Jul 27 08:17:01 ip-172-31-46-92 CRON[2454]: pam_unix(cron:session): session opened for user root by (uid=0)
Jul 27 08:17:01 ip-172-31-46-92 CRON[2454]: pam_unix(cron:session): session closed for user root
Jul 27 08:32:44 ip-172-31-46-92 sshd[2469]: Connection closed by 103.78.132.3 port 40912 [preauth]
Jul 27 08:42:33 ip-172-31-46-92 sshd[2471]: userauth_pubkey: key type ssh-dss not in PubkeyAcceptedKeyTypes [preauth]
Jul 27 08:42:33 ip-172-31-46-92 sshd[2471]: Accepted publickey for ubuntu from 195.212.29.178 port 44032 ssh2: RSA SHA256:8f0RkWdZil4jBpv/fSX/mM6wlJatBgrUAETXiGUbegg
Jul 27 08:42:33 ip-172-31-46-92 sshd[2471]: pam_unix(sshd:session): session opened for user ubuntu by (uid=0)
Jul 27 08:42:33 ip-172-31-46-92 systemd: pam_unix(systemd-user:session): session opened for user ubuntu by (uid=0)
Jul 27 08:42:33 ip-172-31-46-92 systemd-logind[1074]: New session 20 of user ubuntu.
Jul 27 08:42:40 ip-172-31-46-92 su[2554]: Successful su for tomasz by ubuntu
Jul 27 08:42:40 ip-172-31-46-92 su[2554]: + /dev/pts/0 ubuntu:tomasz
Jul 27 08:42:40 ip-172-31-46-92 su[2554]: pam_unix(su:session): session opened for user tomasz by ubuntu(uid=1000)
Jul 27 08:42:40 ip-172-31-46-92 su[2554]: pam_systemd(su:session): Cannot create session: Already running in a session
Jul 27 08:47:36 ip-172-31-46-92 sshd[2471]: pam_unix(sshd:session): session closed for user ubuntu
Jul 27 08:47:36 ip-172-31-46-92 su[2554]: pam_unix(su:session): session closed for user tomasz
Jul 27 08:47:36 ip-172-31-46-92 systemd-logind[1074]: Removed session 20.
Jul 27 08:47:36 ip-172-31-46-92 systemd: pam_unix(systemd-user:session): session closed for user ubuntu
Jul 27 08:49:32 ip-172-31-46-92 sshd[2586]: userauth_pubkey: key type ssh-dss not in PubkeyAcceptedKeyTypes [preauth]
Jul 27 08:49:32 ip-172-31-46-92 sshd[2586]: Accepted publickey for ubuntu from 195.212.29.178 port 44164 ssh2: RSA SHA256:8f0RkWdZil4jBpv/fSX/mM6wlJatBgrUAETXiGUbegg
Jul 27 08:49:32 ip-172-31-46-92 sshd[2586]: pam_unix(sshd:session): session opened for user ubuntu by (uid=0)
Jul 27 08:49:32 ip-172-31-46-92 systemd: pam_unix(systemd-user:session): session opened for user ubuntu by (uid=0)
Jul 27 08:49:32 ip-172-31-46-92 systemd-logind[1074]: New session 21 of user ubuntu.
Jul 27 08:49:38 ip-172-31-46-92 su[2639]: Successful su for tomasz by ubuntu
Jul 27 08:49:38 ip-172-31-46-92 su[2639]: + /dev/pts/0 ubuntu:tomasz
Jul 27 08:49:38 ip-172-31-46-92 su[2639]: pam_unix(su:session): session opened for user tomasz by ubuntu(uid=1000)
Jul 27 08:49:38 ip-172-31-46-92 su[2639]: pam_systemd(su:session): Cannot create session: Already running in a session
Jul 27 08:51:52 ip-172-31-46-92 su[2639]: pam_unix(su:session): session closed for user tomasz
Jul 27 08:51:54 ip-172-31-46-92 sshd[2624]: Received disconnect from 195.212.29.178 port 44164:11: disconnected by user
Jul 27 08:51:54 ip-172-31-46-92 sshd[2624]: Disconnected from 195.212.29.178 port 44164
Jul 27 08:51:54 ip-172-31-46-92 sshd[2586]: pam_unix(sshd:session): session closed for user ubuntu
Jul 27 08:51:54 ip-172-31-46-92 systemd-logind[1074]: Removed session 21.
Jul 27 08:56:20 ip-172-31-46-92 sshd[2698]: userauth_pubkey: key type ssh-dss not in PubkeyAcceptedKeyTypes [preauth]
Jul 27 08:56:20 ip-172-31-46-92 sshd[2698]: Accepted publickey for ubuntu from 195.212.29.178 port 44536 ssh2: RSA SHA256:8f0RkWdZil4jBpv/fSX/mM6wlJatBgrUAETXiGUbegg
Jul 27 08:56:20 ip-172-31-46-92 sshd[2698]: pam_unix(sshd:session): session opened for user ubuntu by (uid=0)
Jul 27 08:56:20 ip-172-31-46-92 systemd: pam_unix(systemd-user:session): session opened for user ubuntu by (uid=0)
Jul 27 08:56:20 ip-172-31-46-92 systemd-logind[1074]: New session 22 of user ubuntu.
Jul 27 09:06:53 ip-172-31-46-92 sshd[2698]: pam_unix(sshd:session): session closed for user ubuntu
Jul 27 09:06:53 ip-172-31-46-92 systemd-logind[1074]: Removed session 22.
Jul 27 09:06:53 ip-172-31-46-92 systemd: pam_unix(systemd-user:session): session closed for user ubuntu
Jul 27 09:08:13 ip-172-31-46-92 sshd[2771]: userauth_pubkey: key type ssh-dss not in PubkeyAcceptedKeyTypes [preauth]
Jul 27 09:08:13 ip-172-31-46-92 sshd[2771]: Accepted publickey for ubuntu from 195.212.29.178 port 44768 ssh2: RSA SHA256:8f0RkWdZil4jBpv/fSX/mM6wlJatBgrUAETXiGUbegg
Jul 27 09:08:13 ip-172-31-46-92 sshd[2771]: pam_unix(sshd:session): session opened for user ubuntu by (uid=0)
Jul 27 09:08:13 ip-172-31-46-92 systemd: pam_unix(systemd-user:session): session opened for user ubuntu by (uid=0)
Jul 27 09:08:13 ip-172-31-46-92 systemd-logind[1074]: New session 23 of user ubuntu.
Jul 27 09:08:17 ip-172-31-46-92 su[2824]: pam_unix(su:auth): authentication failure; logname=ubuntu uid=1000 euid=0 tty=/dev/pts/0 ruser=ubuntu rhost=  user=root
Jul 27 09:08:20 ip-172-31-46-92 su[2824]: pam_authenticate: Authentication failure
Jul 27 09:08:20 ip-172-31-46-92 su[2824]: FAILED su for root by ubuntu
Jul 27 09:08:20 ip-172-31-46-92 su[2824]: - /dev/pts/0 ubuntu:root
Jul 27 09:08:39 ip-172-31-46-92 su[2825]: pam_unix(su:auth): authentication failure; logname=ubuntu uid=1000 euid=0 tty=/dev/pts/0 ruser=ubuntu rhost=  user=root
Jul 27 09:08:41 ip-172-31-46-92 su[2825]: pam_authenticate: Authentication failure
Jul 27 09:08:41 ip-172-31-46-92 su[2825]: FAILED su for root by ubuntu
Jul 27 09:08:41 ip-172-31-46-92 su[2825]: - /dev/pts/0 ubuntu:root
Jul 27 09:12:11 ip-172-31-46-92 sudo:   ubuntu : TTY=pts/0 ; PWD=/home/ubuntu ; USER=root ; COMMAND=/bin/su
Jul 27 09:12:11 ip-172-31-46-92 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0)
Jul 27 09:12:11 ip-172-31-46-92 su[2827]: Successful su for root by root
Jul 27 09:12:11 ip-172-31-46-92 su[2827]: + /dev/pts/0 root:root
Jul 27 09:12:11 ip-172-31-46-92 su[2827]: pam_unix(su:session): session opened for user root by ubuntu(uid=0)
Jul 27 09:12:11 ip-172-31-46-92 su[2827]: pam_systemd(su:session): Cannot create session: Already running in a session
Jul 27 09:12:36 ip-172-31-46-92 su[2827]: pam_unix(su:session): session closed for user root
Jul 27 09:12:36 ip-172-31-46-92 sudo: pam_unix(sudo:session): session closed for user root
Jul 27 09:12:38 ip-172-31-46-92 sshd[2809]: Received disconnect from 195.212.29.178 port 44768:11: disconnected by user
Jul 27 09:12:38 ip-172-31-46-92 sshd[2809]: Disconnected from 195.212.29.178 port 44768
Jul 27 09:12:38 ip-172-31-46-92 sshd[2771]: pam_unix(sshd:session): session closed for user ubuntu
Jul 27 09:12:38 ip-172-31-46-92 systemd-logind[1074]: Removed session 23.
Jul 27 09:17:01 ip-172-31-46-92 CRON[2852]: pam_unix(cron:session): session opened for user root by (uid=0)
Jul 27 09:17:01 ip-172-31-46-92 CRON[2852]: pam_unix(cron:session): session closed for user root
Jul 27 09:21:51 ip-172-31-46-92 sshd[2867]: Connection closed by 157.25.72.188 port 54839 [preauth]
Jul 27 09:29:48 ip-172-31-46-92 sshd[2869]: userauth_pubkey: key type ssh-dss not in PubkeyAcceptedKeyTypes [preauth]
Jul 27 09:29:48 ip-172-31-46-92 sshd[2869]: Accepted publickey for ubuntu from 195.212.29.178 port 45076 ssh2: RSA SHA256:8f0RkWdZil4jBpv/fSX/mM6wlJatBgrUAETXiGUbegg
Jul 27 09:29:48 ip-172-31-46-92 sshd[2869]: pam_unix(sshd:session): session opened for user ubuntu by (uid=0)
Jul 27 09:29:48 ip-172-31-46-92 systemd: pam_unix(systemd-user:session): session opened for user ubuntu by (uid=0)
Jul 27 09:29:48 ip-172-31-46-92 systemd-logind[1074]: New session 25 of user ubuntu.
Jul 27 09:35:45 ip-172-31-46-92 sshd[2869]: pam_unix(sshd:session): session closed for user ubuntu
Jul 27 09:35:45 ip-172-31-46-92 systemd-logind[1074]: Removed session 25.
Jul 27 09:35:45 ip-172-31-46-92 systemd: pam_unix(systemd-user:session): session closed for user ubuntu
Jul 27 09:57:43 ip-172-31-46-92 sshd[2949]: userauth_pubkey: key type ssh-dss not in PubkeyAcceptedKeyTypes [preauth]
Jul 27 09:57:43 ip-172-31-46-92 sshd[2949]: Accepted publickey for ubuntu from 195.212.29.178 port 45630 ssh2: RSA SHA256:8f0RkWdZil4jBpv/fSX/mM6wlJatBgrUAETXiGUbegg
Jul 27 09:57:43 ip-172-31-46-92 sshd[2949]: pam_unix(sshd:session): session opened for user ubuntu by (uid=0)
Jul 27 09:57:43 ip-172-31-46-92 systemd: pam_unix(systemd-user:session): session opened for user ubuntu by (uid=0)
Jul 27 09:57:43 ip-172-31-46-92 systemd-logind[1074]: New session 26 of user ubuntu.
Jul 27 10:02:19 ip-172-31-46-92 sshd[2949]: pam_unix(sshd:session): session closed for user ubuntu
Jul 27 10:02:19 ip-172-31-46-92 systemd-logind[1074]: Removed session 26.
Jul 27 10:02:19 ip-172-31-46-92 systemd: pam_unix(systemd-user:session): session closed for user ubuntu
Jul 27 10:02:57 ip-172-31-46-92 sshd[3047]: userauth_pubkey: key type ssh-dss not in PubkeyAcceptedKeyTypes [preauth]
Jul 27 10:02:57 ip-172-31-46-92 sshd[3047]: Accepted publickey for ubuntu from 195.212.29.178 port 45678 ssh2: RSA SHA256:8f0RkWdZil4jBpv/fSX/mM6wlJatBgrUAETXiGUbegg
Jul 27 10:02:57 ip-172-31-46-92 sshd[3047]: pam_unix(sshd:session): session opened for user ubuntu by (uid=0)
Jul 27 10:02:57 ip-172-31-46-92 systemd: pam_unix(systemd-user:session): session opened for user ubuntu by (uid=0)
Jul 27 10:02:57 ip-172-31-46-92 systemd-logind[1074]: New session 27 of user ubuntu.
Jul 27 10:03:03 ip-172-31-46-92 su[3100]: Successful su for tomasz by ubuntu
Jul 27 10:03:03 ip-172-31-46-92 su[3100]: + /dev/pts/0 ubuntu:tomasz
Jul 27 10:03:03 ip-172-31-46-92 su[3100]: pam_unix(su:session): session opened for user tomasz by ubuntu(uid=1000)
Jul 27 10:03:03 ip-172-31-46-92 su[3100]: pam_systemd(su:session): Cannot create session: Already running in a session
Jul 27 10:04:47 ip-172-31-46-92 su[3100]: pam_unix(su:session): session closed for user tomasz
Jul 27 10:04:50 ip-172-31-46-92 sshd[3085]: Received disconnect from 195.212.29.178 port 45678:11: disconnected by user
Jul 27 10:04:50 ip-172-31-46-92 sshd[3085]: Disconnected from 195.212.29.178 port 45678
Jul 27 10:04:50 ip-172-31-46-92 sshd[3047]: pam_unix(sshd:session): session closed for user ubuntu
Jul 27 10:04:50 ip-172-31-46-92 systemd-logind[1074]: Removed session 27.
Jul 27 10:12:22 ip-172-31-46-92 sshd[3143]: Invalid user pi from 79.136.64.242
Jul 27 10:12:22 ip-172-31-46-92 sshd[3143]: input_userauth_request: invalid user pi [preauth]
Jul 27 10:12:22 ip-172-31-46-92 sshd[3143]: Connection closed by 79.136.64.242 port 4716 [preauth]
Jul 27 10:12:23 ip-172-31-46-92 sshd[3145]: Invalid user pi from 79.136.64.242
Jul 27 10:12:23 ip-172-31-46-92 sshd[3145]: input_userauth_request: invalid user pi [preauth]
Jul 27 10:12:23 ip-172-31-46-92 sshd[3145]: Connection closed by 79.136.64.242 port 4717 [preauth]
Jul 27 10:17:01 ip-172-31-46-92 CRON[3159]: pam_unix(cron:session): session opened for user root by (uid=0)
Jul 27 10:17:01 ip-172-31-46-92 CRON[3159]: pam_unix(cron:session): session closed for user root
Jul 27 10:19:11 ip-172-31-46-92 sshd[3442]: userauth_pubkey: key type ssh-dss not in PubkeyAcceptedKeyTypes [preauth]
Jul 27 10:19:11 ip-172-31-46-92 sshd[3442]: Accepted publickey for ubuntu from 195.212.29.178 port 45964 ssh2: RSA SHA256:8f0RkWdZil4jBpv/fSX/mM6wlJatBgrUAETXiGUbegg
Jul 27 10:19:11 ip-172-31-46-92 sshd[3442]: pam_unix(sshd:session): session opened for user ubuntu by (uid=0)
Jul 27 10:19:11 ip-172-31-46-92 systemd: pam_unix(systemd-user:session): session opened for user ubuntu by (uid=0)
Jul 27 10:19:11 ip-172-31-46-92 systemd-logind[1074]: New session 29 of user ubuntu.
Jul 27 10:23:53 ip-172-31-46-92 sshd[3481]: Received disconnect from 195.212.29.178 port 45964:11: disconnected by user
Jul 27 10:23:53 ip-172-31-46-92 sshd[3481]: Disconnected from 195.212.29.178 port 45964
Jul 27 10:23:53 ip-172-31-46-92 sshd[3442]: pam_unix(sshd:session): session closed for user ubuntu
Jul 27 10:23:53 ip-172-31-46-92 systemd-logind[1074]: Removed session 29.
Jul 27 10:37:00 ip-172-31-46-92 sshd[3521]: Connection closed by 157.25.72.188 port 55402 [preauth]
Jul 27 10:37:11 ip-172-31-46-92 sshd[3523]: Connection closed by 157.25.72.188 port 55404 [preauth]
Jul 27 10:41:45 ip-172-31-46-92 sshd[3537]: userauth_pubkey: key type ssh-dss not in PubkeyAcceptedKeyTypes [preauth]
Jul 27 10:41:45 ip-172-31-46-92 sshd[3537]: Accepted publickey for ubuntu from 195.212.29.178 port 46502 ssh2: RSA SHA256:8f0RkWdZil4jBpv/fSX/mM6wlJatBgrUAETXiGUbegg
Jul 27 10:41:45 ip-172-31-46-92 sshd[3537]: pam_unix(sshd:session): session opened for user ubuntu by (uid=0)
Jul 27 10:41:45 ip-172-31-46-92 systemd: pam_unix(systemd-user:session): session opened for user ubuntu by (uid=0)
Jul 27 10:41:45 ip-172-31-46-92 systemd-logind[1074]: New session 30 of user ubuntu.