log

Aug 12 10:55:43 ubuntu20 sshd[450]: Server listening on 0.0.0.0 port 22.

Aug 12 10:55:43 ubuntu20 sshd[450]: Server listening on :: port 22.

Aug 12 10:55:44 ubuntu20 systemd-logind[438]: New seat seat0.

Aug 12 10:55:44 ubuntu20 systemd-logind[438]: Watching system buttons on /dev/input/event0 (Power Button)

Aug 12 10:55:44 ubuntu20 systemd-logind[438]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard)

Aug 12 10:55:45 ubuntu20 systemd-logind[438]: Watching system buttons on /dev/input/event4 (AT Translated Set 2 keyboard)

Aug 12 10:58:08 ubuntu20 sshd[450]: Received signal 15; terminating.

Aug 12 10:58:08 ubuntu20 sshd[574]: Server listening on 0.0.0.0 port 22.

Aug 12 10:58:08 ubuntu20 sshd[574]: Server listening on :: port 22.

Aug 12 10:58:08 ubuntu20 passwd[575]: pam_unix(passwd:chauthtok): password changed for root

Aug 12 10:58:28 ruvds-q5cdv sshd[493]: Server listening on 0.0.0.0 port 22.

Aug 12 10:58:28 ruvds-q5cdv sshd[493]: Server listening on :: port 22.

Aug 12 10:58:29 ruvds-q5cdv systemd-logind[451]: New seat seat0.

Aug 12 10:58:29 ruvds-q5cdv systemd-logind[451]: Watching system buttons on /dev/input/event0 (Power Button)

Aug 12 10:58:29 ruvds-q5cdv systemd-logind[451]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard)

Aug 12 10:58:30 ruvds-q5cdv systemd-logind[451]: Watching system buttons on /dev/input/event4 (AT Translated Set 2 keyboard)

Aug 12 10:59:12 ruvds-q5cdv sshd[516]: Accepted password for root from 176.59.64.95 port 15341 ssh2

Aug 12 10:59:12 ruvds-q5cdv sshd[516]: pam_unix(sshd:session): session opened for user root by (uid=0)

Aug 12 10:59:12 ruvds-q5cdv systemd-logind[451]: New session 1 of user root.

Aug 12 10:59:12 ruvds-q5cdv systemd: pam_unix(systemd-user:session): session opened for user root by (uid=0)

Aug 12 11:00:41 ruvds-q5cdv sshd[571]: error: kex_exchange_identification: Connection closed by remote host

Aug 12 11:01:36 ruvds-q5cdv sshd[572]: Accepted password for root from 176.59.64.95 port 12358 ssh2

Aug 12 11:01:36 ruvds-q5cdv sshd[572]: pam_unix(sshd:session): session opened for user root by (uid=0)

Aug 12 11:01:36 ruvds-q5cdv systemd-logind[451]: New session 3 of user root.

Aug 12 11:01:58 ruvds-q5cdv groupadd[601]: group added to /etc/group: name=mysite, GID=1000

Aug 12 11:01:58 ruvds-q5cdv groupadd[601]: group added to /etc/gshadow: name=mysite

Aug 12 11:01:58 ruvds-q5cdv groupadd[601]: new group: name=mysite, GID=1000

Aug 12 11:02:06 ruvds-q5cdv groupadd[608]: group added to /etc/group: name=myothersite, GID=1001

Aug 12 11:02:06 ruvds-q5cdv groupadd[608]: group added to /etc/gshadow: name=myothersite

Aug 12 11:02:06 ruvds-q5cdv groupadd[608]: new group: name=myothersite, GID=1001

Aug 12 11:02:17 ruvds-q5cdv sshd[614]: Connection closed by 192.241.219.228 port 33748 [preauth]

Aug 12 11:02:21 ruvds-q5cdv useradd[616]: new group: name=user1, GID=1002

Aug 12 11:02:21 ruvds-q5cdv useradd[616]: new user: name=user1, UID=1000, GID=1002, home=/home/user1, shell=/bin/sh, from=/dev/pts/0

Aug 12 11:02:27 ruvds-q5cdv passwd[634]: pam_unix(passwd:chauthtok): password changed for user1

Aug 12 11:02:43 ruvds-q5cdv usermod[635]: change user 'user1' GID from '1002' to '1000'

Aug 12 11:02:54 ruvds-q5cdv sshd[572]: pam_unix(sshd:session): session closed for user root

Aug 12 11:02:54 ruvds-q5cdv systemd-logind[451]: Session 3 logged out. Waiting for processes to exit.

Aug 12 11:02:54 ruvds-q5cdv systemd-logind[451]: Removed session 3.

Aug 12 11:02:55 ruvds-q5cdv sshd[652]: Accepted password for user1 from 176.59.64.95 port 25671 ssh2

Aug 12 11:02:55 ruvds-q5cdv sshd[652]: pam_unix(sshd:session): session opened for user user1 by (uid=0)

Aug 12 11:02:55 ruvds-q5cdv systemd-logind[451]: New session 4 of user user1.

Aug 12 11:02:55 ruvds-q5cdv systemd: pam_unix(systemd-user:session): session opened for user user1 by (uid=0)

Aug 12 11:03:47 ruvds-q5cdv sshd[493]: Received signal 15; terminating.

Aug 12 11:03:47 ruvds-q5cdv sshd[701]: Server listening on 0.0.0.0 port 22.

Aug 12 11:03:47 ruvds-q5cdv sshd[701]: Server listening on :: port 22.

Aug 12 11:03:50 ruvds-q5cdv sshd[652]: pam_unix(sshd:session): session closed for user user1

Aug 12 11:03:50 ruvds-q5cdv systemd-logind[451]: Session 4 logged out. Waiting for processes to exit.

Aug 12 11:03:50 ruvds-q5cdv systemd-logind[451]: Removed session 4.

Aug 12 11:03:50 ruvds-q5cdv sshd[702]: Accepted password for user1 from 176.59.64.95 port 33903 ssh2

Aug 12 11:03:50 ruvds-q5cdv sshd[702]: pam_unix(sshd:session): session opened for user user1 by (uid=0)

Aug 12 11:03:50 ruvds-q5cdv systemd-logind[451]: New session 6 of user user1.

Aug 12 11:05:00 ruvds-q5cdv sshd[702]: pam_unix(sshd:session): session closed for user user1

Aug 12 11:05:00 ruvds-q5cdv systemd-logind[451]: Session 6 logged out. Waiting for processes to exit.

Aug 12 11:05:00 ruvds-q5cdv systemd-logind[451]: Removed session 6.

Aug 12 11:05:01 ruvds-q5cdv sshd[740]: Accepted password for user1 from 176.59.64.95 port 39093 ssh2

Aug 12 11:05:01 ruvds-q5cdv sshd[740]: pam_unix(sshd:session): session opened for user user1 by (uid=0)

Aug 12 11:05:01 ruvds-q5cdv systemd-logind[451]: New session 7 of user user1.

Aug 12 11:07:21 ruvds-q5cdv sshd[701]: Received signal 15; terminating.

Aug 12 11:07:21 ruvds-q5cdv sshd[781]: Server listening on 0.0.0.0 port 22.

Aug 12 11:07:21 ruvds-q5cdv sshd[781]: Server listening on :: port 22.

Aug 12 11:07:24 ruvds-q5cdv sshd[740]: pam_unix(sshd:session): session closed for user user1

Aug 12 11:07:24 ruvds-q5cdv systemd-logind[451]: Session 7 logged out. Waiting for processes to exit.

Aug 12 11:07:24 ruvds-q5cdv systemd-logind[451]: Removed session 7.

Aug 12 11:07:25 ruvds-q5cdv sshd[782]: Accepted password for user1 from 176.59.64.95 port 6130 ssh2

Aug 12 11:07:25 ruvds-q5cdv sshd[782]: pam_unix(sshd:session): session opened for user user1 by (uid=0)

Aug 12 11:07:25 ruvds-q5cdv systemd-logind[451]: New session 8 of user user1.

Aug 12 11:07:25 ruvds-q5cdv sshd[804]: fatal: bad ownership or modes for chroot directory "/var/www/mysite.com"

Aug 12 11:07:25 ruvds-q5cdv sshd[782]: pam_unix(sshd:session): session closed for user user1

Aug 12 11:07:25 ruvds-q5cdv systemd-logind[451]: Session 8 logged out. Waiting for processes to exit.

Aug 12 11:07:25 ruvds-q5cdv systemd-logind[451]: Removed session 8.

Aug 12 11:07:31 ruvds-q5cdv sshd[805]: Accepted password for user1 from 176.59.64.95 port 61770 ssh2

Aug 12 11:07:31 ruvds-q5cdv sshd[805]: pam_unix(sshd:session): session opened for user user1 by (uid=0)

Aug 12 11:07:31 ruvds-q5cdv systemd-logind[451]: New session 9 of user user1.

Aug 12 11:07:31 ruvds-q5cdv sshd[831]: fatal: bad ownership or modes for chroot directory "/var/www/mysite.com"

Aug 12 11:07:31 ruvds-q5cdv sshd[805]: pam_unix(sshd:session): session closed for user user1

Aug 12 11:07:31 ruvds-q5cdv systemd-logind[451]: Session 9 logged out. Waiting for processes to exit.

Aug 12 11:07:31 ruvds-q5cdv systemd-logind[451]: Removed session 9.