Scribd Logo
Upload

Welcome to Scribd!

  • 2

    Uploaded by

    angela marcelo zavaleta
    11 views13 pages
    The document contains log entries of SSH connections to a server from IP address 10.11.8.6. It records the user authenticating via public key authentication and subsystem requests for SFTP. It also logs sudo commands run by the user itbipat1 after authenticating. Connections are made on various dates from December 18th to December 20th and last between 1 to 5 minutes before disconnecting.

    Original Description:

    Original Title

    3276192_2

    Copyright

    © © All Rights Reserved

    Available Formats

    TXT, PDF, TXT or read online from Scribd

    Did you find this document useful?

    Is this content inappropriate?

    Report this Document
    The document contains log entries of SSH connections to a server from IP address 10.11.8.6. It records the user authenticating via public key authentication and subsystem requests for SFTP. It also logs sudo commands run by the user itbipat1 after authenticating. Connections are made on various dates from December 18th to December 20th and last between 1 to 5 minutes before disconnecting.

    Copyright:

    © All Rights Reserved
    Download as TXT, PDF, TXT or read online from Scribd
    Flag for inappropriate content
    Download as txt, pdf, or txt
    11 views13 pages

    2

    Uploaded by

    angela marcelo zavaleta
    The document contains log entries of SSH connections to a server from IP address 10.11.8.6. It records the user authenticating via public key authentication and subsystem requests for SFTP. It also logs sudo commands run by the user itbipat1 after authenticating. Connections are made on various dates from December 18th to December 20th and last between 1 to 5 minutes before disconnecting.

    Copyright:

    © All Rights Reserved
    Download as TXT, PDF, TXT or read online from Scribd
    Flag for inappropriate content
    Download as txt, pdf, or txt
    of 13

    Dec 18 04:59:15 s143vp auth|security:info sshd[53149712]: Accepted publickey for

    itbipat1 from 10.11.8.6 port 60436 ssh2


    Dec 18 04:59:16 s143vp auth|security:info sshd[53805244]: subsystem request for
    sftp
    Dec 18 04:59:17 s143vp auth|security:info sshd[53805244]: subsystem request for
    sftp
    Dec 18 05:00:21 s143vp auth|security:info sshd[53805244]: Received disconnect from
    10.11.8.6: 11: disconnected by user
    Dec 18 06:01:41 s143vp auth|security:info sshd[46989382]: Accepted publickey for
    itbipat1 from 10.11.8.6 port 36350 ssh2
    Dec 18 06:01:42 s143vp auth|security:info sshd[54591540]: subsystem request for
    sftp
    Dec 18 06:01:45 s143vp auth|security:notice sudo: itbipat1 : TTY=pts/159 ;
    PWD=/home/itbipat1 ; USER=root ; COMMAND=/home/itbipat1/.ansible/tmp/ansible-tmp-
    1671364903.071953-156066-153471405308944/tmpe3rofq9_connectivity_test.sh
    Dec 18 06:02:46 s143vp auth|security:info sshd[54591540]: Received disconnect from
    10.11.8.6: 11: disconnected by user
    Dec 18 06:55:14 s143vp auth|security:info sshd[51576836]: Accepted publickey for
    root from 130.30.30.41 port 49552 ssh2
    Dec 18 06:55:14 s143vp auth|security:info sshd[51576836]: Received disconnect from
    130.30.30.41: 11: disconnected by user
    Dec 18 13:22:23 s143vp auth|security:info sshd[47382766]: Accepted publickey for
    itbipat1 from 10.11.8.6 port 46290 ssh2
    Dec 18 13:22:25 s143vp auth|security:info sshd[44040358]: subsystem request for
    sftp
    Dec 18 13:22:27 s143vp auth|security:notice sudo: itbipat1 : TTY=pts/159 ;
    PWD=/home/itbipat1 ; USER=root ; COMMAND=/home/itbipat1/.ansible/tmp/ansible-tmp-
    1671391345.4946618-99578-264053632817582/tmpad4ev1nwconnectivity_test.sh
    Dec 18 13:22:40 s143vp auth|security:info sshd[44040358]: subsystem request for
    sftp
    Dec 18 13:22:52 s143vp auth|security:info sshd[44040358]: subsystem request for
    sftp
    Dec 18 13:22:54 s143vp auth|security:info sshd[44040358]: subsystem request for
    sftp
    Dec 18 13:23:57 s143vp auth|security:info sshd[44040358]: Received disconnect from
    10.11.8.6: 11: disconnected by user
    Dec 19 02:31:02 s143vp auth|security:info sshd[49807602]: Did not receive
    identification string from 10.11.8.6
    Dec 19 02:31:08 s143vp auth|security:info sshd[51511330]: Accepted publickey for
    itbipat1 from 10.11.8.6 port 52732 ssh2
    Dec 19 02:31:10 s143vp auth|security:notice sudo: itbipat1 : TTY=unknown ;
    PWD=/home/itbipat1 ; USER=root ; COMMAND=/bin/sh -c printf OK
    Dec 19 02:31:11 s143vp auth|security:notice sudo: itbipat1 : TTY=unknown ;
    PWD=/home/itbipat1 ; USER=root ; COMMAND=/usr/sbin/lsuser -a maxage itbipat1
    Dec 19 02:31:11 s143vp auth|security:notice sudo: itbipat1 : TTY=unknown ;
    PWD=/home/itbipat1 ; USER=root ; COMMAND=/usr/bin/pwdadm -q itbipat1
    Dec 19 06:11:31 s143vp auth|security:info sshd[46923808]: Accepted publickey for
    itbipat1 from 10.11.8.6 port 60980 ssh2
    Dec 19 06:11:32 s143vp auth|security:info sshd[44892198]: subsystem request for
    sftp
    Dec 19 06:11:34 s143vp auth|security:notice sudo: itbipat1 : TTY=pts/159 ;
    PWD=/home/itbipat1 ; USER=root ; COMMAND=/home/itbipat1/.ansible/tmp/ansible-tmp-
    1671451892.720199-174425-8145420770778/tmp80c55v4nconnectivity_test.sh
    Dec 19 06:12:35 s143vp auth|security:info sshd[44892198]: Received disconnect from
    10.11.8.6: 11: disconnected by user
    Dec 19 06:55:14 s143vp auth|security:info sshd[20840542]: Accepted publickey for
    root from 130.30.30.41 port 54486 ssh2
    Dec 19 06:55:14 s143vp auth|security:info sshd[20840542]: Received disconnect from
    130.30.30.41: 11: disconnected by user
    Dec 19 07:41:08 s143vp auth|security:info sshd[49807366]: Accepted publickey for
    itbipat1 from 10.11.8.6 port 46690 ssh2
    Dec 19 07:41:10 s143vp auth|security:info sshd[42533056]: subsystem request for
    sftp
    Dec 19 07:41:12 s143vp auth|security:notice sudo: itbipat1 : TTY=pts/159 ;
    PWD=/home/itbipat1 ; USER=root ; COMMAND=/home/itbipat1/.ansible/tmp/ansible-tmp-
    1671457270.1569424-51661-237446056205393/tmpbups3r0aconnectivity_test.sh
    Dec 19 07:42:13 s143vp auth|security:info sshd[42533056]: Received disconnect from
    10.11.8.6: 11: disconnected by user
    Dec 19 08:25:15 s143vp auth|security:info sshd[47251630]: Accepted publickey for
    itbipat1 from 10.11.8.6 port 54474 ssh2
    Dec 19 08:25:17 s143vp auth|security:info sshd[41811970]: subsystem request for
    sftp
    Dec 19 08:26:21 s143vp auth|security:info sshd[41811970]: Received disconnect from
    10.11.8.6: 11: disconnected by user
    Dec 19 08:42:51 s143vp auth|security:info sshd[48234564]: Accepted publickey for
    itbipat1 from 10.11.8.6 port 55124 ssh2
    Dec 19 08:42:52 s143vp auth|security:info sshd[37159052]: subsystem request for
    sftp
    Dec 19 08:42:54 s143vp auth|security:info sshd[37159052]: subsystem request for
    sftp
    Dec 19 08:43:57 s143vp auth|security:info sshd[37159052]: Received disconnect from
    10.11.8.6: 11: disconnected by user
    Dec 20 02:37:01 s143vp auth|security:info sshd[40960178]: Did not receive
    identification string from 10.11.8.6
    Dec 20 02:37:07 s143vp auth|security:info sshd[46399562]: Accepted publickey for
    itbipat1 from 10.11.8.6 port 48390 ssh2
    Dec 20 02:37:10 s143vp auth|security:notice sudo: itbipat1 : TTY=unknown ;
    PWD=/home/itbipat1 ; USER=root ; COMMAND=/bin/sh -c printf OK
    Dec 20 02:37:11 s143vp auth|security:notice sudo: itbipat1 : TTY=unknown ;
    PWD=/home/itbipat1 ; USER=root ; COMMAND=/usr/sbin/lsuser -a maxage itbipat1
    Dec 20 02:37:11 s143vp auth|security:notice sudo: itbipat1 : TTY=unknown ;
    PWD=/home/itbipat1 ; USER=root ; COMMAND=/usr/bin/pwdadm -q itbipat1
    Dec 20 06:21:53 s143vp auth|security:info sshd[46989488]: Accepted publickey for
    itbipat1 from 10.11.8.6 port 38070 ssh2
    Dec 20 06:21:54 s143vp auth|security:info sshd[48234516]: subsystem request for
    sftp
    Dec 20 06:21:56 s143vp auth|security:notice sudo: itbipat1 : TTY=pts/159 ;
    PWD=/home/itbipat1 ; USER=root ; COMMAND=/home/itbipat1/.ansible/tmp/ansible-tmp-
    1671538914.8450217-122942-119521534934746/tmpxldhcrh5connectivity_test.sh
    Dec 20 06:22:57 s143vp auth|security:info sshd[48234516]: Received disconnect from
    10.11.8.6: 11: disconnected by user
    Dec 20 06:27:34 s143vp auth|security:info sshd[47448212]: Accepted publickey for
    itbipat1 from 10.11.8.6 port 38326 ssh2
    Dec 20 06:27:35 s143vp auth|security:info sshd[48234554]: subsystem request for
    sftp
    Dec 20 06:27:37 s143vp auth|security:notice sudo: itbipat1 : TTY=pts/159 ;
    PWD=/home/itbipat1 ; USER=root ; COMMAND=/home/itbipat1/.ansible/tmp/ansible-tmp-
    1671539255.6681333-248921-25903900539917/tmp_kyyjqs3connectivity_test.sh
    Dec 20 06:28:38 s143vp auth|security:info sshd[48234554]: Received disconnect from
    10.11.8.6: 11: disconnected by user
    Dec 20 06:55:14 s143vp auth|security:info sshd[35651706]: Accepted publickey for
    root from 130.30.30.41 port 59580 ssh2
    Dec 20 06:55:14 s143vp auth|security:info sshd[35651706]: Received disconnect from
    130.30.30.41: 11: disconnected by user
    Dec 20 07:05:15 s143vp auth|security:info sshd[41746490]: Accepted publickey for
    itbipat1 from 10.11.8.6 port 39896 ssh2
    Dec 20 07:05:17 s143vp auth|security:info sshd[53084402]: subsystem request for
    sftp
    Dec 20 07:06:21 s143vp auth|security:info sshd[53084402]: Received disconnect from
    10.11.8.6: 11: disconnected by user
    Dec 20 08:01:34 s143vp auth|security:info sshd[45547604]: Accepted publickey for
    itbipat1 from 10.11.8.6 port 40290 ssh2
    Dec 20 08:01:35 s143vp auth|security:info sshd[20840662]: subsystem request for
    sftp
    Dec 20 08:01:37 s143vp auth|security:info sshd[20840662]: subsystem request for
    sftp
    Dec 20 08:02:40 s143vp auth|security:info sshd[20840662]: Received disconnect from
    10.11.8.6: 11: disconnected by user
    Dec 20 08:32:53 s143vp auth|security:info sshd[44892380]: Accepted publickey for
    itbipat1 from 10.11.8.6 port 42744 ssh2
    Dec 20 08:32:55 s143vp auth|security:info sshd[53149830]: subsystem request for
    sftp
    Dec 20 08:33:59 s143vp auth|security:info sshd[53149830]: Received disconnect from
    10.11.8.6: 11: disconnected by user
    Dec 20 16:23:43 s143vp auth|security:info sshd[42532936]: Accepted publickey for
    itbipat1 from 10.11.8.6 port 43154 ssh2
    Dec 20 16:23:45 s143vp auth|security:info sshd[48234596]: subsystem request for
    sftp
    Dec 20 16:23:48 s143vp auth|security:notice sudo: itbipat1 : TTY=pts/159 ;
    PWD=/home/itbipat1 ; USER=root ; COMMAND=/home/itbipat1/.ansible/tmp/ansible-tmp-
    1671575025.2616267-43075-33350446442910/tmppec9i16oconnectivity_test.sh
    Dec 20 16:24:17 s143vp auth|security:info sshd[49807560]: Accepted publickey for
    itbipat1 from 10.11.8.6 port 43268 ssh2
    Dec 20 16:24:18 s143vp auth|security:info sshd[37159076]: Received disconnect from
    10.11.8.6: 11: disconnected by user
    Dec 20 16:24:49 s143vp auth|security:info sshd[48234596]: Received disconnect from
    10.11.8.6: 11: disconnected by user
    Dec 20 16:25:05 s143vp auth|security:info sshd[37159084]: Accepted publickey for
    itbipat1 from 10.11.8.6 port 43366 ssh2
    Dec 20 16:25:07 s143vp auth|security:info sshd[42532944]: subsystem request for
    sftp
    Dec 20 16:25:10 s143vp auth|security:notice sudo: itbipat1 : TTY=pts/159 ;
    PWD=/home/itbipat1 ; USER=root ; COMMAND=/home/itbipat1/.ansible/tmp/ansible-tmp-
    1671575107.6219316-44854-94236194501825/tmp0xxxiy5tlog4j2_scan.sh
    Dec 20 16:25:42 s143vp auth|security:info sshd[44892284]: Accepted publickey for
    itbipat1 from 10.11.8.6 port 43466 ssh2
    Dec 20 16:25:43 s143vp auth|security:info sshd[53084410]: Received disconnect from
    10.11.8.6: 11: disconnected by user
    Dec 20 16:26:13 s143vp auth|security:info sshd[42532944]: Received disconnect from
    10.11.8.6: 11: disconnected by user
    Dec 20 21:27:41 s143vp auth|security:info sshd[53870616]: Accepted publickey for
    itbipat1 from 10.11.8.6 port 39248 ssh2
    Dec 20 21:27:43 s143vp auth|security:info sshd[51576856]: subsystem request for
    sftp
    Dec 20 21:27:45 s143vp auth|security:notice sudo: itbipat1 : TTY=pts/159 ;
    PWD=/home/itbipat1 ; USER=root ; COMMAND=/home/itbipat1/.ansible/tmp/ansible-tmp-
    1671593263.1058981-225690-198953152722379/tmpip8aab6_connectivity_test.sh
    Dec 20 21:28:46 s143vp auth|security:info sshd[51576856]: Received disconnect from
    10.11.8.6: 11: disconnected by user
    Dec 20 21:31:31 s143vp auth|security:info sshd[45875424]: Accepted publickey for
    itbipat1 from 10.11.8.6 port 39394 ssh2
    Dec 20 21:31:34 s143vp auth|security:info sshd[41746600]: subsystem request for
    sftp
    Dec 20 21:32:39 s143vp auth|security:info sshd[41746600]: Received disconnect from
    10.11.8.6: 11: disconnected by user
    Dec 20 21:33:27 s143vp auth|security:info sshd[53870650]: Accepted publickey for
    itbipat1 from 10.11.8.6 port 39446 ssh2
    Dec 20 21:33:30 s143vp auth|security:info sshd[41746614]: subsystem request for
    sftp
    Dec 20 21:33:31 s143vp auth|security:info sshd[41746614]: subsystem request for
    sftp
    Dec 20 21:34:35 s143vp auth|security:info sshd[41746614]: Received disconnect from
    10.11.8.6: 11: disconnected by user
    Dec 21 02:33:03 s143vp auth|security:info sshd[44564666]: Did not receive
    identification string from 10.11.8.6
    Dec 21 02:33:09 s143vp auth|security:info sshd[41746592]: Accepted publickey for
    itbipat1 from 10.11.8.6 port 47160 ssh2
    Dec 21 02:33:11 s143vp auth|security:notice sudo: itbipat1 : TTY=unknown ;
    PWD=/home/itbipat1 ; USER=root ; COMMAND=/bin/sh -c printf OK
    Dec 21 02:33:12 s143vp auth|security:notice sudo: itbipat1 : TTY=unknown ;
    PWD=/home/itbipat1 ; USER=root ; COMMAND=/usr/sbin/lsuser -a maxage itbipat1
    Dec 21 02:33:12 s143vp auth|security:notice sudo: itbipat1 : TTY=unknown ;
    PWD=/home/itbipat1 ; USER=root ; COMMAND=/usr/bin/pwdadm -q itbipat1
    Dec 21 05:52:45 s143vp auth|security:info sshd[42008622]: Accepted publickey for
    itbipat1 from 10.11.8.6 port 38302 ssh2
    Dec 21 05:52:48 s143vp auth|security:info sshd[53805254]: subsystem request for
    sftp
    Dec 21 05:53:51 s143vp auth|security:info sshd[53805254]: Received disconnect from
    10.11.8.6: 11: disconnected by user
    Dec 21 06:06:28 s143vp auth|security:info sshd[41222372]: Accepted publickey for
    itbipat1 from 10.11.8.6 port 40400 ssh2
    Dec 21 06:06:30 s143vp auth|security:info sshd[53805090]: subsystem request for
    sftp
    Dec 21 06:06:32 s143vp auth|security:notice sudo: itbipat1 : TTY=pts/159 ;
    PWD=/home/itbipat1 ; USER=root ; COMMAND=/home/itbipat1/.ansible/tmp/ansible-tmp-
    1671624390.2082217-104143-199692660340680/tmp3gnm8zhdconnectivity_test.sh
    Dec 21 06:07:33 s143vp auth|security:info sshd[53805090]: Received disconnect from
    10.11.8.6: 11: disconnected by user
    Dec 21 06:32:00 s143vp auth|security:info sshd[41222280]: Accepted publickey for
    itbipat1 from 10.11.8.6 port 44164 ssh2
    Dec 21 06:32:02 s143vp auth|security:info sshd[54591734]: subsystem request for
    sftp
    Dec 21 06:32:04 s143vp auth|security:notice sudo: itbipat1 : TTY=pts/159 ;
    PWD=/home/itbipat1 ; USER=root ; COMMAND=/home/itbipat1/.ansible/tmp/ansible-tmp-
    1671625922.535031-140126-234911955258344/tmp39ot238dconnectivity_test.sh
    Dec 21 06:33:05 s143vp auth|security:info sshd[54591734]: Received disconnect from
    10.11.8.6: 11: disconnected by user
    Dec 21 06:55:13 s143vp auth|security:info sshd[53149744]: Accepted publickey for
    root from 130.30.30.41 port 36200 ssh2
    Dec 21 06:55:13 s143vp auth|security:info sshd[53149744]: Received disconnect from
    130.30.30.41: 11: disconnected by user
    Dec 21 07:09:27 s143vp auth|security:info sshd[41746652]: Accepted publickey for
    itbipat1 from 10.11.8.6 port 47898 ssh2
    Dec 21 07:09:29 s143vp auth|security:info sshd[46989350]: subsystem request for
    sftp
    Dec 21 07:10:34 s143vp auth|security:info sshd[46989350]: Received disconnect from
    10.11.8.6: 11: disconnected by user
    Dec 21 07:32:29 s143vp auth|security:info sshd[20840560]: Accepted publickey for
    itbipat1 from 10.11.8.6 port 49774 ssh2
    Dec 21 07:32:31 s143vp auth|security:info sshd[40960016]: subsystem request for
    sftp
    Dec 21 07:32:33 s143vp auth|security:info sshd[40960016]: subsystem request for
    sftp
    Dec 21 07:33:37 s143vp auth|security:info sshd[40960016]: Received disconnect from
    10.11.8.6: 11: disconnected by user
    Dec 21 08:33:36 s143vp auth|security:info sshd[40960032]: Accepted publickey for
    itbipat1 from 10.11.8.6 port 60526 ssh2
    Dec 21 08:33:38 s143vp auth|security:info sshd[39977104]: subsystem request for
    sftp
    Dec 21 08:34:42 s143vp auth|security:info sshd[39977104]: Received disconnect from
    10.11.8.6: 11: disconnected by user
    Dec 21 16:05:40 s143vp auth|security:info sshd[54591658]: Accepted publickey for
    itbipat1 from 10.11.8.6 port 34596 ssh2
    Dec 21 16:05:42 s143vp auth|security:info sshd[47382684]: subsystem request for
    sftp
    Dec 21 16:05:45 s143vp auth|security:notice sudo: itbipat1 : TTY=pts/159 ;
    PWD=/home/itbipat1 ; USER=root ; COMMAND=/home/itbipat1/.ansible/tmp/ansible-tmp-
    1671660342.1641345-153872-136933266692865/tmp_6qbgnkiconnectivity_test.sh
    Dec 21 16:06:46 s143vp auth|security:info sshd[47382684]: Received disconnect from
    10.11.8.6: 11: disconnected by user
    Dec 21 16:14:22 s143vp auth|security:info sshd[42008662]: Accepted publickey for
    itbipat1 from 10.11.8.6 port 34914 ssh2
    Dec 21 16:14:24 s143vp auth|security:info sshd[54591720]: subsystem request for
    sftp
    Dec 21 16:15:25 s143vp auth|security:info sshd[53149884]: Accepted publickey for
    itbipat1 from 10.11.8.6 port 35060 ssh2
    Dec 21 16:15:27 s143vp auth|security:info sshd[47382752]: Received disconnect from
    10.11.8.6: 11: disconnected by user
    Dec 21 16:15:28 s143vp auth|security:info sshd[54591720]: Received disconnect from
    10.11.8.6: 11: disconnected by user
    Dec 21 16:16:30 s143vp auth|security:info sshd[42008688]: Accepted publickey for
    itbipat1 from 10.11.8.6 port 35194 ssh2
    Dec 21 16:16:32 s143vp auth|security:info sshd[54591728]: subsystem request for
    sftp
    Dec 21 16:17:36 s143vp auth|security:info sshd[54591728]: Received disconnect from
    10.11.8.6: 11: disconnected by user
    Dec 22 02:30:39 s143vp auth|security:info sshd[53870794]: Did not receive
    identification string from 10.11.8.5
    Dec 22 02:30:45 s143vp auth|security:info sshd[53084272]: Accepted publickey for
    itbipat1 from 10.11.8.5 port 54954 ssh2
    Dec 22 02:30:47 s143vp auth|security:notice sudo: itbipat1 : TTY=unknown ;
    PWD=/home/itbipat1 ; USER=root ; COMMAND=/bin/sh -c printf OK
    Dec 22 02:30:48 s143vp auth|security:notice sudo: itbipat1 : TTY=unknown ;
    PWD=/home/itbipat1 ; USER=root ; COMMAND=/usr/sbin/lsuser -a maxage itbipat1
    Dec 22 02:30:48 s143vp auth|security:notice sudo: itbipat1 : TTY=unknown ;
    PWD=/home/itbipat1 ; USER=root ; COMMAND=/usr/bin/pwdadm -q itbipat1
    Dec 22 03:56:47 s143vp auth|security:info sshd[47251460]: Accepted publickey for
    itbipat1 from 10.11.8.6 port 58214 ssh2
    Dec 22 03:56:48 s143vp auth|security:info sshd[43647058]: subsystem request for
    sftp
    Dec 22 03:56:51 s143vp auth|security:notice sudo: itbipat1 : TTY=pts/159 ;
    PWD=/home/itbipat1 ; USER=root ; COMMAND=/home/itbipat1/.ansible/tmp/ansible-tmp-
    1671703008.8897321-79975-70957478829933/tmps63q8uz3connectivity_test.sh
    Dec 22 03:57:52 s143vp auth|security:info sshd[43647058]: Received disconnect from
    10.11.8.6: 11: disconnected by user
    Dec 22 04:18:55 s143vp auth|security:info sshd[43647174]: Accepted publickey for
    itbipat1 from 10.11.8.6 port 59820 ssh2
    Dec 22 04:18:57 s143vp auth|security:info sshd[45547680]: subsystem request for
    sftp
    Dec 22 04:20:01 s143vp auth|security:info sshd[45547680]: Received disconnect from
    10.11.8.6: 11: disconnected by user
    Dec 22 04:47:26 s143vp auth|security:info sshd[52625630]: Accepted publickey for
    itbipat1 from 10.11.8.6 port 60468 ssh2
    Dec 22 04:47:27 s143vp auth|security:info sshd[43647086]: subsystem request for
    sftp
    Dec 22 04:47:29 s143vp auth|security:info sshd[43647086]: subsystem request for
    sftp
    Dec 22 04:48:32 s143vp auth|security:info sshd[43647086]: Received disconnect from
    10.11.8.6: 11: disconnected by user
    Dec 22 06:03:49 s143vp auth|security:info sshd[44564636]: Accepted publickey for
    itbipat1 from 10.11.8.6 port 40788 ssh2
    Dec 22 06:03:51 s143vp auth|security:info sshd[54264036]: subsystem request for
    sftp
    Dec 22 06:03:54 s143vp auth|security:notice sudo: itbipat1 : TTY=pts/159 ;
    PWD=/home/itbipat1 ; USER=root ; COMMAND=/home/itbipat1/.ansible/tmp/ansible-tmp-
    1671710631.8998344-88350-154990838579889/tmpn28wc7ozconnectivity_test.sh
    Dec 22 06:04:55 s143vp auth|security:info sshd[54264036]: Received disconnect from
    10.11.8.6: 11: disconnected by user
    Dec 22 06:55:14 s143vp auth|security:info sshd[46137522]: Accepted publickey for
    root from 130.30.30.41 port 42126 ssh2
    Dec 22 06:55:14 s143vp auth|security:info sshd[46137522]: Received disconnect from
    130.30.30.41: 11: disconnected by user
    Dec 22 08:33:06 s143vp auth|security:info sshd[52559984]: Accepted publickey for
    itbipat1 from 10.11.8.6 port 43904 ssh2
    Dec 22 08:33:07 s143vp auth|security:info sshd[45744204]: subsystem request for
    sftp
    Dec 22 08:34:11 s143vp auth|security:info sshd[45744204]: Received disconnect from
    10.11.8.6: 11: disconnected by user
    Dec 22 10:58:27 s143vp auth|security:info sshd[51511422]: Accepted password for
    PLAPLBDDQUA01 from 10.11.0.154 port 49582 ssh2
    Dec 22 10:58:28 s143vp auth|security:info sshd[46923988]: Received disconnect from
    10.11.0.154: 11: Connection terminated by the client.
    Dec 22 12:13:52 s143vp auth|security:info sshd[47513786]: Accepted publickey for
    itbipat1 from 10.11.8.6 port 39574 ssh2
    Dec 22 12:13:54 s143vp auth|security:info sshd[41222186]: subsystem request for
    sftp
    Dec 22 12:13:56 s143vp auth|security:notice sudo: itbipat1 : TTY=pts/159 ;
    PWD=/home/itbipat1 ; USER=root ; COMMAND=/home/itbipat1/.ansible/tmp/ansible-tmp-
    1671732833.6840138-206376-120486546378317/tmpw8mw31y1aic_requirements_unix.sh --
    gsma_code=itb --aix_minimum_xlc_version=13.1.0.0 --cit_version=9.2.29 --
    cit_catalog_version=20221031 --cit_install_path=/var/opt/ansible/GTS/CIT --
    ilmt_version=9.2.29 --ilmt_catalog_version=9.2.29
    --ilmt_install_path=/var/opt/ansible/GTS/ILMT
    --vmmtool_install_path=/var/opt/ansible/GTS/VMMAN
    Dec 22 12:14:58 s143vp auth|security:info sshd[41222186]: Received disconnect from
    10.11.8.6: 11: disconnected by user
    Dec 22 12:15:42 s143vp auth|security:info sshd[47251632]: Accepted publickey for
    itbipat1 from 10.11.8.6 port 39746 ssh2
    Dec 22 12:15:44 s143vp auth|security:info sshd[47513792]: subsystem request for
    sftp
    Dec 22 12:15:47 s143vp auth|security:notice sudo: itbipat1 : TTY=pts/159 ;
    PWD=/home/itbipat1 ; USER=root ; COMMAND=/bin/sh -c printf OK
    Dec 22 12:15:47 s143vp auth|security:notice sudo: itbipat1 : TTY=pts/159 ;
    PWD=/home/itbipat1 ; USER=root ; COMMAND=/bin/sh -c printf OK
    Dec 22 12:15:47 s143vp auth|security:notice sudo: itbipat1 : TTY=pts/159 ;
    PWD=/home/itbipat1 ; USER=root ; COMMAND=/usr/bin/find /etc/sudoers.d -type f -
    print
    Dec 22 12:15:47 s143vp auth|security:notice sudo: itbipat1 : TTY=pts/159 ;
    PWD=/home/itbipat1 ; USER=root ; COMMAND=/usr/bin/grep -Fxq #includedir
    /etc/sudoers.d /etc/sudoers
    Dec 22 12:15:47 s143vp auth|security:notice sudo: itbipat1 : TTY=pts/159 ;
    PWD=/home/itbipat1 ; USER=root ; COMMAND=/usr/bin/grep -q -E ^#include
    /etc/sudoers.d/123_AE_GLB /etc/sudoers
    Dec 22 12:15:47 s143vp auth|security:notice sudo: itbipat1 : TTY=pts/159 ;
    PWD=/home/itbipat1 ; USER=root ; COMMAND=/usr/bin/test -f /etc/sudoers.d/123_AE_GLB
    Dec 22 12:15:47 s143vp auth|security:notice sudo: itbipat1 : TTY=pts/159 ;
    PWD=/home/itbipat1 ; USER=root ; COMMAND=/usr/bin/grep -n -E ^#include
    /etc/sudoers.d/123_AE_GLB /etc/sudoers
    Dec 22 12:15:47 s143vp auth|security:notice sudo: itbipat1 : TTY=pts/159 ;
    PWD=/home/itbipat1 ; USER=root ; COMMAND=/usr/bin/grep -q -E ^#include
    /etc/sudoers.d/147_ANSIBLE_GLB /etc/sudoers
    Dec 22 12:15:47 s143vp auth|security:notice sudo: itbipat1 : TTY=pts/159 ;
    PWD=/home/itbipat1 ; USER=root ; COMMAND=/usr/bin/grep -q -E ^#include
    /etc/sudoers.d/152_ANSIBLE_ENGINE_GLB /etc/sudoers
    Dec 22 12:15:47 s143vp auth|security:notice sudo: itbipat1 : TTY=pts/159 ;
    PWD=/home/itbipat1 ; USER=root ; COMMAND=/usr/bin/test -f
    /etc/sudoers.d/152_ANSIBLE_ENGINE_GLB
    Dec 22 12:15:47 s143vp auth|security:notice sudo: itbipat1 : TTY=pts/159 ;
    PWD=/home/itbipat1 ; USER=root ; COMMAND=/usr/bin/grep -n -E ^#include
    /etc/sudoers.d/152_ANSIBLE_ENGINE_GLB /etc/sudoers
    Dec 22 12:15:47 s143vp auth|security:notice sudo: itbipat1 : TTY=pts/159 ;
    PWD=/home/itbipat1 ; USER=root ; COMMAND=/usr/bin/id -u
    Dec 22 12:15:47 s143vp auth|security:notice sudo: itbipat1 : TTY=pts/159 ;
    PWD=/home/itbipat1 ; USER=root ; COMMAND=/usr/sbin/lsuser -f root
    Dec 22 12:15:47 s143vp auth|security:notice sudo: itbipat1 : TTY=pts/159 ;
    PWD=/home/itbipat1 ; USER=root ; COMMAND=/usr/bin/lssec -f /etc/security/passwd -s
    root -a lastupdate
    Dec 22 12:15:47 s143vp auth|security:notice sudo: itbipat1 : TTY=pts/159 ;
    PWD=/home/itbipat1 ; USER=root ; COMMAND=/usr/bin/test -f
    /usr/es/sbin/cluster/utilities/get_local_nodename -o -f
    /usr/es/sbin/cluster/utilities/get_local_nodename.sh
    Dec 22 12:16:59 s143vp auth|security:info sshd[47513792]: Received disconnect from
    10.11.8.6: 11: disconnected by user
    Dec 23 02:26:57 s143vp auth|security:info sshd[54264030]: Did not receive
    identification string from 10.11.8.5
    Dec 23 02:27:03 s143vp auth|security:info sshd[51511330]: Accepted publickey for
    itbipat1 from 10.11.8.5 port 45296 ssh2
    Dec 23 02:27:05 s143vp auth|security:notice sudo: itbipat1 : TTY=unknown ;
    PWD=/home/itbipat1 ; USER=root ; COMMAND=/bin/sh -c printf OK
    Dec 23 02:27:06 s143vp auth|security:notice sudo: itbipat1 : TTY=unknown ;
    PWD=/home/itbipat1 ; USER=root ; COMMAND=/usr/sbin/lsuser -a maxage itbipat1
    Dec 23 02:27:06 s143vp auth|security:notice sudo: itbipat1 : TTY=unknown ;
    PWD=/home/itbipat1 ; USER=root ; COMMAND=/usr/bin/pwdadm -q itbipat1
    Dec 23 04:05:42 s143vp auth|security:info sshd[48037926]: Accepted publickey for
    itbipat1 from 10.11.8.6 port 37048 ssh2
    Dec 23 04:05:44 s143vp auth|security:info sshd[51511456]: subsystem request for
    sftp
    Dec 23 04:05:46 s143vp auth|security:notice sudo: itbipat1 : TTY=pts/159 ;
    PWD=/home/itbipat1 ; USER=root ; COMMAND=/home/itbipat1/.ansible/tmp/ansible-tmp-
    1671789944.3898387-34434-134605172711966/tmpgvfgv8x_connectivity_test.sh
    Dec 23 04:06:47 s143vp auth|security:info sshd[51511456]: Received disconnect from
    10.11.8.6: 11: disconnected by user
    Dec 23 04:27:05 s143vp auth|security:info sshd[48038104]: Accepted publickey for
    itbipat1 from 10.11.8.6 port 38814 ssh2
    Dec 23 04:27:07 s143vp auth|security:info sshd[49479824]: subsystem request for
    sftp
    Dec 23 04:28:11 s143vp auth|security:info sshd[49479824]: Received disconnect from
    10.11.8.6: 11: disconnected by user
    Dec 23 05:38:04 s143vp auth|security:info sshd[44367872]: Accepted publickey for
    itbipat1 from 10.11.8.6 port 40296 ssh2
    Dec 23 05:38:06 s143vp auth|security:info sshd[54263814]: subsystem request for
    sftp
    Dec 23 05:38:08 s143vp auth|security:info sshd[54263814]: subsystem request for
    sftp
    Dec 23 05:39:11 s143vp auth|security:info sshd[54263814]: Received disconnect from
    10.11.8.6: 11: disconnected by user
    Dec 23 06:02:04 s143vp auth|security:info sshd[46923992]: Accepted publickey for
    itbipat1 from 10.11.8.6 port 41920 ssh2
    Dec 23 06:02:05 s143vp auth|security:info sshd[44040432]: subsystem request for
    sftp
    Dec 23 06:02:08 s143vp auth|security:notice sudo: itbipat1 : TTY=pts/159 ;
    PWD=/home/itbipat1 ; USER=root ; COMMAND=/home/itbipat1/.ansible/tmp/ansible-tmp-
    1671796926.0807114-62203-190185265177553/tmpyzbhjqhiconnectivity_test.sh
    Dec 23 06:03:09 s143vp auth|security:info sshd[44040432]: Received disconnect from
    10.11.8.6: 11: disconnected by user
    Dec 23 06:04:46 s143vp auth|security:info sshd[46924012]: Accepted publickey for
    itbipat1 from 10.11.8.6 port 42358 ssh2
    Dec 23 06:04:47 s143vp auth|security:info sshd[44040204]: subsystem request for
    sftp
    Dec 23 06:04:50 s143vp auth|security:notice sudo: itbipat1 : TTY=pts/159 ;
    PWD=/home/itbipat1 ; USER=root ; COMMAND=/home/itbipat1/.ansible/tmp/ansible-tmp-
    1671797088.067145-68832-42544377577619/tmpaidtx_hlconnectivity_test.sh
    Dec 23 06:05:12 s143vp auth|security:info sshd[44040204]: subsystem request for
    sftp
    Dec 23 06:05:30 s143vp auth|security:info sshd[44040204]: subsystem request for
    sftp
    Dec 23 06:05:32 s143vp auth|security:info sshd[44040204]: subsystem request for
    sftp
    Dec 23 06:06:36 s143vp auth|security:info sshd[44040204]: Received disconnect from
    10.11.8.6: 11: disconnected by user
    Dec 23 06:55:14 s143vp auth|security:info sshd[44564582]: Accepted publickey for
    root from 130.30.30.41 port 48240 ssh2
    Dec 23 06:55:14 s143vp auth|security:info sshd[44564582]: Received disconnect from
    130.30.30.41: 11: disconnected by user
    Dec 23 08:32:58 s143vp auth|security:info sshd[41746556]: Accepted publickey for
    itbipat1 from 10.11.8.6 port 48688 ssh2
    Dec 23 08:33:00 s143vp auth|security:info sshd[35651674]: subsystem request for
    sftp
    Dec 23 08:34:04 s143vp auth|security:info sshd[35651674]: Received disconnect from
    10.11.8.6: 11: disconnected by user
    Dec 24 03:55:11 s143vp auth|security:info sshd[47513688]: Accepted publickey for
    itbipat1 from 10.11.8.6 port 36818 ssh2
    Dec 24 03:55:12 s143vp auth|security:info sshd[53149732]: subsystem request for
    sftp
    Dec 24 03:55:15 s143vp auth|security:notice sudo: itbipat1 : TTY=pts/159 ;
    PWD=/home/itbipat1 ; USER=root ; COMMAND=/home/itbipat1/.ansible/tmp/ansible-tmp-
    1671875713.1387389-78076-228530580646525/tmp3o1h7jdeconnectivity_test.sh
    Dec 24 03:56:16 s143vp auth|security:info sshd[53149732]: Received disconnect from
    10.11.8.6: 11: disconnected by user
    Dec 24 04:15:51 s143vp auth|security:info sshd[46989512]: Accepted publickey for
    itbipat1 from 10.11.8.6 port 38562 ssh2
    Dec 24 04:15:53 s143vp auth|security:info sshd[39649312]: subsystem request for
    sftp
    Dec 24 04:16:57 s143vp auth|security:info sshd[39649312]: Received disconnect from
    10.11.8.6: 11: disconnected by user
    Dec 24 04:19:20 s143vp auth|security:info sshd[53149878]: Accepted publickey for
    itbipat1 from 10.11.8.6 port 38894 ssh2
    Dec 24 04:19:22 s143vp auth|security:info sshd[46989558]: subsystem request for
    sftp
    Dec 24 04:19:23 s143vp auth|security:info sshd[46989558]: subsystem request for
    sftp
    Dec 24 04:20:26 s143vp auth|security:info sshd[46989558]: Received disconnect from
    10.11.8.6: 11: disconnected by user
    Dec 24 06:19:12 s143vp auth|security:info sshd[45744146]: Accepted publickey for
    itbipat1 from 10.11.8.6 port 48320 ssh2
    Dec 24 06:19:14 s143vp auth|security:info sshd[54264000]: subsystem request for
    sftp
    Dec 24 06:19:16 s143vp auth|security:notice sudo: itbipat1 : TTY=pts/159 ;
    PWD=/home/itbipat1 ; USER=root ; COMMAND=/home/itbipat1/.ansible/tmp/ansible-tmp-
    1671884354.2072992-88442-137613907050090/tmpiwu4o7yaconnectivity_test.sh
    Dec 24 06:20:17 s143vp auth|security:info sshd[54264000]: Received disconnect from
    10.11.8.6: 11: disconnected by user
    Dec 24 06:55:14 s143vp auth|security:info sshd[47448128]: Accepted publickey for
    root from 130.30.30.41 port 54634 ssh2
    Dec 24 06:55:14 s143vp auth|security:info sshd[47448128]: Received disconnect from
    130.30.30.41: 11: disconnected by user
    Dec 24 08:33:20 s143vp auth|security:info sshd[52625410]: Accepted publickey for
    itbipat1 from 10.11.8.6 port 50982 ssh2
    Dec 24 08:33:22 s143vp auth|security:info sshd[47448136]: subsystem request for
    sftp
    Dec 24 08:34:26 s143vp auth|security:info sshd[47448136]: Received disconnect from
    10.11.8.6: 11: disconnected by user
    Dec 24 10:58:21 s143vp auth|security:info sshd[47448276]: Accepted password for
    itbipat1 from 10.11.0.154 port 53666 ssh2
    Dec 24 10:58:21 s143vp auth|security:info sshd[53805202]: Received disconnect from
    10.11.0.154: 11: Connection terminated by the client.
    Dec 25 03:51:51 s143vp auth|security:info sshd[46989458]: Accepted publickey for
    itbipat1 from 10.11.8.6 port 35364 ssh2
    Dec 25 03:51:52 s143vp auth|security:info sshd[47251460]: subsystem request for
    sftp
    Dec 25 03:51:55 s143vp auth|security:notice sudo: itbipat1 : TTY=pts/159 ;
    PWD=/home/itbipat1 ; USER=root ; COMMAND=/home/itbipat1/.ansible/tmp/ansible-tmp-
    1671961912.9764729-108052-93605301012989/tmp9d3ti0j2connectivity_test.sh
    Dec 25 03:52:56 s143vp auth|security:info sshd[47251460]: Received disconnect from
    10.11.8.6: 11: disconnected by user
    Dec 25 04:11:40 s143vp auth|security:info sshd[53018854]: Accepted publickey for
    itbipat1 from 10.11.8.6 port 37426 ssh2
    Dec 25 04:11:42 s143vp auth|security:info sshd[46989388]: subsystem request for
    sftp
    Dec 25 04:12:46 s143vp auth|security:info sshd[46989388]: Received disconnect from
    10.11.8.6: 11: disconnected by user
    Dec 25 04:17:20 s143vp auth|security:info sshd[52560126]: Accepted publickey for
    itbipat1 from 10.11.8.6 port 37686 ssh2
    Dec 25 04:17:21 s143vp auth|security:info sshd[53018654]: subsystem request for
    sftp
    Dec 25 04:17:23 s143vp auth|security:info sshd[53018654]: subsystem request for
    sftp
    Dec 25 04:18:26 s143vp auth|security:info sshd[53018654]: Received disconnect from
    10.11.8.6: 11: disconnected by user
    Dec 25 06:01:42 s143vp auth|security:info sshd[53280842]: Accepted publickey for
    itbipat1 from 10.11.8.6 port 46722 ssh2
    Dec 25 06:01:43 s143vp auth|security:info sshd[52559914]: subsystem request for
    sftp
    Dec 25 06:01:46 s143vp auth|security:notice sudo: itbipat1 : TTY=pts/159 ;
    PWD=/home/itbipat1 ; USER=root ; COMMAND=/home/itbipat1/.ansible/tmp/ansible-tmp-
    1671969704.03282-224810-21784430579637/tmpgupz_4j5connectivity_test.sh
    Dec 25 06:02:46 s143vp auth|security:info sshd[52559914]: Received disconnect from
    10.11.8.6: 11: disconnected by user
    Dec 25 06:55:14 s143vp auth|security:info sshd[39649398]: Accepted publickey for
    root from 130.30.30.41 port 60510 ssh2
    Dec 25 06:55:14 s143vp auth|security:info sshd[39649398]: Received disconnect from
    130.30.30.41: 11: disconnected by user
    Dec 25 08:33:34 s143vp auth|security:info sshd[51511376]: Accepted publickey for
    itbipat1 from 10.11.8.6 port 49688 ssh2
    Dec 25 08:33:36 s143vp auth|security:info sshd[39649460]: subsystem request for
    sftp
    Dec 25 08:34:40 s143vp auth|security:info sshd[39649460]: Received disconnect from
    10.11.8.6: 11: disconnected by user
    Dec 26 02:37:06 s143vp auth|security:info sshd[47513732]: Did not receive
    identification string from 10.11.8.5
    Dec 26 02:37:12 s143vp auth|security:info sshd[53149780]: Accepted publickey for
    itbipat1 from 10.11.8.5 port 42978 ssh2
    Dec 26 02:37:15 s143vp auth|security:notice sudo: itbipat1 : TTY=unknown ;
    PWD=/home/itbipat1 ; USER=root ; COMMAND=/bin/sh -c printf OK
    Dec 26 02:37:15 s143vp auth|security:notice sudo: itbipat1 : TTY=unknown ;
    PWD=/home/itbipat1 ; USER=root ; COMMAND=/usr/sbin/lsuser -a maxage itbipat1
    Dec 26 02:37:15 s143vp auth|security:notice sudo: itbipat1 : TTY=unknown ;
    PWD=/home/itbipat1 ; USER=root ; COMMAND=/usr/bin/pwdadm -q itbipat1
    Dec 26 03:51:36 s143vp auth|security:info sshd[46923892]: Accepted publickey for
    itbipat1 from 10.11.8.6 port 34064 ssh2
    Dec 26 03:51:37 s143vp auth|security:info sshd[54657118]: subsystem request for
    sftp
    Dec 26 03:51:40 s143vp auth|security:notice sudo: itbipat1 : TTY=pts/159 ;
    PWD=/home/itbipat1 ; USER=root ; COMMAND=/home/itbipat1/.ansible/tmp/ansible-tmp-
    1672048298.0366325-113412-130808784421357/tmpkszz1f6jconnectivity_test.sh
    Dec 26 03:52:41 s143vp auth|security:info sshd[54657118]: Received disconnect from
    10.11.8.6: 11: disconnected by user
    Dec 26 04:13:07 s143vp auth|security:info sshd[53805118]: Accepted publickey for
    itbipat1 from 10.11.8.6 port 36018 ssh2
    Dec 26 04:13:10 s143vp auth|security:info sshd[51511422]: subsystem request for
    sftp
    Dec 26 06:01:42 s143vp auth|security:info sshd[46923846]: Accepted publickey for
    itbipat1 from 10.11.8.6 port 37424 ssh2
    Dec 26 06:01:43 s143vp auth|security:info sshd[41746682]: subsystem request for
    sftp
    Dec 26 06:01:46 s143vp auth|security:notice sudo: itbipat1 : TTY=pts/160 ;
    PWD=/home/itbipat1 ; USER=root ; COMMAND=/home/itbipat1/.ansible/tmp/ansible-tmp-
    1672056104.1002889-47337-136983961485951/tmpehu1diqdconnectivity_test.sh
    Dec 26 06:02:47 s143vp auth|security:info sshd[41746682]: Received disconnect from
    10.11.8.6: 11: disconnected by user
    Dec 26 06:24:57 s143vp auth|security:info sshd[41746658]: Accepted publickey for
    itbipat1 from 10.11.8.6 port 37538 ssh2
    Dec 26 06:25:58 s143vp auth|security:info sshd[49283300]: Received disconnect from
    10.11.8.6: 11: disconnected by user
    Dec 26 06:27:28 s143vp auth|security:info sshd[41746684]: Accepted publickey for
    itbipat1 from 10.11.8.6 port 37724 ssh2
    Dec 26 06:27:29 s143vp auth|security:info sshd[49283306]: subsystem request for
    sftp
    Dec 26 06:27:30 s143vp auth|security:info sshd[49283306]: subsystem request for
    sftp
    Dec 26 06:28:34 s143vp auth|security:info sshd[49283306]: Received disconnect from
    10.11.8.6: 11: disconnected by user
    Dec 26 06:55:13 s143vp auth|security:info sshd[47382586]: Accepted publickey for
    root from 130.30.30.41 port 37288 ssh2
    Dec 26 06:55:13 s143vp auth|security:info sshd[47382586]: Received disconnect from
    130.30.30.41: 11: disconnected by user
    Dec 26 08:34:22 s143vp auth|security:info sshd[46137366]: Accepted publickey for
    itbipat1 from 10.11.8.6 port 46224 ssh2
    Dec 26 08:34:24 s143vp auth|security:info sshd[47448146]: subsystem request for
    sftp
    Dec 26 08:35:28 s143vp auth|security:info sshd[47448146]: Received disconnect from
    10.11.8.6: 11: disconnected by user
    Dec 27 02:24:13 s143vp auth|security:info sshd[44564558]: Did not receive
    identification string from 10.11.8.5
    Dec 27 02:24:19 s143vp auth|security:info sshd[47513760]: Accepted publickey for
    itbipat1 from 10.11.8.5 port 35496 ssh2
    Dec 27 02:24:22 s143vp auth|security:notice sudo: itbipat1 : TTY=unknown ;
    PWD=/home/itbipat1 ; USER=root ; COMMAND=/bin/sh -c printf OK
    Dec 27 02:24:22 s143vp auth|security:notice sudo: itbipat1 : TTY=unknown ;
    PWD=/home/itbipat1 ; USER=root ; COMMAND=/usr/sbin/lsuser -a maxage itbipat1
    Dec 27 02:24:22 s143vp auth|security:notice sudo: itbipat1 : TTY=unknown ;
    PWD=/home/itbipat1 ; USER=root ; COMMAND=/usr/bin/pwdadm -q itbipat1
    Dec 27 03:54:59 s143vp auth|security:info sshd[53674182]: Accepted publickey for
    itbipat1 from 10.11.8.6 port 32946 ssh2
    Dec 27 03:55:00 s143vp auth|security:info sshd[47513674]: subsystem request for
    sftp
    Dec 27 03:55:02 s143vp auth|security:notice sudo: itbipat1 : TTY=pts/160 ;
    PWD=/home/itbipat1 ; USER=root ; COMMAND=/home/itbipat1/.ansible/tmp/ansible-tmp-
    1672134900.7048073-28133-92603742916081/tmpjo8l1xplconnectivity_test.sh
    Dec 27 03:56:03 s143vp auth|security:info sshd[47513674]: Received disconnect from
    10.11.8.6: 11: disconnected by user
    Dec 27 04:16:38 s143vp auth|security:info sshd[43778248]: Accepted publickey for
    itbipat1 from 10.11.8.6 port 34698 ssh2
    Dec 27 04:16:40 s143vp auth|security:info sshd[43384988]: subsystem request for
    sftp
    Dec 27 04:17:45 s143vp auth|security:info sshd[43384988]: Received disconnect from
    10.11.8.6: 11: disconnected by user
    Dec 27 04:23:46 s143vp auth|security:info sshd[52625572]: Accepted publickey for
    itbipat1 from 10.11.8.6 port 35022 ssh2
    Dec 27 04:23:47 s143vp auth|security:info sshd[43385060]: subsystem request for
    sftp
    Dec 27 04:23:49 s143vp auth|security:info sshd[43385060]: subsystem request for
    sftp
    Dec 27 04:24:52 s143vp auth|security:info sshd[43385060]: Received disconnect from
    10.11.8.6: 11: disconnected by user
    Dec 27 06:19:17 s143vp auth|security:info sshd[39649280]: Accepted publickey for
    itbipat1 from 10.11.8.6 port 44502 ssh2
    Dec 27 06:19:18 s143vp auth|security:info sshd[47251526]: subsystem request for
    sftp
    Dec 27 06:19:20 s143vp auth|security:notice sudo: itbipat1 : TTY=pts/160 ;
    PWD=/home/itbipat1 ; USER=root ; COMMAND=/home/itbipat1/.ansible/tmp/ansible-tmp-
    1672143558.78568-188028-279225573243111/tmp9tpbng6aconnectivity_test.sh
    Dec 27 06:20:21 s143vp auth|security:info sshd[47251526]: Received disconnect from
    10.11.8.6: 11: disconnected by user
    Dec 27 06:55:13 s143vp auth|security:info sshd[51708144]: Accepted publickey for
    root from 130.30.30.41 port 42914 ssh2
    Dec 27 06:55:13 s143vp auth|security:info sshd[51708144]: Received disconnect from
    130.30.30.41: 11: disconnected by user
    Dec 27 08:34:02 s143vp auth|security:info sshd[45875386]: Accepted publickey for
    itbipat1 from 10.11.8.6 port 47120 ssh2
    Dec 27 08:34:04 s143vp auth|security:info sshd[43253870]: subsystem request for
    sftp
    Dec 27 08:35:08 s143vp auth|security:info sshd[43253870]: Received disconnect from
    10.11.8.6: 11: disconnected by user
    Dec 27 16:10:58 s143vp auth|security:info sshd[47710302]: Accepted publickey for
    itbipat1 from 10.11.8.6 port 44680 ssh2
    Dec 27 16:10:59 s143vp auth|security:info sshd[53674180]: subsystem request for
    sftp
    Dec 27 16:11:02 s143vp auth|security:notice sudo: itbipat1 : TTY=pts/160 ;
    PWD=/home/itbipat1 ; USER=root ; COMMAND=/home/itbipat1/.ansible/tmp/ansible-tmp-
    1672179059.7222166-107018-72187883765913/tmp3_7ftta7connectivity_test.sh
    Dec 27 16:11:50 s143vp auth|security:info sshd[46989440]: Accepted publickey for
    itbipat1 from 10.11.8.6 port 44750 ssh2
    Dec 27 16:11:51 s143vp auth|security:info sshd[43974810]: Received disconnect from
    10.11.8.6: 11: disconnected by user
    Dec 27 16:12:03 s143vp auth|security:info sshd[53674180]: Received disconnect from
    10.11.8.6: 11: disconnected by user
    Dec 27 16:12:31 s143vp auth|security:info sshd[47710304]: Accepted publickey for
    itbipat1 from 10.11.8.6 port 44806 ssh2
    Dec 27 16:12:33 s143vp auth|security:info sshd[53674184]: subsystem request for
    sftp
    Dec 27 16:12:36 s143vp auth|security:notice sudo: itbipat1 : TTY=pts/160 ;
    PWD=/home/itbipat1 ; USER=root ; COMMAND=/home/itbipat1/.ansible/tmp/ansible-tmp-
    1672179153.38311-109588-175516382773900/tmpbe6i3bq8log4j2_scan.sh
    Dec 27 16:13:29 s143vp auth|security:info sshd[46989492]: Accepted publickey for
    itbipat1 from 10.11.8.6 port 44912 ssh2
    Dec 27 16:13:30 s143vp auth|security:info sshd[43384890]: Received disconnect from
    10.11.8.6: 11: disconnected by user
    Dec 27 16:13:39 s143vp auth|security:info sshd[53674184]: Received disconnect from
    10.11.8.6: 11: disconnected by user
    Dec 27 21:18:44 s143vp auth|security:info sshd[52756664]: Accepted publickey for
    itbipat1 from 10.11.8.6 port 58222 ssh2
    Dec 27 21:18:47 s143vp auth|security:info sshd[46989524]: subsystem request for
    sftp
    Dec 27 21:18:49 s143vp auth|security:notice sudo: itbipat1 : TTY=pts/160 ;
    PWD=/home/itbipat1 ; USER=root ; COMMAND=/home/itbipat1/.ansible/tmp/ansible-tmp-
    1672197526.26439-202478-122528142795626/tmpxb55r401connectivity_test.sh
    Dec 27 21:19:50 s143vp auth|security:info sshd[46989524]: Received disconnect from
    10.11.8.6: 11: disconnected by user
    Dec 27 21:20:36 s143vp auth|security:info sshd[47382732]: Accepted publickey for
    itbipat1 from 10.11.8.6 port 58418 ssh2
    Dec 27 21:20:39 s143vp auth|security:info sshd[45154404]: subsystem request for
    sftp
    Dec 27 21:21:21 s143vp auth|security:info sshd[45154404]: subsystem request for
    sftp
    Dec 27 21:21:23 s143vp auth|security:info sshd[45154404]: subsystem request for
    sftp
    Dec 27 21:22:27 s143vp auth|security:info sshd[45154404]: Received disconnect from
    10.11.8.6: 11: disconnected by user
    Dec 28 02:33:13 s143vp auth|security:info sshd[44040332]: Did not receive
    identification string from 10.11.8.5
    Dec 28 02:33:19 s143vp auth|security:info sshd[53084324]: Accepted publickey for
    itbipat1 from 10.11.8.5 port 55802 ssh2
    Dec 28 02:33:22 s143vp auth|security:notice sudo: itbipat1 : TTY=unknown ;
    PWD=/home/itbipat1 ; USER=root ; COMMAND=/bin/sh -c printf OK
    Dec 28 02:33:22 s143vp auth|security:notice sudo: itbipat1 : TTY=unknown ;
    PWD=/home/itbipat1 ; USER=root ; COMMAND=/usr/sbin/lsuser -a maxage itbipat1
    Dec 28 02:33:22 s143vp auth|security:notice sudo: itbipat1 : TTY=unknown ;
    PWD=/home/itbipat1 ; USER=root ; COMMAND=/usr/bin/pwdadm -q itbipat1
    Dec 28 03:54:11 s143vp auth|security:info sshd[52560044]: Accepted publickey for
    itbipat1 from 10.11.8.6 port 38660 ssh2
    Dec 28 03:54:13 s143vp auth|security:info sshd[47448180]: subsystem request for
    sftp
    Dec 28 03:54:15 s143vp auth|security:notice sudo: itbipat1 : TTY=pts/159 ;
    PWD=/home/itbipat1 ; USER=root ; COMMAND=/home/itbipat1/.ansible/tmp/ansible-tmp-
    1672221253.514859-16940-96134725439077/tmpt_sur7urconnectivity_test.sh
    Dec 28 03:55:16 s143vp auth|security:info sshd[47448180]: Received disconnect from
    10.11.8.6: 11: disconnected by user
    Dec 28 04:15:24 s143vp auth|security:info sshd[43646980]: Accepted publickey for
    itbipat1 from 10.11.8.6 port 40932 ssh2
    Dec 28 04:15:26 s143vp auth|security:info sshd[53805056]: subsystem request for
    sftp
    Dec 28 04:16:30 s143vp auth|security:info sshd[53805056]: Received disconnect from
    10.11.8.6: 11: disconnected by user
    Dec 28 04:20:29 s143vp auth|security:info sshd[43385040]: Accepted publickey for
    itbipat1 from 10.11.8.6 port 41188 ssh2
    Dec 28 04:20:31 s143vp auth|security:info sshd[53805114]: subsystem request for
    sftp
    Dec 28 04:20:32 s143vp auth|security:info sshd[53805114]: subsystem request for
    sftp
    Dec 28 04:21:35 s143vp auth|security:info sshd[53805114]: Received disconnect from
    10.11.8.6: 11: disconnected by user

    You might also like