Nov 25 03:37:26 vhost1 sshd[29193]: Invalid user vagrant3 from 190.205.35.66 port 33723
Nov 25 03:37:26 vhost1 sshd[29193]: Received disconnect from 190.205.35.66 port 33723:11: Normal Shutdown, Thank you for playing [preauth]
Nov 25 03:37:26 vhost1 sshd[29193]: Disconnected from invalid user vagrant3 190.205.35.66 port 33723 [preauth]
Nov 25 03:37:41 vhost1 sshd[29195]: Invalid user hacluster from 190.205.35.66 port 34702
Nov 25 03:37:41 vhost1 sshd[29195]: Received disconnect from 190.205.35.66 port 34702:11: Normal Shutdown, Thank you for playing [preauth]
Nov 25 03:37:41 vhost1 sshd[29195]: Disconnected from invalid user hacluster 190.205.35.66 port 34702 [preauth]
Nov 25 03:37:58 vhost1 sshd[29198]: Invalid user temp from 190.205.35.66 port 35702
Nov 25 03:37:58 vhost1 sshd[29198]: Received disconnect from 190.205.35.66 port 35702:11: Normal Shutdown, Thank you for playing [preauth]
Nov 25 03:37:58 vhost1 sshd[29198]: Disconnected from invalid user temp 190.205.35.66 port 35702 [preauth]
Nov 25 03:38:14 vhost1 sshd[29201]: Invalid user hwding from 190.205.35.66 port 36691
Nov 25 03:38:14 vhost1 sshd[29201]: Received disconnect from 190.205.35.66 port 36691:11: Normal Shutdown, Thank you for playing [preauth]
Nov 25 03:38:14 vhost1 sshd[29201]: Disconnected from invalid user hwding 190.205.35.66 port 36691 [preauth]
Nov 25 03:38:28 vhost1 sshd[29203]: Invalid user pn from 190.205.35.66 port 37636
Nov 25 03:38:28 vhost1 sshd[29203]: Received disconnect from 190.205.35.66 port 37636:11: Normal Shutdown, Thank you for playing [preauth]
Nov 25 03:38:28 vhost1 sshd[29203]: Disconnected from invalid user pn 190.205.35.66 port 37636 [preauth]
Nov 25 03:39:01 vhost1 CRON[29216]: pam_unix(cron:session): session opened for user root by (uid=0)
Nov 25 03:39:01 vhost1 CRON[29216]: pam_unix(cron:session): session closed for user root
Nov 25 03:41:21 vhost1 sshd[29272]: Accepted publickey for acagliano from 192.168.1.203 port 61320 ssh2: RSA SHA256:go059xHawmA1sEaESmhdgwPSMDPzATW78FvhewNSG9U
Nov 25 03:41:21 vhost1 sshd[29272]: pam_unix(sshd:session): session opened for user acagliano by (uid=0)
Nov 25 03:41:21 vhost1 systemd-logind[355]: New session 835 of user acagliano.
Nov 25 03:41:21 vhost1 systemd: pam_unix(systemd-user:session): session opened for user acagliano by (uid=0)
Nov 25 03:41:26 vhost1 sudo: acagliano : TTY=pts/0 ; PWD=/home/acagliano ; USER=root ; COMMAND=/bin/su
Nov 25 03:41:26 vhost1 sudo: pam_unix(sudo:session): session opened for user root by acagliano(uid=0)
Nov 25 03:41:26 vhost1 su: (to root) acagliano on pts/0
Nov 25 03:41:26 vhost1 su: pam_unix(su:session): session opened for user root by acagliano(uid=0)
Nov 25 03:41:57 vhost1 rkhunter: Rootkit hunter check started (version 1.4.6)
Nov 25 03:44:13 vhost1 sshd[23938]: Invalid user xiao from 160.16.106.89 port 52657
Nov 25 03:44:13 vhost1 sshd[23938]: Received disconnect from 160.16.106.89 port 52657:11: Normal Shutdown, Thank you for playing [preauth]