46.62.141.192:22-46.62.141.104:62473.service: Deactivated successfully. Jan 23 18:29:46.438000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@82-46.62.141.192:22-46.62.141.104:62473 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:46.460000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@83-46.62.141.192:22-46.62.141.104:62475 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:46.460699 systemd[1]: Started sshd@83-46.62.141.192:22-46.62.141.104:62475.service - OpenSSH per-connection server daemon (46.62.141.104:62475). Jan 23 18:29:46.583363 sshd[2649]: Invalid user admin from 46.62.141.104 port 62475 Jan 23 18:29:46.591527 sshd[2649]: Received disconnect from 46.62.141.104 port 62475:11: Bye Bye [preauth] Jan 23 18:29:46.591527 sshd[2649]: Disconnected from invalid user admin 46.62.141.104 port 62475 [preauth] Jan 23 18:29:46.590000 audit[2649]: USER_ERR pid=2649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:46.595434 systemd[1]: sshd@83-46.62.141.192:22-46.62.141.104:62475.service: Deactivated successfully. Jan 23 18:29:46.594000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@83-46.62.141.192:22-46.62.141.104:62475 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:46.614000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@84-46.62.141.192:22-46.62.141.104:62479 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:46.615903 systemd[1]: Started sshd@84-46.62.141.192:22-46.62.141.104:62479.service - OpenSSH per-connection server daemon (46.62.141.104:62479). Jan 23 18:29:46.740956 sshd[2655]: Invalid user user from 46.62.141.104 port 62479 Jan 23 18:29:46.748155 sshd[2655]: Received disconnect from 46.62.141.104 port 62479:11: Bye Bye [preauth] Jan 23 18:29:46.748155 sshd[2655]: Disconnected from invalid user user 46.62.141.104 port 62479 [preauth] Jan 23 18:29:46.747000 audit[2655]: USER_ERR pid=2655 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:46.752007 systemd[1]: sshd@84-46.62.141.192:22-46.62.141.104:62479.service: Deactivated successfully. Jan 23 18:29:46.751000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@84-46.62.141.192:22-46.62.141.104:62479 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:46.775000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@85-46.62.141.192:22-46.62.141.104:62481 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:46.775855 systemd[1]: Started sshd@85-46.62.141.192:22-46.62.141.104:62481.service - OpenSSH per-connection server daemon (46.62.141.104:62481). Jan 23 18:29:46.904166 sshd[2661]: Invalid user user2 from 46.62.141.104 port 62481 Jan 23 18:29:46.911232 sshd[2661]: Received disconnect from 46.62.141.104 port 62481:11: Bye Bye [preauth] Jan 23 18:29:46.911232 sshd[2661]: Disconnected from invalid user user2 46.62.141.104 port 62481 [preauth] Jan 23 18:29:46.911000 audit[2661]: USER_ERR pid=2661 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:46.915308 systemd[1]: sshd@85-46.62.141.192:22-46.62.141.104:62481.service: Deactivated successfully. Jan 23 18:29:46.914000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@85-46.62.141.192:22-46.62.141.104:62481 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:46.935000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@86-46.62.141.192:22-46.62.141.104:62483 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:46.936605 systemd[1]: Started sshd@86-46.62.141.192:22-46.62.141.104:62483.service - OpenSSH per-connection server daemon (46.62.141.104:62483). Jan 23 18:29:47.056462 sshd[2667]: Received disconnect from 46.62.141.104 port 62483:11: Bye Bye [preauth] Jan 23 18:29:47.056462 sshd[2667]: Disconnected from authenticating user root 46.62.141.104 port 62483 [preauth] Jan 23 18:29:47.055000 audit[2667]: USER_ERR pid=2667 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:47.060319 systemd[1]: sshd@86-46.62.141.192:22-46.62.141.104:62483.service: Deactivated successfully. Jan 23 18:29:47.059000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@86-46.62.141.192:22-46.62.141.104:62483 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:47.080000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@87-46.62.141.192:22-46.62.141.104:62485 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:47.081877 systemd[1]: Started sshd@87-46.62.141.192:22-46.62.141.104:62485.service - OpenSSH per-connection server daemon (46.62.141.104:62485). Jan 23 18:29:47.198425 sshd[2673]: Invalid user admin from 46.62.141.104 port 62485 Jan 23 18:29:47.204016 sshd[2673]: Received disconnect from 46.62.141.104 port 62485:11: Bye Bye [preauth] Jan 23 18:29:47.204016 sshd[2673]: Disconnected from invalid user admin 46.62.141.104 port 62485 [preauth] Jan 23 18:29:47.202000 audit[2673]: USER_ERR pid=2673 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:47.205767 systemd[1]: sshd@87-46.62.141.192:22-46.62.141.104:62485.service: Deactivated successfully. Jan 23 18:29:47.205000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@87-46.62.141.192:22-46.62.141.104:62485 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:47.231000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@88-46.62.141.192:22-46.62.141.104:62487 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:47.232588 systemd[1]: Started sshd@88-46.62.141.192:22-46.62.141.104:62487.service - OpenSSH per-connection server daemon (46.62.141.104:62487). Jan 23 18:29:47.339227 sshd[2679]: Invalid user user from 46.62.141.104 port 62487 Jan 23 18:29:47.346150 sshd[2679]: Received disconnect from 46.62.141.104 port 62487:11: Bye Bye [preauth] Jan 23 18:29:47.346150 sshd[2679]: Disconnected from invalid user user 46.62.141.104 port 62487 [preauth] Jan 23 18:29:47.345000 audit[2679]: USER_ERR pid=2679 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:47.350324 systemd[1]: sshd@88-46.62.141.192:22-46.62.141.104:62487.service: Deactivated successfully. Jan 23 18:29:47.349000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@88-46.62.141.192:22-46.62.141.104:62487 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:47.368000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@89-46.62.141.192:22-46.62.141.104:62488 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:47.370023 systemd[1]: Started sshd@89-46.62.141.192:22-46.62.141.104:62488.service - OpenSSH per-connection server daemon (46.62.141.104:62488). Jan 23 18:29:47.483900 sshd[2685]: Invalid user user2 from 46.62.141.104 port 62488 Jan 23 18:29:47.490136 sshd[2685]: Received disconnect from 46.62.141.104 port 62488:11: Bye Bye [preauth] Jan 23 18:29:47.490136 sshd[2685]: Disconnected from invalid user user2 46.62.141.104 port 62488 [preauth] Jan 23 18:29:47.489000 audit[2685]: USER_ERR pid=2685 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:47.493978 systemd[1]: sshd@89-46.62.141.192:22-46.62.141.104:62488.service: Deactivated successfully. Jan 23 18:29:47.493000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@89-46.62.141.192:22-46.62.141.104:62488 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:47.516000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@90-46.62.141.192:22-46.62.141.104:62490 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:47.516436 systemd[1]: Started sshd@90-46.62.141.192:22-46.62.141.104:62490.service - OpenSSH per-connection server daemon (46.62.141.104:62490). Jan 23 18:29:47.638078 sshd[2692]: Received disconnect from 46.62.141.104 port 62490:11: Bye Bye [preauth] Jan 23 18:29:47.638078 sshd[2692]: Disconnected from authenticating user root 46.62.141.104 port 62490 [preauth] Jan 23 18:29:47.637000 audit[2692]: USER_ERR pid=2692 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:47.641878 systemd[1]: sshd@90-46.62.141.192:22-46.62.141.104:62490.service: Deactivated successfully. Jan 23 18:29:47.641000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@90-46.62.141.192:22-46.62.141.104:62490 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:47.661000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@91-46.62.141.192:22-46.62.141.104:62492 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:47.660669 systemd[1]: Started sshd@91-46.62.141.192:22-46.62.141.104:62492.service - OpenSSH per-connection server daemon (46.62.141.104:62492). Jan 23 18:29:47.769582 sshd[2698]: Invalid user admin from 46.62.141.104 port 62492 Jan 23 18:29:47.776918 sshd[2698]: Received disconnect from 46.62.141.104 port 62492:11: Bye Bye [preauth] Jan 23 18:29:47.776918 sshd[2698]: Disconnected from invalid user admin 46.62.141.104 port 62492 [preauth] Jan 23 18:29:47.776000 audit[2698]: USER_ERR pid=2698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:47.780988 systemd[1]: sshd@91-46.62.141.192:22-46.62.141.104:62492.service: Deactivated successfully. Jan 23 18:29:47.781000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@91-46.62.141.192:22-46.62.141.104:62492 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:47.801000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@92-46.62.141.192:22-46.62.141.104:62494 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:47.801538 systemd[1]: Started sshd@92-46.62.141.192:22-46.62.141.104:62494.service - OpenSSH per-connection server daemon (46.62.141.104:62494). Jan 23 18:29:47.924658 sshd[2704]: Invalid user user from 46.62.141.104 port 62494 Jan 23 18:29:47.931094 sshd[2704]: Received disconnect from 46.62.141.104 port 62494:11: Bye Bye [preauth] Jan 23 18:29:47.931094 sshd[2704]: Disconnected from invalid user user 46.62.141.104 port 62494 [preauth] Jan 23 18:29:47.931000 audit[2704]: USER_ERR pid=2704 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:47.935109 systemd[1]: sshd@92-46.62.141.192:22-46.62.141.104:62494.service: Deactivated successfully. Jan 23 18:29:47.935000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@92-46.62.141.192:22-46.62.141.104:62494 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:47.953000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@93-46.62.141.192:22-46.62.141.104:62496 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:47.954867 systemd[1]: Started sshd@93-46.62.141.192:22-46.62.141.104:62496.service - OpenSSH per-connection server daemon (46.62.141.104:62496). Jan 23 18:29:48.078508 sshd[2710]: Invalid user user2 from 46.62.141.104 port 62496 Jan 23 18:29:48.085063 sshd[2710]: Received disconnect from 46.62.141.104 port 62496:11: Bye Bye [preauth] Jan 23 18:29:48.085063 sshd[2710]: Disconnected from invalid user user2 46.62.141.104 port 62496 [preauth] Jan 23 18:29:48.083000 audit[2710]: USER_ERR pid=2710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:48.088677 systemd[1]: sshd@93-46.62.141.192:22-46.62.141.104:62496.service: Deactivated successfully. Jan 23 18:29:48.088000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@93-46.62.141.192:22-46.62.141.104:62496 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:48.108000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@94-46.62.141.192:22-46.62.141.104:62497 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:48.109793 systemd[1]: Started sshd@94-46.62.141.192:22-46.62.141.104:62497.service - OpenSSH per-connection server daemon (46.62.141.104:62497). Jan 23 18:29:48.233084 sshd[2716]: Received disconnect from 46.62.141.104 port 62497:11: Bye Bye [preauth] Jan 23 18:29:48.233084 sshd[2716]: Disconnected from authenticating user root 46.62.141.104 port 62497 [preauth] Jan 23 18:29:48.232000 audit[2716]: USER_ERR pid=2716 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:48.237176 systemd[1]: sshd@94-46.62.141.192:22-46.62.141.104:62497.service: Deactivated successfully. Jan 23 18:29:48.237000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@94-46.62.141.192:22-46.62.141.104:62497 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:48.259411 systemd[1]: Started sshd@95-46.62.141.192:22-46.62.141.104:62499.service - OpenSSH per-connection server daemon (46.62.141.104:62499). Jan 23 18:29:48.258000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@95-46.62.141.192:22-46.62.141.104:62499 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:48.377897 sshd[2722]: Invalid user admin from 46.62.141.104 port 62499 Jan 23 18:29:48.384302 sshd[2722]: Received disconnect from 46.62.141.104 port 62499:11: Bye Bye [preauth] Jan 23 18:29:48.384424 sshd[2722]: Disconnected from invalid user admin 46.62.141.104 port 62499 [preauth] Jan 23 18:29:48.383000 audit[2722]: USER_ERR pid=2722 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:48.388053 systemd[1]: sshd@95-46.62.141.192:22-46.62.141.104:62499.service: Deactivated successfully. Jan 23 18:29:48.387000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@95-46.62.141.192:22-46.62.141.104:62499 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:48.411470 systemd[1]: Started sshd@96-46.62.141.192:22-46.62.141.104:62501.service - OpenSSH per-connection server daemon (46.62.141.104:62501). Jan 23 18:29:48.410000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@96-46.62.141.192:22-46.62.141.104:62501 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:48.522956 sshd[2728]: Invalid user user from 46.62.141.104 port 62501 Jan 23 18:29:48.529391 sshd[2728]: Received disconnect from 46.62.141.104 port 62501:11: Bye Bye [preauth] Jan 23 18:29:48.529391 sshd[2728]: Disconnected from invalid user user 46.62.141.104 port 62501 [preauth] Jan 23 18:29:48.528000 audit[2728]: USER_ERR pid=2728 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:48.533550 systemd[1]: sshd@96-46.62.141.192:22-46.62.141.104:62501.service: Deactivated successfully. Jan 23 18:29:48.532000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@96-46.62.141.192:22-46.62.141.104:62501 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:48.553000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@97-46.62.141.192:22-46.62.141.104:62503 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:48.555106 systemd[1]: Started sshd@97-46.62.141.192:22-46.62.141.104:62503.service - OpenSSH per-connection server daemon (46.62.141.104:62503). Jan 23 18:29:48.670144 sshd[2734]: Invalid user user2 from 46.62.141.104 port 62503 Jan 23 18:29:48.676881 sshd[2734]: Received disconnect from 46.62.141.104 port 62503:11: Bye Bye [preauth] Jan 23 18:29:48.676881 sshd[2734]: Disconnected from invalid user user2 46.62.141.104 port 62503 [preauth] Jan 23 18:29:48.675000 audit[2734]: USER_ERR pid=2734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:48.680570 systemd[1]: sshd@97-46.62.141.192:22-46.62.141.104:62503.service: Deactivated successfully. Jan 23 18:29:48.679000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@97-46.62.141.192:22-46.62.141.104:62503 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:48.701000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@98-46.62.141.192:22-46.62.141.104:62505 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:48.702456 systemd[1]: Started sshd@98-46.62.141.192:22-46.62.141.104:62505.service - OpenSSH per-connection server daemon (46.62.141.104:62505). Jan 23 18:29:48.819996 sshd[2740]: Received disconnect from 46.62.141.104 port 62505:11: Bye Bye [preauth] Jan 23 18:29:48.819996 sshd[2740]: Disconnected from authenticating user root 46.62.141.104 port 62505 [preauth] Jan 23 18:29:48.818000 audit[2740]: USER_ERR pid=2740 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:48.823719 systemd[1]: sshd@98-46.62.141.192:22-46.62.141.104:62505.service: Deactivated successfully. Jan 23 18:29:48.823000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@98-46.62.141.192:22-46.62.141.104:62505 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:48.842000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@99-46.62.141.192:22-46.62.141.104:62507 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:48.843333 systemd[1]: Started sshd@99-46.62.141.192:22-46.62.141.104:62507.service - OpenSSH per-connection server daemon (46.62.141.104:62507). Jan 23 18:29:48.963882 sshd[2746]: Invalid user admin from 46.62.141.104 port 62507 Jan 23 18:29:48.970202 sshd[2746]: Received disconnect from 46.62.141.104 port 62507:11: Bye Bye [preauth] Jan 23 18:29:48.970202 sshd[2746]: Disconnected from invalid user admin 46.62.141.104 port 62507 [preauth] Jan 23 18:29:48.969000 audit[2746]: USER_ERR pid=2746 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:48.973815 systemd[1]: sshd@99-46.62.141.192:22-46.62.141.104:62507.service: Deactivated successfully. Jan 23 18:29:48.973000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@99-46.62.141.192:22-46.62.141.104:62507 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:48.992000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@100-46.62.141.192:22-46.62.141.104:62509 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:48.993675 systemd[1]: Started sshd@100-46.62.141.192:22-46.62.141.104:62509.service - OpenSSH per-connection server daemon (46.62.141.104:62509). Jan 23 18:29:49.112704 sshd[2752]: Invalid user user from 46.62.141.104 port 62509 Jan 23 18:29:49.119184 sshd[2752]: Received disconnect from 46.62.141.104 port 62509:11: Bye Bye [preauth] Jan 23 18:29:49.119184 sshd[2752]: Disconnected from invalid user user 46.62.141.104 port 62509 [preauth] Jan 23 18:29:49.119000 audit[2752]: USER_ERR pid=2752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:49.122753 systemd[1]: sshd@100-46.62.141.192:22-46.62.141.104:62509.service: Deactivated successfully. Jan 23 18:29:49.123000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@100-46.62.141.192:22-46.62.141.104:62509 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:49.145000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@101-46.62.141.192:22-46.62.141.104:62510 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:49.146203 systemd[1]: Started sshd@101-46.62.141.192:22-46.62.141.104:62510.service - OpenSSH per-connection server daemon (46.62.141.104:62510). Jan 23 18:29:49.253069 sshd[2758]: Invalid user user2 from 46.62.141.104 port 62510 Jan 23 18:29:49.259247 sshd[2758]: Received disconnect from 46.62.141.104 port 62510:11: Bye Bye [preauth] Jan 23 18:29:49.259247 sshd[2758]: Disconnected from invalid user user2 46.62.141.104 port 62510 [preauth] Jan 23 18:29:49.259000 audit[2758]: USER_ERR pid=2758 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:49.262839 systemd[1]: sshd@101-46.62.141.192:22-46.62.141.104:62510.service: Deactivated successfully. Jan 23 18:29:49.263000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@101-46.62.141.192:22-46.62.141.104:62510 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:49.283000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@102-46.62.141.192:22-46.62.141.104:62513 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:49.283472 systemd[1]: Started sshd@102-46.62.141.192:22-46.62.141.104:62513.service - OpenSSH per-connection server daemon (46.62.141.104:62513). Jan 23 18:29:49.403105 sshd[2764]: Received disconnect from 46.62.141.104 port 62513:11: Bye Bye [preauth] Jan 23 18:29:49.403105 sshd[2764]: Disconnected from authenticating user root 46.62.141.104 port 62513 [preauth] Jan 23 18:29:49.402000 audit[2764]: USER_ERR pid=2764 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:49.406714 systemd[1]: sshd@102-46.62.141.192:22-46.62.141.104:62513.service: Deactivated successfully. Jan 23 18:29:49.405000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@102-46.62.141.192:22-46.62.141.104:62513 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:49.426000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@103-46.62.141.192:22-46.62.141.104:62515 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:49.426566 systemd[1]: Started sshd@103-46.62.141.192:22-46.62.141.104:62515.service - OpenSSH per-connection server daemon (46.62.141.104:62515). Jan 23 18:29:49.524928 sshd[2770]: Invalid user admin from 46.62.141.104 port 62515 Jan 23 18:29:49.532119 sshd[2770]: Received disconnect from 46.62.141.104 port 62515:11: Bye Bye [preauth] Jan 23 18:29:49.532119 sshd[2770]: Disconnected from invalid user admin 46.62.141.104 port 62515 [preauth] Jan 23 18:29:49.531000 audit[2770]: USER_ERR pid=2770 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:49.535806 systemd[1]: sshd@103-46.62.141.192:22-46.62.141.104:62515.service: Deactivated successfully. Jan 23 18:29:49.535000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@103-46.62.141.192:22-46.62.141.104:62515 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:49.556604 systemd[1]: Started sshd@104-46.62.141.192:22-46.62.141.104:62518.service - OpenSSH per-connection server daemon (46.62.141.104:62518). Jan 23 18:29:49.555000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@104-46.62.141.192:22-46.62.141.104:62518 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:49.664561 sshd[2776]: Invalid user user from 46.62.141.104 port 62518 Jan 23 18:29:49.670936 sshd[2776]: Received disconnect from 46.62.141.104 port 62518:11: Bye Bye [preauth] Jan 23 18:29:49.670936 sshd[2776]: Disconnected from invalid user user 46.62.141.104 port 62518 [preauth] Jan 23 18:29:49.669000 audit[2776]: USER_ERR pid=2776 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:49.675137 systemd[1]: sshd@104-46.62.141.192:22-46.62.141.104:62518.service: Deactivated successfully. Jan 23 18:29:49.674000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@104-46.62.141.192:22-46.62.141.104:62518 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:49.698000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@105-46.62.141.192:22-46.62.141.104:62521 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:49.699535 systemd[1]: Started sshd@105-46.62.141.192:22-46.62.141.104:62521.service - OpenSSH per-connection server daemon (46.62.141.104:62521). Jan 23 18:29:49.812931 sshd[2782]: Invalid user user2 from 46.62.141.104 port 62521 Jan 23 18:29:49.819512 sshd[2782]: Received disconnect from 46.62.141.104 port 62521:11: Bye Bye [preauth] Jan 23 18:29:49.819512 sshd[2782]: Disconnected from invalid user user2 46.62.141.104 port 62521 [preauth] Jan 23 18:29:49.818000 audit[2782]: USER_ERR pid=2782 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:49.823092 systemd[1]: sshd@105-46.62.141.192:22-46.62.141.104:62521.service: Deactivated successfully. Jan 23 18:29:49.822000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@105-46.62.141.192:22-46.62.141.104:62521 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:49.842000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@106-46.62.141.192:22-46.62.141.104:62523 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:49.843243 systemd[1]: Started sshd@106-46.62.141.192:22-46.62.141.104:62523.service - OpenSSH per-connection server daemon (46.62.141.104:62523). Jan 23 18:29:49.961972 sshd[2788]: Received disconnect from 46.62.141.104 port 62523:11: Bye Bye [preauth] Jan 23 18:29:49.961972 sshd[2788]: Disconnected from authenticating user root 46.62.141.104 port 62523 [preauth] Jan 23 18:29:49.961000 audit[2788]: USER_ERR pid=2788 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:49.965598 systemd[1]: sshd@106-46.62.141.192:22-46.62.141.104:62523.service: Deactivated successfully. Jan 23 18:29:49.965000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@106-46.62.141.192:22-46.62.141.104:62523 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:49.989000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@107-46.62.141.192:22-46.62.141.104:62525 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:49.990474 systemd[1]: Started sshd@107-46.62.141.192:22-46.62.141.104:62525.service - OpenSSH per-connection server daemon (46.62.141.104:62525). Jan 23 18:29:50.106907 sshd[2794]: Invalid user admin from 46.62.141.104 port 62525 Jan 23 18:29:50.113860 sshd[2794]: Received disconnect from 46.62.141.104 port 62525:11: Bye Bye [preauth] Jan 23 18:29:50.113860 sshd[2794]: Disconnected from invalid user admin 46.62.141.104 port 62525 [preauth] Jan 23 18:29:50.112000 audit[2794]: USER_ERR pid=2794 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:50.118295 systemd[1]: sshd@107-46.62.141.192:22-46.62.141.104:62525.service: Deactivated successfully. Jan 23 18:29:50.118000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@107-46.62.141.192:22-46.62.141.104:62525 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:50.141000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@108-46.62.141.192:22-46.62.141.104:62528 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:50.142064 systemd[1]: Started sshd@108-46.62.141.192:22-46.62.141.104:62528.service - OpenSSH per-connection server daemon (46.62.141.104:62528). Jan 23 18:29:50.263739 sshd[2800]: Invalid user user from 46.62.141.104 port 62528 Jan 23 18:29:50.270427 sshd[2800]: Received disconnect from 46.62.141.104 port 62528:11: Bye Bye [preauth] Jan 23 18:29:50.270427 sshd[2800]: Disconnected from invalid user user 46.62.141.104 port 62528 [preauth] Jan 23 18:29:50.269000 audit[2800]: USER_ERR pid=2800 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:50.274389 systemd[1]: sshd@108-46.62.141.192:22-46.62.141.104:62528.service: Deactivated successfully. Jan 23 18:29:50.273000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@108-46.62.141.192:22-46.62.141.104:62528 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:50.294000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@109-46.62.141.192:22-46.62.141.104:62531 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:50.295239 systemd[1]: Started sshd@109-46.62.141.192:22-46.62.141.104:62531.service - OpenSSH per-connection server daemon (46.62.141.104:62531). Jan 23 18:29:50.398230 sshd[2806]: Invalid user user2 from 46.62.141.104 port 62531 Jan 23 18:29:50.404929 sshd[2806]: Received disconnect from 46.62.141.104 port 62531:11: Bye Bye [preauth] Jan 23 18:29:50.404929 sshd[2806]: Disconnected from invalid user user2 46.62.141.104 port 62531 [preauth] Jan 23 18:29:50.403000 audit[2806]: USER_ERR pid=2806 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:50.409169 systemd[1]: sshd@109-46.62.141.192:22-46.62.141.104:62531.service: Deactivated successfully. Jan 23 18:29:50.408000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@109-46.62.141.192:22-46.62.141.104:62531 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:50.432000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@110-46.62.141.192:22-46.62.141.104:62533 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:50.433327 systemd[1]: Started sshd@110-46.62.141.192:22-46.62.141.104:62533.service - OpenSSH per-connection server daemon (46.62.141.104:62533). Jan 23 18:29:50.555152 sshd[2812]: Received disconnect from 46.62.141.104 port 62533:11: Bye Bye [preauth] Jan 23 18:29:50.555152 sshd[2812]: Disconnected from authenticating user root 46.62.141.104 port 62533 [preauth] Jan 23 18:29:50.554000 audit[2812]: USER_ERR pid=2812 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:50.558775 systemd[1]: sshd@110-46.62.141.192:22-46.62.141.104:62533.service: Deactivated successfully. Jan 23 18:29:50.558000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@110-46.62.141.192:22-46.62.141.104:62533 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:50.579000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@111-46.62.141.192:22-46.62.141.104:62535 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:50.581086 systemd[1]: Started sshd@111-46.62.141.192:22-46.62.141.104:62535.service - OpenSSH per-connection server daemon (46.62.141.104:62535). Jan 23 18:29:50.703151 sshd[2818]: Invalid user admin from 46.62.141.104 port 62535 Jan 23 18:29:50.711196 sshd[2818]: Received disconnect from 46.62.141.104 port 62535:11: Bye Bye [preauth] Jan 23 18:29:50.711196 sshd[2818]: Disconnected from invalid user admin 46.62.141.104 port 62535 [preauth] Jan 23 18:29:50.720897 kernel: kauditd_printk_skb: 95 callbacks suppressed Jan 23 18:29:50.721029 kernel: audit: type=1109 audit(1769192990.711:519): pid=2818 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:50.711000 audit[2818]: USER_ERR pid=2818 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:50.715708 systemd[1]: sshd@111-46.62.141.192:22-46.62.141.104:62535.service: Deactivated successfully. Jan 23 18:29:50.716000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@111-46.62.141.192:22-46.62.141.104:62535 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:50.731059 kernel: audit: type=1131 audit(1769192990.716:520): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@111-46.62.141.192:22-46.62.141.104:62535 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:50.758190 systemd[1]: Started sshd@112-46.62.141.192:22-46.62.141.104:62537.service - OpenSSH per-connection server daemon (46.62.141.104:62537). Jan 23 18:29:50.757000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@112-46.62.141.192:22-46.62.141.104:62537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:50.772360 kernel: audit: type=1130 audit(1769192990.757:521): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@112-46.62.141.192:22-46.62.141.104:62537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:50.869120 sshd[2824]: Invalid user user from 46.62.141.104 port 62537 Jan 23 18:29:50.888329 sshd[2824]: Received disconnect from 46.62.141.104 port 62537:11: Bye Bye [preauth] Jan 23 18:29:50.888329 sshd[2824]: Disconnected from invalid user user 46.62.141.104 port 62537 [preauth] Jan 23 18:29:50.887000 audit[2824]: USER_ERR pid=2824 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:50.891686 systemd[1]: sshd@112-46.62.141.192:22-46.62.141.104:62537.service: Deactivated successfully. Jan 23 18:29:50.903733 kernel: audit: type=1109 audit(1769192990.887:522): pid=2824 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:50.903847 kernel: audit: type=1131 audit(1769192990.891:523): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@112-46.62.141.192:22-46.62.141.104:62537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:50.891000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@112-46.62.141.192:22-46.62.141.104:62537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:50.922000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@113-46.62.141.192:22-46.62.141.104:62540 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:50.922564 systemd[1]: Started sshd@113-46.62.141.192:22-46.62.141.104:62540.service - OpenSSH per-connection server daemon (46.62.141.104:62540). Jan 23 18:29:50.935445 kernel: audit: type=1130 audit(1769192990.922:524): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@113-46.62.141.192:22-46.62.141.104:62540 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:51.030773 sshd[2830]: Invalid user user2 from 46.62.141.104 port 62540 Jan 23 18:29:51.037700 sshd[2830]: Received disconnect from 46.62.141.104 port 62540:11: Bye Bye [preauth] Jan 23 18:29:51.037700 sshd[2830]: Disconnected from invalid user user2 46.62.141.104 port 62540 [preauth] Jan 23 18:29:51.036000 audit[2830]: USER_ERR pid=2830 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:51.042010 systemd[1]: sshd@113-46.62.141.192:22-46.62.141.104:62540.service: Deactivated successfully. Jan 23 18:29:51.041000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@113-46.62.141.192:22-46.62.141.104:62540 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:51.052488 kernel: audit: type=1109 audit(1769192991.036:525): pid=2830 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:51.052610 kernel: audit: type=1131 audit(1769192991.041:526): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@113-46.62.141.192:22-46.62.141.104:62540 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:51.071000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@114-46.62.141.192:22-46.62.141.104:62543 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:51.072469 systemd[1]: Started sshd@114-46.62.141.192:22-46.62.141.104:62543.service - OpenSSH per-connection server daemon (46.62.141.104:62543). Jan 23 18:29:51.078335 kernel: audit: type=1130 audit(1769192991.071:527): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@114-46.62.141.192:22-46.62.141.104:62543 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:51.179149 sshd[2836]: Received disconnect from 46.62.141.104 port 62543:11: Bye Bye [preauth] Jan 23 18:29:51.179149 sshd[2836]: Disconnected from authenticating user root 46.62.141.104 port 62543 [preauth] Jan 23 18:29:51.178000 audit[2836]: USER_ERR pid=2836 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:51.182102 systemd[1]: sshd@114-46.62.141.192:22-46.62.141.104:62543.service: Deactivated successfully. Jan 23 18:29:51.181000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@114-46.62.141.192:22-46.62.141.104:62543 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:51.192312 kernel: audit: type=1109 audit(1769192991.178:528): pid=2836 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:51.204000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@115-46.62.141.192:22-46.62.141.104:62544 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:51.205166 systemd[1]: Started sshd@115-46.62.141.192:22-46.62.141.104:62544.service - OpenSSH per-connection server daemon (46.62.141.104:62544). Jan 23 18:29:51.322504 sshd[2842]: Invalid user admin from 46.62.141.104 port 62544 Jan 23 18:29:51.328800 sshd[2842]: Received disconnect from 46.62.141.104 port 62544:11: Bye Bye [preauth] Jan 23 18:29:51.328800 sshd[2842]: Disconnected from invalid user admin 46.62.141.104 port 62544 [preauth] Jan 23 18:29:51.328000 audit[2842]: USER_ERR pid=2842 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:51.333035 systemd[1]: sshd@115-46.62.141.192:22-46.62.141.104:62544.service: Deactivated successfully. Jan 23 18:29:51.333000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@115-46.62.141.192:22-46.62.141.104:62544 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:51.357000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@116-46.62.141.192:22-46.62.141.104:62546 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:51.357134 systemd[1]: Started sshd@116-46.62.141.192:22-46.62.141.104:62546.service - OpenSSH per-connection server daemon (46.62.141.104:62546). Jan 23 18:29:51.476050 sshd[2848]: Invalid user user from 46.62.141.104 port 62546 Jan 23 18:29:51.482570 sshd[2848]: Received disconnect from 46.62.141.104 port 62546:11: Bye Bye [preauth] Jan 23 18:29:51.482699 sshd[2848]: Disconnected from invalid user user 46.62.141.104 port 62546 [preauth] Jan 23 18:29:51.481000 audit[2848]: USER_ERR pid=2848 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:51.487138 systemd[1]: sshd@116-46.62.141.192:22-46.62.141.104:62546.service: Deactivated successfully. Jan 23 18:29:51.486000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@116-46.62.141.192:22-46.62.141.104:62546 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:51.509000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@117-46.62.141.192:22-46.62.141.104:62548 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:51.510773 systemd[1]: Started sshd@117-46.62.141.192:22-46.62.141.104:62548.service - OpenSSH per-connection server daemon (46.62.141.104:62548). Jan 23 18:29:51.629966 sshd[2854]: Invalid user user2 from 46.62.141.104 port 62548 Jan 23 18:29:51.637633 sshd[2854]: Received disconnect from 46.62.141.104 port 62548:11: Bye Bye [preauth] Jan 23 18:29:51.637633 sshd[2854]: Disconnected from invalid user user2 46.62.141.104 port 62548 [preauth] Jan 23 18:29:51.636000 audit[2854]: USER_ERR pid=2854 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:51.641330 systemd[1]: sshd@117-46.62.141.192:22-46.62.141.104:62548.service: Deactivated successfully. Jan 23 18:29:51.640000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@117-46.62.141.192:22-46.62.141.104:62548 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:51.661000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@118-46.62.141.192:22-46.62.141.104:62551 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:51.661758 systemd[1]: Started sshd@118-46.62.141.192:22-46.62.141.104:62551.service - OpenSSH per-connection server daemon (46.62.141.104:62551). Jan 23 18:29:51.752026 sshd[2860]: Received disconnect from 46.62.141.104 port 62551:11: Bye Bye [preauth] Jan 23 18:29:51.752026 sshd[2860]: Disconnected from authenticating user root 46.62.141.104 port 62551 [preauth] Jan 23 18:29:51.750000 audit[2860]: USER_ERR pid=2860 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:51.755099 systemd[1]: sshd@118-46.62.141.192:22-46.62.141.104:62551.service: Deactivated successfully. Jan 23 18:29:51.754000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@118-46.62.141.192:22-46.62.141.104:62551 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:51.782000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@119-46.62.141.192:22-46.62.141.104:62553 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:51.782545 systemd[1]: Started sshd@119-46.62.141.192:22-46.62.141.104:62553.service - OpenSSH per-connection server daemon (46.62.141.104:62553). Jan 23 18:29:51.876763 sshd[2866]: Invalid user admin from 46.62.141.104 port 62553 Jan 23 18:29:51.882998 sshd[2866]: Received disconnect from 46.62.141.104 port 62553:11: Bye Bye [preauth] Jan 23 18:29:51.882998 sshd[2866]: Disconnected from invalid user admin 46.62.141.104 port 62553 [preauth] Jan 23 18:29:51.882000 audit[2866]: USER_ERR pid=2866 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:51.886385 systemd[1]: sshd@119-46.62.141.192:22-46.62.141.104:62553.service: Deactivated successfully. Jan 23 18:29:51.885000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@119-46.62.141.192:22-46.62.141.104:62553 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:51.905000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@120-46.62.141.192:22-46.62.141.104:62554 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:51.907091 systemd[1]: Started sshd@120-46.62.141.192:22-46.62.141.104:62554.service - OpenSSH per-connection server daemon (46.62.141.104:62554). Jan 23 18:29:52.000842 sshd[2872]: Invalid user user from 46.62.141.104 port 62554 Jan 23 18:29:52.007433 sshd[2872]: Received disconnect from 46.62.141.104 port 62554:11: Bye Bye [preauth] Jan 23 18:29:52.007433 sshd[2872]: Disconnected from invalid user user 46.62.141.104 port 62554 [preauth] Jan 23 18:29:52.007000 audit[2872]: USER_ERR pid=2872 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:52.011501 systemd[1]: sshd@120-46.62.141.192:22-46.62.141.104:62554.service: Deactivated successfully. Jan 23 18:29:52.011000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@120-46.62.141.192:22-46.62.141.104:62554 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:52.037000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@121-46.62.141.192:22-46.62.141.104:62556 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:52.037444 systemd[1]: Started sshd@121-46.62.141.192:22-46.62.141.104:62556.service - OpenSSH per-connection server daemon (46.62.141.104:62556). Jan 23 18:29:52.157751 sshd[2878]: Invalid user user2 from 46.62.141.104 port 62556 Jan 23 18:29:52.165089 sshd[2878]: Received disconnect from 46.62.141.104 port 62556:11: Bye Bye [preauth] Jan 23 18:29:52.165089 sshd[2878]: Disconnected from invalid user user2 46.62.141.104 port 62556 [preauth] Jan 23 18:29:52.163000 audit[2878]: USER_ERR pid=2878 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:52.169001 systemd[1]: sshd@121-46.62.141.192:22-46.62.141.104:62556.service: Deactivated successfully. Jan 23 18:29:52.168000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@121-46.62.141.192:22-46.62.141.104:62556 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:52.190000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@122-46.62.141.192:22-46.62.141.104:62558 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:52.191174 systemd[1]: Started sshd@122-46.62.141.192:22-46.62.141.104:62558.service - OpenSSH per-connection server daemon (46.62.141.104:62558). Jan 23 18:29:52.305193 sshd[2884]: Received disconnect from 46.62.141.104 port 62558:11: Bye Bye [preauth] Jan 23 18:29:52.305193 sshd[2884]: Disconnected from authenticating user root 46.62.141.104 port 62558 [preauth] Jan 23 18:29:52.304000 audit[2884]: USER_ERR pid=2884 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:52.308751 systemd[1]: sshd@122-46.62.141.192:22-46.62.141.104:62558.service: Deactivated successfully. Jan 23 18:29:52.308000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@122-46.62.141.192:22-46.62.141.104:62558 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:52.327000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@123-46.62.141.192:22-46.62.141.104:62560 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:52.328457 systemd[1]: Started sshd@123-46.62.141.192:22-46.62.141.104:62560.service - OpenSSH per-connection server daemon (46.62.141.104:62560). Jan 23 18:29:52.451473 sshd[2890]: Invalid user admin from 46.62.141.104 port 62560 Jan 23 18:29:52.458038 sshd[2890]: Received disconnect from 46.62.141.104 port 62560:11: Bye Bye [preauth] Jan 23 18:29:52.458038 sshd[2890]: Disconnected from invalid user admin 46.62.141.104 port 62560 [preauth] Jan 23 18:29:52.456000 audit[2890]: USER_ERR pid=2890 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:52.461388 systemd[1]: sshd@123-46.62.141.192:22-46.62.141.104:62560.service: Deactivated successfully. Jan 23 18:29:52.460000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@123-46.62.141.192:22-46.62.141.104:62560 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:52.485000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@124-46.62.141.192:22-46.62.141.104:62563 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:52.485770 systemd[1]: Started sshd@124-46.62.141.192:22-46.62.141.104:62563.service - OpenSSH per-connection server daemon (46.62.141.104:62563). Jan 23 18:29:52.603017 sshd[2896]: Invalid user user from 46.62.141.104 port 62563 Jan 23 18:29:52.609623 sshd[2896]: Received disconnect from 46.62.141.104 port 62563:11: Bye Bye [preauth] Jan 23 18:29:52.609623 sshd[2896]: Disconnected from invalid user user 46.62.141.104 port 62563 [preauth] Jan 23 18:29:52.608000 audit[2896]: USER_ERR pid=2896 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:52.614519 systemd[1]: sshd@124-46.62.141.192:22-46.62.141.104:62563.service: Deactivated successfully. Jan 23 18:29:52.613000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@124-46.62.141.192:22-46.62.141.104:62563 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:52.637000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@125-46.62.141.192:22-46.62.141.104:62564 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:52.638205 systemd[1]: Started sshd@125-46.62.141.192:22-46.62.141.104:62564.service - OpenSSH per-connection server daemon (46.62.141.104:62564). Jan 23 18:29:52.754188 sshd[2902]: Invalid user user2 from 46.62.141.104 port 62564 Jan 23 18:29:52.760638 sshd[2902]: Received disconnect from 46.62.141.104 port 62564:11: Bye Bye [preauth] Jan 23 18:29:52.760638 sshd[2902]: Disconnected from invalid user user2 46.62.141.104 port 62564 [preauth] Jan 23 18:29:52.760000 audit[2902]: USER_ERR pid=2902 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:52.764499 systemd[1]: sshd@125-46.62.141.192:22-46.62.141.104:62564.service: Deactivated successfully. Jan 23 18:29:52.764000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@125-46.62.141.192:22-46.62.141.104:62564 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:52.794000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@126-46.62.141.192:22-46.62.141.104:62566 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:52.794642 systemd[1]: Started sshd@126-46.62.141.192:22-46.62.141.104:62566.service - OpenSSH per-connection server daemon (46.62.141.104:62566). Jan 23 18:29:52.920223 sshd[2908]: Received disconnect from 46.62.141.104 port 62566:11: Bye Bye [preauth] Jan 23 18:29:52.920223 sshd[2908]: Disconnected from authenticating user root 46.62.141.104 port 62566 [preauth] Jan 23 18:29:52.919000 audit[2908]: USER_ERR pid=2908 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:52.923584 systemd[1]: sshd@126-46.62.141.192:22-46.62.141.104:62566.service: Deactivated successfully. Jan 23 18:29:52.922000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@126-46.62.141.192:22-46.62.141.104:62566 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:52.946085 systemd[1]: Started sshd@127-46.62.141.192:22-46.62.141.104:62568.service - OpenSSH per-connection server daemon (46.62.141.104:62568). Jan 23 18:29:52.945000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@127-46.62.141.192:22-46.62.141.104:62568 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:53.054880 sshd[2914]: Invalid user admin from 46.62.141.104 port 62568 Jan 23 18:29:53.061995 sshd[2914]: Received disconnect from 46.62.141.104 port 62568:11: Bye Bye [preauth] Jan 23 18:29:53.061995 sshd[2914]: Disconnected from invalid user admin 46.62.141.104 port 62568 [preauth] Jan 23 18:29:53.061000 audit[2914]: USER_ERR pid=2914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:53.065711 systemd[1]: sshd@127-46.62.141.192:22-46.62.141.104:62568.service: Deactivated successfully. Jan 23 18:29:53.066000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@127-46.62.141.192:22-46.62.141.104:62568 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:53.084000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@128-46.62.141.192:22-46.62.141.104:62570 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:53.085447 systemd[1]: Started sshd@128-46.62.141.192:22-46.62.141.104:62570.service - OpenSSH per-connection server daemon (46.62.141.104:62570). Jan 23 18:29:53.203139 sshd[2920]: Invalid user user from 46.62.141.104 port 62570 Jan 23 18:29:53.210063 sshd[2920]: Received disconnect from 46.62.141.104 port 62570:11: Bye Bye [preauth] Jan 23 18:29:53.210063 sshd[2920]: Disconnected from invalid user user 46.62.141.104 port 62570 [preauth] Jan 23 18:29:53.209000 audit[2920]: USER_ERR pid=2920 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:53.213063 systemd[1]: sshd@128-46.62.141.192:22-46.62.141.104:62570.service: Deactivated successfully. Jan 23 18:29:53.212000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@128-46.62.141.192:22-46.62.141.104:62570 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:53.238000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@129-46.62.141.192:22-46.62.141.104:62572 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:53.239385 systemd[1]: Started sshd@129-46.62.141.192:22-46.62.141.104:62572.service - OpenSSH per-connection server daemon (46.62.141.104:62572). Jan 23 18:29:53.361292 sshd[2926]: Invalid user user2 from 46.62.141.104 port 62572 Jan 23 18:29:53.368059 sshd[2926]: Received disconnect from 46.62.141.104 port 62572:11: Bye Bye [preauth] Jan 23 18:29:53.368059 sshd[2926]: Disconnected from invalid user user2 46.62.141.104 port 62572 [preauth] Jan 23 18:29:53.367000 audit[2926]: USER_ERR pid=2926 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:53.372092 systemd[1]: sshd@129-46.62.141.192:22-46.62.141.104:62572.service: Deactivated successfully. Jan 23 18:29:53.371000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@129-46.62.141.192:22-46.62.141.104:62572 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:53.391000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@130-46.62.141.192:22-46.62.141.104:62574 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:53.392584 systemd[1]: Started sshd@130-46.62.141.192:22-46.62.141.104:62574.service - OpenSSH per-connection server daemon (46.62.141.104:62574). Jan 23 18:29:53.510123 sshd[2932]: Received disconnect from 46.62.141.104 port 62574:11: Bye Bye [preauth] Jan 23 18:29:53.510123 sshd[2932]: Disconnected from authenticating user root 46.62.141.104 port 62574 [preauth] Jan 23 18:29:53.508000 audit[2932]: USER_ERR pid=2932 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:53.513816 systemd[1]: sshd@130-46.62.141.192:22-46.62.141.104:62574.service: Deactivated successfully. Jan 23 18:29:53.513000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@130-46.62.141.192:22-46.62.141.104:62574 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:53.538000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@131-46.62.141.192:22-46.62.141.104:62576 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:53.539652 systemd[1]: Started sshd@131-46.62.141.192:22-46.62.141.104:62576.service - OpenSSH per-connection server daemon (46.62.141.104:62576). Jan 23 18:29:53.647570 sshd[2938]: Invalid user admin from 46.62.141.104 port 62576 Jan 23 18:29:53.654177 sshd[2938]: Received disconnect from 46.62.141.104 port 62576:11: Bye Bye [preauth] Jan 23 18:29:53.654177 sshd[2938]: Disconnected from invalid user admin 46.62.141.104 port 62576 [preauth] Jan 23 18:29:53.653000 audit[2938]: USER_ERR pid=2938 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:53.657835 systemd[1]: sshd@131-46.62.141.192:22-46.62.141.104:62576.service: Deactivated successfully. Jan 23 18:29:53.657000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@131-46.62.141.192:22-46.62.141.104:62576 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:53.678000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@132-46.62.141.192:22-46.62.141.104:62577 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:53.679541 systemd[1]: Started sshd@132-46.62.141.192:22-46.62.141.104:62577.service - OpenSSH per-connection server daemon (46.62.141.104:62577). Jan 23 18:29:53.802939 sshd[2944]: Invalid user user from 46.62.141.104 port 62577 Jan 23 18:29:53.809998 sshd[2944]: Received disconnect from 46.62.141.104 port 62577:11: Bye Bye [preauth] Jan 23 18:29:53.809998 sshd[2944]: Disconnected from invalid user user 46.62.141.104 port 62577 [preauth] Jan 23 18:29:53.808000 audit[2944]: USER_ERR pid=2944 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:53.814124 systemd[1]: sshd@132-46.62.141.192:22-46.62.141.104:62577.service: Deactivated successfully. Jan 23 18:29:53.813000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@132-46.62.141.192:22-46.62.141.104:62577 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:53.834041 systemd[1]: Started sshd@133-46.62.141.192:22-46.62.141.104:62579.service - OpenSSH per-connection server daemon (46.62.141.104:62579). Jan 23 18:29:53.833000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@133-46.62.141.192:22-46.62.141.104:62579 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:53.905690 etcd-wrapper[1931]: {"level":"warn","ts":"2026-01-23T18:29:53.905271Z","caller":"rafthttp/probing_status.go:68","msg":"prober detected unhealthy status","round-tripper-name":"ROUND_TRIPPER_RAFT_MESSAGE","remote-peer-id":"15eb2e9460fb69a5","rtt":"736.265µs","error":"dial tcp 10.0.0.3:2380: i/o timeout"} Jan 23 18:29:53.952240 sshd[2950]: Invalid user user2 from 46.62.141.104 port 62579 Jan 23 18:29:53.959807 sshd[2950]: Received disconnect from 46.62.141.104 port 62579:11: Bye Bye [preauth] Jan 23 18:29:53.959807 sshd[2950]: Disconnected from invalid user user2 46.62.141.104 port 62579 [preauth] Jan 23 18:29:53.958000 audit[2950]: USER_ERR pid=2950 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:53.963979 systemd[1]: sshd@133-46.62.141.192:22-46.62.141.104:62579.service: Deactivated successfully. Jan 23 18:29:53.963000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@133-46.62.141.192:22-46.62.141.104:62579 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:53.985000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@134-46.62.141.192:22-46.62.141.104:62581 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:53.986727 systemd[1]: Started sshd@134-46.62.141.192:22-46.62.141.104:62581.service - OpenSSH per-connection server daemon (46.62.141.104:62581). Jan 23 18:29:54.110879 sshd[2956]: Received disconnect from 46.62.141.104 port 62581:11: Bye Bye [preauth] Jan 23 18:29:54.110879 sshd[2956]: Disconnected from authenticating user root 46.62.141.104 port 62581 [preauth] Jan 23 18:29:54.109000 audit[2956]: USER_ERR pid=2956 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:54.114874 systemd[1]: sshd@134-46.62.141.192:22-46.62.141.104:62581.service: Deactivated successfully. Jan 23 18:29:54.114000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@134-46.62.141.192:22-46.62.141.104:62581 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:54.133000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@135-46.62.141.192:22-46.62.141.104:62583 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:54.134900 systemd[1]: Started sshd@135-46.62.141.192:22-46.62.141.104:62583.service - OpenSSH per-connection server daemon (46.62.141.104:62583). Jan 23 18:29:54.249325 sshd[2962]: Invalid user admin from 46.62.141.104 port 62583 Jan 23 18:29:54.257602 sshd[2962]: Received disconnect from 46.62.141.104 port 62583:11: Bye Bye [preauth] Jan 23 18:29:54.257602 sshd[2962]: Disconnected from invalid user admin 46.62.141.104 port 62583 [preauth] Jan 23 18:29:54.257000 audit[2962]: USER_ERR pid=2962 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:54.261692 systemd[1]: sshd@135-46.62.141.192:22-46.62.141.104:62583.service: Deactivated successfully. Jan 23 18:29:54.261000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@135-46.62.141.192:22-46.62.141.104:62583 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:54.281000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@136-46.62.141.192:22-46.62.141.104:62585 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:54.282758 systemd[1]: Started sshd@136-46.62.141.192:22-46.62.141.104:62585.service - OpenSSH per-connection server daemon (46.62.141.104:62585). Jan 23 18:29:54.401922 sshd[2968]: Invalid user user from 46.62.141.104 port 62585 Jan 23 18:29:54.408896 sshd[2968]: Received disconnect from 46.62.141.104 port 62585:11: Bye Bye [preauth] Jan 23 18:29:54.408896 sshd[2968]: Disconnected from invalid user user 46.62.141.104 port 62585 [preauth] Jan 23 18:29:54.407000 audit[2968]: USER_ERR pid=2968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:54.412580 systemd[1]: sshd@136-46.62.141.192:22-46.62.141.104:62585.service: Deactivated successfully. Jan 23 18:29:54.411000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@136-46.62.141.192:22-46.62.141.104:62585 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:54.437867 systemd[1]: Started sshd@137-46.62.141.192:22-46.62.141.104:62586.service - OpenSSH per-connection server daemon (46.62.141.104:62586). Jan 23 18:29:54.437000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@137-46.62.141.192:22-46.62.141.104:62586 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:54.545388 sshd[2974]: Invalid user user2 from 46.62.141.104 port 62586 Jan 23 18:29:54.554078 sshd[2974]: Received disconnect from 46.62.141.104 port 62586:11: Bye Bye [preauth] Jan 23 18:29:54.554078 sshd[2974]: Disconnected from invalid user user2 46.62.141.104 port 62586 [preauth] Jan 23 18:29:54.554000 audit[2974]: USER_ERR pid=2974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:54.558112 systemd[1]: sshd@137-46.62.141.192:22-46.62.141.104:62586.service: Deactivated successfully. Jan 23 18:29:54.558000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@137-46.62.141.192:22-46.62.141.104:62586 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:54.568933 systemd[1]: Started sshd@138-46.62.141.192:22-46.62.141.104:62590.service - OpenSSH per-connection server daemon (46.62.141.104:62590). Jan 23 18:29:54.570000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@138-46.62.141.192:22-46.62.141.104:62590 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:54.659736 sshd[2981]: Received disconnect from 46.62.141.104 port 62590:11: Bye Bye [preauth] Jan 23 18:29:54.659736 sshd[2981]: Disconnected from authenticating user root 46.62.141.104 port 62590 [preauth] Jan 23 18:29:54.658000 audit[2981]: USER_ERR pid=2981 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:54.664153 systemd[1]: sshd@138-46.62.141.192:22-46.62.141.104:62590.service: Deactivated successfully. Jan 23 18:29:54.663000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@138-46.62.141.192:22-46.62.141.104:62590 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:54.688000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@139-46.62.141.192:22-46.62.141.104:62591 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:54.689483 systemd[1]: Started sshd@139-46.62.141.192:22-46.62.141.104:62591.service - OpenSSH per-connection server daemon (46.62.141.104:62591). Jan 23 18:29:54.806827 sshd[2987]: Invalid user admin from 46.62.141.104 port 62591 Jan 23 18:29:54.814413 sshd[2987]: Received disconnect from 46.62.141.104 port 62591:11: Bye Bye [preauth] Jan 23 18:29:54.814413 sshd[2987]: Disconnected from invalid user admin 46.62.141.104 port 62591 [preauth] Jan 23 18:29:54.813000 audit[2987]: USER_ERR pid=2987 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:54.818813 systemd[1]: sshd@139-46.62.141.192:22-46.62.141.104:62591.service: Deactivated successfully. Jan 23 18:29:54.818000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@139-46.62.141.192:22-46.62.141.104:62591 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:54.837000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@140-46.62.141.192:22-46.62.141.104:62593 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:54.838103 systemd[1]: Started sshd@140-46.62.141.192:22-46.62.141.104:62593.service - OpenSSH per-connection server daemon (46.62.141.104:62593). Jan 23 18:29:54.958633 sshd[2995]: Invalid user user from 46.62.141.104 port 62593 Jan 23 18:29:54.965316 sshd[2995]: Received disconnect from 46.62.141.104 port 62593:11: Bye Bye [preauth] Jan 23 18:29:54.965316 sshd[2995]: Disconnected from invalid user user 46.62.141.104 port 62593 [preauth] Jan 23 18:29:54.964000 audit[2995]: USER_ERR pid=2995 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:54.968795 systemd[1]: sshd@140-46.62.141.192:22-46.62.141.104:62593.service: Deactivated successfully. Jan 23 18:29:54.968000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@140-46.62.141.192:22-46.62.141.104:62593 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:55.002594 systemd[1]: Started sshd@141-46.62.141.192:22-46.62.141.104:62595.service - OpenSSH per-connection server daemon (46.62.141.104:62595). Jan 23 18:29:55.001000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@141-46.62.141.192:22-46.62.141.104:62595 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:55.116956 sshd[3001]: Invalid user user2 from 46.62.141.104 port 62595 Jan 23 18:29:55.123653 sshd[3001]: Received disconnect from 46.62.141.104 port 62595:11: Bye Bye [preauth] Jan 23 18:29:55.123653 sshd[3001]: Disconnected from invalid user user2 46.62.141.104 port 62595 [preauth] Jan 23 18:29:55.122000 audit[3001]: USER_ERR pid=3001 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:55.127423 systemd[1]: sshd@141-46.62.141.192:22-46.62.141.104:62595.service: Deactivated successfully. Jan 23 18:29:55.126000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@141-46.62.141.192:22-46.62.141.104:62595 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:55.146000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@142-46.62.141.192:22-46.62.141.104:62597 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:55.146873 systemd[1]: Started sshd@142-46.62.141.192:22-46.62.141.104:62597.service - OpenSSH per-connection server daemon (46.62.141.104:62597). Jan 23 18:29:55.258493 sshd[3007]: Received disconnect from 46.62.141.104 port 62597:11: Bye Bye [preauth] Jan 23 18:29:55.258493 sshd[3007]: Disconnected from authenticating user root 46.62.141.104 port 62597 [preauth] Jan 23 18:29:55.258000 audit[3007]: USER_ERR pid=3007 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:55.262078 systemd[1]: sshd@142-46.62.141.192:22-46.62.141.104:62597.service: Deactivated successfully. Jan 23 18:29:55.262000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@142-46.62.141.192:22-46.62.141.104:62597 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:55.288000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@143-46.62.141.192:22-46.62.141.104:62599 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:55.288968 systemd[1]: Started sshd@143-46.62.141.192:22-46.62.141.104:62599.service - OpenSSH per-connection server daemon (46.62.141.104:62599). Jan 23 18:29:55.408519 sshd[3013]: Invalid user admin from 46.62.141.104 port 62599 Jan 23 18:29:55.415130 sshd[3013]: Received disconnect from 46.62.141.104 port 62599:11: Bye Bye [preauth] Jan 23 18:29:55.415130 sshd[3013]: Disconnected from invalid user admin 46.62.141.104 port 62599 [preauth] Jan 23 18:29:55.414000 audit[3013]: USER_ERR pid=3013 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:55.419052 systemd[1]: sshd@143-46.62.141.192:22-46.62.141.104:62599.service: Deactivated successfully. Jan 23 18:29:55.418000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@143-46.62.141.192:22-46.62.141.104:62599 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:55.443000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@144-46.62.141.192:22-46.62.141.104:62600 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:55.444385 systemd[1]: Started sshd@144-46.62.141.192:22-46.62.141.104:62600.service - OpenSSH per-connection server daemon (46.62.141.104:62600). Jan 23 18:29:55.541437 update_engine[1566]: I20260123 18:29:55.541332 1566 update_attempter.cc:509] Updating boot flags... Jan 23 18:29:55.565367 sshd[3019]: Invalid user user from 46.62.141.104 port 62600 Jan 23 18:29:55.575407 sshd[3019]: Received disconnect from 46.62.141.104 port 62600:11: Bye Bye [preauth] Jan 23 18:29:55.575407 sshd[3019]: Disconnected from invalid user user 46.62.141.104 port 62600 [preauth] Jan 23 18:29:55.576000 audit[3019]: USER_ERR pid=3019 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:55.582472 systemd[1]: sshd@144-46.62.141.192:22-46.62.141.104:62600.service: Deactivated successfully. Jan 23 18:29:55.582000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@144-46.62.141.192:22-46.62.141.104:62600 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:55.603000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@145-46.62.141.192:22-46.62.141.104:62602 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:55.603891 systemd[1]: Started sshd@145-46.62.141.192:22-46.62.141.104:62602.service - OpenSSH per-connection server daemon (46.62.141.104:62602). Jan 23 18:29:55.712086 sshd[3033]: Invalid user user2 from 46.62.141.104 port 62602 Jan 23 18:29:55.719361 sshd[3033]: Received disconnect from 46.62.141.104 port 62602:11: Bye Bye [preauth] Jan 23 18:29:55.719361 sshd[3033]: Disconnected from invalid user user2 46.62.141.104 port 62602 [preauth] Jan 23 18:29:55.727327 kernel: kauditd_printk_skb: 92 callbacks suppressed Jan 23 18:29:55.727384 kernel: audit: type=1109 audit(1769192995.719:621): pid=3033 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:55.719000 audit[3033]: USER_ERR pid=3033 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:55.729814 systemd[1]: sshd@145-46.62.141.192:22-46.62.141.104:62602.service: Deactivated successfully. Jan 23 18:29:55.728000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@145-46.62.141.192:22-46.62.141.104:62602 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:55.739273 kernel: audit: type=1131 audit(1769192995.728:622): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@145-46.62.141.192:22-46.62.141.104:62602 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:55.752000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@146-46.62.141.192:22-46.62.141.104:62604 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:55.753539 systemd[1]: Started sshd@146-46.62.141.192:22-46.62.141.104:62604.service - OpenSSH per-connection server daemon (46.62.141.104:62604). Jan 23 18:29:55.760279 kernel: audit: type=1130 audit(1769192995.752:623): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@146-46.62.141.192:22-46.62.141.104:62604 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:55.851042 sshd[3050]: Received disconnect from 46.62.141.104 port 62604:11: Bye Bye [preauth] Jan 23 18:29:55.851042 sshd[3050]: Disconnected from authenticating user root 46.62.141.104 port 62604 [preauth] Jan 23 18:29:55.849000 audit[3050]: USER_ERR pid=3050 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:55.861440 kernel: audit: type=1109 audit(1769192995.849:624): pid=3050 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:55.862253 systemd[1]: sshd@146-46.62.141.192:22-46.62.141.104:62604.service: Deactivated successfully. Jan 23 18:29:55.861000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@146-46.62.141.192:22-46.62.141.104:62604 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:55.873341 kernel: audit: type=1131 audit(1769192995.861:625): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@146-46.62.141.192:22-46.62.141.104:62604 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:55.887062 systemd[1]: Started sshd@147-46.62.141.192:22-46.62.141.104:62606.service - OpenSSH per-connection server daemon (46.62.141.104:62606). Jan 23 18:29:55.886000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@147-46.62.141.192:22-46.62.141.104:62606 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:55.900303 kernel: audit: type=1130 audit(1769192995.886:626): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@147-46.62.141.192:22-46.62.141.104:62606 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:55.998514 sshd[3057]: Invalid user admin from 46.62.141.104 port 62606 Jan 23 18:29:56.004799 sshd[3057]: Received disconnect from 46.62.141.104 port 62606:11: Bye Bye [preauth] Jan 23 18:29:56.004799 sshd[3057]: Disconnected from invalid user admin 46.62.141.104 port 62606 [preauth] Jan 23 18:29:56.004000 audit[3057]: USER_ERR pid=3057 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:56.008801 systemd[1]: sshd@147-46.62.141.192:22-46.62.141.104:62606.service: Deactivated successfully. Jan 23 18:29:56.009000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@147-46.62.141.192:22-46.62.141.104:62606 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:56.021107 kernel: audit: type=1109 audit(1769192996.004:627): pid=3057 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:56.021171 kernel: audit: type=1131 audit(1769192996.009:628): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@147-46.62.141.192:22-46.62.141.104:62606 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:56.039000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@148-46.62.141.192:22-46.62.141.104:62608 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:56.039904 systemd[1]: Started sshd@148-46.62.141.192:22-46.62.141.104:62608.service - OpenSSH per-connection server daemon (46.62.141.104:62608). Jan 23 18:29:56.053315 kernel: audit: type=1130 audit(1769192996.039:629): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@148-46.62.141.192:22-46.62.141.104:62608 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:56.151879 sshd[3063]: Invalid user user from 46.62.141.104 port 62608 Jan 23 18:29:56.158402 sshd[3063]: Received disconnect from 46.62.141.104 port 62608:11: Bye Bye [preauth] Jan 23 18:29:56.158402 sshd[3063]: Disconnected from invalid user user 46.62.141.104 port 62608 [preauth] Jan 23 18:29:56.157000 audit[3063]: USER_ERR pid=3063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:56.162564 systemd[1]: sshd@148-46.62.141.192:22-46.62.141.104:62608.service: Deactivated successfully. Jan 23 18:29:56.161000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@148-46.62.141.192:22-46.62.141.104:62608 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:56.171316 kernel: audit: type=1109 audit(1769192996.157:630): pid=3063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:56.185000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@149-46.62.141.192:22-46.62.141.104:62609 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:56.187055 systemd[1]: Started sshd@149-46.62.141.192:22-46.62.141.104:62609.service - OpenSSH per-connection server daemon (46.62.141.104:62609). Jan 23 18:29:56.291800 sshd[3069]: Invalid user user2 from 46.62.141.104 port 62609 Jan 23 18:29:56.299504 sshd[3069]: Received disconnect from 46.62.141.104 port 62609:11: Bye Bye [preauth] Jan 23 18:29:56.299504 sshd[3069]: Disconnected from invalid user user2 46.62.141.104 port 62609 [preauth] Jan 23 18:29:56.298000 audit[3069]: USER_ERR pid=3069 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:56.303822 systemd[1]: sshd@149-46.62.141.192:22-46.62.141.104:62609.service: Deactivated successfully. Jan 23 18:29:56.303000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@149-46.62.141.192:22-46.62.141.104:62609 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:56.327000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@150-46.62.141.192:22-46.62.141.104:62612 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:56.328650 systemd[1]: Started sshd@150-46.62.141.192:22-46.62.141.104:62612.service - OpenSSH per-connection server daemon (46.62.141.104:62612). Jan 23 18:29:56.446407 sshd[3075]: Received disconnect from 46.62.141.104 port 62612:11: Bye Bye [preauth] Jan 23 18:29:56.446407 sshd[3075]: Disconnected from authenticating user root 46.62.141.104 port 62612 [preauth] Jan 23 18:29:56.446000 audit[3075]: USER_ERR pid=3075 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:56.449045 systemd[1]: sshd@150-46.62.141.192:22-46.62.141.104:62612.service: Deactivated successfully. Jan 23 18:29:56.449000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@150-46.62.141.192:22-46.62.141.104:62612 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:56.470000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@151-46.62.141.192:22-46.62.141.104:62613 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:56.470543 systemd[1]: Started sshd@151-46.62.141.192:22-46.62.141.104:62613.service - OpenSSH per-connection server daemon (46.62.141.104:62613). Jan 23 18:29:56.583333 sshd[3081]: Invalid user admin from 46.62.141.104 port 62613 Jan 23 18:29:56.590774 sshd[3081]: Received disconnect from 46.62.141.104 port 62613:11: Bye Bye [preauth] Jan 23 18:29:56.590774 sshd[3081]: Disconnected from invalid user admin 46.62.141.104 port 62613 [preauth] Jan 23 18:29:56.589000 audit[3081]: USER_ERR pid=3081 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:56.594535 systemd[1]: sshd@151-46.62.141.192:22-46.62.141.104:62613.service: Deactivated successfully. Jan 23 18:29:56.593000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@151-46.62.141.192:22-46.62.141.104:62613 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:56.617000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@152-46.62.141.192:22-46.62.141.104:62615 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:56.618351 systemd[1]: Started sshd@152-46.62.141.192:22-46.62.141.104:62615.service - OpenSSH per-connection server daemon (46.62.141.104:62615). Jan 23 18:29:56.739918 sshd[3087]: Invalid user user from 46.62.141.104 port 62615 Jan 23 18:29:56.746502 sshd[3087]: Received disconnect from 46.62.141.104 port 62615:11: Bye Bye [preauth] Jan 23 18:29:56.746502 sshd[3087]: Disconnected from invalid user user 46.62.141.104 port 62615 [preauth] Jan 23 18:29:56.745000 audit[3087]: USER_ERR pid=3087 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:56.749654 systemd[1]: sshd@152-46.62.141.192:22-46.62.141.104:62615.service: Deactivated successfully. Jan 23 18:29:56.748000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@152-46.62.141.192:22-46.62.141.104:62615 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:56.770543 systemd[1]: Started sshd@153-46.62.141.192:22-46.62.141.104:62617.service - OpenSSH per-connection server daemon (46.62.141.104:62617). Jan 23 18:29:56.769000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@153-46.62.141.192:22-46.62.141.104:62617 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:56.855553 sshd[3093]: Invalid user user2 from 46.62.141.104 port 62617 Jan 23 18:29:56.861874 sshd[3093]: Received disconnect from 46.62.141.104 port 62617:11: Bye Bye [preauth] Jan 23 18:29:56.861874 sshd[3093]: Disconnected from invalid user user2 46.62.141.104 port 62617 [preauth] Jan 23 18:29:56.862000 audit[3093]: USER_ERR pid=3093 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:56.864403 systemd[1]: sshd@153-46.62.141.192:22-46.62.141.104:62617.service: Deactivated successfully. Jan 23 18:29:56.864000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@153-46.62.141.192:22-46.62.141.104:62617 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:56.883000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@154-46.62.141.192:22-46.62.141.104:62619 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:56.883454 systemd[1]: Started sshd@154-46.62.141.192:22-46.62.141.104:62619.service - OpenSSH per-connection server daemon (46.62.141.104:62619). Jan 23 18:29:56.969024 sshd[3099]: Received disconnect from 46.62.141.104 port 62619:11: Bye Bye [preauth] Jan 23 18:29:56.969024 sshd[3099]: Disconnected from authenticating user root 46.62.141.104 port 62619 [preauth] Jan 23 18:29:56.967000 audit[3099]: USER_ERR pid=3099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:56.971754 systemd[1]: sshd@154-46.62.141.192:22-46.62.141.104:62619.service: Deactivated successfully. Jan 23 18:29:56.970000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@154-46.62.141.192:22-46.62.141.104:62619 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:56.988000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@155-46.62.141.192:22-46.62.141.104:62621 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:56.989451 systemd[1]: Started sshd@155-46.62.141.192:22-46.62.141.104:62621.service - OpenSSH per-connection server daemon (46.62.141.104:62621). Jan 23 18:29:57.079697 sshd[3105]: Invalid user admin from 46.62.141.104 port 62621 Jan 23 18:29:57.086229 sshd[3105]: Received disconnect from 46.62.141.104 port 62621:11: Bye Bye [preauth] Jan 23 18:29:57.086229 sshd[3105]: Disconnected from invalid user admin 46.62.141.104 port 62621 [preauth] Jan 23 18:29:57.085000 audit[3105]: USER_ERR pid=3105 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:57.089962 systemd[1]: sshd@155-46.62.141.192:22-46.62.141.104:62621.service: Deactivated successfully. Jan 23 18:29:57.089000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@155-46.62.141.192:22-46.62.141.104:62621 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:57.108000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@156-46.62.141.192:22-46.62.141.104:62623 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:57.109325 systemd[1]: Started sshd@156-46.62.141.192:22-46.62.141.104:62623.service - OpenSSH per-connection server daemon (46.62.141.104:62623). Jan 23 18:29:57.214724 sshd[3111]: Invalid user user from 46.62.141.104 port 62623 Jan 23 18:29:57.221496 sshd[3111]: Received disconnect from 46.62.141.104 port 62623:11: Bye Bye [preauth] Jan 23 18:29:57.221496 sshd[3111]: Disconnected from invalid user user 46.62.141.104 port 62623 [preauth] Jan 23 18:29:57.220000 audit[3111]: USER_ERR pid=3111 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:57.225120 systemd[1]: sshd@156-46.62.141.192:22-46.62.141.104:62623.service: Deactivated successfully. Jan 23 18:29:57.224000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@156-46.62.141.192:22-46.62.141.104:62623 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:57.245000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@157-46.62.141.192:22-46.62.141.104:62624 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:57.246409 systemd[1]: Started sshd@157-46.62.141.192:22-46.62.141.104:62624.service - OpenSSH per-connection server daemon (46.62.141.104:62624). Jan 23 18:29:57.362327 sshd[3117]: Invalid user user2 from 46.62.141.104 port 62624 Jan 23 18:29:57.368357 sshd[3117]: Received disconnect from 46.62.141.104 port 62624:11: Bye Bye [preauth] Jan 23 18:29:57.368357 sshd[3117]: Disconnected from invalid user user2 46.62.141.104 port 62624 [preauth] Jan 23 18:29:57.368000 audit[3117]: USER_ERR pid=3117 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:57.371785 systemd[1]: sshd@157-46.62.141.192:22-46.62.141.104:62624.service: Deactivated successfully. Jan 23 18:29:57.372000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@157-46.62.141.192:22-46.62.141.104:62624 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:57.392000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@158-46.62.141.192:22-46.62.141.104:62627 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:57.392732 systemd[1]: Started sshd@158-46.62.141.192:22-46.62.141.104:62627.service - OpenSSH per-connection server daemon (46.62.141.104:62627). Jan 23 18:29:57.511726 sshd[3123]: Received disconnect from 46.62.141.104 port 62627:11: Bye Bye [preauth] Jan 23 18:29:57.511726 sshd[3123]: Disconnected from authenticating user root 46.62.141.104 port 62627 [preauth] Jan 23 18:29:57.510000 audit[3123]: USER_ERR pid=3123 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:57.515831 systemd[1]: sshd@158-46.62.141.192:22-46.62.141.104:62627.service: Deactivated successfully. Jan 23 18:29:57.515000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@158-46.62.141.192:22-46.62.141.104:62627 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:57.535000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@159-46.62.141.192:22-46.62.141.104:62628 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:57.536415 systemd[1]: Started sshd@159-46.62.141.192:22-46.62.141.104:62628.service - OpenSSH per-connection server daemon (46.62.141.104:62628). Jan 23 18:29:57.632791 sshd[3129]: Invalid user admin from 46.62.141.104 port 62628 Jan 23 18:29:57.639500 sshd[3129]: Received disconnect from 46.62.141.104 port 62628:11: Bye Bye [preauth] Jan 23 18:29:57.639500 sshd[3129]: Disconnected from invalid user admin 46.62.141.104 port 62628 [preauth] Jan 23 18:29:57.638000 audit[3129]: USER_ERR pid=3129 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:57.643257 systemd[1]: sshd@159-46.62.141.192:22-46.62.141.104:62628.service: Deactivated successfully. Jan 23 18:29:57.642000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@159-46.62.141.192:22-46.62.141.104:62628 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:57.666000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@160-46.62.141.192:22-46.62.141.104:62630 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:57.667767 systemd[1]: Started sshd@160-46.62.141.192:22-46.62.141.104:62630.service - OpenSSH per-connection server daemon (46.62.141.104:62630). Jan 23 18:29:57.776814 sshd[3135]: Invalid user user from 46.62.141.104 port 62630 Jan 23 18:29:57.783483 sshd[3135]: Received disconnect from 46.62.141.104 port 62630:11: Bye Bye [preauth] Jan 23 18:29:57.783483 sshd[3135]: Disconnected from invalid user user 46.62.141.104 port 62630 [preauth] Jan 23 18:29:57.783000 audit[3135]: USER_ERR pid=3135 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:57.787232 systemd[1]: sshd@160-46.62.141.192:22-46.62.141.104:62630.service: Deactivated successfully. Jan 23 18:29:57.787000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@160-46.62.141.192:22-46.62.141.104:62630 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:57.809000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@161-46.62.141.192:22-46.62.141.104:62632 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:57.809616 systemd[1]: Started sshd@161-46.62.141.192:22-46.62.141.104:62632.service - OpenSSH per-connection server daemon (46.62.141.104:62632). Jan 23 18:29:57.936137 sshd[3141]: Invalid user user2 from 46.62.141.104 port 62632 Jan 23 18:29:57.941697 sshd[3141]: Received disconnect from 46.62.141.104 port 62632:11: Bye Bye [preauth] Jan 23 18:29:57.941697 sshd[3141]: Disconnected from invalid user user2 46.62.141.104 port 62632 [preauth] Jan 23 18:29:57.941000 audit[3141]: USER_ERR pid=3141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:57.945309 systemd[1]: sshd@161-46.62.141.192:22-46.62.141.104:62632.service: Deactivated successfully. Jan 23 18:29:57.944000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@161-46.62.141.192:22-46.62.141.104:62632 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:57.963000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@162-46.62.141.192:22-46.62.141.104:62634 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:57.964744 systemd[1]: Started sshd@162-46.62.141.192:22-46.62.141.104:62634.service - OpenSSH per-connection server daemon (46.62.141.104:62634). Jan 23 18:29:58.054969 sshd[3147]: Received disconnect from 46.62.141.104 port 62634:11: Bye Bye [preauth] Jan 23 18:29:58.054969 sshd[3147]: Disconnected from authenticating user root 46.62.141.104 port 62634 [preauth] Jan 23 18:29:58.053000 audit[3147]: USER_ERR pid=3147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:58.058605 systemd[1]: sshd@162-46.62.141.192:22-46.62.141.104:62634.service: Deactivated successfully. Jan 23 18:29:58.057000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@162-46.62.141.192:22-46.62.141.104:62634 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:58.081412 systemd[1]: Started sshd@163-46.62.141.192:22-46.62.141.104:62637.service - OpenSSH per-connection server daemon (46.62.141.104:62637). Jan 23 18:29:58.080000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@163-46.62.141.192:22-46.62.141.104:62637 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:58.201341 sshd[3153]: Invalid user admin from 46.62.141.104 port 62637 Jan 23 18:29:58.208442 sshd[3153]: Received disconnect from 46.62.141.104 port 62637:11: Bye Bye [preauth] Jan 23 18:29:58.208442 sshd[3153]: Disconnected from invalid user admin 46.62.141.104 port 62637 [preauth] Jan 23 18:29:58.207000 audit[3153]: USER_ERR pid=3153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:58.212416 systemd[1]: sshd@163-46.62.141.192:22-46.62.141.104:62637.service: Deactivated successfully. Jan 23 18:29:58.211000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@163-46.62.141.192:22-46.62.141.104:62637 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:58.236000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@164-46.62.141.192:22-46.62.141.104:62638 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:58.237564 systemd[1]: Started sshd@164-46.62.141.192:22-46.62.141.104:62638.service - OpenSSH per-connection server daemon (46.62.141.104:62638). Jan 23 18:29:58.356865 sshd[3159]: Invalid user user from 46.62.141.104 port 62638 Jan 23 18:29:58.363806 sshd[3159]: Received disconnect from 46.62.141.104 port 62638:11: Bye Bye [preauth] Jan 23 18:29:58.363806 sshd[3159]: Disconnected from invalid user user 46.62.141.104 port 62638 [preauth] Jan 23 18:29:58.363000 audit[3159]: USER_ERR pid=3159 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:58.367912 systemd[1]: sshd@164-46.62.141.192:22-46.62.141.104:62638.service: Deactivated successfully. Jan 23 18:29:58.368000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@164-46.62.141.192:22-46.62.141.104:62638 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:58.393000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@165-46.62.141.192:22-46.62.141.104:62640 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:58.393868 systemd[1]: Started sshd@165-46.62.141.192:22-46.62.141.104:62640.service - OpenSSH per-connection server daemon (46.62.141.104:62640). Jan 23 18:29:58.513089 sshd[3165]: Invalid user user2 from 46.62.141.104 port 62640 Jan 23 18:29:58.520177 sshd[3165]: Received disconnect from 46.62.141.104 port 62640:11: Bye Bye [preauth] Jan 23 18:29:58.520177 sshd[3165]: Disconnected from invalid user user2 46.62.141.104 port 62640 [preauth] Jan 23 18:29:58.519000 audit[3165]: USER_ERR pid=3165 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:58.523840 systemd[1]: sshd@165-46.62.141.192:22-46.62.141.104:62640.service: Deactivated successfully. Jan 23 18:29:58.523000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@165-46.62.141.192:22-46.62.141.104:62640 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:58.546000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@166-46.62.141.192:22-46.62.141.104:62642 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:58.547110 systemd[1]: Started sshd@166-46.62.141.192:22-46.62.141.104:62642.service - OpenSSH per-connection server daemon (46.62.141.104:62642). Jan 23 18:29:58.663144 sshd[3171]: Received disconnect from 46.62.141.104 port 62642:11: Bye Bye [preauth] Jan 23 18:29:58.663144 sshd[3171]: Disconnected from authenticating user root 46.62.141.104 port 62642 [preauth] Jan 23 18:29:58.662000 audit[3171]: USER_ERR pid=3171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:58.666876 systemd[1]: sshd@166-46.62.141.192:22-46.62.141.104:62642.service: Deactivated successfully. Jan 23 18:29:58.666000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@166-46.62.141.192:22-46.62.141.104:62642 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:58.686888 systemd[1]: Started sshd@167-46.62.141.192:22-46.62.141.104:62644.service - OpenSSH per-connection server daemon (46.62.141.104:62644). Jan 23 18:29:58.685000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@167-46.62.141.192:22-46.62.141.104:62644 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:58.806993 sshd[3177]: Invalid user admin from 46.62.141.104 port 62644 Jan 23 18:29:58.813668 sshd[3177]: Received disconnect from 46.62.141.104 port 62644:11: Bye Bye [preauth] Jan 23 18:29:58.813668 sshd[3177]: Disconnected from invalid user admin 46.62.141.104 port 62644 [preauth] Jan 23 18:29:58.812000 audit[3177]: USER_ERR pid=3177 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:58.817298 systemd[1]: sshd@167-46.62.141.192:22-46.62.141.104:62644.service: Deactivated successfully. Jan 23 18:29:58.816000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@167-46.62.141.192:22-46.62.141.104:62644 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:58.841000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@168-46.62.141.192:22-46.62.141.104:62646 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:58.842760 systemd[1]: Started sshd@168-46.62.141.192:22-46.62.141.104:62646.service - OpenSSH per-connection server daemon (46.62.141.104:62646). Jan 23 18:29:58.907073 etcd-wrapper[1931]: {"level":"warn","ts":"2026-01-23T18:29:58.906245Z","caller":"rafthttp/probing_status.go:68","msg":"prober detected unhealthy status","round-tripper-name":"ROUND_TRIPPER_RAFT_MESSAGE","remote-peer-id":"15eb2e9460fb69a5","rtt":"736.265µs","error":"dial tcp 10.0.0.3:2380: i/o timeout"} Jan 23 18:29:58.958765 sshd[3183]: Invalid user user from 46.62.141.104 port 62646 Jan 23 18:29:58.965203 sshd[3183]: Received disconnect from 46.62.141.104 port 62646:11: Bye Bye [preauth] Jan 23 18:29:58.965203 sshd[3183]: Disconnected from invalid user user 46.62.141.104 port 62646 [preauth] Jan 23 18:29:58.965000 audit[3183]: USER_ERR pid=3183 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:58.968697 systemd[1]: sshd@168-46.62.141.192:22-46.62.141.104:62646.service: Deactivated successfully. Jan 23 18:29:58.968000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@168-46.62.141.192:22-46.62.141.104:62646 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:58.992000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@169-46.62.141.192:22-46.62.141.104:62647 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:58.992491 systemd[1]: Started sshd@169-46.62.141.192:22-46.62.141.104:62647.service - OpenSSH per-connection server daemon (46.62.141.104:62647). Jan 23 18:29:59.111636 sshd[3189]: Invalid user user2 from 46.62.141.104 port 62647 Jan 23 18:29:59.118688 sshd[3189]: Received disconnect from 46.62.141.104 port 62647:11: Bye Bye [preauth] Jan 23 18:29:59.118688 sshd[3189]: Disconnected from invalid user user2 46.62.141.104 port 62647 [preauth] Jan 23 18:29:59.117000 audit[3189]: USER_ERR pid=3189 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:59.122323 systemd[1]: sshd@169-46.62.141.192:22-46.62.141.104:62647.service: Deactivated successfully. Jan 23 18:29:59.121000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@169-46.62.141.192:22-46.62.141.104:62647 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:59.143000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@170-46.62.141.192:22-46.62.141.104:62650 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:59.144736 systemd[1]: Started sshd@170-46.62.141.192:22-46.62.141.104:62650.service - OpenSSH per-connection server daemon (46.62.141.104:62650). Jan 23 18:29:59.260652 sshd[3195]: Received disconnect from 46.62.141.104 port 62650:11: Bye Bye [preauth] Jan 23 18:29:59.260652 sshd[3195]: Disconnected from authenticating user root 46.62.141.104 port 62650 [preauth] Jan 23 18:29:59.259000 audit[3195]: USER_ERR pid=3195 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:59.264387 systemd[1]: sshd@170-46.62.141.192:22-46.62.141.104:62650.service: Deactivated successfully. Jan 23 18:29:59.263000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@170-46.62.141.192:22-46.62.141.104:62650 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:59.289000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@171-46.62.141.192:22-46.62.141.104:62651 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:59.290164 systemd[1]: Started sshd@171-46.62.141.192:22-46.62.141.104:62651.service - OpenSSH per-connection server daemon (46.62.141.104:62651). Jan 23 18:29:59.401687 sshd[3201]: Invalid user admin from 46.62.141.104 port 62651 Jan 23 18:29:59.408477 sshd[3201]: Received disconnect from 46.62.141.104 port 62651:11: Bye Bye [preauth] Jan 23 18:29:59.408477 sshd[3201]: Disconnected from invalid user admin 46.62.141.104 port 62651 [preauth] Jan 23 18:29:59.407000 audit[3201]: USER_ERR pid=3201 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:59.412006 systemd[1]: sshd@171-46.62.141.192:22-46.62.141.104:62651.service: Deactivated successfully. Jan 23 18:29:59.411000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@171-46.62.141.192:22-46.62.141.104:62651 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:59.434000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@172-46.62.141.192:22-46.62.141.104:62653 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:59.435146 systemd[1]: Started sshd@172-46.62.141.192:22-46.62.141.104:62653.service - OpenSSH per-connection server daemon (46.62.141.104:62653). Jan 23 18:29:59.555064 sshd[3207]: Invalid user user from 46.62.141.104 port 62653 Jan 23 18:29:59.561694 sshd[3207]: Received disconnect from 46.62.141.104 port 62653:11: Bye Bye [preauth] Jan 23 18:29:59.561694 sshd[3207]: Disconnected from invalid user user 46.62.141.104 port 62653 [preauth] Jan 23 18:29:59.561000 audit[3207]: USER_ERR pid=3207 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:59.565223 systemd[1]: sshd@172-46.62.141.192:22-46.62.141.104:62653.service: Deactivated successfully. Jan 23 18:29:59.565000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@172-46.62.141.192:22-46.62.141.104:62653 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:59.590000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@173-46.62.141.192:22-46.62.141.104:62655 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:59.590965 systemd[1]: Started sshd@173-46.62.141.192:22-46.62.141.104:62655.service - OpenSSH per-connection server daemon (46.62.141.104:62655). Jan 23 18:29:59.708130 sshd[3213]: Invalid user user2 from 46.62.141.104 port 62655 Jan 23 18:29:59.714681 sshd[3213]: Received disconnect from 46.62.141.104 port 62655:11: Bye Bye [preauth] Jan 23 18:29:59.714681 sshd[3213]: Disconnected from invalid user user2 46.62.141.104 port 62655 [preauth] Jan 23 18:29:59.713000 audit[3213]: USER_ERR pid=3213 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:59.717521 systemd[1]: sshd@173-46.62.141.192:22-46.62.141.104:62655.service: Deactivated successfully. Jan 23 18:29:59.716000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@173-46.62.141.192:22-46.62.141.104:62655 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:59.745000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@174-46.62.141.192:22-46.62.141.104:62658 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:59.746403 systemd[1]: Started sshd@174-46.62.141.192:22-46.62.141.104:62658.service - OpenSSH per-connection server daemon (46.62.141.104:62658). Jan 23 18:29:59.858164 sshd[3219]: Received disconnect from 46.62.141.104 port 62658:11: Bye Bye [preauth] Jan 23 18:29:59.858164 sshd[3219]: Disconnected from authenticating user root 46.62.141.104 port 62658 [preauth] Jan 23 18:29:59.857000 audit[3219]: USER_ERR pid=3219 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:29:59.862819 systemd[1]: sshd@174-46.62.141.192:22-46.62.141.104:62658.service: Deactivated successfully. Jan 23 18:29:59.862000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@174-46.62.141.192:22-46.62.141.104:62658 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:29:59.885233 systemd[1]: Started sshd@175-46.62.141.192:22-46.62.141.104:62661.service - OpenSSH per-connection server daemon (46.62.141.104:62661). Jan 23 18:29:59.884000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@175-46.62.141.192:22-46.62.141.104:62661 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:00.002241 sshd[3225]: Invalid user admin from 46.62.141.104 port 62661 Jan 23 18:30:00.008927 sshd[3225]: Received disconnect from 46.62.141.104 port 62661:11: Bye Bye [preauth] Jan 23 18:30:00.008927 sshd[3225]: Disconnected from invalid user admin 46.62.141.104 port 62661 [preauth] Jan 23 18:30:00.007000 audit[3225]: USER_ERR pid=3225 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:00.013170 systemd[1]: sshd@175-46.62.141.192:22-46.62.141.104:62661.service: Deactivated successfully. Jan 23 18:30:00.012000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@175-46.62.141.192:22-46.62.141.104:62661 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:00.035000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@176-46.62.141.192:22-46.62.141.104:62663 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:00.036414 systemd[1]: Started sshd@176-46.62.141.192:22-46.62.141.104:62663.service - OpenSSH per-connection server daemon (46.62.141.104:62663). Jan 23 18:30:00.150643 sshd[3231]: Invalid user user from 46.62.141.104 port 62663 Jan 23 18:30:00.157854 sshd[3231]: Received disconnect from 46.62.141.104 port 62663:11: Bye Bye [preauth] Jan 23 18:30:00.157854 sshd[3231]: Disconnected from invalid user user 46.62.141.104 port 62663 [preauth] Jan 23 18:30:00.156000 audit[3231]: USER_ERR pid=3231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:00.161820 systemd[1]: sshd@176-46.62.141.192:22-46.62.141.104:62663.service: Deactivated successfully. Jan 23 18:30:00.162000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@176-46.62.141.192:22-46.62.141.104:62663 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:00.181000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@177-46.62.141.192:22-46.62.141.104:62666 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:00.181481 systemd[1]: Started sshd@177-46.62.141.192:22-46.62.141.104:62666.service - OpenSSH per-connection server daemon (46.62.141.104:62666). Jan 23 18:30:00.294080 sshd[3237]: Invalid user user2 from 46.62.141.104 port 62666 Jan 23 18:30:00.301224 sshd[3237]: Received disconnect from 46.62.141.104 port 62666:11: Bye Bye [preauth] Jan 23 18:30:00.301224 sshd[3237]: Disconnected from invalid user user2 46.62.141.104 port 62666 [preauth] Jan 23 18:30:00.301000 audit[3237]: USER_ERR pid=3237 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:00.305306 systemd[1]: sshd@177-46.62.141.192:22-46.62.141.104:62666.service: Deactivated successfully. Jan 23 18:30:00.305000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@177-46.62.141.192:22-46.62.141.104:62666 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:00.335570 systemd[1]: Started sshd@178-46.62.141.192:22-46.62.141.104:62668.service - OpenSSH per-connection server daemon (46.62.141.104:62668). Jan 23 18:30:00.335000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@178-46.62.141.192:22-46.62.141.104:62668 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:00.470701 sshd[3243]: Received disconnect from 46.62.141.104 port 62668:11: Bye Bye [preauth] Jan 23 18:30:00.470701 sshd[3243]: Disconnected from authenticating user root 46.62.141.104 port 62668 [preauth] Jan 23 18:30:00.469000 audit[3243]: USER_ERR pid=3243 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:00.474840 systemd[1]: sshd@178-46.62.141.192:22-46.62.141.104:62668.service: Deactivated successfully. Jan 23 18:30:00.474000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@178-46.62.141.192:22-46.62.141.104:62668 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:00.497000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@179-46.62.141.192:22-46.62.141.104:62670 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:00.498145 systemd[1]: Started sshd@179-46.62.141.192:22-46.62.141.104:62670.service - OpenSSH per-connection server daemon (46.62.141.104:62670). Jan 23 18:30:00.618490 sshd[3249]: Invalid user admin from 46.62.141.104 port 62670 Jan 23 18:30:00.626473 sshd[3249]: Received disconnect from 46.62.141.104 port 62670:11: Bye Bye [preauth] Jan 23 18:30:00.626473 sshd[3249]: Disconnected from invalid user admin 46.62.141.104 port 62670 [preauth] Jan 23 18:30:00.625000 audit[3249]: USER_ERR pid=3249 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:00.630352 systemd[1]: sshd@179-46.62.141.192:22-46.62.141.104:62670.service: Deactivated successfully. Jan 23 18:30:00.629000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@179-46.62.141.192:22-46.62.141.104:62670 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:00.662046 systemd[1]: Started sshd@180-46.62.141.192:22-46.62.141.104:62673.service - OpenSSH per-connection server daemon (46.62.141.104:62673). Jan 23 18:30:00.661000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@180-46.62.141.192:22-46.62.141.104:62673 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:00.773543 sshd[3255]: Invalid user user from 46.62.141.104 port 62673 Jan 23 18:30:00.780344 sshd[3255]: Received disconnect from 46.62.141.104 port 62673:11: Bye Bye [preauth] Jan 23 18:30:00.780344 sshd[3255]: Disconnected from invalid user user 46.62.141.104 port 62673 [preauth] Jan 23 18:30:00.783413 kernel: kauditd_printk_skb: 95 callbacks suppressed Jan 23 18:30:00.783542 kernel: audit: type=1109 audit(1769193000.779:726): pid=3255 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:00.779000 audit[3255]: USER_ERR pid=3255 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:00.786008 systemd[1]: sshd@180-46.62.141.192:22-46.62.141.104:62673.service: Deactivated successfully. Jan 23 18:30:00.785000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@180-46.62.141.192:22-46.62.141.104:62673 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:00.799223 kernel: audit: type=1131 audit(1769193000.785:727): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@180-46.62.141.192:22-46.62.141.104:62673 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:00.821000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@181-46.62.141.192:22-46.62.141.104:62675 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:00.822513 systemd[1]: Started sshd@181-46.62.141.192:22-46.62.141.104:62675.service - OpenSSH per-connection server daemon (46.62.141.104:62675). Jan 23 18:30:00.835694 kernel: audit: type=1130 audit(1769193000.821:728): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@181-46.62.141.192:22-46.62.141.104:62675 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:00.930650 sshd[3261]: Invalid user user2 from 46.62.141.104 port 62675 Jan 23 18:30:00.937288 sshd[3261]: Received disconnect from 46.62.141.104 port 62675:11: Bye Bye [preauth] Jan 23 18:30:00.937288 sshd[3261]: Disconnected from invalid user user2 46.62.141.104 port 62675 [preauth] Jan 23 18:30:00.937000 audit[3261]: USER_ERR pid=3261 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:00.940013 systemd[1]: sshd@181-46.62.141.192:22-46.62.141.104:62675.service: Deactivated successfully. Jan 23 18:30:00.940000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@181-46.62.141.192:22-46.62.141.104:62675 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:00.952870 kernel: audit: type=1109 audit(1769193000.937:729): pid=3261 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:00.952921 kernel: audit: type=1131 audit(1769193000.940:730): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@181-46.62.141.192:22-46.62.141.104:62675 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:00.971000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@182-46.62.141.192:22-46.62.141.104:62677 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:00.971780 systemd[1]: Started sshd@182-46.62.141.192:22-46.62.141.104:62677.service - OpenSSH per-connection server daemon (46.62.141.104:62677). Jan 23 18:30:00.984348 kernel: audit: type=1130 audit(1769193000.971:731): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@182-46.62.141.192:22-46.62.141.104:62677 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:01.085171 sshd[3267]: Received disconnect from 46.62.141.104 port 62677:11: Bye Bye [preauth] Jan 23 18:30:01.085171 sshd[3267]: Disconnected from authenticating user root 46.62.141.104 port 62677 [preauth] Jan 23 18:30:01.085000 audit[3267]: USER_ERR pid=3267 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:01.098327 kernel: audit: type=1109 audit(1769193001.085:732): pid=3267 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:01.111895 systemd[1]: sshd@182-46.62.141.192:22-46.62.141.104:62677.service: Deactivated successfully. Jan 23 18:30:01.128316 kernel: audit: type=1131 audit(1769193001.112:733): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@182-46.62.141.192:22-46.62.141.104:62677 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:01.112000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@182-46.62.141.192:22-46.62.141.104:62677 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:01.120168 systemd[1]: Started sshd@183-46.62.141.192:22-46.62.141.104:62678.service - OpenSSH per-connection server daemon (46.62.141.104:62678). Jan 23 18:30:01.121000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@183-46.62.141.192:22-46.62.141.104:62678 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:01.145342 kernel: audit: type=1130 audit(1769193001.121:734): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@183-46.62.141.192:22-46.62.141.104:62678 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:01.241335 sshd[3273]: Invalid user admin from 46.62.141.104 port 62678 Jan 23 18:30:01.247716 sshd[3273]: Received disconnect from 46.62.141.104 port 62678:11: Bye Bye [preauth] Jan 23 18:30:01.247716 sshd[3273]: Disconnected from invalid user admin 46.62.141.104 port 62678 [preauth] Jan 23 18:30:01.246000 audit[3273]: USER_ERR pid=3273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:01.250458 systemd[1]: sshd@183-46.62.141.192:22-46.62.141.104:62678.service: Deactivated successfully. Jan 23 18:30:01.249000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@183-46.62.141.192:22-46.62.141.104:62678 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:01.260324 kernel: audit: type=1109 audit(1769193001.246:735): pid=3273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:01.277937 systemd[1]: Started sshd@184-46.62.141.192:22-46.62.141.104:62681.service - OpenSSH per-connection server daemon (46.62.141.104:62681). Jan 23 18:30:01.277000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@184-46.62.141.192:22-46.62.141.104:62681 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:01.393699 sshd[3279]: Invalid user user from 46.62.141.104 port 62681 Jan 23 18:30:01.400520 sshd[3279]: Received disconnect from 46.62.141.104 port 62681:11: Bye Bye [preauth] Jan 23 18:30:01.400520 sshd[3279]: Disconnected from invalid user user 46.62.141.104 port 62681 [preauth] Jan 23 18:30:01.399000 audit[3279]: USER_ERR pid=3279 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:01.404352 systemd[1]: sshd@184-46.62.141.192:22-46.62.141.104:62681.service: Deactivated successfully. Jan 23 18:30:01.403000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@184-46.62.141.192:22-46.62.141.104:62681 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:01.427000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@185-46.62.141.192:22-46.62.141.104:62682 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:01.428677 systemd[1]: Started sshd@185-46.62.141.192:22-46.62.141.104:62682.service - OpenSSH per-connection server daemon (46.62.141.104:62682). Jan 23 18:30:01.549014 sshd[3285]: Invalid user user2 from 46.62.141.104 port 62682 Jan 23 18:30:01.555094 sshd[3285]: Received disconnect from 46.62.141.104 port 62682:11: Bye Bye [preauth] Jan 23 18:30:01.555094 sshd[3285]: Disconnected from invalid user user2 46.62.141.104 port 62682 [preauth] Jan 23 18:30:01.554000 audit[3285]: USER_ERR pid=3285 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:01.558968 systemd[1]: sshd@185-46.62.141.192:22-46.62.141.104:62682.service: Deactivated successfully. Jan 23 18:30:01.558000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@185-46.62.141.192:22-46.62.141.104:62682 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:01.584000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@186-46.62.141.192:22-46.62.141.104:62686 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:01.585477 systemd[1]: Started sshd@186-46.62.141.192:22-46.62.141.104:62686.service - OpenSSH per-connection server daemon (46.62.141.104:62686). Jan 23 18:30:01.707554 sshd[3291]: Received disconnect from 46.62.141.104 port 62686:11: Bye Bye [preauth] Jan 23 18:30:01.707554 sshd[3291]: Disconnected from authenticating user root 46.62.141.104 port 62686 [preauth] Jan 23 18:30:01.706000 audit[3291]: USER_ERR pid=3291 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:01.712092 systemd[1]: sshd@186-46.62.141.192:22-46.62.141.104:62686.service: Deactivated successfully. Jan 23 18:30:01.711000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@186-46.62.141.192:22-46.62.141.104:62686 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:01.731000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@187-46.62.141.192:22-46.62.141.104:62687 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:01.731852 systemd[1]: Started sshd@187-46.62.141.192:22-46.62.141.104:62687.service - OpenSSH per-connection server daemon (46.62.141.104:62687). Jan 23 18:30:01.852442 sshd[3297]: Invalid user admin from 46.62.141.104 port 62687 Jan 23 18:30:01.858998 sshd[3297]: Received disconnect from 46.62.141.104 port 62687:11: Bye Bye [preauth] Jan 23 18:30:01.858998 sshd[3297]: Disconnected from invalid user admin 46.62.141.104 port 62687 [preauth] Jan 23 18:30:01.858000 audit[3297]: USER_ERR pid=3297 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:01.862914 systemd[1]: sshd@187-46.62.141.192:22-46.62.141.104:62687.service: Deactivated successfully. Jan 23 18:30:01.863000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@187-46.62.141.192:22-46.62.141.104:62687 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:01.889000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@188-46.62.141.192:22-46.62.141.104:62689 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:01.889981 systemd[1]: Started sshd@188-46.62.141.192:22-46.62.141.104:62689.service - OpenSSH per-connection server daemon (46.62.141.104:62689). Jan 23 18:30:02.011772 sshd[3303]: Invalid user user from 46.62.141.104 port 62689 Jan 23 18:30:02.019019 sshd[3303]: Received disconnect from 46.62.141.104 port 62689:11: Bye Bye [preauth] Jan 23 18:30:02.019019 sshd[3303]: Disconnected from invalid user user 46.62.141.104 port 62689 [preauth] Jan 23 18:30:02.017000 audit[3303]: USER_ERR pid=3303 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:02.022924 systemd[1]: sshd@188-46.62.141.192:22-46.62.141.104:62689.service: Deactivated successfully. Jan 23 18:30:02.022000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@188-46.62.141.192:22-46.62.141.104:62689 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:02.043000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@189-46.62.141.192:22-46.62.141.104:62691 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:02.044202 systemd[1]: Started sshd@189-46.62.141.192:22-46.62.141.104:62691.service - OpenSSH per-connection server daemon (46.62.141.104:62691). Jan 23 18:30:02.161890 sshd[3309]: Invalid user user2 from 46.62.141.104 port 62691 Jan 23 18:30:02.168431 sshd[3309]: Received disconnect from 46.62.141.104 port 62691:11: Bye Bye [preauth] Jan 23 18:30:02.168431 sshd[3309]: Disconnected from invalid user user2 46.62.141.104 port 62691 [preauth] Jan 23 18:30:02.167000 audit[3309]: USER_ERR pid=3309 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:02.172233 systemd[1]: sshd@189-46.62.141.192:22-46.62.141.104:62691.service: Deactivated successfully. Jan 23 18:30:02.171000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@189-46.62.141.192:22-46.62.141.104:62691 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:02.195000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@190-46.62.141.192:22-46.62.141.104:62693 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:02.196487 systemd[1]: Started sshd@190-46.62.141.192:22-46.62.141.104:62693.service - OpenSSH per-connection server daemon (46.62.141.104:62693). Jan 23 18:30:02.326565 sshd[3315]: Received disconnect from 46.62.141.104 port 62693:11: Bye Bye [preauth] Jan 23 18:30:02.326565 sshd[3315]: Disconnected from authenticating user root 46.62.141.104 port 62693 [preauth] Jan 23 18:30:02.325000 audit[3315]: USER_ERR pid=3315 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:02.330416 systemd[1]: sshd@190-46.62.141.192:22-46.62.141.104:62693.service: Deactivated successfully. Jan 23 18:30:02.329000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@190-46.62.141.192:22-46.62.141.104:62693 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:02.356000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@191-46.62.141.192:22-46.62.141.104:62696 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:02.357869 systemd[1]: Started sshd@191-46.62.141.192:22-46.62.141.104:62696.service - OpenSSH per-connection server daemon (46.62.141.104:62696). Jan 23 18:30:02.453869 sshd[3321]: Invalid user admin from 46.62.141.104 port 62696 Jan 23 18:30:02.460704 sshd[3321]: Received disconnect from 46.62.141.104 port 62696:11: Bye Bye [preauth] Jan 23 18:30:02.460704 sshd[3321]: Disconnected from invalid user admin 46.62.141.104 port 62696 [preauth] Jan 23 18:30:02.459000 audit[3321]: USER_ERR pid=3321 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:02.464247 systemd[1]: sshd@191-46.62.141.192:22-46.62.141.104:62696.service: Deactivated successfully. Jan 23 18:30:02.463000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@191-46.62.141.192:22-46.62.141.104:62696 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:02.496000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@192-46.62.141.192:22-46.62.141.104:62697 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:02.497120 systemd[1]: Started sshd@192-46.62.141.192:22-46.62.141.104:62697.service - OpenSSH per-connection server daemon (46.62.141.104:62697). Jan 23 18:30:02.609823 sshd[3327]: Invalid user user from 46.62.141.104 port 62697 Jan 23 18:30:02.616894 sshd[3327]: Received disconnect from 46.62.141.104 port 62697:11: Bye Bye [preauth] Jan 23 18:30:02.616894 sshd[3327]: Disconnected from invalid user user 46.62.141.104 port 62697 [preauth] Jan 23 18:30:02.615000 audit[3327]: USER_ERR pid=3327 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:02.620856 systemd[1]: sshd@192-46.62.141.192:22-46.62.141.104:62697.service: Deactivated successfully. Jan 23 18:30:02.620000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@192-46.62.141.192:22-46.62.141.104:62697 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:02.643000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@193-46.62.141.192:22-46.62.141.104:62700 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:02.643837 systemd[1]: Started sshd@193-46.62.141.192:22-46.62.141.104:62700.service - OpenSSH per-connection server daemon (46.62.141.104:62700). Jan 23 18:30:02.770918 sshd[3333]: Invalid user user2 from 46.62.141.104 port 62700 Jan 23 18:30:02.777287 sshd[3333]: Received disconnect from 46.62.141.104 port 62700:11: Bye Bye [preauth] Jan 23 18:30:02.777287 sshd[3333]: Disconnected from invalid user user2 46.62.141.104 port 62700 [preauth] Jan 23 18:30:02.777000 audit[3333]: USER_ERR pid=3333 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:02.780851 systemd[1]: sshd@193-46.62.141.192:22-46.62.141.104:62700.service: Deactivated successfully. Jan 23 18:30:02.781000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@193-46.62.141.192:22-46.62.141.104:62700 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:02.814000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@194-46.62.141.192:22-46.62.141.104:62701 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:02.814489 systemd[1]: Started sshd@194-46.62.141.192:22-46.62.141.104:62701.service - OpenSSH per-connection server daemon (46.62.141.104:62701). Jan 23 18:30:02.936310 sshd[3339]: Received disconnect from 46.62.141.104 port 62701:11: Bye Bye [preauth] Jan 23 18:30:02.935000 audit[3339]: USER_ERR pid=3339 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:02.936912 sshd[3339]: Disconnected from authenticating user root 46.62.141.104 port 62701 [preauth] Jan 23 18:30:02.940031 systemd[1]: sshd@194-46.62.141.192:22-46.62.141.104:62701.service: Deactivated successfully. Jan 23 18:30:02.939000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@194-46.62.141.192:22-46.62.141.104:62701 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:02.959000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@195-46.62.141.192:22-46.62.141.104:62703 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:02.960552 systemd[1]: Started sshd@195-46.62.141.192:22-46.62.141.104:62703.service - OpenSSH per-connection server daemon (46.62.141.104:62703). Jan 23 18:30:03.080895 sshd[3345]: Invalid user admin from 46.62.141.104 port 62703 Jan 23 18:30:03.087579 sshd[3345]: Received disconnect from 46.62.141.104 port 62703:11: Bye Bye [preauth] Jan 23 18:30:03.087579 sshd[3345]: Disconnected from invalid user admin 46.62.141.104 port 62703 [preauth] Jan 23 18:30:03.086000 audit[3345]: USER_ERR pid=3345 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:03.091396 systemd[1]: sshd@195-46.62.141.192:22-46.62.141.104:62703.service: Deactivated successfully. Jan 23 18:30:03.090000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@195-46.62.141.192:22-46.62.141.104:62703 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:03.117000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@196-46.62.141.192:22-46.62.141.104:62706 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:03.118422 systemd[1]: Started sshd@196-46.62.141.192:22-46.62.141.104:62706.service - OpenSSH per-connection server daemon (46.62.141.104:62706). Jan 23 18:30:03.235694 sshd[3351]: Invalid user user from 46.62.141.104 port 62706 Jan 23 18:30:03.242078 sshd[3351]: Received disconnect from 46.62.141.104 port 62706:11: Bye Bye [preauth] Jan 23 18:30:03.242078 sshd[3351]: Disconnected from invalid user user 46.62.141.104 port 62706 [preauth] Jan 23 18:30:03.240000 audit[3351]: USER_ERR pid=3351 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:03.245597 systemd[1]: sshd@196-46.62.141.192:22-46.62.141.104:62706.service: Deactivated successfully. Jan 23 18:30:03.244000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@196-46.62.141.192:22-46.62.141.104:62706 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:03.266000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@197-46.62.141.192:22-46.62.141.104:62708 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:03.267543 systemd[1]: Started sshd@197-46.62.141.192:22-46.62.141.104:62708.service - OpenSSH per-connection server daemon (46.62.141.104:62708). Jan 23 18:30:03.375875 sshd[3357]: Invalid user user2 from 46.62.141.104 port 62708 Jan 23 18:30:03.382221 sshd[3357]: Received disconnect from 46.62.141.104 port 62708:11: Bye Bye [preauth] Jan 23 18:30:03.382221 sshd[3357]: Disconnected from invalid user user2 46.62.141.104 port 62708 [preauth] Jan 23 18:30:03.381000 audit[3357]: USER_ERR pid=3357 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:03.384821 systemd[1]: sshd@197-46.62.141.192:22-46.62.141.104:62708.service: Deactivated successfully. Jan 23 18:30:03.384000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@197-46.62.141.192:22-46.62.141.104:62708 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:03.408000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@198-46.62.141.192:22-46.62.141.104:62710 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:03.409217 systemd[1]: Started sshd@198-46.62.141.192:22-46.62.141.104:62710.service - OpenSSH per-connection server daemon (46.62.141.104:62710). Jan 23 18:30:03.518419 sshd[3363]: Received disconnect from 46.62.141.104 port 62710:11: Bye Bye [preauth] Jan 23 18:30:03.518419 sshd[3363]: Disconnected from authenticating user root 46.62.141.104 port 62710 [preauth] Jan 23 18:30:03.517000 audit[3363]: USER_ERR pid=3363 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:03.521897 systemd[1]: sshd@198-46.62.141.192:22-46.62.141.104:62710.service: Deactivated successfully. Jan 23 18:30:03.521000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@198-46.62.141.192:22-46.62.141.104:62710 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:03.549000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@199-46.62.141.192:22-46.62.141.104:62713 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:03.550576 systemd[1]: Started sshd@199-46.62.141.192:22-46.62.141.104:62713.service - OpenSSH per-connection server daemon (46.62.141.104:62713). Jan 23 18:30:03.663826 sshd[3369]: Invalid user admin from 46.62.141.104 port 62713 Jan 23 18:30:03.670968 sshd[3369]: Received disconnect from 46.62.141.104 port 62713:11: Bye Bye [preauth] Jan 23 18:30:03.670968 sshd[3369]: Disconnected from invalid user admin 46.62.141.104 port 62713 [preauth] Jan 23 18:30:03.669000 audit[3369]: USER_ERR pid=3369 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:03.674527 systemd[1]: sshd@199-46.62.141.192:22-46.62.141.104:62713.service: Deactivated successfully. Jan 23 18:30:03.673000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@199-46.62.141.192:22-46.62.141.104:62713 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:03.694000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@200-46.62.141.192:22-46.62.141.104:62716 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:03.695292 systemd[1]: Started sshd@200-46.62.141.192:22-46.62.141.104:62716.service - OpenSSH per-connection server daemon (46.62.141.104:62716). Jan 23 18:30:03.808579 sshd[3375]: Invalid user user from 46.62.141.104 port 62716 Jan 23 18:30:03.815323 sshd[3375]: Received disconnect from 46.62.141.104 port 62716:11: Bye Bye [preauth] Jan 23 18:30:03.815323 sshd[3375]: Disconnected from invalid user user 46.62.141.104 port 62716 [preauth] Jan 23 18:30:03.815000 audit[3375]: USER_ERR pid=3375 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:03.818252 systemd[1]: sshd@200-46.62.141.192:22-46.62.141.104:62716.service: Deactivated successfully. Jan 23 18:30:03.818000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@200-46.62.141.192:22-46.62.141.104:62716 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:03.838000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@201-46.62.141.192:22-46.62.141.104:62717 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:03.839030 systemd[1]: Started sshd@201-46.62.141.192:22-46.62.141.104:62717.service - OpenSSH per-connection server daemon (46.62.141.104:62717). Jan 23 18:30:03.906875 etcd-wrapper[1931]: {"level":"warn","ts":"2026-01-23T18:30:03.906434Z","caller":"rafthttp/probing_status.go:68","msg":"prober detected unhealthy status","round-tripper-name":"ROUND_TRIPPER_RAFT_MESSAGE","remote-peer-id":"15eb2e9460fb69a5","rtt":"736.265µs","error":"dial tcp 10.0.0.3:2380: i/o timeout"} Jan 23 18:30:03.958616 sshd[3381]: Invalid user user2 from 46.62.141.104 port 62717 Jan 23 18:30:03.964799 sshd[3381]: Received disconnect from 46.62.141.104 port 62717:11: Bye Bye [preauth] Jan 23 18:30:03.964799 sshd[3381]: Disconnected from invalid user user2 46.62.141.104 port 62717 [preauth] Jan 23 18:30:03.964000 audit[3381]: USER_ERR pid=3381 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:03.968915 systemd[1]: sshd@201-46.62.141.192:22-46.62.141.104:62717.service: Deactivated successfully. Jan 23 18:30:03.969000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@201-46.62.141.192:22-46.62.141.104:62717 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:03.992000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@202-46.62.141.192:22-46.62.141.104:62719 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:03.992096 systemd[1]: Started sshd@202-46.62.141.192:22-46.62.141.104:62719.service - OpenSSH per-connection server daemon (46.62.141.104:62719). Jan 23 18:30:04.108977 sshd[3387]: Received disconnect from 46.62.141.104 port 62719:11: Bye Bye [preauth] Jan 23 18:30:04.108977 sshd[3387]: Disconnected from authenticating user root 46.62.141.104 port 62719 [preauth] Jan 23 18:30:04.107000 audit[3387]: USER_ERR pid=3387 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:04.113150 systemd[1]: sshd@202-46.62.141.192:22-46.62.141.104:62719.service: Deactivated successfully. Jan 23 18:30:04.112000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@202-46.62.141.192:22-46.62.141.104:62719 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:04.137000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@203-46.62.141.192:22-46.62.141.104:62721 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:04.138397 systemd[1]: Started sshd@203-46.62.141.192:22-46.62.141.104:62721.service - OpenSSH per-connection server daemon (46.62.141.104:62721). Jan 23 18:30:04.250443 sshd[3393]: Invalid user admin from 46.62.141.104 port 62721 Jan 23 18:30:04.256470 sshd[3393]: Received disconnect from 46.62.141.104 port 62721:11: Bye Bye [preauth] Jan 23 18:30:04.256470 sshd[3393]: Disconnected from invalid user admin 46.62.141.104 port 62721 [preauth] Jan 23 18:30:04.255000 audit[3393]: USER_ERR pid=3393 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:04.259928 systemd[1]: sshd@203-46.62.141.192:22-46.62.141.104:62721.service: Deactivated successfully. Jan 23 18:30:04.259000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@203-46.62.141.192:22-46.62.141.104:62721 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:04.287000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@204-46.62.141.192:22-46.62.141.104:62722 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:04.288571 systemd[1]: Started sshd@204-46.62.141.192:22-46.62.141.104:62722.service - OpenSSH per-connection server daemon (46.62.141.104:62722). Jan 23 18:30:04.399987 sshd[3399]: Invalid user user from 46.62.141.104 port 62722 Jan 23 18:30:04.406388 sshd[3399]: Received disconnect from 46.62.141.104 port 62722:11: Bye Bye [preauth] Jan 23 18:30:04.406388 sshd[3399]: Disconnected from invalid user user 46.62.141.104 port 62722 [preauth] Jan 23 18:30:04.405000 audit[3399]: USER_ERR pid=3399 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:04.409399 systemd[1]: sshd@204-46.62.141.192:22-46.62.141.104:62722.service: Deactivated successfully. Jan 23 18:30:04.408000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@204-46.62.141.192:22-46.62.141.104:62722 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:04.430000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@205-46.62.141.192:22-46.62.141.104:62725 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:04.432018 systemd[1]: Started sshd@205-46.62.141.192:22-46.62.141.104:62725.service - OpenSSH per-connection server daemon (46.62.141.104:62725). Jan 23 18:30:04.552323 sshd[3405]: Invalid user user2 from 46.62.141.104 port 62725 Jan 23 18:30:04.558559 sshd[3405]: Received disconnect from 46.62.141.104 port 62725:11: Bye Bye [preauth] Jan 23 18:30:04.558559 sshd[3405]: Disconnected from invalid user user2 46.62.141.104 port 62725 [preauth] Jan 23 18:30:04.557000 audit[3405]: USER_ERR pid=3405 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:04.562069 systemd[1]: sshd@205-46.62.141.192:22-46.62.141.104:62725.service: Deactivated successfully. Jan 23 18:30:04.561000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@205-46.62.141.192:22-46.62.141.104:62725 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:04.584000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@206-46.62.141.192:22-46.62.141.104:62726 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:04.585385 systemd[1]: Started sshd@206-46.62.141.192:22-46.62.141.104:62726.service - OpenSSH per-connection server daemon (46.62.141.104:62726). Jan 23 18:30:04.695040 sshd[3411]: Received disconnect from 46.62.141.104 port 62726:11: Bye Bye [preauth] Jan 23 18:30:04.695040 sshd[3411]: Disconnected from authenticating user root 46.62.141.104 port 62726 [preauth] Jan 23 18:30:04.693000 audit[3411]: USER_ERR pid=3411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:04.698535 systemd[1]: sshd@206-46.62.141.192:22-46.62.141.104:62726.service: Deactivated successfully. Jan 23 18:30:04.697000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@206-46.62.141.192:22-46.62.141.104:62726 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:04.722000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@207-46.62.141.192:22-46.62.141.104:62728 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:04.723200 systemd[1]: Started sshd@207-46.62.141.192:22-46.62.141.104:62728.service - OpenSSH per-connection server daemon (46.62.141.104:62728). Jan 23 18:30:04.841433 sshd[3417]: Invalid user admin from 46.62.141.104 port 62728 Jan 23 18:30:04.848603 sshd[3417]: Received disconnect from 46.62.141.104 port 62728:11: Bye Bye [preauth] Jan 23 18:30:04.848603 sshd[3417]: Disconnected from invalid user admin 46.62.141.104 port 62728 [preauth] Jan 23 18:30:04.847000 audit[3417]: USER_ERR pid=3417 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:04.853099 systemd[1]: sshd@207-46.62.141.192:22-46.62.141.104:62728.service: Deactivated successfully. Jan 23 18:30:04.852000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@207-46.62.141.192:22-46.62.141.104:62728 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:04.869000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@208-46.62.141.192:22-46.62.141.104:62730 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:04.870632 systemd[1]: Started sshd@208-46.62.141.192:22-46.62.141.104:62730.service - OpenSSH per-connection server daemon (46.62.141.104:62730). Jan 23 18:30:04.984197 sshd[3423]: Invalid user user from 46.62.141.104 port 62730 Jan 23 18:30:04.991076 sshd[3423]: Received disconnect from 46.62.141.104 port 62730:11: Bye Bye [preauth] Jan 23 18:30:04.991076 sshd[3423]: Disconnected from invalid user user 46.62.141.104 port 62730 [preauth] Jan 23 18:30:04.990000 audit[3423]: USER_ERR pid=3423 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:04.994944 systemd[1]: sshd@208-46.62.141.192:22-46.62.141.104:62730.service: Deactivated successfully. Jan 23 18:30:04.995000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@208-46.62.141.192:22-46.62.141.104:62730 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:05.017000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@209-46.62.141.192:22-46.62.141.104:62734 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:05.017782 systemd[1]: Started sshd@209-46.62.141.192:22-46.62.141.104:62734.service - OpenSSH per-connection server daemon (46.62.141.104:62734). Jan 23 18:30:05.133340 sshd[3429]: Invalid user user2 from 46.62.141.104 port 62734 Jan 23 18:30:05.139832 sshd[3429]: Received disconnect from 46.62.141.104 port 62734:11: Bye Bye [preauth] Jan 23 18:30:05.139832 sshd[3429]: Disconnected from invalid user user2 46.62.141.104 port 62734 [preauth] Jan 23 18:30:05.139000 audit[3429]: USER_ERR pid=3429 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:05.143683 systemd[1]: sshd@209-46.62.141.192:22-46.62.141.104:62734.service: Deactivated successfully. Jan 23 18:30:05.144000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@209-46.62.141.192:22-46.62.141.104:62734 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:05.169000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@210-46.62.141.192:22-46.62.141.104:62736 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:05.169558 systemd[1]: Started sshd@210-46.62.141.192:22-46.62.141.104:62736.service - OpenSSH per-connection server daemon (46.62.141.104:62736). Jan 23 18:30:05.287002 sshd[3435]: Received disconnect from 46.62.141.104 port 62736:11: Bye Bye [preauth] Jan 23 18:30:05.287002 sshd[3435]: Disconnected from authenticating user root 46.62.141.104 port 62736 [preauth] Jan 23 18:30:05.286000 audit[3435]: USER_ERR pid=3435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:05.291431 systemd[1]: sshd@210-46.62.141.192:22-46.62.141.104:62736.service: Deactivated successfully. Jan 23 18:30:05.291000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@210-46.62.141.192:22-46.62.141.104:62736 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:05.315000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@211-46.62.141.192:22-46.62.141.104:62737 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:05.316879 systemd[1]: Started sshd@211-46.62.141.192:22-46.62.141.104:62737.service - OpenSSH per-connection server daemon (46.62.141.104:62737). Jan 23 18:30:05.433464 sshd[3441]: Invalid user admin from 46.62.141.104 port 62737 Jan 23 18:30:05.439662 sshd[3441]: Received disconnect from 46.62.141.104 port 62737:11: Bye Bye [preauth] Jan 23 18:30:05.439662 sshd[3441]: Disconnected from invalid user admin 46.62.141.104 port 62737 [preauth] Jan 23 18:30:05.438000 audit[3441]: USER_ERR pid=3441 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:05.443598 systemd[1]: sshd@211-46.62.141.192:22-46.62.141.104:62737.service: Deactivated successfully. Jan 23 18:30:05.442000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@211-46.62.141.192:22-46.62.141.104:62737 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:05.467000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@212-46.62.141.192:22-46.62.141.104:62740 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:05.468353 systemd[1]: Started sshd@212-46.62.141.192:22-46.62.141.104:62740.service - OpenSSH per-connection server daemon (46.62.141.104:62740). Jan 23 18:30:05.585380 sshd[3447]: Invalid user user from 46.62.141.104 port 62740 Jan 23 18:30:05.592811 sshd[3447]: Received disconnect from 46.62.141.104 port 62740:11: Bye Bye [preauth] Jan 23 18:30:05.592811 sshd[3447]: Disconnected from invalid user user 46.62.141.104 port 62740 [preauth] Jan 23 18:30:05.591000 audit[3447]: USER_ERR pid=3447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:05.596879 systemd[1]: sshd@212-46.62.141.192:22-46.62.141.104:62740.service: Deactivated successfully. Jan 23 18:30:05.596000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@212-46.62.141.192:22-46.62.141.104:62740 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:05.620000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@213-46.62.141.192:22-46.62.141.104:62741 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:05.621309 systemd[1]: Started sshd@213-46.62.141.192:22-46.62.141.104:62741.service - OpenSSH per-connection server daemon (46.62.141.104:62741). Jan 23 18:30:05.739225 sshd[3453]: Invalid user user2 from 46.62.141.104 port 62741 Jan 23 18:30:05.746683 sshd[3453]: Received disconnect from 46.62.141.104 port 62741:11: Bye Bye [preauth] Jan 23 18:30:05.746683 sshd[3453]: Disconnected from invalid user user2 46.62.141.104 port 62741 [preauth] Jan 23 18:30:05.745000 audit[3453]: USER_ERR pid=3453 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:05.751291 systemd[1]: sshd@213-46.62.141.192:22-46.62.141.104:62741.service: Deactivated successfully. Jan 23 18:30:05.750000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@213-46.62.141.192:22-46.62.141.104:62741 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:05.768000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@214-46.62.141.192:22-46.62.141.104:62743 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:05.769686 systemd[1]: Started sshd@214-46.62.141.192:22-46.62.141.104:62743.service - OpenSSH per-connection server daemon (46.62.141.104:62743). Jan 23 18:30:05.888106 sshd[3459]: Received disconnect from 46.62.141.104 port 62743:11: Bye Bye [preauth] Jan 23 18:30:05.888106 sshd[3459]: Disconnected from authenticating user root 46.62.141.104 port 62743 [preauth] Jan 23 18:30:05.891343 kernel: kauditd_printk_skb: 92 callbacks suppressed Jan 23 18:30:05.891483 kernel: audit: type=1109 audit(1769193005.887:828): pid=3459 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:05.887000 audit[3459]: USER_ERR pid=3459 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:05.893659 systemd[1]: sshd@214-46.62.141.192:22-46.62.141.104:62743.service: Deactivated successfully. Jan 23 18:30:05.893000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@214-46.62.141.192:22-46.62.141.104:62743 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:05.907590 kernel: audit: type=1131 audit(1769193005.893:829): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@214-46.62.141.192:22-46.62.141.104:62743 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:05.932000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@215-46.62.141.192:22-46.62.141.104:62745 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:05.933152 systemd[1]: Started sshd@215-46.62.141.192:22-46.62.141.104:62745.service - OpenSSH per-connection server daemon (46.62.141.104:62745). Jan 23 18:30:05.947324 kernel: audit: type=1130 audit(1769193005.932:830): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@215-46.62.141.192:22-46.62.141.104:62745 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:06.046487 sshd[3465]: Invalid user admin from 46.62.141.104 port 62745 Jan 23 18:30:06.052331 sshd[3465]: Received disconnect from 46.62.141.104 port 62745:11: Bye Bye [preauth] Jan 23 18:30:06.052331 sshd[3465]: Disconnected from invalid user admin 46.62.141.104 port 62745 [preauth] Jan 23 18:30:06.051000 audit[3465]: USER_ERR pid=3465 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:06.056179 systemd[1]: sshd@215-46.62.141.192:22-46.62.141.104:62745.service: Deactivated successfully. Jan 23 18:30:06.055000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@215-46.62.141.192:22-46.62.141.104:62745 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:06.070137 kernel: audit: type=1109 audit(1769193006.051:831): pid=3465 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:06.070177 kernel: audit: type=1131 audit(1769193006.055:832): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@215-46.62.141.192:22-46.62.141.104:62745 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:06.091771 systemd[1]: Started sshd@216-46.62.141.192:22-46.62.141.104:62748.service - OpenSSH per-connection server daemon (46.62.141.104:62748). Jan 23 18:30:06.090000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@216-46.62.141.192:22-46.62.141.104:62748 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:06.102302 kernel: audit: type=1130 audit(1769193006.090:833): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@216-46.62.141.192:22-46.62.141.104:62748 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:06.202753 sshd[3471]: Invalid user user from 46.62.141.104 port 62748 Jan 23 18:30:06.209933 sshd[3471]: Received disconnect from 46.62.141.104 port 62748:11: Bye Bye [preauth] Jan 23 18:30:06.209933 sshd[3471]: Disconnected from invalid user user 46.62.141.104 port 62748 [preauth] Jan 23 18:30:06.208000 audit[3471]: USER_ERR pid=3471 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:06.214014 systemd[1]: sshd@216-46.62.141.192:22-46.62.141.104:62748.service: Deactivated successfully. Jan 23 18:30:06.213000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@216-46.62.141.192:22-46.62.141.104:62748 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:06.225292 kernel: audit: type=1109 audit(1769193006.208:834): pid=3471 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:06.225340 kernel: audit: type=1131 audit(1769193006.213:835): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@216-46.62.141.192:22-46.62.141.104:62748 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:06.252000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@217-46.62.141.192:22-46.62.141.104:62750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:06.253155 systemd[1]: Started sshd@217-46.62.141.192:22-46.62.141.104:62750.service - OpenSSH per-connection server daemon (46.62.141.104:62750). Jan 23 18:30:06.266327 kernel: audit: type=1130 audit(1769193006.252:836): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@217-46.62.141.192:22-46.62.141.104:62750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:06.367793 sshd[3477]: Invalid user user2 from 46.62.141.104 port 62750 Jan 23 18:30:06.374448 sshd[3477]: Received disconnect from 46.62.141.104 port 62750:11: Bye Bye [preauth] Jan 23 18:30:06.374448 sshd[3477]: Disconnected from invalid user user2 46.62.141.104 port 62750 [preauth] Jan 23 18:30:06.373000 audit[3477]: USER_ERR pid=3477 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:06.378130 systemd[1]: sshd@217-46.62.141.192:22-46.62.141.104:62750.service: Deactivated successfully. Jan 23 18:30:06.387348 kernel: audit: type=1109 audit(1769193006.373:837): pid=3477 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:06.377000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@217-46.62.141.192:22-46.62.141.104:62750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:06.400000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@218-46.62.141.192:22-46.62.141.104:62752 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:06.401590 systemd[1]: Started sshd@218-46.62.141.192:22-46.62.141.104:62752.service - OpenSSH per-connection server daemon (46.62.141.104:62752). Jan 23 18:30:06.526051 sshd[3483]: Received disconnect from 46.62.141.104 port 62752:11: Bye Bye [preauth] Jan 23 18:30:06.526051 sshd[3483]: Disconnected from authenticating user root 46.62.141.104 port 62752 [preauth] Jan 23 18:30:06.525000 audit[3483]: USER_ERR pid=3483 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:06.529798 systemd[1]: sshd@218-46.62.141.192:22-46.62.141.104:62752.service: Deactivated successfully. Jan 23 18:30:06.530000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@218-46.62.141.192:22-46.62.141.104:62752 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:06.549000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@219-46.62.141.192:22-46.62.141.104:62755 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:06.549650 systemd[1]: Started sshd@219-46.62.141.192:22-46.62.141.104:62755.service - OpenSSH per-connection server daemon (46.62.141.104:62755). Jan 23 18:30:06.676091 sshd[3489]: Invalid user admin from 46.62.141.104 port 62755 Jan 23 18:30:06.682355 sshd[3489]: Received disconnect from 46.62.141.104 port 62755:11: Bye Bye [preauth] Jan 23 18:30:06.682355 sshd[3489]: Disconnected from invalid user admin 46.62.141.104 port 62755 [preauth] Jan 23 18:30:06.682000 audit[3489]: USER_ERR pid=3489 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:06.687530 systemd[1]: sshd@219-46.62.141.192:22-46.62.141.104:62755.service: Deactivated successfully. Jan 23 18:30:06.687000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@219-46.62.141.192:22-46.62.141.104:62755 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:06.707000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@220-46.62.141.192:22-46.62.141.104:62757 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:06.707845 systemd[1]: Started sshd@220-46.62.141.192:22-46.62.141.104:62757.service - OpenSSH per-connection server daemon (46.62.141.104:62757). Jan 23 18:30:06.822907 sshd[3495]: Invalid user user from 46.62.141.104 port 62757 Jan 23 18:30:06.830083 sshd[3495]: Received disconnect from 46.62.141.104 port 62757:11: Bye Bye [preauth] Jan 23 18:30:06.830083 sshd[3495]: Disconnected from invalid user user 46.62.141.104 port 62757 [preauth] Jan 23 18:30:06.830000 audit[3495]: USER_ERR pid=3495 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:06.833947 systemd[1]: sshd@220-46.62.141.192:22-46.62.141.104:62757.service: Deactivated successfully. Jan 23 18:30:06.834000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@220-46.62.141.192:22-46.62.141.104:62757 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:06.855000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@221-46.62.141.192:22-46.62.141.104:62759 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:06.855749 systemd[1]: Started sshd@221-46.62.141.192:22-46.62.141.104:62759.service - OpenSSH per-connection server daemon (46.62.141.104:62759). Jan 23 18:30:06.981087 sshd[3501]: Invalid user user2 from 46.62.141.104 port 62759 Jan 23 18:30:06.988152 sshd[3501]: Received disconnect from 46.62.141.104 port 62759:11: Bye Bye [preauth] Jan 23 18:30:06.988152 sshd[3501]: Disconnected from invalid user user2 46.62.141.104 port 62759 [preauth] Jan 23 18:30:06.987000 audit[3501]: USER_ERR pid=3501 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:06.991309 systemd[1]: sshd@221-46.62.141.192:22-46.62.141.104:62759.service: Deactivated successfully. Jan 23 18:30:06.990000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@221-46.62.141.192:22-46.62.141.104:62759 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:07.012000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@222-46.62.141.192:22-46.62.141.104:62762 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:07.013501 systemd[1]: Started sshd@222-46.62.141.192:22-46.62.141.104:62762.service - OpenSSH per-connection server daemon (46.62.141.104:62762). Jan 23 18:30:07.131185 sshd[3507]: Received disconnect from 46.62.141.104 port 62762:11: Bye Bye [preauth] Jan 23 18:30:07.131185 sshd[3507]: Disconnected from authenticating user root 46.62.141.104 port 62762 [preauth] Jan 23 18:30:07.130000 audit[3507]: USER_ERR pid=3507 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:07.135242 systemd[1]: sshd@222-46.62.141.192:22-46.62.141.104:62762.service: Deactivated successfully. Jan 23 18:30:07.134000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@222-46.62.141.192:22-46.62.141.104:62762 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:07.157000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@223-46.62.141.192:22-46.62.141.104:62764 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:07.158555 systemd[1]: Started sshd@223-46.62.141.192:22-46.62.141.104:62764.service - OpenSSH per-connection server daemon (46.62.141.104:62764). Jan 23 18:30:07.272710 sshd[3513]: Invalid user admin from 46.62.141.104 port 62764 Jan 23 18:30:07.280676 sshd[3513]: Received disconnect from 46.62.141.104 port 62764:11: Bye Bye [preauth] Jan 23 18:30:07.280676 sshd[3513]: Disconnected from invalid user admin 46.62.141.104 port 62764 [preauth] Jan 23 18:30:07.279000 audit[3513]: USER_ERR pid=3513 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:07.284330 systemd[1]: sshd@223-46.62.141.192:22-46.62.141.104:62764.service: Deactivated successfully. Jan 23 18:30:07.283000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@223-46.62.141.192:22-46.62.141.104:62764 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:07.308000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@224-46.62.141.192:22-46.62.141.104:62766 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:07.309932 systemd[1]: Started sshd@224-46.62.141.192:22-46.62.141.104:62766.service - OpenSSH per-connection server daemon (46.62.141.104:62766). Jan 23 18:30:07.425766 sshd[3520]: Invalid user user from 46.62.141.104 port 62766 Jan 23 18:30:07.433000 audit[3520]: USER_ERR pid=3520 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:07.435489 sshd[3520]: Received disconnect from 46.62.141.104 port 62766:11: Bye Bye [preauth] Jan 23 18:30:07.435489 sshd[3520]: Disconnected from invalid user user 46.62.141.104 port 62766 [preauth] Jan 23 18:30:07.439534 systemd[1]: sshd@224-46.62.141.192:22-46.62.141.104:62766.service: Deactivated successfully. Jan 23 18:30:07.439000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@224-46.62.141.192:22-46.62.141.104:62766 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:07.462759 systemd[1]: Started sshd@225-46.62.141.192:22-46.62.141.104:62767.service - OpenSSH per-connection server daemon (46.62.141.104:62767). Jan 23 18:30:07.461000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@225-46.62.141.192:22-46.62.141.104:62767 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:07.555040 sshd[3528]: Invalid user user2 from 46.62.141.104 port 62767 Jan 23 18:30:07.561783 sshd[3528]: Received disconnect from 46.62.141.104 port 62767:11: Bye Bye [preauth] Jan 23 18:30:07.561783 sshd[3528]: Disconnected from invalid user user2 46.62.141.104 port 62767 [preauth] Jan 23 18:30:07.561000 audit[3528]: USER_ERR pid=3528 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:07.566085 systemd[1]: sshd@225-46.62.141.192:22-46.62.141.104:62767.service: Deactivated successfully. Jan 23 18:30:07.565000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@225-46.62.141.192:22-46.62.141.104:62767 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:07.582161 systemd[1]: Started sshd@226-46.62.141.192:22-46.62.141.104:62771.service - OpenSSH per-connection server daemon (46.62.141.104:62771). Jan 23 18:30:07.581000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@226-46.62.141.192:22-46.62.141.104:62771 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:07.662304 sshd[3536]: Received disconnect from 46.62.141.104 port 62771:11: Bye Bye [preauth] Jan 23 18:30:07.662304 sshd[3536]: Disconnected from authenticating user root 46.62.141.104 port 62771 [preauth] Jan 23 18:30:07.661000 audit[3536]: USER_ERR pid=3536 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:07.665128 systemd[1]: sshd@226-46.62.141.192:22-46.62.141.104:62771.service: Deactivated successfully. Jan 23 18:30:07.664000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@226-46.62.141.192:22-46.62.141.104:62771 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:07.689851 systemd[1]: Started sshd@227-46.62.141.192:22-46.62.141.104:62772.service - OpenSSH per-connection server daemon (46.62.141.104:62772). Jan 23 18:30:07.688000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@227-46.62.141.192:22-46.62.141.104:62772 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:07.787230 sshd[3542]: Invalid user admin from 46.62.141.104 port 62772 Jan 23 18:30:07.794207 sshd[3542]: Received disconnect from 46.62.141.104 port 62772:11: Bye Bye [preauth] Jan 23 18:30:07.794207 sshd[3542]: Disconnected from invalid user admin 46.62.141.104 port 62772 [preauth] Jan 23 18:30:07.793000 audit[3542]: USER_ERR pid=3542 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:07.798593 systemd[1]: sshd@227-46.62.141.192:22-46.62.141.104:62772.service: Deactivated successfully. Jan 23 18:30:07.798000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@227-46.62.141.192:22-46.62.141.104:62772 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:07.822000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@228-46.62.141.192:22-46.62.141.104:62774 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:07.823438 systemd[1]: Started sshd@228-46.62.141.192:22-46.62.141.104:62774.service - OpenSSH per-connection server daemon (46.62.141.104:62774). Jan 23 18:30:07.948530 sshd[3548]: Invalid user user from 46.62.141.104 port 62774 Jan 23 18:30:07.955820 sshd[3548]: Received disconnect from 46.62.141.104 port 62774:11: Bye Bye [preauth] Jan 23 18:30:07.955820 sshd[3548]: Disconnected from invalid user user 46.62.141.104 port 62774 [preauth] Jan 23 18:30:07.954000 audit[3548]: USER_ERR pid=3548 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:07.960110 systemd[1]: sshd@228-46.62.141.192:22-46.62.141.104:62774.service: Deactivated successfully. Jan 23 18:30:07.960000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@228-46.62.141.192:22-46.62.141.104:62774 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:07.977000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@229-46.62.141.192:22-46.62.141.104:62777 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:07.979024 systemd[1]: Started sshd@229-46.62.141.192:22-46.62.141.104:62777.service - OpenSSH per-connection server daemon (46.62.141.104:62777). Jan 23 18:30:08.103901 sshd[3554]: Invalid user user2 from 46.62.141.104 port 62777 Jan 23 18:30:08.110388 sshd[3554]: Received disconnect from 46.62.141.104 port 62777:11: Bye Bye [preauth] Jan 23 18:30:08.110388 sshd[3554]: Disconnected from invalid user user2 46.62.141.104 port 62777 [preauth] Jan 23 18:30:08.109000 audit[3554]: USER_ERR pid=3554 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:08.114460 systemd[1]: sshd@229-46.62.141.192:22-46.62.141.104:62777.service: Deactivated successfully. Jan 23 18:30:08.114000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@229-46.62.141.192:22-46.62.141.104:62777 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:08.133000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@230-46.62.141.192:22-46.62.141.104:62778 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:08.135000 systemd[1]: Started sshd@230-46.62.141.192:22-46.62.141.104:62778.service - OpenSSH per-connection server daemon (46.62.141.104:62778). Jan 23 18:30:08.249805 sshd[3560]: Received disconnect from 46.62.141.104 port 62778:11: Bye Bye [preauth] Jan 23 18:30:08.249805 sshd[3560]: Disconnected from authenticating user root 46.62.141.104 port 62778 [preauth] Jan 23 18:30:08.248000 audit[3560]: USER_ERR pid=3560 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:08.254052 systemd[1]: sshd@230-46.62.141.192:22-46.62.141.104:62778.service: Deactivated successfully. Jan 23 18:30:08.254000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@230-46.62.141.192:22-46.62.141.104:62778 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:08.273000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@231-46.62.141.192:22-46.62.141.104:62782 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:08.273595 systemd[1]: Started sshd@231-46.62.141.192:22-46.62.141.104:62782.service - OpenSSH per-connection server daemon (46.62.141.104:62782). Jan 23 18:30:08.376544 sshd[3566]: Invalid user admin from 46.62.141.104 port 62782 Jan 23 18:30:08.385294 sshd[3566]: Received disconnect from 46.62.141.104 port 62782:11: Bye Bye [preauth] Jan 23 18:30:08.385294 sshd[3566]: Disconnected from invalid user admin 46.62.141.104 port 62782 [preauth] Jan 23 18:30:08.385000 audit[3566]: USER_ERR pid=3566 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:08.390124 systemd[1]: sshd@231-46.62.141.192:22-46.62.141.104:62782.service: Deactivated successfully. Jan 23 18:30:08.390000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@231-46.62.141.192:22-46.62.141.104:62782 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:08.414162 systemd[1]: Started sshd@232-46.62.141.192:22-46.62.141.104:62783.service - OpenSSH per-connection server daemon (46.62.141.104:62783). Jan 23 18:30:08.414000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@232-46.62.141.192:22-46.62.141.104:62783 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:08.535115 sshd[3572]: Invalid user user from 46.62.141.104 port 62783 Jan 23 18:30:08.541749 sshd[3572]: Received disconnect from 46.62.141.104 port 62783:11: Bye Bye [preauth] Jan 23 18:30:08.541749 sshd[3572]: Disconnected from invalid user user 46.62.141.104 port 62783 [preauth] Jan 23 18:30:08.541000 audit[3572]: USER_ERR pid=3572 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:08.545669 systemd[1]: sshd@232-46.62.141.192:22-46.62.141.104:62783.service: Deactivated successfully. Jan 23 18:30:08.545000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@232-46.62.141.192:22-46.62.141.104:62783 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:08.578000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@233-46.62.141.192:22-46.62.141.104:62785 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:08.578522 systemd[1]: Started sshd@233-46.62.141.192:22-46.62.141.104:62785.service - OpenSSH per-connection server daemon (46.62.141.104:62785). Jan 23 18:30:08.698495 sshd[3578]: Invalid user user2 from 46.62.141.104 port 62785 Jan 23 18:30:08.705545 sshd[3578]: Received disconnect from 46.62.141.104 port 62785:11: Bye Bye [preauth] Jan 23 18:30:08.705545 sshd[3578]: Disconnected from invalid user user2 46.62.141.104 port 62785 [preauth] Jan 23 18:30:08.705000 audit[3578]: USER_ERR pid=3578 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:08.709408 systemd[1]: sshd@233-46.62.141.192:22-46.62.141.104:62785.service: Deactivated successfully. Jan 23 18:30:08.709000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@233-46.62.141.192:22-46.62.141.104:62785 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:08.747000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@234-46.62.141.192:22-46.62.141.104:62787 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:08.747601 systemd[1]: Started sshd@234-46.62.141.192:22-46.62.141.104:62787.service - OpenSSH per-connection server daemon (46.62.141.104:62787). Jan 23 18:30:08.874059 sshd[3584]: Received disconnect from 46.62.141.104 port 62787:11: Bye Bye [preauth] Jan 23 18:30:08.874059 sshd[3584]: Disconnected from authenticating user root 46.62.141.104 port 62787 [preauth] Jan 23 18:30:08.873000 audit[3584]: USER_ERR pid=3584 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:08.877305 systemd[1]: sshd@234-46.62.141.192:22-46.62.141.104:62787.service: Deactivated successfully. Jan 23 18:30:08.876000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@234-46.62.141.192:22-46.62.141.104:62787 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:08.901000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@235-46.62.141.192:22-46.62.141.104:62789 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:08.902770 systemd[1]: Started sshd@235-46.62.141.192:22-46.62.141.104:62789.service - OpenSSH per-connection server daemon (46.62.141.104:62789). Jan 23 18:30:08.907696 etcd-wrapper[1931]: {"level":"warn","ts":"2026-01-23T18:30:08.907214Z","caller":"rafthttp/probing_status.go:68","msg":"prober detected unhealthy status","round-tripper-name":"ROUND_TRIPPER_RAFT_MESSAGE","remote-peer-id":"15eb2e9460fb69a5","rtt":"736.265µs","error":"dial tcp 10.0.0.3:2380: i/o timeout"} Jan 23 18:30:09.019764 sshd[3590]: Invalid user admin from 46.62.141.104 port 62789 Jan 23 18:30:09.027294 sshd[3590]: Received disconnect from 46.62.141.104 port 62789:11: Bye Bye [preauth] Jan 23 18:30:09.027375 sshd[3590]: Disconnected from invalid user admin 46.62.141.104 port 62789 [preauth] Jan 23 18:30:09.026000 audit[3590]: USER_ERR pid=3590 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:09.031781 systemd[1]: sshd@235-46.62.141.192:22-46.62.141.104:62789.service: Deactivated successfully. Jan 23 18:30:09.031000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@235-46.62.141.192:22-46.62.141.104:62789 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:09.055000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@236-46.62.141.192:22-46.62.141.104:62791 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:09.056243 systemd[1]: Started sshd@236-46.62.141.192:22-46.62.141.104:62791.service - OpenSSH per-connection server daemon (46.62.141.104:62791). Jan 23 18:30:09.172788 sshd[3596]: Invalid user user from 46.62.141.104 port 62791 Jan 23 18:30:09.179406 sshd[3596]: Received disconnect from 46.62.141.104 port 62791:11: Bye Bye [preauth] Jan 23 18:30:09.179406 sshd[3596]: Disconnected from invalid user user 46.62.141.104 port 62791 [preauth] Jan 23 18:30:09.178000 audit[3596]: USER_ERR pid=3596 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:09.183258 systemd[1]: sshd@236-46.62.141.192:22-46.62.141.104:62791.service: Deactivated successfully. Jan 23 18:30:09.182000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@236-46.62.141.192:22-46.62.141.104:62791 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:09.201000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@237-46.62.141.192:22-46.62.141.104:62792 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:09.202860 systemd[1]: Started sshd@237-46.62.141.192:22-46.62.141.104:62792.service - OpenSSH per-connection server daemon (46.62.141.104:62792). Jan 23 18:30:09.319475 sshd[3602]: Invalid user user2 from 46.62.141.104 port 62792 Jan 23 18:30:09.326342 sshd[3602]: Received disconnect from 46.62.141.104 port 62792:11: Bye Bye [preauth] Jan 23 18:30:09.326342 sshd[3602]: Disconnected from invalid user user2 46.62.141.104 port 62792 [preauth] Jan 23 18:30:09.325000 audit[3602]: USER_ERR pid=3602 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:09.330154 systemd[1]: sshd@237-46.62.141.192:22-46.62.141.104:62792.service: Deactivated successfully. Jan 23 18:30:09.329000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@237-46.62.141.192:22-46.62.141.104:62792 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:09.349000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@238-46.62.141.192:22-46.62.141.104:62797 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:09.350938 systemd[1]: Started sshd@238-46.62.141.192:22-46.62.141.104:62797.service - OpenSSH per-connection server daemon (46.62.141.104:62797). Jan 23 18:30:09.472824 sshd[3608]: Received disconnect from 46.62.141.104 port 62797:11: Bye Bye [preauth] Jan 23 18:30:09.472824 sshd[3608]: Disconnected from authenticating user root 46.62.141.104 port 62797 [preauth] Jan 23 18:30:09.471000 audit[3608]: USER_ERR pid=3608 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:09.476721 systemd[1]: sshd@238-46.62.141.192:22-46.62.141.104:62797.service: Deactivated successfully. Jan 23 18:30:09.476000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@238-46.62.141.192:22-46.62.141.104:62797 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:09.499000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@239-46.62.141.192:22-46.62.141.104:62798 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:09.500583 systemd[1]: Started sshd@239-46.62.141.192:22-46.62.141.104:62798.service - OpenSSH per-connection server daemon (46.62.141.104:62798). Jan 23 18:30:09.627829 sshd[3614]: Invalid user admin from 46.62.141.104 port 62798 Jan 23 18:30:09.634255 sshd[3614]: Received disconnect from 46.62.141.104 port 62798:11: Bye Bye [preauth] Jan 23 18:30:09.634255 sshd[3614]: Disconnected from invalid user admin 46.62.141.104 port 62798 [preauth] Jan 23 18:30:09.633000 audit[3614]: USER_ERR pid=3614 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:09.638128 systemd[1]: sshd@239-46.62.141.192:22-46.62.141.104:62798.service: Deactivated successfully. Jan 23 18:30:09.637000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@239-46.62.141.192:22-46.62.141.104:62798 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:09.664000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@240-46.62.141.192:22-46.62.141.104:62800 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:09.665668 systemd[1]: Started sshd@240-46.62.141.192:22-46.62.141.104:62800.service - OpenSSH per-connection server daemon (46.62.141.104:62800). Jan 23 18:30:09.787502 sshd[3620]: Invalid user user from 46.62.141.104 port 62800 Jan 23 18:30:09.794182 sshd[3620]: Received disconnect from 46.62.141.104 port 62800:11: Bye Bye [preauth] Jan 23 18:30:09.794182 sshd[3620]: Disconnected from invalid user user 46.62.141.104 port 62800 [preauth] Jan 23 18:30:09.793000 audit[3620]: USER_ERR pid=3620 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:09.798023 systemd[1]: sshd@240-46.62.141.192:22-46.62.141.104:62800.service: Deactivated successfully. Jan 23 18:30:09.797000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@240-46.62.141.192:22-46.62.141.104:62800 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:09.818000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@241-46.62.141.192:22-46.62.141.104:62802 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:09.819847 systemd[1]: Started sshd@241-46.62.141.192:22-46.62.141.104:62802.service - OpenSSH per-connection server daemon (46.62.141.104:62802). Jan 23 18:30:09.947913 sshd[3626]: Invalid user user2 from 46.62.141.104 port 62802 Jan 23 18:30:09.954981 sshd[3626]: Received disconnect from 46.62.141.104 port 62802:11: Bye Bye [preauth] Jan 23 18:30:09.954981 sshd[3626]: Disconnected from invalid user user2 46.62.141.104 port 62802 [preauth] Jan 23 18:30:09.953000 audit[3626]: USER_ERR pid=3626 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:09.959360 systemd[1]: sshd@241-46.62.141.192:22-46.62.141.104:62802.service: Deactivated successfully. Jan 23 18:30:09.958000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@241-46.62.141.192:22-46.62.141.104:62802 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:09.982000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@242-46.62.141.192:22-46.62.141.104:62804 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:09.983633 systemd[1]: Started sshd@242-46.62.141.192:22-46.62.141.104:62804.service - OpenSSH per-connection server daemon (46.62.141.104:62804). Jan 23 18:30:10.103766 sshd[3632]: Received disconnect from 46.62.141.104 port 62804:11: Bye Bye [preauth] Jan 23 18:30:10.103766 sshd[3632]: Disconnected from authenticating user root 46.62.141.104 port 62804 [preauth] Jan 23 18:30:10.102000 audit[3632]: USER_ERR pid=3632 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:10.107982 systemd[1]: sshd@242-46.62.141.192:22-46.62.141.104:62804.service: Deactivated successfully. Jan 23 18:30:10.107000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@242-46.62.141.192:22-46.62.141.104:62804 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:10.132785 systemd[1]: Started sshd@243-46.62.141.192:22-46.62.141.104:62806.service - OpenSSH per-connection server daemon (46.62.141.104:62806). Jan 23 18:30:10.131000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@243-46.62.141.192:22-46.62.141.104:62806 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:10.253454 sshd[3638]: Invalid user admin from 46.62.141.104 port 62806 Jan 23 18:30:10.261245 sshd[3638]: Received disconnect from 46.62.141.104 port 62806:11: Bye Bye [preauth] Jan 23 18:30:10.261245 sshd[3638]: Disconnected from invalid user admin 46.62.141.104 port 62806 [preauth] Jan 23 18:30:10.260000 audit[3638]: USER_ERR pid=3638 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:10.265437 systemd[1]: sshd@243-46.62.141.192:22-46.62.141.104:62806.service: Deactivated successfully. Jan 23 18:30:10.264000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@243-46.62.141.192:22-46.62.141.104:62806 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:10.288000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@244-46.62.141.192:22-46.62.141.104:62808 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:10.289894 systemd[1]: Started sshd@244-46.62.141.192:22-46.62.141.104:62808.service - OpenSSH per-connection server daemon (46.62.141.104:62808). Jan 23 18:30:10.409109 sshd[3644]: Invalid user user from 46.62.141.104 port 62808 Jan 23 18:30:10.415640 sshd[3644]: Received disconnect from 46.62.141.104 port 62808:11: Bye Bye [preauth] Jan 23 18:30:10.415640 sshd[3644]: Disconnected from invalid user user 46.62.141.104 port 62808 [preauth] Jan 23 18:30:10.414000 audit[3644]: USER_ERR pid=3644 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:10.419317 systemd[1]: sshd@244-46.62.141.192:22-46.62.141.104:62808.service: Deactivated successfully. Jan 23 18:30:10.418000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@244-46.62.141.192:22-46.62.141.104:62808 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:10.438000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@245-46.62.141.192:22-46.62.141.104:62811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:10.439902 systemd[1]: Started sshd@245-46.62.141.192:22-46.62.141.104:62811.service - OpenSSH per-connection server daemon (46.62.141.104:62811). Jan 23 18:30:10.561461 sshd[3650]: Invalid user user2 from 46.62.141.104 port 62811 Jan 23 18:30:10.569469 sshd[3650]: Received disconnect from 46.62.141.104 port 62811:11: Bye Bye [preauth] Jan 23 18:30:10.569469 sshd[3650]: Disconnected from invalid user user2 46.62.141.104 port 62811 [preauth] Jan 23 18:30:10.568000 audit[3650]: USER_ERR pid=3650 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:10.573713 systemd[1]: sshd@245-46.62.141.192:22-46.62.141.104:62811.service: Deactivated successfully. Jan 23 18:30:10.573000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@245-46.62.141.192:22-46.62.141.104:62811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:10.593000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@246-46.62.141.192:22-46.62.141.104:62812 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:10.594626 systemd[1]: Started sshd@246-46.62.141.192:22-46.62.141.104:62812.service - OpenSSH per-connection server daemon (46.62.141.104:62812). Jan 23 18:30:10.722197 sshd[3656]: Received disconnect from 46.62.141.104 port 62812:11: Bye Bye [preauth] Jan 23 18:30:10.722197 sshd[3656]: Disconnected from authenticating user root 46.62.141.104 port 62812 [preauth] Jan 23 18:30:10.722000 audit[3656]: USER_ERR pid=3656 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:10.725819 systemd[1]: sshd@246-46.62.141.192:22-46.62.141.104:62812.service: Deactivated successfully. Jan 23 18:30:10.726000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@246-46.62.141.192:22-46.62.141.104:62812 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:10.748691 systemd[1]: Started sshd@247-46.62.141.192:22-46.62.141.104:62815.service - OpenSSH per-connection server daemon (46.62.141.104:62815). Jan 23 18:30:10.748000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@247-46.62.141.192:22-46.62.141.104:62815 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:10.873180 sshd[3662]: Invalid user admin from 46.62.141.104 port 62815 Jan 23 18:30:10.880224 sshd[3662]: Received disconnect from 46.62.141.104 port 62815:11: Bye Bye [preauth] Jan 23 18:30:10.880224 sshd[3662]: Disconnected from invalid user admin 46.62.141.104 port 62815 [preauth] Jan 23 18:30:10.880000 audit[3662]: USER_ERR pid=3662 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:10.884044 systemd[1]: sshd@247-46.62.141.192:22-46.62.141.104:62815.service: Deactivated successfully. Jan 23 18:30:10.884000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@247-46.62.141.192:22-46.62.141.104:62815 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:10.913155 kernel: kauditd_printk_skb: 91 callbacks suppressed Jan 23 18:30:10.913223 kernel: audit: type=1130 audit(1769193010.910:929): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@248-46.62.141.192:22-46.62.141.104:62816 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:10.910000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@248-46.62.141.192:22-46.62.141.104:62816 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:10.910798 systemd[1]: Started sshd@248-46.62.141.192:22-46.62.141.104:62816.service - OpenSSH per-connection server daemon (46.62.141.104:62816). Jan 23 18:30:11.025460 sshd[3668]: Invalid user user from 46.62.141.104 port 62816 Jan 23 18:30:11.032719 sshd[3668]: Received disconnect from 46.62.141.104 port 62816:11: Bye Bye [preauth] Jan 23 18:30:11.032719 sshd[3668]: Disconnected from invalid user user 46.62.141.104 port 62816 [preauth] Jan 23 18:30:11.032000 audit[3668]: USER_ERR pid=3668 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:11.035594 systemd[1]: sshd@248-46.62.141.192:22-46.62.141.104:62816.service: Deactivated successfully. Jan 23 18:30:11.035000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@248-46.62.141.192:22-46.62.141.104:62816 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:11.048412 kernel: audit: type=1109 audit(1769193011.032:930): pid=3668 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:11.048461 kernel: audit: type=1131 audit(1769193011.035:931): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@248-46.62.141.192:22-46.62.141.104:62816 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:11.077000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@249-46.62.141.192:22-46.62.141.104:62818 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:11.077913 systemd[1]: Started sshd@249-46.62.141.192:22-46.62.141.104:62818.service - OpenSSH per-connection server daemon (46.62.141.104:62818). Jan 23 18:30:11.091317 kernel: audit: type=1130 audit(1769193011.077:932): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@249-46.62.141.192:22-46.62.141.104:62818 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:11.192170 sshd[3674]: Invalid user user2 from 46.62.141.104 port 62818 Jan 23 18:30:11.199451 sshd[3674]: Received disconnect from 46.62.141.104 port 62818:11: Bye Bye [preauth] Jan 23 18:30:11.199451 sshd[3674]: Disconnected from invalid user user2 46.62.141.104 port 62818 [preauth] Jan 23 18:30:11.199000 audit[3674]: USER_ERR pid=3674 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:11.202121 systemd[1]: sshd@249-46.62.141.192:22-46.62.141.104:62818.service: Deactivated successfully. Jan 23 18:30:11.202000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@249-46.62.141.192:22-46.62.141.104:62818 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:11.215317 kernel: audit: type=1109 audit(1769193011.199:933): pid=3674 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:11.215389 kernel: audit: type=1131 audit(1769193011.202:934): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@249-46.62.141.192:22-46.62.141.104:62818 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:11.226466 systemd[1]: Started sshd@250-46.62.141.192:22-46.62.141.104:62822.service - OpenSSH per-connection server daemon (46.62.141.104:62822). Jan 23 18:30:11.226000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@250-46.62.141.192:22-46.62.141.104:62822 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:11.240340 kernel: audit: type=1130 audit(1769193011.226:935): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@250-46.62.141.192:22-46.62.141.104:62822 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:11.342724 sshd[3680]: Received disconnect from 46.62.141.104 port 62822:11: Bye Bye [preauth] Jan 23 18:30:11.342724 sshd[3680]: Disconnected from authenticating user root 46.62.141.104 port 62822 [preauth] Jan 23 18:30:11.342000 audit[3680]: USER_ERR pid=3680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:11.345392 systemd[1]: sshd@250-46.62.141.192:22-46.62.141.104:62822.service: Deactivated successfully. Jan 23 18:30:11.345000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@250-46.62.141.192:22-46.62.141.104:62822 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:11.358321 kernel: audit: type=1109 audit(1769193011.342:936): pid=3680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:11.358402 kernel: audit: type=1131 audit(1769193011.345:937): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@250-46.62.141.192:22-46.62.141.104:62822 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:11.377000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@251-46.62.141.192:22-46.62.141.104:62823 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:11.377560 systemd[1]: Started sshd@251-46.62.141.192:22-46.62.141.104:62823.service - OpenSSH per-connection server daemon (46.62.141.104:62823). Jan 23 18:30:11.390327 kernel: audit: type=1130 audit(1769193011.377:938): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@251-46.62.141.192:22-46.62.141.104:62823 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:11.497027 sshd[3686]: Invalid user admin from 46.62.141.104 port 62823 Jan 23 18:30:11.503415 sshd[3686]: Received disconnect from 46.62.141.104 port 62823:11: Bye Bye [preauth] Jan 23 18:30:11.503415 sshd[3686]: Disconnected from invalid user admin 46.62.141.104 port 62823 [preauth] Jan 23 18:30:11.503000 audit[3686]: USER_ERR pid=3686 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:11.507128 systemd[1]: sshd@251-46.62.141.192:22-46.62.141.104:62823.service: Deactivated successfully. Jan 23 18:30:11.507000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@251-46.62.141.192:22-46.62.141.104:62823 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:11.531000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@252-46.62.141.192:22-46.62.141.104:62826 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:11.532098 systemd[1]: Started sshd@252-46.62.141.192:22-46.62.141.104:62826.service - OpenSSH per-connection server daemon (46.62.141.104:62826). Jan 23 18:30:11.648980 sshd[3692]: Invalid user user from 46.62.141.104 port 62826 Jan 23 18:30:11.656744 sshd[3692]: Received disconnect from 46.62.141.104 port 62826:11: Bye Bye [preauth] Jan 23 18:30:11.656744 sshd[3692]: Disconnected from invalid user user 46.62.141.104 port 62826 [preauth] Jan 23 18:30:11.655000 audit[3692]: USER_ERR pid=3692 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:11.661296 systemd[1]: sshd@252-46.62.141.192:22-46.62.141.104:62826.service: Deactivated successfully. Jan 23 18:30:11.660000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@252-46.62.141.192:22-46.62.141.104:62826 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:11.694327 systemd[1]: Started sshd@253-46.62.141.192:22-46.62.141.104:62827.service - OpenSSH per-connection server daemon (46.62.141.104:62827). Jan 23 18:30:11.693000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@253-46.62.141.192:22-46.62.141.104:62827 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:11.828494 sshd[3698]: Invalid user user2 from 46.62.141.104 port 62827 Jan 23 18:30:11.837695 sshd[3698]: Received disconnect from 46.62.141.104 port 62827:11: Bye Bye [preauth] Jan 23 18:30:11.837695 sshd[3698]: Disconnected from invalid user user2 46.62.141.104 port 62827 [preauth] Jan 23 18:30:11.836000 audit[3698]: USER_ERR pid=3698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:11.842516 systemd[1]: sshd@253-46.62.141.192:22-46.62.141.104:62827.service: Deactivated successfully. Jan 23 18:30:11.841000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@253-46.62.141.192:22-46.62.141.104:62827 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:11.867000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@254-46.62.141.192:22-46.62.141.104:62830 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:11.868876 systemd[1]: Started sshd@254-46.62.141.192:22-46.62.141.104:62830.service - OpenSSH per-connection server daemon (46.62.141.104:62830). Jan 23 18:30:11.981677 sshd[3704]: Received disconnect from 46.62.141.104 port 62830:11: Bye Bye [preauth] Jan 23 18:30:11.982378 sshd[3704]: Disconnected from authenticating user root 46.62.141.104 port 62830 [preauth] Jan 23 18:30:11.981000 audit[3704]: USER_ERR pid=3704 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:11.985183 systemd[1]: sshd@254-46.62.141.192:22-46.62.141.104:62830.service: Deactivated successfully. Jan 23 18:30:11.984000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@254-46.62.141.192:22-46.62.141.104:62830 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:12.011000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@255-46.62.141.192:22-46.62.141.104:62833 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:12.012880 systemd[1]: Started sshd@255-46.62.141.192:22-46.62.141.104:62833.service - OpenSSH per-connection server daemon (46.62.141.104:62833). Jan 23 18:30:12.109365 sshd[3710]: Invalid user admin from 46.62.141.104 port 62833 Jan 23 18:30:12.115315 sshd[3710]: Received disconnect from 46.62.141.104 port 62833:11: Bye Bye [preauth] Jan 23 18:30:12.115315 sshd[3710]: Disconnected from invalid user admin 46.62.141.104 port 62833 [preauth] Jan 23 18:30:12.114000 audit[3710]: USER_ERR pid=3710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:12.118124 systemd[1]: sshd@255-46.62.141.192:22-46.62.141.104:62833.service: Deactivated successfully. Jan 23 18:30:12.117000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@255-46.62.141.192:22-46.62.141.104:62833 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:12.137236 systemd[1]: Started sshd@256-46.62.141.192:22-46.62.141.104:62836.service - OpenSSH per-connection server daemon (46.62.141.104:62836). Jan 23 18:30:12.137000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@256-46.62.141.192:22-46.62.141.104:62836 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:12.227981 sshd[3716]: Invalid user user from 46.62.141.104 port 62836 Jan 23 18:30:12.234259 sshd[3716]: Received disconnect from 46.62.141.104 port 62836:11: Bye Bye [preauth] Jan 23 18:30:12.234259 sshd[3716]: Disconnected from invalid user user 46.62.141.104 port 62836 [preauth] Jan 23 18:30:12.233000 audit[3716]: USER_ERR pid=3716 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:12.238217 systemd[1]: sshd@256-46.62.141.192:22-46.62.141.104:62836.service: Deactivated successfully. Jan 23 18:30:12.237000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@256-46.62.141.192:22-46.62.141.104:62836 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:12.254000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@257-46.62.141.192:22-46.62.141.104:62837 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:12.255313 systemd[1]: Started sshd@257-46.62.141.192:22-46.62.141.104:62837.service - OpenSSH per-connection server daemon (46.62.141.104:62837). Jan 23 18:30:12.351187 sshd[3722]: Invalid user user2 from 46.62.141.104 port 62837 Jan 23 18:30:12.358116 sshd[3722]: Received disconnect from 46.62.141.104 port 62837:11: Bye Bye [preauth] Jan 23 18:30:12.358116 sshd[3722]: Disconnected from invalid user user2 46.62.141.104 port 62837 [preauth] Jan 23 18:30:12.357000 audit[3722]: USER_ERR pid=3722 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:12.361894 systemd[1]: sshd@257-46.62.141.192:22-46.62.141.104:62837.service: Deactivated successfully. Jan 23 18:30:12.361000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@257-46.62.141.192:22-46.62.141.104:62837 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:12.387793 systemd[1]: Started sshd@258-46.62.141.192:22-46.62.141.104:62838.service - OpenSSH per-connection server daemon (46.62.141.104:62838). Jan 23 18:30:12.386000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@258-46.62.141.192:22-46.62.141.104:62838 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:12.503745 sshd[3728]: Received disconnect from 46.62.141.104 port 62838:11: Bye Bye [preauth] Jan 23 18:30:12.503745 sshd[3728]: Disconnected from authenticating user root 46.62.141.104 port 62838 [preauth] Jan 23 18:30:12.503000 audit[3728]: USER_ERR pid=3728 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:12.506364 systemd[1]: sshd@258-46.62.141.192:22-46.62.141.104:62838.service: Deactivated successfully. Jan 23 18:30:12.505000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@258-46.62.141.192:22-46.62.141.104:62838 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:12.533000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@259-46.62.141.192:22-46.62.141.104:62842 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:12.534161 systemd[1]: Started sshd@259-46.62.141.192:22-46.62.141.104:62842.service - OpenSSH per-connection server daemon (46.62.141.104:62842). Jan 23 18:30:12.626149 sshd[3734]: Invalid user admin from 46.62.141.104 port 62842 Jan 23 18:30:12.632585 sshd[3734]: Received disconnect from 46.62.141.104 port 62842:11: Bye Bye [preauth] Jan 23 18:30:12.632585 sshd[3734]: Disconnected from invalid user admin 46.62.141.104 port 62842 [preauth] Jan 23 18:30:12.632000 audit[3734]: USER_ERR pid=3734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:12.636974 systemd[1]: sshd@259-46.62.141.192:22-46.62.141.104:62842.service: Deactivated successfully. Jan 23 18:30:12.636000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@259-46.62.141.192:22-46.62.141.104:62842 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:12.662000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@260-46.62.141.192:22-46.62.141.104:62846 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:12.663082 systemd[1]: Started sshd@260-46.62.141.192:22-46.62.141.104:62846.service - OpenSSH per-connection server daemon (46.62.141.104:62846). Jan 23 18:30:12.748949 sshd[3740]: Invalid user user from 46.62.141.104 port 62846 Jan 23 18:30:12.755772 sshd[3740]: Received disconnect from 46.62.141.104 port 62846:11: Bye Bye [preauth] Jan 23 18:30:12.755772 sshd[3740]: Disconnected from invalid user user 46.62.141.104 port 62846 [preauth] Jan 23 18:30:12.754000 audit[3740]: USER_ERR pid=3740 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:12.759982 systemd[1]: sshd@260-46.62.141.192:22-46.62.141.104:62846.service: Deactivated successfully. Jan 23 18:30:12.759000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@260-46.62.141.192:22-46.62.141.104:62846 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:12.784000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@261-46.62.141.192:22-46.62.141.104:62847 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:12.785256 systemd[1]: Started sshd@261-46.62.141.192:22-46.62.141.104:62847.service - OpenSSH per-connection server daemon (46.62.141.104:62847). Jan 23 18:30:12.908834 sshd[3746]: Invalid user user2 from 46.62.141.104 port 62847 Jan 23 18:30:12.914734 sshd[3746]: Received disconnect from 46.62.141.104 port 62847:11: Bye Bye [preauth] Jan 23 18:30:12.914839 sshd[3746]: Disconnected from invalid user user2 46.62.141.104 port 62847 [preauth] Jan 23 18:30:12.914000 audit[3746]: USER_ERR pid=3746 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:12.917899 systemd[1]: sshd@261-46.62.141.192:22-46.62.141.104:62847.service: Deactivated successfully. Jan 23 18:30:12.916000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@261-46.62.141.192:22-46.62.141.104:62847 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:12.934000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@262-46.62.141.192:22-46.62.141.104:62850 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:12.935828 systemd[1]: Started sshd@262-46.62.141.192:22-46.62.141.104:62850.service - OpenSSH per-connection server daemon (46.62.141.104:62850). Jan 23 18:30:13.025475 sshd[3752]: Received disconnect from 46.62.141.104 port 62850:11: Bye Bye [preauth] Jan 23 18:30:13.025475 sshd[3752]: Disconnected from authenticating user root 46.62.141.104 port 62850 [preauth] Jan 23 18:30:13.024000 audit[3752]: USER_ERR pid=3752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:13.029109 systemd[1]: sshd@262-46.62.141.192:22-46.62.141.104:62850.service: Deactivated successfully. Jan 23 18:30:13.028000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@262-46.62.141.192:22-46.62.141.104:62850 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:13.059000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@263-46.62.141.192:22-46.62.141.104:62852 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:13.060405 systemd[1]: Started sshd@263-46.62.141.192:22-46.62.141.104:62852.service - OpenSSH per-connection server daemon (46.62.141.104:62852). Jan 23 18:30:13.172873 sshd[3758]: Invalid user admin from 46.62.141.104 port 62852 Jan 23 18:30:13.179932 sshd[3758]: Received disconnect from 46.62.141.104 port 62852:11: Bye Bye [preauth] Jan 23 18:30:13.179932 sshd[3758]: Disconnected from invalid user admin 46.62.141.104 port 62852 [preauth] Jan 23 18:30:13.178000 audit[3758]: USER_ERR pid=3758 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:13.183705 systemd[1]: sshd@263-46.62.141.192:22-46.62.141.104:62852.service: Deactivated successfully. Jan 23 18:30:13.183000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@263-46.62.141.192:22-46.62.141.104:62852 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:13.204000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@264-46.62.141.192:22-46.62.141.104:62856 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:13.205526 systemd[1]: Started sshd@264-46.62.141.192:22-46.62.141.104:62856.service - OpenSSH per-connection server daemon (46.62.141.104:62856). Jan 23 18:30:13.328611 sshd[3764]: Invalid user user from 46.62.141.104 port 62856 Jan 23 18:30:13.335160 sshd[3764]: Received disconnect from 46.62.141.104 port 62856:11: Bye Bye [preauth] Jan 23 18:30:13.335160 sshd[3764]: Disconnected from invalid user user 46.62.141.104 port 62856 [preauth] Jan 23 18:30:13.334000 audit[3764]: USER_ERR pid=3764 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:13.338852 systemd[1]: sshd@264-46.62.141.192:22-46.62.141.104:62856.service: Deactivated successfully. Jan 23 18:30:13.338000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@264-46.62.141.192:22-46.62.141.104:62856 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:13.357000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@265-46.62.141.192:22-46.62.141.104:62857 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:13.358195 systemd[1]: Started sshd@265-46.62.141.192:22-46.62.141.104:62857.service - OpenSSH per-connection server daemon (46.62.141.104:62857). Jan 23 18:30:13.475623 sshd[3770]: Invalid user user2 from 46.62.141.104 port 62857 Jan 23 18:30:13.482570 sshd[3770]: Received disconnect from 46.62.141.104 port 62857:11: Bye Bye [preauth] Jan 23 18:30:13.482570 sshd[3770]: Disconnected from invalid user user2 46.62.141.104 port 62857 [preauth] Jan 23 18:30:13.481000 audit[3770]: USER_ERR pid=3770 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:13.487077 systemd[1]: sshd@265-46.62.141.192:22-46.62.141.104:62857.service: Deactivated successfully. Jan 23 18:30:13.486000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@265-46.62.141.192:22-46.62.141.104:62857 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:13.505000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@266-46.62.141.192:22-46.62.141.104:62859 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:13.506423 systemd[1]: Started sshd@266-46.62.141.192:22-46.62.141.104:62859.service - OpenSSH per-connection server daemon (46.62.141.104:62859). Jan 23 18:30:13.629111 sshd[3776]: Received disconnect from 46.62.141.104 port 62859:11: Bye Bye [preauth] Jan 23 18:30:13.629111 sshd[3776]: Disconnected from authenticating user root 46.62.141.104 port 62859 [preauth] Jan 23 18:30:13.628000 audit[3776]: USER_ERR pid=3776 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:13.632759 systemd[1]: sshd@266-46.62.141.192:22-46.62.141.104:62859.service: Deactivated successfully. Jan 23 18:30:13.632000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@266-46.62.141.192:22-46.62.141.104:62859 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:13.652000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@267-46.62.141.192:22-46.62.141.104:62864 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:13.653532 systemd[1]: Started sshd@267-46.62.141.192:22-46.62.141.104:62864.service - OpenSSH per-connection server daemon (46.62.141.104:62864). Jan 23 18:30:13.769460 sshd[3782]: Invalid user admin from 46.62.141.104 port 62864 Jan 23 18:30:13.777999 sshd[3782]: Received disconnect from 46.62.141.104 port 62864:11: Bye Bye [preauth] Jan 23 18:30:13.777999 sshd[3782]: Disconnected from invalid user admin 46.62.141.104 port 62864 [preauth] Jan 23 18:30:13.776000 audit[3782]: USER_ERR pid=3782 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:13.781892 systemd[1]: sshd@267-46.62.141.192:22-46.62.141.104:62864.service: Deactivated successfully. Jan 23 18:30:13.781000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@267-46.62.141.192:22-46.62.141.104:62864 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:13.803000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@268-46.62.141.192:22-46.62.141.104:62865 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:13.804613 systemd[1]: Started sshd@268-46.62.141.192:22-46.62.141.104:62865.service - OpenSSH per-connection server daemon (46.62.141.104:62865). Jan 23 18:30:13.908125 etcd-wrapper[1931]: {"level":"warn","ts":"2026-01-23T18:30:13.907693Z","caller":"rafthttp/probing_status.go:68","msg":"prober detected unhealthy status","round-tripper-name":"ROUND_TRIPPER_RAFT_MESSAGE","remote-peer-id":"15eb2e9460fb69a5","rtt":"736.265µs","error":"dial tcp 10.0.0.3:2380: i/o timeout"} Jan 23 18:30:13.922039 sshd[3789]: Invalid user user from 46.62.141.104 port 62865 Jan 23 18:30:13.929572 sshd[3789]: Received disconnect from 46.62.141.104 port 62865:11: Bye Bye [preauth] Jan 23 18:30:13.929572 sshd[3789]: Disconnected from invalid user user 46.62.141.104 port 62865 [preauth] Jan 23 18:30:13.928000 audit[3789]: USER_ERR pid=3789 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:13.933155 systemd[1]: sshd@268-46.62.141.192:22-46.62.141.104:62865.service: Deactivated successfully. Jan 23 18:30:13.932000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@268-46.62.141.192:22-46.62.141.104:62865 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:13.949000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@269-46.62.141.192:22-46.62.141.104:62868 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:13.951095 systemd[1]: Started sshd@269-46.62.141.192:22-46.62.141.104:62868.service - OpenSSH per-connection server daemon (46.62.141.104:62868). Jan 23 18:30:14.058577 sshd[3796]: Invalid user user2 from 46.62.141.104 port 62868 Jan 23 18:30:14.064906 sshd[3796]: Received disconnect from 46.62.141.104 port 62868:11: Bye Bye [preauth] Jan 23 18:30:14.064906 sshd[3796]: Disconnected from invalid user user2 46.62.141.104 port 62868 [preauth] Jan 23 18:30:14.063000 audit[3796]: USER_ERR pid=3796 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:14.067670 systemd[1]: sshd@269-46.62.141.192:22-46.62.141.104:62868.service: Deactivated successfully. Jan 23 18:30:14.066000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@269-46.62.141.192:22-46.62.141.104:62868 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:14.087180 systemd[1]: Started sshd@270-46.62.141.192:22-46.62.141.104:62869.service - OpenSSH per-connection server daemon (46.62.141.104:62869). Jan 23 18:30:14.086000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@270-46.62.141.192:22-46.62.141.104:62869 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:14.202828 sshd[3803]: Received disconnect from 46.62.141.104 port 62869:11: Bye Bye [preauth] Jan 23 18:30:14.202828 sshd[3803]: Disconnected from authenticating user root 46.62.141.104 port 62869 [preauth] Jan 23 18:30:14.201000 audit[3803]: USER_ERR pid=3803 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:14.206138 systemd[1]: sshd@270-46.62.141.192:22-46.62.141.104:62869.service: Deactivated successfully. Jan 23 18:30:14.205000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@270-46.62.141.192:22-46.62.141.104:62869 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:14.223000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@271-46.62.141.192:22-46.62.141.104:62872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:14.225010 systemd[1]: Started sshd@271-46.62.141.192:22-46.62.141.104:62872.service - OpenSSH per-connection server daemon (46.62.141.104:62872). Jan 23 18:30:14.341753 sshd[3809]: Invalid user admin from 46.62.141.104 port 62872 Jan 23 18:30:14.348703 sshd[3809]: Received disconnect from 46.62.141.104 port 62872:11: Bye Bye [preauth] Jan 23 18:30:14.348703 sshd[3809]: Disconnected from invalid user admin 46.62.141.104 port 62872 [preauth] Jan 23 18:30:14.348000 audit[3809]: USER_ERR pid=3809 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:14.352192 systemd[1]: sshd@271-46.62.141.192:22-46.62.141.104:62872.service: Deactivated successfully. Jan 23 18:30:14.352000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@271-46.62.141.192:22-46.62.141.104:62872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:14.376000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@272-46.62.141.192:22-46.62.141.104:62874 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:14.377083 systemd[1]: Started sshd@272-46.62.141.192:22-46.62.141.104:62874.service - OpenSSH per-connection server daemon (46.62.141.104:62874). Jan 23 18:30:14.491484 sshd[3815]: Invalid user user from 46.62.141.104 port 62874 Jan 23 18:30:14.498034 sshd[3815]: Received disconnect from 46.62.141.104 port 62874:11: Bye Bye [preauth] Jan 23 18:30:14.498034 sshd[3815]: Disconnected from invalid user user 46.62.141.104 port 62874 [preauth] Jan 23 18:30:14.497000 audit[3815]: USER_ERR pid=3815 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:14.501640 systemd[1]: sshd@272-46.62.141.192:22-46.62.141.104:62874.service: Deactivated successfully. Jan 23 18:30:14.501000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@272-46.62.141.192:22-46.62.141.104:62874 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:14.523000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@273-46.62.141.192:22-46.62.141.104:62875 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:14.523373 systemd[1]: Started sshd@273-46.62.141.192:22-46.62.141.104:62875.service - OpenSSH per-connection server daemon (46.62.141.104:62875). Jan 23 18:30:14.639897 sshd[3821]: Invalid user user2 from 46.62.141.104 port 62875 Jan 23 18:30:14.646685 sshd[3821]: Received disconnect from 46.62.141.104 port 62875:11: Bye Bye [preauth] Jan 23 18:30:14.646685 sshd[3821]: Disconnected from invalid user user2 46.62.141.104 port 62875 [preauth] Jan 23 18:30:14.646000 audit[3821]: USER_ERR pid=3821 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:14.650170 systemd[1]: sshd@273-46.62.141.192:22-46.62.141.104:62875.service: Deactivated successfully. Jan 23 18:30:14.650000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@273-46.62.141.192:22-46.62.141.104:62875 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:14.669000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@274-46.62.141.192:22-46.62.141.104:62880 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:14.669333 systemd[1]: Started sshd@274-46.62.141.192:22-46.62.141.104:62880.service - OpenSSH per-connection server daemon (46.62.141.104:62880). Jan 23 18:30:14.775147 sshd[3827]: Received disconnect from 46.62.141.104 port 62880:11: Bye Bye [preauth] Jan 23 18:30:14.775147 sshd[3827]: Disconnected from authenticating user root 46.62.141.104 port 62880 [preauth] Jan 23 18:30:14.775000 audit[3827]: USER_ERR pid=3827 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:14.778838 systemd[1]: sshd@274-46.62.141.192:22-46.62.141.104:62880.service: Deactivated successfully. Jan 23 18:30:14.779000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@274-46.62.141.192:22-46.62.141.104:62880 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:14.808000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@275-46.62.141.192:22-46.62.141.104:62882 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:14.808397 systemd[1]: Started sshd@275-46.62.141.192:22-46.62.141.104:62882.service - OpenSSH per-connection server daemon (46.62.141.104:62882). Jan 23 18:30:14.925691 sshd[3833]: Invalid user admin from 46.62.141.104 port 62882 Jan 23 18:30:14.932540 sshd[3833]: Received disconnect from 46.62.141.104 port 62882:11: Bye Bye [preauth] Jan 23 18:30:14.932540 sshd[3833]: Disconnected from invalid user admin 46.62.141.104 port 62882 [preauth] Jan 23 18:30:14.932000 audit[3833]: USER_ERR pid=3833 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:14.936391 systemd[1]: sshd@275-46.62.141.192:22-46.62.141.104:62882.service: Deactivated successfully. Jan 23 18:30:14.936000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@275-46.62.141.192:22-46.62.141.104:62882 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:14.955000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@276-46.62.141.192:22-46.62.141.104:62885 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:14.956022 systemd[1]: Started sshd@276-46.62.141.192:22-46.62.141.104:62885.service - OpenSSH per-connection server daemon (46.62.141.104:62885). Jan 23 18:30:15.074466 sshd[3839]: Invalid user user from 46.62.141.104 port 62885 Jan 23 18:30:15.081128 sshd[3839]: Received disconnect from 46.62.141.104 port 62885:11: Bye Bye [preauth] Jan 23 18:30:15.081128 sshd[3839]: Disconnected from invalid user user 46.62.141.104 port 62885 [preauth] Jan 23 18:30:15.081000 audit[3839]: USER_ERR pid=3839 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:15.084015 systemd[1]: sshd@276-46.62.141.192:22-46.62.141.104:62885.service: Deactivated successfully. Jan 23 18:30:15.084000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@276-46.62.141.192:22-46.62.141.104:62885 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:15.107000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@277-46.62.141.192:22-46.62.141.104:62886 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:15.107912 systemd[1]: Started sshd@277-46.62.141.192:22-46.62.141.104:62886.service - OpenSSH per-connection server daemon (46.62.141.104:62886). Jan 23 18:30:15.232927 sshd[3845]: Invalid user user2 from 46.62.141.104 port 62886 Jan 23 18:30:15.239313 sshd[3845]: Received disconnect from 46.62.141.104 port 62886:11: Bye Bye [preauth] Jan 23 18:30:15.239313 sshd[3845]: Disconnected from invalid user user2 46.62.141.104 port 62886 [preauth] Jan 23 18:30:15.239000 audit[3845]: USER_ERR pid=3845 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:15.243125 systemd[1]: sshd@277-46.62.141.192:22-46.62.141.104:62886.service: Deactivated successfully. Jan 23 18:30:15.243000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@277-46.62.141.192:22-46.62.141.104:62886 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:15.267000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@278-46.62.141.192:22-46.62.141.104:62889 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:15.267862 systemd[1]: Started sshd@278-46.62.141.192:22-46.62.141.104:62889.service - OpenSSH per-connection server daemon (46.62.141.104:62889). Jan 23 18:30:15.380772 sshd[3851]: Received disconnect from 46.62.141.104 port 62889:11: Bye Bye [preauth] Jan 23 18:30:15.380772 sshd[3851]: Disconnected from authenticating user root 46.62.141.104 port 62889 [preauth] Jan 23 18:30:15.380000 audit[3851]: USER_ERR pid=3851 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:15.384673 systemd[1]: sshd@278-46.62.141.192:22-46.62.141.104:62889.service: Deactivated successfully. Jan 23 18:30:15.385000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@278-46.62.141.192:22-46.62.141.104:62889 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:15.411000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@279-46.62.141.192:22-46.62.141.104:62891 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:15.411586 systemd[1]: Started sshd@279-46.62.141.192:22-46.62.141.104:62891.service - OpenSSH per-connection server daemon (46.62.141.104:62891). Jan 23 18:30:15.529829 sshd[3857]: Invalid user admin from 46.62.141.104 port 62891 Jan 23 18:30:15.535833 sshd[3857]: Received disconnect from 46.62.141.104 port 62891:11: Bye Bye [preauth] Jan 23 18:30:15.535833 sshd[3857]: Disconnected from invalid user admin 46.62.141.104 port 62891 [preauth] Jan 23 18:30:15.535000 audit[3857]: USER_ERR pid=3857 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:15.540167 systemd[1]: sshd@279-46.62.141.192:22-46.62.141.104:62891.service: Deactivated successfully. Jan 23 18:30:15.540000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@279-46.62.141.192:22-46.62.141.104:62891 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:15.560000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@280-46.62.141.192:22-46.62.141.104:62892 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:15.560926 systemd[1]: Started sshd@280-46.62.141.192:22-46.62.141.104:62892.service - OpenSSH per-connection server daemon (46.62.141.104:62892). Jan 23 18:30:15.664489 sshd[3863]: Invalid user user from 46.62.141.104 port 62892 Jan 23 18:30:15.671223 sshd[3863]: Received disconnect from 46.62.141.104 port 62892:11: Bye Bye [preauth] Jan 23 18:30:15.671223 sshd[3863]: Disconnected from invalid user user 46.62.141.104 port 62892 [preauth] Jan 23 18:30:15.671000 audit[3863]: USER_ERR pid=3863 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:15.675197 systemd[1]: sshd@280-46.62.141.192:22-46.62.141.104:62892.service: Deactivated successfully. Jan 23 18:30:15.675000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@280-46.62.141.192:22-46.62.141.104:62892 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:15.700000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@281-46.62.141.192:22-46.62.141.104:62897 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:15.700613 systemd[1]: Started sshd@281-46.62.141.192:22-46.62.141.104:62897.service - OpenSSH per-connection server daemon (46.62.141.104:62897). Jan 23 18:30:15.817592 sshd[3869]: Invalid user user2 from 46.62.141.104 port 62897 Jan 23 18:30:15.823719 sshd[3869]: Received disconnect from 46.62.141.104 port 62897:11: Bye Bye [preauth] Jan 23 18:30:15.823719 sshd[3869]: Disconnected from invalid user user2 46.62.141.104 port 62897 [preauth] Jan 23 18:30:15.823000 audit[3869]: USER_ERR pid=3869 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:15.828197 systemd[1]: sshd@281-46.62.141.192:22-46.62.141.104:62897.service: Deactivated successfully. Jan 23 18:30:15.828000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@281-46.62.141.192:22-46.62.141.104:62897 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:15.851000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@282-46.62.141.192:22-46.62.141.104:62899 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:15.851246 systemd[1]: Started sshd@282-46.62.141.192:22-46.62.141.104:62899.service - OpenSSH per-connection server daemon (46.62.141.104:62899). Jan 23 18:30:15.969569 sshd[3875]: Received disconnect from 46.62.141.104 port 62899:11: Bye Bye [preauth] Jan 23 18:30:15.969569 sshd[3875]: Disconnected from authenticating user root 46.62.141.104 port 62899 [preauth] Jan 23 18:30:15.972763 kernel: kauditd_printk_skb: 93 callbacks suppressed Jan 23 18:30:15.972809 kernel: audit: type=1109 audit(1769193015.969:1032): pid=3875 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:15.969000 audit[3875]: USER_ERR pid=3875 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:15.975034 systemd[1]: sshd@282-46.62.141.192:22-46.62.141.104:62899.service: Deactivated successfully. Jan 23 18:30:15.975000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@282-46.62.141.192:22-46.62.141.104:62899 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:15.989014 kernel: audit: type=1131 audit(1769193015.975:1033): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@282-46.62.141.192:22-46.62.141.104:62899 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:16.014000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@283-46.62.141.192:22-46.62.141.104:62901 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:16.014556 systemd[1]: Started sshd@283-46.62.141.192:22-46.62.141.104:62901.service - OpenSSH per-connection server daemon (46.62.141.104:62901). Jan 23 18:30:16.027361 kernel: audit: type=1130 audit(1769193016.014:1034): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@283-46.62.141.192:22-46.62.141.104:62901 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:16.128252 sshd[3881]: Invalid user admin from 46.62.141.104 port 62901 Jan 23 18:30:16.135094 sshd[3881]: Received disconnect from 46.62.141.104 port 62901:11: Bye Bye [preauth] Jan 23 18:30:16.135094 sshd[3881]: Disconnected from invalid user admin 46.62.141.104 port 62901 [preauth] Jan 23 18:30:16.135000 audit[3881]: USER_ERR pid=3881 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:16.138153 systemd[1]: sshd@283-46.62.141.192:22-46.62.141.104:62901.service: Deactivated successfully. Jan 23 18:30:16.147338 kernel: audit: type=1109 audit(1769193016.135:1035): pid=3881 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:16.137000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@283-46.62.141.192:22-46.62.141.104:62901 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:16.160353 kernel: audit: type=1131 audit(1769193016.137:1036): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@283-46.62.141.192:22-46.62.141.104:62901 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:16.172775 systemd[1]: Started sshd@284-46.62.141.192:22-46.62.141.104:62903.service - OpenSSH per-connection server daemon (46.62.141.104:62903). Jan 23 18:30:16.172000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@284-46.62.141.192:22-46.62.141.104:62903 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:16.186355 kernel: audit: type=1130 audit(1769193016.172:1037): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@284-46.62.141.192:22-46.62.141.104:62903 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:16.279936 sshd[3887]: Invalid user user from 46.62.141.104 port 62903 Jan 23 18:30:16.286576 sshd[3887]: Received disconnect from 46.62.141.104 port 62903:11: Bye Bye [preauth] Jan 23 18:30:16.286576 sshd[3887]: Disconnected from invalid user user 46.62.141.104 port 62903 [preauth] Jan 23 18:30:16.286000 audit[3887]: USER_ERR pid=3887 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:16.289220 systemd[1]: sshd@284-46.62.141.192:22-46.62.141.104:62903.service: Deactivated successfully. Jan 23 18:30:16.289000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@284-46.62.141.192:22-46.62.141.104:62903 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:16.302178 kernel: audit: type=1109 audit(1769193016.286:1038): pid=3887 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:16.302246 kernel: audit: type=1131 audit(1769193016.289:1039): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@284-46.62.141.192:22-46.62.141.104:62903 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:16.329000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@285-46.62.141.192:22-46.62.141.104:62906 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:16.329607 systemd[1]: Started sshd@285-46.62.141.192:22-46.62.141.104:62906.service - OpenSSH per-connection server daemon (46.62.141.104:62906). Jan 23 18:30:16.342402 kernel: audit: type=1130 audit(1769193016.329:1040): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@285-46.62.141.192:22-46.62.141.104:62906 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:16.440388 sshd[3893]: Invalid user user2 from 46.62.141.104 port 62906 Jan 23 18:30:16.447395 sshd[3893]: Received disconnect from 46.62.141.104 port 62906:11: Bye Bye [preauth] Jan 23 18:30:16.447482 sshd[3893]: Disconnected from invalid user user2 46.62.141.104 port 62906 [preauth] Jan 23 18:30:16.447000 audit[3893]: USER_ERR pid=3893 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:16.452041 systemd[1]: sshd@285-46.62.141.192:22-46.62.141.104:62906.service: Deactivated successfully. Jan 23 18:30:16.452000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@285-46.62.141.192:22-46.62.141.104:62906 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:16.460340 kernel: audit: type=1109 audit(1769193016.447:1041): pid=3893 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:16.476000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@286-46.62.141.192:22-46.62.141.104:62908 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:16.477079 systemd[1]: Started sshd@286-46.62.141.192:22-46.62.141.104:62908.service - OpenSSH per-connection server daemon (46.62.141.104:62908). Jan 23 18:30:16.592412 sshd[3899]: Received disconnect from 46.62.141.104 port 62908:11: Bye Bye [preauth] Jan 23 18:30:16.592412 sshd[3899]: Disconnected from authenticating user root 46.62.141.104 port 62908 [preauth] Jan 23 18:30:16.592000 audit[3899]: USER_ERR pid=3899 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:16.596440 systemd[1]: sshd@286-46.62.141.192:22-46.62.141.104:62908.service: Deactivated successfully. Jan 23 18:30:16.596000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@286-46.62.141.192:22-46.62.141.104:62908 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:16.615000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@287-46.62.141.192:22-46.62.141.104:62909 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:16.615460 systemd[1]: Started sshd@287-46.62.141.192:22-46.62.141.104:62909.service - OpenSSH per-connection server daemon (46.62.141.104:62909). Jan 23 18:30:16.741988 sshd[3905]: Invalid user admin from 46.62.141.104 port 62909 Jan 23 18:30:16.749125 sshd[3905]: Received disconnect from 46.62.141.104 port 62909:11: Bye Bye [preauth] Jan 23 18:30:16.749125 sshd[3905]: Disconnected from invalid user admin 46.62.141.104 port 62909 [preauth] Jan 23 18:30:16.749000 audit[3905]: USER_ERR pid=3905 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:16.753082 systemd[1]: sshd@287-46.62.141.192:22-46.62.141.104:62909.service: Deactivated successfully. Jan 23 18:30:16.753000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@287-46.62.141.192:22-46.62.141.104:62909 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:16.776164 systemd[1]: Started sshd@288-46.62.141.192:22-46.62.141.104:62912.service - OpenSSH per-connection server daemon (46.62.141.104:62912). Jan 23 18:30:16.776000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@288-46.62.141.192:22-46.62.141.104:62912 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:16.904871 sshd[3911]: Invalid user user from 46.62.141.104 port 62912 Jan 23 18:30:16.911789 sshd[3911]: Received disconnect from 46.62.141.104 port 62912:11: Bye Bye [preauth] Jan 23 18:30:16.911789 sshd[3911]: Disconnected from invalid user user 46.62.141.104 port 62912 [preauth] Jan 23 18:30:16.911000 audit[3911]: USER_ERR pid=3911 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:16.915980 systemd[1]: sshd@288-46.62.141.192:22-46.62.141.104:62912.service: Deactivated successfully. Jan 23 18:30:16.916000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@288-46.62.141.192:22-46.62.141.104:62912 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:16.934000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@289-46.62.141.192:22-46.62.141.104:62913 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:16.934612 systemd[1]: Started sshd@289-46.62.141.192:22-46.62.141.104:62913.service - OpenSSH per-connection server daemon (46.62.141.104:62913). Jan 23 18:30:17.054823 sshd[3917]: Invalid user user2 from 46.62.141.104 port 62913 Jan 23 18:30:17.061872 sshd[3917]: Received disconnect from 46.62.141.104 port 62913:11: Bye Bye [preauth] Jan 23 18:30:17.061872 sshd[3917]: Disconnected from invalid user user2 46.62.141.104 port 62913 [preauth] Jan 23 18:30:17.061000 audit[3917]: USER_ERR pid=3917 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:17.065671 systemd[1]: sshd@289-46.62.141.192:22-46.62.141.104:62913.service: Deactivated successfully. Jan 23 18:30:17.065000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@289-46.62.141.192:22-46.62.141.104:62913 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:17.089000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@290-46.62.141.192:22-46.62.141.104:62916 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:17.089430 systemd[1]: Started sshd@290-46.62.141.192:22-46.62.141.104:62916.service - OpenSSH per-connection server daemon (46.62.141.104:62916). Jan 23 18:30:17.213659 sshd[3923]: Received disconnect from 46.62.141.104 port 62916:11: Bye Bye [preauth] Jan 23 18:30:17.213659 sshd[3923]: Disconnected from authenticating user root 46.62.141.104 port 62916 [preauth] Jan 23 18:30:17.212000 audit[3923]: USER_ERR pid=3923 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:17.218218 systemd[1]: sshd@290-46.62.141.192:22-46.62.141.104:62916.service: Deactivated successfully. Jan 23 18:30:17.217000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@290-46.62.141.192:22-46.62.141.104:62916 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:17.239000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@291-46.62.141.192:22-46.62.141.104:62917 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:17.240658 systemd[1]: Started sshd@291-46.62.141.192:22-46.62.141.104:62917.service - OpenSSH per-connection server daemon (46.62.141.104:62917). Jan 23 18:30:17.350185 sshd[3929]: Invalid user admin from 46.62.141.104 port 62917 Jan 23 18:30:17.357189 sshd[3929]: Received disconnect from 46.62.141.104 port 62917:11: Bye Bye [preauth] Jan 23 18:30:17.357189 sshd[3929]: Disconnected from invalid user admin 46.62.141.104 port 62917 [preauth] Jan 23 18:30:17.356000 audit[3929]: USER_ERR pid=3929 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:17.360996 systemd[1]: sshd@291-46.62.141.192:22-46.62.141.104:62917.service: Deactivated successfully. Jan 23 18:30:17.360000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@291-46.62.141.192:22-46.62.141.104:62917 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:17.385000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@292-46.62.141.192:22-46.62.141.104:62919 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:17.386585 systemd[1]: Started sshd@292-46.62.141.192:22-46.62.141.104:62919.service - OpenSSH per-connection server daemon (46.62.141.104:62919). Jan 23 18:30:17.499326 sshd[3935]: Invalid user user from 46.62.141.104 port 62919 Jan 23 18:30:17.506044 sshd[3935]: Received disconnect from 46.62.141.104 port 62919:11: Bye Bye [preauth] Jan 23 18:30:17.506044 sshd[3935]: Disconnected from invalid user user 46.62.141.104 port 62919 [preauth] Jan 23 18:30:17.505000 audit[3935]: USER_ERR pid=3935 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:17.509922 systemd[1]: sshd@292-46.62.141.192:22-46.62.141.104:62919.service: Deactivated successfully. Jan 23 18:30:17.509000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@292-46.62.141.192:22-46.62.141.104:62919 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:17.535000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@293-46.62.141.192:22-46.62.141.104:62922 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:17.536407 systemd[1]: Started sshd@293-46.62.141.192:22-46.62.141.104:62922.service - OpenSSH per-connection server daemon (46.62.141.104:62922). Jan 23 18:30:17.660336 sshd[3941]: Invalid user user2 from 46.62.141.104 port 62922 Jan 23 18:30:17.667360 sshd[3941]: Received disconnect from 46.62.141.104 port 62922:11: Bye Bye [preauth] Jan 23 18:30:17.667360 sshd[3941]: Disconnected from invalid user user2 46.62.141.104 port 62922 [preauth] Jan 23 18:30:17.666000 audit[3941]: USER_ERR pid=3941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:17.671526 systemd[1]: sshd@293-46.62.141.192:22-46.62.141.104:62922.service: Deactivated successfully. Jan 23 18:30:17.670000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@293-46.62.141.192:22-46.62.141.104:62922 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:17.693000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@294-46.62.141.192:22-46.62.141.104:62923 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:17.694489 systemd[1]: Started sshd@294-46.62.141.192:22-46.62.141.104:62923.service - OpenSSH per-connection server daemon (46.62.141.104:62923). Jan 23 18:30:17.790705 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:30:17.790151Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"84afc9f0d5e63dd5 is starting a new election at term 3"} Jan 23 18:30:17.790705 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:30:17.790203Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"84afc9f0d5e63dd5 became pre-candidate at term 3"} Jan 23 18:30:17.790705 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:30:17.790221Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"84afc9f0d5e63dd5 received MsgPreVoteResp from 84afc9f0d5e63dd5 at term 3"} Jan 23 18:30:17.790705 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:30:17.790241Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"84afc9f0d5e63dd5 [logterm: 3, index: 12] sent MsgPreVote request to 15eb2e9460fb69a5 at term 3"} Jan 23 18:30:17.790705 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:30:17.790302Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"84afc9f0d5e63dd5 [logterm: 3, index: 12] sent MsgPreVote request to 5e70f16e3d77e6b8 at term 3"} Jan 23 18:30:17.790705 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:30:17.790328Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"raft.node: 84afc9f0d5e63dd5 lost leader 5e70f16e3d77e6b8 at term 3"} Jan 23 18:30:17.820124 sshd[3947]: Received disconnect from 46.62.141.104 port 62923:11: Bye Bye [preauth] Jan 23 18:30:17.820124 sshd[3947]: Disconnected from authenticating user root 46.62.141.104 port 62923 [preauth] Jan 23 18:30:17.819000 audit[3947]: USER_ERR pid=3947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:17.823997 systemd[1]: sshd@294-46.62.141.192:22-46.62.141.104:62923.service: Deactivated successfully. Jan 23 18:30:17.823000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@294-46.62.141.192:22-46.62.141.104:62923 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:17.845000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@295-46.62.141.192:22-46.62.141.104:62926 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:17.846994 systemd[1]: Started sshd@295-46.62.141.192:22-46.62.141.104:62926.service - OpenSSH per-connection server daemon (46.62.141.104:62926). Jan 23 18:30:17.966405 sshd[3953]: Invalid user admin from 46.62.141.104 port 62926 Jan 23 18:30:17.975318 sshd[3953]: Received disconnect from 46.62.141.104 port 62926:11: Bye Bye [preauth] Jan 23 18:30:17.975318 sshd[3953]: Disconnected from invalid user admin 46.62.141.104 port 62926 [preauth] Jan 23 18:30:17.974000 audit[3953]: USER_ERR pid=3953 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:17.978638 systemd[1]: sshd@295-46.62.141.192:22-46.62.141.104:62926.service: Deactivated successfully. Jan 23 18:30:17.977000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@295-46.62.141.192:22-46.62.141.104:62926 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:17.995000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@296-46.62.141.192:22-46.62.141.104:62927 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:17.996905 systemd[1]: Started sshd@296-46.62.141.192:22-46.62.141.104:62927.service - OpenSSH per-connection server daemon (46.62.141.104:62927). Jan 23 18:30:18.082605 sshd[3959]: Invalid user user from 46.62.141.104 port 62927 Jan 23 18:30:18.089405 sshd[3959]: Received disconnect from 46.62.141.104 port 62927:11: Bye Bye [preauth] Jan 23 18:30:18.089405 sshd[3959]: Disconnected from invalid user user 46.62.141.104 port 62927 [preauth] Jan 23 18:30:18.088000 audit[3959]: USER_ERR pid=3959 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:18.093225 systemd[1]: sshd@296-46.62.141.192:22-46.62.141.104:62927.service: Deactivated successfully. Jan 23 18:30:18.092000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@296-46.62.141.192:22-46.62.141.104:62927 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:18.113000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@297-46.62.141.192:22-46.62.141.104:62930 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:18.114153 systemd[1]: Started sshd@297-46.62.141.192:22-46.62.141.104:62930.service - OpenSSH per-connection server daemon (46.62.141.104:62930). Jan 23 18:30:18.234364 sshd[3965]: Invalid user user2 from 46.62.141.104 port 62930 Jan 23 18:30:18.241053 sshd[3965]: Received disconnect from 46.62.141.104 port 62930:11: Bye Bye [preauth] Jan 23 18:30:18.241053 sshd[3965]: Disconnected from invalid user user2 46.62.141.104 port 62930 [preauth] Jan 23 18:30:18.240000 audit[3965]: USER_ERR pid=3965 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:18.244838 systemd[1]: sshd@297-46.62.141.192:22-46.62.141.104:62930.service: Deactivated successfully. Jan 23 18:30:18.244000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@297-46.62.141.192:22-46.62.141.104:62930 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:18.266000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@298-46.62.141.192:22-46.62.141.104:62931 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:18.267339 systemd[1]: Started sshd@298-46.62.141.192:22-46.62.141.104:62931.service - OpenSSH per-connection server daemon (46.62.141.104:62931). Jan 23 18:30:18.382249 sshd[3971]: Received disconnect from 46.62.141.104 port 62931:11: Bye Bye [preauth] Jan 23 18:30:18.382249 sshd[3971]: Disconnected from authenticating user root 46.62.141.104 port 62931 [preauth] Jan 23 18:30:18.381000 audit[3971]: USER_ERR pid=3971 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:18.386008 systemd[1]: sshd@298-46.62.141.192:22-46.62.141.104:62931.service: Deactivated successfully. Jan 23 18:30:18.385000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@298-46.62.141.192:22-46.62.141.104:62931 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:18.411000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@299-46.62.141.192:22-46.62.141.104:62933 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:18.412384 systemd[1]: Started sshd@299-46.62.141.192:22-46.62.141.104:62933.service - OpenSSH per-connection server daemon (46.62.141.104:62933). Jan 23 18:30:18.522478 sshd[3977]: Invalid user admin from 46.62.141.104 port 62933 Jan 23 18:30:18.529504 sshd[3977]: Received disconnect from 46.62.141.104 port 62933:11: Bye Bye [preauth] Jan 23 18:30:18.529504 sshd[3977]: Disconnected from invalid user admin 46.62.141.104 port 62933 [preauth] Jan 23 18:30:18.528000 audit[3977]: USER_ERR pid=3977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:18.533413 systemd[1]: sshd@299-46.62.141.192:22-46.62.141.104:62933.service: Deactivated successfully. Jan 23 18:30:18.532000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@299-46.62.141.192:22-46.62.141.104:62933 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:18.551000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@300-46.62.141.192:22-46.62.141.104:62937 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:18.553035 systemd[1]: Started sshd@300-46.62.141.192:22-46.62.141.104:62937.service - OpenSSH per-connection server daemon (46.62.141.104:62937). Jan 23 18:30:18.671929 sshd[3983]: Invalid user user from 46.62.141.104 port 62937 Jan 23 18:30:18.679149 sshd[3983]: Received disconnect from 46.62.141.104 port 62937:11: Bye Bye [preauth] Jan 23 18:30:18.679149 sshd[3983]: Disconnected from invalid user user 46.62.141.104 port 62937 [preauth] Jan 23 18:30:18.678000 audit[3983]: USER_ERR pid=3983 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:18.683363 systemd[1]: sshd@300-46.62.141.192:22-46.62.141.104:62937.service: Deactivated successfully. Jan 23 18:30:18.682000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@300-46.62.141.192:22-46.62.141.104:62937 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:18.707000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@301-46.62.141.192:22-46.62.141.104:62938 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:18.708746 systemd[1]: Started sshd@301-46.62.141.192:22-46.62.141.104:62938.service - OpenSSH per-connection server daemon (46.62.141.104:62938). Jan 23 18:30:18.830770 sshd[3989]: Invalid user user2 from 46.62.141.104 port 62938 Jan 23 18:30:18.838931 sshd[3989]: Received disconnect from 46.62.141.104 port 62938:11: Bye Bye [preauth] Jan 23 18:30:18.838931 sshd[3989]: Disconnected from invalid user user2 46.62.141.104 port 62938 [preauth] Jan 23 18:30:18.837000 audit[3989]: USER_ERR pid=3989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:18.842910 systemd[1]: sshd@301-46.62.141.192:22-46.62.141.104:62938.service: Deactivated successfully. Jan 23 18:30:18.842000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@301-46.62.141.192:22-46.62.141.104:62938 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:18.860000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@302-46.62.141.192:22-46.62.141.104:62941 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:18.861674 systemd[1]: Started sshd@302-46.62.141.192:22-46.62.141.104:62941.service - OpenSSH per-connection server daemon (46.62.141.104:62941). Jan 23 18:30:18.911678 etcd-wrapper[1931]: {"level":"warn","ts":"2026-01-23T18:30:18.909318Z","caller":"rafthttp/probing_status.go:68","msg":"prober detected unhealthy status","round-tripper-name":"ROUND_TRIPPER_RAFT_MESSAGE","remote-peer-id":"15eb2e9460fb69a5","rtt":"736.265µs","error":"dial tcp 10.0.0.3:2380: i/o timeout"} Jan 23 18:30:18.987938 sshd[3995]: Received disconnect from 46.62.141.104 port 62941:11: Bye Bye [preauth] Jan 23 18:30:18.987938 sshd[3995]: Disconnected from authenticating user root 46.62.141.104 port 62941 [preauth] Jan 23 18:30:18.986000 audit[3995]: USER_ERR pid=3995 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:18.991665 systemd[1]: sshd@302-46.62.141.192:22-46.62.141.104:62941.service: Deactivated successfully. Jan 23 18:30:18.991000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@302-46.62.141.192:22-46.62.141.104:62941 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:19.016000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@303-46.62.141.192:22-46.62.141.104:62944 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:19.017116 systemd[1]: Started sshd@303-46.62.141.192:22-46.62.141.104:62944.service - OpenSSH per-connection server daemon (46.62.141.104:62944). Jan 23 18:30:19.138969 sshd[4001]: Invalid user admin from 46.62.141.104 port 62944 Jan 23 18:30:19.146462 sshd[4001]: Received disconnect from 46.62.141.104 port 62944:11: Bye Bye [preauth] Jan 23 18:30:19.146462 sshd[4001]: Disconnected from invalid user admin 46.62.141.104 port 62944 [preauth] Jan 23 18:30:19.145000 audit[4001]: USER_ERR pid=4001 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:19.150237 systemd[1]: sshd@303-46.62.141.192:22-46.62.141.104:62944.service: Deactivated successfully. Jan 23 18:30:19.150000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@303-46.62.141.192:22-46.62.141.104:62944 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:19.174000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@304-46.62.141.192:22-46.62.141.104:62947 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:19.175891 systemd[1]: Started sshd@304-46.62.141.192:22-46.62.141.104:62947.service - OpenSSH per-connection server daemon (46.62.141.104:62947). Jan 23 18:30:19.190637 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:30:19.190238Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"84afc9f0d5e63dd5 is starting a new election at term 3"} Jan 23 18:30:19.190637 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:30:19.190319Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"84afc9f0d5e63dd5 became pre-candidate at term 3"} Jan 23 18:30:19.190637 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:30:19.190337Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"84afc9f0d5e63dd5 received MsgPreVoteResp from 84afc9f0d5e63dd5 at term 3"} Jan 23 18:30:19.190941 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:30:19.190359Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"84afc9f0d5e63dd5 [logterm: 3, index: 12] sent MsgPreVote request to 15eb2e9460fb69a5 at term 3"} Jan 23 18:30:19.190941 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:30:19.190371Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"84afc9f0d5e63dd5 [logterm: 3, index: 12] sent MsgPreVote request to 5e70f16e3d77e6b8 at term 3"} Jan 23 18:30:19.283848 sshd[4007]: Invalid user user from 46.62.141.104 port 62947 Jan 23 18:30:19.290897 sshd[4007]: Received disconnect from 46.62.141.104 port 62947:11: Bye Bye [preauth] Jan 23 18:30:19.290897 sshd[4007]: Disconnected from invalid user user 46.62.141.104 port 62947 [preauth] Jan 23 18:30:19.289000 audit[4007]: USER_ERR pid=4007 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:19.294793 systemd[1]: sshd@304-46.62.141.192:22-46.62.141.104:62947.service: Deactivated successfully. Jan 23 18:30:19.294000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@304-46.62.141.192:22-46.62.141.104:62947 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:19.320000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@305-46.62.141.192:22-46.62.141.104:62948 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:19.321885 systemd[1]: Started sshd@305-46.62.141.192:22-46.62.141.104:62948.service - OpenSSH per-connection server daemon (46.62.141.104:62948). Jan 23 18:30:19.431250 sshd[4013]: Invalid user user2 from 46.62.141.104 port 62948 Jan 23 18:30:19.438153 sshd[4013]: Received disconnect from 46.62.141.104 port 62948:11: Bye Bye [preauth] Jan 23 18:30:19.438153 sshd[4013]: Disconnected from invalid user user2 46.62.141.104 port 62948 [preauth] Jan 23 18:30:19.437000 audit[4013]: USER_ERR pid=4013 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:19.441958 systemd[1]: sshd@305-46.62.141.192:22-46.62.141.104:62948.service: Deactivated successfully. Jan 23 18:30:19.441000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@305-46.62.141.192:22-46.62.141.104:62948 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:19.465000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@306-46.62.141.192:22-46.62.141.104:62949 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:19.466772 systemd[1]: Started sshd@306-46.62.141.192:22-46.62.141.104:62949.service - OpenSSH per-connection server daemon (46.62.141.104:62949). Jan 23 18:30:19.587983 sshd[4019]: Received disconnect from 46.62.141.104 port 62949:11: Bye Bye [preauth] Jan 23 18:30:19.587983 sshd[4019]: Disconnected from authenticating user root 46.62.141.104 port 62949 [preauth] Jan 23 18:30:19.586000 audit[4019]: USER_ERR pid=4019 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:19.591987 systemd[1]: sshd@306-46.62.141.192:22-46.62.141.104:62949.service: Deactivated successfully. Jan 23 18:30:19.591000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@306-46.62.141.192:22-46.62.141.104:62949 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:19.615000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@307-46.62.141.192:22-46.62.141.104:62953 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:19.616515 systemd[1]: Started sshd@307-46.62.141.192:22-46.62.141.104:62953.service - OpenSSH per-connection server daemon (46.62.141.104:62953). Jan 23 18:30:19.738490 sshd[4025]: Invalid user admin from 46.62.141.104 port 62953 Jan 23 18:30:19.745580 sshd[4025]: Received disconnect from 46.62.141.104 port 62953:11: Bye Bye [preauth] Jan 23 18:30:19.745580 sshd[4025]: Disconnected from invalid user admin 46.62.141.104 port 62953 [preauth] Jan 23 18:30:19.744000 audit[4025]: USER_ERR pid=4025 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:19.749483 systemd[1]: sshd@307-46.62.141.192:22-46.62.141.104:62953.service: Deactivated successfully. Jan 23 18:30:19.748000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@307-46.62.141.192:22-46.62.141.104:62953 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:19.768000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@308-46.62.141.192:22-46.62.141.104:62954 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:19.769501 systemd[1]: Started sshd@308-46.62.141.192:22-46.62.141.104:62954.service - OpenSSH per-connection server daemon (46.62.141.104:62954). Jan 23 18:30:19.890079 sshd[4031]: Invalid user user from 46.62.141.104 port 62954 Jan 23 18:30:19.896765 sshd[4031]: Received disconnect from 46.62.141.104 port 62954:11: Bye Bye [preauth] Jan 23 18:30:19.896765 sshd[4031]: Disconnected from invalid user user 46.62.141.104 port 62954 [preauth] Jan 23 18:30:19.895000 audit[4031]: USER_ERR pid=4031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:19.900732 systemd[1]: sshd@308-46.62.141.192:22-46.62.141.104:62954.service: Deactivated successfully. Jan 23 18:30:19.900000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@308-46.62.141.192:22-46.62.141.104:62954 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:19.920000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@309-46.62.141.192:22-46.62.141.104:62957 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:19.921436 systemd[1]: Started sshd@309-46.62.141.192:22-46.62.141.104:62957.service - OpenSSH per-connection server daemon (46.62.141.104:62957). Jan 23 18:30:20.041365 sshd[4037]: Invalid user user2 from 46.62.141.104 port 62957 Jan 23 18:30:20.048915 sshd[4037]: Received disconnect from 46.62.141.104 port 62957:11: Bye Bye [preauth] Jan 23 18:30:20.048915 sshd[4037]: Disconnected from invalid user user2 46.62.141.104 port 62957 [preauth] Jan 23 18:30:20.047000 audit[4037]: USER_ERR pid=4037 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:20.052799 systemd[1]: sshd@309-46.62.141.192:22-46.62.141.104:62957.service: Deactivated successfully. Jan 23 18:30:20.052000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@309-46.62.141.192:22-46.62.141.104:62957 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:20.070000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@310-46.62.141.192:22-46.62.141.104:62958 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:20.071604 systemd[1]: Started sshd@310-46.62.141.192:22-46.62.141.104:62958.service - OpenSSH per-connection server daemon (46.62.141.104:62958). Jan 23 18:30:20.193853 sshd[4043]: Received disconnect from 46.62.141.104 port 62958:11: Bye Bye [preauth] Jan 23 18:30:20.193853 sshd[4043]: Disconnected from authenticating user root 46.62.141.104 port 62958 [preauth] Jan 23 18:30:20.192000 audit[4043]: USER_ERR pid=4043 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:20.197966 systemd[1]: sshd@310-46.62.141.192:22-46.62.141.104:62958.service: Deactivated successfully. Jan 23 18:30:20.197000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@310-46.62.141.192:22-46.62.141.104:62958 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:20.221000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@311-46.62.141.192:22-46.62.141.104:62960 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:20.222596 systemd[1]: Started sshd@311-46.62.141.192:22-46.62.141.104:62960.service - OpenSSH per-connection server daemon (46.62.141.104:62960). Jan 23 18:30:20.344891 sshd[4049]: Invalid user admin from 46.62.141.104 port 62960 Jan 23 18:30:20.352116 sshd[4049]: Received disconnect from 46.62.141.104 port 62960:11: Bye Bye [preauth] Jan 23 18:30:20.352116 sshd[4049]: Disconnected from invalid user admin 46.62.141.104 port 62960 [preauth] Jan 23 18:30:20.351000 audit[4049]: USER_ERR pid=4049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:20.355909 systemd[1]: sshd@311-46.62.141.192:22-46.62.141.104:62960.service: Deactivated successfully. Jan 23 18:30:20.355000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@311-46.62.141.192:22-46.62.141.104:62960 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:20.381000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@312-46.62.141.192:22-46.62.141.104:62962 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:20.382549 systemd[1]: Started sshd@312-46.62.141.192:22-46.62.141.104:62962.service - OpenSSH per-connection server daemon (46.62.141.104:62962). Jan 23 18:30:20.496997 sshd[4055]: Invalid user user from 46.62.141.104 port 62962 Jan 23 18:30:20.503594 sshd[4055]: Received disconnect from 46.62.141.104 port 62962:11: Bye Bye [preauth] Jan 23 18:30:20.503594 sshd[4055]: Disconnected from invalid user user 46.62.141.104 port 62962 [preauth] Jan 23 18:30:20.502000 audit[4055]: USER_ERR pid=4055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:20.508185 systemd[1]: sshd@312-46.62.141.192:22-46.62.141.104:62962.service: Deactivated successfully. Jan 23 18:30:20.507000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@312-46.62.141.192:22-46.62.141.104:62962 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:20.532000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@313-46.62.141.192:22-46.62.141.104:62963 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:20.533841 systemd[1]: Started sshd@313-46.62.141.192:22-46.62.141.104:62963.service - OpenSSH per-connection server daemon (46.62.141.104:62963). Jan 23 18:30:20.590617 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:30:20.589996Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"84afc9f0d5e63dd5 is starting a new election at term 3"} Jan 23 18:30:20.590617 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:30:20.590046Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"84afc9f0d5e63dd5 became pre-candidate at term 3"} Jan 23 18:30:20.590617 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:30:20.590064Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"84afc9f0d5e63dd5 received MsgPreVoteResp from 84afc9f0d5e63dd5 at term 3"} Jan 23 18:30:20.590617 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:30:20.590085Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"84afc9f0d5e63dd5 [logterm: 3, index: 12] sent MsgPreVote request to 15eb2e9460fb69a5 at term 3"} Jan 23 18:30:20.590617 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:30:20.590097Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"84afc9f0d5e63dd5 [logterm: 3, index: 12] sent MsgPreVote request to 5e70f16e3d77e6b8 at term 3"} Jan 23 18:30:20.657724 sshd[4061]: Invalid user user2 from 46.62.141.104 port 62963 Jan 23 18:30:20.664746 sshd[4061]: Received disconnect from 46.62.141.104 port 62963:11: Bye Bye [preauth] Jan 23 18:30:20.664746 sshd[4061]: Disconnected from invalid user user2 46.62.141.104 port 62963 [preauth] Jan 23 18:30:20.663000 audit[4061]: USER_ERR pid=4061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:20.669375 systemd[1]: sshd@313-46.62.141.192:22-46.62.141.104:62963.service: Deactivated successfully. Jan 23 18:30:20.668000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@313-46.62.141.192:22-46.62.141.104:62963 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:20.692000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@314-46.62.141.192:22-46.62.141.104:62966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:20.693729 systemd[1]: Started sshd@314-46.62.141.192:22-46.62.141.104:62966.service - OpenSSH per-connection server daemon (46.62.141.104:62966). Jan 23 18:30:20.807646 sshd[4067]: Received disconnect from 46.62.141.104 port 62966:11: Bye Bye [preauth] Jan 23 18:30:20.807646 sshd[4067]: Disconnected from authenticating user root 46.62.141.104 port 62966 [preauth] Jan 23 18:30:20.806000 audit[4067]: USER_ERR pid=4067 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:20.812098 systemd[1]: sshd@314-46.62.141.192:22-46.62.141.104:62966.service: Deactivated successfully. Jan 23 18:30:20.811000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@314-46.62.141.192:22-46.62.141.104:62966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:20.838000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@315-46.62.141.192:22-46.62.141.104:62967 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:20.839553 systemd[1]: Started sshd@315-46.62.141.192:22-46.62.141.104:62967.service - OpenSSH per-connection server daemon (46.62.141.104:62967). Jan 23 18:30:20.961656 sshd[4073]: Invalid user admin from 46.62.141.104 port 62967 Jan 23 18:30:20.969089 sshd[4073]: Received disconnect from 46.62.141.104 port 62967:11: Bye Bye [preauth] Jan 23 18:30:20.969089 sshd[4073]: Disconnected from invalid user admin 46.62.141.104 port 62967 [preauth] Jan 23 18:30:20.968000 audit[4073]: USER_ERR pid=4073 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:20.973207 systemd[1]: sshd@315-46.62.141.192:22-46.62.141.104:62967.service: Deactivated successfully. Jan 23 18:30:20.979495 kernel: kauditd_printk_skb: 90 callbacks suppressed Jan 23 18:30:20.979630 kernel: audit: type=1131 audit(1769193020.972:1132): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@315-46.62.141.192:22-46.62.141.104:62967 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:20.972000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@315-46.62.141.192:22-46.62.141.104:62967 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:21.007429 systemd[1]: Started sshd@316-46.62.141.192:22-46.62.141.104:62970.service - OpenSSH per-connection server daemon (46.62.141.104:62970). Jan 23 18:30:21.006000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@316-46.62.141.192:22-46.62.141.104:62970 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:21.021342 kernel: audit: type=1130 audit(1769193021.006:1133): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@316-46.62.141.192:22-46.62.141.104:62970 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:21.129250 sshd[4079]: Invalid user user from 46.62.141.104 port 62970 Jan 23 18:30:21.135807 sshd[4079]: Received disconnect from 46.62.141.104 port 62970:11: Bye Bye [preauth] Jan 23 18:30:21.135807 sshd[4079]: Disconnected from invalid user user 46.62.141.104 port 62970 [preauth] Jan 23 18:30:21.134000 audit[4079]: USER_ERR pid=4079 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:21.138411 systemd[1]: sshd@316-46.62.141.192:22-46.62.141.104:62970.service: Deactivated successfully. Jan 23 18:30:21.137000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@316-46.62.141.192:22-46.62.141.104:62970 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:21.153415 kernel: audit: type=1109 audit(1769193021.134:1134): pid=4079 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:21.153483 kernel: audit: type=1131 audit(1769193021.137:1135): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@316-46.62.141.192:22-46.62.141.104:62970 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:21.171000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@317-46.62.141.192:22-46.62.141.104:62971 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:21.172924 systemd[1]: Started sshd@317-46.62.141.192:22-46.62.141.104:62971.service - OpenSSH per-connection server daemon (46.62.141.104:62971). Jan 23 18:30:21.187343 kernel: audit: type=1130 audit(1769193021.171:1136): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@317-46.62.141.192:22-46.62.141.104:62971 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:21.289988 sshd[4085]: Invalid user user2 from 46.62.141.104 port 62971 Jan 23 18:30:21.297379 sshd[4085]: Received disconnect from 46.62.141.104 port 62971:11: Bye Bye [preauth] Jan 23 18:30:21.297379 sshd[4085]: Disconnected from invalid user user2 46.62.141.104 port 62971 [preauth] Jan 23 18:30:21.296000 audit[4085]: USER_ERR pid=4085 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:21.301000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@317-46.62.141.192:22-46.62.141.104:62971 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:21.301991 systemd[1]: sshd@317-46.62.141.192:22-46.62.141.104:62971.service: Deactivated successfully. Jan 23 18:30:21.313216 kernel: audit: type=1109 audit(1769193021.296:1137): pid=4085 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:21.313353 kernel: audit: type=1131 audit(1769193021.301:1138): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@317-46.62.141.192:22-46.62.141.104:62971 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:21.330000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@318-46.62.141.192:22-46.62.141.104:62976 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:21.331826 systemd[1]: Started sshd@318-46.62.141.192:22-46.62.141.104:62976.service - OpenSSH per-connection server daemon (46.62.141.104:62976). Jan 23 18:30:21.345346 kernel: audit: type=1130 audit(1769193021.330:1139): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@318-46.62.141.192:22-46.62.141.104:62976 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:21.511787 sshd[4091]: Received disconnect from 46.62.141.104 port 62976:11: Bye Bye [preauth] Jan 23 18:30:21.511787 sshd[4091]: Disconnected from authenticating user root 46.62.141.104 port 62976 [preauth] Jan 23 18:30:21.511000 audit[4091]: USER_ERR pid=4091 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:21.516207 systemd[1]: sshd@318-46.62.141.192:22-46.62.141.104:62976.service: Deactivated successfully. Jan 23 18:30:21.515000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@318-46.62.141.192:22-46.62.141.104:62976 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:21.530335 kernel: audit: type=1109 audit(1769193021.511:1140): pid=4091 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:21.530428 kernel: audit: type=1131 audit(1769193021.515:1141): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@318-46.62.141.192:22-46.62.141.104:62976 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:21.546000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@319-46.62.141.192:22-46.62.141.104:62977 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:21.547706 systemd[1]: Started sshd@319-46.62.141.192:22-46.62.141.104:62977.service - OpenSSH per-connection server daemon (46.62.141.104:62977). Jan 23 18:30:21.671916 sshd[4097]: Invalid user admin from 46.62.141.104 port 62977 Jan 23 18:30:21.681591 sshd[4097]: Received disconnect from 46.62.141.104 port 62977:11: Bye Bye [preauth] Jan 23 18:30:21.681591 sshd[4097]: Disconnected from invalid user admin 46.62.141.104 port 62977 [preauth] Jan 23 18:30:21.680000 audit[4097]: USER_ERR pid=4097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:21.686327 systemd[1]: sshd@319-46.62.141.192:22-46.62.141.104:62977.service: Deactivated successfully. Jan 23 18:30:21.685000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@319-46.62.141.192:22-46.62.141.104:62977 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:21.708000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@320-46.62.141.192:22-46.62.141.104:62982 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:21.709453 systemd[1]: Started sshd@320-46.62.141.192:22-46.62.141.104:62982.service - OpenSSH per-connection server daemon (46.62.141.104:62982). Jan 23 18:30:21.829986 sshd[4103]: Invalid user user from 46.62.141.104 port 62982 Jan 23 18:30:21.836602 sshd[4103]: Received disconnect from 46.62.141.104 port 62982:11: Bye Bye [preauth] Jan 23 18:30:21.836602 sshd[4103]: Disconnected from invalid user user 46.62.141.104 port 62982 [preauth] Jan 23 18:30:21.835000 audit[4103]: USER_ERR pid=4103 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:21.840632 systemd[1]: sshd@320-46.62.141.192:22-46.62.141.104:62982.service: Deactivated successfully. Jan 23 18:30:21.839000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@320-46.62.141.192:22-46.62.141.104:62982 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:21.860000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@321-46.62.141.192:22-46.62.141.104:62983 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:21.861462 systemd[1]: Started sshd@321-46.62.141.192:22-46.62.141.104:62983.service - OpenSSH per-connection server daemon (46.62.141.104:62983). Jan 23 18:30:21.983047 sshd[4109]: Invalid user user2 from 46.62.141.104 port 62983 Jan 23 18:30:21.989745 sshd[4109]: Received disconnect from 46.62.141.104 port 62983:11: Bye Bye [preauth] Jan 23 18:30:21.989745 sshd[4109]: Disconnected from invalid user user2 46.62.141.104 port 62983 [preauth] Jan 23 18:30:21.988000 audit[4109]: USER_ERR pid=4109 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:21.991390 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:30:21.990783Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"84afc9f0d5e63dd5 is starting a new election at term 3"} Jan 23 18:30:21.991390 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:30:21.990832Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"84afc9f0d5e63dd5 became pre-candidate at term 3"} Jan 23 18:30:21.991390 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:30:21.990851Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"84afc9f0d5e63dd5 received MsgPreVoteResp from 84afc9f0d5e63dd5 at term 3"} Jan 23 18:30:21.991390 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:30:21.990872Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"84afc9f0d5e63dd5 [logterm: 3, index: 12] sent MsgPreVote request to 15eb2e9460fb69a5 at term 3"} Jan 23 18:30:21.991390 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:30:21.990884Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"84afc9f0d5e63dd5 [logterm: 3, index: 12] sent MsgPreVote request to 5e70f16e3d77e6b8 at term 3"} Jan 23 18:30:21.992810 systemd[1]: sshd@321-46.62.141.192:22-46.62.141.104:62983.service: Deactivated successfully. Jan 23 18:30:21.992000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@321-46.62.141.192:22-46.62.141.104:62983 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:22.021000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@322-46.62.141.192:22-46.62.141.104:62986 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:22.022653 systemd[1]: Started sshd@322-46.62.141.192:22-46.62.141.104:62986.service - OpenSSH per-connection server daemon (46.62.141.104:62986). Jan 23 18:30:22.140935 sshd[4115]: Received disconnect from 46.62.141.104 port 62986:11: Bye Bye [preauth] Jan 23 18:30:22.140935 sshd[4115]: Disconnected from authenticating user root 46.62.141.104 port 62986 [preauth] Jan 23 18:30:22.139000 audit[4115]: USER_ERR pid=4115 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:22.144607 systemd[1]: sshd@322-46.62.141.192:22-46.62.141.104:62986.service: Deactivated successfully. Jan 23 18:30:22.143000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@322-46.62.141.192:22-46.62.141.104:62986 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:22.167000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@323-46.62.141.192:22-46.62.141.104:62987 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:22.168694 systemd[1]: Started sshd@323-46.62.141.192:22-46.62.141.104:62987.service - OpenSSH per-connection server daemon (46.62.141.104:62987). Jan 23 18:30:22.288835 sshd[4121]: Invalid user admin from 46.62.141.104 port 62987 Jan 23 18:30:22.297817 sshd[4121]: Received disconnect from 46.62.141.104 port 62987:11: Bye Bye [preauth] Jan 23 18:30:22.297817 sshd[4121]: Disconnected from invalid user admin 46.62.141.104 port 62987 [preauth] Jan 23 18:30:22.297000 audit[4121]: USER_ERR pid=4121 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:22.302961 systemd[1]: sshd@323-46.62.141.192:22-46.62.141.104:62987.service: Deactivated successfully. Jan 23 18:30:22.302000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@323-46.62.141.192:22-46.62.141.104:62987 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:22.323000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@324-46.62.141.192:22-46.62.141.104:62989 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:22.324515 systemd[1]: Started sshd@324-46.62.141.192:22-46.62.141.104:62989.service - OpenSSH per-connection server daemon (46.62.141.104:62989). Jan 23 18:30:22.448963 sshd[4127]: Invalid user user from 46.62.141.104 port 62989 Jan 23 18:30:22.456318 sshd[4127]: Received disconnect from 46.62.141.104 port 62989:11: Bye Bye [preauth] Jan 23 18:30:22.456318 sshd[4127]: Disconnected from invalid user user 46.62.141.104 port 62989 [preauth] Jan 23 18:30:22.455000 audit[4127]: USER_ERR pid=4127 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:22.460203 systemd[1]: sshd@324-46.62.141.192:22-46.62.141.104:62989.service: Deactivated successfully. Jan 23 18:30:22.459000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@324-46.62.141.192:22-46.62.141.104:62989 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:22.479000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@325-46.62.141.192:22-46.62.141.104:62992 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:22.480621 systemd[1]: Started sshd@325-46.62.141.192:22-46.62.141.104:62992.service - OpenSSH per-connection server daemon (46.62.141.104:62992). Jan 23 18:30:22.596957 sshd[4133]: Invalid user user2 from 46.62.141.104 port 62992 Jan 23 18:30:22.603822 sshd[4133]: Received disconnect from 46.62.141.104 port 62992:11: Bye Bye [preauth] Jan 23 18:30:22.603822 sshd[4133]: Disconnected from invalid user user2 46.62.141.104 port 62992 [preauth] Jan 23 18:30:22.602000 audit[4133]: USER_ERR pid=4133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:22.607746 systemd[1]: sshd@325-46.62.141.192:22-46.62.141.104:62992.service: Deactivated successfully. Jan 23 18:30:22.607000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@325-46.62.141.192:22-46.62.141.104:62992 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:22.631000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@326-46.62.141.192:22-46.62.141.104:62993 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:22.632696 systemd[1]: Started sshd@326-46.62.141.192:22-46.62.141.104:62993.service - OpenSSH per-connection server daemon (46.62.141.104:62993). Jan 23 18:30:22.754344 sshd[4139]: Received disconnect from 46.62.141.104 port 62993:11: Bye Bye [preauth] Jan 23 18:30:22.754344 sshd[4139]: Disconnected from authenticating user root 46.62.141.104 port 62993 [preauth] Jan 23 18:30:22.753000 audit[4139]: USER_ERR pid=4139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:22.758098 systemd[1]: sshd@326-46.62.141.192:22-46.62.141.104:62993.service: Deactivated successfully. Jan 23 18:30:22.757000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@326-46.62.141.192:22-46.62.141.104:62993 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:22.783509 systemd[1]: Started sshd@327-46.62.141.192:22-46.62.141.104:62996.service - OpenSSH per-connection server daemon (46.62.141.104:62996). Jan 23 18:30:22.782000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@327-46.62.141.192:22-46.62.141.104:62996 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:22.915815 sshd[4145]: Invalid user admin from 46.62.141.104 port 62996 Jan 23 18:30:22.922405 sshd[4145]: Received disconnect from 46.62.141.104 port 62996:11: Bye Bye [preauth] Jan 23 18:30:22.922405 sshd[4145]: Disconnected from invalid user admin 46.62.141.104 port 62996 [preauth] Jan 23 18:30:22.921000 audit[4145]: USER_ERR pid=4145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:22.926212 systemd[1]: sshd@327-46.62.141.192:22-46.62.141.104:62996.service: Deactivated successfully. Jan 23 18:30:22.925000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@327-46.62.141.192:22-46.62.141.104:62996 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:22.950000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@328-46.62.141.192:22-46.62.141.104:62997 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:22.951641 systemd[1]: Started sshd@328-46.62.141.192:22-46.62.141.104:62997.service - OpenSSH per-connection server daemon (46.62.141.104:62997). Jan 23 18:30:23.061056 sshd[4151]: Invalid user user from 46.62.141.104 port 62997 Jan 23 18:30:23.068331 sshd[4151]: Received disconnect from 46.62.141.104 port 62997:11: Bye Bye [preauth] Jan 23 18:30:23.068331 sshd[4151]: Disconnected from invalid user user 46.62.141.104 port 62997 [preauth] Jan 23 18:30:23.067000 audit[4151]: USER_ERR pid=4151 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:23.071207 systemd[1]: sshd@328-46.62.141.192:22-46.62.141.104:62997.service: Deactivated successfully. Jan 23 18:30:23.070000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@328-46.62.141.192:22-46.62.141.104:62997 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:23.094000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@329-46.62.141.192:22-46.62.141.104:63000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:23.095321 systemd[1]: Started sshd@329-46.62.141.192:22-46.62.141.104:63000.service - OpenSSH per-connection server daemon (46.62.141.104:63000). Jan 23 18:30:23.217668 sshd[4157]: Invalid user user2 from 46.62.141.104 port 63000 Jan 23 18:30:23.224163 sshd[4157]: Received disconnect from 46.62.141.104 port 63000:11: Bye Bye [preauth] Jan 23 18:30:23.224163 sshd[4157]: Disconnected from invalid user user2 46.62.141.104 port 63000 [preauth] Jan 23 18:30:23.223000 audit[4157]: USER_ERR pid=4157 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:23.228011 systemd[1]: sshd@329-46.62.141.192:22-46.62.141.104:63000.service: Deactivated successfully. Jan 23 18:30:23.227000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@329-46.62.141.192:22-46.62.141.104:63000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:23.247000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@330-46.62.141.192:22-46.62.141.104:63001 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:23.248586 systemd[1]: Started sshd@330-46.62.141.192:22-46.62.141.104:63001.service - OpenSSH per-connection server daemon (46.62.141.104:63001). Jan 23 18:30:23.374102 sshd[4163]: Received disconnect from 46.62.141.104 port 63001:11: Bye Bye [preauth] Jan 23 18:30:23.374102 sshd[4163]: Disconnected from authenticating user root 46.62.141.104 port 63001 [preauth] Jan 23 18:30:23.373000 audit[4163]: USER_ERR pid=4163 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:23.379333 systemd[1]: sshd@330-46.62.141.192:22-46.62.141.104:63001.service: Deactivated successfully. Jan 23 18:30:23.378000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@330-46.62.141.192:22-46.62.141.104:63001 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:23.391198 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:30:23.390481Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"84afc9f0d5e63dd5 is starting a new election at term 3"} Jan 23 18:30:23.391198 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:30:23.390549Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"84afc9f0d5e63dd5 became pre-candidate at term 3"} Jan 23 18:30:23.391198 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:30:23.390575Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"84afc9f0d5e63dd5 received MsgPreVoteResp from 84afc9f0d5e63dd5 at term 3"} Jan 23 18:30:23.391198 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:30:23.390605Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"84afc9f0d5e63dd5 [logterm: 3, index: 12] sent MsgPreVote request to 15eb2e9460fb69a5 at term 3"} Jan 23 18:30:23.391198 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:30:23.390751Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"84afc9f0d5e63dd5 [logterm: 3, index: 12] sent MsgPreVote request to 5e70f16e3d77e6b8 at term 3"} Jan 23 18:30:23.403000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@331-46.62.141.192:22-46.62.141.104:63006 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:23.404484 systemd[1]: Started sshd@331-46.62.141.192:22-46.62.141.104:63006.service - OpenSSH per-connection server daemon (46.62.141.104:63006). Jan 23 18:30:23.525012 sshd[4169]: Invalid user admin from 46.62.141.104 port 63006 Jan 23 18:30:23.532227 sshd[4169]: Received disconnect from 46.62.141.104 port 63006:11: Bye Bye [preauth] Jan 23 18:30:23.532227 sshd[4169]: Disconnected from invalid user admin 46.62.141.104 port 63006 [preauth] Jan 23 18:30:23.531000 audit[4169]: USER_ERR pid=4169 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:23.536091 systemd[1]: sshd@331-46.62.141.192:22-46.62.141.104:63006.service: Deactivated successfully. Jan 23 18:30:23.535000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@331-46.62.141.192:22-46.62.141.104:63006 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:23.558209 systemd[1]: Started sshd@332-46.62.141.192:22-46.62.141.104:63007.service - OpenSSH per-connection server daemon (46.62.141.104:63007). Jan 23 18:30:23.557000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@332-46.62.141.192:22-46.62.141.104:63007 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:23.672791 sshd[4175]: Invalid user user from 46.62.141.104 port 63007 Jan 23 18:30:23.679605 sshd[4175]: Received disconnect from 46.62.141.104 port 63007:11: Bye Bye [preauth] Jan 23 18:30:23.679605 sshd[4175]: Disconnected from invalid user user 46.62.141.104 port 63007 [preauth] Jan 23 18:30:23.678000 audit[4175]: USER_ERR pid=4175 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:23.684192 systemd[1]: sshd@332-46.62.141.192:22-46.62.141.104:63007.service: Deactivated successfully. Jan 23 18:30:23.683000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@332-46.62.141.192:22-46.62.141.104:63007 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:23.710000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@333-46.62.141.192:22-46.62.141.104:63008 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:23.711505 systemd[1]: Started sshd@333-46.62.141.192:22-46.62.141.104:63008.service - OpenSSH per-connection server daemon (46.62.141.104:63008). Jan 23 18:30:23.819725 sshd[4181]: Invalid user user2 from 46.62.141.104 port 63008 Jan 23 18:30:23.826631 sshd[4181]: Received disconnect from 46.62.141.104 port 63008:11: Bye Bye [preauth] Jan 23 18:30:23.826631 sshd[4181]: Disconnected from invalid user user2 46.62.141.104 port 63008 [preauth] Jan 23 18:30:23.825000 audit[4181]: USER_ERR pid=4181 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:23.830407 systemd[1]: sshd@333-46.62.141.192:22-46.62.141.104:63008.service: Deactivated successfully. Jan 23 18:30:23.829000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@333-46.62.141.192:22-46.62.141.104:63008 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:23.852000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@334-46.62.141.192:22-46.62.141.104:63012 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:23.853927 systemd[1]: Started sshd@334-46.62.141.192:22-46.62.141.104:63012.service - OpenSSH per-connection server daemon (46.62.141.104:63012). Jan 23 18:30:23.907952 etcd-wrapper[1931]: {"level":"warn","ts":"2026-01-23T18:30:23.907588Z","caller":"rafthttp/probing_status.go:68","msg":"prober detected unhealthy status","round-tripper-name":"ROUND_TRIPPER_RAFT_MESSAGE","remote-peer-id":"5e70f16e3d77e6b8","rtt":"1.643291ms","error":"dial tcp 10.0.0.2:2380: i/o timeout"} Jan 23 18:30:23.910138 etcd-wrapper[1931]: {"level":"warn","ts":"2026-01-23T18:30:23.909877Z","caller":"rafthttp/probing_status.go:68","msg":"prober detected unhealthy status","round-tripper-name":"ROUND_TRIPPER_RAFT_MESSAGE","remote-peer-id":"15eb2e9460fb69a5","rtt":"736.265µs","error":"dial tcp 10.0.0.3:2380: i/o timeout"} Jan 23 18:30:23.972326 sshd[4187]: Received disconnect from 46.62.141.104 port 63012:11: Bye Bye [preauth] Jan 23 18:30:23.972326 sshd[4187]: Disconnected from authenticating user root 46.62.141.104 port 63012 [preauth] Jan 23 18:30:23.971000 audit[4187]: USER_ERR pid=4187 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:23.975682 systemd[1]: sshd@334-46.62.141.192:22-46.62.141.104:63012.service: Deactivated successfully. Jan 23 18:30:23.975000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@334-46.62.141.192:22-46.62.141.104:63012 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:23.999680 systemd[1]: Started sshd@335-46.62.141.192:22-46.62.141.104:63013.service - OpenSSH per-connection server daemon (46.62.141.104:63013). Jan 23 18:30:23.998000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@335-46.62.141.192:22-46.62.141.104:63013 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:24.125528 sshd[4193]: Invalid user admin from 46.62.141.104 port 63013 Jan 23 18:30:24.132199 sshd[4193]: Received disconnect from 46.62.141.104 port 63013:11: Bye Bye [preauth] Jan 23 18:30:24.132199 sshd[4193]: Disconnected from invalid user admin 46.62.141.104 port 63013 [preauth] Jan 23 18:30:24.131000 audit[4193]: USER_ERR pid=4193 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:24.136382 systemd[1]: sshd@335-46.62.141.192:22-46.62.141.104:63013.service: Deactivated successfully. Jan 23 18:30:24.135000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@335-46.62.141.192:22-46.62.141.104:63013 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:24.160000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@336-46.62.141.192:22-46.62.141.104:63016 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:24.161969 systemd[1]: Started sshd@336-46.62.141.192:22-46.62.141.104:63016.service - OpenSSH per-connection server daemon (46.62.141.104:63016). Jan 23 18:30:24.287908 sshd[4199]: Invalid user user from 46.62.141.104 port 63016 Jan 23 18:30:24.295447 sshd[4199]: Received disconnect from 46.62.141.104 port 63016:11: Bye Bye [preauth] Jan 23 18:30:24.295447 sshd[4199]: Disconnected from invalid user user 46.62.141.104 port 63016 [preauth] Jan 23 18:30:24.294000 audit[4199]: USER_ERR pid=4199 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:24.299398 systemd[1]: sshd@336-46.62.141.192:22-46.62.141.104:63016.service: Deactivated successfully. Jan 23 18:30:24.298000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@336-46.62.141.192:22-46.62.141.104:63016 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:24.326000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@337-46.62.141.192:22-46.62.141.104:63017 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:24.327753 systemd[1]: Started sshd@337-46.62.141.192:22-46.62.141.104:63017.service - OpenSSH per-connection server daemon (46.62.141.104:63017). Jan 23 18:30:24.446900 sshd[4205]: Invalid user user2 from 46.62.141.104 port 63017 Jan 23 18:30:24.459594 sshd[4205]: Received disconnect from 46.62.141.104 port 63017:11: Bye Bye [preauth] Jan 23 18:30:24.459594 sshd[4205]: Disconnected from invalid user user2 46.62.141.104 port 63017 [preauth] Jan 23 18:30:24.458000 audit[4205]: USER_ERR pid=4205 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:24.464750 systemd[1]: sshd@337-46.62.141.192:22-46.62.141.104:63017.service: Deactivated successfully. Jan 23 18:30:24.464000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@337-46.62.141.192:22-46.62.141.104:63017 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:24.487000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@338-46.62.141.192:22-46.62.141.104:63020 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:24.488938 systemd[1]: Started sshd@338-46.62.141.192:22-46.62.141.104:63020.service - OpenSSH per-connection server daemon (46.62.141.104:63020). Jan 23 18:30:24.611000 audit[4211]: USER_ERR pid=4211 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:24.613556 sshd[4211]: Received disconnect from 46.62.141.104 port 63020:11: Bye Bye [preauth] Jan 23 18:30:24.613556 sshd[4211]: Disconnected from authenticating user root 46.62.141.104 port 63020 [preauth] Jan 23 18:30:24.617397 systemd[1]: sshd@338-46.62.141.192:22-46.62.141.104:63020.service: Deactivated successfully. Jan 23 18:30:24.616000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@338-46.62.141.192:22-46.62.141.104:63020 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:24.643000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@339-46.62.141.192:22-46.62.141.104:63021 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:24.644068 systemd[1]: Started sshd@339-46.62.141.192:22-46.62.141.104:63021.service - OpenSSH per-connection server daemon (46.62.141.104:63021). Jan 23 18:30:24.758521 sshd[4217]: Invalid user admin from 46.62.141.104 port 63021 Jan 23 18:30:24.765194 sshd[4217]: Received disconnect from 46.62.141.104 port 63021:11: Bye Bye [preauth] Jan 23 18:30:24.765194 sshd[4217]: Disconnected from invalid user admin 46.62.141.104 port 63021 [preauth] Jan 23 18:30:24.764000 audit[4217]: USER_ERR pid=4217 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:24.769668 systemd[1]: sshd@339-46.62.141.192:22-46.62.141.104:63021.service: Deactivated successfully. Jan 23 18:30:24.769000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@339-46.62.141.192:22-46.62.141.104:63021 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:24.790630 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:30:24.790088Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"84afc9f0d5e63dd5 is starting a new election at term 3"} Jan 23 18:30:24.790630 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:30:24.790137Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"84afc9f0d5e63dd5 became pre-candidate at term 3"} Jan 23 18:30:24.790630 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:30:24.790155Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"84afc9f0d5e63dd5 received MsgPreVoteResp from 84afc9f0d5e63dd5 at term 3"} Jan 23 18:30:24.790630 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:30:24.790176Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"84afc9f0d5e63dd5 [logterm: 3, index: 12] sent MsgPreVote request to 15eb2e9460fb69a5 at term 3"} Jan 23 18:30:24.790630 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:30:24.790188Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"84afc9f0d5e63dd5 [logterm: 3, index: 12] sent MsgPreVote request to 5e70f16e3d77e6b8 at term 3"} Jan 23 18:30:24.791000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@340-46.62.141.192:22-46.62.141.104:63023 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:24.792818 systemd[1]: Started sshd@340-46.62.141.192:22-46.62.141.104:63023.service - OpenSSH per-connection server daemon (46.62.141.104:63023). Jan 23 18:30:24.916319 sshd[4223]: Invalid user user from 46.62.141.104 port 63023 Jan 23 18:30:24.923660 sshd[4223]: Received disconnect from 46.62.141.104 port 63023:11: Bye Bye [preauth] Jan 23 18:30:24.923660 sshd[4223]: Disconnected from invalid user user 46.62.141.104 port 63023 [preauth] Jan 23 18:30:24.922000 audit[4223]: USER_ERR pid=4223 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:24.928240 systemd[1]: sshd@340-46.62.141.192:22-46.62.141.104:63023.service: Deactivated successfully. Jan 23 18:30:24.927000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@340-46.62.141.192:22-46.62.141.104:63023 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:24.958000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@341-46.62.141.192:22-46.62.141.104:63025 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:24.959685 systemd[1]: Started sshd@341-46.62.141.192:22-46.62.141.104:63025.service - OpenSSH per-connection server daemon (46.62.141.104:63025). Jan 23 18:30:25.082372 sshd[4229]: Invalid user user2 from 46.62.141.104 port 63025 Jan 23 18:30:25.094173 sshd[4229]: Received disconnect from 46.62.141.104 port 63025:11: Bye Bye [preauth] Jan 23 18:30:25.094173 sshd[4229]: Disconnected from invalid user user2 46.62.141.104 port 63025 [preauth] Jan 23 18:30:25.094000 audit[4229]: USER_ERR pid=4229 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:25.099583 systemd[1]: sshd@341-46.62.141.192:22-46.62.141.104:63025.service: Deactivated successfully. Jan 23 18:30:25.098000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@341-46.62.141.192:22-46.62.141.104:63025 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:25.123000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@342-46.62.141.192:22-46.62.141.104:63026 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:25.124455 systemd[1]: Started sshd@342-46.62.141.192:22-46.62.141.104:63026.service - OpenSSH per-connection server daemon (46.62.141.104:63026). Jan 23 18:30:25.253960 sshd[4235]: Received disconnect from 46.62.141.104 port 63026:11: Bye Bye [preauth] Jan 23 18:30:25.253960 sshd[4235]: Disconnected from authenticating user root 46.62.141.104 port 63026 [preauth] Jan 23 18:30:25.252000 audit[4235]: USER_ERR pid=4235 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:25.259257 systemd[1]: sshd@342-46.62.141.192:22-46.62.141.104:63026.service: Deactivated successfully. Jan 23 18:30:25.258000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@342-46.62.141.192:22-46.62.141.104:63026 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:25.285775 systemd[1]: Started sshd@343-46.62.141.192:22-46.62.141.104:63029.service - OpenSSH per-connection server daemon (46.62.141.104:63029). Jan 23 18:30:25.284000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@343-46.62.141.192:22-46.62.141.104:63029 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:25.406825 sshd[4241]: Invalid user admin from 46.62.141.104 port 63029 Jan 23 18:30:25.413644 sshd[4241]: Received disconnect from 46.62.141.104 port 63029:11: Bye Bye [preauth] Jan 23 18:30:25.413644 sshd[4241]: Disconnected from invalid user admin 46.62.141.104 port 63029 [preauth] Jan 23 18:30:25.412000 audit[4241]: USER_ERR pid=4241 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:25.417634 systemd[1]: sshd@343-46.62.141.192:22-46.62.141.104:63029.service: Deactivated successfully. Jan 23 18:30:25.416000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@343-46.62.141.192:22-46.62.141.104:63029 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:25.443000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@344-46.62.141.192:22-46.62.141.104:63030 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:25.444676 systemd[1]: Started sshd@344-46.62.141.192:22-46.62.141.104:63030.service - OpenSSH per-connection server daemon (46.62.141.104:63030). Jan 23 18:30:25.563656 sshd[4247]: Invalid user user from 46.62.141.104 port 63030 Jan 23 18:30:25.570463 sshd[4247]: Received disconnect from 46.62.141.104 port 63030:11: Bye Bye [preauth] Jan 23 18:30:25.570463 sshd[4247]: Disconnected from invalid user user 46.62.141.104 port 63030 [preauth] Jan 23 18:30:25.569000 audit[4247]: USER_ERR pid=4247 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:25.573520 systemd[1]: sshd@344-46.62.141.192:22-46.62.141.104:63030.service: Deactivated successfully. Jan 23 18:30:25.572000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@344-46.62.141.192:22-46.62.141.104:63030 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:25.593000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@345-46.62.141.192:22-46.62.141.104:63033 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:25.595017 systemd[1]: Started sshd@345-46.62.141.192:22-46.62.141.104:63033.service - OpenSSH per-connection server daemon (46.62.141.104:63033). Jan 23 18:30:25.722390 sshd[4253]: Invalid user user2 from 46.62.141.104 port 63033 Jan 23 18:30:25.729394 sshd[4253]: Received disconnect from 46.62.141.104 port 63033:11: Bye Bye [preauth] Jan 23 18:30:25.729394 sshd[4253]: Disconnected from invalid user user2 46.62.141.104 port 63033 [preauth] Jan 23 18:30:25.728000 audit[4253]: USER_ERR pid=4253 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:25.732986 systemd[1]: sshd@345-46.62.141.192:22-46.62.141.104:63033.service: Deactivated successfully. Jan 23 18:30:25.732000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@345-46.62.141.192:22-46.62.141.104:63033 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:25.754000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@346-46.62.141.192:22-46.62.141.104:63034 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:25.755250 systemd[1]: Started sshd@346-46.62.141.192:22-46.62.141.104:63034.service - OpenSSH per-connection server daemon (46.62.141.104:63034). Jan 23 18:30:25.875604 sshd[4259]: Received disconnect from 46.62.141.104 port 63034:11: Bye Bye [preauth] Jan 23 18:30:25.875604 sshd[4259]: Disconnected from authenticating user root 46.62.141.104 port 63034 [preauth] Jan 23 18:30:25.874000 audit[4259]: USER_ERR pid=4259 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:25.879378 systemd[1]: sshd@346-46.62.141.192:22-46.62.141.104:63034.service: Deactivated successfully. Jan 23 18:30:25.878000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@346-46.62.141.192:22-46.62.141.104:63034 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:25.903000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@347-46.62.141.192:22-46.62.141.104:63037 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:25.904704 systemd[1]: Started sshd@347-46.62.141.192:22-46.62.141.104:63037.service - OpenSSH per-connection server daemon (46.62.141.104:63037). Jan 23 18:30:26.032247 sshd[4265]: Invalid user admin from 46.62.141.104 port 63037 Jan 23 18:30:26.039103 sshd[4265]: Received disconnect from 46.62.141.104 port 63037:11: Bye Bye [preauth] Jan 23 18:30:26.039103 sshd[4265]: Disconnected from invalid user admin 46.62.141.104 port 63037 [preauth] Jan 23 18:30:26.037000 audit[4265]: USER_ERR pid=4265 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:26.042757 kernel: kauditd_printk_skb: 85 callbacks suppressed Jan 23 18:30:26.042826 kernel: audit: type=1109 audit(1769193026.037:1227): pid=4265 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:26.045041 systemd[1]: sshd@347-46.62.141.192:22-46.62.141.104:63037.service: Deactivated successfully. Jan 23 18:30:26.044000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@347-46.62.141.192:22-46.62.141.104:63037 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:26.058124 kernel: audit: type=1131 audit(1769193026.044:1228): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@347-46.62.141.192:22-46.62.141.104:63037 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:26.081000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@348-46.62.141.192:22-46.62.141.104:63038 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:26.082619 systemd[1]: Started sshd@348-46.62.141.192:22-46.62.141.104:63038.service - OpenSSH per-connection server daemon (46.62.141.104:63038). Jan 23 18:30:26.095359 kernel: audit: type=1130 audit(1769193026.081:1229): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@348-46.62.141.192:22-46.62.141.104:63038 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:26.191584 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:30:26.190601Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"84afc9f0d5e63dd5 is starting a new election at term 3"} Jan 23 18:30:26.191584 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:30:26.190654Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"84afc9f0d5e63dd5 became pre-candidate at term 3"} Jan 23 18:30:26.191584 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:30:26.190672Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"84afc9f0d5e63dd5 received MsgPreVoteResp from 84afc9f0d5e63dd5 at term 3"} Jan 23 18:30:26.191584 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:30:26.190693Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"84afc9f0d5e63dd5 [logterm: 3, index: 12] sent MsgPreVote request to 15eb2e9460fb69a5 at term 3"} Jan 23 18:30:26.191584 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:30:26.190705Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"84afc9f0d5e63dd5 [logterm: 3, index: 12] sent MsgPreVote request to 5e70f16e3d77e6b8 at term 3"} Jan 23 18:30:26.197990 sshd[4271]: Invalid user user from 46.62.141.104 port 63038 Jan 23 18:30:26.205020 sshd[4271]: Received disconnect from 46.62.141.104 port 63038:11: Bye Bye [preauth] Jan 23 18:30:26.205020 sshd[4271]: Disconnected from invalid user user 46.62.141.104 port 63038 [preauth] Jan 23 18:30:26.203000 audit[4271]: USER_ERR pid=4271 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:26.209301 systemd[1]: sshd@348-46.62.141.192:22-46.62.141.104:63038.service: Deactivated successfully. Jan 23 18:30:26.221561 kernel: audit: type=1109 audit(1769193026.203:1230): pid=4271 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:26.221667 kernel: audit: type=1131 audit(1769193026.207:1231): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@348-46.62.141.192:22-46.62.141.104:63038 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:26.207000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@348-46.62.141.192:22-46.62.141.104:63038 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:26.239000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@349-46.62.141.192:22-46.62.141.104:63042 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:26.240567 systemd[1]: Started sshd@349-46.62.141.192:22-46.62.141.104:63042.service - OpenSSH per-connection server daemon (46.62.141.104:63042). Jan 23 18:30:26.254344 kernel: audit: type=1130 audit(1769193026.239:1232): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@349-46.62.141.192:22-46.62.141.104:63042 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:26.352323 sshd[4277]: Invalid user user2 from 46.62.141.104 port 63042 Jan 23 18:30:26.358960 sshd[4277]: Received disconnect from 46.62.141.104 port 63042:11: Bye Bye [preauth] Jan 23 18:30:26.358960 sshd[4277]: Disconnected from invalid user user2 46.62.141.104 port 63042 [preauth] Jan 23 18:30:26.357000 audit[4277]: USER_ERR pid=4277 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:26.363367 systemd[1]: sshd@349-46.62.141.192:22-46.62.141.104:63042.service: Deactivated successfully. Jan 23 18:30:26.362000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@349-46.62.141.192:22-46.62.141.104:63042 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:26.375340 kernel: audit: type=1109 audit(1769193026.357:1233): pid=4277 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:26.375431 kernel: audit: type=1131 audit(1769193026.362:1234): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@349-46.62.141.192:22-46.62.141.104:63042 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:26.397000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@350-46.62.141.192:22-46.62.141.104:63043 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:26.398480 systemd[1]: Started sshd@350-46.62.141.192:22-46.62.141.104:63043.service - OpenSSH per-connection server daemon (46.62.141.104:63043). Jan 23 18:30:26.412339 kernel: audit: type=1130 audit(1769193026.397:1235): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@350-46.62.141.192:22-46.62.141.104:63043 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:26.514237 sshd[4283]: Received disconnect from 46.62.141.104 port 63043:11: Bye Bye [preauth] Jan 23 18:30:26.514237 sshd[4283]: Disconnected from authenticating user root 46.62.141.104 port 63043 [preauth] Jan 23 18:30:26.513000 audit[4283]: USER_ERR pid=4283 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:26.518359 systemd[1]: sshd@350-46.62.141.192:22-46.62.141.104:63043.service: Deactivated successfully. Jan 23 18:30:26.527473 kernel: audit: type=1109 audit(1769193026.513:1236): pid=4283 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:26.517000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@350-46.62.141.192:22-46.62.141.104:63043 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:26.544000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@351-46.62.141.192:22-46.62.141.104:63045 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:26.545228 systemd[1]: Started sshd@351-46.62.141.192:22-46.62.141.104:63045.service - OpenSSH per-connection server daemon (46.62.141.104:63045). Jan 23 18:30:26.668812 sshd[4289]: Invalid user admin from 46.62.141.104 port 63045 Jan 23 18:30:26.676096 sshd[4289]: Received disconnect from 46.62.141.104 port 63045:11: Bye Bye [preauth] Jan 23 18:30:26.676096 sshd[4289]: Disconnected from invalid user admin 46.62.141.104 port 63045 [preauth] Jan 23 18:30:26.675000 audit[4289]: USER_ERR pid=4289 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:26.680585 systemd[1]: sshd@351-46.62.141.192:22-46.62.141.104:63045.service: Deactivated successfully. Jan 23 18:30:26.680000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@351-46.62.141.192:22-46.62.141.104:63045 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:26.698000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@352-46.62.141.192:22-46.62.141.104:63048 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:26.699870 systemd[1]: Started sshd@352-46.62.141.192:22-46.62.141.104:63048.service - OpenSSH per-connection server daemon (46.62.141.104:63048). Jan 23 18:30:26.817886 sshd[4295]: Invalid user user from 46.62.141.104 port 63048 Jan 23 18:30:26.825878 sshd[4295]: Received disconnect from 46.62.141.104 port 63048:11: Bye Bye [preauth] Jan 23 18:30:26.825878 sshd[4295]: Disconnected from invalid user user 46.62.141.104 port 63048 [preauth] Jan 23 18:30:26.824000 audit[4295]: USER_ERR pid=4295 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:26.829961 systemd[1]: sshd@352-46.62.141.192:22-46.62.141.104:63048.service: Deactivated successfully. Jan 23 18:30:26.829000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@352-46.62.141.192:22-46.62.141.104:63048 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:26.852000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@353-46.62.141.192:22-46.62.141.104:63050 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:26.853526 systemd[1]: Started sshd@353-46.62.141.192:22-46.62.141.104:63050.service - OpenSSH per-connection server daemon (46.62.141.104:63050). Jan 23 18:30:26.973304 sshd[4301]: Invalid user user2 from 46.62.141.104 port 63050 Jan 23 18:30:26.980091 sshd[4301]: Received disconnect from 46.62.141.104 port 63050:11: Bye Bye [preauth] Jan 23 18:30:26.980091 sshd[4301]: Disconnected from invalid user user2 46.62.141.104 port 63050 [preauth] Jan 23 18:30:26.979000 audit[4301]: USER_ERR pid=4301 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:26.983795 systemd[1]: sshd@353-46.62.141.192:22-46.62.141.104:63050.service: Deactivated successfully. Jan 23 18:30:26.983000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@353-46.62.141.192:22-46.62.141.104:63050 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:27.007000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@354-46.62.141.192:22-46.62.141.104:63053 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:27.008320 systemd[1]: Started sshd@354-46.62.141.192:22-46.62.141.104:63053.service - OpenSSH per-connection server daemon (46.62.141.104:63053). Jan 23 18:30:27.134992 sshd[4307]: Received disconnect from 46.62.141.104 port 63053:11: Bye Bye [preauth] Jan 23 18:30:27.134992 sshd[4307]: Disconnected from authenticating user root 46.62.141.104 port 63053 [preauth] Jan 23 18:30:27.133000 audit[4307]: USER_ERR pid=4307 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:27.139291 systemd[1]: sshd@354-46.62.141.192:22-46.62.141.104:63053.service: Deactivated successfully. Jan 23 18:30:27.138000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@354-46.62.141.192:22-46.62.141.104:63053 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:27.167000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@355-46.62.141.192:22-46.62.141.104:63054 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:27.168365 systemd[1]: Started sshd@355-46.62.141.192:22-46.62.141.104:63054.service - OpenSSH per-connection server daemon (46.62.141.104:63054). Jan 23 18:30:27.293896 sshd[4313]: Invalid user admin from 46.62.141.104 port 63054 Jan 23 18:30:27.301617 sshd[4313]: Received disconnect from 46.62.141.104 port 63054:11: Bye Bye [preauth] Jan 23 18:30:27.301617 sshd[4313]: Disconnected from invalid user admin 46.62.141.104 port 63054 [preauth] Jan 23 18:30:27.300000 audit[4313]: USER_ERR pid=4313 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:27.305518 systemd[1]: sshd@355-46.62.141.192:22-46.62.141.104:63054.service: Deactivated successfully. Jan 23 18:30:27.304000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@355-46.62.141.192:22-46.62.141.104:63054 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:27.328000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@356-46.62.141.192:22-46.62.141.104:63057 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:27.329547 systemd[1]: Started sshd@356-46.62.141.192:22-46.62.141.104:63057.service - OpenSSH per-connection server daemon (46.62.141.104:63057). Jan 23 18:30:27.445597 sshd[4319]: Invalid user user from 46.62.141.104 port 63057 Jan 23 18:30:27.452907 sshd[4319]: Received disconnect from 46.62.141.104 port 63057:11: Bye Bye [preauth] Jan 23 18:30:27.452907 sshd[4319]: Disconnected from invalid user user 46.62.141.104 port 63057 [preauth] Jan 23 18:30:27.451000 audit[4319]: USER_ERR pid=4319 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:27.456905 systemd[1]: sshd@356-46.62.141.192:22-46.62.141.104:63057.service: Deactivated successfully. Jan 23 18:30:27.456000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@356-46.62.141.192:22-46.62.141.104:63057 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:27.481000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@357-46.62.141.192:22-46.62.141.104:63058 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:27.482805 systemd[1]: Started sshd@357-46.62.141.192:22-46.62.141.104:63058.service - OpenSSH per-connection server daemon (46.62.141.104:63058). Jan 23 18:30:27.591049 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:30:27.590462Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"84afc9f0d5e63dd5 is starting a new election at term 3"} Jan 23 18:30:27.591049 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:30:27.590519Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"84afc9f0d5e63dd5 became pre-candidate at term 3"} Jan 23 18:30:27.591049 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:30:27.590537Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"84afc9f0d5e63dd5 received MsgPreVoteResp from 84afc9f0d5e63dd5 at term 3"} Jan 23 18:30:27.591049 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:30:27.590562Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"84afc9f0d5e63dd5 [logterm: 3, index: 12] sent MsgPreVote request to 15eb2e9460fb69a5 at term 3"} Jan 23 18:30:27.591049 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:30:27.590576Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"84afc9f0d5e63dd5 [logterm: 3, index: 12] sent MsgPreVote request to 5e70f16e3d77e6b8 at term 3"} Jan 23 18:30:27.600151 sshd[4325]: Invalid user user2 from 46.62.141.104 port 63058 Jan 23 18:30:27.607817 sshd[4325]: Received disconnect from 46.62.141.104 port 63058:11: Bye Bye [preauth] Jan 23 18:30:27.607817 sshd[4325]: Disconnected from invalid user user2 46.62.141.104 port 63058 [preauth] Jan 23 18:30:27.606000 audit[4325]: USER_ERR pid=4325 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:27.612484 systemd[1]: sshd@357-46.62.141.192:22-46.62.141.104:63058.service: Deactivated successfully. Jan 23 18:30:27.611000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@357-46.62.141.192:22-46.62.141.104:63058 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:27.639000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@358-46.62.141.192:22-46.62.141.104:63061 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:27.640501 systemd[1]: Started sshd@358-46.62.141.192:22-46.62.141.104:63061.service - OpenSSH per-connection server daemon (46.62.141.104:63061). Jan 23 18:30:27.765693 sshd[4331]: Received disconnect from 46.62.141.104 port 63061:11: Bye Bye [preauth] Jan 23 18:30:27.765693 sshd[4331]: Disconnected from authenticating user root 46.62.141.104 port 63061 [preauth] Jan 23 18:30:27.764000 audit[4331]: USER_ERR pid=4331 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:27.771085 systemd[1]: sshd@358-46.62.141.192:22-46.62.141.104:63061.service: Deactivated successfully. Jan 23 18:30:27.770000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@358-46.62.141.192:22-46.62.141.104:63061 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:27.791000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@359-46.62.141.192:22-46.62.141.104:63063 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:27.792872 systemd[1]: Started sshd@359-46.62.141.192:22-46.62.141.104:63063.service - OpenSSH per-connection server daemon (46.62.141.104:63063). Jan 23 18:30:27.920673 sshd[4337]: Invalid user admin from 46.62.141.104 port 63063 Jan 23 18:30:27.928362 sshd[4337]: Received disconnect from 46.62.141.104 port 63063:11: Bye Bye [preauth] Jan 23 18:30:27.928362 sshd[4337]: Disconnected from invalid user admin 46.62.141.104 port 63063 [preauth] Jan 23 18:30:27.927000 audit[4337]: USER_ERR pid=4337 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:27.932468 systemd[1]: sshd@359-46.62.141.192:22-46.62.141.104:63063.service: Deactivated successfully. Jan 23 18:30:27.931000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@359-46.62.141.192:22-46.62.141.104:63063 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:27.954000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@360-46.62.141.192:22-46.62.141.104:63065 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:27.956040 systemd[1]: Started sshd@360-46.62.141.192:22-46.62.141.104:63065.service - OpenSSH per-connection server daemon (46.62.141.104:63065). Jan 23 18:30:28.079153 sshd[4343]: Invalid user user from 46.62.141.104 port 63065 Jan 23 18:30:28.085533 sshd[4343]: Received disconnect from 46.62.141.104 port 63065:11: Bye Bye [preauth] Jan 23 18:30:28.085533 sshd[4343]: Disconnected from invalid user user 46.62.141.104 port 63065 [preauth] Jan 23 18:30:28.084000 audit[4343]: USER_ERR pid=4343 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:28.089300 systemd[1]: sshd@360-46.62.141.192:22-46.62.141.104:63065.service: Deactivated successfully. Jan 23 18:30:28.088000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@360-46.62.141.192:22-46.62.141.104:63065 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:28.110000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@361-46.62.141.192:22-46.62.141.104:63068 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:28.111189 systemd[1]: Started sshd@361-46.62.141.192:22-46.62.141.104:63068.service - OpenSSH per-connection server daemon (46.62.141.104:63068). Jan 23 18:30:28.233789 sshd[4349]: Invalid user user2 from 46.62.141.104 port 63068 Jan 23 18:30:28.240676 sshd[4349]: Received disconnect from 46.62.141.104 port 63068:11: Bye Bye [preauth] Jan 23 18:30:28.240676 sshd[4349]: Disconnected from invalid user user2 46.62.141.104 port 63068 [preauth] Jan 23 18:30:28.239000 audit[4349]: USER_ERR pid=4349 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:28.245236 systemd[1]: sshd@361-46.62.141.192:22-46.62.141.104:63068.service: Deactivated successfully. Jan 23 18:30:28.244000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@361-46.62.141.192:22-46.62.141.104:63068 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:28.272000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@362-46.62.141.192:22-46.62.141.104:63070 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:28.273593 systemd[1]: Started sshd@362-46.62.141.192:22-46.62.141.104:63070.service - OpenSSH per-connection server daemon (46.62.141.104:63070). Jan 23 18:30:28.395418 sshd[4355]: Received disconnect from 46.62.141.104 port 63070:11: Bye Bye [preauth] Jan 23 18:30:28.395418 sshd[4355]: Disconnected from authenticating user root 46.62.141.104 port 63070 [preauth] Jan 23 18:30:28.394000 audit[4355]: USER_ERR pid=4355 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:28.399235 systemd[1]: sshd@362-46.62.141.192:22-46.62.141.104:63070.service: Deactivated successfully. Jan 23 18:30:28.398000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@362-46.62.141.192:22-46.62.141.104:63070 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:28.418000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@363-46.62.141.192:22-46.62.141.104:63073 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:28.420027 systemd[1]: Started sshd@363-46.62.141.192:22-46.62.141.104:63073.service - OpenSSH per-connection server daemon (46.62.141.104:63073). Jan 23 18:30:28.537126 sshd[4361]: Invalid user admin from 46.62.141.104 port 63073 Jan 23 18:30:28.544053 sshd[4361]: Received disconnect from 46.62.141.104 port 63073:11: Bye Bye [preauth] Jan 23 18:30:28.544053 sshd[4361]: Disconnected from invalid user admin 46.62.141.104 port 63073 [preauth] Jan 23 18:30:28.542000 audit[4361]: USER_ERR pid=4361 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:28.548120 systemd[1]: sshd@363-46.62.141.192:22-46.62.141.104:63073.service: Deactivated successfully. Jan 23 18:30:28.547000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@363-46.62.141.192:22-46.62.141.104:63073 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:28.569000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@364-46.62.141.192:22-46.62.141.104:63074 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:28.570736 systemd[1]: Started sshd@364-46.62.141.192:22-46.62.141.104:63074.service - OpenSSH per-connection server daemon (46.62.141.104:63074). Jan 23 18:30:28.689233 sshd[4367]: Invalid user user from 46.62.141.104 port 63074 Jan 23 18:30:28.695202 sshd[4367]: Received disconnect from 46.62.141.104 port 63074:11: Bye Bye [preauth] Jan 23 18:30:28.695202 sshd[4367]: Disconnected from invalid user user 46.62.141.104 port 63074 [preauth] Jan 23 18:30:28.694000 audit[4367]: USER_ERR pid=4367 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:28.699035 systemd[1]: sshd@364-46.62.141.192:22-46.62.141.104:63074.service: Deactivated successfully. Jan 23 18:30:28.698000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@364-46.62.141.192:22-46.62.141.104:63074 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:28.719000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@365-46.62.141.192:22-46.62.141.104:63077 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:28.720870 systemd[1]: Started sshd@365-46.62.141.192:22-46.62.141.104:63077.service - OpenSSH per-connection server daemon (46.62.141.104:63077). Jan 23 18:30:28.836329 sshd[4373]: Invalid user user2 from 46.62.141.104 port 63077 Jan 23 18:30:28.842954 sshd[4373]: Received disconnect from 46.62.141.104 port 63077:11: Bye Bye [preauth] Jan 23 18:30:28.842954 sshd[4373]: Disconnected from invalid user user2 46.62.141.104 port 63077 [preauth] Jan 23 18:30:28.841000 audit[4373]: USER_ERR pid=4373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:28.847053 systemd[1]: sshd@365-46.62.141.192:22-46.62.141.104:63077.service: Deactivated successfully. Jan 23 18:30:28.846000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@365-46.62.141.192:22-46.62.141.104:63077 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:28.869000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@366-46.62.141.192:22-46.62.141.104:63078 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:28.870765 systemd[1]: Started sshd@366-46.62.141.192:22-46.62.141.104:63078.service - OpenSSH per-connection server daemon (46.62.141.104:63078). Jan 23 18:30:28.909556 etcd-wrapper[1931]: {"level":"warn","ts":"2026-01-23T18:30:28.908302Z","caller":"rafthttp/probing_status.go:68","msg":"prober detected unhealthy status","round-tripper-name":"ROUND_TRIPPER_RAFT_MESSAGE","remote-peer-id":"5e70f16e3d77e6b8","rtt":"1.643291ms","error":"dial tcp 10.0.0.2:2380: i/o timeout"} Jan 23 18:30:28.910958 etcd-wrapper[1931]: {"level":"warn","ts":"2026-01-23T18:30:28.910656Z","caller":"rafthttp/probing_status.go:68","msg":"prober detected unhealthy status","round-tripper-name":"ROUND_TRIPPER_RAFT_MESSAGE","remote-peer-id":"15eb2e9460fb69a5","rtt":"736.265µs","error":"dial tcp 10.0.0.3:2380: i/o timeout"} Jan 23 18:30:28.987111 sshd[4379]: Received disconnect from 46.62.141.104 port 63078:11: Bye Bye [preauth] Jan 23 18:30:28.987111 sshd[4379]: Disconnected from authenticating user root 46.62.141.104 port 63078 [preauth] Jan 23 18:30:28.985000 audit[4379]: USER_ERR pid=4379 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:28.989868 systemd[1]: sshd@366-46.62.141.192:22-46.62.141.104:63078.service: Deactivated successfully. Jan 23 18:30:28.990246 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:30:28.989850Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"84afc9f0d5e63dd5 is starting a new election at term 3"} Jan 23 18:30:28.989000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@366-46.62.141.192:22-46.62.141.104:63078 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:28.991004 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:30:28.990453Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"84afc9f0d5e63dd5 became pre-candidate at term 3"} Jan 23 18:30:28.991557 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:30:28.991148Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"84afc9f0d5e63dd5 received MsgPreVoteResp from 84afc9f0d5e63dd5 at term 3"} Jan 23 18:30:28.991988 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:30:28.991709Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"84afc9f0d5e63dd5 [logterm: 3, index: 12] sent MsgPreVote request to 15eb2e9460fb69a5 at term 3"} Jan 23 18:30:28.992549 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:30:28.992113Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"84afc9f0d5e63dd5 [logterm: 3, index: 12] sent MsgPreVote request to 5e70f16e3d77e6b8 at term 3"} Jan 23 18:30:29.021381 systemd[1]: Started sshd@367-46.62.141.192:22-46.62.141.104:63081.service - OpenSSH per-connection server daemon (46.62.141.104:63081). Jan 23 18:30:29.020000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@367-46.62.141.192:22-46.62.141.104:63081 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:29.142144 sshd[4385]: Invalid user admin from 46.62.141.104 port 63081 Jan 23 18:30:29.149573 sshd[4385]: Received disconnect from 46.62.141.104 port 63081:11: Bye Bye [preauth] Jan 23 18:30:29.149573 sshd[4385]: Disconnected from invalid user admin 46.62.141.104 port 63081 [preauth] Jan 23 18:30:29.148000 audit[4385]: USER_ERR pid=4385 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:29.153484 systemd[1]: sshd@367-46.62.141.192:22-46.62.141.104:63081.service: Deactivated successfully. Jan 23 18:30:29.152000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@367-46.62.141.192:22-46.62.141.104:63081 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:29.174000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@368-46.62.141.192:22-46.62.141.104:63083 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:29.175678 systemd[1]: Started sshd@368-46.62.141.192:22-46.62.141.104:63083.service - OpenSSH per-connection server daemon (46.62.141.104:63083). Jan 23 18:30:29.288962 sshd[4391]: Invalid user user from 46.62.141.104 port 63083 Jan 23 18:30:29.295147 sshd[4391]: Received disconnect from 46.62.141.104 port 63083:11: Bye Bye [preauth] Jan 23 18:30:29.295147 sshd[4391]: Disconnected from invalid user user 46.62.141.104 port 63083 [preauth] Jan 23 18:30:29.294000 audit[4391]: USER_ERR pid=4391 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:29.299237 systemd[1]: sshd@368-46.62.141.192:22-46.62.141.104:63083.service: Deactivated successfully. Jan 23 18:30:29.298000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@368-46.62.141.192:22-46.62.141.104:63083 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:29.322000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@369-46.62.141.192:22-46.62.141.104:63084 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:29.323842 systemd[1]: Started sshd@369-46.62.141.192:22-46.62.141.104:63084.service - OpenSSH per-connection server daemon (46.62.141.104:63084). Jan 23 18:30:29.445760 sshd[4397]: Invalid user user2 from 46.62.141.104 port 63084 Jan 23 18:30:29.452733 sshd[4397]: Received disconnect from 46.62.141.104 port 63084:11: Bye Bye [preauth] Jan 23 18:30:29.452733 sshd[4397]: Disconnected from invalid user user2 46.62.141.104 port 63084 [preauth] Jan 23 18:30:29.451000 audit[4397]: USER_ERR pid=4397 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:29.457135 systemd[1]: sshd@369-46.62.141.192:22-46.62.141.104:63084.service: Deactivated successfully. Jan 23 18:30:29.456000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@369-46.62.141.192:22-46.62.141.104:63084 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:29.480000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@370-46.62.141.192:22-46.62.141.104:63087 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:29.482046 systemd[1]: Started sshd@370-46.62.141.192:22-46.62.141.104:63087.service - OpenSSH per-connection server daemon (46.62.141.104:63087). Jan 23 18:30:29.600881 sshd[4403]: Received disconnect from 46.62.141.104 port 63087:11: Bye Bye [preauth] Jan 23 18:30:29.600881 sshd[4403]: Disconnected from authenticating user root 46.62.141.104 port 63087 [preauth] Jan 23 18:30:29.599000 audit[4403]: USER_ERR pid=4403 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:29.605619 systemd[1]: sshd@370-46.62.141.192:22-46.62.141.104:63087.service: Deactivated successfully. Jan 23 18:30:29.605000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@370-46.62.141.192:22-46.62.141.104:63087 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:29.628000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@371-46.62.141.192:22-46.62.141.104:63089 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:29.629139 systemd[1]: Started sshd@371-46.62.141.192:22-46.62.141.104:63089.service - OpenSSH per-connection server daemon (46.62.141.104:63089). Jan 23 18:30:29.741431 sshd[4409]: Invalid user admin from 46.62.141.104 port 63089 Jan 23 18:30:29.748628 sshd[4409]: Received disconnect from 46.62.141.104 port 63089:11: Bye Bye [preauth] Jan 23 18:30:29.748628 sshd[4409]: Disconnected from invalid user admin 46.62.141.104 port 63089 [preauth] Jan 23 18:30:29.747000 audit[4409]: USER_ERR pid=4409 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:29.753220 systemd[1]: sshd@371-46.62.141.192:22-46.62.141.104:63089.service: Deactivated successfully. Jan 23 18:30:29.752000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@371-46.62.141.192:22-46.62.141.104:63089 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:29.774000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@372-46.62.141.192:22-46.62.141.104:63093 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:29.775770 systemd[1]: Started sshd@372-46.62.141.192:22-46.62.141.104:63093.service - OpenSSH per-connection server daemon (46.62.141.104:63093). Jan 23 18:30:29.895056 sshd[4415]: Invalid user user from 46.62.141.104 port 63093 Jan 23 18:30:29.901715 sshd[4415]: Received disconnect from 46.62.141.104 port 63093:11: Bye Bye [preauth] Jan 23 18:30:29.901715 sshd[4415]: Disconnected from invalid user user 46.62.141.104 port 63093 [preauth] Jan 23 18:30:29.900000 audit[4415]: USER_ERR pid=4415 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:29.906214 systemd[1]: sshd@372-46.62.141.192:22-46.62.141.104:63093.service: Deactivated successfully. Jan 23 18:30:29.905000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@372-46.62.141.192:22-46.62.141.104:63093 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:29.927000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@373-46.62.141.192:22-46.62.141.104:63096 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:29.928561 systemd[1]: Started sshd@373-46.62.141.192:22-46.62.141.104:63096.service - OpenSSH per-connection server daemon (46.62.141.104:63096). Jan 23 18:30:30.043174 sshd[4421]: Invalid user user2 from 46.62.141.104 port 63096 Jan 23 18:30:30.050035 sshd[4421]: Received disconnect from 46.62.141.104 port 63096:11: Bye Bye [preauth] Jan 23 18:30:30.050035 sshd[4421]: Disconnected from invalid user user2 46.62.141.104 port 63096 [preauth] Jan 23 18:30:30.048000 audit[4421]: USER_ERR pid=4421 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:30.052986 systemd[1]: sshd@373-46.62.141.192:22-46.62.141.104:63096.service: Deactivated successfully. Jan 23 18:30:30.052000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@373-46.62.141.192:22-46.62.141.104:63096 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:30.077000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@374-46.62.141.192:22-46.62.141.104:63099 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:30.078447 systemd[1]: Started sshd@374-46.62.141.192:22-46.62.141.104:63099.service - OpenSSH per-connection server daemon (46.62.141.104:63099). Jan 23 18:30:30.185034 sshd[4427]: Received disconnect from 46.62.141.104 port 63099:11: Bye Bye [preauth] Jan 23 18:30:30.185034 sshd[4427]: Disconnected from authenticating user root 46.62.141.104 port 63099 [preauth] Jan 23 18:30:30.183000 audit[4427]: USER_ERR pid=4427 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:30.189160 systemd[1]: sshd@374-46.62.141.192:22-46.62.141.104:63099.service: Deactivated successfully. Jan 23 18:30:30.188000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@374-46.62.141.192:22-46.62.141.104:63099 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:30.209000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@375-46.62.141.192:22-46.62.141.104:63102 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:30.210546 systemd[1]: Started sshd@375-46.62.141.192:22-46.62.141.104:63102.service - OpenSSH per-connection server daemon (46.62.141.104:63102). Jan 23 18:30:30.322628 sshd[4433]: Invalid user admin from 46.62.141.104 port 63102 Jan 23 18:30:30.329592 sshd[4433]: Received disconnect from 46.62.141.104 port 63102:11: Bye Bye [preauth] Jan 23 18:30:30.329592 sshd[4433]: Disconnected from invalid user admin 46.62.141.104 port 63102 [preauth] Jan 23 18:30:30.328000 audit[4433]: USER_ERR pid=4433 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:30.334012 systemd[1]: sshd@375-46.62.141.192:22-46.62.141.104:63102.service: Deactivated successfully. Jan 23 18:30:30.333000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@375-46.62.141.192:22-46.62.141.104:63102 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:30.360000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@376-46.62.141.192:22-46.62.141.104:63103 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:30.361840 systemd[1]: Started sshd@376-46.62.141.192:22-46.62.141.104:63103.service - OpenSSH per-connection server daemon (46.62.141.104:63103). Jan 23 18:30:30.390415 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:30:30.390013Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"84afc9f0d5e63dd5 is starting a new election at term 3"} Jan 23 18:30:30.390415 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:30:30.390058Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"84afc9f0d5e63dd5 became pre-candidate at term 3"} Jan 23 18:30:30.391093 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:30:30.390076Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"84afc9f0d5e63dd5 received MsgPreVoteResp from 84afc9f0d5e63dd5 at term 3"} Jan 23 18:30:30.391093 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:30:30.390097Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"84afc9f0d5e63dd5 [logterm: 3, index: 12] sent MsgPreVote request to 15eb2e9460fb69a5 at term 3"} Jan 23 18:30:30.391093 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:30:30.390110Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"84afc9f0d5e63dd5 [logterm: 3, index: 12] sent MsgPreVote request to 5e70f16e3d77e6b8 at term 3"} Jan 23 18:30:30.481701 sshd[4439]: Invalid user user from 46.62.141.104 port 63103 Jan 23 18:30:30.490856 sshd[4439]: Received disconnect from 46.62.141.104 port 63103:11: Bye Bye [preauth] Jan 23 18:30:30.490856 sshd[4439]: Disconnected from invalid user user 46.62.141.104 port 63103 [preauth] Jan 23 18:30:30.489000 audit[4439]: USER_ERR pid=4439 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:30.494828 systemd[1]: sshd@376-46.62.141.192:22-46.62.141.104:63103.service: Deactivated successfully. Jan 23 18:30:30.494000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@376-46.62.141.192:22-46.62.141.104:63103 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:30.515000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@377-46.62.141.192:22-46.62.141.104:63106 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:30.516597 systemd[1]: Started sshd@377-46.62.141.192:22-46.62.141.104:63106.service - OpenSSH per-connection server daemon (46.62.141.104:63106). Jan 23 18:30:30.627876 sshd[4445]: Invalid user user2 from 46.62.141.104 port 63106 Jan 23 18:30:30.636613 sshd[4445]: Received disconnect from 46.62.141.104 port 63106:11: Bye Bye [preauth] Jan 23 18:30:30.636613 sshd[4445]: Disconnected from invalid user user2 46.62.141.104 port 63106 [preauth] Jan 23 18:30:30.635000 audit[4445]: USER_ERR pid=4445 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:30.640664 systemd[1]: sshd@377-46.62.141.192:22-46.62.141.104:63106.service: Deactivated successfully. Jan 23 18:30:30.639000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@377-46.62.141.192:22-46.62.141.104:63106 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:30.654000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@378-46.62.141.192:22-46.62.141.104:63108 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:30.656094 systemd[1]: Started sshd@378-46.62.141.192:22-46.62.141.104:63108.service - OpenSSH per-connection server daemon (46.62.141.104:63108). Jan 23 18:30:30.778193 sshd[4451]: Received disconnect from 46.62.141.104 port 63108:11: Bye Bye [preauth] Jan 23 18:30:30.778193 sshd[4451]: Disconnected from authenticating user root 46.62.141.104 port 63108 [preauth] Jan 23 18:30:30.776000 audit[4451]: USER_ERR pid=4451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:30.782221 systemd[1]: sshd@378-46.62.141.192:22-46.62.141.104:63108.service: Deactivated successfully. Jan 23 18:30:30.781000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@378-46.62.141.192:22-46.62.141.104:63108 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:30.802000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@379-46.62.141.192:22-46.62.141.104:63110 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:30.803654 systemd[1]: Started sshd@379-46.62.141.192:22-46.62.141.104:63110.service - OpenSSH per-connection server daemon (46.62.141.104:63110). Jan 23 18:30:30.921816 sshd[4457]: Invalid user admin from 46.62.141.104 port 63110 Jan 23 18:30:30.928338 sshd[4457]: Received disconnect from 46.62.141.104 port 63110:11: Bye Bye [preauth] Jan 23 18:30:30.928338 sshd[4457]: Disconnected from invalid user admin 46.62.141.104 port 63110 [preauth] Jan 23 18:30:30.927000 audit[4457]: USER_ERR pid=4457 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:30.932153 systemd[1]: sshd@379-46.62.141.192:22-46.62.141.104:63110.service: Deactivated successfully. Jan 23 18:30:30.931000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@379-46.62.141.192:22-46.62.141.104:63110 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:30.956319 systemd[1]: Started sshd@380-46.62.141.192:22-46.62.141.104:63112.service - OpenSSH per-connection server daemon (46.62.141.104:63112). Jan 23 18:30:30.955000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@380-46.62.141.192:22-46.62.141.104:63112 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:31.074661 sshd[4463]: Invalid user user from 46.62.141.104 port 63112 Jan 23 18:30:31.081757 sshd[4463]: Received disconnect from 46.62.141.104 port 63112:11: Bye Bye [preauth] Jan 23 18:30:31.081757 sshd[4463]: Disconnected from invalid user user 46.62.141.104 port 63112 [preauth] Jan 23 18:30:31.090342 kernel: kauditd_printk_skb: 89 callbacks suppressed Jan 23 18:30:31.090441 kernel: audit: type=1109 audit(1769193031.080:1326): pid=4463 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:31.080000 audit[4463]: USER_ERR pid=4463 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:31.084332 systemd[1]: sshd@380-46.62.141.192:22-46.62.141.104:63112.service: Deactivated successfully. Jan 23 18:30:31.083000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@380-46.62.141.192:22-46.62.141.104:63112 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:31.099497 kernel: audit: type=1131 audit(1769193031.083:1327): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@380-46.62.141.192:22-46.62.141.104:63112 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:31.117000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@381-46.62.141.192:22-46.62.141.104:63114 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:31.118298 systemd[1]: Started sshd@381-46.62.141.192:22-46.62.141.104:63114.service - OpenSSH per-connection server daemon (46.62.141.104:63114). Jan 23 18:30:31.131362 kernel: audit: type=1130 audit(1769193031.117:1328): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@381-46.62.141.192:22-46.62.141.104:63114 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:31.249027 sshd[4469]: Invalid user user2 from 46.62.141.104 port 63114 Jan 23 18:30:31.255439 sshd[4469]: Received disconnect from 46.62.141.104 port 63114:11: Bye Bye [preauth] Jan 23 18:30:31.255439 sshd[4469]: Disconnected from invalid user user2 46.62.141.104 port 63114 [preauth] Jan 23 18:30:31.254000 audit[4469]: USER_ERR pid=4469 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:31.259111 systemd[1]: sshd@381-46.62.141.192:22-46.62.141.104:63114.service: Deactivated successfully. Jan 23 18:30:31.258000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@381-46.62.141.192:22-46.62.141.104:63114 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:31.270175 kernel: audit: type=1109 audit(1769193031.254:1329): pid=4469 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:31.270649 kernel: audit: type=1131 audit(1769193031.258:1330): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@381-46.62.141.192:22-46.62.141.104:63114 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:31.295813 systemd[1]: Started sshd@382-46.62.141.192:22-46.62.141.104:63117.service - OpenSSH per-connection server daemon (46.62.141.104:63117). Jan 23 18:30:31.294000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@382-46.62.141.192:22-46.62.141.104:63117 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:31.308355 kernel: audit: type=1130 audit(1769193031.294:1331): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@382-46.62.141.192:22-46.62.141.104:63117 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:31.411909 sshd[4475]: Received disconnect from 46.62.141.104 port 63117:11: Bye Bye [preauth] Jan 23 18:30:31.411909 sshd[4475]: Disconnected from authenticating user root 46.62.141.104 port 63117 [preauth] Jan 23 18:30:31.410000 audit[4475]: USER_ERR pid=4475 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:31.417040 systemd[1]: sshd@382-46.62.141.192:22-46.62.141.104:63117.service: Deactivated successfully. Jan 23 18:30:31.423442 kernel: audit: type=1109 audit(1769193031.410:1332): pid=4475 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:31.423573 kernel: audit: type=1131 audit(1769193031.416:1333): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@382-46.62.141.192:22-46.62.141.104:63117 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:31.416000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@382-46.62.141.192:22-46.62.141.104:63117 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:31.446313 systemd[1]: Started sshd@383-46.62.141.192:22-46.62.141.104:63118.service - OpenSSH per-connection server daemon (46.62.141.104:63118). Jan 23 18:30:31.445000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@383-46.62.141.192:22-46.62.141.104:63118 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:31.460343 kernel: audit: type=1130 audit(1769193031.445:1334): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@383-46.62.141.192:22-46.62.141.104:63118 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:31.562630 sshd[4481]: Invalid user admin from 46.62.141.104 port 63118 Jan 23 18:30:31.569119 sshd[4481]: Received disconnect from 46.62.141.104 port 63118:11: Bye Bye [preauth] Jan 23 18:30:31.569119 sshd[4481]: Disconnected from invalid user admin 46.62.141.104 port 63118 [preauth] Jan 23 18:30:31.568000 audit[4481]: USER_ERR pid=4481 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:31.583638 kernel: audit: type=1109 audit(1769193031.568:1335): pid=4481 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:31.585727 systemd[1]: sshd@383-46.62.141.192:22-46.62.141.104:63118.service: Deactivated successfully. Jan 23 18:30:31.585000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@383-46.62.141.192:22-46.62.141.104:63118 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:31.604000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@384-46.62.141.192:22-46.62.141.104:63122 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:31.605185 systemd[1]: Started sshd@384-46.62.141.192:22-46.62.141.104:63122.service - OpenSSH per-connection server daemon (46.62.141.104:63122). Jan 23 18:30:31.730393 sshd[4487]: Invalid user user from 46.62.141.104 port 63122 Jan 23 18:30:31.739182 sshd[4487]: Received disconnect from 46.62.141.104 port 63122:11: Bye Bye [preauth] Jan 23 18:30:31.739182 sshd[4487]: Disconnected from invalid user user 46.62.141.104 port 63122 [preauth] Jan 23 18:30:31.738000 audit[4487]: USER_ERR pid=4487 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:31.744370 systemd[1]: sshd@384-46.62.141.192:22-46.62.141.104:63122.service: Deactivated successfully. Jan 23 18:30:31.743000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@384-46.62.141.192:22-46.62.141.104:63122 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:31.764000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@385-46.62.141.192:22-46.62.141.104:63123 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:31.765786 systemd[1]: Started sshd@385-46.62.141.192:22-46.62.141.104:63123.service - OpenSSH per-connection server daemon (46.62.141.104:63123). Jan 23 18:30:31.791130 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:30:31.790652Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"84afc9f0d5e63dd5 is starting a new election at term 3"} Jan 23 18:30:31.791130 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:30:31.790707Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"84afc9f0d5e63dd5 became pre-candidate at term 3"} Jan 23 18:30:31.791130 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:30:31.790727Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"84afc9f0d5e63dd5 received MsgPreVoteResp from 84afc9f0d5e63dd5 at term 3"} Jan 23 18:30:31.791130 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:30:31.790750Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"84afc9f0d5e63dd5 [logterm: 3, index: 12] sent MsgPreVote request to 15eb2e9460fb69a5 at term 3"} Jan 23 18:30:31.791130 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:30:31.790763Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"84afc9f0d5e63dd5 [logterm: 3, index: 12] sent MsgPreVote request to 5e70f16e3d77e6b8 at term 3"} Jan 23 18:30:31.886316 sshd[4493]: Invalid user user2 from 46.62.141.104 port 63123 Jan 23 18:30:31.893157 sshd[4493]: Received disconnect from 46.62.141.104 port 63123:11: Bye Bye [preauth] Jan 23 18:30:31.893157 sshd[4493]: Disconnected from invalid user user2 46.62.141.104 port 63123 [preauth] Jan 23 18:30:31.892000 audit[4493]: USER_ERR pid=4493 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:31.897106 systemd[1]: sshd@385-46.62.141.192:22-46.62.141.104:63123.service: Deactivated successfully. Jan 23 18:30:31.896000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@385-46.62.141.192:22-46.62.141.104:63123 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:31.918000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@386-46.62.141.192:22-46.62.141.104:63126 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:31.919554 systemd[1]: Started sshd@386-46.62.141.192:22-46.62.141.104:63126.service - OpenSSH per-connection server daemon (46.62.141.104:63126). Jan 23 18:30:32.044879 sshd[4499]: Received disconnect from 46.62.141.104 port 63126:11: Bye Bye [preauth] Jan 23 18:30:32.044879 sshd[4499]: Disconnected from authenticating user root 46.62.141.104 port 63126 [preauth] Jan 23 18:30:32.043000 audit[4499]: USER_ERR pid=4499 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:32.049081 systemd[1]: sshd@386-46.62.141.192:22-46.62.141.104:63126.service: Deactivated successfully. Jan 23 18:30:32.048000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@386-46.62.141.192:22-46.62.141.104:63126 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:32.074243 systemd[1]: Started sshd@387-46.62.141.192:22-46.62.141.104:63128.service - OpenSSH per-connection server daemon (46.62.141.104:63128). Jan 23 18:30:32.073000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@387-46.62.141.192:22-46.62.141.104:63128 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:32.185645 sshd[4505]: Invalid user admin from 46.62.141.104 port 63128 Jan 23 18:30:32.193455 sshd[4505]: Received disconnect from 46.62.141.104 port 63128:11: Bye Bye [preauth] Jan 23 18:30:32.193455 sshd[4505]: Disconnected from invalid user admin 46.62.141.104 port 63128 [preauth] Jan 23 18:30:32.192000 audit[4505]: USER_ERR pid=4505 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:32.197246 systemd[1]: sshd@387-46.62.141.192:22-46.62.141.104:63128.service: Deactivated successfully. Jan 23 18:30:32.196000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@387-46.62.141.192:22-46.62.141.104:63128 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:32.220000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@388-46.62.141.192:22-46.62.141.104:63130 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:32.221735 systemd[1]: Started sshd@388-46.62.141.192:22-46.62.141.104:63130.service - OpenSSH per-connection server daemon (46.62.141.104:63130). Jan 23 18:30:32.336130 sshd[4511]: Invalid user user from 46.62.141.104 port 63130 Jan 23 18:30:32.342328 sshd[4511]: Received disconnect from 46.62.141.104 port 63130:11: Bye Bye [preauth] Jan 23 18:30:32.342424 sshd[4511]: Disconnected from invalid user user 46.62.141.104 port 63130 [preauth] Jan 23 18:30:32.341000 audit[4511]: USER_ERR pid=4511 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:32.345180 systemd[1]: sshd@388-46.62.141.192:22-46.62.141.104:63130.service: Deactivated successfully. Jan 23 18:30:32.344000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@388-46.62.141.192:22-46.62.141.104:63130 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:32.373000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@389-46.62.141.192:22-46.62.141.104:63132 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:32.374386 systemd[1]: Started sshd@389-46.62.141.192:22-46.62.141.104:63132.service - OpenSSH per-connection server daemon (46.62.141.104:63132). Jan 23 18:30:32.485759 sshd[4517]: Invalid user user2 from 46.62.141.104 port 63132 Jan 23 18:30:32.492299 sshd[4517]: Received disconnect from 46.62.141.104 port 63132:11: Bye Bye [preauth] Jan 23 18:30:32.492299 sshd[4517]: Disconnected from invalid user user2 46.62.141.104 port 63132 [preauth] Jan 23 18:30:32.491000 audit[4517]: USER_ERR pid=4517 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:32.495141 systemd[1]: sshd@389-46.62.141.192:22-46.62.141.104:63132.service: Deactivated successfully. Jan 23 18:30:32.494000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@389-46.62.141.192:22-46.62.141.104:63132 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:32.515502 systemd[1]: Started sshd@390-46.62.141.192:22-46.62.141.104:63133.service - OpenSSH per-connection server daemon (46.62.141.104:63133). Jan 23 18:30:32.514000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@390-46.62.141.192:22-46.62.141.104:63133 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:32.640405 sshd[4523]: Received disconnect from 46.62.141.104 port 63133:11: Bye Bye [preauth] Jan 23 18:30:32.640405 sshd[4523]: Disconnected from authenticating user root 46.62.141.104 port 63133 [preauth] Jan 23 18:30:32.639000 audit[4523]: USER_ERR pid=4523 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:32.644035 systemd[1]: sshd@390-46.62.141.192:22-46.62.141.104:63133.service: Deactivated successfully. Jan 23 18:30:32.643000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@390-46.62.141.192:22-46.62.141.104:63133 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:32.666000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@391-46.62.141.192:22-46.62.141.104:63136 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:32.667443 systemd[1]: Started sshd@391-46.62.141.192:22-46.62.141.104:63136.service - OpenSSH per-connection server daemon (46.62.141.104:63136). Jan 23 18:30:32.789208 sshd[4529]: Invalid user admin from 46.62.141.104 port 63136 Jan 23 18:30:32.797178 sshd[4529]: Received disconnect from 46.62.141.104 port 63136:11: Bye Bye [preauth] Jan 23 18:30:32.797178 sshd[4529]: Disconnected from invalid user admin 46.62.141.104 port 63136 [preauth] Jan 23 18:30:32.796000 audit[4529]: USER_ERR pid=4529 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:32.800943 systemd[1]: sshd@391-46.62.141.192:22-46.62.141.104:63136.service: Deactivated successfully. Jan 23 18:30:32.800000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@391-46.62.141.192:22-46.62.141.104:63136 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:32.821929 systemd[1]: Started sshd@392-46.62.141.192:22-46.62.141.104:63137.service - OpenSSH per-connection server daemon (46.62.141.104:63137). Jan 23 18:30:32.821000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@392-46.62.141.192:22-46.62.141.104:63137 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:32.945360 sshd[4535]: Invalid user user from 46.62.141.104 port 63137 Jan 23 18:30:32.952492 sshd[4535]: Received disconnect from 46.62.141.104 port 63137:11: Bye Bye [preauth] Jan 23 18:30:32.952492 sshd[4535]: Disconnected from invalid user user 46.62.141.104 port 63137 [preauth] Jan 23 18:30:32.951000 audit[4535]: USER_ERR pid=4535 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:32.956578 systemd[1]: sshd@392-46.62.141.192:22-46.62.141.104:63137.service: Deactivated successfully. Jan 23 18:30:32.955000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@392-46.62.141.192:22-46.62.141.104:63137 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:32.986561 systemd[1]: Started sshd@393-46.62.141.192:22-46.62.141.104:63140.service - OpenSSH per-connection server daemon (46.62.141.104:63140). Jan 23 18:30:32.985000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@393-46.62.141.192:22-46.62.141.104:63140 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:33.107668 sshd[4541]: Invalid user user2 from 46.62.141.104 port 63140 Jan 23 18:30:33.114204 sshd[4541]: Received disconnect from 46.62.141.104 port 63140:11: Bye Bye [preauth] Jan 23 18:30:33.114204 sshd[4541]: Disconnected from invalid user user2 46.62.141.104 port 63140 [preauth] Jan 23 18:30:33.113000 audit[4541]: USER_ERR pid=4541 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:33.117898 systemd[1]: sshd@393-46.62.141.192:22-46.62.141.104:63140.service: Deactivated successfully. Jan 23 18:30:33.117000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@393-46.62.141.192:22-46.62.141.104:63140 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:33.142000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@394-46.62.141.192:22-46.62.141.104:63141 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:33.143466 systemd[1]: Started sshd@394-46.62.141.192:22-46.62.141.104:63141.service - OpenSSH per-connection server daemon (46.62.141.104:63141). Jan 23 18:30:33.191482 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:30:33.190778Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"84afc9f0d5e63dd5 is starting a new election at term 3"} Jan 23 18:30:33.191482 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:30:33.190847Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"84afc9f0d5e63dd5 became pre-candidate at term 3"} Jan 23 18:30:33.191482 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:30:33.190865Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"84afc9f0d5e63dd5 received MsgPreVoteResp from 84afc9f0d5e63dd5 at term 3"} Jan 23 18:30:33.191482 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:30:33.190886Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"84afc9f0d5e63dd5 [logterm: 3, index: 12] sent MsgPreVote request to 15eb2e9460fb69a5 at term 3"} Jan 23 18:30:33.191482 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:30:33.190898Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"84afc9f0d5e63dd5 [logterm: 3, index: 12] sent MsgPreVote request to 5e70f16e3d77e6b8 at term 3"} Jan 23 18:30:33.273133 sshd[4547]: Received disconnect from 46.62.141.104 port 63141:11: Bye Bye [preauth] Jan 23 18:30:33.273133 sshd[4547]: Disconnected from authenticating user root 46.62.141.104 port 63141 [preauth] Jan 23 18:30:33.272000 audit[4547]: USER_ERR pid=4547 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:33.278213 systemd[1]: sshd@394-46.62.141.192:22-46.62.141.104:63141.service: Deactivated successfully. Jan 23 18:30:33.277000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@394-46.62.141.192:22-46.62.141.104:63141 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:33.302000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@395-46.62.141.192:22-46.62.141.104:63145 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:33.303552 systemd[1]: Started sshd@395-46.62.141.192:22-46.62.141.104:63145.service - OpenSSH per-connection server daemon (46.62.141.104:63145). Jan 23 18:30:33.419476 sshd[4553]: Invalid user admin from 46.62.141.104 port 63145 Jan 23 18:30:33.425902 sshd[4553]: Received disconnect from 46.62.141.104 port 63145:11: Bye Bye [preauth] Jan 23 18:30:33.425902 sshd[4553]: Disconnected from invalid user admin 46.62.141.104 port 63145 [preauth] Jan 23 18:30:33.424000 audit[4553]: USER_ERR pid=4553 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:33.429550 systemd[1]: sshd@395-46.62.141.192:22-46.62.141.104:63145.service: Deactivated successfully. Jan 23 18:30:33.428000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@395-46.62.141.192:22-46.62.141.104:63145 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:33.449000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@396-46.62.141.192:22-46.62.141.104:63147 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:33.450148 systemd[1]: Started sshd@396-46.62.141.192:22-46.62.141.104:63147.service - OpenSSH per-connection server daemon (46.62.141.104:63147). Jan 23 18:30:33.564163 sshd[4559]: Invalid user user from 46.62.141.104 port 63147 Jan 23 18:30:33.570234 sshd[4559]: Received disconnect from 46.62.141.104 port 63147:11: Bye Bye [preauth] Jan 23 18:30:33.570234 sshd[4559]: Disconnected from invalid user user 46.62.141.104 port 63147 [preauth] Jan 23 18:30:33.569000 audit[4559]: USER_ERR pid=4559 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:33.573699 systemd[1]: sshd@396-46.62.141.192:22-46.62.141.104:63147.service: Deactivated successfully. Jan 23 18:30:33.573000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@396-46.62.141.192:22-46.62.141.104:63147 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:33.597000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@397-46.62.141.192:22-46.62.141.104:63150 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:33.598416 systemd[1]: Started sshd@397-46.62.141.192:22-46.62.141.104:63150.service - OpenSSH per-connection server daemon (46.62.141.104:63150). Jan 23 18:30:33.708257 sshd[4565]: Invalid user user2 from 46.62.141.104 port 63150 Jan 23 18:30:33.716214 sshd[4565]: Received disconnect from 46.62.141.104 port 63150:11: Bye Bye [preauth] Jan 23 18:30:33.716214 sshd[4565]: Disconnected from invalid user user2 46.62.141.104 port 63150 [preauth] Jan 23 18:30:33.715000 audit[4565]: USER_ERR pid=4565 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:33.719763 systemd[1]: sshd@397-46.62.141.192:22-46.62.141.104:63150.service: Deactivated successfully. Jan 23 18:30:33.719000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@397-46.62.141.192:22-46.62.141.104:63150 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:33.740232 systemd[1]: Started sshd@398-46.62.141.192:22-46.62.141.104:63153.service - OpenSSH per-connection server daemon (46.62.141.104:63153). Jan 23 18:30:33.739000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@398-46.62.141.192:22-46.62.141.104:63153 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:33.866424 sshd[4572]: Received disconnect from 46.62.141.104 port 63153:11: Bye Bye [preauth] Jan 23 18:30:33.866424 sshd[4572]: Disconnected from authenticating user root 46.62.141.104 port 63153 [preauth] Jan 23 18:30:33.867000 audit[4572]: USER_ERR pid=4572 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:33.870894 systemd[1]: sshd@398-46.62.141.192:22-46.62.141.104:63153.service: Deactivated successfully. Jan 23 18:30:33.870000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@398-46.62.141.192:22-46.62.141.104:63153 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:33.895000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@399-46.62.141.192:22-46.62.141.104:63154 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:33.896184 systemd[1]: Started sshd@399-46.62.141.192:22-46.62.141.104:63154.service - OpenSSH per-connection server daemon (46.62.141.104:63154). Jan 23 18:30:33.909555 etcd-wrapper[1931]: {"level":"warn","ts":"2026-01-23T18:30:33.909102Z","caller":"rafthttp/probing_status.go:68","msg":"prober detected unhealthy status","round-tripper-name":"ROUND_TRIPPER_RAFT_MESSAGE","remote-peer-id":"5e70f16e3d77e6b8","rtt":"1.643291ms","error":"dial tcp 10.0.0.2:2380: i/o timeout"} Jan 23 18:30:33.911606 etcd-wrapper[1931]: {"level":"warn","ts":"2026-01-23T18:30:33.911332Z","caller":"rafthttp/probing_status.go:68","msg":"prober detected unhealthy status","round-tripper-name":"ROUND_TRIPPER_RAFT_MESSAGE","remote-peer-id":"15eb2e9460fb69a5","rtt":"736.265µs","error":"dial tcp 10.0.0.3:2380: i/o timeout"} Jan 23 18:30:34.017321 sshd[4578]: Invalid user admin from 46.62.141.104 port 63154 Jan 23 18:30:34.025000 audit[4578]: USER_ERR pid=4578 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:34.026803 sshd[4578]: Received disconnect from 46.62.141.104 port 63154:11: Bye Bye [preauth] Jan 23 18:30:34.026803 sshd[4578]: Disconnected from invalid user admin 46.62.141.104 port 63154 [preauth] Jan 23 18:30:34.030977 systemd[1]: sshd@399-46.62.141.192:22-46.62.141.104:63154.service: Deactivated successfully. Jan 23 18:30:34.030000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@399-46.62.141.192:22-46.62.141.104:63154 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:34.049743 systemd[1]: Started sshd@400-46.62.141.192:22-46.62.141.104:63157.service - OpenSSH per-connection server daemon (46.62.141.104:63157). Jan 23 18:30:34.048000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@400-46.62.141.192:22-46.62.141.104:63157 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:34.168350 sshd[4586]: Invalid user user from 46.62.141.104 port 63157 Jan 23 18:30:34.175058 sshd[4586]: Received disconnect from 46.62.141.104 port 63157:11: Bye Bye [preauth] Jan 23 18:30:34.175058 sshd[4586]: Disconnected from invalid user user 46.62.141.104 port 63157 [preauth] Jan 23 18:30:34.173000 audit[4586]: USER_ERR pid=4586 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:34.177760 systemd[1]: sshd@400-46.62.141.192:22-46.62.141.104:63157.service: Deactivated successfully. Jan 23 18:30:34.177000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@400-46.62.141.192:22-46.62.141.104:63157 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:34.201000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@401-46.62.141.192:22-46.62.141.104:63158 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:34.203069 systemd[1]: Started sshd@401-46.62.141.192:22-46.62.141.104:63158.service - OpenSSH per-connection server daemon (46.62.141.104:63158). Jan 23 18:30:34.319908 sshd[4592]: Invalid user user2 from 46.62.141.104 port 63158 Jan 23 18:30:34.326316 sshd[4592]: Received disconnect from 46.62.141.104 port 63158:11: Bye Bye [preauth] Jan 23 18:30:34.326316 sshd[4592]: Disconnected from invalid user user2 46.62.141.104 port 63158 [preauth] Jan 23 18:30:34.325000 audit[4592]: USER_ERR pid=4592 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:34.329824 systemd[1]: sshd@401-46.62.141.192:22-46.62.141.104:63158.service: Deactivated successfully. Jan 23 18:30:34.329000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@401-46.62.141.192:22-46.62.141.104:63158 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:34.351000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@402-46.62.141.192:22-46.62.141.104:63161 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:34.352731 systemd[1]: Started sshd@402-46.62.141.192:22-46.62.141.104:63161.service - OpenSSH per-connection server daemon (46.62.141.104:63161). Jan 23 18:30:34.479690 sshd[4598]: Received disconnect from 46.62.141.104 port 63161:11: Bye Bye [preauth] Jan 23 18:30:34.479690 sshd[4598]: Disconnected from authenticating user root 46.62.141.104 port 63161 [preauth] Jan 23 18:30:34.478000 audit[4598]: USER_ERR pid=4598 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:34.483593 systemd[1]: sshd@402-46.62.141.192:22-46.62.141.104:63161.service: Deactivated successfully. Jan 23 18:30:34.482000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@402-46.62.141.192:22-46.62.141.104:63161 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:34.502000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@403-46.62.141.192:22-46.62.141.104:63163 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:34.504071 systemd[1]: Started sshd@403-46.62.141.192:22-46.62.141.104:63163.service - OpenSSH per-connection server daemon (46.62.141.104:63163). Jan 23 18:30:34.590544 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:30:34.590028Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"84afc9f0d5e63dd5 is starting a new election at term 3"} Jan 23 18:30:34.590544 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:30:34.590074Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"84afc9f0d5e63dd5 became pre-candidate at term 3"} Jan 23 18:30:34.590544 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:30:34.590095Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"84afc9f0d5e63dd5 received MsgPreVoteResp from 84afc9f0d5e63dd5 at term 3"} Jan 23 18:30:34.590544 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:30:34.590116Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"84afc9f0d5e63dd5 [logterm: 3, index: 12] sent MsgPreVote request to 15eb2e9460fb69a5 at term 3"} Jan 23 18:30:34.590544 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:30:34.590128Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"84afc9f0d5e63dd5 [logterm: 3, index: 12] sent MsgPreVote request to 5e70f16e3d77e6b8 at term 3"} Jan 23 18:30:34.632052 sshd[4604]: Invalid user admin from 46.62.141.104 port 63163 Jan 23 18:30:34.637000 audit[4604]: USER_ERR pid=4604 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:34.639488 sshd[4604]: Received disconnect from 46.62.141.104 port 63163:11: Bye Bye [preauth] Jan 23 18:30:34.639488 sshd[4604]: Disconnected from invalid user admin 46.62.141.104 port 63163 [preauth] Jan 23 18:30:34.641627 systemd[1]: sshd@403-46.62.141.192:22-46.62.141.104:63163.service: Deactivated successfully. Jan 23 18:30:34.640000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@403-46.62.141.192:22-46.62.141.104:63163 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:34.667000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@404-46.62.141.192:22-46.62.141.104:63166 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:34.668637 systemd[1]: Started sshd@404-46.62.141.192:22-46.62.141.104:63166.service - OpenSSH per-connection server daemon (46.62.141.104:63166). Jan 23 18:30:34.789468 sshd[4610]: Invalid user user from 46.62.141.104 port 63166 Jan 23 18:30:34.795835 sshd[4610]: Received disconnect from 46.62.141.104 port 63166:11: Bye Bye [preauth] Jan 23 18:30:34.795835 sshd[4610]: Disconnected from invalid user user 46.62.141.104 port 63166 [preauth] Jan 23 18:30:34.794000 audit[4610]: USER_ERR pid=4610 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:34.800094 systemd[1]: sshd@404-46.62.141.192:22-46.62.141.104:63166.service: Deactivated successfully. Jan 23 18:30:34.799000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@404-46.62.141.192:22-46.62.141.104:63166 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:34.818000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@405-46.62.141.192:22-46.62.141.104:63168 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:34.819174 systemd[1]: Started sshd@405-46.62.141.192:22-46.62.141.104:63168.service - OpenSSH per-connection server daemon (46.62.141.104:63168). Jan 23 18:30:34.951321 sshd[4616]: Invalid user user2 from 46.62.141.104 port 63168 Jan 23 18:30:34.960025 sshd[4616]: Received disconnect from 46.62.141.104 port 63168:11: Bye Bye [preauth] Jan 23 18:30:34.960025 sshd[4616]: Disconnected from invalid user user2 46.62.141.104 port 63168 [preauth] Jan 23 18:30:34.959000 audit[4616]: USER_ERR pid=4616 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:34.963724 systemd[1]: sshd@405-46.62.141.192:22-46.62.141.104:63168.service: Deactivated successfully. Jan 23 18:30:34.962000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@405-46.62.141.192:22-46.62.141.104:63168 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:34.978000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@406-46.62.141.192:22-46.62.141.104:63171 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:34.980079 systemd[1]: Started sshd@406-46.62.141.192:22-46.62.141.104:63171.service - OpenSSH per-connection server daemon (46.62.141.104:63171). Jan 23 18:30:35.088775 sshd[4622]: Received disconnect from 46.62.141.104 port 63171:11: Bye Bye [preauth] Jan 23 18:30:35.088775 sshd[4622]: Disconnected from authenticating user root 46.62.141.104 port 63171 [preauth] Jan 23 18:30:35.087000 audit[4622]: USER_ERR pid=4622 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:35.092491 systemd[1]: sshd@406-46.62.141.192:22-46.62.141.104:63171.service: Deactivated successfully. Jan 23 18:30:35.091000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@406-46.62.141.192:22-46.62.141.104:63171 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:35.114000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@407-46.62.141.192:22-46.62.141.104:63175 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:35.115664 systemd[1]: Started sshd@407-46.62.141.192:22-46.62.141.104:63175.service - OpenSSH per-connection server daemon (46.62.141.104:63175). Jan 23 18:30:35.229372 sshd[4628]: Invalid user admin from 46.62.141.104 port 63175 Jan 23 18:30:35.234985 sshd[4628]: Received disconnect from 46.62.141.104 port 63175:11: Bye Bye [preauth] Jan 23 18:30:35.235120 sshd[4628]: Disconnected from invalid user admin 46.62.141.104 port 63175 [preauth] Jan 23 18:30:35.234000 audit[4628]: USER_ERR pid=4628 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:35.238099 systemd[1]: sshd@407-46.62.141.192:22-46.62.141.104:63175.service: Deactivated successfully. Jan 23 18:30:35.237000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@407-46.62.141.192:22-46.62.141.104:63175 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:35.262000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@408-46.62.141.192:22-46.62.141.104:63176 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:35.263862 systemd[1]: Started sshd@408-46.62.141.192:22-46.62.141.104:63176.service - OpenSSH per-connection server daemon (46.62.141.104:63176). Jan 23 18:30:35.350629 sshd[4634]: Invalid user user from 46.62.141.104 port 63176 Jan 23 18:30:35.359822 sshd[4634]: Received disconnect from 46.62.141.104 port 63176:11: Bye Bye [preauth] Jan 23 18:30:35.359822 sshd[4634]: Disconnected from invalid user user 46.62.141.104 port 63176 [preauth] Jan 23 18:30:35.358000 audit[4634]: USER_ERR pid=4634 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:35.363909 systemd[1]: sshd@408-46.62.141.192:22-46.62.141.104:63176.service: Deactivated successfully. Jan 23 18:30:35.363000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@408-46.62.141.192:22-46.62.141.104:63176 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:35.382000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@409-46.62.141.192:22-46.62.141.104:63178 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:35.383332 systemd[1]: Started sshd@409-46.62.141.192:22-46.62.141.104:63178.service - OpenSSH per-connection server daemon (46.62.141.104:63178). Jan 23 18:30:35.505517 sshd[4640]: Invalid user user2 from 46.62.141.104 port 63178 Jan 23 18:30:35.511929 sshd[4640]: Received disconnect from 46.62.141.104 port 63178:11: Bye Bye [preauth] Jan 23 18:30:35.511929 sshd[4640]: Disconnected from invalid user user2 46.62.141.104 port 63178 [preauth] Jan 23 18:30:35.510000 audit[4640]: USER_ERR pid=4640 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:35.516150 systemd[1]: sshd@409-46.62.141.192:22-46.62.141.104:63178.service: Deactivated successfully. Jan 23 18:30:35.515000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@409-46.62.141.192:22-46.62.141.104:63178 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:35.538000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@410-46.62.141.192:22-46.62.141.104:63180 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:35.539735 systemd[1]: Started sshd@410-46.62.141.192:22-46.62.141.104:63180.service - OpenSSH per-connection server daemon (46.62.141.104:63180). Jan 23 18:30:35.659379 sshd[4646]: Received disconnect from 46.62.141.104 port 63180:11: Bye Bye [preauth] Jan 23 18:30:35.659379 sshd[4646]: Disconnected from authenticating user root 46.62.141.104 port 63180 [preauth] Jan 23 18:30:35.658000 audit[4646]: USER_ERR pid=4646 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:35.663557 systemd[1]: sshd@410-46.62.141.192:22-46.62.141.104:63180.service: Deactivated successfully. Jan 23 18:30:35.663000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@410-46.62.141.192:22-46.62.141.104:63180 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:35.690000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@411-46.62.141.192:22-46.62.141.104:63182 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:35.691209 systemd[1]: Started sshd@411-46.62.141.192:22-46.62.141.104:63182.service - OpenSSH per-connection server daemon (46.62.141.104:63182). Jan 23 18:30:35.813768 sshd[4652]: Invalid user admin from 46.62.141.104 port 63182 Jan 23 18:30:35.822196 sshd[4652]: Received disconnect from 46.62.141.104 port 63182:11: Bye Bye [preauth] Jan 23 18:30:35.822196 sshd[4652]: Disconnected from invalid user admin 46.62.141.104 port 63182 [preauth] Jan 23 18:30:35.821000 audit[4652]: USER_ERR pid=4652 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:35.826957 systemd[1]: sshd@411-46.62.141.192:22-46.62.141.104:63182.service: Deactivated successfully. Jan 23 18:30:35.826000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@411-46.62.141.192:22-46.62.141.104:63182 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:35.848956 systemd[1]: Started sshd@412-46.62.141.192:22-46.62.141.104:63185.service - OpenSSH per-connection server daemon (46.62.141.104:63185). Jan 23 18:30:35.848000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@412-46.62.141.192:22-46.62.141.104:63185 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:35.959487 sshd[4658]: Invalid user user from 46.62.141.104 port 63185 Jan 23 18:30:35.965635 sshd[4658]: Received disconnect from 46.62.141.104 port 63185:11: Bye Bye [preauth] Jan 23 18:30:35.965635 sshd[4658]: Disconnected from invalid user user 46.62.141.104 port 63185 [preauth] Jan 23 18:30:35.964000 audit[4658]: USER_ERR pid=4658 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:35.969207 systemd[1]: sshd@412-46.62.141.192:22-46.62.141.104:63185.service: Deactivated successfully. Jan 23 18:30:35.968000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@412-46.62.141.192:22-46.62.141.104:63185 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:35.989000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@413-46.62.141.192:22-46.62.141.104:63186 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:35.992724 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:30:35.991484Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"84afc9f0d5e63dd5 is starting a new election at term 3"} Jan 23 18:30:35.992724 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:30:35.991534Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"84afc9f0d5e63dd5 became pre-candidate at term 3"} Jan 23 18:30:35.992724 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:30:35.991552Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"84afc9f0d5e63dd5 received MsgPreVoteResp from 84afc9f0d5e63dd5 at term 3"} Jan 23 18:30:35.992724 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:30:35.991574Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"84afc9f0d5e63dd5 [logterm: 3, index: 12] sent MsgPreVote request to 15eb2e9460fb69a5 at term 3"} Jan 23 18:30:35.992724 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:30:35.991592Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"84afc9f0d5e63dd5 [logterm: 3, index: 12] sent MsgPreVote request to 5e70f16e3d77e6b8 at term 3"} Jan 23 18:30:35.990817 systemd[1]: Started sshd@413-46.62.141.192:22-46.62.141.104:63186.service - OpenSSH per-connection server daemon (46.62.141.104:63186). Jan 23 18:30:36.110495 sshd[4664]: Invalid user user2 from 46.62.141.104 port 63186 Jan 23 18:30:36.117105 sshd[4664]: Received disconnect from 46.62.141.104 port 63186:11: Bye Bye [preauth] Jan 23 18:30:36.117105 sshd[4664]: Disconnected from invalid user user2 46.62.141.104 port 63186 [preauth] Jan 23 18:30:36.126439 kernel: kauditd_printk_skb: 89 callbacks suppressed Jan 23 18:30:36.126486 kernel: audit: type=1109 audit(1769193036.115:1425): pid=4664 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:36.115000 audit[4664]: USER_ERR pid=4664 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:36.121103 systemd[1]: sshd@413-46.62.141.192:22-46.62.141.104:63186.service: Deactivated successfully. Jan 23 18:30:36.120000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@413-46.62.141.192:22-46.62.141.104:63186 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:36.137018 kernel: audit: type=1131 audit(1769193036.120:1426): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@413-46.62.141.192:22-46.62.141.104:63186 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:36.154000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@414-46.62.141.192:22-46.62.141.104:63189 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:36.155533 systemd[1]: Started sshd@414-46.62.141.192:22-46.62.141.104:63189.service - OpenSSH per-connection server daemon (46.62.141.104:63189). Jan 23 18:30:36.169321 kernel: audit: type=1130 audit(1769193036.154:1427): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@414-46.62.141.192:22-46.62.141.104:63189 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:36.270349 sshd[4670]: Received disconnect from 46.62.141.104 port 63189:11: Bye Bye [preauth] Jan 23 18:30:36.270349 sshd[4670]: Disconnected from authenticating user root 46.62.141.104 port 63189 [preauth] Jan 23 18:30:36.269000 audit[4670]: USER_ERR pid=4670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:36.283317 kernel: audit: type=1109 audit(1769193036.269:1428): pid=4670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:36.298016 systemd[1]: sshd@414-46.62.141.192:22-46.62.141.104:63189.service: Deactivated successfully. Jan 23 18:30:36.297000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@414-46.62.141.192:22-46.62.141.104:63189 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:36.305824 systemd[1]: Started sshd@415-46.62.141.192:22-46.62.141.104:63190.service - OpenSSH per-connection server daemon (46.62.141.104:63190). Jan 23 18:30:36.312305 kernel: audit: type=1131 audit(1769193036.297:1429): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@414-46.62.141.192:22-46.62.141.104:63189 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:36.304000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@415-46.62.141.192:22-46.62.141.104:63190 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:36.327338 kernel: audit: type=1130 audit(1769193036.304:1430): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@415-46.62.141.192:22-46.62.141.104:63190 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:36.427307 sshd[4676]: Invalid user admin from 46.62.141.104 port 63190 Jan 23 18:30:36.433720 sshd[4676]: Received disconnect from 46.62.141.104 port 63190:11: Bye Bye [preauth] Jan 23 18:30:36.433720 sshd[4676]: Disconnected from invalid user admin 46.62.141.104 port 63190 [preauth] Jan 23 18:30:36.432000 audit[4676]: USER_ERR pid=4676 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:36.437862 systemd[1]: sshd@415-46.62.141.192:22-46.62.141.104:63190.service: Deactivated successfully. Jan 23 18:30:36.446671 kernel: audit: type=1109 audit(1769193036.432:1431): pid=4676 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:36.446734 kernel: audit: type=1131 audit(1769193036.437:1432): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@415-46.62.141.192:22-46.62.141.104:63190 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:36.437000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@415-46.62.141.192:22-46.62.141.104:63190 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:36.468000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@416-46.62.141.192:22-46.62.141.104:63193 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:36.469408 systemd[1]: Started sshd@416-46.62.141.192:22-46.62.141.104:63193.service - OpenSSH per-connection server daemon (46.62.141.104:63193). Jan 23 18:30:36.483336 kernel: audit: type=1130 audit(1769193036.468:1433): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@416-46.62.141.192:22-46.62.141.104:63193 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:36.575666 sshd[4682]: Invalid user user from 46.62.141.104 port 63193 Jan 23 18:30:36.582107 sshd[4682]: Received disconnect from 46.62.141.104 port 63193:11: Bye Bye [preauth] Jan 23 18:30:36.582107 sshd[4682]: Disconnected from invalid user user 46.62.141.104 port 63193 [preauth] Jan 23 18:30:36.581000 audit[4682]: USER_ERR pid=4682 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:36.585253 systemd[1]: sshd@416-46.62.141.192:22-46.62.141.104:63193.service: Deactivated successfully. Jan 23 18:30:36.584000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@416-46.62.141.192:22-46.62.141.104:63193 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:36.595314 kernel: audit: type=1109 audit(1769193036.581:1434): pid=4682 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:36.608000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@417-46.62.141.192:22-46.62.141.104:63195 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:36.610007 systemd[1]: Started sshd@417-46.62.141.192:22-46.62.141.104:63195.service - OpenSSH per-connection server daemon (46.62.141.104:63195). Jan 23 18:30:36.722210 sshd[4688]: Invalid user user2 from 46.62.141.104 port 63195 Jan 23 18:30:36.729114 sshd[4688]: Received disconnect from 46.62.141.104 port 63195:11: Bye Bye [preauth] Jan 23 18:30:36.729114 sshd[4688]: Disconnected from invalid user user2 46.62.141.104 port 63195 [preauth] Jan 23 18:30:36.728000 audit[4688]: USER_ERR pid=4688 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:36.732976 systemd[1]: sshd@417-46.62.141.192:22-46.62.141.104:63195.service: Deactivated successfully. Jan 23 18:30:36.732000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@417-46.62.141.192:22-46.62.141.104:63195 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:36.751000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@418-46.62.141.192:22-46.62.141.104:63197 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:36.752815 systemd[1]: Started sshd@418-46.62.141.192:22-46.62.141.104:63197.service - OpenSSH per-connection server daemon (46.62.141.104:63197). Jan 23 18:30:36.874929 sshd[4694]: Received disconnect from 46.62.141.104 port 63197:11: Bye Bye [preauth] Jan 23 18:30:36.874929 sshd[4694]: Disconnected from authenticating user root 46.62.141.104 port 63197 [preauth] Jan 23 18:30:36.873000 audit[4694]: USER_ERR pid=4694 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:36.878519 systemd[1]: sshd@418-46.62.141.192:22-46.62.141.104:63197.service: Deactivated successfully. Jan 23 18:30:36.877000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@418-46.62.141.192:22-46.62.141.104:63197 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:36.896000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@419-46.62.141.192:22-46.62.141.104:63200 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:36.898036 systemd[1]: Started sshd@419-46.62.141.192:22-46.62.141.104:63200.service - OpenSSH per-connection server daemon (46.62.141.104:63200). Jan 23 18:30:37.001661 sshd[4700]: Invalid user admin from 46.62.141.104 port 63200 Jan 23 18:30:37.008210 sshd[4700]: Received disconnect from 46.62.141.104 port 63200:11: Bye Bye [preauth] Jan 23 18:30:37.008210 sshd[4700]: Disconnected from invalid user admin 46.62.141.104 port 63200 [preauth] Jan 23 18:30:37.007000 audit[4700]: USER_ERR pid=4700 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:37.011702 systemd[1]: sshd@419-46.62.141.192:22-46.62.141.104:63200.service: Deactivated successfully. Jan 23 18:30:37.010000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@419-46.62.141.192:22-46.62.141.104:63200 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:37.033000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@420-46.62.141.192:22-46.62.141.104:63201 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:37.035101 systemd[1]: Started sshd@420-46.62.141.192:22-46.62.141.104:63201.service - OpenSSH per-connection server daemon (46.62.141.104:63201). Jan 23 18:30:37.149720 sshd[4706]: Invalid user user from 46.62.141.104 port 63201 Jan 23 18:30:37.156537 sshd[4706]: Received disconnect from 46.62.141.104 port 63201:11: Bye Bye [preauth] Jan 23 18:30:37.156537 sshd[4706]: Disconnected from invalid user user 46.62.141.104 port 63201 [preauth] Jan 23 18:30:37.155000 audit[4706]: USER_ERR pid=4706 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:37.160044 systemd[1]: sshd@420-46.62.141.192:22-46.62.141.104:63201.service: Deactivated successfully. Jan 23 18:30:37.159000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@420-46.62.141.192:22-46.62.141.104:63201 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:37.179000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@421-46.62.141.192:22-46.62.141.104:63204 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:37.180505 systemd[1]: Started sshd@421-46.62.141.192:22-46.62.141.104:63204.service - OpenSSH per-connection server daemon (46.62.141.104:63204). Jan 23 18:30:37.295439 sshd[4712]: Invalid user user2 from 46.62.141.104 port 63204 Jan 23 18:30:37.302292 sshd[4712]: Received disconnect from 46.62.141.104 port 63204:11: Bye Bye [preauth] Jan 23 18:30:37.302292 sshd[4712]: Disconnected from invalid user user2 46.62.141.104 port 63204 [preauth] Jan 23 18:30:37.301000 audit[4712]: USER_ERR pid=4712 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:37.305694 systemd[1]: sshd@421-46.62.141.192:22-46.62.141.104:63204.service: Deactivated successfully. Jan 23 18:30:37.305000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@421-46.62.141.192:22-46.62.141.104:63204 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:37.328000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@422-46.62.141.192:22-46.62.141.104:63205 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:37.329961 systemd[1]: Started sshd@422-46.62.141.192:22-46.62.141.104:63205.service - OpenSSH per-connection server daemon (46.62.141.104:63205). Jan 23 18:30:37.390608 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:30:37.390127Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"84afc9f0d5e63dd5 is starting a new election at term 3"} Jan 23 18:30:37.390608 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:30:37.390174Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"84afc9f0d5e63dd5 became pre-candidate at term 3"} Jan 23 18:30:37.390608 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:30:37.390192Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"84afc9f0d5e63dd5 received MsgPreVoteResp from 84afc9f0d5e63dd5 at term 3"} Jan 23 18:30:37.390608 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:30:37.390213Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"84afc9f0d5e63dd5 [logterm: 3, index: 12] sent MsgPreVote request to 15eb2e9460fb69a5 at term 3"} Jan 23 18:30:37.390608 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:30:37.390226Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"84afc9f0d5e63dd5 [logterm: 3, index: 12] sent MsgPreVote request to 5e70f16e3d77e6b8 at term 3"} Jan 23 18:30:37.444856 sshd[4718]: Received disconnect from 46.62.141.104 port 63205:11: Bye Bye [preauth] Jan 23 18:30:37.444856 sshd[4718]: Disconnected from authenticating user root 46.62.141.104 port 63205 [preauth] Jan 23 18:30:37.443000 audit[4718]: USER_ERR pid=4718 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:37.450164 systemd[1]: sshd@422-46.62.141.192:22-46.62.141.104:63205.service: Deactivated successfully. Jan 23 18:30:37.449000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@422-46.62.141.192:22-46.62.141.104:63205 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:37.472000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@423-46.62.141.192:22-46.62.141.104:63207 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:37.472932 systemd[1]: Started sshd@423-46.62.141.192:22-46.62.141.104:63207.service - OpenSSH per-connection server daemon (46.62.141.104:63207). Jan 23 18:30:37.583136 sshd[4724]: Invalid user admin from 46.62.141.104 port 63207 Jan 23 18:30:37.589631 sshd[4724]: Received disconnect from 46.62.141.104 port 63207:11: Bye Bye [preauth] Jan 23 18:30:37.589631 sshd[4724]: Disconnected from invalid user admin 46.62.141.104 port 63207 [preauth] Jan 23 18:30:37.588000 audit[4724]: USER_ERR pid=4724 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:37.593462 systemd[1]: sshd@423-46.62.141.192:22-46.62.141.104:63207.service: Deactivated successfully. Jan 23 18:30:37.592000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@423-46.62.141.192:22-46.62.141.104:63207 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:37.612000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@424-46.62.141.192:22-46.62.141.104:63209 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:37.613154 systemd[1]: Started sshd@424-46.62.141.192:22-46.62.141.104:63209.service - OpenSSH per-connection server daemon (46.62.141.104:63209). Jan 23 18:30:37.732356 sshd[4730]: Invalid user user from 46.62.141.104 port 63209 Jan 23 18:30:37.738886 sshd[4730]: Received disconnect from 46.62.141.104 port 63209:11: Bye Bye [preauth] Jan 23 18:30:37.738886 sshd[4730]: Disconnected from invalid user user 46.62.141.104 port 63209 [preauth] Jan 23 18:30:37.737000 audit[4730]: USER_ERR pid=4730 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:37.742390 systemd[1]: sshd@424-46.62.141.192:22-46.62.141.104:63209.service: Deactivated successfully. Jan 23 18:30:37.742000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@424-46.62.141.192:22-46.62.141.104:63209 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:37.762000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@425-46.62.141.192:22-46.62.141.104:63211 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:37.763133 systemd[1]: Started sshd@425-46.62.141.192:22-46.62.141.104:63211.service - OpenSSH per-connection server daemon (46.62.141.104:63211). Jan 23 18:30:37.887668 sshd[4736]: Invalid user user2 from 46.62.141.104 port 63211 Jan 23 18:30:37.894111 sshd[4736]: Received disconnect from 46.62.141.104 port 63211:11: Bye Bye [preauth] Jan 23 18:30:37.894111 sshd[4736]: Disconnected from invalid user user2 46.62.141.104 port 63211 [preauth] Jan 23 18:30:37.894000 audit[4736]: USER_ERR pid=4736 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:37.897607 systemd[1]: sshd@425-46.62.141.192:22-46.62.141.104:63211.service: Deactivated successfully. Jan 23 18:30:37.897000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@425-46.62.141.192:22-46.62.141.104:63211 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:37.918000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@426-46.62.141.192:22-46.62.141.104:63215 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:37.920097 systemd[1]: Started sshd@426-46.62.141.192:22-46.62.141.104:63215.service - OpenSSH per-connection server daemon (46.62.141.104:63215). Jan 23 18:30:38.042135 sshd[4742]: Received disconnect from 46.62.141.104 port 63215:11: Bye Bye [preauth] Jan 23 18:30:38.042135 sshd[4742]: Disconnected from authenticating user root 46.62.141.104 port 63215 [preauth] Jan 23 18:30:38.041000 audit[4742]: USER_ERR pid=4742 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:38.045531 systemd[1]: sshd@426-46.62.141.192:22-46.62.141.104:63215.service: Deactivated successfully. Jan 23 18:30:38.045000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@426-46.62.141.192:22-46.62.141.104:63215 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:38.067000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@427-46.62.141.192:22-46.62.141.104:63217 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:38.067390 systemd[1]: Started sshd@427-46.62.141.192:22-46.62.141.104:63217.service - OpenSSH per-connection server daemon (46.62.141.104:63217). Jan 23 18:30:38.186088 sshd[4748]: Invalid user admin from 46.62.141.104 port 63217 Jan 23 18:30:38.192750 sshd[4748]: Received disconnect from 46.62.141.104 port 63217:11: Bye Bye [preauth] Jan 23 18:30:38.192750 sshd[4748]: Disconnected from invalid user admin 46.62.141.104 port 63217 [preauth] Jan 23 18:30:38.192000 audit[4748]: USER_ERR pid=4748 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:38.196066 systemd[1]: sshd@427-46.62.141.192:22-46.62.141.104:63217.service: Deactivated successfully. Jan 23 18:30:38.196000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@427-46.62.141.192:22-46.62.141.104:63217 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:38.223780 systemd[1]: Started sshd@428-46.62.141.192:22-46.62.141.104:63219.service - OpenSSH per-connection server daemon (46.62.141.104:63219). Jan 23 18:30:38.223000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@428-46.62.141.192:22-46.62.141.104:63219 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:38.344410 sshd[4754]: Invalid user user from 46.62.141.104 port 63219 Jan 23 18:30:38.351322 sshd[4754]: Received disconnect from 46.62.141.104 port 63219:11: Bye Bye [preauth] Jan 23 18:30:38.351322 sshd[4754]: Disconnected from invalid user user 46.62.141.104 port 63219 [preauth] Jan 23 18:30:38.351000 audit[4754]: USER_ERR pid=4754 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:38.354832 systemd[1]: sshd@428-46.62.141.192:22-46.62.141.104:63219.service: Deactivated successfully. Jan 23 18:30:38.355000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@428-46.62.141.192:22-46.62.141.104:63219 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:38.378000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@429-46.62.141.192:22-46.62.141.104:63221 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:38.378927 systemd[1]: Started sshd@429-46.62.141.192:22-46.62.141.104:63221.service - OpenSSH per-connection server daemon (46.62.141.104:63221). Jan 23 18:30:38.499988 sshd[4760]: Invalid user user2 from 46.62.141.104 port 63221 Jan 23 18:30:38.506319 sshd[4760]: Received disconnect from 46.62.141.104 port 63221:11: Bye Bye [preauth] Jan 23 18:30:38.506397 sshd[4760]: Disconnected from invalid user user2 46.62.141.104 port 63221 [preauth] Jan 23 18:30:38.506000 audit[4760]: USER_ERR pid=4760 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:38.510005 systemd[1]: sshd@429-46.62.141.192:22-46.62.141.104:63221.service: Deactivated successfully. Jan 23 18:30:38.510000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@429-46.62.141.192:22-46.62.141.104:63221 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:38.533641 systemd[1]: Started sshd@430-46.62.141.192:22-46.62.141.104:63223.service - OpenSSH per-connection server daemon (46.62.141.104:63223). Jan 23 18:30:38.533000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@430-46.62.141.192:22-46.62.141.104:63223 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:38.650874 sshd[4766]: Received disconnect from 46.62.141.104 port 63223:11: Bye Bye [preauth] Jan 23 18:30:38.650874 sshd[4766]: Disconnected from authenticating user root 46.62.141.104 port 63223 [preauth] Jan 23 18:30:38.650000 audit[4766]: USER_ERR pid=4766 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:38.655135 systemd[1]: sshd@430-46.62.141.192:22-46.62.141.104:63223.service: Deactivated successfully. Jan 23 18:30:38.655000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@430-46.62.141.192:22-46.62.141.104:63223 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:38.680000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@431-46.62.141.192:22-46.62.141.104:63225 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:38.680190 systemd[1]: Started sshd@431-46.62.141.192:22-46.62.141.104:63225.service - OpenSSH per-connection server daemon (46.62.141.104:63225). Jan 23 18:30:38.790673 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:30:38.789778Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"84afc9f0d5e63dd5 is starting a new election at term 3"} Jan 23 18:30:38.790673 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:30:38.789831Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"84afc9f0d5e63dd5 became pre-candidate at term 3"} Jan 23 18:30:38.790673 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:30:38.789849Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"84afc9f0d5e63dd5 received MsgPreVoteResp from 84afc9f0d5e63dd5 at term 3"} Jan 23 18:30:38.790673 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:30:38.789871Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"84afc9f0d5e63dd5 [logterm: 3, index: 12] sent MsgPreVote request to 15eb2e9460fb69a5 at term 3"} Jan 23 18:30:38.790673 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:30:38.789883Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"84afc9f0d5e63dd5 [logterm: 3, index: 12] sent MsgPreVote request to 5e70f16e3d77e6b8 at term 3"} Jan 23 18:30:38.793861 sshd[4772]: Invalid user admin from 46.62.141.104 port 63225 Jan 23 18:30:38.800746 sshd[4772]: Received disconnect from 46.62.141.104 port 63225:11: Bye Bye [preauth] Jan 23 18:30:38.800746 sshd[4772]: Disconnected from invalid user admin 46.62.141.104 port 63225 [preauth] Jan 23 18:30:38.800000 audit[4772]: USER_ERR pid=4772 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:38.804347 systemd[1]: sshd@431-46.62.141.192:22-46.62.141.104:63225.service: Deactivated successfully. Jan 23 18:30:38.804000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@431-46.62.141.192:22-46.62.141.104:63225 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:38.825000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@432-46.62.141.192:22-46.62.141.104:63226 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:38.825156 systemd[1]: Started sshd@432-46.62.141.192:22-46.62.141.104:63226.service - OpenSSH per-connection server daemon (46.62.141.104:63226). Jan 23 18:30:38.910531 etcd-wrapper[1931]: {"level":"warn","ts":"2026-01-23T18:30:38.910010Z","caller":"rafthttp/probing_status.go:68","msg":"prober detected unhealthy status","round-tripper-name":"ROUND_TRIPPER_RAFT_MESSAGE","remote-peer-id":"5e70f16e3d77e6b8","rtt":"1.643291ms","error":"dial tcp 10.0.0.2:2380: i/o timeout"} Jan 23 18:30:38.912689 etcd-wrapper[1931]: {"level":"warn","ts":"2026-01-23T18:30:38.912312Z","caller":"rafthttp/probing_status.go:68","msg":"prober detected unhealthy status","round-tripper-name":"ROUND_TRIPPER_RAFT_MESSAGE","remote-peer-id":"15eb2e9460fb69a5","rtt":"736.265µs","error":"dial tcp 10.0.0.3:2380: i/o timeout"} Jan 23 18:30:38.938119 sshd[4778]: Invalid user user from 46.62.141.104 port 63226 Jan 23 18:30:38.944627 sshd[4778]: Received disconnect from 46.62.141.104 port 63226:11: Bye Bye [preauth] Jan 23 18:30:38.944627 sshd[4778]: Disconnected from invalid user user 46.62.141.104 port 63226 [preauth] Jan 23 18:30:38.944000 audit[4778]: USER_ERR pid=4778 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:38.948217 systemd[1]: sshd@432-46.62.141.192:22-46.62.141.104:63226.service: Deactivated successfully. Jan 23 18:30:38.948000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@432-46.62.141.192:22-46.62.141.104:63226 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:38.972330 systemd[1]: Started sshd@433-46.62.141.192:22-46.62.141.104:63229.service - OpenSSH per-connection server daemon (46.62.141.104:63229). Jan 23 18:30:38.972000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@433-46.62.141.192:22-46.62.141.104:63229 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:39.079598 sshd[4784]: Invalid user user2 from 46.62.141.104 port 63229 Jan 23 18:30:39.086076 sshd[4784]: Received disconnect from 46.62.141.104 port 63229:11: Bye Bye [preauth] Jan 23 18:30:39.086076 sshd[4784]: Disconnected from invalid user user2 46.62.141.104 port 63229 [preauth] Jan 23 18:30:39.086000 audit[4784]: USER_ERR pid=4784 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:39.089654 systemd[1]: sshd@433-46.62.141.192:22-46.62.141.104:63229.service: Deactivated successfully. Jan 23 18:30:39.089000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@433-46.62.141.192:22-46.62.141.104:63229 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:39.112000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@434-46.62.141.192:22-46.62.141.104:63230 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:39.112110 systemd[1]: Started sshd@434-46.62.141.192:22-46.62.141.104:63230.service - OpenSSH per-connection server daemon (46.62.141.104:63230). Jan 23 18:30:39.234880 sshd[4790]: Received disconnect from 46.62.141.104 port 63230:11: Bye Bye [preauth] Jan 23 18:30:39.234880 sshd[4790]: Disconnected from authenticating user root 46.62.141.104 port 63230 [preauth] Jan 23 18:30:39.234000 audit[4790]: USER_ERR pid=4790 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:39.238490 systemd[1]: sshd@434-46.62.141.192:22-46.62.141.104:63230.service: Deactivated successfully. Jan 23 18:30:39.238000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@434-46.62.141.192:22-46.62.141.104:63230 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:39.258000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@435-46.62.141.192:22-46.62.141.104:63232 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:39.258119 systemd[1]: Started sshd@435-46.62.141.192:22-46.62.141.104:63232.service - OpenSSH per-connection server daemon (46.62.141.104:63232). Jan 23 18:30:39.374764 sshd[4796]: Invalid user admin from 46.62.141.104 port 63232 Jan 23 18:30:39.381936 sshd[4796]: Received disconnect from 46.62.141.104 port 63232:11: Bye Bye [preauth] Jan 23 18:30:39.381936 sshd[4796]: Disconnected from invalid user admin 46.62.141.104 port 63232 [preauth] Jan 23 18:30:39.381000 audit[4796]: USER_ERR pid=4796 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:39.385965 systemd[1]: sshd@435-46.62.141.192:22-46.62.141.104:63232.service: Deactivated successfully. Jan 23 18:30:39.386000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@435-46.62.141.192:22-46.62.141.104:63232 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:39.406000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@436-46.62.141.192:22-46.62.141.104:63234 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:39.406837 systemd[1]: Started sshd@436-46.62.141.192:22-46.62.141.104:63234.service - OpenSSH per-connection server daemon (46.62.141.104:63234). Jan 23 18:30:39.521341 sshd[4802]: Invalid user user from 46.62.141.104 port 63234 Jan 23 18:30:39.527675 sshd[4802]: Received disconnect from 46.62.141.104 port 63234:11: Bye Bye [preauth] Jan 23 18:30:39.527675 sshd[4802]: Disconnected from invalid user user 46.62.141.104 port 63234 [preauth] Jan 23 18:30:39.527000 audit[4802]: USER_ERR pid=4802 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:39.532212 systemd[1]: sshd@436-46.62.141.192:22-46.62.141.104:63234.service: Deactivated successfully. Jan 23 18:30:39.532000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@436-46.62.141.192:22-46.62.141.104:63234 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:39.557000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@437-46.62.141.192:22-46.62.141.104:63235 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:39.557437 systemd[1]: Started sshd@437-46.62.141.192:22-46.62.141.104:63235.service - OpenSSH per-connection server daemon (46.62.141.104:63235). Jan 23 18:30:39.676022 sshd[4808]: Invalid user user2 from 46.62.141.104 port 63235 Jan 23 18:30:39.682684 sshd[4808]: Received disconnect from 46.62.141.104 port 63235:11: Bye Bye [preauth] Jan 23 18:30:39.682684 sshd[4808]: Disconnected from invalid user user2 46.62.141.104 port 63235 [preauth] Jan 23 18:30:39.682000 audit[4808]: USER_ERR pid=4808 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:39.686399 systemd[1]: sshd@437-46.62.141.192:22-46.62.141.104:63235.service: Deactivated successfully. Jan 23 18:30:39.686000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@437-46.62.141.192:22-46.62.141.104:63235 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:39.709000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@438-46.62.141.192:22-46.62.141.104:63239 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:39.710048 systemd[1]: Started sshd@438-46.62.141.192:22-46.62.141.104:63239.service - OpenSSH per-connection server daemon (46.62.141.104:63239). Jan 23 18:30:39.829517 sshd[4814]: Received disconnect from 46.62.141.104 port 63239:11: Bye Bye [preauth] Jan 23 18:30:39.829517 sshd[4814]: Disconnected from authenticating user root 46.62.141.104 port 63239 [preauth] Jan 23 18:30:39.829000 audit[4814]: USER_ERR pid=4814 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:39.834090 systemd[1]: sshd@438-46.62.141.192:22-46.62.141.104:63239.service: Deactivated successfully. Jan 23 18:30:39.834000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@438-46.62.141.192:22-46.62.141.104:63239 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:39.861000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@439-46.62.141.192:22-46.62.141.104:63240 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:39.861521 systemd[1]: Started sshd@439-46.62.141.192:22-46.62.141.104:63240.service - OpenSSH per-connection server daemon (46.62.141.104:63240). Jan 23 18:30:39.979854 sshd[4820]: Invalid user admin from 46.62.141.104 port 63240 Jan 23 18:30:39.986337 sshd[4820]: Received disconnect from 46.62.141.104 port 63240:11: Bye Bye [preauth] Jan 23 18:30:39.986337 sshd[4820]: Disconnected from invalid user admin 46.62.141.104 port 63240 [preauth] Jan 23 18:30:39.986000 audit[4820]: USER_ERR pid=4820 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:39.990453 systemd[1]: sshd@439-46.62.141.192:22-46.62.141.104:63240.service: Deactivated successfully. Jan 23 18:30:39.990000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@439-46.62.141.192:22-46.62.141.104:63240 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:40.009000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@440-46.62.141.192:22-46.62.141.104:63242 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:40.009797 systemd[1]: Started sshd@440-46.62.141.192:22-46.62.141.104:63242.service - OpenSSH per-connection server daemon (46.62.141.104:63242). Jan 23 18:30:40.132726 sshd[4826]: Invalid user user from 46.62.141.104 port 63242 Jan 23 18:30:40.141000 audit[4826]: USER_ERR pid=4826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:40.142480 sshd[4826]: Received disconnect from 46.62.141.104 port 63242:11: Bye Bye [preauth] Jan 23 18:30:40.142480 sshd[4826]: Disconnected from invalid user user 46.62.141.104 port 63242 [preauth] Jan 23 18:30:40.146364 systemd[1]: sshd@440-46.62.141.192:22-46.62.141.104:63242.service: Deactivated successfully. Jan 23 18:30:40.146000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@440-46.62.141.192:22-46.62.141.104:63242 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:40.165468 systemd[1]: Started sshd@441-46.62.141.192:22-46.62.141.104:63244.service - OpenSSH per-connection server daemon (46.62.141.104:63244). Jan 23 18:30:40.165000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@441-46.62.141.192:22-46.62.141.104:63244 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:40.191779 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:30:40.190515Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"84afc9f0d5e63dd5 is starting a new election at term 3"} Jan 23 18:30:40.191779 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:30:40.190569Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"84afc9f0d5e63dd5 became pre-candidate at term 3"} Jan 23 18:30:40.191779 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:30:40.190588Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"84afc9f0d5e63dd5 received MsgPreVoteResp from 84afc9f0d5e63dd5 at term 3"} Jan 23 18:30:40.191779 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:30:40.190609Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"84afc9f0d5e63dd5 [logterm: 3, index: 12] sent MsgPreVote request to 15eb2e9460fb69a5 at term 3"} Jan 23 18:30:40.191779 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:30:40.190621Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"84afc9f0d5e63dd5 [logterm: 3, index: 12] sent MsgPreVote request to 5e70f16e3d77e6b8 at term 3"} Jan 23 18:30:40.277114 sshd[4834]: Invalid user user2 from 46.62.141.104 port 63244 Jan 23 18:30:40.287000 audit[4834]: USER_ERR pid=4834 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:40.287923 sshd[4834]: Received disconnect from 46.62.141.104 port 63244:11: Bye Bye [preauth] Jan 23 18:30:40.287923 sshd[4834]: Disconnected from invalid user user2 46.62.141.104 port 63244 [preauth] Jan 23 18:30:40.292708 systemd[1]: sshd@441-46.62.141.192:22-46.62.141.104:63244.service: Deactivated successfully. Jan 23 18:30:40.293000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@441-46.62.141.192:22-46.62.141.104:63244 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:40.312000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@442-46.62.141.192:22-46.62.141.104:63246 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:40.312743 systemd[1]: Started sshd@442-46.62.141.192:22-46.62.141.104:63246.service - OpenSSH per-connection server daemon (46.62.141.104:63246). Jan 23 18:30:40.443436 sshd[4842]: Received disconnect from 46.62.141.104 port 63246:11: Bye Bye [preauth] Jan 23 18:30:40.443436 sshd[4842]: Disconnected from authenticating user root 46.62.141.104 port 63246 [preauth] Jan 23 18:30:40.444000 audit[4842]: USER_ERR pid=4842 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:40.448152 systemd[1]: sshd@442-46.62.141.192:22-46.62.141.104:63246.service: Deactivated successfully. Jan 23 18:30:40.448000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@442-46.62.141.192:22-46.62.141.104:63246 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:40.467000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@443-46.62.141.192:22-46.62.141.104:63249 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:40.467475 systemd[1]: Started sshd@443-46.62.141.192:22-46.62.141.104:63249.service - OpenSSH per-connection server daemon (46.62.141.104:63249). Jan 23 18:30:40.585305 sshd[4848]: Invalid user admin from 46.62.141.104 port 63249 Jan 23 18:30:40.591785 sshd[4848]: Received disconnect from 46.62.141.104 port 63249:11: Bye Bye [preauth] Jan 23 18:30:40.591785 sshd[4848]: Disconnected from invalid user admin 46.62.141.104 port 63249 [preauth] Jan 23 18:30:40.591000 audit[4848]: USER_ERR pid=4848 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:40.595832 systemd[1]: sshd@443-46.62.141.192:22-46.62.141.104:63249.service: Deactivated successfully. Jan 23 18:30:40.596000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@443-46.62.141.192:22-46.62.141.104:63249 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:40.614000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@444-46.62.141.192:22-46.62.141.104:63250 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:40.614771 systemd[1]: Started sshd@444-46.62.141.192:22-46.62.141.104:63250.service - OpenSSH per-connection server daemon (46.62.141.104:63250). Jan 23 18:30:40.706504 sshd[4855]: Invalid user user from 46.62.141.104 port 63250 Jan 23 18:30:40.712395 sshd[4855]: Received disconnect from 46.62.141.104 port 63250:11: Bye Bye [preauth] Jan 23 18:30:40.712395 sshd[4855]: Disconnected from invalid user user 46.62.141.104 port 63250 [preauth] Jan 23 18:30:40.713000 audit[4855]: USER_ERR pid=4855 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:40.717623 systemd[1]: sshd@444-46.62.141.192:22-46.62.141.104:63250.service: Deactivated successfully. Jan 23 18:30:40.717000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@444-46.62.141.192:22-46.62.141.104:63250 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:40.736000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@445-46.62.141.192:22-46.62.141.104:63253 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:40.736868 systemd[1]: Started sshd@445-46.62.141.192:22-46.62.141.104:63253.service - OpenSSH per-connection server daemon (46.62.141.104:63253). Jan 23 18:30:40.849014 sshd[4861]: Invalid user user2 from 46.62.141.104 port 63253 Jan 23 18:30:40.855491 sshd[4861]: Received disconnect from 46.62.141.104 port 63253:11: Bye Bye [preauth] Jan 23 18:30:40.855491 sshd[4861]: Disconnected from invalid user user2 46.62.141.104 port 63253 [preauth] Jan 23 18:30:40.855000 audit[4861]: USER_ERR pid=4861 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:40.859329 systemd[1]: sshd@445-46.62.141.192:22-46.62.141.104:63253.service: Deactivated successfully. Jan 23 18:30:40.860000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@445-46.62.141.192:22-46.62.141.104:63253 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:40.882000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@446-46.62.141.192:22-46.62.141.104:63254 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:40.882773 systemd[1]: Started sshd@446-46.62.141.192:22-46.62.141.104:63254.service - OpenSSH per-connection server daemon (46.62.141.104:63254). Jan 23 18:30:40.985670 sshd[4867]: Received disconnect from 46.62.141.104 port 63254:11: Bye Bye [preauth] Jan 23 18:30:40.985670 sshd[4867]: Disconnected from authenticating user root 46.62.141.104 port 63254 [preauth] Jan 23 18:30:40.986000 audit[4867]: USER_ERR pid=4867 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:40.990090 systemd[1]: sshd@446-46.62.141.192:22-46.62.141.104:63254.service: Deactivated successfully. Jan 23 18:30:40.990000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@446-46.62.141.192:22-46.62.141.104:63254 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:41.014000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@447-46.62.141.192:22-46.62.141.104:63257 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:41.014718 systemd[1]: Started sshd@447-46.62.141.192:22-46.62.141.104:63257.service - OpenSSH per-connection server daemon (46.62.141.104:63257). Jan 23 18:30:41.135232 sshd[4873]: Invalid user admin from 46.62.141.104 port 63257 Jan 23 18:30:41.141988 sshd[4873]: Received disconnect from 46.62.141.104 port 63257:11: Bye Bye [preauth] Jan 23 18:30:41.141988 sshd[4873]: Disconnected from invalid user admin 46.62.141.104 port 63257 [preauth] Jan 23 18:30:41.151320 kernel: kauditd_printk_skb: 92 callbacks suppressed Jan 23 18:30:41.151444 kernel: audit: type=1109 audit(1769193041.141:1527): pid=4873 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:41.141000 audit[4873]: USER_ERR pid=4873 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:41.144930 systemd[1]: sshd@447-46.62.141.192:22-46.62.141.104:63257.service: Deactivated successfully. Jan 23 18:30:41.145000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@447-46.62.141.192:22-46.62.141.104:63257 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:41.160182 kernel: audit: type=1131 audit(1769193041.145:1528): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@447-46.62.141.192:22-46.62.141.104:63257 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:41.184000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@448-46.62.141.192:22-46.62.141.104:63259 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:41.197335 kernel: audit: type=1130 audit(1769193041.184:1529): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@448-46.62.141.192:22-46.62.141.104:63259 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:41.184938 systemd[1]: Started sshd@448-46.62.141.192:22-46.62.141.104:63259.service - OpenSSH per-connection server daemon (46.62.141.104:63259). Jan 23 18:30:41.298785 sshd[4879]: Invalid user user from 46.62.141.104 port 63259 Jan 23 18:30:41.305257 sshd[4879]: Received disconnect from 46.62.141.104 port 63259:11: Bye Bye [preauth] Jan 23 18:30:41.305257 sshd[4879]: Disconnected from invalid user user 46.62.141.104 port 63259 [preauth] Jan 23 18:30:41.305000 audit[4879]: USER_ERR pid=4879 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:41.309722 systemd[1]: sshd@448-46.62.141.192:22-46.62.141.104:63259.service: Deactivated successfully. Jan 23 18:30:41.310000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@448-46.62.141.192:22-46.62.141.104:63259 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:41.320199 kernel: audit: type=1109 audit(1769193041.305:1530): pid=4879 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:41.320257 kernel: audit: type=1131 audit(1769193041.310:1531): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@448-46.62.141.192:22-46.62.141.104:63259 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:41.347000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@449-46.62.141.192:22-46.62.141.104:63260 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:41.347506 systemd[1]: Started sshd@449-46.62.141.192:22-46.62.141.104:63260.service - OpenSSH per-connection server daemon (46.62.141.104:63260). Jan 23 18:30:41.360365 kernel: audit: type=1130 audit(1769193041.347:1532): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@449-46.62.141.192:22-46.62.141.104:63260 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:41.457028 sshd[4885]: Invalid user user2 from 46.62.141.104 port 63260 Jan 23 18:30:41.463521 sshd[4885]: Received disconnect from 46.62.141.104 port 63260:11: Bye Bye [preauth] Jan 23 18:30:41.463521 sshd[4885]: Disconnected from invalid user user2 46.62.141.104 port 63260 [preauth] Jan 23 18:30:41.463000 audit[4885]: USER_ERR pid=4885 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:41.467407 systemd[1]: sshd@449-46.62.141.192:22-46.62.141.104:63260.service: Deactivated successfully. Jan 23 18:30:41.467000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@449-46.62.141.192:22-46.62.141.104:63260 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:41.478376 kernel: audit: type=1109 audit(1769193041.463:1533): pid=4885 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:41.478468 kernel: audit: type=1131 audit(1769193041.467:1534): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@449-46.62.141.192:22-46.62.141.104:63260 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:41.499519 systemd[1]: Started sshd@450-46.62.141.192:22-46.62.141.104:63265.service - OpenSSH per-connection server daemon (46.62.141.104:63265). Jan 23 18:30:41.499000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@450-46.62.141.192:22-46.62.141.104:63265 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:41.513813 kernel: audit: type=1130 audit(1769193041.499:1535): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@450-46.62.141.192:22-46.62.141.104:63265 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:41.590297 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:30:41.589762Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"84afc9f0d5e63dd5 is starting a new election at term 3"} Jan 23 18:30:41.591806 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:30:41.591005Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"84afc9f0d5e63dd5 became pre-candidate at term 3"} Jan 23 18:30:41.591806 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:30:41.591131Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"84afc9f0d5e63dd5 received MsgPreVoteResp from 84afc9f0d5e63dd5 at term 3"} Jan 23 18:30:41.591806 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:30:41.591324Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"84afc9f0d5e63dd5 [logterm: 3, index: 12] sent MsgPreVote request to 15eb2e9460fb69a5 at term 3"} Jan 23 18:30:41.591806 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:30:41.591375Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"84afc9f0d5e63dd5 [logterm: 3, index: 12] sent MsgPreVote request to 5e70f16e3d77e6b8 at term 3"} Jan 23 18:30:41.614919 sshd[4891]: Received disconnect from 46.62.141.104 port 63265:11: Bye Bye [preauth] Jan 23 18:30:41.614919 sshd[4891]: Disconnected from authenticating user root 46.62.141.104 port 63265 [preauth] Jan 23 18:30:41.614000 audit[4891]: USER_ERR pid=4891 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:41.628712 kernel: audit: type=1109 audit(1769193041.614:1536): pid=4891 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:41.645583 systemd[1]: sshd@450-46.62.141.192:22-46.62.141.104:63265.service: Deactivated successfully. Jan 23 18:30:41.645000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@450-46.62.141.192:22-46.62.141.104:63265 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:41.652000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@451-46.62.141.192:22-46.62.141.104:63266 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:41.652941 systemd[1]: Started sshd@451-46.62.141.192:22-46.62.141.104:63266.service - OpenSSH per-connection server daemon (46.62.141.104:63266). Jan 23 18:30:41.766000 sshd[4897]: Invalid user admin from 46.62.141.104 port 63266 Jan 23 18:30:41.772707 sshd[4897]: Received disconnect from 46.62.141.104 port 63266:11: Bye Bye [preauth] Jan 23 18:30:41.772707 sshd[4897]: Disconnected from invalid user admin 46.62.141.104 port 63266 [preauth] Jan 23 18:30:41.772000 audit[4897]: USER_ERR pid=4897 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:41.777316 systemd[1]: sshd@451-46.62.141.192:22-46.62.141.104:63266.service: Deactivated successfully. Jan 23 18:30:41.777000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@451-46.62.141.192:22-46.62.141.104:63266 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:41.799000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@452-46.62.141.192:22-46.62.141.104:63270 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:41.800000 systemd[1]: Started sshd@452-46.62.141.192:22-46.62.141.104:63270.service - OpenSSH per-connection server daemon (46.62.141.104:63270). Jan 23 18:30:41.923127 sshd[4903]: Invalid user user from 46.62.141.104 port 63270 Jan 23 18:30:41.929540 sshd[4903]: Received disconnect from 46.62.141.104 port 63270:11: Bye Bye [preauth] Jan 23 18:30:41.929540 sshd[4903]: Disconnected from invalid user user 46.62.141.104 port 63270 [preauth] Jan 23 18:30:41.929000 audit[4903]: USER_ERR pid=4903 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:41.933495 systemd[1]: sshd@452-46.62.141.192:22-46.62.141.104:63270.service: Deactivated successfully. Jan 23 18:30:41.933000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@452-46.62.141.192:22-46.62.141.104:63270 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:41.954923 systemd[1]: Started sshd@453-46.62.141.192:22-46.62.141.104:63275.service - OpenSSH per-connection server daemon (46.62.141.104:63275). Jan 23 18:30:41.954000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@453-46.62.141.192:22-46.62.141.104:63275 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:42.058523 sshd[4909]: Invalid user user2 from 46.62.141.104 port 63275 Jan 23 18:30:42.065668 sshd[4909]: Received disconnect from 46.62.141.104 port 63275:11: Bye Bye [preauth] Jan 23 18:30:42.065668 sshd[4909]: Disconnected from invalid user user2 46.62.141.104 port 63275 [preauth] Jan 23 18:30:42.065000 audit[4909]: USER_ERR pid=4909 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:42.069106 systemd[1]: sshd@453-46.62.141.192:22-46.62.141.104:63275.service: Deactivated successfully. Jan 23 18:30:42.069000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@453-46.62.141.192:22-46.62.141.104:63275 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:42.094000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@454-46.62.141.192:22-46.62.141.104:63277 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:42.094123 systemd[1]: Started sshd@454-46.62.141.192:22-46.62.141.104:63277.service - OpenSSH per-connection server daemon (46.62.141.104:63277). Jan 23 18:30:42.214024 sshd[4915]: Received disconnect from 46.62.141.104 port 63277:11: Bye Bye [preauth] Jan 23 18:30:42.214024 sshd[4915]: Disconnected from authenticating user root 46.62.141.104 port 63277 [preauth] Jan 23 18:30:42.214000 audit[4915]: USER_ERR pid=4915 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:42.217957 systemd[1]: sshd@454-46.62.141.192:22-46.62.141.104:63277.service: Deactivated successfully. Jan 23 18:30:42.218000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@454-46.62.141.192:22-46.62.141.104:63277 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:42.238991 systemd[1]: Started sshd@455-46.62.141.192:22-46.62.141.104:63279.service - OpenSSH per-connection server daemon (46.62.141.104:63279). Jan 23 18:30:42.238000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@455-46.62.141.192:22-46.62.141.104:63279 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:42.343880 sshd[4921]: Invalid user admin from 46.62.141.104 port 63279 Jan 23 18:30:42.349185 sshd[4921]: Received disconnect from 46.62.141.104 port 63279:11: Bye Bye [preauth] Jan 23 18:30:42.349185 sshd[4921]: Disconnected from invalid user admin 46.62.141.104 port 63279 [preauth] Jan 23 18:30:42.349000 audit[4921]: USER_ERR pid=4921 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:42.352912 systemd[1]: sshd@455-46.62.141.192:22-46.62.141.104:63279.service: Deactivated successfully. Jan 23 18:30:42.353000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@455-46.62.141.192:22-46.62.141.104:63279 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:42.381000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@456-46.62.141.192:22-46.62.141.104:63281 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:42.381129 systemd[1]: Started sshd@456-46.62.141.192:22-46.62.141.104:63281.service - OpenSSH per-connection server daemon (46.62.141.104:63281). Jan 23 18:30:42.469777 sshd[4927]: Invalid user user from 46.62.141.104 port 63281 Jan 23 18:30:42.476249 sshd[4927]: Received disconnect from 46.62.141.104 port 63281:11: Bye Bye [preauth] Jan 23 18:30:42.476249 sshd[4927]: Disconnected from invalid user user 46.62.141.104 port 63281 [preauth] Jan 23 18:30:42.477000 audit[4927]: USER_ERR pid=4927 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:42.478978 systemd[1]: sshd@456-46.62.141.192:22-46.62.141.104:63281.service: Deactivated successfully. Jan 23 18:30:42.479000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@456-46.62.141.192:22-46.62.141.104:63281 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:42.498000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@457-46.62.141.192:22-46.62.141.104:63284 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:42.498733 systemd[1]: Started sshd@457-46.62.141.192:22-46.62.141.104:63284.service - OpenSSH per-connection server daemon (46.62.141.104:63284). Jan 23 18:30:42.613294 sshd[4933]: Invalid user user2 from 46.62.141.104 port 63284 Jan 23 18:30:42.620021 sshd[4933]: Received disconnect from 46.62.141.104 port 63284:11: Bye Bye [preauth] Jan 23 18:30:42.620021 sshd[4933]: Disconnected from invalid user user2 46.62.141.104 port 63284 [preauth] Jan 23 18:30:42.619000 audit[4933]: USER_ERR pid=4933 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:42.623972 systemd[1]: sshd@457-46.62.141.192:22-46.62.141.104:63284.service: Deactivated successfully. Jan 23 18:30:42.624000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@457-46.62.141.192:22-46.62.141.104:63284 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:42.643000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@458-46.62.141.192:22-46.62.141.104:63285 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:42.643846 systemd[1]: Started sshd@458-46.62.141.192:22-46.62.141.104:63285.service - OpenSSH per-connection server daemon (46.62.141.104:63285). Jan 23 18:30:42.771000 audit[4939]: USER_ERR pid=4939 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:42.771705 sshd[4939]: Received disconnect from 46.62.141.104 port 63285:11: Bye Bye [preauth] Jan 23 18:30:42.771705 sshd[4939]: Disconnected from authenticating user root 46.62.141.104 port 63285 [preauth] Jan 23 18:30:42.775610 systemd[1]: sshd@458-46.62.141.192:22-46.62.141.104:63285.service: Deactivated successfully. Jan 23 18:30:42.775000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@458-46.62.141.192:22-46.62.141.104:63285 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:42.797000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@459-46.62.141.192:22-46.62.141.104:63288 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:42.797657 systemd[1]: Started sshd@459-46.62.141.192:22-46.62.141.104:63288.service - OpenSSH per-connection server daemon (46.62.141.104:63288). Jan 23 18:30:42.936377 sshd[4945]: Invalid user admin from 46.62.141.104 port 63288 Jan 23 18:30:42.943862 sshd[4945]: Received disconnect from 46.62.141.104 port 63288:11: Bye Bye [preauth] Jan 23 18:30:42.943862 sshd[4945]: Disconnected from invalid user admin 46.62.141.104 port 63288 [preauth] Jan 23 18:30:42.943000 audit[4945]: USER_ERR pid=4945 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:42.947780 systemd[1]: sshd@459-46.62.141.192:22-46.62.141.104:63288.service: Deactivated successfully. Jan 23 18:30:42.948000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@459-46.62.141.192:22-46.62.141.104:63288 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:42.966000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@460-46.62.141.192:22-46.62.141.104:63291 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:42.966559 systemd[1]: Started sshd@460-46.62.141.192:22-46.62.141.104:63291.service - OpenSSH per-connection server daemon (46.62.141.104:63291). Jan 23 18:30:42.990508 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:30:42.990065Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"84afc9f0d5e63dd5 is starting a new election at term 3"} Jan 23 18:30:42.990508 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:30:42.990115Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"84afc9f0d5e63dd5 became pre-candidate at term 3"} Jan 23 18:30:42.990508 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:30:42.990133Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"84afc9f0d5e63dd5 received MsgPreVoteResp from 84afc9f0d5e63dd5 at term 3"} Jan 23 18:30:42.990508 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:30:42.990153Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"84afc9f0d5e63dd5 [logterm: 3, index: 12] sent MsgPreVote request to 15eb2e9460fb69a5 at term 3"} Jan 23 18:30:42.990508 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:30:42.990165Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"84afc9f0d5e63dd5 [logterm: 3, index: 12] sent MsgPreVote request to 5e70f16e3d77e6b8 at term 3"} Jan 23 18:30:43.085367 sshd[4951]: Invalid user user from 46.62.141.104 port 63291 Jan 23 18:30:43.092137 sshd[4951]: Received disconnect from 46.62.141.104 port 63291:11: Bye Bye [preauth] Jan 23 18:30:43.092137 sshd[4951]: Disconnected from invalid user user 46.62.141.104 port 63291 [preauth] Jan 23 18:30:43.092000 audit[4951]: USER_ERR pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:43.096193 systemd[1]: sshd@460-46.62.141.192:22-46.62.141.104:63291.service: Deactivated successfully. Jan 23 18:30:43.096000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@460-46.62.141.192:22-46.62.141.104:63291 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:43.113000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@461-46.62.141.192:22-46.62.141.104:63293 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:43.113248 systemd[1]: Started sshd@461-46.62.141.192:22-46.62.141.104:63293.service - OpenSSH per-connection server daemon (46.62.141.104:63293). Jan 23 18:30:43.208904 sshd[4957]: Invalid user user2 from 46.62.141.104 port 63293 Jan 23 18:30:43.214550 sshd[4957]: Received disconnect from 46.62.141.104 port 63293:11: Bye Bye [preauth] Jan 23 18:30:43.214550 sshd[4957]: Disconnected from invalid user user2 46.62.141.104 port 63293 [preauth] Jan 23 18:30:43.215000 audit[4957]: USER_ERR pid=4957 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:43.217317 systemd[1]: sshd@461-46.62.141.192:22-46.62.141.104:63293.service: Deactivated successfully. Jan 23 18:30:43.217000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@461-46.62.141.192:22-46.62.141.104:63293 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:43.239000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@462-46.62.141.192:22-46.62.141.104:63296 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:43.239445 systemd[1]: Started sshd@462-46.62.141.192:22-46.62.141.104:63296.service - OpenSSH per-connection server daemon (46.62.141.104:63296). Jan 23 18:30:43.337512 sshd[4963]: Received disconnect from 46.62.141.104 port 63296:11: Bye Bye [preauth] Jan 23 18:30:43.337512 sshd[4963]: Disconnected from authenticating user root 46.62.141.104 port 63296 [preauth] Jan 23 18:30:43.337000 audit[4963]: USER_ERR pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:43.340840 systemd[1]: sshd@462-46.62.141.192:22-46.62.141.104:63296.service: Deactivated successfully. Jan 23 18:30:43.341000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@462-46.62.141.192:22-46.62.141.104:63296 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:43.361878 systemd[1]: Started sshd@463-46.62.141.192:22-46.62.141.104:63297.service - OpenSSH per-connection server daemon (46.62.141.104:63297). Jan 23 18:30:43.361000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@463-46.62.141.192:22-46.62.141.104:63297 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:43.465211 sshd[4969]: Invalid user admin from 46.62.141.104 port 63297 Jan 23 18:30:43.471672 sshd[4969]: Received disconnect from 46.62.141.104 port 63297:11: Bye Bye [preauth] Jan 23 18:30:43.471672 sshd[4969]: Disconnected from invalid user admin 46.62.141.104 port 63297 [preauth] Jan 23 18:30:43.471000 audit[4969]: USER_ERR pid=4969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:43.474812 systemd[1]: sshd@463-46.62.141.192:22-46.62.141.104:63297.service: Deactivated successfully. Jan 23 18:30:43.474000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@463-46.62.141.192:22-46.62.141.104:63297 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:43.491455 systemd[1]: Started sshd@464-46.62.141.192:22-46.62.141.104:63299.service - OpenSSH per-connection server daemon (46.62.141.104:63299). Jan 23 18:30:43.491000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@464-46.62.141.192:22-46.62.141.104:63299 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:43.595631 sshd[4975]: Invalid user user from 46.62.141.104 port 63299 Jan 23 18:30:43.602009 sshd[4975]: Received disconnect from 46.62.141.104 port 63299:11: Bye Bye [preauth] Jan 23 18:30:43.602009 sshd[4975]: Disconnected from invalid user user 46.62.141.104 port 63299 [preauth] Jan 23 18:30:43.601000 audit[4975]: USER_ERR pid=4975 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:43.604890 systemd[1]: sshd@464-46.62.141.192:22-46.62.141.104:63299.service: Deactivated successfully. Jan 23 18:30:43.604000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@464-46.62.141.192:22-46.62.141.104:63299 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:43.623000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@465-46.62.141.192:22-46.62.141.104:63301 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:43.623476 systemd[1]: Started sshd@465-46.62.141.192:22-46.62.141.104:63301.service - OpenSSH per-connection server daemon (46.62.141.104:63301). Jan 23 18:30:43.711995 sshd[4981]: Invalid user user2 from 46.62.141.104 port 63301 Jan 23 18:30:43.719302 sshd[4981]: Received disconnect from 46.62.141.104 port 63301:11: Bye Bye [preauth] Jan 23 18:30:43.719302 sshd[4981]: Disconnected from invalid user user2 46.62.141.104 port 63301 [preauth] Jan 23 18:30:43.719000 audit[4981]: USER_ERR pid=4981 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:43.723875 systemd[1]: sshd@465-46.62.141.192:22-46.62.141.104:63301.service: Deactivated successfully. Jan 23 18:30:43.724000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@465-46.62.141.192:22-46.62.141.104:63301 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:43.748000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@466-46.62.141.192:22-46.62.141.104:63302 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:43.748544 systemd[1]: Started sshd@466-46.62.141.192:22-46.62.141.104:63302.service - OpenSSH per-connection server daemon (46.62.141.104:63302). Jan 23 18:30:43.887742 sshd[4987]: Received disconnect from 46.62.141.104 port 63302:11: Bye Bye [preauth] Jan 23 18:30:43.887742 sshd[4987]: Disconnected from authenticating user root 46.62.141.104 port 63302 [preauth] Jan 23 18:30:43.887000 audit[4987]: USER_ERR pid=4987 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:43.891595 systemd[1]: sshd@466-46.62.141.192:22-46.62.141.104:63302.service: Deactivated successfully. Jan 23 18:30:43.891000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@466-46.62.141.192:22-46.62.141.104:63302 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:43.911376 etcd-wrapper[1931]: {"level":"warn","ts":"2026-01-23T18:30:43.910621Z","caller":"rafthttp/probing_status.go:68","msg":"prober detected unhealthy status","round-tripper-name":"ROUND_TRIPPER_RAFT_MESSAGE","remote-peer-id":"5e70f16e3d77e6b8","rtt":"1.643291ms","error":"dial tcp 10.0.0.2:2380: i/o timeout"} Jan 23 18:30:43.913737 etcd-wrapper[1931]: {"level":"warn","ts":"2026-01-23T18:30:43.913196Z","caller":"rafthttp/probing_status.go:68","msg":"prober detected unhealthy status","round-tripper-name":"ROUND_TRIPPER_RAFT_MESSAGE","remote-peer-id":"15eb2e9460fb69a5","rtt":"736.265µs","error":"dial tcp 10.0.0.3:2380: i/o timeout"} Jan 23 18:30:43.915572 systemd[1]: Started sshd@467-46.62.141.192:22-46.62.141.104:63305.service - OpenSSH per-connection server daemon (46.62.141.104:63305). Jan 23 18:30:43.915000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@467-46.62.141.192:22-46.62.141.104:63305 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:44.025156 sshd[4993]: Invalid user admin from 46.62.141.104 port 63305 Jan 23 18:30:44.031303 sshd[4993]: Received disconnect from 46.62.141.104 port 63305:11: Bye Bye [preauth] Jan 23 18:30:44.031303 sshd[4993]: Disconnected from invalid user admin 46.62.141.104 port 63305 [preauth] Jan 23 18:30:44.031000 audit[4993]: USER_ERR pid=4993 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:44.034898 systemd[1]: sshd@467-46.62.141.192:22-46.62.141.104:63305.service: Deactivated successfully. Jan 23 18:30:44.035000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@467-46.62.141.192:22-46.62.141.104:63305 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:44.057000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@468-46.62.141.192:22-46.62.141.104:63306 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:44.057224 systemd[1]: Started sshd@468-46.62.141.192:22-46.62.141.104:63306.service - OpenSSH per-connection server daemon (46.62.141.104:63306). Jan 23 18:30:44.156396 sshd[4999]: Invalid user user from 46.62.141.104 port 63306 Jan 23 18:30:44.162987 sshd[4999]: Received disconnect from 46.62.141.104 port 63306:11: Bye Bye [preauth] Jan 23 18:30:44.162987 sshd[4999]: Disconnected from invalid user user 46.62.141.104 port 63306 [preauth] Jan 23 18:30:44.162000 audit[4999]: USER_ERR pid=4999 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:44.166234 systemd[1]: sshd@468-46.62.141.192:22-46.62.141.104:63306.service: Deactivated successfully. Jan 23 18:30:44.166000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@468-46.62.141.192:22-46.62.141.104:63306 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:44.187000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@469-46.62.141.192:22-46.62.141.104:63308 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:44.187485 systemd[1]: Started sshd@469-46.62.141.192:22-46.62.141.104:63308.service - OpenSSH per-connection server daemon (46.62.141.104:63308). Jan 23 18:30:44.297551 sshd[5005]: Invalid user user2 from 46.62.141.104 port 63308 Jan 23 18:30:44.303826 sshd[5005]: Received disconnect from 46.62.141.104 port 63308:11: Bye Bye [preauth] Jan 23 18:30:44.303826 sshd[5005]: Disconnected from invalid user user2 46.62.141.104 port 63308 [preauth] Jan 23 18:30:44.304000 audit[5005]: USER_ERR pid=5005 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:44.308322 systemd[1]: sshd@469-46.62.141.192:22-46.62.141.104:63308.service: Deactivated successfully. Jan 23 18:30:44.308000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@469-46.62.141.192:22-46.62.141.104:63308 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:44.330493 systemd[1]: Started sshd@470-46.62.141.192:22-46.62.141.104:63310.service - OpenSSH per-connection server daemon (46.62.141.104:63310). Jan 23 18:30:44.330000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@470-46.62.141.192:22-46.62.141.104:63310 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:44.391454 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:30:44.390838Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"84afc9f0d5e63dd5 is starting a new election at term 3"} Jan 23 18:30:44.391454 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:30:44.390890Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"84afc9f0d5e63dd5 became pre-candidate at term 3"} Jan 23 18:30:44.391454 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:30:44.390908Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"84afc9f0d5e63dd5 received MsgPreVoteResp from 84afc9f0d5e63dd5 at term 3"} Jan 23 18:30:44.391454 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:30:44.390928Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"84afc9f0d5e63dd5 [logterm: 3, index: 12] sent MsgPreVote request to 15eb2e9460fb69a5 at term 3"} Jan 23 18:30:44.391454 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:30:44.390940Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"84afc9f0d5e63dd5 [logterm: 3, index: 12] sent MsgPreVote request to 5e70f16e3d77e6b8 at term 3"} Jan 23 18:30:44.456721 sshd[5011]: Received disconnect from 46.62.141.104 port 63310:11: Bye Bye [preauth] Jan 23 18:30:44.456721 sshd[5011]: Disconnected from authenticating user root 46.62.141.104 port 63310 [preauth] Jan 23 18:30:44.456000 audit[5011]: USER_ERR pid=5011 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:44.460148 systemd[1]: sshd@470-46.62.141.192:22-46.62.141.104:63310.service: Deactivated successfully. Jan 23 18:30:44.460000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@470-46.62.141.192:22-46.62.141.104:63310 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:44.483000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@471-46.62.141.192:22-46.62.141.104:63311 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:44.483034 systemd[1]: Started sshd@471-46.62.141.192:22-46.62.141.104:63311.service - OpenSSH per-connection server daemon (46.62.141.104:63311). Jan 23 18:30:44.601176 sshd[5017]: Invalid user admin from 46.62.141.104 port 63311 Jan 23 18:30:44.608509 sshd[5017]: Received disconnect from 46.62.141.104 port 63311:11: Bye Bye [preauth] Jan 23 18:30:44.608509 sshd[5017]: Disconnected from invalid user admin 46.62.141.104 port 63311 [preauth] Jan 23 18:30:44.608000 audit[5017]: USER_ERR pid=5017 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:44.612500 systemd[1]: sshd@471-46.62.141.192:22-46.62.141.104:63311.service: Deactivated successfully. Jan 23 18:30:44.612000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@471-46.62.141.192:22-46.62.141.104:63311 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:44.636000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@472-46.62.141.192:22-46.62.141.104:63315 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:44.636073 systemd[1]: Started sshd@472-46.62.141.192:22-46.62.141.104:63315.service - OpenSSH per-connection server daemon (46.62.141.104:63315). Jan 23 18:30:44.758874 sshd[5023]: Invalid user user from 46.62.141.104 port 63315 Jan 23 18:30:44.763637 sshd[5023]: Received disconnect from 46.62.141.104 port 63315:11: Bye Bye [preauth] Jan 23 18:30:44.763637 sshd[5023]: Disconnected from invalid user user 46.62.141.104 port 63315 [preauth] Jan 23 18:30:44.764000 audit[5023]: USER_ERR pid=5023 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:44.768385 systemd[1]: sshd@472-46.62.141.192:22-46.62.141.104:63315.service: Deactivated successfully. Jan 23 18:30:44.768000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@472-46.62.141.192:22-46.62.141.104:63315 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:44.787000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@473-46.62.141.192:22-46.62.141.104:63316 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:44.787483 systemd[1]: Started sshd@473-46.62.141.192:22-46.62.141.104:63316.service - OpenSSH per-connection server daemon (46.62.141.104:63316). Jan 23 18:30:44.883155 sshd[5029]: Invalid user user2 from 46.62.141.104 port 63316 Jan 23 18:30:44.895341 sshd[5029]: Received disconnect from 46.62.141.104 port 63316:11: Bye Bye [preauth] Jan 23 18:30:44.895341 sshd[5029]: Disconnected from invalid user user2 46.62.141.104 port 63316 [preauth] Jan 23 18:30:44.896000 audit[5029]: USER_ERR pid=5029 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:44.900913 systemd[1]: sshd@473-46.62.141.192:22-46.62.141.104:63316.service: Deactivated successfully. Jan 23 18:30:44.901000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@473-46.62.141.192:22-46.62.141.104:63316 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:44.923000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@474-46.62.141.192:22-46.62.141.104:63318 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:44.923873 systemd[1]: Started sshd@474-46.62.141.192:22-46.62.141.104:63318.service - OpenSSH per-connection server daemon (46.62.141.104:63318). Jan 23 18:30:45.047488 sshd[5035]: Received disconnect from 46.62.141.104 port 63318:11: Bye Bye [preauth] Jan 23 18:30:45.047488 sshd[5035]: Disconnected from authenticating user root 46.62.141.104 port 63318 [preauth] Jan 23 18:30:45.047000 audit[5035]: USER_ERR pid=5035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:45.050402 systemd[1]: sshd@474-46.62.141.192:22-46.62.141.104:63318.service: Deactivated successfully. Jan 23 18:30:45.050000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@474-46.62.141.192:22-46.62.141.104:63318 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:45.085000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@475-46.62.141.192:22-46.62.141.104:63320 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:45.085664 systemd[1]: Started sshd@475-46.62.141.192:22-46.62.141.104:63320.service - OpenSSH per-connection server daemon (46.62.141.104:63320). Jan 23 18:30:45.194929 sshd[5041]: Invalid user admin from 46.62.141.104 port 63320 Jan 23 18:30:45.201973 sshd[5041]: Received disconnect from 46.62.141.104 port 63320:11: Bye Bye [preauth] Jan 23 18:30:45.201973 sshd[5041]: Disconnected from invalid user admin 46.62.141.104 port 63320 [preauth] Jan 23 18:30:45.201000 audit[5041]: USER_ERR pid=5041 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:45.205937 systemd[1]: sshd@475-46.62.141.192:22-46.62.141.104:63320.service: Deactivated successfully. Jan 23 18:30:45.206000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@475-46.62.141.192:22-46.62.141.104:63320 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:45.229789 systemd[1]: Started sshd@476-46.62.141.192:22-46.62.141.104:63322.service - OpenSSH per-connection server daemon (46.62.141.104:63322). Jan 23 18:30:45.229000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@476-46.62.141.192:22-46.62.141.104:63322 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:45.350966 sshd[5047]: Invalid user user from 46.62.141.104 port 63322 Jan 23 18:30:45.359312 sshd[5047]: Received disconnect from 46.62.141.104 port 63322:11: Bye Bye [preauth] Jan 23 18:30:45.359312 sshd[5047]: Disconnected from invalid user user 46.62.141.104 port 63322 [preauth] Jan 23 18:30:45.359000 audit[5047]: USER_ERR pid=5047 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:45.364461 systemd[1]: sshd@476-46.62.141.192:22-46.62.141.104:63322.service: Deactivated successfully. Jan 23 18:30:45.364000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@476-46.62.141.192:22-46.62.141.104:63322 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:45.392322 systemd[1]: Started sshd@477-46.62.141.192:22-46.62.141.104:63324.service - OpenSSH per-connection server daemon (46.62.141.104:63324). Jan 23 18:30:45.393000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@477-46.62.141.192:22-46.62.141.104:63324 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:45.500878 sshd[5053]: Invalid user user2 from 46.62.141.104 port 63324 Jan 23 18:30:45.506152 sshd[5053]: Received disconnect from 46.62.141.104 port 63324:11: Bye Bye [preauth] Jan 23 18:30:45.506152 sshd[5053]: Disconnected from invalid user user2 46.62.141.104 port 63324 [preauth] Jan 23 18:30:45.506000 audit[5053]: USER_ERR pid=5053 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:45.510185 systemd[1]: sshd@477-46.62.141.192:22-46.62.141.104:63324.service: Deactivated successfully. Jan 23 18:30:45.510000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@477-46.62.141.192:22-46.62.141.104:63324 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:45.533000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@478-46.62.141.192:22-46.62.141.104:63327 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:45.533136 systemd[1]: Started sshd@478-46.62.141.192:22-46.62.141.104:63327.service - OpenSSH per-connection server daemon (46.62.141.104:63327). Jan 23 18:30:45.633513 sshd[5059]: Received disconnect from 46.62.141.104 port 63327:11: Bye Bye [preauth] Jan 23 18:30:45.633513 sshd[5059]: Disconnected from authenticating user root 46.62.141.104 port 63327 [preauth] Jan 23 18:30:45.633000 audit[5059]: USER_ERR pid=5059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:45.636661 systemd[1]: sshd@478-46.62.141.192:22-46.62.141.104:63327.service: Deactivated successfully. Jan 23 18:30:45.636000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@478-46.62.141.192:22-46.62.141.104:63327 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:45.669000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@479-46.62.141.192:22-46.62.141.104:63329 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:45.669681 systemd[1]: Started sshd@479-46.62.141.192:22-46.62.141.104:63329.service - OpenSSH per-connection server daemon (46.62.141.104:63329). Jan 23 18:30:45.786947 sshd[5065]: Invalid user admin from 46.62.141.104 port 63329 Jan 23 18:30:45.791577 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:30:45.790608Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"84afc9f0d5e63dd5 is starting a new election at term 3"} Jan 23 18:30:45.791577 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:30:45.790778Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"84afc9f0d5e63dd5 became pre-candidate at term 3"} Jan 23 18:30:45.791577 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:30:45.790804Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"84afc9f0d5e63dd5 received MsgPreVoteResp from 84afc9f0d5e63dd5 at term 3"} Jan 23 18:30:45.791577 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:30:45.790826Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"84afc9f0d5e63dd5 [logterm: 3, index: 12] sent MsgPreVote request to 15eb2e9460fb69a5 at term 3"} Jan 23 18:30:45.791577 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:30:45.790838Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"84afc9f0d5e63dd5 [logterm: 3, index: 12] sent MsgPreVote request to 5e70f16e3d77e6b8 at term 3"} Jan 23 18:30:45.794206 sshd[5065]: Received disconnect from 46.62.141.104 port 63329:11: Bye Bye [preauth] Jan 23 18:30:45.794206 sshd[5065]: Disconnected from invalid user admin 46.62.141.104 port 63329 [preauth] Jan 23 18:30:45.794000 audit[5065]: USER_ERR pid=5065 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:45.798180 systemd[1]: sshd@479-46.62.141.192:22-46.62.141.104:63329.service: Deactivated successfully. Jan 23 18:30:45.798000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@479-46.62.141.192:22-46.62.141.104:63329 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:45.816000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@480-46.62.141.192:22-46.62.141.104:63331 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:45.816902 systemd[1]: Started sshd@480-46.62.141.192:22-46.62.141.104:63331.service - OpenSSH per-connection server daemon (46.62.141.104:63331). Jan 23 18:30:45.934295 sshd[5071]: Invalid user user from 46.62.141.104 port 63331 Jan 23 18:30:45.940017 sshd[5071]: Received disconnect from 46.62.141.104 port 63331:11: Bye Bye [preauth] Jan 23 18:30:45.940017 sshd[5071]: Disconnected from invalid user user 46.62.141.104 port 63331 [preauth] Jan 23 18:30:45.939000 audit[5071]: USER_ERR pid=5071 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:45.943807 systemd[1]: sshd@480-46.62.141.192:22-46.62.141.104:63331.service: Deactivated successfully. Jan 23 18:30:45.944000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@480-46.62.141.192:22-46.62.141.104:63331 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:45.966000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@481-46.62.141.192:22-46.62.141.104:63334 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:45.966386 systemd[1]: Started sshd@481-46.62.141.192:22-46.62.141.104:63334.service - OpenSSH per-connection server daemon (46.62.141.104:63334). Jan 23 18:30:46.075404 sshd[5077]: Invalid user user2 from 46.62.141.104 port 63334 Jan 23 18:30:46.083020 sshd[5077]: Received disconnect from 46.62.141.104 port 63334:11: Bye Bye [preauth] Jan 23 18:30:46.083020 sshd[5077]: Disconnected from invalid user user2 46.62.141.104 port 63334 [preauth] Jan 23 18:30:46.082000 audit[5077]: USER_ERR pid=5077 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:46.086918 systemd[1]: sshd@481-46.62.141.192:22-46.62.141.104:63334.service: Deactivated successfully. Jan 23 18:30:46.087000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@481-46.62.141.192:22-46.62.141.104:63334 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:46.110000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@482-46.62.141.192:22-46.62.141.104:63336 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:46.110408 systemd[1]: Started sshd@482-46.62.141.192:22-46.62.141.104:63336.service - OpenSSH per-connection server daemon (46.62.141.104:63336). Jan 23 18:30:46.235614 sshd[5083]: Received disconnect from 46.62.141.104 port 63336:11: Bye Bye [preauth] Jan 23 18:30:46.235614 sshd[5083]: Disconnected from authenticating user root 46.62.141.104 port 63336 [preauth] Jan 23 18:30:46.235000 audit[5083]: USER_ERR pid=5083 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:46.237209 kernel: kauditd_printk_skb: 95 callbacks suppressed Jan 23 18:30:46.237334 kernel: audit: type=1109 audit(1769193046.235:1632): pid=5083 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:46.245412 systemd[1]: sshd@482-46.62.141.192:22-46.62.141.104:63336.service: Deactivated successfully. Jan 23 18:30:46.241000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@482-46.62.141.192:22-46.62.141.104:63336 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:46.255393 kernel: audit: type=1131 audit(1769193046.241:1633): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@482-46.62.141.192:22-46.62.141.104:63336 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:46.283000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@483-46.62.141.192:22-46.62.141.104:63338 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:46.283815 systemd[1]: Started sshd@483-46.62.141.192:22-46.62.141.104:63338.service - OpenSSH per-connection server daemon (46.62.141.104:63338). Jan 23 18:30:46.297339 kernel: audit: type=1130 audit(1769193046.283:1634): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@483-46.62.141.192:22-46.62.141.104:63338 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:46.400904 sshd[5089]: Invalid user admin from 46.62.141.104 port 63338 Jan 23 18:30:46.407561 sshd[5089]: Received disconnect from 46.62.141.104 port 63338:11: Bye Bye [preauth] Jan 23 18:30:46.407561 sshd[5089]: Disconnected from invalid user admin 46.62.141.104 port 63338 [preauth] Jan 23 18:30:46.407000 audit[5089]: USER_ERR pid=5089 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:46.411848 systemd[1]: sshd@483-46.62.141.192:22-46.62.141.104:63338.service: Deactivated successfully. Jan 23 18:30:46.420329 kernel: audit: type=1109 audit(1769193046.407:1635): pid=5089 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:46.412000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@483-46.62.141.192:22-46.62.141.104:63338 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:46.434333 kernel: audit: type=1131 audit(1769193046.412:1636): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@483-46.62.141.192:22-46.62.141.104:63338 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:46.444000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@484-46.62.141.192:22-46.62.141.104:63340 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:46.444533 systemd[1]: Started sshd@484-46.62.141.192:22-46.62.141.104:63340.service - OpenSSH per-connection server daemon (46.62.141.104:63340). Jan 23 18:30:46.459451 kernel: audit: type=1130 audit(1769193046.444:1637): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@484-46.62.141.192:22-46.62.141.104:63340 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:46.567807 sshd[5095]: Invalid user user from 46.62.141.104 port 63340 Jan 23 18:30:46.575438 sshd[5095]: Received disconnect from 46.62.141.104 port 63340:11: Bye Bye [preauth] Jan 23 18:30:46.575438 sshd[5095]: Disconnected from invalid user user 46.62.141.104 port 63340 [preauth] Jan 23 18:30:46.575000 audit[5095]: USER_ERR pid=5095 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:46.579970 systemd[1]: sshd@484-46.62.141.192:22-46.62.141.104:63340.service: Deactivated successfully. Jan 23 18:30:46.588336 kernel: audit: type=1109 audit(1769193046.575:1638): pid=5095 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:46.588419 kernel: audit: type=1131 audit(1769193046.580:1639): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@484-46.62.141.192:22-46.62.141.104:63340 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:46.580000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@484-46.62.141.192:22-46.62.141.104:63340 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:46.601000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@485-46.62.141.192:22-46.62.141.104:63341 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:46.601454 systemd[1]: Started sshd@485-46.62.141.192:22-46.62.141.104:63341.service - OpenSSH per-connection server daemon (46.62.141.104:63341). Jan 23 18:30:46.610339 kernel: audit: type=1130 audit(1769193046.601:1640): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@485-46.62.141.192:22-46.62.141.104:63341 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:46.708699 sshd[5101]: Invalid user user2 from 46.62.141.104 port 63341 Jan 23 18:30:46.716155 sshd[5101]: Received disconnect from 46.62.141.104 port 63341:11: Bye Bye [preauth] Jan 23 18:30:46.716155 sshd[5101]: Disconnected from invalid user user2 46.62.141.104 port 63341 [preauth] Jan 23 18:30:46.716000 audit[5101]: USER_ERR pid=5101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:46.721068 systemd[1]: sshd@485-46.62.141.192:22-46.62.141.104:63341.service: Deactivated successfully. Jan 23 18:30:46.721000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@485-46.62.141.192:22-46.62.141.104:63341 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:46.729328 kernel: audit: type=1109 audit(1769193046.716:1641): pid=5101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:46.743021 systemd[1]: Started sshd@486-46.62.141.192:22-46.62.141.104:63344.service - OpenSSH per-connection server daemon (46.62.141.104:63344). Jan 23 18:30:46.743000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@486-46.62.141.192:22-46.62.141.104:63344 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:46.849783 sshd[5107]: Received disconnect from 46.62.141.104 port 63344:11: Bye Bye [preauth] Jan 23 18:30:46.849783 sshd[5107]: Disconnected from authenticating user root 46.62.141.104 port 63344 [preauth] Jan 23 18:30:46.849000 audit[5107]: USER_ERR pid=5107 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:46.852848 systemd[1]: sshd@486-46.62.141.192:22-46.62.141.104:63344.service: Deactivated successfully. Jan 23 18:30:46.853000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@486-46.62.141.192:22-46.62.141.104:63344 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:46.887000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@487-46.62.141.192:22-46.62.141.104:63345 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:46.888031 systemd[1]: Started sshd@487-46.62.141.192:22-46.62.141.104:63345.service - OpenSSH per-connection server daemon (46.62.141.104:63345). Jan 23 18:30:46.996803 sshd[5113]: Invalid user admin from 46.62.141.104 port 63345 Jan 23 18:30:47.003354 sshd[5113]: Received disconnect from 46.62.141.104 port 63345:11: Bye Bye [preauth] Jan 23 18:30:47.003354 sshd[5113]: Disconnected from invalid user admin 46.62.141.104 port 63345 [preauth] Jan 23 18:30:47.003000 audit[5113]: USER_ERR pid=5113 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:47.006960 systemd[1]: sshd@487-46.62.141.192:22-46.62.141.104:63345.service: Deactivated successfully. Jan 23 18:30:47.008000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@487-46.62.141.192:22-46.62.141.104:63345 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:47.027000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@488-46.62.141.192:22-46.62.141.104:63348 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:47.027453 systemd[1]: Started sshd@488-46.62.141.192:22-46.62.141.104:63348.service - OpenSSH per-connection server daemon (46.62.141.104:63348). Jan 23 18:30:47.138663 sshd[5119]: Invalid user user from 46.62.141.104 port 63348 Jan 23 18:30:47.144971 sshd[5119]: Received disconnect from 46.62.141.104 port 63348:11: Bye Bye [preauth] Jan 23 18:30:47.144971 sshd[5119]: Disconnected from invalid user user 46.62.141.104 port 63348 [preauth] Jan 23 18:30:47.144000 audit[5119]: USER_ERR pid=5119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:47.148653 systemd[1]: sshd@488-46.62.141.192:22-46.62.141.104:63348.service: Deactivated successfully. Jan 23 18:30:47.148000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@488-46.62.141.192:22-46.62.141.104:63348 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:47.169000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@489-46.62.141.192:22-46.62.141.104:63350 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:47.169355 systemd[1]: Started sshd@489-46.62.141.192:22-46.62.141.104:63350.service - OpenSSH per-connection server daemon (46.62.141.104:63350). Jan 23 18:30:47.190315 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:30:47.189759Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"84afc9f0d5e63dd5 is starting a new election at term 3"} Jan 23 18:30:47.190315 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:30:47.189808Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"84afc9f0d5e63dd5 became pre-candidate at term 3"} Jan 23 18:30:47.190315 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:30:47.189826Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"84afc9f0d5e63dd5 received MsgPreVoteResp from 84afc9f0d5e63dd5 at term 3"} Jan 23 18:30:47.190315 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:30:47.189846Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"84afc9f0d5e63dd5 [logterm: 3, index: 12] sent MsgPreVote request to 15eb2e9460fb69a5 at term 3"} Jan 23 18:30:47.190315 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:30:47.189858Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"84afc9f0d5e63dd5 [logterm: 3, index: 12] sent MsgPreVote request to 5e70f16e3d77e6b8 at term 3"} Jan 23 18:30:47.288178 sshd[5125]: Invalid user user2 from 46.62.141.104 port 63350 Jan 23 18:30:47.294508 sshd[5125]: Received disconnect from 46.62.141.104 port 63350:11: Bye Bye [preauth] Jan 23 18:30:47.294508 sshd[5125]: Disconnected from invalid user user2 46.62.141.104 port 63350 [preauth] Jan 23 18:30:47.294000 audit[5125]: USER_ERR pid=5125 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:47.298027 systemd[1]: sshd@489-46.62.141.192:22-46.62.141.104:63350.service: Deactivated successfully. Jan 23 18:30:47.298000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@489-46.62.141.192:22-46.62.141.104:63350 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:47.324000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@490-46.62.141.192:22-46.62.141.104:63352 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:47.325022 systemd[1]: Started sshd@490-46.62.141.192:22-46.62.141.104:63352.service - OpenSSH per-connection server daemon (46.62.141.104:63352). Jan 23 18:30:47.430465 sshd[5131]: Received disconnect from 46.62.141.104 port 63352:11: Bye Bye [preauth] Jan 23 18:30:47.430465 sshd[5131]: Disconnected from authenticating user root 46.62.141.104 port 63352 [preauth] Jan 23 18:30:47.430000 audit[5131]: USER_ERR pid=5131 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:47.434535 systemd[1]: sshd@490-46.62.141.192:22-46.62.141.104:63352.service: Deactivated successfully. Jan 23 18:30:47.434000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@490-46.62.141.192:22-46.62.141.104:63352 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:47.456000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@491-46.62.141.192:22-46.62.141.104:63354 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:47.456720 systemd[1]: Started sshd@491-46.62.141.192:22-46.62.141.104:63354.service - OpenSSH per-connection server daemon (46.62.141.104:63354). Jan 23 18:30:47.557837 sshd[5137]: Invalid user admin from 46.62.141.104 port 63354 Jan 23 18:30:47.564334 sshd[5137]: Received disconnect from 46.62.141.104 port 63354:11: Bye Bye [preauth] Jan 23 18:30:47.564334 sshd[5137]: Disconnected from invalid user admin 46.62.141.104 port 63354 [preauth] Jan 23 18:30:47.564000 audit[5137]: USER_ERR pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:47.567848 systemd[1]: sshd@491-46.62.141.192:22-46.62.141.104:63354.service: Deactivated successfully. Jan 23 18:30:47.568000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@491-46.62.141.192:22-46.62.141.104:63354 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:47.591000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@492-46.62.141.192:22-46.62.141.104:63356 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:47.591882 systemd[1]: Started sshd@492-46.62.141.192:22-46.62.141.104:63356.service - OpenSSH per-connection server daemon (46.62.141.104:63356). Jan 23 18:30:47.707517 sshd[5143]: Invalid user user from 46.62.141.104 port 63356 Jan 23 18:30:47.713946 sshd[5143]: Received disconnect from 46.62.141.104 port 63356:11: Bye Bye [preauth] Jan 23 18:30:47.713946 sshd[5143]: Disconnected from invalid user user 46.62.141.104 port 63356 [preauth] Jan 23 18:30:47.713000 audit[5143]: USER_ERR pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:47.717913 systemd[1]: sshd@492-46.62.141.192:22-46.62.141.104:63356.service: Deactivated successfully. Jan 23 18:30:47.718000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@492-46.62.141.192:22-46.62.141.104:63356 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:47.741000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@493-46.62.141.192:22-46.62.141.104:63358 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:47.741789 systemd[1]: Started sshd@493-46.62.141.192:22-46.62.141.104:63358.service - OpenSSH per-connection server daemon (46.62.141.104:63358). Jan 23 18:30:47.874143 sshd[5149]: Invalid user user2 from 46.62.141.104 port 63358 Jan 23 18:30:47.880520 sshd[5149]: Received disconnect from 46.62.141.104 port 63358:11: Bye Bye [preauth] Jan 23 18:30:47.880520 sshd[5149]: Disconnected from invalid user user2 46.62.141.104 port 63358 [preauth] Jan 23 18:30:47.880000 audit[5149]: USER_ERR pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:47.884366 systemd[1]: sshd@493-46.62.141.192:22-46.62.141.104:63358.service: Deactivated successfully. Jan 23 18:30:47.884000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@493-46.62.141.192:22-46.62.141.104:63358 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:47.905000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@494-46.62.141.192:22-46.62.141.104:63360 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:47.905358 systemd[1]: Started sshd@494-46.62.141.192:22-46.62.141.104:63360.service - OpenSSH per-connection server daemon (46.62.141.104:63360). Jan 23 18:30:48.022047 sshd[5155]: Received disconnect from 46.62.141.104 port 63360:11: Bye Bye [preauth] Jan 23 18:30:48.022047 sshd[5155]: Disconnected from authenticating user root 46.62.141.104 port 63360 [preauth] Jan 23 18:30:48.021000 audit[5155]: USER_ERR pid=5155 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:48.024790 systemd[1]: sshd@494-46.62.141.192:22-46.62.141.104:63360.service: Deactivated successfully. Jan 23 18:30:48.024000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@494-46.62.141.192:22-46.62.141.104:63360 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:48.045000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@495-46.62.141.192:22-46.62.141.104:63362 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:48.045579 systemd[1]: Started sshd@495-46.62.141.192:22-46.62.141.104:63362.service - OpenSSH per-connection server daemon (46.62.141.104:63362). Jan 23 18:30:48.165657 sshd[5161]: Invalid user admin from 46.62.141.104 port 63362 Jan 23 18:30:48.172291 sshd[5161]: Received disconnect from 46.62.141.104 port 63362:11: Bye Bye [preauth] Jan 23 18:30:48.172291 sshd[5161]: Disconnected from invalid user admin 46.62.141.104 port 63362 [preauth] Jan 23 18:30:48.172000 audit[5161]: USER_ERR pid=5161 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:48.175692 systemd[1]: sshd@495-46.62.141.192:22-46.62.141.104:63362.service: Deactivated successfully. Jan 23 18:30:48.175000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@495-46.62.141.192:22-46.62.141.104:63362 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:48.198000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@496-46.62.141.192:22-46.62.141.104:63364 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:48.198451 systemd[1]: Started sshd@496-46.62.141.192:22-46.62.141.104:63364.service - OpenSSH per-connection server daemon (46.62.141.104:63364). Jan 23 18:30:48.319252 sshd[5167]: Invalid user user from 46.62.141.104 port 63364 Jan 23 18:30:48.326089 sshd[5167]: Received disconnect from 46.62.141.104 port 63364:11: Bye Bye [preauth] Jan 23 18:30:48.326089 sshd[5167]: Disconnected from invalid user user 46.62.141.104 port 63364 [preauth] Jan 23 18:30:48.325000 audit[5167]: USER_ERR pid=5167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:48.329887 systemd[1]: sshd@496-46.62.141.192:22-46.62.141.104:63364.service: Deactivated successfully. Jan 23 18:30:48.330000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@496-46.62.141.192:22-46.62.141.104:63364 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:48.355000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@497-46.62.141.192:22-46.62.141.104:63365 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:48.355709 systemd[1]: Started sshd@497-46.62.141.192:22-46.62.141.104:63365.service - OpenSSH per-connection server daemon (46.62.141.104:63365). Jan 23 18:30:48.471394 sshd[5173]: Invalid user user2 from 46.62.141.104 port 63365 Jan 23 18:30:48.479171 sshd[5173]: Received disconnect from 46.62.141.104 port 63365:11: Bye Bye [preauth] Jan 23 18:30:48.479171 sshd[5173]: Disconnected from invalid user user2 46.62.141.104 port 63365 [preauth] Jan 23 18:30:48.479000 audit[5173]: USER_ERR pid=5173 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=46.62.141.104 addr=46.62.141.104 terminal=ssh res=failed' Jan 23 18:30:48.483181 systemd[1]: sshd@497-46.62.141.192:22-46.62.141.104:63365.service: Deactivated successfully. Jan 23 18:30:48.483000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@497-46.62.141.192:22-46.62.141.104:63365 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:48.511000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@498-46.62.141.192:22-46.62.141.104:63368 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jan 23 18:30:48.511757 systemd[1]: Started sshd@498-46.62.141.192:22-46.62.141.104:63368.service - OpenSSH per-connection server daemon (46.62.141.104:63368). Jan 23 18:30:48.590944 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:30:48.590334Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"84afc9f0d5e63dd5 is starting a new election at term 3"} Jan 23 18:30:48.590944 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:30:48.590399Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"84afc9f0d5e63dd5 became pre-candidate at term 3"} Jan 23 18:30:48.590944 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:30:48.590423Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"84afc9f0d5e63dd5 received MsgPreVoteResp from 84afc9f0d5e63dd5 at term 3"} Jan 23 18:30:48.590944 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:30:48.590451Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"84afc9f0d5e63dd5 [logterm: 3, index: 12] sent MsgPreVote request to 15eb2e9460fb69a5 at term 3"} Jan 23 18:30:48.590944 etcd-wrapper[1931]: {"level":"info","ts":"2026-01-23T18:30:48.590468Z","logger":"raft","caller":"etcdserver/zap_raft.go:77","msg":"84afc9f0d5e63dd5 [logterm: 3, index: 12] sent MsgPreVote request to 5e70f16e3d77e6b8 at term 3"}