=68.183.217.18 terminal=ssh res=failed' type=USER_AUTH msg=audit(1610010690.962:123543): pid=23857 uid=0 auid=4294967295 ses=4294967295 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=68.183.217.18 terminal=ssh res=failed' type=CRYPTO_KEY_USER msg=audit(1610010692.116:123544): pid=23857 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=SHA256:95:1e:28:84:7d:63:70:4a:fd:b0:26:24:2a:07:f7:72:9a:51:f3:58:3f:93:18:8f:09:fb:c2:19:aa:b7:76:f5 direction=? spid=23858 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' type=CRYPTO_KEY_USER msg=audit(1610010692.116:123545): pid=23857 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=session fp=? direction=both spid=23858 suid=74 rport=49106 laddr=116.206.94.247 lport=22 exe="/usr/sbin/sshd" hostname=? addr=68.183.217.18 terminal=? res=success' type=CRYPTO_KEY_USER msg=audit(1610010692.118:123546): pid=23857 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=SHA256:2d:da:ee:97:db:04:9f:eb:1a:32:fa:0b:c6:ad:e5:48:56:48:21:80:8c:c1:df:11:92:f8:da:bb:e5:90:bc:ba direction=? spid=23857 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' type=CRYPTO_KEY_USER msg=audit(1610010692.119:123547): pid=23857 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=SHA256:78:c3:00:d1:4c:e1:64:f7:47:67:bf:72:c6:59:9b:6a:50:5b:d7:58:74:b7:88:74:d9:e2:d9:40:75:db:e2:3a direction=? spid=23857 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' type=CRYPTO_KEY_USER msg=audit(1610010692.119:123548): pid=23857 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=SHA256:95:1e:28:84:7d:63:70:4a:fd:b0:26:24:2a:07:f7:72:9a:51:f3:58:3f:93:18:8f:09:fb:c2:19:aa:b7:76:f5 direction=? spid=23857 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' type=USER_LOGIN msg=audit(1610010692.119:123549): pid=23857 uid=0 auid=4294967295 ses=4294967295 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=68.183.217.18 terminal=ssh res=failed' type=CRYPTO_KEY_USER msg=audit(1610010838.142:123550): pid=23993 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=SHA256:2d:da:ee:97:db:04:9f:eb:1a:32:fa:0b:c6:ad:e5:48:56:48:21:80:8c:c1:df:11:92:f8:da:bb:e5:90:bc:ba direction=? spid=23993 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' type=CRYPTO_KEY_USER msg=audit(1610010838.143:123551): pid=23993 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=SHA256:78:c3:00:d1:4c:e1:64:f7:47:67:bf:72:c6:59:9b:6a:50:5b:d7:58:74:b7:88:74:d9:e2:d9:40:75:db:e2:3a direction=? spid=23993 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' type=CRYPTO_KEY_USER msg=audit(1610010838.143:123552): pid=23993 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=SHA256:95:1e:28:84:7d:63:70:4a:fd:b0:26:24:2a:07:f7:72:9a:51:f3:58:3f:93:18:8f:09:fb:c2:19:aa:b7:76:f5 direction=? spid=23993 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' type=CRYPTO_SESSION msg=audit(1610010838.500:123553): pid=23992 uid=0 auid=4294967295 ses=4294967295 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=diffie-hellman-group-exchange-sha256 spid=23993 suid=74 rport=48910 laddr=116.206.94.247 lport=22 exe="/usr/sbin/sshd" hostname=? addr=68.183.217.18 terminal=? res=success' type=CRYPTO_SESSION msg=audit(1610010838.500:123554): pid=23992 uid=0 auid=4294967295 ses=4294967295 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=diffie-hellman-group-exchange-sha256 spid=23993 suid=74 rport=48910 laddr=116.206.94.247 lport=22 exe="/usr/sbin/sshd" hostname=? addr=68.183.217.18 terminal=? res=success' type=USER_AUTH msg=audit(1610010840.282:123555): pid=23992 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=68.183.217.18 addr=68.183.217.18 terminal=ssh res=failed' type=USER_AUTH msg=audit(1610010842.251:123556): pid=23992 uid=0 auid=4294967295 ses=4294967295 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=68.183.217.18 terminal=ssh res=failed' type=CRYPTO_KEY_USER msg=audit(1610010842.696:123557): pid=23992 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=SHA256:95:1e:28:84:7d:63:70:4a:fd:b0:26:24:2a:07:f7:72:9a:51:f3:58:3f:93:18:8f:09:fb:c2:19:aa:b7:76:f5 direction=? spid=23993 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' type=CRYPTO_KEY_USER msg=audit(1610010842.696:123558): pid=23992 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=session fp=? direction=both spid=23993 suid=74 rport=48910 laddr=116.206.94.247 lport=22 exe="/usr/sbin/sshd" hostname=? addr=68.183.217.18 terminal=? res=success' type=CRYPTO_KEY_USER msg=audit(1610010842.698:123559): pid=23992 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=SHA256:2d:da:ee:97:db:04:9f:eb:1a:32:fa:0b:c6:ad:e5:48:56:48:21:80:8c:c1:df:11:92:f8:da:bb:e5:90:bc:ba direction=? spid=23992 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' type=CRYPTO_KEY_USER msg=audit(1610010842.699:123560): pid=23992 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=SHA256:78:c3:00:d1:4c:e1:64:f7:47:67:bf:72:c6:59:9b:6a:50:5b:d7:58:74:b7:88:74:d9:e2:d9:40:75:db:e2:3a direction=? spid=23992 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' type=CRYPTO_KEY_USER msg=audit(1610010842.699:123561): pid=23992 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=SHA256:95:1e:28:84:7d:63:70:4a:fd:b0:26:24:2a:07:f7:72:9a:51:f3:58:3f:93:18:8f:09:fb:c2:19:aa:b7:76:f5 direction=? spid=23992 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' type=USER_LOGIN msg=audit(1610010842.699:123562): pid=23992 uid=0 auid=4294967295 ses=4294967295 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=68.183.217.18 terminal=ssh res=failed' type=CRYPTO_KEY_USER msg=audit(1610010960.517:123563): pid=24099 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=SHA256:2d:da:ee:97:db:04:9f:eb:1a:32:fa:0b:c6:ad:e5:48:56:48:21:80:8c:c1:df:11:92:f8:da:bb:e5:90:bc:ba direction=? spid=24099 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' type=CRYPTO_KEY_USER msg=audit(1610010960.518:123564): pid=24099 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=SHA256:78:c3:00:d1:4c:e1:64:f7:47:67:bf:72:c6:59:9b:6a:50:5b:d7:58:74:b7:88:74:d9:e2:d9:40:75:db:e2:3a direction=? spid=24099 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' type=CRYPTO_KEY_USER msg=audit(1610010960.518:123565): pid=24099 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=SHA256:95:1e:28:84:7d:63:70:4a:fd:b0:26:24:2a:07:f7:72:9a:51:f3:58:3f:93:18:8f:09:fb:c2:19:aa:b7:76:f5 direction=? spid=24099 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' type=CRYPTO_SESSION msg=audit(1610010960.599:123566): pid=24098 uid=0 auid=4294967295 ses=4294967295 msg='op=start direction=from-server cipher=aes128-cbc ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group1-sha1 spid=24099 suid=74 rport=53282 laddr=116.206.94.247 lport=22 exe="/usr/sbin/sshd" hostname=? addr=113.219.200.253 terminal=? res=success' type=CRYPTO_SESSION msg=audit(1610010960.599:123567): pid=24098 uid=0 auid=4294967295 ses=4294967295 msg='op=start direction=from-client cipher=aes128-cbc ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group1-sha1 spid=24099 suid=74 rport=53282 laddr=116.206.94.247 lport=22 exe="/usr/sbin/sshd" hostname=? addr=113.219.200.253 terminal=? res=success' type=USER_AUTH msg=audit(1610010961.083:123568): pid=24098 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=113.219.200.253 addr=113.219.200.253 terminal=ssh res=failed' type=USER_AUTH msg=audit(1610010963.192:123569): pid=24098 uid=0 auid=4294967295 ses=4294967295 msg='op=password acct="root" exe="/usr/sbin/sshd" hostname=? addr=113.219.200.253 terminal=ssh res=failed' type=CRYPTO_KEY_USER msg=audit(1610010963.275:123570): pid=24098 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=SHA256:95:1e:28:84:7d:63:70:4a:fd:b0:26:24:2a:07:f7:72:9a:51:f3:58:3f:93:18:8f:09:fb:c2:19:aa:b7:76:f5 direction=? spid=24099 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' type=CRYPTO_KEY_USER msg=audit(1610010963.275:123571): pid=24098 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=session fp=? direction=both spid=24099 suid=74 rport=53282 laddr=116.206.94.247 lport=22 exe="/usr/sbin/sshd" hostname=? addr=113.219.200.253 terminal=? res=success' type=CRYPTO_KEY_USER msg=audit(1610010963.278:123572): pid=24098 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=SHA256:2d:da:ee:97:db:04:9f:eb:1a:32:fa:0b:c6:ad:e5:48:56:48:21:80:8c:c1:df:11:92:f8:da:bb:e5:90:bc:ba direction=? spid=24098 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' type=CRYPTO_KEY_USER msg=audit(1610010963.278:123573): pid=24098 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=SHA256:78:c3:00:d1:4c:e1:64:f7:47:67:bf:72:c6:59:9b:6a:50:5b:d7:58:74:b7:88:74:d9:e2:d9:40:75:db:e2:3a direction=? spid=24098 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' type=CRYPTO_KEY_USER msg=audit(1610010963.278:123574): pid=24098 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=SHA256:95:1e:28:84:7d:63:70:4a:fd:b0:26:24:2a:07:f7:72:9a:51:f3:58:3f:93:18:8f:09:fb:c2:19:aa:b7:76:f5 direction=? spid=24098 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' type=USER_LOGIN msg=audit(1610010963.278:123575): pid=24098 uid=0 auid=4294967295 ses=4294967295 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=113.219.200.253 terminal=ssh res=failed' type=CRYPTO_KEY_USER msg=audit(1610010989.936:123576): pid=24126 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=SHA256:2d:da:ee:97:db:04:9f:eb:1a:32:fa:0b:c6:ad:e5:48:56:48:21:80:8c:c1:df:11:92:f8:da:bb:e5:90:bc:ba direction=? spid=24126 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' type=CRYPTO_KEY_USER msg=audit(1610010989.937:123577): pid=24126 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=SHA256:78:c3:00:d1:4c:e1:64:f7:47:67:bf:72:c6:59:9b:6a:50:5b:d7:58:74:b7:88:74:d9:e2:d9:40:75:db:e2:3a direction=? spid=24126 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' type=CRYPTO_KEY_USER msg=audit(1610010989.937:123578): pid=24126 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=SHA256:95:1e:28:84:7d:63:70:4a:fd:b0:26:24:2a:07:f7:72:9a:51:f3:58:3f:93:18:8f:09:fb:c2:19:aa:b7:76:f5 direction=? spid=24126 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' type=CRYPTO_SESSION msg=audit(1610010990.432:123579): pid=24125 uid=0 auid=4294967295 ses=4294967295 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=diffie-hellman-group-exchange-sha256 spid=24126 suid=74 rport=48666 laddr=116.206.94.247 lport=22 exe="/usr/sbin/sshd" hostname=? addr=68.183.217.18 terminal=? res=success' type=CRYPTO_SESSION msg=audit(1610010990.432:123580): pid=24125 uid=0 auid=4294967295 ses=4294967295 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=diffie-hellman-group-exchange-sha256 spid=24126 suid=74 rport=48666 laddr=116.206.94.247 lport=22 exe="/usr/sbin/sshd" hostname=? addr=68.183.217.18 terminal=? res=success' type=USER_AUTH msg=audit(1610010992.166:123581): pid=24125 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=68.183.217.18 addr=68.183.217.18 terminal=ssh res=failed' type=USER_AUTH msg=audit(1610010994.338:123582): pid=24125 uid=0 auid=4294967295 ses=4294967295 msg='op=password acct="root" exe="/usr/sbin/sshd" hostname=? addr=68.183.217.18 terminal=ssh res=failed' type=CRYPTO_KEY_USER msg=audit(1610010994.794:123583): pid=24125 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=SHA256:95:1e:28:84:7d:63:70:4a:fd:b0:26:24:2a:07:f7:72:9a:51:f3:58:3f:93:18:8f:09:fb:c2:19:aa:b7:76:f5 direction=? spid=24126 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' type=CRYPTO_KEY_USER msg=audit(1610010994.794:123584): pid=24125 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=session fp=? direction=both spid=24126 suid=74 rport=48666 laddr=116.206.94.247 lport=22 exe="/usr/sbin/sshd" hostname=? addr=68.183.217.18 terminal=? res=success' type=CRYPTO_KEY_USER msg=audit(1610010994.796:123585): pid=24125 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=SHA256:2d:da:ee:97:db:04:9f:eb:1a:32:fa:0b:c6:ad:e5:48:56:48:21:80:8c:c1:df:11:92:f8:da:bb:e5:90:bc:ba direction=? spid=24125 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' type=CRYPTO_KEY_USER msg=audit(1610010994.796:123586): pid=24125 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=SHA256:78:c3:00:d1:4c:e1:64:f7:47:67:bf:72:c6:59:9b:6a:50:5b:d7:58:74:b7:88:74:d9:e2:d9:40:75:db:e2:3a direction=? spid=24125 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' type=CRYPTO_KEY_USER msg=audit(1610010994.797:123587): pid=24125 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=SHA256:95:1e:28:84:7d:63:70:4a:fd:b0:26:24:2a:07:f7:72:9a:51:f3:58:3f:93:18:8f:09:fb:c2:19:aa:b7:76:f5 direction=? spid=24125 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' type=USER_LOGIN msg=audit(1610010994.797:123588): pid=24125 uid=0 auid=4294967295 ses=4294967295 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=68.183.217.18 terminal=ssh res=failed' type=CRYPTO_KEY_USER msg=audit(1610011062.663:123589): pid=24190 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=SHA256:2d:da:ee:97:db:04:9f:eb:1a:32:fa:0b:c6:ad:e5:48:56:48:21:80:8c:c1:df:11:92:f8:da:bb:e5:90:bc:ba direction=? spid=24190 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' type=CRYPTO_KEY_USER msg=audit(1610011062.663:123590): pid=24190 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=SHA256:78:c3:00:d1:4c:e1:64:f7:47:67:bf:72:c6:59:9b:6a:50:5b:d7:58:74:b7:88:74:d9:e2:d9:40:75:db:e2:3a direction=? spid=24190 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' type=CRYPTO_KEY_USER msg=audit(1610011062.663:123591): pid=24190 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=SHA256:95:1e:28:84:7d:63:70:4a:fd:b0:26:24:2a:07:f7:72:9a:51:f3:58:3f:93:18:8f:09:fb:c2:19:aa:b7:76:f5 direction=? spid=24190 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' type=CRYPTO_SESSION msg=audit(1610011062.737:123592): pid=24189 uid=0 auid=4294967295 ses=4294967295 msg='op=start direction=from-server cipher=aes128-cbc ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group1-sha1 spid=24190 suid=74 rport=57274 laddr=116.206.94.247 lport=22 exe="/usr/sbin/sshd" hostname=? addr=123.206.226.149 terminal=? res=success' type=CRYPTO_SESSION msg=audit(1610011062.738:123593): pid=24189 uid=0 auid=4294967295 ses=4294967295 msg='op=start direction=from-client cipher=aes128-cbc ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group1-sha1 spid=24190 suid=74 rport=57274 laddr=116.206.94.247 lport=22 exe="/usr/sbin/sshd" hostname=? addr=123.206.226.149 terminal=? res=success' type=USER_AUTH msg=audit(1610011063.027:123594): pid=24189 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=123.206.226.149 addr=123.206.226.149 terminal=ssh res=failed' type=USER_AUTH msg=audit(1610011065.945:123595): pid=24189 uid=0 auid=4294967295 ses=4294967295 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=123.206.226.149 terminal=ssh res=failed' type=CRYPTO_KEY_USER msg=audit(1610011066.017:123596): pid=24189 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=SHA256:95:1e:28:84:7d:63:70:4a:fd:b0:26:24:2a:07:f7:72:9a:51:f3:58:3f:93:18:8f:09:fb:c2:19:aa:b7:76:f5 direction=? spid=24190 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' type=CRYPTO_KEY_USER msg=audit(1610011066.017:123597): pid=24189 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=session fp=? direction=both spid=24190 suid=74 rport=57274 laddr=116.206.94.247 lport=22 exe="/usr/sbin/sshd" hostname=? addr=123.206.226.149 terminal=? res=success' type=CRYPTO_KEY_USER msg=audit(1610011066.021:123598): pid=24189 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=SHA256:2d:da:ee:97:db:04:9f:eb:1a:32:fa:0b:c6:ad:e5:48:56:48:21:80:8c:c1:df:11:92:f8:da:bb:e5:90:bc:ba direction=? spid=24189 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' type=CRYPTO_KEY_USER msg=audit(1610011066.021:123599): pid=24189 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=SHA256:78:c3:00:d1:4c:e1:64:f7:47:67:bf:72:c6:59:9b:6a:50:5b:d7:58:74:b7:88:74:d9:e2:d9:40:75:db:e2:3a direction=? spid=24189 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' type=CRYPTO_KEY_USER msg=audit(1610011066.022:123600): pid=24189 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=SHA256:95:1e:28:84:7d:63:70:4a:fd:b0:26:24:2a:07:f7:72:9a:51:f3:58:3f:93:18:8f:09:fb:c2:19:aa:b7:76:f5 direction=? spid=24189 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' type=USER_LOGIN msg=audit(1610011066.022:123601): pid=24189 uid=0 auid=4294967295 ses=4294967295 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=123.206.226.149 terminal=ssh res=failed' type=CRYPTO_KEY_USER msg=audit(1610011138.415:123602): pid=24261 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=SHA256:2d:da:ee:97:db:04:9f:eb:1a:32:fa:0b:c6:ad:e5:48:56:48:21:80:8c:c1:df:11:92:f8:da:bb:e5:90:bc:ba direction=? spid=24261 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' type=CRYPTO_KEY_USER msg=audit(1610011138.416:123603): pid=24261 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=SHA256:78:c3:00:d1:4c:e1:64:f7:47:67:bf:72:c6:59:9b:6a:50:5b:d7:58:74:b7:88:74:d9:e2:d9:40:75:db:e2:3a direction=? spid=24261 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' type=CRYPTO_KEY_USER msg=audit(1610011138.416:123604): pid=24261 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=SHA256:95:1e:28:84:7d:63:70:4a:fd:b0:26:24:2a:07:f7:72:9a:51:f3:58:3f:93:18:8f:09:fb:c2:19:aa:b7:76:f5 direction=? spid=24261 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' type=CRYPTO_SESSION msg=audit(1610011138.843:123605): pid=24260 uid=0 auid=4294967295 ses=4294967295 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=diffie-hellman-group-exchange-sha256 spid=24261 suid=74 rport=48372 laddr=116.206.94.247 lport=22 exe="/usr/sbin/sshd" hostname=? addr=68.183.217.18 terminal=? res=success' type=CRYPTO_SESSION msg=audit(1610011138.843:123606): pid=24260 uid=0 auid=4294967295 ses=4294967295 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=diffie-hellman-group-exchange-sha256 spid=24261 suid=74 rport=48372 laddr=116.206.94.247 lport=22 exe="/usr/sbin/sshd" hostname=? addr=68.183.217.18 terminal=? res=success' type=USER_AUTH msg=audit(1610011141.323:123607): pid=24260 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=68.183.217.18 addr=68.183.217.18 terminal=ssh res=failed' type=USER_AUTH msg=audit(1610011143.614:123608): pid=24260 uid=0 auid=4294967295 ses=4294967295 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=68.183.217.18 terminal=ssh res=failed' type=CRYPTO_KEY_USER msg=audit(1610011144.183:123609): pid=24260 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=SHA256:95:1e:28:84:7d:63:70:4a:fd:b0:26:24:2a:07:f7:72:9a:51:f3:58:3f:93:18:8f:09:fb:c2:19:aa:b7:76:f5 direction=? spid=24261 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' type=CRYPTO_KEY_USER msg=audit(1610011144.183:123610): pid=24260 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=session fp=? direction=both spid=24261 suid=74 rport=48372 laddr=116.206.94.247 lport=22 exe="/usr/sbin/sshd" hostname=? addr=68.183.217.18 terminal=? res=success' type=CRYPTO_KEY_USER msg=audit(1610011144.185:123611): pid=24260 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=SHA256:2d:da:ee:97:db:04:9f:eb:1a:32:fa:0b:c6:ad:e5:48:56:48:21:80:8c:c1:df:11:92:f8:da:bb:e5:90:bc:ba direction=? spid=24260 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' type=CRYPTO_KEY_USER msg=audit(1610011144.185:123612): pid=24260 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=SHA256:78:c3:00:d1:4c:e1:64:f7:47:67:bf:72:c6:59:9b:6a:50:5b:d7:58:74:b7:88:74:d9:e2:d9:40:75:db:e2:3a direction=? spid=24260 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' type=CRYPTO_KEY_USER msg=audit(1610011144.185:123613): pid=24260 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=SHA256:95:1e:28:84:7d:63:70:4a:fd:b0:26:24:2a:07:f7:72:9a:51:f3:58:3f:93:18:8f:09:fb:c2:19:aa:b7:76:f5 direction=? spid=24260 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' type=USER_LOGIN msg=audit(1610011144.185:123614): pid=24260 uid=0 auid=4294967295 ses=4294967295 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=68.183.217.18 terminal=ssh res=failed' type=USER_ACCT msg=audit(1610011201.282:123615): pid=24316 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1610011201.283:123616): pid=24316 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1610011201.283:123617): pid=24316 uid=0 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=297 res=1 type=USER_START msg=audit(1610011201.303:123618): pid=24316 uid=0 auid=0 ses=297 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_REFR msg=audit(1610011201.303:123619): pid=24316 uid=0 auid=0 ses=297 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1610011201.331:123620): pid=24316 uid=0 auid=0 ses=297 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1610011201.335:123621): pid=24316 uid=0 auid=0 ses=297 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRYPTO_KEY_USER msg=audit(1610011258.260:123622): pid=24374 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=SHA256:2d:da:ee:97:db:04:9f:eb:1a:32:fa:0b:c6:ad:e5:48:56:48:21:80:8c:c1:df:11:92:f8:da:bb:e5:90:bc:ba direction=? spid=24374 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' type=CRYPTO_KEY_USER msg=audit(1610011258.261:123623): pid=24374 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=SHA256:78:c3:00:d1:4c:e1:64:f7:47:67:bf:72:c6:59:9b:6a:50:5b:d7:58:74:b7:88:74:d9:e2:d9:40:75:db:e2:3a direction=? spid=24374 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' type=CRYPTO_KEY_USER msg=audit(1610011258.261:123624): pid=24374 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=SHA256:95:1e:28:84:7d:63:70:4a:fd:b0:26:24:2a:07:f7:72:9a:51:f3:58:3f:93:18:8f:09:fb:c2:19:aa:b7:76:f5 direction=? spid=24374 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' type=CRYPTO_SESSION msg=audit(1610011258.345:123625): pid=24373 uid=0 auid=4294967295 ses=4294967295 msg='op=start direction=from-server cipher=aes128-cbc ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group1-sha1 spid=24374 suid=74 rport=57852 laddr=116.206.94.247 lport=22 exe="/usr/sbin/sshd" hostname=? addr=113.219.200.253 terminal=? res=success' type=CRYPTO_SESSION msg=audit(1610011258.345:123626): pid=24373 uid=0 auid=4294967295 ses=4294967295 msg='op=start direction=from-client cipher=aes128-cbc ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group1-sha1 spid=24374 suid=74 rport=57852 laddr=116.206.94.247 lport=22 exe="/usr/sbin/sshd" hostname=? addr=113.219.200.253 terminal=? res=success' type=USER_AUTH msg=audit(1610011258.756:123627): pid=24373 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=113.219.200.253 addr=113.219.200.253 terminal=ssh res=failed' type=USER_AUTH msg=audit(1610011261.112:123628): pid=24373 uid=0 auid=4294967295 ses=4294967295 msg='op=password acct="root" exe="/usr/sbin/sshd" hostname=? addr=113.219.200.253 terminal=ssh res=failed' type=CRYPTO_KEY_USER msg=audit(1610011261.197:123629): pid=24373 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=SHA256:95:1e:28:84:7d:63:70:4a:fd:b0:26:24:2a:07:f7:72:9a:51:f3:58:3f:93:18:8f:09:fb:c2:19:aa:b7:76:f5 direction=? spid=24374 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' type=CRYPTO_KEY_USER msg=audit(1610011261.197:123630): pid=24373 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=session fp=? direction=both spid=24374 suid=74 rport=57852 laddr=116.206.94.247 lport=22 exe="/usr/sbin/sshd" hostname=? addr=113.219.200.253 terminal=? res=success' type=CRYPTO_KEY_USER msg=audit(1610011261.199:123631): pid=24373 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=SHA256:2d:da:ee:97:db:04:9f:eb:1a:32:fa:0b:c6:ad:e5:48:56:48:21:80:8c:c1:df:11:92:f8:da:bb:e5:90:bc:ba direction=? spid=24373 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' type=CRYPTO_KEY_USER msg=audit(1610011261.200:123632): pid=24373 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=SHA256:78:c3:00:d1:4c:e1:64:f7:47:67:bf:72:c6:59:9b:6a:50:5b:d7:58:74:b7:88:74:d9:e2:d9:40:75:db:e2:3a direction=? spid=24373 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' type=CRYPTO_KEY_USER msg=audit(1610011261.200:123633): pid=24373 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=SHA256:95:1e:28:84:7d:63:70:4a:fd:b0:26:24:2a:07:f7:72:9a:51:f3:58:3f:93:18:8f:09:fb:c2:19:aa:b7:76:f5 direction=? spid=24373 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' type=USER_LOGIN msg=audit(1610011261.200:123634): pid=24373 uid=0 auid=4294967295 ses=4294967295 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=113.219.200.253 terminal=ssh res=failed' type=CRYPTO_KEY_USER msg=audit(1610011283.950:123635): pid=24398 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=SHA256:2d:da:ee:97:db:04:9f:eb:1a:32:fa:0b:c6:ad:e5:48:56:48:21:80:8c:c1:df:11:92:f8:da:bb:e5:90:bc:ba direction=? spid=24398 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' type=CRYPTO_KEY_USER msg=audit(1610011283.951:123636): pid=24398 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=SHA256:78:c3:00:d1:4c:e1:64:f7:47:67:bf:72:c6:59:9b:6a:50:5b:d7:58:74:b7:88:74:d9:e2:d9:40:75:db:e2:3a direction=? spid=24398 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' type=CRYPTO_KEY_USER msg=audit(1610011283.951:123637): pid=24398 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=SHA256:95:1e:28:84:7d:63:70:4a:fd:b0:26:24:2a:07:f7:72:9a:51:f3:58:3f:93:18:8f:09:fb:c2:19:aa:b7:76:f5 direction=? spid=24398 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' type=CRYPTO_SESSION msg=audit(1610011284.358:123638): pid=24397 uid=0 auid=4294967295 ses=4294967295 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=diffie-hellman-group-exchange-sha256 spid=24398 suid=74 rport=48264 laddr=116.206.94.247 lport=22 exe="/usr/sbin/sshd" hostname=? addr=68.183.217.18 terminal=? res=success' type=CRYPTO_SESSION msg=audit(1610011284.359:123639): pid=24397 uid=0 auid=4294967295 ses=4294967295 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=diffie-hellman-group-exchange-sha256 spid=24398 suid=74 rport=48264 laddr=116.206.94.247 lport=22 exe="/usr/sbin/sshd" hostname=? addr=68.183.217.18 terminal=? res=success' type=USER_AUTH msg=audit(1610011287.273:123640): pid=24397 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=68.183.217.18 addr=68.183.217.18 terminal=ssh res=failed' type=USER_AUTH msg=audit(1610011289.610:123641): pid=24397 uid=0 auid=4294967295 ses=4294967295 msg='op=password acct="root" exe="/usr/sbin/sshd" hostname=? addr=68.183.217.18 terminal=ssh res=failed' type=CRYPTO_KEY_USER msg=audit(1610011290.044:123642): pid=24397 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=SHA256:95:1e:28:84:7d:63:70:4a:fd:b0:26:24:2a:07:f7:72:9a:51:f3:58:3f:93:18:8f:09:fb:c2:19:aa:b7:76:f5 direction=? spid=24398 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' type=CRYPTO_KEY_USER msg=audit(1610011290.044:123643): pid=24397 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=session fp=? direction=both spid=24398 suid=74 rport=48264 laddr=116.206.94.247 lport=22 exe="/usr/sbin/sshd" hostname=? addr=68.183.217.18 terminal=? res=success' type=CRYPTO_KEY_USER msg=audit(1610011290.046:123644): pid=24397 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=SHA256:2d:da:ee:97:db:04:9f:eb:1a:32:fa:0b:c6:ad:e5:48:56:48:21:80:8c:c1:df:11:92:f8:da:bb:e5:90:bc:ba direction=? spid=24397 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' type=CRYPTO_KEY_USER msg=audit(1610011290.046:123645): pid=24397 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=SHA256:78:c3:00:d1:4c:e1:64:f7:47:67:bf:72:c6:59:9b:6a:50:5b:d7:58:74:b7:88:74:d9:e2:d9:40:75:db:e2:3a direction=? spid=24397 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' type=CRYPTO_KEY_USER msg=audit(1610011290.046:123646): pid=24397 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=SHA256:95:1e:28:84:7d:63:70:4a:fd:b0:26:24:2a:07:f7:72:9a:51:f3:58:3f:93:18:8f:09:fb:c2:19:aa:b7:76:f5 direction=? spid=24397 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' type=USER_LOGIN msg=audit(1610011290.046:123647): pid=24397 uid=0 auid=4294967295 ses=4294967295 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=68.183.217.18 terminal=ssh res=failed' type=CRYPTO_KEY_USER msg=audit(1610011328.490:123648): pid=24438 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=SHA256:2d:da:ee:97:db:04:9f:eb:1a:32:fa:0b:c6:ad:e5:48:56:48:21:80:8c:c1:df:11:92:f8:da:bb:e5:90:bc:ba direction=? spid=24438 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' type=CRYPTO_KEY_USER msg=audit(1610011328.490:123649): pid=24438 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=SHA256:78:c3:00:d1:4c:e1:64:f7:47:67:bf:72:c6:59:9b:6a:50:5b:d7:58:74:b7:88:74:d9:e2:d9:40:75:db:e2:3a direction=? spid=24438 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' type=CRYPTO_KEY_USER msg=audit(1610011328.491:123650): pid=24438 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=SHA256:95:1e:28:84:7d:63:70:4a:fd:b0:26:24:2a:07:f7:72:9a:51:f3:58:3f:93:18:8f:09:fb:c2:19:aa:b7:76:f5 direction=? spid=24438 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' type=CRYPTO_SESSION msg=audit(1610011328.682:123651): pid=24435 uid=0 auid=4294967295 ses=4294967295 msg='op=start direction=from-server cipher=3des-cbc ksize=192 mac=hmac-sha1 pfs=diffie-hellman-group14-sha1 spid=24438 suid=74 rport=38069 laddr=116.206.94.247 lport=22 exe="/usr/sbin/sshd" hostname=? addr=141.98.80.60 terminal=? res=success' type=CRYPTO_SESSION msg=audit(1610011328.683:123652): pid=24435 uid=0 auid=4294967295 ses=4294967295 msg='op=start direction=from-client cipher=3des-cbc ksize=192 mac=hmac-sha1 pfs=diffie-hellman-group14-sha1 spid=24438 suid=74 rport=38069 laddr=116.206.94.247 lport=22 exe="/usr/sbin/sshd" hostname=? addr=141.98.80.60 terminal=? res=success' type=USER_AUTH msg=audit(1610011330.145:123653): pid=24435 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=141.98.80.60 addr=141.98.80.60 terminal=ssh res=failed' type=USER_AUTH msg=audit(1610011332.385:123654): pid=24435 uid=0 auid=4294967295 ses=4294967295 msg='op=password acct="root" exe="/usr/sbin/sshd" hostname=? addr=141.98.80.60 terminal=ssh res=failed' type=CRYPTO_KEY_USER msg=audit(1610011332.592:123655): pid=24435 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=SHA256:95:1e:28:84:7d:63:70:4a:fd:b0:26:24:2a:07:f7:72:9a:51:f3:58:3f:93:18:8f:09:fb:c2:19:aa:b7:76:f5 direction=? spid=24438 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' type=CRYPTO_KEY_USER msg=audit(1610011332.592:123656): pid=24435 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=session fp=? direction=both spid=24438 suid=74 rport=38069 laddr=116.206.94.247 lport=22 exe="/usr/sbin/sshd" hostname=? addr=141.98.80.60 terminal=? res=success' type=CRYPTO_KEY_USER msg=audit(1610011332.594:123657): pid=24435 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=SHA256:2d:da:ee:97:db:04:9f:eb:1a:32:fa:0b:c6:ad:e5:48:56:48:21:80:8c:c1:df:11:92:f8:da:bb:e5:90:bc:ba direction=? spid=24435 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' type=CRYPTO_KEY_USER msg=audit(1610011332.594:123658): pid=24435 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=SHA256:78:c3:00:d1:4c:e1:64:f7:47:67:bf:72:c6:59:9b:6a:50:5b:d7:58:74:b7:88:74:d9:e2:d9:40:75:db:e2:3a direction=? spid=24435 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' type=CRYPTO_KEY_USER msg=audit(1610011332.594:123659): pid=24435 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=SHA256:95:1e:28:84:7d:63:70:4a:fd:b0:26:24:2a:07:f7:72:9a:51:f3:58:3f:93:18:8f:09:fb:c2:19:aa:b7:76:f5 direction=? spid=24435 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' type=USER_LOGIN msg=audit(1610011332.594:123660): pid=24435 uid=0 auid=4294967295 ses=4294967295 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=141.98.80.60 terminal=ssh res=failed' type=CRYPTO_KEY_USER msg=audit(1610011334.413:123661): pid=24445 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=SHA256:2d:da:ee:97:db:04:9f:eb:1a:32:fa:0b:c6:ad:e5:48:56:48:21:80:8c:c1:df:11:92:f8:da:bb:e5:90:bc:ba direction=? spid=24445 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' type=CRYPTO_KEY_USER msg=audit(1610011334.413:123662): pid=24445 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=SHA256:78:c3:00:d1:4c:e1:64:f7:47:67:bf:72:c6:59:9b:6a:50:5b:d7:58:74:b7:88:74:d9:e2:d9:40:75:db:e2:3a direction=? spid=24445 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' type=CRYPTO_KEY_USER msg=audit(1610011334.413:123663): pid=24445 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=SHA256:95:1e:28:84:7d:63:70:4a:fd:b0:26:24:2a:07:f7:72:9a:51:f3:58:3f:93:18:8f:09:fb:c2:19:aa:b7:76:f5 direction=? spid=24445 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' type=CRYPTO_SESSION msg=audit(1610011334.605:123664): pid=24443 uid=0 auid=4294967295 ses=4294967295 msg='op=start direction=from-server cipher=3des-cbc ksize=192 mac=hmac-sha1 pfs=diffie-hellman-group14-sha1 spid=24445 suid=74 rport=37883 laddr=116.206.94.247 lport=22 exe="/usr/sbin/sshd" hostname=? addr=141.98.80.63 terminal=? res=success' type=CRYPTO_SESSION msg=audit(1610011334.606:123665): pid=24443 uid=0 auid=4294967295 ses=4294967295 msg='op=start direction=from-client cipher=3des-cbc ksize=192 mac=hmac-sha1 pfs=diffie-hellman-group14-sha1 spid=24445 suid=74 rport=37883 laddr=116.206.94.247 lport=22 exe="/usr/sbin/sshd" hostname=? addr=141.98.80.63 terminal=? res=success' type=USER_AUTH msg=audit(1610011336.567:123666): pid=24443 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=141.98.80.63 addr=141.98.80.63 terminal=ssh res=failed' type=USER_AUTH msg=audit(1610011339.299:123667): pid=24443 uid=0 auid=4294967295 ses=4294967295 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=141.98.80.63 terminal=ssh res=failed' type=CRYPTO_KEY_USER msg=audit(1610011340.284:123668): pid=24443 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=SHA256:95:1e:28:84:7d:63:70:4a:fd:b0:26:24:2a:07:f7:72:9a:51:f3:58:3f:93:18:8f:09:fb:c2:19:aa:b7:76:f5 direction=? spid=24445 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' type=CRYPTO_KEY_USER msg=audit(1610011340.284:123669): pid=24443 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=session fp=? direction=both spid=24445 suid=74 rport=37883 laddr=116.206.94.247 lport=22 exe="/usr/sbin/sshd" hostname=? addr=141.98.80.63 terminal=? res=success' type=CRYPTO_KEY_USER msg=audit(1610011340.286:123670): pid=24443 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=SHA256:2d:da:ee:97:db:04:9f:eb:1a:32:fa:0b:c6:ad:e5:48:56:48:21:80:8c:c1:df:11:92:f8:da:bb:e5:90:bc:ba direction=? spid=24443 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' type=CRYPTO_KEY_USER msg=audit(1610011340.286:123671): pid=24443 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=SHA256:78:c3:00:d1:4c:e1:64:f7:47:67:bf:72:c6:59:9b:6a:50:5b:d7:58:74:b7:88:74:d9:e2:d9:40:75:db:e2:3a direction=? spid=24443 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' type=CRYPTO_KEY_USER msg=audit(1610011340.287:123672): pid=24443 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=SHA256:95:1e:28:84:7d:63:70:4a:fd:b0:26:24:2a:07:f7:72:9a:51:f3:58:3f:93:18:8f:09:fb:c2:19:aa:b7:76:f5 direction=? spid=24443 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' type=USER_LOGIN msg=audit(1610011340.287:123673): pid=24443 uid=0 auid=4294967295 ses=4294967295 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=141.98.80.63 terminal=ssh res=failed' type=CRYPTO_KEY_USER msg=audit(1610011340.497:123674): pid=24452 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=SHA256:2d:da:ee:97:db:04:9f:eb:1a:32:fa:0b:c6:ad:e5:48:56:48:21:80:8c:c1:df:11:92:f8:da:bb:e5:90:bc:ba direction=? spid=24452 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' type=CRYPTO_KEY_USER msg=audit(1610011340.497:123675): pid=24452 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=SHA256:78:c3:00:d1:4c:e1:64:f7:47:67:bf:72:c6:59:9b:6a:50:5b:d7:58:74:b7:88:74:d9:e2:d9:40:75:db:e2:3a direction=? spid=24452 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' type=CRYPTO_KEY_USER msg=audit(1610011340.497:123676): pid=24452 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=SHA256:95:1e:28:84:7d:63:70:4a:fd:b0:26:24:2a:07:f7:72:9a:51:f3:58:3f:93:18:8f:09:fb:c2:19:aa:b7:76:f5 direction=? spid=24452 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' type=CRYPTO_SESSION msg=audit(1610011340.689:123677): pid=24451 uid=0 auid=4294967295 ses=4294967295 msg='op=start direction=from-server cipher=3des-cbc ksize=192 mac=hmac-sha1 pfs=diffie-hellman-group14-sha1 spid=24452 suid=74 rport=42885 laddr=116.206.94.247 lport=22 exe="/usr/sbin/sshd" hostname=? addr=141.98.80.64 terminal=? res=success' type=CRYPTO_SESSION msg=audit(1610011340.689:123678): pid=24451 uid=0 auid=4294967295 ses=4294967295 msg='op=start direction=from-client cipher=3des-cbc ksize=192 mac=hmac-sha1 pfs=diffie-hellman-group14-sha1 spid=24452 suid=74 rport=42885 laddr=116.206.94.247 lport=22 exe="/usr/sbin/sshd" hostname=? addr=141.98.80.64 terminal=? res=success' type=USER_AUTH msg=audit(1610011341.998:123679): pid=24451 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=141.98.80.64 addr=141.98.80.64 terminal=ssh res=failed' type=USER_AUTH msg=audit(1610011344.413:123680): pid=24451 uid=0 auid=42949672