-- Logs begin at  2023-01-22 22:03:02 CST, end at  2023-01-31 23:00:01 CST. --
1 31 22:37:50 hhoosstt sshd[4803]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.173.251.36
1 31 22:37:52 hhoosstt sshd[4805]: Failed password for invalid user mysql from 137.184.234.81 port 44546 ssh2
1 31 22:37:52 hhoosstt sshd[4805]: Received disconnect from 137.184.234.81 port 44546:11: Bye Bye [preauth]
1 31 22:37:52 hhoosstt sshd[4805]: Disconnected from 137.184.234.81 port 44546 [preauth]
1 31 22:37:52 hhoosstt sshd[4803]: Failed password for invalid user git from 107.173.251.36 port 49498 ssh2
1 31 22:37:52 hhoosstt sshd[4803]: Received disconnect from 107.173.251.36 port 49498:11: Bye Bye [preauth]
1 31 22:37:52 hhoosstt sshd[4803]: Disconnected from 107.173.251.36 port 49498 [preauth]
1 31 22:38:10 hhoosstt sshd[4854]: Invalid user appltest from 152.67.254.42 port 58910
1 31 22:38:10 hhoosstt sshd[4854]: input_userauth_request: invalid user appltest [preauth]
1 31 22:38:10 hhoosstt sshd[4854]: pam_unix(sshd:auth): check pass; user unknown
1 31 22:38:10 hhoosstt sshd[4854]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.67.254.42
1 31 22:38:12 hhoosstt sshd[4854]: Failed password for invalid user appltest from 152.67.254.42 port 58910 ssh2
1 31 22:38:12 hhoosstt sshd[4854]: Received disconnect from 152.67.254.42 port 58910:11: Bye Bye [preauth]
1 31 22:38:12 hhoosstt sshd[4854]: Disconnected from 152.67.254.42 port 58910 [preauth]
1 31 22:38:12 hhoosstt sshd[4858]: Invalid user upload from 1.214.245.27 port 47266
1 31 22:38:12 hhoosstt sshd[4858]: input_userauth_request: invalid user upload [preauth]
1 31 22:38:12 hhoosstt sshd[4858]: pam_unix(sshd:auth): check pass; user unknown
1 31 22:38:12 hhoosstt sshd[4858]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.214.245.27
1 31 22:38:15 hhoosstt sshd[4858]: Failed password for invalid user upload from 1.214.245.27 port 47266 ssh2
1 31 22:38:15 hhoosstt sshd[4858]: Received disconnect from 1.214.245.27 port 47266:11: Bye Bye [preauth]
1 31 22:38:15 hhoosstt sshd[4858]: Disconnected from 1.214.245.27 port 47266 [preauth]
1 31 22:38:45 hhoosstt sshd[4918]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.173.49  user=root
1 31 22:38:45 hhoosstt sshd[4918]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
1 31 22:38:47 hhoosstt sshd[4918]: Failed password for root from 61.177.173.49 port 29759 ssh2
1 31 22:38:47 hhoosstt sshd[4918]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
1 31 22:38:49 hhoosstt sshd[4918]: Failed password for root from 61.177.173.49 port 29759 ssh2
1 31 22:38:49 hhoosstt sshd[4918]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
1 31 22:38:51 hhoosstt sshd[4918]: Failed password for root from 61.177.173.49 port 29759 ssh2
1 31 22:38:51 hhoosstt sshd[4918]: Received disconnect from 61.177.173.49 port 29759:11:  [preauth]
1 31 22:38:51 hhoosstt sshd[4918]: Disconnected from 61.177.173.49 port 29759 [preauth]
1 31 22:38:51 hhoosstt sshd[4918]: PAM 2 more authentication failures; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.173.49  user=root
1 31 22:38:54 hhoosstt sshd[4940]: Invalid user mysql from 218.248.16.73 port 36584
1 31 22:38:54 hhoosstt sshd[4940]: input_userauth_request: invalid user mysql [preauth]
1 31 22:38:54 hhoosstt sshd[4940]: pam_unix(sshd:auth): check pass; user unknown
1 31 22:38:54 hhoosstt sshd[4940]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=mail.jayapriya.com
1 31 22:38:57 hhoosstt sshd[4940]: Failed password for invalid user mysql from 218.248.16.73 port 36584 ssh2
1 31 22:38:57 hhoosstt sshd[4940]: Received disconnect from 218.248.16.73 port 36584:11: Bye Bye [preauth]
1 31 22:38:57 hhoosstt sshd[4940]: Disconnected from 218.248.16.73 port 36584 [preauth]
1 31 22:38:57 hhoosstt sshd[4938]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.173.49  user=root
1 31 22:38:57 hhoosstt sshd[4938]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
1 31 22:38:58 hhoosstt sshd[4938]: Failed password for root from 61.177.173.49 port 13336 ssh2
1 31 22:38:58 hhoosstt sshd[4938]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
1 31 22:39:00 hhoosstt sshd[4938]: Failed password for root from 61.177.173.49 port 13336 ssh2
1 31 22:39:01 hhoosstt sshd[4938]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
1 31 22:39:02 hhoosstt sshd[4938]: Failed password for root from 61.177.173.49 port 13336 ssh2
1 31 22:39:02 hhoosstt sshd[4938]: Received disconnect from 61.177.173.49 port 13336:11:  [preauth]
1 31 22:39:02 hhoosstt sshd[4938]: Disconnected from 61.177.173.49 port 13336 [preauth]
1 31 22:39:02 hhoosstt sshd[4938]: PAM 2 more authentication failures; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.173.49  user=root
1 31 22:39:03 hhoosstt sshd[4962]: Invalid user ftpuser from 165.22.107.2 port 45456
1 31 22:39:03 hhoosstt sshd[4962]: input_userauth_request: invalid user ftpuser [preauth]
1 31 22:39:03 hhoosstt sshd[4962]: pam_unix(sshd:auth): check pass; user unknown
1 31 22:39:03 hhoosstt sshd[4962]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.107.2
1 31 22:39:05 hhoosstt sshd[4962]: Failed password for invalid user ftpuser from 165.22.107.2 port 45456 ssh2
1 31 22:39:05 hhoosstt sshd[4962]: Received disconnect from 165.22.107.2 port 45456:11: Bye Bye [preauth]
1 31 22:39:05 hhoosstt sshd[4962]: Disconnected from 165.22.107.2 port 45456 [preauth]
1 31 22:39:45 hhoosstt sshd[5041]: Invalid user teamspeak from 137.184.234.81 port 36988
1 31 22:39:45 hhoosstt sshd[5041]: input_userauth_request: invalid user teamspeak [preauth]
1 31 22:39:45 hhoosstt sshd[5041]: pam_unix(sshd:auth): check pass; user unknown
1 31 22:39:45 hhoosstt sshd[5041]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.184.234.81
1 31 22:39:47 hhoosstt sshd[5041]: Failed password for invalid user teamspeak from 137.184.234.81 port 36988 ssh2
1 31 22:39:47 hhoosstt sshd[5041]: Received disconnect from 137.184.234.81 port 36988:11: Bye Bye [preauth]
1 31 22:39:47 hhoosstt sshd[5041]: Disconnected from 137.184.234.81 port 36988 [preauth]
1 31 22:40:00 hhoosstt sshd[5068]: Address 107.173.251.36 maps to selinozoglu.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!
1 31 22:40:00 hhoosstt sshd[5068]: Invalid user bot2 from 107.173.251.36 port 58044
1 31 22:40:00 hhoosstt sshd[5068]: input_userauth_request: invalid user bot2 [preauth]
1 31 22:40:00 hhoosstt sshd[5068]: pam_unix(sshd:auth): check pass; user unknown
1 31 22:40:00 hhoosstt sshd[5068]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.173.251.36
1 31 22:40:01 hhoosstt systemd[1]: Started Session 2844 of user root.
-- Subject: Unit session-2844.scope has finished start-up
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit session-2844.scope has finished starting up.
-- 
-- The start-up result is done.
1 31 22:40:01 hhoosstt CROND[5073]: (root) CMD (flock -xn "/var/log/oneav/cron.lock" -c '/opt/threatbook/OneAV/oneav/script/install/oneav_service_monitor.sh')
1 31 22:40:03 hhoosstt sshd[5068]: Failed password for invalid user bot2 from 107.173.251.36 port 58044 ssh2
1 31 22:40:03 hhoosstt sshd[5113]: Invalid user alexis from 1.214.245.27 port 54078
1 31 22:40:03 hhoosstt sshd[5113]: input_userauth_request: invalid user alexis [preauth]
1 31 22:40:03 hhoosstt sshd[5113]: pam_unix(sshd:auth): check pass; user unknown
1 31 22:40:03 hhoosstt sshd[5113]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.214.245.27
1 31 22:40:03 hhoosstt sshd[5068]: Received disconnect from 107.173.251.36 port 58044:11: Bye Bye [preauth]
1 31 22:40:03 hhoosstt sshd[5068]: Disconnected from 107.173.251.36 port 58044 [preauth]
1 31 22:40:04 hhoosstt sshd[5113]: Failed password for invalid user alexis from 1.214.245.27 port 54078 ssh2
1 31 22:40:04 hhoosstt sshd[5113]: Received disconnect from 1.214.245.27 port 54078:11: Bye Bye [preauth]
1 31 22:40:04 hhoosstt sshd[5113]: Disconnected from 1.214.245.27 port 54078 [preauth]
1 31 22:40:54 hhoosstt sshd[5179]: Invalid user admin from 152.67.254.42 port 53576
1 31 22:40:54 hhoosstt sshd[5179]: input_userauth_request: invalid user admin [preauth]
1 31 22:40:54 hhoosstt sshd[5179]: pam_unix(sshd:auth): check pass; user unknown
1 31 22:40:54 hhoosstt sshd[5179]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.67.254.42
1 31 22:40:56 hhoosstt sshd[5179]: Failed password for invalid user admin from 152.67.254.42 port 53576 ssh2
1 31 22:40:56 hhoosstt sshd[5179]: Received disconnect from 152.67.254.42 port 53576:11: Bye Bye [preauth]
1 31 22:40:56 hhoosstt sshd[5179]: Disconnected from 152.67.254.42 port 53576 [preauth]
1 31 22:41:09 hhoosstt sshd[5203]: Invalid user demo from 218.248.16.73 port 35136
1 31 22:41:09 hhoosstt sshd[5203]: input_userauth_request: invalid user demo [preauth]
1 31 22:41:09 hhoosstt sshd[5203]: pam_unix(sshd:auth): check pass; user unknown
1 31 22:41:09 hhoosstt sshd[5203]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=mail.jayapriya.com
1 31 22:41:11 hhoosstt sshd[5203]: Failed password for invalid user demo from 218.248.16.73 port 35136 ssh2
1 31 22:41:11 hhoosstt sshd[5203]: Received disconnect from 218.248.16.73 port 35136:11: Bye Bye [preauth]
1 31 22:41:11 hhoosstt sshd[5203]: Disconnected from 218.248.16.73 port 35136 [preauth]
1 31 22:41:26 hhoosstt sshd[5219]: Invalid user oracle from 165.22.107.2 port 34972
1 31 22:41:26 hhoosstt sshd[5219]: input_userauth_request: invalid user oracle [preauth]
1 31 22:41:26 hhoosstt sshd[5219]: pam_unix(sshd:auth): check pass; user unknown
1 31 22:41:26 hhoosstt sshd[5219]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.107.2
1 31 22:41:27 hhoosstt sshd[5219]: Failed password for invalid user oracle from 165.22.107.2 port 34972 ssh2
1 31 22:41:27 hhoosstt sshd[5219]: Received disconnect from 165.22.107.2 port 34972:11: Bye Bye [preauth]
1 31 22:41:27 hhoosstt sshd[5219]: Disconnected from 165.22.107.2 port 34972 [preauth]
1 31 22:41:40 hhoosstt sshd[5246]: Invalid user whmcs from 137.184.234.81 port 44836
1 31 22:41:40 hhoosstt sshd[5246]: input_userauth_request: invalid user whmcs [preauth]
1 31 22:41:40 hhoosstt sshd[5246]: pam_unix(sshd:auth): check pass; user unknown
1 31 22:41:40 hhoosstt sshd[5246]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.184.234.81
1 31 22:41:42 hhoosstt sshd[5246]: Failed password for invalid user whmcs from 137.184.234.81 port 44836 ssh2
1 31 22:41:42 hhoosstt sshd[5246]: Received disconnect from 137.184.234.81 port 44836:11: Bye Bye [preauth]
1 31 22:41:42 hhoosstt sshd[5246]: Disconnected from 137.184.234.81 port 44836 [preauth]
1 31 22:41:53 hhoosstt sshd[5260]: Invalid user hadoop from 1.214.245.27 port 60890
1 31 22:41:53 hhoosstt sshd[5260]: input_userauth_request: invalid user hadoop [preauth]
1 31 22:41:53 hhoosstt sshd[5260]: pam_unix(sshd:auth): check pass; user unknown
1 31 22:41:53 hhoosstt sshd[5260]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.214.245.27
1 31 22:41:55 hhoosstt sshd[5260]: Failed password for invalid user hadoop from 1.214.245.27 port 60890 ssh2
1 31 22:41:55 hhoosstt sshd[5260]: Received disconnect from 1.214.245.27 port 60890:11: Bye Bye [preauth]
1 31 22:41:55 hhoosstt sshd[5260]: Disconnected from 1.214.245.27 port 60890 [preauth]
1 31 22:42:09 hhoosstt sshd[5280]: Address 107.173.251.36 maps to selinozoglu.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!
1 31 22:42:09 hhoosstt sshd[5280]: Invalid user ubuntu from 107.173.251.36 port 38312
1 31 22:42:09 hhoosstt sshd[5280]: input_userauth_request: invalid user ubuntu [preauth]
1 31 22:42:09 hhoosstt sshd[5280]: pam_unix(sshd:auth): check pass; user unknown
1 31 22:42:09 hhoosstt sshd[5280]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.173.251.36
1 31 22:42:11 hhoosstt sshd[5280]: Failed password for invalid user ubuntu from 107.173.251.36 port 38312 ssh2
1 31 22:42:11 hhoosstt sshd[5280]: Received disconnect from 107.173.251.36 port 38312:11: Bye Bye [preauth]
1 31 22:42:11 hhoosstt sshd[5280]: Disconnected from 107.173.251.36 port 38312 [preauth]
1 31 22:42:18 hhoosstt sshd[5290]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.172.143  user=root
1 31 22:42:18 hhoosstt sshd[5290]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
1 31 22:42:20 hhoosstt sshd[5290]: Failed password for root from 61.177.172.143 port 56419 ssh2
1 31 22:42:20 hhoosstt sshd[5290]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
1 31 22:42:22 hhoosstt sshd[5290]: Failed password for root from 61.177.172.143 port 56419 ssh2
1 31 22:42:22 hhoosstt sshd[5290]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
1 31 22:42:24 hhoosstt sshd[5290]: Failed password for root from 61.177.172.143 port 56419 ssh2
1 31 22:42:24 hhoosstt sshd[5290]: Received disconnect from 61.177.172.143 port 56419:11:  [preauth]
1 31 22:42:24 hhoosstt sshd[5290]: Disconnected from 61.177.172.143 port 56419 [preauth]
1 31 22:42:24 hhoosstt sshd[5290]: PAM 2 more authentication failures; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.172.143  user=root
1 31 22:43:27 hhoosstt sshd[5367]: Invalid user chris from 218.248.16.73 port 33670
1 31 22:43:27 hhoosstt sshd[5367]: input_userauth_request: invalid user chris [preauth]
1 31 22:43:27 hhoosstt sshd[5367]: pam_unix(sshd:auth): check pass; user unknown
1 31 22:43:27 hhoosstt sshd[5367]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=mail.jayapriya.com
1 31 22:43:29 hhoosstt sshd[5367]: Failed password for invalid user chris from 218.248.16.73 port 33670 ssh2
1 31 22:43:29 hhoosstt sshd[5367]: Received disconnect from 218.248.16.73 port 33670:11: Bye Bye [preauth]
1 31 22:43:29 hhoosstt sshd[5367]: Disconnected from 218.248.16.73 port 33670 [preauth]
1 31 22:43:32 hhoosstt sshd[5374]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.173.37  user=root
1 31 22:43:32 hhoosstt sshd[5374]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
1 31 22:43:33 hhoosstt sshd[5374]: Failed password for root from 61.177.173.37 port 37219 ssh2
1 31 22:43:33 hhoosstt sshd[5374]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
1 31 22:43:35 hhoosstt sshd[5374]: Failed password for root from 61.177.173.37 port 37219 ssh2
1 31 22:43:35 hhoosstt sshd[5374]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
1 31 22:43:37 hhoosstt sshd[5374]: Failed password for root from 61.177.173.37 port 37219 ssh2
1 31 22:43:37 hhoosstt sshd[5374]: Received disconnect from 61.177.173.37 port 37219:11:  [preauth]
1 31 22:43:37 hhoosstt sshd[5374]: Disconnected from 61.177.173.37 port 37219 [preauth]
1 31 22:43:37 hhoosstt sshd[5374]: PAM 2 more authentication failures; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.173.37  user=root
1 31 22:43:37 hhoosstt sshd[5394]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.173.37  user=root
1 31 22:43:37 hhoosstt sshd[5394]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
1 31 22:43:40 hhoosstt sshd[5394]: Failed password for root from 61.177.173.37 port 16882 ssh2
1 31 22:43:40 hhoosstt sshd[5394]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
1 31 22:43:42 hhoosstt sshd[5394]: Failed password for root from 61.177.173.37 port 16882 ssh2
1 31 22:43:42 hhoosstt sshd[5394]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
1 31 22:43:44 hhoosstt sshd[5394]: Failed password for root from 61.177.173.37 port 16882 ssh2
1 31 22:43:44 hhoosstt sshd[5394]: Received disconnect from 61.177.173.37 port 16882:11:  [preauth]
1 31 22:43:44 hhoosstt sshd[5394]: Disconnected from 61.177.173.37 port 16882 [preauth]
1 31 22:43:44 hhoosstt sshd[5394]: PAM 2 more authentication failures; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.173.37  user=root
1 31 22:43:44 hhoosstt sshd[5404]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.173.37  user=root
1 31 22:43:44 hhoosstt sshd[5404]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
1 31 22:43:46 hhoosstt sshd[5404]: Failed password for root from 61.177.173.37 port 54512 ssh2
1 31 22:43:46 hhoosstt sshd[5404]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
1 31 22:43:48 hhoosstt sshd[5404]: Failed password for root from 61.177.173.37 port 54512 ssh2
1 31 22:43:48 hhoosstt sshd[5408]: Invalid user sinusbot from 165.22.107.2 port 41834
1 31 22:43:48 hhoosstt sshd[5408]: input_userauth_request: invalid user sinusbot [preauth]
1 31 22:43:48 hhoosstt sshd[5408]: pam_unix(sshd:auth): check pass; user unknown
1 31 22:43:48 hhoosstt sshd[5408]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.107.2
1 31 22:43:48 hhoosstt sshd[5404]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
1 31 22:43:51 hhoosstt sshd[5408]: Failed password for invalid user sinusbot from 165.22.107.2 port 41834 ssh2
1 31 22:43:51 hhoosstt sshd[5404]: Failed password for root from 61.177.173.37 port 54512 ssh2
1 31 22:43:51 hhoosstt sshd[5404]: Received disconnect from 61.177.173.37 port 54512:11:  [preauth]
1 31 22:43:51 hhoosstt sshd[5404]: Disconnected from 61.177.173.37 port 54512 [preauth]
1 31 22:43:51 hhoosstt sshd[5404]: PAM 2 more authentication failures; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.173.37  user=root
1 31 22:43:51 hhoosstt sshd[5408]: Received disconnect from 165.22.107.2 port 41834:11: Bye Bye [preauth]
1 31 22:43:51 hhoosstt sshd[5408]: Disconnected from 165.22.107.2 port 41834 [preauth]
1 31 22:43:51 hhoosstt sshd[5414]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.173.37  user=root
1 31 22:43:51 hhoosstt sshd[5414]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
1 31 22:43:54 hhoosstt sshd[5414]: Failed password for root from 61.177.173.37 port 41037 ssh2
1 31 22:43:54 hhoosstt sshd[5414]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
1 31 22:43:55 hhoosstt sshd[5414]: Failed password for root from 61.177.173.37 port 41037 ssh2
1 31 22:43:55 hhoosstt sshd[5414]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
1 31 22:43:57 hhoosstt sshd[5414]: Failed password for root from 61.177.173.37 port 41037 ssh2
1 31 22:43:58 hhoosstt sshd[5414]: Received disconnect from 61.177.173.37 port 41037:11:  [preauth]
1 31 22:43:58 hhoosstt sshd[5414]: Disconnected from 61.177.173.37 port 41037 [preauth]
1 31 22:43:58 hhoosstt sshd[5414]: PAM 2 more authentication failures; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.173.37  user=root
1 31 22:43:58 hhoosstt sshd[5421]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.173.37  user=root
1 31 22:43:58 hhoosstt sshd[5421]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
1 31 22:44:00 hhoosstt sshd[5421]: Failed password for root from 61.177.173.37 port 26484 ssh2
1 31 22:44:01 hhoosstt sshd[5421]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
1 31 22:44:03 hhoosstt sshd[5421]: Failed password for root from 61.177.173.37 port 26484 ssh2
1 31 22:44:03 hhoosstt sshd[5421]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
1 31 22:44:05 hhoosstt sshd[5421]: Failed password for root from 61.177.173.37 port 26484 ssh2
1 31 22:44:05 hhoosstt sshd[5421]: Received disconnect from 61.177.173.37 port 26484:11:  [preauth]
1 31 22:44:05 hhoosstt sshd[5421]: Disconnected from 61.177.173.37 port 26484 [preauth]
1 31 22:44:05 hhoosstt sshd[5421]: PAM 2 more authentication failures; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.173.37  user=root
1 31 22:44:06 hhoosstt sshd[5433]: Invalid user cloud from 1.214.245.27 port 39470
1 31 22:44:06 hhoosstt sshd[5433]: input_userauth_request: invalid user cloud [preauth]
1 31 22:44:06 hhoosstt sshd[5433]: pam_unix(sshd:auth): check pass; user unknown
1 31 22:44:06 hhoosstt sshd[5433]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.214.245.27
1 31 22:44:08 hhoosstt sshd[5433]: Failed password for invalid user cloud from 1.214.245.27 port 39470 ssh2
1 31 22:44:08 hhoosstt sshd[5433]: Received disconnect from 1.214.245.27 port 39470:11: Bye Bye [preauth]
1 31 22:44:08 hhoosstt sshd[5433]: Disconnected from 1.214.245.27 port 39470 [preauth]
1 31 22:44:20 hhoosstt sshd[5447]: Address 107.173.251.36 maps to selinozoglu.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!
1 31 22:44:20 hhoosstt sshd[5447]: Invalid user jenkins from 107.173.251.36 port 46786
1 31 22:44:20 hhoosstt sshd[5447]: input_userauth_request: invalid user jenkins [preauth]
1 31 22:44:20 hhoosstt sshd[5447]: pam_unix(sshd:auth): check pass; user unknown
1 31 22:44:20 hhoosstt sshd[5447]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.173.251.36
1 31 22:44:21 hhoosstt sshd[5447]: Failed password for invalid user jenkins from 107.173.251.36 port 46786 ssh2
1 31 22:44:21 hhoosstt sshd[5447]: Received disconnect from 107.173.251.36 port 46786:11: Bye Bye [preauth]
1 31 22:44:21 hhoosstt sshd[5447]: Disconnected from 107.173.251.36 port 46786 [preauth]
1 31 22:45:01 hhoosstt systemd[1]: Started Session 2845 of user root.
-- Subject: Unit session-2845.scope has finished start-up
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit session-2845.scope has finished starting up.
-- 
-- The start-up result is done.
1 31 22:45:01 hhoosstt CROND[5499]: (root) CMD (flock -xn "/var/log/oneav/cron.lock" -c '/opt/threatbook/OneAV/oneav/script/install/oneav_service_monitor.sh')
1 31 22:45:47 hhoosstt sshd[5594]: Invalid user mcserver from 218.248.16.73 port 60446
1 31 22:45:47 hhoosstt sshd[5594]: input_userauth_request: invalid user mcserver [preauth]
1 31 22:45:47 hhoosstt sshd[5594]: pam_unix(sshd:auth): check pass; user unknown
1 31 22:45:47 hhoosstt sshd[5594]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=mail.jayapriya.com
1 31 22:45:49 hhoosstt sshd[5594]: Failed password for invalid user mcserver from 218.248.16.73 port 60446 ssh2
1 31 22:45:49 hhoosstt sshd[5594]: Received disconnect from 218.248.16.73 port 60446:11: Bye Bye [preauth]
1 31 22:45:49 hhoosstt sshd[5594]: Disconnected from 218.248.16.73 port 60446 [preauth]
1 31 22:46:16 hhoosstt sshd[5626]: Invalid user git from 165.22.107.2 port 34306
1 31 22:46:16 hhoosstt sshd[5626]: input_userauth_request: invalid user git [preauth]
1 31 22:46:16 hhoosstt sshd[5626]: pam_unix(sshd:auth): check pass; user unknown
1 31 22:46:16 hhoosstt sshd[5626]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.107.2
1 31 22:46:18 hhoosstt sshd[5626]: Failed password for invalid user git from 165.22.107.2 port 34306 ssh2
1 31 22:46:18 hhoosstt sshd[5626]: Received disconnect from 165.22.107.2 port 34306:11: Bye Bye [preauth]
1 31 22:46:18 hhoosstt sshd[5626]: Disconnected from 165.22.107.2 port 34306 [preauth]
1 31 22:46:30 hhoosstt sshd[5641]: Invalid user ftpuser from 1.214.245.27 port 46284
1 31 22:46:30 hhoosstt sshd[5641]: input_userauth_request: invalid user ftpuser [preauth]
1 31 22:46:30 hhoosstt sshd[5641]: pam_unix(sshd:auth): check pass; user unknown
1 31 22:46:30 hhoosstt sshd[5641]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.214.245.27
1 31 22:46:31 hhoosstt sshd[5643]: Address 107.173.251.36 maps to selinozoglu.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!
1 31 22:46:31 hhoosstt sshd[5643]: Invalid user jenkins from 107.173.251.36 port 55244
1 31 22:46:31 hhoosstt sshd[5643]: input_userauth_request: invalid user jenkins [preauth]
1 31 22:46:31 hhoosstt sshd[5643]: pam_unix(sshd:auth): check pass; user unknown
1 31 22:46:31 hhoosstt sshd[5643]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.173.251.36
1 31 22:46:32 hhoosstt sshd[5641]: Failed password for invalid user ftpuser from 1.214.245.27 port 46284 ssh2
1 31 22:46:32 hhoosstt sshd[5641]: Received disconnect from 1.214.245.27 port 46284:11: Bye Bye [preauth]
1 31 22:46:32 hhoosstt sshd[5641]: Disconnected from 1.214.245.27 port 46284 [preauth]
1 31 22:46:33 hhoosstt sshd[5643]: Failed password for invalid user jenkins from 107.173.251.36 port 55244 ssh2
1 31 22:46:33 hhoosstt sshd[5643]: Received disconnect from 107.173.251.36 port 55244:11: Bye Bye [preauth]
1 31 22:46:33 hhoosstt sshd[5643]: Disconnected from 107.173.251.36 port 55244 [preauth]
1 31 22:46:43 hhoosstt sshd[5670]: Invalid user postgres from 152.67.254.42 port 42380
1 31 22:46:43 hhoosstt sshd[5670]: input_userauth_request: invalid user postgres [preauth]
1 31 22:46:43 hhoosstt sshd[5670]: pam_unix(sshd:auth): check pass; user unknown
1 31 22:46:43 hhoosstt sshd[5670]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.67.254.42
1 31 22:46:46 hhoosstt sshd[5670]: Failed password for invalid user postgres from 152.67.254.42 port 42380 ssh2
1 31 22:46:46 hhoosstt sshd[5670]: Received disconnect from 152.67.254.42 port 42380:11: Bye Bye [preauth]
1 31 22:46:46 hhoosstt sshd[5670]: Disconnected from 152.67.254.42 port 42380 [preauth]
1 31 22:48:39 hhoosstt sshd[5826]: Address 107.173.251.36 maps to selinozoglu.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!
1 31 22:48:39 hhoosstt sshd[5826]: Invalid user myftp from 107.173.251.36 port 35476
1 31 22:48:39 hhoosstt sshd[5826]: input_userauth_request: invalid user myftp [preauth]
1 31 22:48:39 hhoosstt sshd[5826]: pam_unix(sshd:auth): check pass; user unknown
1 31 22:48:39 hhoosstt sshd[5826]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.173.251.36
1 31 22:48:40 hhoosstt sshd[5826]: Failed password for invalid user myftp from 107.173.251.36 port 35476 ssh2
1 31 22:48:40 hhoosstt sshd[5826]: Received disconnect from 107.173.251.36 port 35476:11: Bye Bye [preauth]
1 31 22:48:40 hhoosstt sshd[5826]: Disconnected from 107.173.251.36 port 35476 [preauth]
1 31 22:48:41 hhoosstt sshd[5830]: Invalid user zxcloudsetup from 165.22.107.2 port 54268
1 31 22:48:41 hhoosstt sshd[5830]: input_userauth_request: invalid user zxcloudsetup [preauth]
1 31 22:48:41 hhoosstt sshd[5830]: pam_unix(sshd:auth): check pass; user unknown
1 31 22:48:41 hhoosstt sshd[5830]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.107.2
1 31 22:48:43 hhoosstt sshd[5830]: Failed password for invalid user zxcloudsetup from 165.22.107.2 port 54268 ssh2
1 31 22:48:43 hhoosstt sshd[5830]: Received disconnect from 165.22.107.2 port 54268:11: Bye Bye [preauth]
1 31 22:48:43 hhoosstt sshd[5830]: Disconnected from 165.22.107.2 port 54268 [preauth]
1 31 22:48:46 hhoosstt sshd[5838]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.172.76  user=root
1 31 22:48:46 hhoosstt sshd[5838]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
1 31 22:48:48 hhoosstt sshd[5838]: Failed password for root from 61.177.172.76 port 30976 ssh2
1 31 22:48:49 hhoosstt sshd[5838]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
1 31 22:48:51 hhoosstt sshd[5838]: Failed password for root from 61.177.172.76 port 30976 ssh2
1 31 22:48:52 hhoosstt sshd[5838]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
1 31 22:48:53 hhoosstt sshd[5846]: Invalid user administrator from 1.214.245.27 port 53098
1 31 22:48:53 hhoosstt sshd[5846]: input_userauth_request: invalid user administrator [preauth]
1 31 22:48:53 hhoosstt sshd[5846]: pam_unix(sshd:auth): check pass; user unknown
1 31 22:48:53 hhoosstt sshd[5846]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.214.245.27
1 31 22:48:54 hhoosstt sshd[5838]: Failed password for root from 61.177.172.76 port 30976 ssh2
1 31 22:48:55 hhoosstt sshd[5846]: Failed password for invalid user administrator from 1.214.245.27 port 53098 ssh2
1 31 22:48:55 hhoosstt sshd[5846]: Received disconnect from 1.214.245.27 port 53098:11: Bye Bye [preauth]
1 31 22:48:55 hhoosstt sshd[5846]: Disconnected from 1.214.245.27 port 53098 [preauth]
1 31 22:48:55 hhoosstt sshd[5838]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
1 31 22:48:58 hhoosstt sshd[5838]: Failed password for root from 61.177.172.76 port 30976 ssh2
1 31 22:48:59 hhoosstt sshd[5838]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
1 31 22:49:01 hhoosstt sshd[5838]: Failed password for root from 61.177.172.76 port 30976 ssh2
1 31 22:49:01 hhoosstt sshd[5838]: error: maximum authentication attempts exceeded for root from 61.177.172.76 port 30976 ssh2 [preauth]
1 31 22:49:01 hhoosstt sshd[5838]: Disconnecting: Too many authentication failures [preauth]
1 31 22:49:01 hhoosstt sshd[5838]: PAM 4 more authentication failures; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.172.76  user=root
1 31 22:49:01 hhoosstt sshd[5838]: PAM service(sshd) ignoring max retries; 5 > 3
1 31 22:49:03 hhoosstt sshd[5862]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.172.76  user=root
1 31 22:49:03 hhoosstt sshd[5862]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
1 31 22:49:05 hhoosstt sshd[5862]: Failed password for root from 61.177.172.76 port 18044 ssh2
1 31 22:49:06 hhoosstt sshd[5855]: Accepted password for root from 101.228.86.14 port 60392 ssh2
1 31 22:49:06 hhoosstt systemd-logind[636]: New session 2846 of user root.
-- Subject: A new session 2846 has been created for user root
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- Documentation: http://www.freedesktop.org/wiki/Software/systemd/multiseat
-- 
-- A new session with the ID 2846 has been created for the user root.
-- 
-- The leading process of the session is 5855.
1 31 22:49:06 hhoosstt systemd[1]: Started Session 2846 of user root.
-- Subject: Unit session-2846.scope has finished start-up
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit session-2846.scope has finished starting up.
-- 
-- The start-up result is done.
1 31 22:49:06 hhoosstt sshd[5855]: pam_unix(sshd:session): session opened for user root by (uid=0)
1 31 22:49:06 hhoosstt sshd[5862]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
1 31 22:49:09 hhoosstt sshd[5862]: Failed password for root from 61.177.172.76 port 18044 ssh2
1 31 22:49:10 hhoosstt sshd[5862]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
1 31 22:49:12 hhoosstt sshd[5862]: Failed password for root from 61.177.172.76 port 18044 ssh2
1 31 22:49:13 hhoosstt sshd[5862]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
1 31 22:49:15 hhoosstt sshd[5862]: Failed password for root from 61.177.172.76 port 18044 ssh2
1 31 22:49:16 hhoosstt sshd[5862]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
1 31 22:49:18 hhoosstt sshd[5862]: Failed password for root from 61.177.172.76 port 18044 ssh2
1 31 22:49:19 hhoosstt sshd[5862]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
1 31 22:49:22 hhoosstt sshd[5862]: Failed password for root from 61.177.172.76 port 18044 ssh2
1 31 22:49:22 hhoosstt sshd[5862]: error: maximum authentication attempts exceeded for root from 61.177.172.76 port 18044 ssh2 [preauth]
1 31 22:49:22 hhoosstt sshd[5862]: Disconnecting: Too many authentication failures [preauth]
1 31 22:49:22 hhoosstt sshd[5862]: PAM 5 more authentication failures; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.172.76  user=root
1 31 22:49:22 hhoosstt sshd[5862]: PAM service(sshd) ignoring max retries; 6 > 3
1 31 22:49:25 hhoosstt sshd[6090]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.172.114  user=root
1 31 22:49:25 hhoosstt sshd[6090]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
1 31 22:49:25 hhoosstt sshd[6087]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.172.76  user=root
1 31 22:49:25 hhoosstt sshd[6087]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
1 31 22:49:28 hhoosstt sshd[6090]: Failed password for root from 61.177.172.114 port 42933 ssh2
1 31 22:49:28 hhoosstt sshd[6087]: Failed password for root from 61.177.172.76 port 16978 ssh2
1 31 22:49:28 hhoosstt sshd[6090]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
1 31 22:49:29 hhoosstt sshd[6087]: Received disconnect from 61.177.172.76 port 16978:11:  [preauth]
1 31 22:49:29 hhoosstt sshd[6087]: Disconnected from 61.177.172.76 port 16978 [preauth]
1 31 22:49:29 hhoosstt sshd[6090]: Failed password for root from 61.177.172.114 port 42933 ssh2
1 31 22:49:30 hhoosstt sshd[6090]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
1 31 22:49:32 hhoosstt sshd[6090]: Failed password for root from 61.177.172.114 port 42933 ssh2
1 31 22:49:32 hhoosstt sshd[6090]: Received disconnect from 61.177.172.114 port 42933:11:  [preauth]
1 31 22:49:32 hhoosstt sshd[6090]: Disconnected from 61.177.172.114 port 42933 [preauth]
1 31 22:49:32 hhoosstt sshd[6090]: PAM 2 more authentication failures; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.172.114  user=root
1 31 22:49:32 hhoosstt sshd[6218]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.172.114  user=root
1 31 22:49:32 hhoosstt sshd[6218]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
1 31 22:49:33 hhoosstt sshd[6221]: Invalid user user from 152.67.254.42 port 45104
1 31 22:49:33 hhoosstt sshd[6221]: input_userauth_request: invalid user user [preauth]
1 31 22:49:34 hhoosstt sshd[6221]: pam_unix(sshd:auth): check pass; user unknown
1 31 22:49:34 hhoosstt sshd[6221]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.67.254.42
1 31 22:49:35 hhoosstt sshd[6218]: Failed password for root from 61.177.172.114 port 33888 ssh2
1 31 22:49:35 hhoosstt sshd[6218]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
1 31 22:49:35 hhoosstt sshd[6221]: Failed password for invalid user user from 152.67.254.42 port 45104 ssh2
1 31 22:49:36 hhoosstt sshd[6221]: Received disconnect from 152.67.254.42 port 45104:11: Bye Bye [preauth]
1 31 22:49:36 hhoosstt sshd[6221]: Disconnected from 152.67.254.42 port 45104 [preauth]
1 31 22:49:37 hhoosstt sshd[6218]: Failed password for root from 61.177.172.114 port 33888 ssh2
1 31 22:49:37 hhoosstt sshd[6218]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
1 31 22:49:40 hhoosstt sshd[6218]: Failed password for root from 61.177.172.114 port 33888 ssh2
1 31 22:49:40 hhoosstt sshd[6218]: Received disconnect from 61.177.172.114 port 33888:11:  [preauth]
1 31 22:49:40 hhoosstt sshd[6218]: Disconnected from 61.177.172.114 port 33888 [preauth]
1 31 22:49:40 hhoosstt sshd[6218]: PAM 2 more authentication failures; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.172.114  user=root
1 31 22:49:40 hhoosstt sshd[6358]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.172.114  user=root
1 31 22:49:40 hhoosstt sshd[6358]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
1 31 22:49:42 hhoosstt sshd[6358]: Failed password for root from 61.177.172.114 port 21947 ssh2
1 31 22:49:42 hhoosstt sshd[6358]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
1 31 22:49:44 hhoosstt sshd[6358]: Failed password for root from 61.177.172.114 port 21947 ssh2
1 31 22:49:44 hhoosstt sshd[6358]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
1 31 22:49:47 hhoosstt sshd[6358]: Failed password for root from 61.177.172.114 port 21947 ssh2
1 31 22:49:47 hhoosstt sshd[6358]: Received disconnect from 61.177.172.114 port 21947:11:  [preauth]
1 31 22:49:47 hhoosstt sshd[6358]: Disconnected from 61.177.172.114 port 21947 [preauth]
1 31 22:49:47 hhoosstt sshd[6358]: PAM 2 more authentication failures; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.172.114  user=root
1 31 22:49:47 hhoosstt sshd[6461]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.172.114  user=root
1 31 22:49:47 hhoosstt sshd[6461]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
1 31 22:49:49 hhoosstt sshd[6461]: Failed password for root from 61.177.172.114 port 12640 ssh2
1 31 22:49:49 hhoosstt sshd[6461]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
1 31 22:49:51 hhoosstt sshd[6461]: Failed password for root from 61.177.172.114 port 12640 ssh2
1 31 22:49:51 hhoosstt sshd[6461]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
1 31 22:49:54 hhoosstt sshd[6461]: Failed password for root from 61.177.172.114 port 12640 ssh2
1 31 22:49:54 hhoosstt sshd[6461]: Received disconnect from 61.177.172.114 port 12640:11:  [preauth]
1 31 22:49:54 hhoosstt sshd[6461]: Disconnected from 61.177.172.114 port 12640 [preauth]
1 31 22:49:54 hhoosstt sshd[6461]: PAM 2 more authentication failures; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.172.114  user=root
1 31 22:50:01 hhoosstt systemd[1]: Started Session 2847 of user root.
-- Subject: Unit session-2847.scope has finished start-up
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit session-2847.scope has finished starting up.
-- 
-- The start-up result is done.
1 31 22:50:01 hhoosstt CROND[6663]: (root) CMD (flock -xn "/var/log/oneav/cron.lock" -c '/opt/threatbook/OneAV/oneav/script/install/oneav_service_monitor.sh')
1 31 22:50:16 hhoosstt sshd[6884]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.172.143  user=root
1 31 22:50:16 hhoosstt sshd[6884]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
1 31 22:50:18 hhoosstt sshd[6884]: Failed password for root from 61.177.172.143 port 13753 ssh2
1 31 22:50:18 hhoosstt sshd[6884]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
1 31 22:50:20 hhoosstt sshd[6884]: Failed password for root from 61.177.172.143 port 13753 ssh2
1 31 22:50:20 hhoosstt sshd[6884]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
1 31 22:50:20 hhoosstt sshd[6950]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.173.49  user=root
1 31 22:50:20 hhoosstt sshd[6950]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
1 31 22:50:22 hhoosstt sshd[6884]: Failed password for root from 61.177.172.143 port 13753 ssh2
1 31 22:50:22 hhoosstt sshd[6884]: Received disconnect from 61.177.172.143 port 13753:11:  [preauth]
1 31 22:50:22 hhoosstt sshd[6884]: Disconnected from 61.177.172.143 port 13753 [preauth]
1 31 22:50:22 hhoosstt sshd[6884]: PAM 2 more authentication failures; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.172.143  user=root
1 31 22:50:22 hhoosstt sshd[6950]: Failed password for root from 61.177.173.49 port 14526 ssh2
1 31 22:50:22 hhoosstt sshd[6950]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
1 31 22:50:24 hhoosstt sshd[6950]: Failed password for root from 61.177.173.49 port 14526 ssh2
1 31 22:50:24 hhoosstt sshd[6950]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
1 31 22:50:27 hhoosstt sshd[6950]: Failed password for root from 61.177.173.49 port 14526 ssh2
1 31 22:50:27 hhoosstt sshd[6950]: Received disconnect from 61.177.173.49 port 14526:11:  [preauth]
1 31 22:50:27 hhoosstt sshd[6950]: Disconnected from 61.177.173.49 port 14526 [preauth]
1 31 22:50:27 hhoosstt sshd[6950]: PAM 2 more authentication failures; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.173.49  user=root
1 31 22:50:27 hhoosstt sshd[7048]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.173.49  user=root
1 31 22:50:27 hhoosstt sshd[7048]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
1 31 22:50:30 hhoosstt sshd[7048]: Failed password for root from 61.177.173.49 port 57946 ssh2
1 31 22:50:30 hhoosstt sshd[7048]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
1 31 22:50:32 hhoosstt sshd[7048]: Failed password for root from 61.177.173.49 port 57946 ssh2
1 31 22:50:32 hhoosstt sshd[7048]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
1 31 22:50:33 hhoosstt sshd[7048]: Failed password for root from 61.177.173.49 port 57946 ssh2
1 31 22:50:33 hhoosstt sshd[7048]: Received disconnect from 61.177.173.49 port 57946:11:  [preauth]
1 31 22:50:33 hhoosstt sshd[7048]: Disconnected from 61.177.173.49 port 57946 [preauth]
1 31 22:50:33 hhoosstt sshd[7048]: PAM 2 more authentication failures; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.173.49  user=root
1 31 22:50:52 hhoosstt sshd[7400]: Address 107.173.251.36 maps to selinozoglu.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!
1 31 22:50:52 hhoosstt sshd[7400]: Invalid user admin from 107.173.251.36 port 43954
1 31 22:50:52 hhoosstt sshd[7400]: input_userauth_request: invalid user admin [preauth]
1 31 22:50:52 hhoosstt sshd[7400]: pam_unix(sshd:auth): check pass; user unknown
1 31 22:50:52 hhoosstt sshd[7400]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.173.251.36
1 31 22:50:54 hhoosstt sshd[7400]: Failed password for invalid user admin from 107.173.251.36 port 43954 ssh2
1 31 22:50:54 hhoosstt sshd[7400]: Received disconnect from 107.173.251.36 port 43954:11: Bye Bye [preauth]
1 31 22:50:54 hhoosstt sshd[7400]: Disconnected from 107.173.251.36 port 43954 [preauth]
1 31 22:51:02 hhoosstt sshd[7573]: Invalid user sysadmin from 165.22.107.2 port 57648
1 31 22:51:02 hhoosstt sshd[7573]: input_userauth_request: invalid user sysadmin [preauth]
1 31 22:51:02 hhoosstt sshd[7573]: pam_unix(sshd:auth): check pass; user unknown
1 31 22:51:02 hhoosstt sshd[7573]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.107.2
1 31 22:51:04 hhoosstt sshd[7573]: Failed password for invalid user sysadmin from 165.22.107.2 port 57648 ssh2
1 31 22:51:05 hhoosstt sshd[7573]: Received disconnect from 165.22.107.2 port 57648:11: Bye Bye [preauth]
1 31 22:51:05 hhoosstt sshd[7573]: Disconnected from 165.22.107.2 port 57648 [preauth]
1 31 22:51:13 hhoosstt sshd[7740]: Invalid user oracle from 1.214.245.27 port 59910
1 31 22:51:13 hhoosstt sshd[7740]: input_userauth_request: invalid user oracle [preauth]
1 31 22:51:13 hhoosstt sshd[7740]: pam_unix(sshd:auth): check pass; user unknown
1 31 22:51:13 hhoosstt sshd[7740]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.214.245.27
1 31 22:51:15 hhoosstt sshd[7740]: Failed password for invalid user oracle from 1.214.245.27 port 59910 ssh2
1 31 22:51:15 hhoosstt sshd[7740]: Received disconnect from 1.214.245.27 port 59910:11: Bye Bye [preauth]
1 31 22:51:15 hhoosstt sshd[7740]: Disconnected from 1.214.245.27 port 59910 [preauth]
1 31 22:52:32 hhoosstt sshd[8861]: Invalid user webmaster from 152.67.254.42 port 54750
1 31 22:52:32 hhoosstt sshd[8861]: input_userauth_request: invalid user webmaster [preauth]
1 31 22:52:32 hhoosstt sshd[8861]: pam_unix(sshd:auth): check pass; user unknown
1 31 22:52:32 hhoosstt sshd[8861]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.67.254.42
1 31 22:52:34 hhoosstt sshd[8861]: Failed password for invalid user webmaster from 152.67.254.42 port 54750 ssh2
1 31 22:52:34 hhoosstt sshd[8861]: Received disconnect from 152.67.254.42 port 54750:11: Bye Bye [preauth]
1 31 22:52:34 hhoosstt sshd[8861]: Disconnected from 152.67.254.42 port 54750 [preauth]
1 31 22:52:55 hhoosstt polkitd[613]: Registered Authentication Agent for unix-process:9202:78059339 (system bus name :1.5787 [/usr/bin/pkttyagent --notify-fd 5 --fall
1 31 22:52:55 hhoosstt systemd[1]: Starting Postfix Mail Transport Agent...
-- Subject: Unit postfix.service has begun start-up
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit postfix.service has begun starting up.
1 31 22:52:56 hhoosstt postfix/postfix-script[9323]: starting the Postfix mail system
1 31 22:52:56 hhoosstt postfix/master[9325]: daemon started -- version 3.4.7, configuration /etc/postfix
1 31 22:52:56 hhoosstt systemd[1]: Started Postfix Mail Transport Agent.
-- Subject: Unit postfix.service has finished start-up
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit postfix.service has finished starting up.
-- 
-- The start-up result is done.
1 31 22:52:56 hhoosstt polkitd[613]: Unregistered Authentication Agent for unix-process:9202:78059339 (system bus name :1.5787, object path /org/freedesktop/PolicyKit
1 31 22:53:02 hhoosstt sshd[9392]: Address 107.173.251.36 maps to selinozoglu.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!
1 31 22:53:02 hhoosstt sshd[9392]: Invalid user server from 107.173.251.36 port 52424
1 31 22:53:02 hhoosstt sshd[9392]: input_userauth_request: invalid user server [preauth]
1 31 22:53:02 hhoosstt sshd[9392]: pam_unix(sshd:auth): check pass; user unknown
1 31 22:53:02 hhoosstt sshd[9392]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.173.251.36
1 31 22:53:03 hhoosstt sshd[9392]: Failed password for invalid user server from 107.173.251.36 port 52424 ssh2
1 31 22:53:04 hhoosstt sshd[9392]: Received disconnect from 107.173.251.36 port 52424:11: Bye Bye [preauth]
1 31 22:53:04 hhoosstt sshd[9392]: Disconnected from 107.173.251.36 port 52424 [preauth]
1 31 22:53:24 hhoosstt sshd[9739]: Invalid user student2 from 165.22.107.2 port 44138
1 31 22:53:24 hhoosstt sshd[9739]: input_userauth_request: invalid user student2 [preauth]
1 31 22:53:24 hhoosstt sshd[9739]: pam_unix(sshd:auth): check pass; user unknown
1 31 22:53:24 hhoosstt sshd[9739]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.107.2
1 31 22:53:25 hhoosstt polkitd[613]: Registered Authentication Agent for unix-process:9754:78062413 (system bus name :1.5788 [/usr/bin/pkttyagent --notify-fd 5 --fall
1 31 22:53:25 hhoosstt systemd[1]: Started rapid spam filtering system.
-- Subject: Unit rspamd.service has finished start-up
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit rspamd.service has finished starting up.
-- 
-- The start-up result is done.
1 31 22:53:25 hhoosstt polkitd[613]: Unregistered Authentication Agent for unix-process:9754:78062413 (system bus name :1.5788, object path /org/freedesktop/PolicyKit
1 31 22:53:25 hhoosstt rspamd[9760]: /usr/bin/rspamd: error while loading shared libraries: libsodium.so.23: cannot open shared object file: No such file or directory
1 31 22:53:25 hhoosstt systemd[1]: rspamd.service: main process exited, code=exited, status=127/n/a
1 31 22:53:25 hhoosstt systemd[1]: Unit rspamd.service entered failed state.
1 31 22:53:25 hhoosstt systemd[1]: rspamd.service failed.
1 31 22:53:25 hhoosstt systemd[1]: rspamd.service holdoff time over, scheduling restart.
1 31 22:53:25 hhoosstt systemd[1]: Stopped rapid spam filtering system.
-- Subject: Unit rspamd.service has finished shutting down
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit rspamd.service has finished shutting down.
1 31 22:53:25 hhoosstt systemd[1]: Started rapid spam filtering system.
-- Subject: Unit rspamd.service has finished start-up
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit rspamd.service has finished starting up.
-- 
-- The start-up result is done.
1 31 22:53:25 hhoosstt rspamd[9784]: /usr/bin/rspamd: error while loading shared libraries: libsodium.so.23: cannot open shared object file: No such file or directory
1 31 22:53:25 hhoosstt systemd[1]: rspamd.service: main process exited, code=exited, status=127/n/a
1 31 22:53:25 hhoosstt systemd[1]: Unit rspamd.service entered failed state.
1 31 22:53:25 hhoosstt systemd[1]: rspamd.service failed.
1 31 22:53:26 hhoosstt systemd[1]: rspamd.service holdoff time over, scheduling restart.
1 31 22:53:26 hhoosstt systemd[1]: Stopped rapid spam filtering system.
-- Subject: Unit rspamd.service has finished shutting down
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit rspamd.service has finished shutting down.
1 31 22:53:26 hhoosstt systemd[1]: Started rapid spam filtering system.
-- Subject: Unit rspamd.service has finished start-up
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit rspamd.service has finished starting up.
-- 
-- The start-up result is done.
1 31 22:53:26 hhoosstt rspamd[9788]: /usr/bin/rspamd: error while loading shared libraries: libsodium.so.23: cannot open shared object file: No such file or directory
1 31 22:53:26 hhoosstt systemd[1]: rspamd.service: main process exited, code=exited, status=127/n/a
1 31 22:53:26 hhoosstt systemd[1]: Unit rspamd.service entered failed state.
1 31 22:53:26 hhoosstt systemd[1]: rspamd.service failed.
1 31 22:53:26 hhoosstt systemd[1]: rspamd.service holdoff time over, scheduling restart.
1 31 22:53:26 hhoosstt systemd[1]: Stopped rapid spam filtering system.
-- Subject: Unit rspamd.service has finished shutting down
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit rspamd.service has finished shutting down.
1 31 22:53:26 hhoosstt systemd[1]: Started rapid spam filtering system.
-- Subject: Unit rspamd.service has finished start-up
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit rspamd.service has finished starting up.
-- 
-- The start-up result is done.
1 31 22:53:26 hhoosstt rspamd[9790]: /usr/bin/rspamd: error while loading shared libraries: libsodium.so.23: cannot open shared object file: No such file or directory
1 31 22:53:26 hhoosstt systemd[1]: rspamd.service: main process exited, code=exited, status=127/n/a
1 31 22:53:26 hhoosstt systemd[1]: Unit rspamd.service entered failed state.
1 31 22:53:26 hhoosstt systemd[1]: rspamd.service failed.
1 31 22:53:26 hhoosstt sshd[9739]: Failed password for invalid user student2 from 165.22.107.2 port 44138 ssh2
1 31 22:53:26 hhoosstt systemd[1]: rspamd.service holdoff time over, scheduling restart.
1 31 22:53:26 hhoosstt systemd[1]: Stopped rapid spam filtering system.
-- Subject: Unit rspamd.service has finished shutting down
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit rspamd.service has finished shutting down.
1 31 22:53:26 hhoosstt systemd[1]: Started rapid spam filtering system.
-- Subject: Unit rspamd.service has finished start-up
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit rspamd.service has finished starting up.
-- 
-- The start-up result is done.
1 31 22:53:26 hhoosstt rspamd[9793]: /usr/bin/rspamd: error while loading shared libraries: libsodium.so.23: cannot open shared object file: No such file or directory
1 31 22:53:26 hhoosstt systemd[1]: rspamd.service: main process exited, code=exited, status=127/n/a
1 31 22:53:26 hhoosstt systemd[1]: Unit rspamd.service entered failed state.
1 31 22:53:26 hhoosstt systemd[1]: rspamd.service failed.
1 31 22:53:26 hhoosstt sshd[9739]: Received disconnect from 165.22.107.2 port 44138:11: Bye Bye [preauth]
1 31 22:53:26 hhoosstt sshd[9739]: Disconnected from 165.22.107.2 port 44138 [preauth]
1 31 22:53:26 hhoosstt systemd[1]: rspamd.service holdoff time over, scheduling restart.
1 31 22:53:26 hhoosstt systemd[1]: Stopped rapid spam filtering system.
-- Subject: Unit rspamd.service has finished shutting down
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit rspamd.service has finished shutting down.
1 31 22:53:26 hhoosstt systemd[1]: start request repeated too quickly for rspamd.service
1 31 22:53:26 hhoosstt systemd[1]: Failed to start rapid spam filtering system.
-- Subject: Unit rspamd.service has failed
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit rspamd.service has failed.
-- 
-- The result is failed.
1 31 22:53:26 hhoosstt systemd[1]: Unit rspamd.service entered failed state.
1 31 22:53:26 hhoosstt systemd[1]: rspamd.service failed.
1 31 22:53:29 hhoosstt sshd[9844]: Invalid user vncuser from 1.214.245.27 port 38488
1 31 22:53:29 hhoosstt sshd[9844]: input_userauth_request: invalid user vncuser [preauth]
1 31 22:53:29 hhoosstt sshd[9844]: pam_unix(sshd:auth): check pass; user unknown
1 31 22:53:29 hhoosstt sshd[9844]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.214.245.27
1 31 22:53:32 hhoosstt sshd[9844]: Failed password for invalid user vncuser from 1.214.245.27 port 38488 ssh2
1 31 22:53:32 hhoosstt sshd[9844]: Received disconnect from 1.214.245.27 port 38488:11: Bye Bye [preauth]
1 31 22:53:32 hhoosstt sshd[9844]: Disconnected from 1.214.245.27 port 38488 [preauth]
1 31 22:54:12 hhoosstt auditd[527]: Audit daemon rotating log files
1 31 22:54:57 hhoosstt sshd[11209]: Did not receive identification string from 58.213.109.242 port 36226
1 31 22:55:01 hhoosstt systemd[1]: Started Session 2848 of user root.
-- Subject: Unit session-2848.scope has finished start-up
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit session-2848.scope has finished starting up.
-- 
-- The start-up result is done.
1 31 22:55:01 hhoosstt CROND[11263]: (root) CMD (flock -xn "/var/log/oneav/cron.lock" -c '/opt/threatbook/OneAV/oneav/script/install/oneav_service_monitor.sh')
1 31 22:55:07 hhoosstt sshd[11385]: Invalid user admin from 58.213.109.242 port 43014
1 31 22:55:07 hhoosstt sshd[11385]: input_userauth_request: invalid user admin [preauth]
1 31 22:55:07 hhoosstt sshd[11385]: pam_unix(sshd:auth): check pass; user unknown
1 31 22:55:07 hhoosstt sshd[11385]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.213.109.242
1 31 22:55:09 hhoosstt sshd[11385]: Failed password for invalid user admin from 58.213.109.242 port 43014 ssh2
1 31 22:55:09 hhoosstt sshd[11385]: Connection closed by 58.213.109.242 port 43014 [preauth]
1 31 22:55:12 hhoosstt sshd[11450]: Invalid user admin from 58.213.109.242 port 50106
1 31 22:55:12 hhoosstt sshd[11450]: input_userauth_request: invalid user admin [preauth]
1 31 22:55:12 hhoosstt sshd[11450]: pam_unix(sshd:auth): check pass; user unknown
1 31 22:55:12 hhoosstt sshd[11450]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.213.109.242
1 31 22:55:13 hhoosstt sshd[11450]: Failed password for invalid user admin from 58.213.109.242 port 50106 ssh2
1 31 22:55:13 hhoosstt sshd[11450]: Connection closed by 58.213.109.242 port 50106 [preauth]
1 31 22:55:14 hhoosstt sshd[11492]: Address 107.173.251.36 maps to selinozoglu.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!
1 31 22:55:14 hhoosstt sshd[11492]: Invalid user testing from 107.173.251.36 port 60898
1 31 22:55:14 hhoosstt sshd[11492]: input_userauth_request: invalid user testing [preauth]
1 31 22:55:14 hhoosstt sshd[11492]: pam_unix(sshd:auth): check pass; user unknown
1 31 22:55:14 hhoosstt sshd[11492]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.173.251.36
1 31 22:55:16 hhoosstt sshd[11540]: Invalid user admin from 58.213.109.242 port 57198
1 31 22:55:16 hhoosstt sshd[11540]: input_userauth_request: invalid user admin [preauth]
1 31 22:55:16 hhoosstt sshd[11540]: pam_unix(sshd:auth): check pass; user unknown
1 31 22:55:16 hhoosstt sshd[11540]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.213.109.242
1 31 22:55:17 hhoosstt sshd[11492]: Failed password for invalid user testing from 107.173.251.36 port 60898 ssh2
1 31 22:55:17 hhoosstt sshd[11492]: Received disconnect from 107.173.251.36 port 60898:11: Bye Bye [preauth]
1 31 22:55:17 hhoosstt sshd[11492]: Disconnected from 107.173.251.36 port 60898 [preauth]
1 31 22:55:19 hhoosstt sshd[11540]: Failed password for invalid user admin from 58.213.109.242 port 57198 ssh2
1 31 22:55:19 hhoosstt sshd[11540]: Connection closed by 58.213.109.242 port 57198 [preauth]
1 31 22:55:23 hhoosstt sshd[11620]: Invalid user admin from 58.213.109.242 port 36058
1 31 22:55:23 hhoosstt sshd[11620]: input_userauth_request: invalid user admin [preauth]
1 31 22:55:23 hhoosstt sshd[11620]: pam_unix(sshd:auth): check pass; user unknown
1 31 22:55:23 hhoosstt sshd[11620]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.213.109.242
1 31 22:55:25 hhoosstt sshd[11661]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.67.254.42  user=www
1 31 22:55:26 hhoosstt sshd[11620]: Failed password for invalid user admin from 58.213.109.242 port 36058 ssh2
1 31 22:55:26 hhoosstt sshd[11620]: Connection closed by 58.213.109.242 port 36058 [preauth]
1 31 22:55:26 hhoosstt sshd[11661]: Failed password for www from 152.67.254.42 port 40446 ssh2
1 31 22:55:27 hhoosstt sshd[11661]: Received disconnect from 152.67.254.42 port 40446:11: Bye Bye [preauth]
1 31 22:55:27 hhoosstt sshd[11661]: Disconnected from 152.67.254.42 port 40446 [preauth]
1 31 22:55:28 hhoosstt sshd[11702]: Invalid user admin from 58.213.109.242 port 43150
1 31 22:55:28 hhoosstt sshd[11702]: input_userauth_request: invalid user admin [preauth]
1 31 22:55:28 hhoosstt sshd[11702]: pam_unix(sshd:auth): check pass; user unknown
1 31 22:55:28 hhoosstt sshd[11702]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.213.109.242
1 31 22:55:30 hhoosstt sshd[11702]: Failed password for invalid user admin from 58.213.109.242 port 43150 ssh2
1 31 22:55:31 hhoosstt sshd[11753]: Invalid user centos from 58.213.109.242 port 50242
1 31 22:55:31 hhoosstt sshd[11753]: input_userauth_request: invalid user centos [preauth]
1 31 22:55:32 hhoosstt sshd[11702]: Connection closed by 58.213.109.242 port 43150 [preauth]
1 31 22:55:32 hhoosstt sshd[11753]: pam_unix(sshd:auth): check pass; user unknown
1 31 22:55:32 hhoosstt sshd[11753]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.213.109.242
1 31 22:55:34 hhoosstt sshd[11753]: Failed password for invalid user centos from 58.213.109.242 port 50242 ssh2
1 31 22:55:34 hhoosstt sshd[11753]: Connection closed by 58.213.109.242 port 50242 [preauth]
1 31 22:55:43 hhoosstt sshd[11958]: Invalid user guest from 58.213.109.242 port 43286
1 31 22:55:43 hhoosstt sshd[11958]: input_userauth_request: invalid user guest [preauth]
1 31 22:55:44 hhoosstt sshd[11958]: pam_unix(sshd:auth): check pass; user unknown
1 31 22:55:44 hhoosstt sshd[11958]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.213.109.242
1 31 22:55:46 hhoosstt sshd[11958]: Failed password for invalid user guest from 58.213.109.242 port 43286 ssh2
1 31 22:55:46 hhoosstt sshd[11958]: Connection closed by 58.213.109.242 port 43286 [preauth]
1 31 22:55:47 hhoosstt sshd[12010]: Invalid user testuser from 165.22.107.2 port 43164
1 31 22:55:47 hhoosstt sshd[12010]: input_userauth_request: invalid user testuser [preauth]
1 31 22:55:47 hhoosstt sshd[12010]: pam_unix(sshd:auth): check pass; user unknown
1 31 22:55:47 hhoosstt sshd[12010]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.107.2
1 31 22:55:49 hhoosstt sshd[12025]: Invalid user postgres from 58.213.109.242 port 50378
1 31 22:55:49 hhoosstt sshd[12025]: input_userauth_request: invalid user postgres [preauth]
1 31 22:55:49 hhoosstt sshd[12010]: Failed password for invalid user testuser from 165.22.107.2 port 43164 ssh2
1 31 22:55:49 hhoosstt sshd[12010]: Received disconnect from 165.22.107.2 port 43164:11: Bye Bye [preauth]
1 31 22:55:49 hhoosstt sshd[12010]: Disconnected from 165.22.107.2 port 43164 [preauth]
1 31 22:55:50 hhoosstt sshd[12025]: pam_unix(sshd:auth): check pass; user unknown
1 31 22:55:50 hhoosstt sshd[12025]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.213.109.242
1 31 22:55:52 hhoosstt sshd[12025]: Failed password for invalid user postgres from 58.213.109.242 port 50378 ssh2
1 31 22:55:52 hhoosstt sshd[11819]: Invalid user centos from 58.213.109.242 port 57334
1 31 22:55:52 hhoosstt sshd[11819]: input_userauth_request: invalid user centos [preauth]
1 31 22:55:52 hhoosstt sshd[11819]: pam_unix(sshd:auth): check pass; user unknown
1 31 22:55:52 hhoosstt sshd[11819]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.213.109.242
1 31 22:55:54 hhoosstt sshd[12025]: Connection closed by 58.213.109.242 port 50378 [preauth]
1 31 22:55:54 hhoosstt sshd[11819]: Failed password for invalid user centos from 58.213.109.242 port 57334 ssh2
1 31 22:55:54 hhoosstt sshd[11819]: Connection closed by 58.213.109.242 port 57334 [preauth]
1 31 22:55:55 hhoosstt sshd[12157]: Invalid user sammy from 1.214.245.27 port 45304
1 31 22:55:55 hhoosstt sshd[12157]: input_userauth_request: invalid user sammy [preauth]
1 31 22:55:55 hhoosstt sshd[12157]: pam_unix(sshd:auth): check pass; user unknown
1 31 22:55:55 hhoosstt sshd[12157]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.214.245.27
1 31 22:55:57 hhoosstt sshd[12157]: Failed password for invalid user sammy from 1.214.245.27 port 45304 ssh2
1 31 22:55:57 hhoosstt sshd[12157]: Received disconnect from 1.214.245.27 port 45304:11: Bye Bye [preauth]
1 31 22:55:57 hhoosstt sshd[12157]: Disconnected from 1.214.245.27 port 45304 [preauth]
1 31 22:56:04 hhoosstt sshd[12288]: Invalid user hadoop from 58.213.109.242 port 43422
1 31 22:56:04 hhoosstt sshd[12288]: input_userauth_request: invalid user hadoop [preauth]
1 31 22:56:04 hhoosstt sshd[12288]: pam_unix(sshd:auth): check pass; user unknown
1 31 22:56:04 hhoosstt sshd[12288]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.213.109.242
1 31 22:56:05 hhoosstt sshd[12260]: Invalid user pi from 58.213.109.242 port 36330
1 31 22:56:05 hhoosstt sshd[12260]: input_userauth_request: invalid user pi [preauth]
1 31 22:56:05 hhoosstt sshd[12260]: pam_unix(sshd:auth): check pass; user unknown
1 31 22:56:05 hhoosstt sshd[12260]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.213.109.242
1 31 22:56:07 hhoosstt sshd[12288]: Failed password for invalid user hadoop from 58.213.109.242 port 43422 ssh2
1 31 22:56:07 hhoosstt sshd[12288]: Connection closed by 58.213.109.242 port 43422 [preauth]
1 31 22:56:08 hhoosstt sshd[12260]: Failed password for invalid user pi from 58.213.109.242 port 36330 ssh2
1 31 22:56:08 hhoosstt sshd[12260]: Connection closed by 58.213.109.242 port 36330 [preauth]
1 31 22:56:09 hhoosstt sshd[12372]: Invalid user hadoop from 58.213.109.242 port 50514
1 31 22:56:09 hhoosstt sshd[12372]: input_userauth_request: invalid user hadoop [preauth]
1 31 22:56:09 hhoosstt sshd[12372]: pam_unix(sshd:auth): check pass; user unknown
1 31 22:56:09 hhoosstt sshd[12372]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.213.109.242
1 31 22:56:11 hhoosstt sshd[12372]: Failed password for invalid user hadoop from 58.213.109.242 port 50514 ssh2
1 31 22:56:11 hhoosstt sshd[12372]: Connection closed by 58.213.109.242 port 50514 [preauth]
1 31 22:56:25 hhoosstt sshd[12594]: Invalid user dolphinscheduler from 58.213.109.242 port 50650
1 31 22:56:25 hhoosstt sshd[12594]: input_userauth_request: invalid user dolphinscheduler [preauth]
1 31 22:56:28 hhoosstt sshd[12594]: pam_unix(sshd:auth): check pass; user unknown
1 31 22:56:28 hhoosstt sshd[12594]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.213.109.242
1 31 22:56:31 hhoosstt sshd[12594]: Failed password for invalid user dolphinscheduler from 58.213.109.242 port 50650 ssh2
1 31 22:56:32 hhoosstt sshd[12594]: Connection closed by 58.213.109.242 port 50650 [preauth]
1 31 22:56:38 hhoosstt sshd[12790]: Invalid user lighthouse from 58.213.109.242 port 43558
1 31 22:56:38 hhoosstt sshd[12790]: input_userauth_request: invalid user lighthouse [preauth]
1 31 22:56:40 hhoosstt sshd[12790]: pam_unix(sshd:auth): check pass; user unknown
1 31 22:56:40 hhoosstt sshd[12790]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.213.109.242
1 31 22:56:43 hhoosstt sshd[12757]: Invalid user debianuser from 58.213.109.242 port 36602
1 31 22:56:43 hhoosstt sshd[12757]: input_userauth_request: invalid user debianuser [preauth]
1 31 22:56:43 hhoosstt sshd[12790]: Failed password for invalid user lighthouse from 58.213.109.242 port 43558 ssh2
1 31 22:56:43 hhoosstt sshd[12757]: pam_unix(sshd:auth): check pass; user unknown
1 31 22:56:43 hhoosstt sshd[12757]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.213.109.242
1 31 22:56:45 hhoosstt sshd[12757]: Failed password for invalid user debianuser from 58.213.109.242 port 36602 ssh2
1 31 22:56:46 hhoosstt sshd[12916]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.213.109.242  user=root
1 31 22:56:46 hhoosstt sshd[12916]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
1 31 22:56:46 hhoosstt sshd[12757]: Connection closed by 58.213.109.242 port 36602 [preauth]
1 31 22:56:48 hhoosstt sshd[12916]: Failed password for root from 58.213.109.242 port 50786 ssh2
1 31 22:56:49 hhoosstt sshd[12790]: Connection closed by 58.213.109.242 port 43558 [preauth]
1 31 22:56:51 hhoosstt sshd[12916]: Connection closed by 58.213.109.242 port 50786 [preauth]
1 31 22:56:58 hhoosstt sshd[13162]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.213.109.242  user=root
1 31 22:56:58 hhoosstt sshd[13162]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
1 31 22:56:59 hhoosstt sshd[13162]: Failed password for root from 58.213.109.242 port 43830 ssh2
1 31 22:57:00 hhoosstt sshd[13162]: Connection closed by 58.213.109.242 port 43830 [preauth]
1 31 22:57:03 hhoosstt sshd[12630]: Invalid user sonar from 58.213.109.242 port 57606
1 31 22:57:03 hhoosstt sshd[12630]: input_userauth_request: invalid user sonar [preauth]
1 31 22:57:03 hhoosstt sshd[12630]: pam_unix(sshd:auth): check pass; user unknown
1 31 22:57:03 hhoosstt sshd[12630]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.213.109.242
1 31 22:57:06 hhoosstt sshd[12630]: Failed password for invalid user sonar from 58.213.109.242 port 57606 ssh2
1 31 22:57:06 hhoosstt sshd[12630]: Connection closed by 58.213.109.242 port 57606 [preauth]
1 31 22:57:08 hhoosstt sshd[13294]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.213.109.242  user=root
1 31 22:57:08 hhoosstt sshd[13294]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
1 31 22:57:10 hhoosstt sshd[13294]: Failed password for root from 58.213.109.242 port 58014 ssh2
1 31 22:57:10 hhoosstt sshd[13361]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.213.109.242  user=root
1 31 22:57:10 hhoosstt sshd[13361]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
1 31 22:57:12 hhoosstt sshd[13361]: Failed password for root from 58.213.109.242 port 36874 ssh2
1 31 22:57:12 hhoosstt sshd[13361]: Connection closed by 58.213.109.242 port 36874 [preauth]
1 31 22:57:14 hhoosstt sshd[12752]: Invalid user pi from 58.213.109.242 port 57742
1 31 22:57:14 hhoosstt sshd[12752]: input_userauth_request: invalid user pi [preauth]
1 31 22:57:14 hhoosstt sshd[12752]: pam_unix(sshd:auth): check pass; user unknown
1 31 22:57:14 hhoosstt sshd[12752]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.213.109.242
1 31 22:57:15 hhoosstt sshd[13426]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.213.109.242  user=root
1 31 22:57:15 hhoosstt sshd[13426]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
1 31 22:57:17 hhoosstt sshd[12752]: Failed password for invalid user pi from 58.213.109.242 port 57742 ssh2
1 31 22:57:17 hhoosstt sshd[13426]: Failed password for root from 58.213.109.242 port 43966 ssh2
1 31 22:57:17 hhoosstt sshd[13426]: Connection closed by 58.213.109.242 port 43966 [preauth]
1 31 22:57:20 hhoosstt sshd[13071]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.213.109.242  user=root
1 31 22:57:20 hhoosstt sshd[13071]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
1 31 22:57:21 hhoosstt sshd[13514]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.213.109.242  user=root
1 31 22:57:21 hhoosstt sshd[13514]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
1 31 22:57:22 hhoosstt sshd[13071]: Failed password for root from 58.213.109.242 port 36738 ssh2
1 31 22:57:22 hhoosstt sshd[13071]: Connection closed by 58.213.109.242 port 36738 [preauth]
1 31 22:57:23 hhoosstt sshd[13514]: Failed password for root from 58.213.109.242 port 51058 ssh2
1 31 22:57:24 hhoosstt sshd[13514]: Connection closed by 58.213.109.242 port 51058 [preauth]
1 31 22:57:27 hhoosstt sshd[13622]: Address 107.173.251.36 maps to selinozoglu.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!
1 31 22:57:27 hhoosstt sshd[13622]: Invalid user oracle from 107.173.251.36 port 41162
1 31 22:57:27 hhoosstt sshd[13622]: input_userauth_request: invalid user oracle [preauth]
1 31 22:57:27 hhoosstt sshd[13622]: pam_unix(sshd:auth): check pass; user unknown
1 31 22:57:27 hhoosstt sshd[13622]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.173.251.36
1 31 22:57:27 hhoosstt sshd[13591]: Invalid user test from 58.213.109.242 port 58150
1 31 22:57:27 hhoosstt sshd[13591]: input_userauth_request: invalid user test [preauth]
1 31 22:57:28 hhoosstt sshd[13591]: pam_unix(sshd:auth): check pass; user unknown
1 31 22:57:28 hhoosstt sshd[13591]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.213.109.242
1 31 22:57:29 hhoosstt sshd[13622]: Failed password for invalid user oracle from 107.173.251.36 port 41162 ssh2
1 31 22:57:30 hhoosstt sshd[13622]: Received disconnect from 107.173.251.36 port 41162:11: Bye Bye [preauth]
1 31 22:57:30 hhoosstt sshd[13622]: Disconnected from 107.173.251.36 port 41162 [preauth]
1 31 22:57:30 hhoosstt sshd[13661]: Invalid user ubnt from 58.213.109.242 port 37010
1 31 22:57:30 hhoosstt sshd[13661]: input_userauth_request: invalid user ubnt [preauth]
1 31 22:57:30 hhoosstt sshd[13661]: pam_unix(sshd:auth): check pass; user unknown
1 31 22:57:30 hhoosstt sshd[13661]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.213.109.242
1 31 22:57:31 hhoosstt sshd[13591]: Failed password for invalid user test from 58.213.109.242 port 58150 ssh2
1 31 22:57:31 hhoosstt sshd[13661]: Failed password for invalid user ubnt from 58.213.109.242 port 37010 ssh2
1 31 22:57:32 hhoosstt sshd[13591]: Connection closed by 58.213.109.242 port 58150 [preauth]
1 31 22:57:32 hhoosstt sshd[13661]: Connection closed by 58.213.109.242 port 37010 [preauth]
1 31 22:57:37 hhoosstt sshd[13801]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.213.109.242  user=root
1 31 22:57:37 hhoosstt sshd[13801]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
1 31 22:57:38 hhoosstt sshd[13754]: Invalid user user from 58.213.109.242 port 44102
1 31 22:57:38 hhoosstt sshd[13754]: input_userauth_request: invalid user user [preauth]
1 31 22:57:38 hhoosstt sshd[13754]: pam_unix(sshd:auth): check pass; user unknown
1 31 22:57:38 hhoosstt sshd[13754]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.213.109.242
1 31 22:57:40 hhoosstt sshd[13801]: Failed password for root from 58.213.109.242 port 51194 ssh2
1 31 22:57:40 hhoosstt sshd[13801]: Connection closed by 58.213.109.242 port 51194 [preauth]
1 31 22:57:41 hhoosstt sshd[13754]: Failed password for invalid user user from 58.213.109.242 port 44102 ssh2
1 31 22:57:41 hhoosstt sshd[13754]: Connection closed by 58.213.109.242 port 44102 [preauth]
1 31 22:57:41 hhoosstt sshd[13294]: Connection closed by 58.213.109.242 port 58014 [preauth]
1 31 22:57:45 hhoosstt systemd[1]: Started rapid spam filtering system.
-- Subject: Unit rspamd.service has finished start-up
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit rspamd.service has finished starting up.
-- 
-- The start-up result is done.
1 31 22:57:45 hhoosstt rspamd[13944]: /usr/bin/rspamd: error while loading shared libraries: libsodium.so.23: cannot open shared object file: No such file or director
1 31 22:57:45 hhoosstt systemd[1]: rspamd.service: main process exited, code=exited, status=127/n/a
1 31 22:57:45 hhoosstt systemd[1]: Unit rspamd.service entered failed state.
1 31 22:57:45 hhoosstt systemd[1]: rspamd.service failed.
1 31 22:57:45 hhoosstt systemd[1]: rspamd.service holdoff time over, scheduling restart.
1 31 22:57:45 hhoosstt systemd[1]: Stopped rapid spam filtering system.
-- Subject: Unit rspamd.service has finished shutting down
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit rspamd.service has finished shutting down.
1 31 22:57:45 hhoosstt systemd[1]: Started rapid spam filtering system.
-- Subject: Unit rspamd.service has finished start-up
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit rspamd.service has finished starting up.
-- 
-- The start-up result is done.
1 31 22:57:45 hhoosstt rspamd[13947]: /usr/bin/rspamd: error while loading shared libraries: libsodium.so.23: cannot open shared object file: No such file or director
1 31 22:57:45 hhoosstt systemd[1]: rspamd.service: main process exited, code=exited, status=127/n/a
1 31 22:57:45 hhoosstt systemd[1]: Unit rspamd.service entered failed state.
1 31 22:57:45 hhoosstt systemd[1]: rspamd.service failed.
1 31 22:57:45 hhoosstt systemd[1]: rspamd.service holdoff time over, scheduling restart.
1 31 22:57:45 hhoosstt systemd[1]: Stopped rapid spam filtering system.
-- Subject: Unit rspamd.service has finished shutting down
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit rspamd.service has finished shutting down.
1 31 22:57:45 hhoosstt systemd[1]: Started rapid spam filtering system.
-- Subject: Unit rspamd.service has finished start-up
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit rspamd.service has finished starting up.
-- 
-- The start-up result is done.
1 31 22:57:45 hhoosstt rspamd[13949]: /usr/bin/rspamd: error while loading shared libraries: libsodium.so.23: cannot open shared object file: No such file or director
1 31 22:57:45 hhoosstt systemd[1]: rspamd.service: main process exited, code=exited, status=127/n/a
1 31 22:57:45 hhoosstt systemd[1]: Unit rspamd.service entered failed state.
1 31 22:57:45 hhoosstt systemd[1]: rspamd.service failed.
1 31 22:57:46 hhoosstt systemd[1]: rspamd.service holdoff time over, scheduling restart.
1 31 22:57:46 hhoosstt systemd[1]: Stopped rapid spam filtering system.
-- Subject: Unit rspamd.service has finished shutting down
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit rspamd.service has finished shutting down.
1 31 22:57:46 hhoosstt systemd[1]: Started rapid spam filtering system.
-- Subject: Unit rspamd.service has finished start-up
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit rspamd.service has finished starting up.
-- 
-- The start-up result is done.
1 31 22:57:46 hhoosstt systemd[1]: rspamd.service: main process exited, code=exited, status=127/n/a
1 31 22:57:46 hhoosstt rspamd[13975]: /usr/bin/rspamd: error while loading shared libraries: libsodium.so.23: cannot open shared object file: No such file or director
1 31 22:57:46 hhoosstt systemd[1]: Unit rspamd.service entered failed state.
1 31 22:57:46 hhoosstt systemd[1]: rspamd.service failed.
1 31 22:57:46 hhoosstt sshd[13866]: Invalid user test from 58.213.109.242 port 58286
1 31 22:57:46 hhoosstt sshd[13866]: input_userauth_request: invalid user test [preauth]
1 31 22:57:46 hhoosstt sshd[13866]: pam_unix(sshd:auth): check pass; user unknown
1 31 22:57:46 hhoosstt sshd[13866]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.213.109.242
1 31 22:57:46 hhoosstt systemd[1]: rspamd.service holdoff time over, scheduling restart.
1 31 22:57:46 hhoosstt systemd[1]: Stopped rapid spam filtering system.
-- Subject: Unit rspamd.service has finished shutting down
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit rspamd.service has finished shutting down.
1 31 22:57:46 hhoosstt systemd[1]: Started rapid spam filtering system.
-- Subject: Unit rspamd.service has finished start-up
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit rspamd.service has finished starting up.
-- 
-- The start-up result is done.
1 31 22:57:46 hhoosstt rspamd[13978]: /usr/bin/rspamd: error while loading shared libraries: libsodium.so.23: cannot open shared object file: No such file or director
1 31 22:57:46 hhoosstt systemd[1]: rspamd.service: main process exited, code=exited, status=127/n/a
1 31 22:57:46 hhoosstt systemd[1]: Unit rspamd.service entered failed state.
1 31 22:57:46 hhoosstt systemd[1]: rspamd.service failed.
1 31 22:57:46 hhoosstt systemd[1]: rspamd.service holdoff time over, scheduling restart.
1 31 22:57:46 hhoosstt systemd[1]: Stopped rapid spam filtering system.
-- Subject: Unit rspamd.service has finished shutting down
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit rspamd.service has finished shutting down.
1 31 22:57:46 hhoosstt systemd[1]: start request repeated too quickly for rspamd.service
1 31 22:57:46 hhoosstt systemd[1]: Failed to start rapid spam filtering system.
-- Subject: Unit rspamd.service has failed
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit rspamd.service has failed.
-- 
-- The result is failed.
1 31 22:57:46 hhoosstt systemd[1]: Unit rspamd.service entered failed state.
1 31 22:57:46 hhoosstt systemd[1]: rspamd.service failed.
1 31 22:57:46 hhoosstt sshd[13974]: Invalid user test from 58.213.109.242 port 37146
1 31 22:57:46 hhoosstt sshd[13974]: input_userauth_request: invalid user test [preauth]
1 31 22:57:46 hhoosstt sshd[13974]: pam_unix(sshd:auth): check pass; user unknown
1 31 22:57:46 hhoosstt sshd[13974]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.213.109.242
1 31 22:57:48 hhoosstt sshd[13866]: Failed password for invalid user test from 58.213.109.242 port 58286 ssh2
1 31 22:57:48 hhoosstt sshd[13866]: Connection closed by 58.213.109.242 port 58286 [preauth]
1 31 22:57:48 hhoosstt sshd[13974]: Failed password for invalid user test from 58.213.109.242 port 37146 ssh2
1 31 22:57:49 hhoosstt sshd[13974]: Connection closed by 58.213.109.242 port 37146 [preauth]
1 31 22:57:52 hhoosstt sshd[14045]: Invalid user git from 58.213.109.242 port 44238
1 31 22:57:52 hhoosstt sshd[14045]: input_userauth_request: invalid user git [preauth]
1 31 22:57:52 hhoosstt sshd[14045]: pam_unix(sshd:auth): check pass; user unknown
1 31 22:57:52 hhoosstt sshd[14045]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.213.109.242
1 31 22:57:52 hhoosstt sshd[12752]: Connection closed by 58.213.109.242 port 57742 [preauth]
1 31 22:57:54 hhoosstt sshd[14045]: Failed password for invalid user git from 58.213.109.242 port 44238 ssh2
1 31 22:57:54 hhoosstt sshd[14045]: Connection closed by 58.213.109.242 port 44238 [preauth]
1 31 22:57:56 hhoosstt polkitd[613]: Registered Authentication Agent for unix-process:14149:78089529 (system bus name :1.5791 [/usr/bin/pkttyagent --notify-fd 5 --fal
1 31 22:57:56 hhoosstt polkitd[613]: Unregistered Authentication Agent for unix-process:14149:78089529 (system bus name :1.5791, object path /org/freedesktop/PolicyKi
1 31 22:57:58 hhoosstt sshd[14189]: Invalid user git from 58.213.109.242 port 51330
1 31 22:57:58 hhoosstt sshd[14189]: input_userauth_request: invalid user git [preauth]
1 31 22:57:59 hhoosstt sshd[14189]: pam_unix(sshd:auth): check pass; user unknown
1 31 22:57:59 hhoosstt sshd[14189]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.213.109.242
1 31 22:58:00 hhoosstt polkitd[613]: Registered Authentication Agent for unix-process:14218:78089901 (system bus name :1.5792 [/usr/bin/pkttyagent --notify-fd 5 --fal
1 31 22:58:00 hhoosstt systemd[1]: Started rapid spam filtering system.
-- Subject: Unit rspamd.service has finished start-up
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit rspamd.service has finished starting up.
-- 
-- The start-up result is done.
1 31 22:58:00 hhoosstt polkitd[613]: Unregistered Authentication Agent for unix-process:14218:78089901 (system bus name :1.5792, object path /org/freedesktop/PolicyKi
1 31 22:58:00 hhoosstt rspamd[14224]: /usr/bin/rspamd: error while loading shared libraries: libsodium.so.23: cannot open shared object file: No such file or director
1 31 22:58:00 hhoosstt systemd[1]: rspamd.service: main process exited, code=exited, status=127/n/a
1 31 22:58:00 hhoosstt systemd[1]: Unit rspamd.service entered failed state.
1 31 22:58:00 hhoosstt systemd[1]: rspamd.service failed.
1 31 22:58:00 hhoosstt systemd[1]: rspamd.service holdoff time over, scheduling restart.
1 31 22:58:00 hhoosstt systemd[1]: Stopped rapid spam filtering system.
-- Subject: Unit rspamd.service has finished shutting down
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit rspamd.service has finished shutting down.
1 31 22:58:00 hhoosstt systemd[1]: Started rapid spam filtering system.
-- Subject: Unit rspamd.service has finished start-up
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit rspamd.service has finished starting up.
-- 
-- The start-up result is done.
1 31 22:58:00 hhoosstt rspamd[14226]: /usr/bin/rspamd: error while loading shared libraries: libsodium.so.23: cannot open shared object file: No such file or director
1 31 22:58:00 hhoosstt systemd[1]: rspamd.service: main process exited, code=exited, status=127/n/a
1 31 22:58:00 hhoosstt systemd[1]: Unit rspamd.service entered failed state.
1 31 22:58:00 hhoosstt systemd[1]: rspamd.service failed.
1 31 22:58:00 hhoosstt systemd[1]: rspamd.service holdoff time over, scheduling restart.
1 31 22:58:00 hhoosstt systemd[1]: Stopped rapid spam filtering system.
-- Subject: Unit rspamd.service has finished shutting down
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit rspamd.service has finished shutting down.
1 31 22:58:00 hhoosstt systemd[1]: Started rapid spam filtering system.
-- Subject: Unit rspamd.service has finished start-up
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit rspamd.service has finished starting up.
-- 
-- The start-up result is done.
1 31 22:58:00 hhoosstt rspamd[14237]: /usr/bin/rspamd: error while loading shared libraries: libsodium.so.23: cannot open shared object file: No such file or director
1 31 22:58:00 hhoosstt systemd[1]: rspamd.service: main process exited, code=exited, status=127/n/a
1 31 22:58:00 hhoosstt systemd[1]: Unit rspamd.service entered failed state.
1 31 22:58:00 hhoosstt systemd[1]: rspamd.service failed.
1 31 22:58:00 hhoosstt sshd[14189]: Failed password for invalid user git from 58.213.109.242 port 51330 ssh2
1 31 22:58:00 hhoosstt systemd[1]: rspamd.service holdoff time over, scheduling restart.
1 31 22:58:00 hhoosstt systemd[1]: Stopped rapid spam filtering system.
-- Subject: Unit rspamd.service has finished shutting down
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit rspamd.service has finished shutting down.
1 31 22:58:00 hhoosstt systemd[1]: Started rapid spam filtering system.
-- Subject: Unit rspamd.service has finished start-up
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit rspamd.service has finished starting up.
-- 
-- The start-up result is done.
1 31 22:58:00 hhoosstt rspamd[14242]: /usr/bin/rspamd: error while loading shared libraries: libsodium.so.23: cannot open shared object file: No such file or director
1 31 22:58:00 hhoosstt systemd[1]: rspamd.service: main process exited, code=exited, status=127/n/a
1 31 22:58:00 hhoosstt systemd[1]: Unit rspamd.service entered failed state.
1 31 22:58:00 hhoosstt systemd[1]: rspamd.service failed.
1 31 22:58:01 hhoosstt sshd[14208]: Invalid user guest from 58.213.109.242 port 58422
1 31 22:58:01 hhoosstt sshd[14208]: input_userauth_request: invalid user guest [preauth]
1 31 22:58:01 hhoosstt systemd[1]: rspamd.service holdoff time over, scheduling restart.
1 31 22:58:01 hhoosstt systemd[1]: Stopped rapid spam filtering system.
-- Subject: Unit rspamd.service has finished shutting down
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit rspamd.service has finished shutting down.
1 31 22:58:01 hhoosstt systemd[1]: Started rapid spam filtering system.
-- Subject: Unit rspamd.service has finished start-up
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit rspamd.service has finished starting up.
-- 
-- The start-up result is done.
1 31 22:58:01 hhoosstt rspamd[14249]: /usr/bin/rspamd: error while loading shared libraries: libsodium.so.23: cannot open shared object file: No such file or director
1 31 22:58:01 hhoosstt systemd[1]: rspamd.service: main process exited, code=exited, status=127/n/a
1 31 22:58:01 hhoosstt systemd[1]: Unit rspamd.service entered failed state.
1 31 22:58:01 hhoosstt systemd[1]: rspamd.service failed.
1 31 22:58:01 hhoosstt systemd[1]: rspamd.service holdoff time over, scheduling restart.
1 31 22:58:01 hhoosstt systemd[1]: Stopped rapid spam filtering system.
-- Subject: Unit rspamd.service has finished shutting down
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit rspamd.service has finished shutting down.
1 31 22:58:01 hhoosstt systemd[1]: start request repeated too quickly for rspamd.service
1 31 22:58:01 hhoosstt systemd[1]: Failed to start rapid spam filtering system.
-- Subject: Unit rspamd.service has failed
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit rspamd.service has failed.
-- 
-- The result is failed.
1 31 22:58:01 hhoosstt systemd[1]: Unit rspamd.service entered failed state.
1 31 22:58:01 hhoosstt systemd[1]: rspamd.service failed.
1 31 22:58:02 hhoosstt sshd[14208]: pam_unix(sshd:auth): check pass; user unknown
1 31 22:58:02 hhoosstt sshd[14208]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.213.109.242
1 31 22:58:02 hhoosstt sshd[14189]: Connection closed by 58.213.109.242 port 51330 [preauth]
1 31 22:58:04 hhoosstt sshd[14208]: Failed password for invalid user guest from 58.213.109.242 port 58422 ssh2
1 31 22:58:04 hhoosstt sshd[14208]: Connection closed by 58.213.109.242 port 58422 [preauth]
1 31 22:58:07 hhoosstt sshd[14318]: Invalid user user from 165.22.107.2 port 47000
1 31 22:58:07 hhoosstt sshd[14318]: input_userauth_request: invalid user user [preauth]
1 31 22:58:07 hhoosstt sshd[14318]: pam_unix(sshd:auth): check pass; user unknown
1 31 22:58:07 hhoosstt sshd[14318]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.107.2
1 31 22:58:08 hhoosstt sshd[14318]: Failed password for invalid user user from 165.22.107.2 port 47000 ssh2
1 31 22:58:09 hhoosstt sshd[14318]: Received disconnect from 165.22.107.2 port 47000:11: Bye Bye [preauth]
1 31 22:58:09 hhoosstt sshd[14318]: Disconnected from 165.22.107.2 port 47000 [preauth]
1 31 22:58:17 hhoosstt systemd[1]: Started rapid spam filtering system.
-- Subject: Unit rspamd.service has finished start-up
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit rspamd.service has finished starting up.
-- 
-- The start-up result is done.
1 31 22:58:17 hhoosstt systemd[1]: Stopping Postfix Mail Transport Agent...
-- Subject: Unit postfix.service has begun shutting down
-- Defined-By: systemd
-- Logs begin at  2023-01-22 22:03:02 CST, end at  2023-01-31 23:00:01 CST. --
1 31 22:37:50 hhoosstt sshd[4803]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.173.251.36
1 31 22:37:52 hhoosstt sshd[4805]: Failed password for invalid user mysql from 137.184.234.81 port 44546 ssh2
1 31 22:37:52 hhoosstt sshd[4805]: Received disconnect from 137.184.234.81 port 44546:11: Bye Bye [preauth]
1 31 22:37:52 hhoosstt sshd[4805]: Disconnected from 137.184.234.81 port 44546 [preauth]
1 31 22:37:52 hhoosstt sshd[4803]: Failed password for invalid user git from 107.173.251.36 port 49498 ssh2
1 31 22:37:52 hhoosstt sshd[4803]: Received disconnect from 107.173.251.36 port 49498:11: Bye Bye [preauth]
1 31 22:37:52 hhoosstt sshd[4803]: Disconnected from 107.173.251.36 port 49498 [preauth]
1 31 22:38:10 hhoosstt sshd[4854]: Invalid user appltest from 152.67.254.42 port 58910
1 31 22:38:10 hhoosstt sshd[4854]: input_userauth_request: invalid user appltest [preauth]
1 31 22:38:10 hhoosstt sshd[4854]: pam_unix(sshd:auth): check pass; user unknown
1 31 22:38:10 hhoosstt sshd[4854]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.67.254.42
1 31 22:38:12 hhoosstt sshd[4854]: Failed password for invalid user appltest from 152.67.254.42 port 58910 ssh2
1 31 22:38:12 hhoosstt sshd[4854]: Received disconnect from 152.67.254.42 port 58910:11: Bye Bye [preauth]
1 31 22:38:12 hhoosstt sshd[4854]: Disconnected from 152.67.254.42 port 58910 [preauth]
1 31 22:38:12 hhoosstt sshd[4858]: Invalid user upload from 1.214.245.27 port 47266
1 31 22:38:12 hhoosstt sshd[4858]: input_userauth_request: invalid user upload [preauth]
1 31 22:38:12 hhoosstt sshd[4858]: pam_unix(sshd:auth): check pass; user unknown
1 31 22:38:12 hhoosstt sshd[4858]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.214.245.27
1 31 22:38:15 hhoosstt sshd[4858]: Failed password for invalid user upload from 1.214.245.27 port 47266 ssh2
1 31 22:38:15 hhoosstt sshd[4858]: Received disconnect from 1.214.245.27 port 47266:11: Bye Bye [preauth]
1 31 22:38:15 hhoosstt sshd[4858]: Disconnected from 1.214.245.27 port 47266 [preauth]
1 31 22:38:45 hhoosstt sshd[4918]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.173.49  user=root
1 31 22:38:45 hhoosstt sshd[4918]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
1 31 22:38:47 hhoosstt sshd[4918]: Failed password for root from 61.177.173.49 port 29759 ssh2
1 31 22:38:47 hhoosstt sshd[4918]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
1 31 22:38:49 hhoosstt sshd[4918]: Failed password for root from 61.177.173.49 port 29759 ssh2
1 31 22:38:49 hhoosstt sshd[4918]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
1 31 22:38:51 hhoosstt sshd[4918]: Failed password for root from 61.177.173.49 port 29759 ssh2
1 31 22:38:51 hhoosstt sshd[4918]: Received disconnect from 61.177.173.49 port 29759:11:  [preauth]
1 31 22:38:51 hhoosstt sshd[4918]: Disconnected from 61.177.173.49 port 29759 [preauth]
1 31 22:38:51 hhoosstt sshd[4918]: PAM 2 more authentication failures; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.173.49  user=root
1 31 22:38:54 hhoosstt sshd[4940]: Invalid user mysql from 218.248.16.73 port 36584
1 31 22:38:54 hhoosstt sshd[4940]: input_userauth_request: invalid user mysql [preauth]
1 31 22:38:54 hhoosstt sshd[4940]: pam_unix(sshd:auth): check pass; user unknown
1 31 22:38:54 hhoosstt sshd[4940]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=mail.jayapriya.com
1 31 22:38:57 hhoosstt sshd[4940]: Failed password for invalid user mysql from 218.248.16.73 port 36584 ssh2
1 31 22:38:57 hhoosstt sshd[4940]: Received disconnect from 218.248.16.73 port 36584:11: Bye Bye [preauth]
1 31 22:38:57 hhoosstt sshd[4940]: Disconnected from 218.248.16.73 port 36584 [preauth]
1 31 22:38:57 hhoosstt sshd[4938]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.173.49  user=root
1 31 22:38:57 hhoosstt sshd[4938]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
1 31 22:38:58 hhoosstt sshd[4938]: Failed password for root from 61.177.173.49 port 13336 ssh2
1 31 22:38:58 hhoosstt sshd[4938]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
1 31 22:39:00 hhoosstt sshd[4938]: Failed password for root from 61.177.173.49 port 13336 ssh2
1 31 22:39:01 hhoosstt sshd[4938]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
1 31 22:39:02 hhoosstt sshd[4938]: Failed password for root from 61.177.173.49 port 13336 ssh2
1 31 22:39:02 hhoosstt sshd[4938]: Received disconnect from 61.177.173.49 port 13336:11:  [preauth]
1 31 22:39:02 hhoosstt sshd[4938]: Disconnected from 61.177.173.49 port 13336 [preauth]
1 31 22:39:02 hhoosstt sshd[4938]: PAM 2 more authentication failures; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.173.49  user=root
1 31 22:39:03 hhoosstt sshd[4962]: Invalid user ftpuser from 165.22.107.2 port 45456
1 31 22:39:03 hhoosstt sshd[4962]: input_userauth_request: invalid user ftpuser [preauth]
1 31 22:39:03 hhoosstt sshd[4962]: pam_unix(sshd:auth): check pass; user unknown
1 31 22:39:03 hhoosstt sshd[4962]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.107.2
1 31 22:39:05 hhoosstt sshd[4962]: Failed password for invalid user ftpuser from 165.22.107.2 port 45456 ssh2
1 31 22:39:05 hhoosstt sshd[4962]: Received disconnect from 165.22.107.2 port 45456:11: Bye Bye [preauth]
1 31 22:39:05 hhoosstt sshd[4962]: Disconnected from 165.22.107.2 port 45456 [preauth]
1 31 22:39:45 hhoosstt sshd[5041]: Invalid user teamspeak from 137.184.234.81 port 36988
1 31 22:39:45 hhoosstt sshd[5041]: input_userauth_request: invalid user teamspeak [preauth]
1 31 22:39:45 hhoosstt sshd[5041]: pam_unix(sshd:auth): check pass; user unknown
1 31 22:39:45 hhoosstt sshd[5041]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.184.234.81
1 31 22:39:47 hhoosstt sshd[5041]: Failed password for invalid user teamspeak from 137.184.234.81 port 36988 ssh2
1 31 22:39:47 hhoosstt sshd[5041]: Received disconnect from 137.184.234.81 port 36988:11: Bye Bye [preauth]
1 31 22:39:47 hhoosstt sshd[5041]: Disconnected from 137.184.234.81 port 36988 [preauth]
1 31 22:40:00 hhoosstt sshd[5068]: Address 107.173.251.36 maps to selinozoglu.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!
1 31 22:40:00 hhoosstt sshd[5068]: Invalid user bot2 from 107.173.251.36 port 58044
1 31 22:40:00 hhoosstt sshd[5068]: input_userauth_request: invalid user bot2 [preauth]
1 31 22:40:00 hhoosstt sshd[5068]: pam_unix(sshd:auth): check pass; user unknown
1 31 22:40:00 hhoosstt sshd[5068]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.173.251.36
1 31 22:40:01 hhoosstt systemd[1]: Started Session 2844 of user root.
-- Subject: Unit session-2844.scope has finished start-up
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit session-2844.scope has finished starting up.
-- 
-- The start-up result is done.
1 31 22:40:01 hhoosstt CROND[5073]: (root) CMD (flock -xn "/var/log/oneav/cron.lock" -c '/opt/threatbook/OneAV/oneav/script/install/oneav_service_monitor.sh')
1 31 22:40:03 hhoosstt sshd[5068]: Failed password for invalid user bot2 from 107.173.251.36 port 58044 ssh2
1 31 22:40:03 hhoosstt sshd[5113]: Invalid user alexis from 1.214.245.27 port 54078
1 31 22:40:03 hhoosstt sshd[5113]: input_userauth_request: invalid user alexis [preauth]
1 31 22:40:03 hhoosstt sshd[5113]: pam_unix(sshd:auth): check pass; user unknown
1 31 22:40:03 hhoosstt sshd[5113]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.214.245.27
1 31 22:40:03 hhoosstt sshd[5068]: Received disconnect from 107.173.251.36 port 58044:11: Bye Bye [preauth]
1 31 22:40:03 hhoosstt sshd[5068]: Disconnected from 107.173.251.36 port 58044 [preauth]
1 31 22:40:04 hhoosstt sshd[5113]: Failed password for invalid user alexis from 1.214.245.27 port 54078 ssh2
1 31 22:40:04 hhoosstt sshd[5113]: Received disconnect from 1.214.245.27 port 54078:11: Bye Bye [preauth]
1 31 22:40:04 hhoosstt sshd[5113]: Disconnected from 1.214.245.27 port 54078 [preauth]
1 31 22:40:54 hhoosstt sshd[5179]: Invalid user admin from 152.67.254.42 port 53576
1 31 22:40:54 hhoosstt sshd[5179]: input_userauth_request: invalid user admin [preauth]
1 31 22:40:54 hhoosstt sshd[5179]: pam_unix(sshd:auth): check pass; user unknown
1 31 22:40:54 hhoosstt sshd[5179]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.67.254.42
1 31 22:40:56 hhoosstt sshd[5179]: Failed password for invalid user admin from 152.67.254.42 port 53576 ssh2
1 31 22:40:56 hhoosstt sshd[5179]: Received disconnect from 152.67.254.42 port 53576:11: Bye Bye [preauth]
1 31 22:40:56 hhoosstt sshd[5179]: Disconnected from 152.67.254.42 port 53576 [preauth]
1 31 22:41:09 hhoosstt sshd[5203]: Invalid user demo from 218.248.16.73 port 35136
1 31 22:41:09 hhoosstt sshd[5203]: input_userauth_request: invalid user demo [preauth]
1 31 22:41:09 hhoosstt sshd[5203]: pam_unix(sshd:auth): check pass; user unknown
1 31 22:41:09 hhoosstt sshd[5203]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=mail.jayapriya.com
1 31 22:41:11 hhoosstt sshd[5203]: Failed password for invalid user demo from 218.248.16.73 port 35136 ssh2
1 31 22:41:11 hhoosstt sshd[5203]: Received disconnect from 218.248.16.73 port 35136:11: Bye Bye [preauth]
1 31 22:41:11 hhoosstt sshd[5203]: Disconnected from 218.248.16.73 port 35136 [preauth]
1 31 22:41:26 hhoosstt sshd[5219]: Invalid user oracle from 165.22.107.2 port 34972
1 31 22:41:26 hhoosstt sshd[5219]: input_userauth_request: invalid user oracle [preauth]
1 31 22:41:26 hhoosstt sshd[5219]: pam_unix(sshd:auth): check pass; user unknown
1 31 22:41:26 hhoosstt sshd[5219]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.107.2
1 31 22:41:27 hhoosstt sshd[5219]: Failed password for invalid user oracle from 165.22.107.2 port 34972 ssh2
1 31 22:41:27 hhoosstt sshd[5219]: Received disconnect from 165.22.107.2 port 34972:11: Bye Bye [preauth]
1 31 22:41:27 hhoosstt sshd[5219]: Disconnected from 165.22.107.2 port 34972 [preauth]
1 31 22:41:40 hhoosstt sshd[5246]: Invalid user whmcs from 137.184.234.81 port 44836
1 31 22:41:40 hhoosstt sshd[5246]: input_userauth_request: invalid user whmcs [preauth]
1 31 22:41:40 hhoosstt sshd[5246]: pam_unix(sshd:auth): check pass; user unknown
1 31 22:41:40 hhoosstt sshd[5246]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.184.234.81
1 31 22:41:42 hhoosstt sshd[5246]: Failed password for invalid user whmcs from 137.184.234.81 port 44836 ssh2
1 31 22:41:42 hhoosstt sshd[5246]: Received disconnect from 137.184.234.81 port 44836:11: Bye Bye [preauth]
1 31 22:41:42 hhoosstt sshd[5246]: Disconnected from 137.184.234.81 port 44836 [preauth]
1 31 22:41:53 hhoosstt sshd[5260]: Invalid user hadoop from 1.214.245.27 port 60890
1 31 22:41:53 hhoosstt sshd[5260]: input_userauth_request: invalid user hadoop [preauth]
1 31 22:41:53 hhoosstt sshd[5260]: pam_unix(sshd:auth): check pass; user unknown
1 31 22:41:53 hhoosstt sshd[5260]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.214.245.27
1 31 22:41:55 hhoosstt sshd[5260]: Failed password for invalid user hadoop from 1.214.245.27 port 60890 ssh2
1 31 22:41:55 hhoosstt sshd[5260]: Received disconnect from 1.214.245.27 port 60890:11: Bye Bye [preauth]
1 31 22:41:55 hhoosstt sshd[5260]: Disconnected from 1.214.245.27 port 60890 [preauth]
1 31 22:42:09 hhoosstt sshd[5280]: Address 107.173.251.36 maps to selinozoglu.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!
1 31 22:42:09 hhoosstt sshd[5280]: Invalid user ubuntu from 107.173.251.36 port 38312
1 31 22:42:09 hhoosstt sshd[5280]: input_userauth_request: invalid user ubuntu [preauth]
1 31 22:42:09 hhoosstt sshd[5280]: pam_unix(sshd:auth): check pass; user unknown
1 31 22:42:09 hhoosstt sshd[5280]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.173.251.36
1 31 22:42:11 hhoosstt sshd[5280]: Failed password for invalid user ubuntu from 107.173.251.36 port 38312 ssh2
1 31 22:42:11 hhoosstt sshd[5280]: Received disconnect from 107.173.251.36 port 38312:11: Bye Bye [preauth]
1 31 22:42:11 hhoosstt sshd[5280]: Disconnected from 107.173.251.36 port 38312 [preauth]
1 31 22:42:18 hhoosstt sshd[5290]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.172.143  user=root
1 31 22:42:18 hhoosstt sshd[5290]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
1 31 22:42:20 hhoosstt sshd[5290]: Failed password for root from 61.177.172.143 port 56419 ssh2
1 31 22:42:20 hhoosstt sshd[5290]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
1 31 22:42:22 hhoosstt sshd[5290]: Failed password for root from 61.177.172.143 port 56419 ssh2
1 31 22:42:22 hhoosstt sshd[5290]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
1 31 22:42:24 hhoosstt sshd[5290]: Failed password for root from 61.177.172.143 port 56419 ssh2
1 31 22:42:24 hhoosstt sshd[5290]: Received disconnect from 61.177.172.143 port 56419:11:  [preauth]
1 31 22:42:24 hhoosstt sshd[5290]: Disconnected from 61.177.172.143 port 56419 [preauth]
1 31 22:42:24 hhoosstt sshd[5290]: PAM 2 more authentication failures; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.172.143  user=root
1 31 22:43:27 hhoosstt sshd[5367]: Invalid user chris from 218.248.16.73 port 33670
1 31 22:43:27 hhoosstt sshd[5367]: input_userauth_request: invalid user chris [preauth]
1 31 22:43:27 hhoosstt sshd[5367]: pam_unix(sshd:auth): check pass; user unknown
1 31 22:43:27 hhoosstt sshd[5367]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=mail.jayapriya.com
1 31 22:43:29 hhoosstt sshd[5367]: Failed password for invalid user chris from 218.248.16.73 port 33670 ssh2
1 31 22:43:29 hhoosstt sshd[5367]: Received disconnect from 218.248.16.73 port 33670:11: Bye Bye [preauth]
1 31 22:43:29 hhoosstt sshd[5367]: Disconnected from 218.248.16.73 port 33670 [preauth]
1 31 22:43:32 hhoosstt sshd[5374]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.173.37  user=root
1 31 22:43:32 hhoosstt sshd[5374]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
1 31 22:43:33 hhoosstt sshd[5374]: Failed password for root from 61.177.173.37 port 37219 ssh2
1 31 22:43:33 hhoosstt sshd[5374]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
1 31 22:43:35 hhoosstt sshd[5374]: Failed password for root from 61.177.173.37 port 37219 ssh2
1 31 22:43:35 hhoosstt sshd[5374]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
1 31 22:43:37 hhoosstt sshd[5374]: Failed password for root from 61.177.173.37 port 37219 ssh2
1 31 22:43:37 hhoosstt sshd[5374]: Received disconnect from 61.177.173.37 port 37219:11:  [preauth]
1 31 22:43:37 hhoosstt sshd[5374]: Disconnected from 61.177.173.37 port 37219 [preauth]
1 31 22:43:37 hhoosstt sshd[5374]: PAM 2 more authentication failures; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.173.37  user=root
1 31 22:43:37 hhoosstt sshd[5394]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.173.37  user=root
1 31 22:43:37 hhoosstt sshd[5394]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
1 31 22:43:40 hhoosstt sshd[5394]: Failed password for root from 61.177.173.37 port 16882 ssh2
1 31 22:43:40 hhoosstt sshd[5394]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
1 31 22:43:42 hhoosstt sshd[5394]: Failed password for root from 61.177.173.37 port 16882 ssh2
1 31 22:43:42 hhoosstt sshd[5394]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
1 31 22:43:44 hhoosstt sshd[5394]: Failed password for root from 61.177.173.37 port 16882 ssh2
1 31 22:43:44 hhoosstt sshd[5394]: Received disconnect from 61.177.173.37 port 16882:11:  [preauth]
1 31 22:43:44 hhoosstt sshd[5394]: Disconnected from 61.177.173.37 port 16882 [preauth]
1 31 22:43:44 hhoosstt sshd[5394]: PAM 2 more authentication failures; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.173.37  user=root
1 31 22:43:44 hhoosstt sshd[5404]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.173.37  user=root
1 31 22:43:44 hhoosstt sshd[5404]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
1 31 22:43:46 hhoosstt sshd[5404]: Failed password for root from 61.177.173.37 port 54512 ssh2
1 31 22:43:46 hhoosstt sshd[5404]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
1 31 22:43:48 hhoosstt sshd[5404]: Failed password for root from 61.177.173.37 port 54512 ssh2
1 31 22:43:48 hhoosstt sshd[5408]: Invalid user sinusbot from 165.22.107.2 port 41834
1 31 22:43:48 hhoosstt sshd[5408]: input_userauth_request: invalid user sinusbot [preauth]
1 31 22:43:48 hhoosstt sshd[5408]: pam_unix(sshd:auth): check pass; user unknown
1 31 22:43:48 hhoosstt sshd[5408]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.107.2
1 31 22:43:48 hhoosstt sshd[5404]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
1 31 22:43:51 hhoosstt sshd[5408]: Failed password for invalid user sinusbot from 165.22.107.2 port 41834 ssh2
1 31 22:43:51 hhoosstt sshd[5404]: Failed password for root from 61.177.173.37 port 54512 ssh2
1 31 22:43:51 hhoosstt sshd[5404]: Received disconnect from 61.177.173.37 port 54512:11:  [preauth]
1 31 22:43:51 hhoosstt sshd[5404]: Disconnected from 61.177.173.37 port 54512 [preauth]
1 31 22:43:51 hhoosstt sshd[5404]: PAM 2 more authentication failures; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.173.37  user=root
1 31 22:43:51 hhoosstt sshd[5408]: Received disconnect from 165.22.107.2 port 41834:11: Bye Bye [preauth]
1 31 22:43:51 hhoosstt sshd[5408]: Disconnected from 165.22.107.2 port 41834 [preauth]
1 31 22:43:51 hhoosstt sshd[5414]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.173.37  user=root
1 31 22:43:51 hhoosstt sshd[5414]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
1 31 22:43:54 hhoosstt sshd[5414]: Failed password for root from 61.177.173.37 port 41037 ssh2
1 31 22:43:54 hhoosstt sshd[5414]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
1 31 22:43:55 hhoosstt sshd[5414]: Failed password for root from 61.177.173.37 port 41037 ssh2
1 31 22:43:55 hhoosstt sshd[5414]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
1 31 22:43:57 hhoosstt sshd[5414]: Failed password for root from 61.177.173.37 port 41037 ssh2
1 31 22:43:58 hhoosstt sshd[5414]: Received disconnect from 61.177.173.37 port 41037:11:  [preauth]
1 31 22:43:58 hhoosstt sshd[5414]: Disconnected from 61.177.173.37 port 41037 [preauth]
1 31 22:43:58 hhoosstt sshd[5414]: PAM 2 more authentication failures; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.173.37  user=root
1 31 22:43:58 hhoosstt sshd[5421]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.173.37  user=root
1 31 22:43:58 hhoosstt sshd[5421]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
1 31 22:44:00 hhoosstt sshd[5421]: Failed password for root from 61.177.173.37 port 26484 ssh2
1 31 22:44:01 hhoosstt sshd[5421]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
1 31 22:44:03 hhoosstt sshd[5421]: Failed password for root from 61.177.173.37 port 26484 ssh2
1 31 22:44:03 hhoosstt sshd[5421]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
1 31 22:44:05 hhoosstt sshd[5421]: Failed password for root from 61.177.173.37 port 26484 ssh2
1 31 22:44:05 hhoosstt sshd[5421]: Received disconnect from 61.177.173.37 port 26484:11:  [preauth]
1 31 22:44:05 hhoosstt sshd[5421]: Disconnected from 61.177.173.37 port 26484 [preauth]
1 31 22:44:05 hhoosstt sshd[5421]: PAM 2 more authentication failures; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.173.37  user=root
1 31 22:44:06 hhoosstt sshd[5433]: Invalid user cloud from 1.214.245.27 port 39470
1 31 22:44:06 hhoosstt sshd[5433]: input_userauth_request: invalid user cloud [preauth]
1 31 22:44:06 hhoosstt sshd[5433]: pam_unix(sshd:auth): check pass; user unknown
1 31 22:44:06 hhoosstt sshd[5433]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.214.245.27
1 31 22:44:08 hhoosstt sshd[5433]: Failed password for invalid user cloud from 1.214.245.27 port 39470 ssh2
1 31 22:44:08 hhoosstt sshd[5433]: Received disconnect from 1.214.245.27 port 39470:11: Bye Bye [preauth]
1 31 22:44:08 hhoosstt sshd[5433]: Disconnected from 1.214.245.27 port 39470 [preauth]
1 31 22:44:20 hhoosstt sshd[5447]: Address 107.173.251.36 maps to selinozoglu.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!
1 31 22:44:20 hhoosstt sshd[5447]: Invalid user jenkins from 107.173.251.36 port 46786
1 31 22:44:20 hhoosstt sshd[5447]: input_userauth_request: invalid user jenkins [preauth]
1 31 22:44:20 hhoosstt sshd[5447]: pam_unix(sshd:auth): check pass; user unknown
1 31 22:44:20 hhoosstt sshd[5447]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.173.251.36
1 31 22:44:21 hhoosstt sshd[5447]: Failed password for invalid user jenkins from 107.173.251.36 port 46786 ssh2
1 31 22:44:21 hhoosstt sshd[5447]: Received disconnect from 107.173.251.36 port 46786:11: Bye Bye [preauth]
1 31 22:44:21 hhoosstt sshd[5447]: Disconnected from 107.173.251.36 port 46786 [preauth]
1 31 22:45:01 hhoosstt systemd[1]: Started Session 2845 of user root.
-- Subject: Unit session-2845.scope has finished start-up
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit session-2845.scope has finished starting up.
-- 
-- The start-up result is done.
1 31 22:45:01 hhoosstt CROND[5499]: (root) CMD (flock -xn "/var/log/oneav/cron.lock" -c '/opt/threatbook/OneAV/oneav/script/install/oneav_service_monitor.sh')
1 31 22:45:47 hhoosstt sshd[5594]: Invalid user mcserver from 218.248.16.73 port 60446
1 31 22:45:47 hhoosstt sshd[5594]: input_userauth_request: invalid user mcserver [preauth]
1 31 22:45:47 hhoosstt sshd[5594]: pam_unix(sshd:auth): check pass; user unknown
1 31 22:45:47 hhoosstt sshd[5594]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=mail.jayapriya.com
1 31 22:45:49 hhoosstt sshd[5594]: Failed password for invalid user mcserver from 218.248.16.73 port 60446 ssh2
1 31 22:45:49 hhoosstt sshd[5594]: Received disconnect from 218.248.16.73 port 60446:11: Bye Bye [preauth]
1 31 22:45:49 hhoosstt sshd[5594]: Disconnected from 218.248.16.73 port 60446 [preauth]
1 31 22:46:16 hhoosstt sshd[5626]: Invalid user git from 165.22.107.2 port 34306
1 31 22:46:16 hhoosstt sshd[5626]: input_userauth_request: invalid user git [preauth]
1 31 22:46:16 hhoosstt sshd[5626]: pam_unix(sshd:auth): check pass; user unknown
1 31 22:46:16 hhoosstt sshd[5626]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.107.2
1 31 22:46:18 hhoosstt sshd[5626]: Failed password for invalid user git from 165.22.107.2 port 34306 ssh2
1 31 22:46:18 hhoosstt sshd[5626]: Received disconnect from 165.22.107.2 port 34306:11: Bye Bye [preauth]
1 31 22:46:18 hhoosstt sshd[5626]: Disconnected from 165.22.107.2 port 34306 [preauth]
1 31 22:46:30 hhoosstt sshd[5641]: Invalid user ftpuser from 1.214.245.27 port 46284
1 31 22:46:30 hhoosstt sshd[5641]: input_userauth_request: invalid user ftpuser [preauth]
1 31 22:46:30 hhoosstt sshd[5641]: pam_unix(sshd:auth): check pass; user unknown
1 31 22:46:30 hhoosstt sshd[5641]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.214.245.27
1 31 22:46:31 hhoosstt sshd[5643]: Address 107.173.251.36 maps to selinozoglu.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!
1 31 22:46:31 hhoosstt sshd[5643]: Invalid user jenkins from 107.173.251.36 port 55244
1 31 22:46:31 hhoosstt sshd[5643]: input_userauth_request: invalid user jenkins [preauth]
1 31 22:46:31 hhoosstt sshd[5643]: pam_unix(sshd:auth): check pass; user unknown
1 31 22:46:31 hhoosstt sshd[5643]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.173.251.36
1 31 22:46:32 hhoosstt sshd[5641]: Failed password for invalid user ftpuser from 1.214.245.27 port 46284 ssh2
1 31 22:46:32 hhoosstt sshd[5641]: Received disconnect from 1.214.245.27 port 46284:11: Bye Bye [preauth]
1 31 22:46:32 hhoosstt sshd[5641]: Disconnected from 1.214.245.27 port 46284 [preauth]
1 31 22:46:33 hhoosstt sshd[5643]: Failed password for invalid user jenkins from 107.173.251.36 port 55244 ssh2
1 31 22:46:33 hhoosstt sshd[5643]: Received disconnect from 107.173.251.36 port 55244:11: Bye Bye [preauth]
1 31 22:46:33 hhoosstt sshd[5643]: Disconnected from 107.173.251.36 port 55244 [preauth]
1 31 22:46:43 hhoosstt sshd[5670]: Invalid user postgres from 152.67.254.42 port 42380
1 31 22:46:43 hhoosstt sshd[5670]: input_userauth_request: invalid user postgres [preauth]
1 31 22:46:43 hhoosstt sshd[5670]: pam_unix(sshd:auth): check pass; user unknown
1 31 22:46:43 hhoosstt sshd[5670]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.67.254.42
1 31 22:46:46 hhoosstt sshd[5670]: Failed password for invalid user postgres from 152.67.254.42 port 42380 ssh2
1 31 22:46:46 hhoosstt sshd[5670]: Received disconnect from 152.67.254.42 port 42380:11: Bye Bye [preauth]
1 31 22:46:46 hhoosstt sshd[5670]: Disconnected from 152.67.254.42 port 42380 [preauth]
1 31 22:48:39 hhoosstt sshd[5826]: Address 107.173.251.36 maps to selinozoglu.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!
1 31 22:48:39 hhoosstt sshd[5826]: Invalid user myftp from 107.173.251.36 port 35476
1 31 22:48:39 hhoosstt sshd[5826]: input_userauth_request: invalid user myftp [preauth]
1 31 22:48:39 hhoosstt sshd[5826]: pam_unix(sshd:auth): check pass; user unknown
1 31 22:48:39 hhoosstt sshd[5826]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.173.251.36
1 31 22:48:40 hhoosstt sshd[5826]: Failed password for invalid user myftp from 107.173.251.36 port 35476 ssh2
1 31 22:48:40 hhoosstt sshd[5826]: Received disconnect from 107.173.251.36 port 35476:11: Bye Bye [preauth]
1 31 22:48:40 hhoosstt sshd[5826]: Disconnected from 107.173.251.36 port 35476 [preauth]
1 31 22:48:41 hhoosstt sshd[5830]: Invalid user zxcloudsetup from 165.22.107.2 port 54268
1 31 22:48:41 hhoosstt sshd[5830]: input_userauth_request: invalid user zxcloudsetup [preauth]
1 31 22:48:41 hhoosstt sshd[5830]: pam_unix(sshd:auth): check pass; user unknown
1 31 22:48:41 hhoosstt sshd[5830]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.107.2
1 31 22:48:43 hhoosstt sshd[5830]: Failed password for invalid user zxcloudsetup from 165.22.107.2 port 54268 ssh2
1 31 22:48:43 hhoosstt sshd[5830]: Received disconnect from 165.22.107.2 port 54268:11: Bye Bye [preauth]
1 31 22:48:43 hhoosstt sshd[5830]: Disconnected from 165.22.107.2 port 54268 [preauth]
1 31 22:48:46 hhoosstt sshd[5838]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.172.76  user=root
1 31 22:48:46 hhoosstt sshd[5838]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
1 31 22:48:48 hhoosstt sshd[5838]: Failed password for root from 61.177.172.76 port 30976 ssh2
1 31 22:48:49 hhoosstt sshd[5838]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
1 31 22:48:51 hhoosstt sshd[5838]: Failed password for root from 61.177.172.76 port 30976 ssh2
1 31 22:48:52 hhoosstt sshd[5838]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
1 31 22:48:53 hhoosstt sshd[5846]: Invalid user administrator from 1.214.245.27 port 53098
1 31 22:48:53 hhoosstt sshd[5846]: input_userauth_request: invalid user administrator [preauth]
1 31 22:48:53 hhoosstt sshd[5846]: pam_unix(sshd:auth): check pass; user unknown
1 31 22:48:53 hhoosstt sshd[5846]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.214.245.27
1 31 22:48:54 hhoosstt sshd[5838]: Failed password for root from 61.177.172.76 port 30976 ssh2
1 31 22:48:55 hhoosstt sshd[5846]: Failed password for invalid user administrator from 1.214.245.27 port 53098 ssh2
1 31 22:48:55 hhoosstt sshd[5846]: Received disconnect from 1.214.245.27 port 53098:11: Bye Bye [preauth]
1 31 22:48:55 hhoosstt sshd[5846]: Disconnected from 1.214.245.27 port 53098 [preauth]
1 31 22:48:55 hhoosstt sshd[5838]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
1 31 22:48:58 hhoosstt sshd[5838]: Failed password for root from 61.177.172.76 port 30976 ssh2
1 31 22:48:59 hhoosstt sshd[5838]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
1 31 22:49:01 hhoosstt sshd[5838]: Failed password for root from 61.177.172.76 port 30976 ssh2
1 31 22:49:01 hhoosstt sshd[5838]: error: maximum authentication attempts exceeded for root from 61.177.172.76 port 30976 ssh2 [preauth]
1 31 22:49:01 hhoosstt sshd[5838]: Disconnecting: Too many authentication failures [preauth]
1 31 22:49:01 hhoosstt sshd[5838]: PAM 4 more authentication failures; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.172.76  user=root
1 31 22:49:01 hhoosstt sshd[5838]: PAM service(sshd) ignoring max retries; 5 > 3
1 31 22:49:03 hhoosstt sshd[5862]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.172.76  user=root
1 31 22:49:03 hhoosstt sshd[5862]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
1 31 22:49:05 hhoosstt sshd[5862]: Failed password for root from 61.177.172.76 port 18044 ssh2
1 31 22:49:06 hhoosstt sshd[5855]: Accepted password for root from 101.228.86.14 port 60392 ssh2
1 31 22:49:06 hhoosstt systemd-logind[636]: New session 2846 of user root.
-- Subject: A new session 2846 has been created for user root
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- Documentation: http://www.freedesktop.org/wiki/Software/systemd/multiseat
-- 
-- A new session with the ID 2846 has been created for the user root.
-- 
-- The leading process of the session is 5855.
1 31 22:49:06 hhoosstt systemd[1]: Started Session 2846 of user root.
-- Subject: Unit session-2846.scope has finished start-up
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit session-2846.scope has finished starting up.
-- 
-- The start-up result is done.
1 31 22:49:06 hhoosstt sshd[5855]: pam_unix(sshd:session): session opened for user root by (uid=0)
1 31 22:49:06 hhoosstt sshd[5862]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
1 31 22:49:09 hhoosstt sshd[5862]: Failed password for root from 61.177.172.76 port 18044 ssh2
1 31 22:49:10 hhoosstt sshd[5862]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
1 31 22:49:12 hhoosstt sshd[5862]: Failed password for root from 61.177.172.76 port 18044 ssh2
1 31 22:49:13 hhoosstt sshd[5862]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
1 31 22:49:15 hhoosstt sshd[5862]: Failed password for root from 61.177.172.76 port 18044 ssh2
1 31 22:49:16 hhoosstt sshd[5862]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
1 31 22:49:18 hhoosstt sshd[5862]: Failed password for root from 61.177.172.76 port 18044 ssh2
1 31 22:49:19 hhoosstt sshd[5862]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
1 31 22:49:22 hhoosstt sshd[5862]: Failed password for root from 61.177.172.76 port 18044 ssh2
1 31 22:49:22 hhoosstt sshd[5862]: error: maximum authentication attempts exceeded for root from 61.177.172.76 port 18044 ssh2 [preauth]
1 31 22:49:22 hhoosstt sshd[5862]: Disconnecting: Too many authentication failures [preauth]
1 31 22:49:22 hhoosstt sshd[5862]: PAM 5 more authentication failures; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.172.76  user=root
1 31 22:49:22 hhoosstt sshd[5862]: PAM service(sshd) ignoring max retries; 6 > 3
1 31 22:49:25 hhoosstt sshd[6090]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.172.114  user=root
1 31 22:49:25 hhoosstt sshd[6090]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
1 31 22:49:25 hhoosstt sshd[6087]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.172.76  user=root
1 31 22:49:25 hhoosstt sshd[6087]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
1 31 22:49:28 hhoosstt sshd[6090]: Failed password for root from 61.177.172.114 port 42933 ssh2
1 31 22:49:28 hhoosstt sshd[6087]: Failed password for root from 61.177.172.76 port 16978 ssh2
1 31 22:49:28 hhoosstt sshd[6090]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
1 31 22:49:29 hhoosstt sshd[6087]: Received disconnect from 61.177.172.76 port 16978:11:  [preauth]
1 31 22:49:29 hhoosstt sshd[6087]: Disconnected from 61.177.172.76 port 16978 [preauth]
1 31 22:49:29 hhoosstt sshd[6090]: Failed password for root from 61.177.172.114 port 42933 ssh2
1 31 22:49:30 hhoosstt sshd[6090]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
1 31 22:49:32 hhoosstt sshd[6090]: Failed password for root from 61.177.172.114 port 42933 ssh2
1 31 22:49:32 hhoosstt sshd[6090]: Received disconnect from 61.177.172.114 port 42933:11:  [preauth]
1 31 22:49:32 hhoosstt sshd[6090]: Disconnected from 61.177.172.114 port 42933 [preauth]
1 31 22:49:32 hhoosstt sshd[6090]: PAM 2 more authentication failures; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.172.114  user=root
1 31 22:49:32 hhoosstt sshd[6218]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.172.114  user=root
1 31 22:49:32 hhoosstt sshd[6218]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
1 31 22:49:33 hhoosstt sshd[6221]: Invalid user user from 152.67.254.42 port 45104
1 31 22:49:33 hhoosstt sshd[6221]: input_userauth_request: invalid user user [preauth]
1 31 22:49:34 hhoosstt sshd[6221]: pam_unix(sshd:auth): check pass; user unknown
1 31 22:49:34 hhoosstt sshd[6221]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.67.254.42
1 31 22:49:35 hhoosstt sshd[6218]: Failed password for root from 61.177.172.114 port 33888 ssh2
1 31 22:49:35 hhoosstt sshd[6218]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
1 31 22:49:35 hhoosstt sshd[6221]: Failed password for invalid user user from 152.67.254.42 port 45104 ssh2
1 31 22:49:36 hhoosstt sshd[6221]: Received disconnect from 152.67.254.42 port 45104:11: Bye Bye [preauth]
1 31 22:49:36 hhoosstt sshd[6221]: Disconnected from 152.67.254.42 port 45104 [preauth]
1 31 22:49:37 hhoosstt sshd[6218]: Failed password for root from 61.177.172.114 port 33888 ssh2
1 31 22:49:37 hhoosstt sshd[6218]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
1 31 22:49:40 hhoosstt sshd[6218]: Failed password for root from 61.177.172.114 port 33888 ssh2
1 31 22:49:40 hhoosstt sshd[6218]: Received disconnect from 61.177.172.114 port 33888:11:  [preauth]
1 31 22:49:40 hhoosstt sshd[6218]: Disconnected from 61.177.172.114 port 33888 [preauth]
1 31 22:49:40 hhoosstt sshd[6218]: PAM 2 more authentication failures; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.172.114  user=root
1 31 22:49:40 hhoosstt sshd[6358]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.172.114  user=root
1 31 22:49:40 hhoosstt sshd[6358]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
1 31 22:49:42 hhoosstt sshd[6358]: Failed password for root from 61.177.172.114 port 21947 ssh2
1 31 22:49:42 hhoosstt sshd[6358]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
1 31 22:49:44 hhoosstt sshd[6358]: Failed password for root from 61.177.172.114 port 21947 ssh2
1 31 22:49:44 hhoosstt sshd[6358]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
1 31 22:49:47 hhoosstt sshd[6358]: Failed password for root from 61.177.172.114 port 21947 ssh2
1 31 22:49:47 hhoosstt sshd[6358]: Received disconnect from 61.177.172.114 port 21947:11:  [preauth]
1 31 22:49:47 hhoosstt sshd[6358]: Disconnected from 61.177.172.114 port 21947 [preauth]
1 31 22:49:47 hhoosstt sshd[6358]: PAM 2 more authentication failures; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.172.114  user=root
1 31 22:49:47 hhoosstt sshd[6461]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.172.114  user=root
1 31 22:49:47 hhoosstt sshd[6461]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
1 31 22:49:49 hhoosstt sshd[6461]: Failed password for root from 61.177.172.114 port 12640 ssh2
1 31 22:49:49 hhoosstt sshd[6461]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
1 31 22:49:51 hhoosstt sshd[6461]: Failed password for root from 61.177.172.114 port 12640 ssh2
1 31 22:49:51 hhoosstt sshd[6461]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
1 31 22:49:54 hhoosstt sshd[6461]: Failed password for root from 61.177.172.114 port 12640 ssh2
1 31 22:49:54 hhoosstt sshd[6461]: Received disconnect from 61.177.172.114 port 12640:11:  [preauth]
1 31 22:49:54 hhoosstt sshd[6461]: Disconnected from 61.177.172.114 port 12640 [preauth]
1 31 22:49:54 hhoosstt sshd[6461]: PAM 2 more authentication failures; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.172.114  user=root
1 31 22:50:01 hhoosstt systemd[1]: Started Session 2847 of user root.
-- Subject: Unit session-2847.scope has finished start-up
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit session-2847.scope has finished starting up.
-- 
-- The start-up result is done.
1 31 22:50:01 hhoosstt CROND[6663]: (root) CMD (flock -xn "/var/log/oneav/cron.lock" -c '/opt/threatbook/OneAV/oneav/script/install/oneav_service_monitor.sh')
1 31 22:50:16 hhoosstt sshd[6884]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.172.143  user=root
1 31 22:50:16 hhoosstt sshd[6884]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
1 31 22:50:18 hhoosstt sshd[6884]: Failed password for root from 61.177.172.143 port 13753 ssh2
1 31 22:50:18 hhoosstt sshd[6884]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
1 31 22:50:20 hhoosstt sshd[6884]: Failed password for root from 61.177.172.143 port 13753 ssh2
1 31 22:50:20 hhoosstt sshd[6884]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
1 31 22:50:20 hhoosstt sshd[6950]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.173.49  user=root
1 31 22:50:20 hhoosstt sshd[6950]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
1 31 22:50:22 hhoosstt sshd[6884]: Failed password for root from 61.177.172.143 port 13753 ssh2
1 31 22:50:22 hhoosstt sshd[6884]: Received disconnect from 61.177.172.143 port 13753:11:  [preauth]
1 31 22:50:22 hhoosstt sshd[6884]: Disconnected from 61.177.172.143 port 13753 [preauth]
1 31 22:50:22 hhoosstt sshd[6884]: PAM 2 more authentication failures; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.172.143  user=root
1 31 22:50:22 hhoosstt sshd[6950]: Failed password for root from 61.177.173.49 port 14526 ssh2
1 31 22:50:22 hhoosstt sshd[6950]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
1 31 22:50:24 hhoosstt sshd[6950]: Failed password for root from 61.177.173.49 port 14526 ssh2
1 31 22:50:24 hhoosstt sshd[6950]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
1 31 22:50:27 hhoosstt sshd[6950]: Failed password for root from 61.177.173.49 port 14526 ssh2
1 31 22:50:27 hhoosstt sshd[6950]: Received disconnect from 61.177.173.49 port 14526:11:  [preauth]
1 31 22:50:27 hhoosstt sshd[6950]: Disconnected from 61.177.173.49 port 14526 [preauth]
1 31 22:50:27 hhoosstt sshd[6950]: PAM 2 more authentication failures; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.173.49  user=root
1 31 22:50:27 hhoosstt sshd[7048]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.173.49  user=root
1 31 22:50:27 hhoosstt sshd[7048]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
1 31 22:50:30 hhoosstt sshd[7048]: Failed password for root from 61.177.173.49 port 57946 ssh2
1 31 22:50:30 hhoosstt sshd[7048]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
1 31 22:50:32 hhoosstt sshd[7048]: Failed password for root from 61.177.173.49 port 57946 ssh2
1 31 22:50:32 hhoosstt sshd[7048]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
1 31 22:50:33 hhoosstt sshd[7048]: Failed password for root from 61.177.173.49 port 57946 ssh2
1 31 22:50:33 hhoosstt sshd[7048]: Received disconnect from 61.177.173.49 port 57946:11:  [preauth]
1 31 22:50:33 hhoosstt sshd[7048]: Disconnected from 61.177.173.49 port 57946 [preauth]
1 31 22:50:33 hhoosstt sshd[7048]: PAM 2 more authentication failures; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.173.49  user=root
1 31 22:50:52 hhoosstt sshd[7400]: Address 107.173.251.36 maps to selinozoglu.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!
1 31 22:50:52 hhoosstt sshd[7400]: Invalid user admin from 107.173.251.36 port 43954
1 31 22:50:52 hhoosstt sshd[7400]: input_userauth_request: invalid user admin [preauth]
1 31 22:50:52 hhoosstt sshd[7400]: pam_unix(sshd:auth): check pass; user unknown
1 31 22:50:52 hhoosstt sshd[7400]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.173.251.36
1 31 22:50:54 hhoosstt sshd[7400]: Failed password for invalid user admin from 107.173.251.36 port 43954 ssh2
1 31 22:50:54 hhoosstt sshd[7400]: Received disconnect from 107.173.251.36 port 43954:11: Bye Bye [preauth]
1 31 22:50:54 hhoosstt sshd[7400]: Disconnected from 107.173.251.36 port 43954 [preauth]
1 31 22:51:02 hhoosstt sshd[7573]: Invalid user sysadmin from 165.22.107.2 port 57648
1 31 22:51:02 hhoosstt sshd[7573]: input_userauth_request: invalid user sysadmin [preauth]
1 31 22:51:02 hhoosstt sshd[7573]: pam_unix(sshd:auth): check pass; user unknown
1 31 22:51:02 hhoosstt sshd[7573]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.107.2
1 31 22:51:04 hhoosstt sshd[7573]: Failed password for invalid user sysadmin from 165.22.107.2 port 57648 ssh2
1 31 22:51:05 hhoosstt sshd[7573]: Received disconnect from 165.22.107.2 port 57648:11: Bye Bye [preauth]
1 31 22:51:05 hhoosstt sshd[7573]: Disconnected from 165.22.107.2 port 57648 [preauth]
1 31 22:51:13 hhoosstt sshd[7740]: Invalid user oracle from 1.214.245.27 port 59910
1 31 22:51:13 hhoosstt sshd[7740]: input_userauth_request: invalid user oracle [preauth]
1 31 22:51:13 hhoosstt sshd[7740]: pam_unix(sshd:auth): check pass; user unknown
1 31 22:51:13 hhoosstt sshd[7740]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.214.245.27
1 31 22:51:15 hhoosstt sshd[7740]: Failed password for invalid user oracle from 1.214.245.27 port 59910 ssh2
1 31 22:51:15 hhoosstt sshd[7740]: Received disconnect from 1.214.245.27 port 59910:11: Bye Bye [preauth]
1 31 22:51:15 hhoosstt sshd[7740]: Disconnected from 1.214.245.27 port 59910 [preauth]
1 31 22:52:32 hhoosstt sshd[8861]: Invalid user webmaster from 152.67.254.42 port 54750
1 31 22:52:32 hhoosstt sshd[8861]: input_userauth_request: invalid user webmaster [preauth]
1 31 22:52:32 hhoosstt sshd[8861]: pam_unix(sshd:auth): check pass; user unknown
1 31 22:52:32 hhoosstt sshd[8861]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.67.254.42
1 31 22:52:34 hhoosstt sshd[8861]: Failed password for invalid user webmaster from 152.67.254.42 port 54750 ssh2
1 31 22:52:34 hhoosstt sshd[8861]: Received disconnect from 152.67.254.42 port 54750:11: Bye Bye [preauth]
1 31 22:52:34 hhoosstt sshd[8861]: Disconnected from 152.67.254.42 port 54750 [preauth]
1 31 22:52:55 hhoosstt polkitd[613]: Registered Authentication Agent for unix-process:9202:78059339 (system bus name :1.5787 [/usr/bin/pkttyagent --notify-fd 5 --fall
1 31 22:52:55 hhoosstt systemd[1]: Starting Postfix Mail Transport Agent...
-- Subject: Unit postfix.service has begun start-up
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit postfix.service has begun starting up.
1 31 22:52:56 hhoosstt postfix/postfix-script[9323]: starting the Postfix mail system
1 31 22:52:56 hhoosstt postfix/master[9325]: daemon started -- version 3.4.7, configuration /etc/postfix
1 31 22:52:56 hhoosstt systemd[1]: Started Postfix Mail Transport Agent.
-- Subject: Unit postfix.service has finished start-up
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit postfix.service has finished starting up.
-- 
-- The start-up result is done.
1 31 22:52:56 hhoosstt polkitd[613]: Unregistered Authentication Agent for unix-process:9202:78059339 (system bus name :1.5787, object path /org/freedesktop/PolicyKit
1 31 22:53:02 hhoosstt sshd[9392]: Address 107.173.251.36 maps to selinozoglu.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!
1 31 22:53:02 hhoosstt sshd[9392]: Invalid user server from 107.173.251.36 port 52424
1 31 22:53:02 hhoosstt sshd[9392]: input_userauth_request: invalid user server [preauth]
1 31 22:53:02 hhoosstt sshd[9392]: pam_unix(sshd:auth): check pass; user unknown
1 31 22:53:02 hhoosstt sshd[9392]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.173.251.36
1 31 22:53:03 hhoosstt sshd[9392]: Failed password for invalid user server from 107.173.251.36 port 52424 ssh2
1 31 22:53:04 hhoosstt sshd[9392]: Received disconnect from 107.173.251.36 port 52424:11: Bye Bye [preauth]
1 31 22:53:04 hhoosstt sshd[9392]: Disconnected from 107.173.251.36 port 52424 [preauth]
1 31 22:53:24 hhoosstt sshd[9739]: Invalid user student2 from 165.22.107.2 port 44138
1 31 22:53:24 hhoosstt sshd[9739]: input_userauth_request: invalid user student2 [preauth]
1 31 22:53:24 hhoosstt sshd[9739]: pam_unix(sshd:auth): check pass; user unknown
1 31 22:53:24 hhoosstt sshd[9739]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.107.2
1 31 22:53:25 hhoosstt polkitd[613]: Registered Authentication Agent for unix-process:9754:78062413 (system bus name :1.5788 [/usr/bin/pkttyagent --notify-fd 5 --fall
1 31 22:53:25 hhoosstt systemd[1]: Started rapid spam filtering system.
-- Subject: Unit rspamd.service has finished start-up
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit rspamd.service has finished starting up.
-- 
-- The start-up result is done.
1 31 22:53:25 hhoosstt polkitd[613]: Unregistered Authentication Agent for unix-process:9754:78062413 (system bus name :1.5788, object path /org/freedesktop/PolicyKit
1 31 22:53:25 hhoosstt rspamd[9760]: /usr/bin/rspamd: error while loading shared libraries: libsodium.so.23: cannot open shared object file: No such file or directory
1 31 22:53:25 hhoosstt systemd[1]: rspamd.service: main process exited, code=exited, status=127/n/a
1 31 22:53:25 hhoosstt systemd[1]: Unit rspamd.service entered failed state.
1 31 22:53:25 hhoosstt systemd[1]: rspamd.service failed.
1 31 22:53:25 hhoosstt systemd[1]: rspamd.service holdoff time over, scheduling restart.
1 31 22:53:25 hhoosstt systemd[1]: Stopped rapid spam filtering system.
-- Subject: Unit rspamd.service has finished shutting down
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit rspamd.service has finished shutting down.
1 31 22:53:25 hhoosstt systemd[1]: Started rapid spam filtering system.
-- Subject: Unit rspamd.service has finished start-up
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit rspamd.service has finished starting up.
-- 
-- The start-up result is done.
1 31 22:53:25 hhoosstt rspamd[9784]: /usr/bin/rspamd: error while loading shared libraries: libsodium.so.23: cannot open shared object file: No such file or directory
1 31 22:53:25 hhoosstt systemd[1]: rspamd.service: main process exited, code=exited, status=127/n/a
1 31 22:53:25 hhoosstt systemd[1]: Unit rspamd.service entered failed state.
1 31 22:53:25 hhoosstt systemd[1]: rspamd.service failed.
1 31 22:53:26 hhoosstt systemd[1]: rspamd.service holdoff time over, scheduling restart.
1 31 22:53:26 hhoosstt systemd[1]: Stopped rapid spam filtering system.
-- Subject: Unit rspamd.service has finished shutting down
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit rspamd.service has finished shutting down.
1 31 22:53:26 hhoosstt systemd[1]: Started rapid spam filtering system.
-- Subject: Unit rspamd.service has finished start-up
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit rspamd.service has finished starting up.
-- 
-- The start-up result is done.
1 31 22:53:26 hhoosstt rspamd[9788]: /usr/bin/rspamd: error while loading shared libraries: libsodium.so.23: cannot open shared object file: No such file or directory
1 31 22:53:26 hhoosstt systemd[1]: rspamd.service: main process exited, code=exited, status=127/n/a
1 31 22:53:26 hhoosstt systemd[1]: Unit rspamd.service entered failed state.
1 31 22:53:26 hhoosstt systemd[1]: rspamd.service failed.
1 31 22:53:26 hhoosstt systemd[1]: rspamd.service holdoff time over, scheduling restart.
1 31 22:53:26 hhoosstt systemd[1]: Stopped rapid spam filtering system.
-- Subject: Unit rspamd.service has finished shutting down
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit rspamd.service has finished shutting down.
1 31 22:53:26 hhoosstt systemd[1]: Started rapid spam filtering system.
-- Subject: Unit rspamd.service has finished start-up
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit rspamd.service has finished starting up.
-- 
-- The start-up result is done.
1 31 22:53:26 hhoosstt rspamd[9790]: /usr/bin/rspamd: error while loading shared libraries: libsodium.so.23: cannot open shared object file: No such file or directory
1 31 22:53:26 hhoosstt systemd[1]: rspamd.service: main process exited, code=exited, status=127/n/a
1 31 22:53:26 hhoosstt systemd[1]: Unit rspamd.service entered failed state.
1 31 22:53:26 hhoosstt systemd[1]: rspamd.service failed.
1 31 22:53:26 hhoosstt sshd[9739]: Failed password for invalid user student2 from 165.22.107.2 port 44138 ssh2
1 31 22:53:26 hhoosstt systemd[1]: rspamd.service holdoff time over, scheduling restart.
1 31 22:53:26 hhoosstt systemd[1]: Stopped rapid spam filtering system.
-- Subject: Unit rspamd.service has finished shutting down
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit rspamd.service has finished shutting down.
1 31 22:53:26 hhoosstt systemd[1]: Started rapid spam filtering system.
-- Subject: Unit rspamd.service has finished start-up
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit rspamd.service has finished starting up.
-- 
-- The start-up result is done.
1 31 22:53:26 hhoosstt rspamd[9793]: /usr/bin/rspamd: error while loading shared libraries: libsodium.so.23: cannot open shared object file: No such file or directory
1 31 22:53:26 hhoosstt systemd[1]: rspamd.service: main process exited, code=exited, status=127/n/a
1 31 22:53:26 hhoosstt systemd[1]: Unit rspamd.service entered failed state.
1 31 22:53:26 hhoosstt systemd[1]: rspamd.service failed.
1 31 22:53:26 hhoosstt sshd[9739]: Received disconnect from 165.22.107.2 port 44138:11: Bye Bye [preauth]
1 31 22:53:26 hhoosstt sshd[9739]: Disconnected from 165.22.107.2 port 44138 [preauth]
1 31 22:53:26 hhoosstt systemd[1]: rspamd.service holdoff time over, scheduling restart.
1 31 22:53:26 hhoosstt systemd[1]: Stopped rapid spam filtering system.
-- Subject: Unit rspamd.service has finished shutting down
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit rspamd.service has finished shutting down.
1 31 22:53:26 hhoosstt systemd[1]: start request repeated too quickly for rspamd.service
1 31 22:53:26 hhoosstt systemd[1]: Failed to start rapid spam filtering system.
-- Subject: Unit rspamd.service has failed
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit rspamd.service has failed.
-- 
-- The result is failed.
1 31 22:53:26 hhoosstt systemd[1]: Unit rspamd.service entered failed state.
1 31 22:53:26 hhoosstt systemd[1]: rspamd.service failed.
1 31 22:53:29 hhoosstt sshd[9844]: Invalid user vncuser from 1.214.245.27 port 38488
1 31 22:53:29 hhoosstt sshd[9844]: input_userauth_request: invalid user vncuser [preauth]
1 31 22:53:29 hhoosstt sshd[9844]: pam_unix(sshd:auth): check pass; user unknown
1 31 22:53:29 hhoosstt sshd[9844]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.214.245.27
1 31 22:53:32 hhoosstt sshd[9844]: Failed password for invalid user vncuser from 1.214.245.27 port 38488 ssh2
1 31 22:53:32 hhoosstt sshd[9844]: Received disconnect from 1.214.245.27 port 38488:11: Bye Bye [preauth]
1 31 22:53:32 hhoosstt sshd[9844]: Disconnected from 1.214.245.27 port 38488 [preauth]
1 31 22:54:12 hhoosstt auditd[527]: Audit daemon rotating log files
1 31 22:54:57 hhoosstt sshd[11209]: Did not receive identification string from 58.213.109.242 port 36226
1 31 22:55:01 hhoosstt systemd[1]: Started Session 2848 of user root.
-- Subject: Unit session-2848.scope has finished start-up
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit session-2848.scope has finished starting up.
-- 
-- The start-up result is done.
1 31 22:55:01 hhoosstt CROND[11263]: (root) CMD (flock -xn "/var/log/oneav/cron.lock" -c '/opt/threatbook/OneAV/oneav/script/install/oneav_service_monitor.sh')
1 31 22:55:07 hhoosstt sshd[11385]: Invalid user admin from 58.213.109.242 port 43014
1 31 22:55:07 hhoosstt sshd[11385]: input_userauth_request: invalid user admin [preauth]
1 31 22:55:07 hhoosstt sshd[11385]: pam_unix(sshd:auth): check pass; user unknown
1 31 22:55:07 hhoosstt sshd[11385]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.213.109.242
1 31 22:55:09 hhoosstt sshd[11385]: Failed password for invalid user admin from 58.213.109.242 port 43014 ssh2
1 31 22:55:09 hhoosstt sshd[11385]: Connection closed by 58.213.109.242 port 43014 [preauth]
1 31 22:55:12 hhoosstt sshd[11450]: Invalid user admin from 58.213.109.242 port 50106
1 31 22:55:12 hhoosstt sshd[11450]: input_userauth_request: invalid user admin [preauth]
1 31 22:55:12 hhoosstt sshd[11450]: pam_unix(sshd:auth): check pass; user unknown
1 31 22:55:12 hhoosstt sshd[11450]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.213.109.242
1 31 22:55:13 hhoosstt sshd[11450]: Failed password for invalid user admin from 58.213.109.242 port 50106 ssh2
1 31 22:55:13 hhoosstt sshd[11450]: Connection closed by 58.213.109.242 port 50106 [preauth]
1 31 22:55:14 hhoosstt sshd[11492]: Address 107.173.251.36 maps to selinozoglu.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!
1 31 22:55:14 hhoosstt sshd[11492]: Invalid user testing from 107.173.251.36 port 60898
1 31 22:55:14 hhoosstt sshd[11492]: input_userauth_request: invalid user testing [preauth]
1 31 22:55:14 hhoosstt sshd[11492]: pam_unix(sshd:auth): check pass; user unknown
1 31 22:55:14 hhoosstt sshd[11492]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.173.251.36
1 31 22:55:16 hhoosstt sshd[11540]: Invalid user admin from 58.213.109.242 port 57198
1 31 22:55:16 hhoosstt sshd[11540]: input_userauth_request: invalid user admin [preauth]
1 31 22:55:16 hhoosstt sshd[11540]: pam_unix(sshd:auth): check pass; user unknown
1 31 22:55:16 hhoosstt sshd[11540]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.213.109.242
1 31 22:55:17 hhoosstt sshd[11492]: Failed password for invalid user testing from 107.173.251.36 port 60898 ssh2
1 31 22:55:17 hhoosstt sshd[11492]: Received disconnect from 107.173.251.36 port 60898:11: Bye Bye [preauth]
1 31 22:55:17 hhoosstt sshd[11492]: Disconnected from 107.173.251.36 port 60898 [preauth]
1 31 22:55:19 hhoosstt sshd[11540]: Failed password for invalid user admin from 58.213.109.242 port 57198 ssh2
1 31 22:55:19 hhoosstt sshd[11540]: Connection closed by 58.213.109.242 port 57198 [preauth]
1 31 22:55:23 hhoosstt sshd[11620]: Invalid user admin from 58.213.109.242 port 36058
1 31 22:55:23 hhoosstt sshd[11620]: input_userauth_request: invalid user admin [preauth]
1 31 22:55:23 hhoosstt sshd[11620]: pam_unix(sshd:auth): check pass; user unknown
1 31 22:55:23 hhoosstt sshd[11620]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.213.109.242
1 31 22:55:25 hhoosstt sshd[11661]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.67.254.42  user=www
1 31 22:55:26 hhoosstt sshd[11620]: Failed password for invalid user admin from 58.213.109.242 port 36058 ssh2
1 31 22:55:26 hhoosstt sshd[11620]: Connection closed by 58.213.109.242 port 36058 [preauth]
1 31 22:55:26 hhoosstt sshd[11661]: Failed password for www from 152.67.254.42 port 40446 ssh2
1 31 22:55:27 hhoosstt sshd[11661]: Received disconnect from 152.67.254.42 port 40446:11: Bye Bye [preauth]
1 31 22:55:27 hhoosstt sshd[11661]: Disconnected from 152.67.254.42 port 40446 [preauth]
1 31 22:55:28 hhoosstt sshd[11702]: Invalid user admin from 58.213.109.242 port 43150
1 31 22:55:28 hhoosstt sshd[11702]: input_userauth_request: invalid user admin [preauth]
1 31 22:55:28 hhoosstt sshd[11702]: pam_unix(sshd:auth): check pass; user unknown
1 31 22:55:28 hhoosstt sshd[11702]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.213.109.242
1 31 22:55:30 hhoosstt sshd[11702]: Failed password for invalid user admin from 58.213.109.242 port 43150 ssh2
1 31 22:55:31 hhoosstt sshd[11753]: Invalid user centos from 58.213.109.242 port 50242
1 31 22:55:31 hhoosstt sshd[11753]: input_userauth_request: invalid user centos [preauth]
1 31 22:55:32 hhoosstt sshd[11702]: Connection closed by 58.213.109.242 port 43150 [preauth]
1 31 22:55:32 hhoosstt sshd[11753]: pam_unix(sshd:auth): check pass; user unknown
1 31 22:55:32 hhoosstt sshd[11753]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.213.109.242
1 31 22:55:34 hhoosstt sshd[11753]: Failed password for invalid user centos from 58.213.109.242 port 50242 ssh2
1 31 22:55:34 hhoosstt sshd[11753]: Connection closed by 58.213.109.242 port 50242 [preauth]
1 31 22:55:43 hhoosstt sshd[11958]: Invalid user guest from 58.213.109.242 port 43286
1 31 22:55:43 hhoosstt sshd[11958]: input_userauth_request: invalid user guest [preauth]
1 31 22:55:44 hhoosstt sshd[11958]: pam_unix(sshd:auth): check pass; user unknown
1 31 22:55:44 hhoosstt sshd[11958]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.213.109.242
1 31 22:55:46 hhoosstt sshd[11958]: Failed password for invalid user guest from 58.213.109.242 port 43286 ssh2
1 31 22:55:46 hhoosstt sshd[11958]: Connection closed by 58.213.109.242 port 43286 [preauth]
1 31 22:55:47 hhoosstt sshd[12010]: Invalid user testuser from 165.22.107.2 port 43164
1 31 22:55:47 hhoosstt sshd[12010]: input_userauth_request: invalid user testuser [preauth]
1 31 22:55:47 hhoosstt sshd[12010]: pam_unix(sshd:auth): check pass; user unknown
1 31 22:55:47 hhoosstt sshd[12010]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.107.2
1 31 22:55:49 hhoosstt sshd[12025]: Invalid user postgres from 58.213.109.242 port 50378
1 31 22:55:49 hhoosstt sshd[12025]: input_userauth_request: invalid user postgres [preauth]
1 31 22:55:49 hhoosstt sshd[12010]: Failed password for invalid user testuser from 165.22.107.2 port 43164 ssh2
1 31 22:55:49 hhoosstt sshd[12010]: Received disconnect from 165.22.107.2 port 43164:11: Bye Bye [preauth]
1 31 22:55:49 hhoosstt sshd[12010]: Disconnected from 165.22.107.2 port 43164 [preauth]
1 31 22:55:50 hhoosstt sshd[12025]: pam_unix(sshd:auth): check pass; user unknown
1 31 22:55:50 hhoosstt sshd[12025]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.213.109.242
1 31 22:55:52 hhoosstt sshd[12025]: Failed password for invalid user postgres from 58.213.109.242 port 50378 ssh2
1 31 22:55:52 hhoosstt sshd[11819]: Invalid user centos from 58.213.109.242 port 57334
1 31 22:55:52 hhoosstt sshd[11819]: input_userauth_request: invalid user centos [preauth]
1 31 22:55:52 hhoosstt sshd[11819]: pam_unix(sshd:auth): check pass; user unknown
1 31 22:55:52 hhoosstt sshd[11819]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.213.109.242
1 31 22:55:54 hhoosstt sshd[12025]: Connection closed by 58.213.109.242 port 50378 [preauth]
1 31 22:55:54 hhoosstt sshd[11819]: Failed password for invalid user centos from 58.213.109.242 port 57334 ssh2
1 31 22:55:54 hhoosstt sshd[11819]: Connection closed by 58.213.109.242 port 57334 [preauth]
1 31 22:55:55 hhoosstt sshd[12157]: Invalid user sammy from 1.214.245.27 port 45304
1 31 22:55:55 hhoosstt sshd[12157]: input_userauth_request: invalid user sammy [preauth]
1 31 22:55:55 hhoosstt sshd[12157]: pam_unix(sshd:auth): check pass; user unknown
1 31 22:55:55 hhoosstt sshd[12157]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.214.245.27
1 31 22:55:57 hhoosstt sshd[12157]: Failed password for invalid user sammy from 1.214.245.27 port 45304 ssh2
1 31 22:55:57 hhoosstt sshd[12157]: Received disconnect from 1.214.245.27 port 45304:11: Bye Bye [preauth]
1 31 22:55:57 hhoosstt sshd[12157]: Disconnected from 1.214.245.27 port 45304 [preauth]
1 31 22:56:04 hhoosstt sshd[12288]: Invalid user hadoop from 58.213.109.242 port 43422
1 31 22:56:04 hhoosstt sshd[12288]: input_userauth_request: invalid user hadoop [preauth]
1 31 22:56:04 hhoosstt sshd[12288]: pam_unix(sshd:auth): check pass; user unknown
1 31 22:56:04 hhoosstt sshd[12288]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.213.109.242
1 31 22:56:05 hhoosstt sshd[12260]: Invalid user pi from 58.213.109.242 port 36330
1 31 22:56:05 hhoosstt sshd[12260]: input_userauth_request: invalid user pi [preauth]
1 31 22:56:05 hhoosstt sshd[12260]: pam_unix(sshd:auth): check pass; user unknown
1 31 22:56:05 hhoosstt sshd[12260]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.213.109.242
1 31 22:56:07 hhoosstt sshd[12288]: Failed password for invalid user hadoop from 58.213.109.242 port 43422 ssh2
1 31 22:56:07 hhoosstt sshd[12288]: Connection closed by 58.213.109.242 port 43422 [preauth]
1 31 22:56:08 hhoosstt sshd[12260]: Failed password for invalid user pi from 58.213.109.242 port 36330 ssh2
1 31 22:56:08 hhoosstt sshd[12260]: Connection closed by 58.213.109.242 port 36330 [preauth]
1 31 22:56:09 hhoosstt sshd[12372]: Invalid user hadoop from 58.213.109.242 port 50514
1 31 22:56:09 hhoosstt sshd[12372]: input_userauth_request: invalid user hadoop [preauth]
1 31 22:56:09 hhoosstt sshd[12372]: pam_unix(sshd:auth): check pass; user unknown
1 31 22:56:09 hhoosstt sshd[12372]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.213.109.242
1 31 22:56:11 hhoosstt sshd[12372]: Failed password for invalid user hadoop from 58.213.109.242 port 50514 ssh2
1 31 22:56:11 hhoosstt sshd[12372]: Connection closed by 58.213.109.242 port 50514 [preauth]
1 31 22:56:25 hhoosstt sshd[12594]: Invalid user dolphinscheduler from 58.213.109.242 port 50650
1 31 22:56:25 hhoosstt sshd[12594]: input_userauth_request: invalid user dolphinscheduler [preauth]
1 31 22:56:28 hhoosstt sshd[12594]: pam_unix(sshd:auth): check pass; user unknown
1 31 22:56:28 hhoosstt sshd[12594]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.213.109.242
1 31 22:56:31 hhoosstt sshd[12594]: Failed password for invalid user dolphinscheduler from 58.213.109.242 port 50650 ssh2
1 31 22:56:32 hhoosstt sshd[12594]: Connection closed by 58.213.109.242 port 50650 [preauth]
1 31 22:56:38 hhoosstt sshd[12790]: Invalid user lighthouse from 58.213.109.242 port 43558
1 31 22:56:38 hhoosstt sshd[12790]: input_userauth_request: invalid user lighthouse [preauth]
1 31 22:56:40 hhoosstt sshd[12790]: pam_unix(sshd:auth): check pass; user unknown
1 31 22:56:40 hhoosstt sshd[12790]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.213.109.242
1 31 22:56:43 hhoosstt sshd[12757]: Invalid user debianuser from 58.213.109.242 port 36602
1 31 22:56:43 hhoosstt sshd[12757]: input_userauth_request: invalid user debianuser [preauth]
1 31 22:56:43 hhoosstt sshd[12790]: Failed password for invalid user lighthouse from 58.213.109.242 port 43558 ssh2
1 31 22:56:43 hhoosstt sshd[12757]: pam_unix(sshd:auth): check pass; user unknown
1 31 22:56:43 hhoosstt sshd[12757]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.213.109.242
1 31 22:56:45 hhoosstt sshd[12757]: Failed password for invalid user debianuser from 58.213.109.242 port 36602 ssh2
1 31 22:56:46 hhoosstt sshd[12916]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.213.109.242  user=root
1 31 22:56:46 hhoosstt sshd[12916]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
1 31 22:56:46 hhoosstt sshd[12757]: Connection closed by 58.213.109.242 port 36602 [preauth]
1 31 22:56:48 hhoosstt sshd[12916]: Failed password for root from 58.213.109.242 port 50786 ssh2
1 31 22:56:49 hhoosstt sshd[12790]: Connection closed by 58.213.109.242 port 43558 [preauth]
1 31 22:56:51 hhoosstt sshd[12916]: Connection closed by 58.213.109.242 port 50786 [preauth]
1 31 22:56:58 hhoosstt sshd[13162]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.213.109.242  user=root
1 31 22:56:58 hhoosstt sshd[13162]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
1 31 22:56:59 hhoosstt sshd[13162]: Failed password for root from 58.213.109.242 port 43830 ssh2
1 31 22:57:00 hhoosstt sshd[13162]: Connection closed by 58.213.109.242 port 43830 [preauth]
1 31 22:57:03 hhoosstt sshd[12630]: Invalid user sonar from 58.213.109.242 port 57606
1 31 22:57:03 hhoosstt sshd[12630]: input_userauth_request: invalid user sonar [preauth]
1 31 22:57:03 hhoosstt sshd[12630]: pam_unix(sshd:auth): check pass; user unknown
1 31 22:57:03 hhoosstt sshd[12630]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.213.109.242
1 31 22:57:06 hhoosstt sshd[12630]: Failed password for invalid user sonar from 58.213.109.242 port 57606 ssh2
1 31 22:57:06 hhoosstt sshd[12630]: Connection closed by 58.213.109.242 port 57606 [preauth]
1 31 22:57:08 hhoosstt sshd[13294]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.213.109.242  user=root
1 31 22:57:08 hhoosstt sshd[13294]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
1 31 22:57:10 hhoosstt sshd[13294]: Failed password for root from 58.213.109.242 port 58014 ssh2
1 31 22:57:10 hhoosstt sshd[13361]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.213.109.242  user=root
1 31 22:57:10 hhoosstt sshd[13361]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
1 31 22:57:12 hhoosstt sshd[13361]: Failed password for root from 58.213.109.242 port 36874 ssh2
1 31 22:57:12 hhoosstt sshd[13361]: Connection closed by 58.213.109.242 port 36874 [preauth]
1 31 22:57:14 hhoosstt sshd[12752]: Invalid user pi from 58.213.109.242 port 57742
1 31 22:57:14 hhoosstt sshd[12752]: input_userauth_request: invalid user pi [preauth]
1 31 22:57:14 hhoosstt sshd[12752]: pam_unix(sshd:auth): check pass; user unknown
1 31 22:57:14 hhoosstt sshd[12752]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.213.109.242
1 31 22:57:15 hhoosstt sshd[13426]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.213.109.242  user=root
1 31 22:57:15 hhoosstt sshd[13426]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
1 31 22:57:17 hhoosstt sshd[12752]: Failed password for invalid user pi from 58.213.109.242 port 57742 ssh2
1 31 22:57:17 hhoosstt sshd[13426]: Failed password for root from 58.213.109.242 port 43966 ssh2
1 31 22:57:17 hhoosstt sshd[13426]: Connection closed by 58.213.109.242 port 43966 [preauth]
1 31 22:57:20 hhoosstt sshd[13071]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.213.109.242  user=root
1 31 22:57:20 hhoosstt sshd[13071]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
1 31 22:57:21 hhoosstt sshd[13514]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.213.109.242  user=root
1 31 22:57:21 hhoosstt sshd[13514]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
1 31 22:57:22 hhoosstt sshd[13071]: Failed password for root from 58.213.109.242 port 36738 ssh2
1 31 22:57:22 hhoosstt sshd[13071]: Connection closed by 58.213.109.242 port 36738 [preauth]
1 31 22:57:23 hhoosstt sshd[13514]: Failed password for root from 58.213.109.242 port 51058 ssh2
1 31 22:57:24 hhoosstt sshd[13514]: Connection closed by 58.213.109.242 port 51058 [preauth]
1 31 22:57:27 hhoosstt sshd[13622]: Address 107.173.251.36 maps to selinozoglu.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!
1 31 22:57:27 hhoosstt sshd[13622]: Invalid user oracle from 107.173.251.36 port 41162
1 31 22:57:27 hhoosstt sshd[13622]: input_userauth_request: invalid user oracle [preauth]
1 31 22:57:27 hhoosstt sshd[13622]: pam_unix(sshd:auth): check pass; user unknown
1 31 22:57:27 hhoosstt sshd[13622]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.173.251.36
1 31 22:57:27 hhoosstt sshd[13591]: Invalid user test from 58.213.109.242 port 58150
1 31 22:57:27 hhoosstt sshd[13591]: input_userauth_request: invalid user test [preauth]
1 31 22:57:28 hhoosstt sshd[13591]: pam_unix(sshd:auth): check pass; user unknown
1 31 22:57:28 hhoosstt sshd[13591]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.213.109.242
1 31 22:57:29 hhoosstt sshd[13622]: Failed password for invalid user oracle from 107.173.251.36 port 41162 ssh2
1 31 22:57:30 hhoosstt sshd[13622]: Received disconnect from 107.173.251.36 port 41162:11: Bye Bye [preauth]
1 31 22:57:30 hhoosstt sshd[13622]: Disconnected from 107.173.251.36 port 41162 [preauth]
1 31 22:57:30 hhoosstt sshd[13661]: Invalid user ubnt from 58.213.109.242 port 37010
1 31 22:57:30 hhoosstt sshd[13661]: input_userauth_request: invalid user ubnt [preauth]
1 31 22:57:30 hhoosstt sshd[13661]: pam_unix(sshd:auth): check pass; user unknown
1 31 22:57:30 hhoosstt sshd[13661]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.213.109.242
1 31 22:57:31 hhoosstt sshd[13591]: Failed password for invalid user test from 58.213.109.242 port 58150 ssh2
1 31 22:57:31 hhoosstt sshd[13661]: Failed password for invalid user ubnt from 58.213.109.242 port 37010 ssh2
1 31 22:57:32 hhoosstt sshd[13591]: Connection closed by 58.213.109.242 port 58150 [preauth]
1 31 22:57:32 hhoosstt sshd[13661]: Connection closed by 58.213.109.242 port 37010 [preauth]
1 31 22:57:37 hhoosstt sshd[13801]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.213.109.242  user=root
1 31 22:57:37 hhoosstt sshd[13801]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
1 31 22:57:38 hhoosstt sshd[13754]: Invalid user user from 58.213.109.242 port 44102
1 31 22:57:38 hhoosstt sshd[13754]: input_userauth_request: invalid user user [preauth]
1 31 22:57:38 hhoosstt sshd[13754]: pam_unix(sshd:auth): check pass; user unknown
1 31 22:57:38 hhoosstt sshd[13754]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.213.109.242
1 31 22:57:40 hhoosstt sshd[13801]: Failed password for root from 58.213.109.242 port 51194 ssh2
1 31 22:57:40 hhoosstt sshd[13801]: Connection closed by 58.213.109.242 port 51194 [preauth]
1 31 22:57:41 hhoosstt sshd[13754]: Failed password for invalid user user from 58.213.109.242 port 44102 ssh2
1 31 22:57:41 hhoosstt sshd[13754]: Connection closed by 58.213.109.242 port 44102 [preauth]
1 31 22:57:41 hhoosstt sshd[13294]: Connection closed by 58.213.109.242 port 58014 [preauth]
1 31 22:57:45 hhoosstt systemd[1]: Started rapid spam filtering system.
-- Subject: Unit rspamd.service has finished start-up
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit rspamd.service has finished starting up.
-- 
-- The start-up result is done.
1 31 22:57:45 hhoosstt rspamd[13944]: /usr/bin/rspamd: error while loading shared libraries: libsodium.so.23: cannot open shared object file: No such file or director
1 31 22:57:45 hhoosstt systemd[1]: rspamd.service: main process exited, code=exited, status=127/n/a
1 31 22:57:45 hhoosstt systemd[1]: Unit rspamd.service entered failed state.
1 31 22:57:45 hhoosstt systemd[1]: rspamd.service failed.
1 31 22:57:45 hhoosstt systemd[1]: rspamd.service holdoff time over, scheduling restart.
1 31 22:57:45 hhoosstt systemd[1]: Stopped rapid spam filtering system.
-- Subject: Unit rspamd.service has finished shutting down
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit rspamd.service has finished shutting down.
1 31 22:57:45 hhoosstt systemd[1]: Started rapid spam filtering system.
-- Subject: Unit rspamd.service has finished start-up
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit rspamd.service has finished starting up.
-- 
-- The start-up result is done.
1 31 22:57:45 hhoosstt rspamd[13947]: /usr/bin/rspamd: error while loading shared libraries: libsodium.so.23: cannot open shared object file: No such file or director
1 31 22:57:45 hhoosstt systemd[1]: rspamd.service: main process exited, code=exited, status=127/n/a
1 31 22:57:45 hhoosstt systemd[1]: Unit rspamd.service entered failed state.
1 31 22:57:45 hhoosstt systemd[1]: rspamd.service failed.
1 31 22:57:45 hhoosstt systemd[1]: rspamd.service holdoff time over, scheduling restart.
1 31 22:57:45 hhoosstt systemd[1]: Stopped rapid spam filtering system.
-- Subject: Unit rspamd.service has finished shutting down
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit rspamd.service has finished shutting down.
1 31 22:57:45 hhoosstt systemd[1]: Started rapid spam filtering system.
-- Subject: Unit rspamd.service has finished start-up
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit rspamd.service has finished starting up.
-- 
-- The start-up result is done.
1 31 22:57:45 hhoosstt rspamd[13949]: /usr/bin/rspamd: error while loading shared libraries: libsodium.so.23: cannot open shared object file: No such file or director
1 31 22:57:45 hhoosstt systemd[1]: rspamd.service: main process exited, code=exited, status=127/n/a
1 31 22:57:45 hhoosstt systemd[1]: Unit rspamd.service entered failed state.
1 31 22:57:45 hhoosstt systemd[1]: rspamd.service failed.
1 31 22:57:46 hhoosstt systemd[1]: rspamd.service holdoff time over, scheduling restart.
1 31 22:57:46 hhoosstt systemd[1]: Stopped rapid spam filtering system.
-- Subject: Unit rspamd.service has finished shutting down
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit rspamd.service has finished shutting down.
1 31 22:57:46 hhoosstt systemd[1]: Started rapid spam filtering system.
-- Subject: Unit rspamd.service has finished start-up
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit rspamd.service has finished starting up.
-- 
-- The start-up result is done.
1 31 22:57:46 hhoosstt systemd[1]: rspamd.service: main process exited, code=exited, status=127/n/a
1 31 22:57:46 hhoosstt rspamd[13975]: /usr/bin/rspamd: error while loading shared libraries: libsodium.so.23: cannot open shared object file: No such file or director
1 31 22:57:46 hhoosstt systemd[1]: Unit rspamd.service entered failed state.
1 31 22:57:46 hhoosstt systemd[1]: rspamd.service failed.
1 31 22:57:46 hhoosstt sshd[13866]: Invalid user test from 58.213.109.242 port 58286
1 31 22:57:46 hhoosstt sshd[13866]: input_userauth_request: invalid user test [preauth]
1 31 22:57:46 hhoosstt sshd[13866]: pam_unix(sshd:auth): check pass; user unknown
1 31 22:57:46 hhoosstt sshd[13866]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.213.109.242
1 31 22:57:46 hhoosstt systemd[1]: rspamd.service holdoff time over, scheduling restart.
1 31 22:57:46 hhoosstt systemd[1]: Stopped rapid spam filtering system.
-- Subject: Unit rspamd.service has finished shutting down
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit rspamd.service has finished shutting down.
1 31 22:57:46 hhoosstt systemd[1]: Started rapid spam filtering system.
-- Subject: Unit rspamd.service has finished start-up
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit rspamd.service has finished starting up.
-- 
-- The start-up result is done.
1 31 22:57:46 hhoosstt rspamd[13978]: /usr/bin/rspamd: error while loading shared libraries: libsodium.so.23: cannot open shared object file: No such file or director
1 31 22:57:46 hhoosstt systemd[1]: rspamd.service: main process exited, code=exited, status=127/n/a
1 31 22:57:46 hhoosstt systemd[1]: Unit rspamd.service entered failed state.
1 31 22:57:46 hhoosstt systemd[1]: rspamd.service failed.
1 31 22:57:46 hhoosstt systemd[1]: rspamd.service holdoff time over, scheduling restart.
1 31 22:57:46 hhoosstt systemd[1]: Stopped rapid spam filtering system.
-- Subject: Unit rspamd.service has finished shutting down
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit rspamd.service has finished shutting down.
1 31 22:57:46 hhoosstt systemd[1]: start request repeated too quickly for rspamd.service
1 31 22:57:46 hhoosstt systemd[1]: Failed to start rapid spam filtering system.
-- Subject: Unit rspamd.service has failed
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit rspamd.service has failed.
-- 
-- The result is failed.
1 31 22:57:46 hhoosstt systemd[1]: Unit rspamd.service entered failed state.
1 31 22:57:46 hhoosstt systemd[1]: rspamd.service failed.
1 31 22:57:46 hhoosstt sshd[13974]: Invalid user test from 58.213.109.242 port 37146
1 31 22:57:46 hhoosstt sshd[13974]: input_userauth_request: invalid user test [preauth]
1 31 22:57:46 hhoosstt sshd[13974]: pam_unix(sshd:auth): check pass; user unknown
1 31 22:57:46 hhoosstt sshd[13974]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.213.109.242
1 31 22:57:48 hhoosstt sshd[13866]: Failed password for invalid user test from 58.213.109.242 port 58286 ssh2
1 31 22:57:48 hhoosstt sshd[13866]: Connection closed by 58.213.109.242 port 58286 [preauth]
1 31 22:57:48 hhoosstt sshd[13974]: Failed password for invalid user test from 58.213.109.242 port 37146 ssh2
1 31 22:57:49 hhoosstt sshd[13974]: Connection closed by 58.213.109.242 port 37146 [preauth]
1 31 22:57:52 hhoosstt sshd[14045]: Invalid user git from 58.213.109.242 port 44238
1 31 22:57:52 hhoosstt sshd[14045]: input_userauth_request: invalid user git [preauth]
1 31 22:57:52 hhoosstt sshd[14045]: pam_unix(sshd:auth): check pass; user unknown
1 31 22:57:52 hhoosstt sshd[14045]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.213.109.242
1 31 22:57:52 hhoosstt sshd[12752]: Connection closed by 58.213.109.242 port 57742 [preauth]
1 31 22:57:54 hhoosstt sshd[14045]: Failed password for invalid user git from 58.213.109.242 port 44238 ssh2
1 31 22:57:54 hhoosstt sshd[14045]: Connection closed by 58.213.109.242 port 44238 [preauth]
1 31 22:57:56 hhoosstt polkitd[613]: Registered Authentication Agent for unix-process:14149:78089529 (system bus name :1.5791 [/usr/bin/pkttyagent --notify-fd 5 --fal
1 31 22:57:56 hhoosstt polkitd[613]: Unregistered Authentication Agent for unix-process:14149:78089529 (system bus name :1.5791, object path /org/freedesktop/PolicyKi
1 31 22:57:58 hhoosstt sshd[14189]: Invalid user git from 58.213.109.242 port 51330
1 31 22:57:58 hhoosstt sshd[14189]: input_userauth_request: invalid user git [preauth]
1 31 22:57:59 hhoosstt sshd[14189]: pam_unix(sshd:auth): check pass; user unknown
1 31 22:57:59 hhoosstt sshd[14189]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.213.109.242
1 31 22:58:00 hhoosstt polkitd[613]: Registered Authentication Agent for unix-process:14218:78089901 (system bus name :1.5792 [/usr/bin/pkttyagent --notify-fd 5 --fal
1 31 22:58:00 hhoosstt systemd[1]: Started rapid spam filtering system.
-- Subject: Unit rspamd.service has finished start-up
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit rspamd.service has finished starting up.
-- 
-- The start-up result is done.
1 31 22:58:00 hhoosstt polkitd[613]: Unregistered Authentication Agent for unix-process:14218:78089901 (system bus name :1.5792, object path /org/freedesktop/PolicyKi
1 31 22:58:00 hhoosstt rspamd[14224]: /usr/bin/rspamd: error while loading shared libraries: libsodium.so.23: cannot open shared object file: No such file or director
1 31 22:58:00 hhoosstt systemd[1]: rspamd.service: main process exited, code=exited, status=127/n/a
1 31 22:58:00 hhoosstt systemd[1]: Unit rspamd.service entered failed state.
1 31 22:58:00 hhoosstt systemd[1]: rspamd.service failed.
1 31 22:58:00 hhoosstt systemd[1]: rspamd.service holdoff time over, scheduling restart.
1 31 22:58:00 hhoosstt systemd[1]: Stopped rapid spam filtering system.
-- Subject: Unit rspamd.service has finished shutting down
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit rspamd.service has finished shutting down.
1 31 22:58:00 hhoosstt systemd[1]: Started rapid spam filtering system.
-- Subject: Unit rspamd.service has finished start-up
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit rspamd.service has finished starting up.
-- 
-- The start-up result is done.
1 31 22:58:00 hhoosstt rspamd[14226]: /usr/bin/rspamd: error while loading shared libraries: libsodium.so.23: cannot open shared object file: No such file or director
1 31 22:58:00 hhoosstt systemd[1]: rspamd.service: main process exited, code=exited, status=127/n/a
1 31 22:58:00 hhoosstt systemd[1]: Unit rspamd.service entered failed state.
1 31 22:58:00 hhoosstt systemd[1]: rspamd.service failed.
1 31 22:58:00 hhoosstt systemd[1]: rspamd.service holdoff time over, scheduling restart.
1 31 22:58:00 hhoosstt systemd[1]: Stopped rapid spam filtering system.
-- Subject: Unit rspamd.service has finished shutting down
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit rspamd.service has finished shutting down.
1 31 22:58:00 hhoosstt systemd[1]: Started rapid spam filtering system.
-- Subject: Unit rspamd.service has finished start-up
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit rspamd.service has finished starting up.
-- 
-- The start-up result is done.
1 31 22:58:00 hhoosstt rspamd[14237]: /usr/bin/rspamd: error while loading shared libraries: libsodium.so.23: cannot open shared object file: No such file or director
1 31 22:58:00 hhoosstt systemd[1]: rspamd.service: main process exited, code=exited, status=127/n/a
1 31 22:58:00 hhoosstt systemd[1]: Unit rspamd.service entered failed state.
1 31 22:58:00 hhoosstt systemd[1]: rspamd.service failed.
1 31 22:58:00 hhoosstt sshd[14189]: Failed password for invalid user git from 58.213.109.242 port 51330 ssh2
1 31 22:58:00 hhoosstt systemd[1]: rspamd.service holdoff time over, scheduling restart.
1 31 22:58:00 hhoosstt systemd[1]: Stopped rapid spam filtering system.
-- Subject: Unit rspamd.service has finished shutting down
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit rspamd.service has finished shutting down.
1 31 22:58:00 hhoosstt systemd[1]: Started rapid spam filtering system.
-- Subject: Unit rspamd.service has finished start-up
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit rspamd.service has finished starting up.
-- 
-- The start-up result is done.
1 31 22:58:00 hhoosstt rspamd[14242]: /usr/bin/rspamd: error while loading shared libraries: libsodium.so.23: cannot open shared object file: No such file or director
1 31 22:58:00 hhoosstt systemd[1]: rspamd.service: main process exited, code=exited, status=127/n/a
1 31 22:58:00 hhoosstt systemd[1]: Unit rspamd.service entered failed state.
1 31 22:58:00 hhoosstt systemd[1]: rspamd.service failed.
1 31 22:58:01 hhoosstt sshd[14208]: Invalid user guest from 58.213.109.242 port 58422
1 31 22:58:01 hhoosstt sshd[14208]: input_userauth_request: invalid user guest [preauth]
1 31 22:58:01 hhoosstt systemd[1]: rspamd.service holdoff time over, scheduling restart.
1 31 22:58:01 hhoosstt systemd[1]: Stopped rapid spam filtering system.
-- Subject: Unit rspamd.service has finished shutting down
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit rspamd.service has finished shutting down.
1 31 22:58:01 hhoosstt systemd[1]: Started rapid spam filtering system.
-- Subject: Unit rspamd.service has finished start-up
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit rspamd.service has finished starting up.
-- 
-- The start-up result is done.
1 31 22:58:01 hhoosstt rspamd[14249]: /usr/bin/rspamd: error while loading shared libraries: libsodium.so.23: cannot open shared object file: No such file or director
1 31 22:58:01 hhoosstt systemd[1]: rspamd.service: main process exited, code=exited, status=127/n/a
1 31 22:58:01 hhoosstt systemd[1]: Unit rspamd.service entered failed state.
1 31 22:58:01 hhoosstt systemd[1]: rspamd.service failed.
1 31 22:58:01 hhoosstt systemd[1]: rspamd.service holdoff time over, scheduling restart.
1 31 22:58:01 hhoosstt systemd[1]: Stopped rapid spam filtering system.
-- Subject: Unit rspamd.service has finished shutting down
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit rspamd.service has finished shutting down.
1 31 22:58:01 hhoosstt systemd[1]: start request repeated too quickly for rspamd.service
1 31 22:58:01 hhoosstt systemd[1]: Failed to start rapid spam filtering system.
-- Subject: Unit rspamd.service has failed
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit rspamd.service has failed.
-- 
-- The result is failed.
1 31 22:58:01 hhoosstt systemd[1]: Unit rspamd.service entered failed state.
1 31 22:58:01 hhoosstt systemd[1]: rspamd.service failed.
1 31 22:58:02 hhoosstt sshd[14208]: pam_unix(sshd:auth): check pass; user unknown
1 31 22:58:02 hhoosstt sshd[14208]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.213.109.242
1 31 22:58:02 hhoosstt sshd[14189]: Connection closed by 58.213.109.242 port 51330 [preauth]
1 31 22:58:04 hhoosstt sshd[14208]: Failed password for invalid user guest from 58.213.109.242 port 58422 ssh2
1 31 22:58:04 hhoosstt sshd[14208]: Connection closed by 58.213.109.242 port 58422 [preauth]
1 31 22:58:07 hhoosstt sshd[14318]: Invalid user user from 165.22.107.2 port 47000
1 31 22:58:07 hhoosstt sshd[14318]: input_userauth_request: invalid user user [preauth]
1 31 22:58:07 hhoosstt sshd[14318]: pam_unix(sshd:auth): check pass; user unknown
1 31 22:58:07 hhoosstt sshd[14318]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.107.2
1 31 22:58:08 hhoosstt sshd[14318]: Failed password for invalid user user from 165.22.107.2 port 47000 ssh2
1 31 22:58:09 hhoosstt sshd[14318]: Received disconnect from 165.22.107.2 port 47000:11: Bye Bye [preauth]
1 31 22:58:09 hhoosstt sshd[14318]: Disconnected from 165.22.107.2 port 47000 [preauth]
1 31 22:58:17 hhoosstt systemd[1]: Started rapid spam filtering system.
-- Subject: Unit rspamd.service has finished start-up
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit rspamd.service has finished starting up.
-- 
-- The start-up result is done.
1 31 22:58:17 hhoosstt systemd[1]: Stopping Postfix Mail Transport Agent...
-- Subject: Unit postfix.service has begun shutting down
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit postfix.service has begun shutting down.
1 31 22:58:17 hhoosstt systemd[1]: Stopping Dovecot IMAP/POP3 email server...
-- Subject: Unit dovecot.service has begun shutting down
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit dovecot.service has begun shutting down.
1 31 22:58:17 hhoosstt rspamd[14512]: /usr/bin/rspamd: error while loading shared libraries: libsodium.so.23: cannot open shared object file: No such file or director
1 31 22:58:17 hhoosstt systemd[1]: rspamd.service: main process exited, code=exited, status=127/n/a
1 31 22:58:17 hhoosstt systemd[1]: Unit rspamd.service entered failed state.
1 31 22:58:17 hhoosstt systemd[1]: rspamd.service failed.
1 31 22:58:17 hhoosstt sshd[14500]: Invalid user git from 1.214.245.27 port 52116
1 31 22:58:17 hhoosstt sshd[14500]: input_userauth_request: invalid user git [preauth]
1 31 22:58:17 hhoosstt sshd[14500]: pam_unix(sshd:auth): check pass; user unknown
1 31 22:58:17 hhoosstt sshd[14500]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.214.245.27
1 31 22:58:17 hhoosstt postfix/postfix-script[14524]: stopping the Postfix mail system
1 31 22:58:17 hhoosstt postfix/master[9325]: terminating on signal 15
1 31 22:58:17 hhoosstt systemd[1]: Stopped Postfix Mail Transport Agent.
-- Subject: Unit postfix.service has finished shutting down
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit postfix.service has finished shutting down.
1 31 22:58:17 hhoosstt systemd[1]: rspamd.service holdoff time over, scheduling restart.
1 31 22:58:17 hhoosstt systemd[1]: Stopped rapid spam filtering system.
-- Subject: Unit rspamd.service has finished shutting down
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit rspamd.service has finished shutting down.
1 31 22:58:17 hhoosstt systemd[1]: Started rapid spam filtering system.
-- Subject: Unit rspamd.service has finished start-up
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit rspamd.service has finished starting up.
-- 
-- The start-up result is done.
1 31 22:58:17 hhoosstt systemd[1]: Starting Postfix Mail Transport Agent...
-- Subject: Unit postfix.service has begun start-up
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit postfix.service has begun starting up.
1 31 22:58:17 hhoosstt rspamd[14529]: /usr/bin/rspamd: error while loading shared libraries: libsodium.so.23: cannot open shared object file: No such file or director
1 31 22:58:17 hhoosstt systemd[1]: rspamd.service: main process exited, code=exited, status=127/n/a
1 31 22:58:17 hhoosstt systemd[1]: Unit rspamd.service entered failed state.
1 31 22:58:17 hhoosstt systemd[1]: rspamd.service failed.
1 31 22:58:17 hhoosstt dovecot[31966]: master: Warning: Killed with signal 15 (by pid=14516 uid=0 code=kill)
1 31 22:58:17 hhoosstt systemd[1]: rspamd.service holdoff time over, scheduling restart.
1 31 22:58:17 hhoosstt systemd[1]: Stopped rapid spam filtering system.
-- Subject: Unit rspamd.service has finished shutting down
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit rspamd.service has finished shutting down.
1 31 22:58:17 hhoosstt systemd[1]: Started rapid spam filtering system.
-- Subject: Unit rspamd.service has finished start-up
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit rspamd.service has finished starting up.
-- 
-- The start-up result is done.
1 31 22:58:17 hhoosstt rspamd[14556]: /usr/bin/rspamd: error while loading shared libraries: libsodium.so.23: cannot open shared object file: No such file or director
1 31 22:58:17 hhoosstt systemd[1]: rspamd.service: main process exited, code=exited, status=127/n/a
1 31 22:58:17 hhoosstt systemd[1]: Unit rspamd.service entered failed state.
1 31 22:58:17 hhoosstt systemd[1]: rspamd.service failed.
1 31 22:58:17 hhoosstt systemd[1]: rspamd.service holdoff time over, scheduling restart.
1 31 22:58:17 hhoosstt systemd[1]: Stopped rapid spam filtering system.
-- Subject: Unit rspamd.service has finished shutting down
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit rspamd.service has finished shutting down.
1 31 22:58:17 hhoosstt systemd[1]: Started rapid spam filtering system.
-- Subject: Unit rspamd.service has finished start-up
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit rspamd.service has finished starting up.
-- 
-- The start-up result is done.
1 31 22:58:17 hhoosstt rspamd[14577]: /usr/bin/rspamd: error while loading shared libraries: libsodium.so.23: cannot open shared object file: No such file or director
1 31 22:58:17 hhoosstt systemd[1]: rspamd.service: main process exited, code=exited, status=127/n/a
1 31 22:58:17 hhoosstt systemd[1]: Unit rspamd.service entered failed state.
1 31 22:58:17 hhoosstt systemd[1]: rspamd.service failed.
1 31 22:58:18 hhoosstt systemd[1]: Stopped Dovecot IMAP/POP3 email server.
-- Subject: Unit dovecot.service has finished shutting down
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit dovecot.service has finished shutting down.
1 31 22:58:18 hhoosstt systemd[1]: Starting Dovecot IMAP/POP3 email server...
-- Subject: Unit dovecot.service has begun start-up
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit dovecot.service has begun starting up.
1 31 22:58:18 hhoosstt systemd[1]: rspamd.service holdoff time over, scheduling restart.
1 31 22:58:18 hhoosstt systemd[1]: Stopped rapid spam filtering system.
-- Subject: Unit rspamd.service has finished shutting down
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit rspamd.service has finished shutting down.
1 31 22:58:18 hhoosstt systemd[1]: Started rapid spam filtering system.
-- Subject: Unit rspamd.service has finished start-up
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit rspamd.service has finished starting up.
-- 
-- The start-up result is done.
1 31 22:58:18 hhoosstt rspamd[14588]: /usr/bin/rspamd: error while loading shared libraries: libsodium.so.23: cannot open shared object file: No such file or director
1 31 22:58:18 hhoosstt systemd[1]: rspamd.service: main process exited, code=exited, status=127/n/a
1 31 22:58:18 hhoosstt systemd[1]: Unit rspamd.service entered failed state.
1 31 22:58:18 hhoosstt systemd[1]: rspamd.service failed.
1 31 22:58:18 hhoosstt systemd[1]: rspamd.service holdoff time over, scheduling restart.
1 31 22:58:18 hhoosstt systemd[1]: Stopped rapid spam filtering system.
-- Subject: Unit rspamd.service has finished shutting down
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit rspamd.service has finished shutting down.
1 31 22:58:18 hhoosstt systemd[1]: start request repeated too quickly for rspamd.service
1 31 22:58:18 hhoosstt systemd[1]: Failed to start rapid spam filtering system.
-- Subject: Unit rspamd.service has failed
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit rspamd.service has failed.
-- 
-- The result is failed.
1 31 22:58:18 hhoosstt systemd[1]: Unit rspamd.service entered failed state.
1 31 22:58:18 hhoosstt systemd[1]: rspamd.service failed.
1 31 22:58:18 hhoosstt systemd[1]: Can't open PID file /var/run/dovecot/master.pid (yet?) after start: No such file or directory
1 31 22:58:18 hhoosstt dovecot[14604]: master: Dovecot v2.2.36 (1f10bfa63) starting up for imap, pop3, lmtp (core dumps disabled)
1 31 22:58:18 hhoosstt systemd[1]: Started Dovecot IMAP/POP3 email server.
-- Subject: Unit dovecot.service has finished start-up
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit dovecot.service has finished starting up.
-- 
-- The start-up result is done.
1 31 22:58:18 hhoosstt postfix/postfix-script[14640]: starting the Postfix mail system
1 31 22:58:18 hhoosstt postfix/master[14642]: daemon started -- version 3.4.7, configuration /etc/postfix
1 31 22:58:18 hhoosstt systemd[1]: Started Postfix Mail Transport Agent.
-- Subject: Unit postfix.service has finished start-up
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit postfix.service has finished starting up.
-- 
-- The start-up result is done.
1 31 22:58:19 hhoosstt sshd[14500]: Failed password for invalid user git from 1.214.245.27 port 52116 ssh2
1 31 22:58:19 hhoosstt sshd[14500]: Received disconnect from 1.214.245.27 port 52116:11: Bye Bye [preauth]
1 31 22:58:19 hhoosstt sshd[14500]: Disconnected from 1.214.245.27 port 52116 [preauth]
1 31 22:58:23 hhoosstt sshd[14404]: Invalid user ubuntu from 58.213.109.242 port 44374
1 31 22:58:23 hhoosstt sshd[14404]: input_userauth_request: invalid user ubuntu [preauth]
1 31 22:58:23 hhoosstt sshd[14404]: pam_unix(sshd:auth): check pass; user unknown
1 31 22:58:23 hhoosstt sshd[14404]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.213.109.242
1 31 22:58:25 hhoosstt sshd[14353]: Invalid user ubuntu from 58.213.109.242 port 37282
1 31 22:58:25 hhoosstt sshd[14353]: input_userauth_request: invalid user ubuntu [preauth]
1 31 22:58:25 hhoosstt sshd[14353]: pam_unix(sshd:auth): check pass; user unknown
1 31 22:58:25 hhoosstt sshd[14353]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.213.109.242
1 31 22:58:25 hhoosstt sshd[14404]: Failed password for invalid user ubuntu from 58.213.109.242 port 44374 ssh2
1 31 22:58:26 hhoosstt sshd[14404]: Connection closed by 58.213.109.242 port 44374 [preauth]
1 31 22:58:26 hhoosstt sshd[14353]: Failed password for invalid user ubuntu from 58.213.109.242 port 37282 ssh2
1 31 22:58:27 hhoosstt sshd[14353]: Connection closed by 58.213.109.242 port 37282 [preauth]
1 31 22:58:27 hhoosstt sshd[14443]: Invalid user guest from 58.213.109.242 port 51466
1 31 22:58:27 hhoosstt sshd[14443]: input_userauth_request: invalid user guest [preauth]
1 31 22:58:28 hhoosstt sshd[14443]: pam_unix(sshd:auth): check pass; user unknown
1 31 22:58:28 hhoosstt sshd[14443]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.213.109.242
1 31 22:58:29 hhoosstt polkitd[613]: Registered Authentication Agent for unix-process:14819:78092868 (system bus name :1.5793 [/usr/bin/pkttyagent --notify-fd 5 --fal
1 31 22:58:29 hhoosstt systemd[1]: Started rapid spam filtering system.
-- Subject: Unit rspamd.service has finished start-up
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit rspamd.service has finished starting up.
-- 
-- The start-up result is done.
1 31 22:58:29 hhoosstt polkitd[613]: Unregistered Authentication Agent for unix-process:14819:78092868 (system bus name :1.5793, object path /org/freedesktop/PolicyKi
1 31 22:58:29 hhoosstt rspamd[14825]: /usr/bin/rspamd: error while loading shared libraries: libsodium.so.23: cannot open shared object file: No such file or director
1 31 22:58:29 hhoosstt systemd[1]: rspamd.service: main process exited, code=exited, status=127/n/a
1 31 22:58:29 hhoosstt systemd[1]: Unit rspamd.service entered failed state.
1 31 22:58:29 hhoosstt systemd[1]: rspamd.service failed.
1 31 22:58:29 hhoosstt sshd[14443]: Failed password for invalid user guest from 58.213.109.242 port 51466 ssh2
1 31 22:58:30 hhoosstt sshd[14443]: Connection closed by 58.213.109.242 port 51466 [preauth]
1 31 22:58:30 hhoosstt systemd[1]: rspamd.service holdoff time over, scheduling restart.
1 31 22:58:30 hhoosstt systemd[1]: Stopped rapid spam filtering system.
-- Subject: Unit rspamd.service has finished shutting down
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit rspamd.service has finished shutting down.
1 31 22:58:30 hhoosstt systemd[1]: Started rapid spam filtering system.
-- Subject: Unit rspamd.service has finished start-up
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit rspamd.service has finished starting up.
-- 
-- The start-up result is done.
1 31 22:58:30 hhoosstt rspamd[14831]: /usr/bin/rspamd: error while loading shared libraries: libsodium.so.23: cannot open shared object file: No such file or director
1 31 22:58:30 hhoosstt systemd[1]: rspamd.service: main process exited, code=exited, status=127/n/a
1 31 22:58:30 hhoosstt systemd[1]: Unit rspamd.service entered failed state.
1 31 22:58:30 hhoosstt systemd[1]: rspamd.service failed.
1 31 22:58:30 hhoosstt systemd[1]: rspamd.service holdoff time over, scheduling restart.
1 31 22:58:30 hhoosstt systemd[1]: Stopped rapid spam filtering system.
-- Subject: Unit rspamd.service has finished shutting down
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit rspamd.service has finished shutting down.
1 31 22:58:30 hhoosstt systemd[1]: Started rapid spam filtering system.
-- Subject: Unit rspamd.service has finished start-up
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit rspamd.service has finished starting up.
-- 
-- The start-up result is done.
1 31 22:58:30 hhoosstt rspamd[14842]: /usr/bin/rspamd: error while loading shared libraries: libsodium.so.23: cannot open shared object file: No such file or director
1 31 22:58:30 hhoosstt systemd[1]: rspamd.service: main process exited, code=exited, status=127/n/a
1 31 22:58:30 hhoosstt systemd[1]: Unit rspamd.service entered failed state.
1 31 22:58:30 hhoosstt systemd[1]: rspamd.service failed.
1 31 22:58:30 hhoosstt systemd[1]: rspamd.service holdoff time over, scheduling restart.
1 31 22:58:30 hhoosstt systemd[1]: Stopped rapid spam filtering system.
-- Subject: Unit rspamd.service has finished shutting down
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit rspamd.service has finished shutting down.
1 31 22:58:30 hhoosstt systemd[1]: Started rapid spam filtering system.
-- Subject: Unit rspamd.service has finished start-up
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit rspamd.service has finished starting up.
-- 
-- The start-up result is done.
1 31 22:58:30 hhoosstt rspamd[14844]: /usr/bin/rspamd: error while loading shared libraries: libsodium.so.23: cannot open shared object file: No such file or director
1 31 22:58:30 hhoosstt systemd[1]: rspamd.service: main process exited, code=exited, status=127/n/a
1 31 22:58:30 hhoosstt systemd[1]: Unit rspamd.service entered failed state.
1 31 22:58:30 hhoosstt systemd[1]: rspamd.service failed.
1 31 22:58:30 hhoosstt systemd[1]: rspamd.service holdoff time over, scheduling restart.
1 31 22:58:30 hhoosstt systemd[1]: Stopped rapid spam filtering system.
-- Subject: Unit rspamd.service has finished shutting down
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit rspamd.service has finished shutting down.
1 31 22:58:30 hhoosstt systemd[1]: Started rapid spam filtering system.
-- Subject: Unit rspamd.service has finished start-up
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit rspamd.service has finished starting up.
-- 
-- The start-up result is done.
1 31 22:58:30 hhoosstt rspamd[14846]: /usr/bin/rspamd: error while loading shared libraries: libsodium.so.23: cannot open shared object file: No such file or director
1 31 22:58:30 hhoosstt systemd[1]: rspamd.service: main process exited, code=exited, status=127/n/a
1 31 22:58:30 hhoosstt systemd[1]: Unit rspamd.service entered failed state.
1 31 22:58:30 hhoosstt systemd[1]: rspamd.service failed.
1 31 22:58:31 hhoosstt systemd[1]: rspamd.service holdoff time over, scheduling restart.
1 31 22:58:31 hhoosstt systemd[1]: Stopped rapid spam filtering system.
-- Subject: Unit rspamd.service has finished shutting down
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit rspamd.service has finished shutting down.
1 31 22:58:31 hhoosstt systemd[1]: start request repeated too quickly for rspamd.service
1 31 22:58:31 hhoosstt systemd[1]: Failed to start rapid spam filtering system.
-- Subject: Unit rspamd.service has failed
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit rspamd.service has failed.
-- 
-- The result is failed.
1 31 22:58:31 hhoosstt systemd[1]: Unit rspamd.service entered failed state.
1 31 22:58:31 hhoosstt systemd[1]: rspamd.service failed.
1 31 22:58:32 hhoosstt sshd[14770]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.213.109.242  user=root
1 31 22:58:32 hhoosstt sshd[14770]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
1 31 22:58:33 hhoosstt sshd[14770]: Failed password for root from 58.213.109.242 port 58558 ssh2
1 31 22:58:33 hhoosstt sshd[14770]: Connection closed by 58.213.109.242 port 58558 [preauth]
1 31 22:58:35 hhoosstt polkitd[613]: Registered Authentication Agent for unix-process:14943:78093446 (system bus name :1.5794 [/usr/bin/pkttyagent --notify-fd 5 --fal
1 31 22:58:35 hhoosstt systemd[1]: start request repeated too quickly for rspamd.service
1 31 22:58:35 hhoosstt systemd[1]: Failed to start rapid spam filtering system.
-- Subject: Unit rspamd.service has failed
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit rspamd.service has failed.
-- 
-- The result is failed.
1 31 22:58:35 hhoosstt systemd[1]: rspamd.service failed.
1 31 22:58:35 hhoosstt polkitd[613]: Unregistered Authentication Agent for unix-process:14943:78093446 (system bus name :1.5794, object path /org/freedesktop/PolicyKi
1 31 22:58:38 hhoosstt polkitd[613]: Registered Authentication Agent for unix-process:14991:78093710 (system bus name :1.5795 [/usr/bin/pkttyagent --notify-fd 5 --fal
1 31 22:58:38 hhoosstt systemd[1]: start request repeated too quickly for rspamd.service
1 31 22:58:38 hhoosstt systemd[1]: Failed to start rapid spam filtering system.
-- Subject: Unit rspamd.service has failed
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit rspamd.service has failed.
-- 
-- The result is failed.
1 31 22:58:38 hhoosstt systemd[1]: rspamd.service failed.
1 31 22:58:38 hhoosstt polkitd[613]: Unregistered Authentication Agent for unix-process:14991:78093710 (system bus name :1.5795, object path /org/freedesktop/PolicyKi
1 31 22:58:39 hhoosstt polkitd[613]: Registered Authentication Agent for unix-process:15006:78093794 (system bus name :1.5796 [/usr/bin/pkttyagent --notify-fd 5 --fal
1 31 22:58:39 hhoosstt systemd[1]: start request repeated too quickly for rspamd.service
1 31 22:58:39 hhoosstt systemd[1]: Failed to start rapid spam filtering system.
-- Subject: Unit rspamd.service has failed
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit rspamd.service has failed.
-- 
-- The result is failed.
1 31 22:58:39 hhoosstt systemd[1]: rspamd.service failed.
1 31 22:58:39 hhoosstt polkitd[613]: Unregistered Authentication Agent for unix-process:15006:78093794 (system bus name :1.5796, object path /org/freedesktop/PolicyKi
1 31 22:58:40 hhoosstt polkitd[613]: Registered Authentication Agent for unix-process:15025:78093882 (system bus name :1.5797 [/usr/bin/pkttyagent --notify-fd 5 --fal
1 31 22:58:40 hhoosstt systemd[1]: Started rapid spam filtering system.
-- Subject: Unit rspamd.service has finished start-up
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit rspamd.service has finished starting up.
-- 
-- The start-up result is done.
1 31 22:58:40 hhoosstt rspamd[15031]: /usr/bin/rspamd: error while loading shared libraries: libsodium.so.23: cannot open shared object file: No such file or director
1 31 22:58:40 hhoosstt systemd[1]: rspamd.service: main process exited, code=exited, status=127/n/a
1 31 22:58:40 hhoosstt polkitd[613]: Unregistered Authentication Agent for unix-process:15025:78093882 (system bus name :1.5797, object path /org/freedesktop/PolicyKi
1 31 22:58:40 hhoosstt systemd[1]: Unit rspamd.service entered failed state.
1 31 22:58:40 hhoosstt systemd[1]: rspamd.service failed.
1 31 22:58:40 hhoosstt systemd[1]: rspamd.service holdoff time over, scheduling restart.
1 31 22:58:40 hhoosstt systemd[1]: Stopped rapid spam filtering system.
-- Subject: Unit rspamd.service has finished shutting down
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit rspamd.service has finished shutting down.
1 31 22:58:40 hhoosstt systemd[1]: Started rapid spam filtering system.
-- Subject: Unit rspamd.service has finished start-up
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit rspamd.service has finished starting up.
-- 
-- The start-up result is done.
1 31 22:58:40 hhoosstt rspamd[15044]: /usr/bin/rspamd: error while loading shared libraries: libsodium.so.23: cannot open shared object file: No such file or director
1 31 22:58:40 hhoosstt systemd[1]: rspamd.service: main process exited, code=exited, status=127/n/a
1 31 22:58:40 hhoosstt systemd[1]: Unit rspamd.service entered failed state.
1 31 22:58:40 hhoosstt systemd[1]: rspamd.service failed.
1 31 22:58:40 hhoosstt systemd[1]: rspamd.service holdoff time over, scheduling restart.
1 31 22:58:40 hhoosstt systemd[1]: Stopped rapid spam filtering system.
-- Subject: Unit rspamd.service has finished shutting down
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit rspamd.service has finished shutting down.
1 31 22:58:40 hhoosstt systemd[1]: Started rapid spam filtering system.
-- Subject: Unit rspamd.service has finished start-up
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit rspamd.service has finished starting up.
-- 
-- The start-up result is done.
1 31 22:58:40 hhoosstt rspamd[15049]: /usr/bin/rspamd: error while loading shared libraries: libsodium.so.23: cannot open shared object file: No such file or director
1 31 22:58:40 hhoosstt systemd[1]: rspamd.service: main process exited, code=exited, status=127/n/a
1 31 22:58:40 hhoosstt systemd[1]: Unit rspamd.service entered failed state.
1 31 22:58:40 hhoosstt systemd[1]: rspamd.service failed.
1 31 22:58:40 hhoosstt polkitd[613]: Registered Authentication Agent for unix-process:15046:78093932 (system bus name :1.5798 [/usr/bin/pkttyagent --notify-fd 5 --fal
1 31 22:58:40 hhoosstt systemd[1]: rspamd.service holdoff time over, scheduling restart.
1 31 22:58:40 hhoosstt systemd[1]: Stopped rapid spam filtering system.
-- Subject: Unit rspamd.service has finished shutting down
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit rspamd.service has finished shutting down.
1 31 22:58:40 hhoosstt systemd[1]: Started rapid spam filtering system.
-- Subject: Unit rspamd.service has finished start-up
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit rspamd.service has finished starting up.
-- 
-- The start-up result is done.
1 31 22:58:40 hhoosstt polkitd[613]: Unregistered Authentication Agent for unix-process:15046:78093932 (system bus name :1.5798, object path /org/freedesktop/PolicyKi
1 31 22:58:40 hhoosstt rspamd[15067]: /usr/bin/rspamd: error while loading shared libraries: libsodium.so.23: cannot open shared object file: No such file or director
1 31 22:58:40 hhoosstt systemd[1]: rspamd.service: main process exited, code=exited, status=127/n/a
1 31 22:58:40 hhoosstt systemd[1]: Unit rspamd.service entered failed state.
1 31 22:58:40 hhoosstt systemd[1]: rspamd.service failed.
1 31 22:58:40 hhoosstt polkitd[613]: Registered Authentication Agent for unix-process:15068:78093969 (system bus name :1.5799 [/usr/bin/pkttyagent --notify-fd 5 --fal
1 31 22:58:41 hhoosstt systemd[1]: rspamd.service holdoff time over, scheduling restart.
1 31 22:58:41 hhoosstt systemd[1]: Stopped rapid spam filtering system.
-- Subject: Unit rspamd.service has finished shutting down
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit rspamd.service has finished shutting down.
1 31 22:58:41 hhoosstt systemd[1]: Started rapid spam filtering system.
-- Subject: Unit rspamd.service has finished start-up
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit rspamd.service has finished starting up.
-- 
-- The start-up result is done.
1 31 22:58:41 hhoosstt polkitd[613]: Unregistered Authentication Agent for unix-process:15068:78093969 (system bus name :1.5799, object path /org/freedesktop/PolicyKi
1 31 22:58:41 hhoosstt rspamd[15075]: /usr/bin/rspamd: error while loading shared libraries: libsodium.so.23: cannot open shared object file: No such file or director
1 31 22:58:41 hhoosstt systemd[1]: rspamd.service: main process exited, code=exited, status=127/n/a
1 31 22:58:41 hhoosstt systemd[1]: Unit rspamd.service entered failed state.
1 31 22:58:41 hhoosstt systemd[1]: rspamd.service failed.
1 31 22:58:41 hhoosstt systemd[1]: rspamd.service holdoff time over, scheduling restart.
1 31 22:58:41 hhoosstt systemd[1]: Stopped rapid spam filtering system.
-- Subject: Unit rspamd.service has finished shutting down
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit rspamd.service has finished shutting down.
1 31 22:58:41 hhoosstt systemd[1]: start request repeated too quickly for rspamd.service
1 31 22:58:41 hhoosstt systemd[1]: Failed to start rapid spam filtering system.
-- Subject: Unit rspamd.service has failed
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit rspamd.service has failed.
-- 
-- The result is failed.
1 31 22:58:41 hhoosstt systemd[1]: Unit rspamd.service entered failed state.
1 31 22:58:41 hhoosstt systemd[1]: rspamd.service failed.
1 31 22:58:44 hhoosstt sshd[13019]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.213.109.242  user=root
1 31 22:58:44 hhoosstt sshd[13019]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
1 31 22:58:45 hhoosstt sshd[13019]: Failed password for root from 58.213.109.242 port 57878 ssh2
1 31 22:58:45 hhoosstt sshd[13019]: Connection closed by 58.213.109.242 port 57878 [preauth]
1 31 22:58:55 hhoosstt sshd[13251]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.213.109.242  user=root
1 31 22:58:55 hhoosstt sshd[13251]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
1 31 22:58:57 hhoosstt sshd[13251]: Failed password for root from 58.213.109.242 port 50922 ssh2
1 31 22:58:57 hhoosstt sshd[13251]: Connection closed by 58.213.109.242 port 50922 [preauth]
1 31 22:59:36 hhoosstt sshd[15944]: Address 107.173.251.36 maps to selinozoglu.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!
1 31 22:59:36 hhoosstt sshd[15944]: Invalid user test from 107.173.251.36 port 49658
1 31 22:59:36 hhoosstt sshd[15944]: input_userauth_request: invalid user test [preauth]
1 31 22:59:36 hhoosstt sshd[15944]: pam_unix(sshd:auth): check pass; user unknown
1 31 22:59:36 hhoosstt sshd[15944]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.173.251.36
1 31 22:59:38 hhoosstt sshd[15944]: Failed password for invalid user test from 107.173.251.36 port 49658 ssh2
1 31 22:59:38 hhoosstt sshd[15944]: Received disconnect from 107.173.251.36 port 49658:11: Bye Bye [preauth]
1 31 22:59:38 hhoosstt sshd[15944]: Disconnected from 107.173.251.36 port 49658 [preauth]
1 31 23:00:01 hhoosstt systemd[1]: Started Session 2849 of user root.
-- Subject: Unit session-2849.scope has finished start-up
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit session-2849.scope has finished starting up.
-- 
-- The start-up result is done.
1 31 23:00:01 hhoosstt CROND[16347]: (root) CMD (flock -xn "/var/log/oneav/cron.lock" -c '/opt/threatbook/OneAV/oneav/script/install/oneav_service_monitor.sh')
lines 1505-1530/1530 (END)
