2026-06-28T00:00:14.869018-05:00 claude-cloud sshd[3993473]: Received disconnect from 43.133.26.159 port 20466:11: Bye Bye [preauth] 2026-06-28T00:00:14.869178-05:00 claude-cloud sshd[3993473]: Disconnected from authenticating user root 43.133.26.159 port 20466 [preauth] 2026-06-28T00:00:34.585141-05:00 claude-cloud systemd-logind[853]: New session c4246 of user claude. 2026-06-28T00:00:34.855214-05:00 claude-cloud systemd-logind[853]: Session c4246 logged out. Waiting for processes to exit. 2026-06-28T00:00:34.857608-05:00 claude-cloud systemd-logind[853]: Removed session c4246. 2026-06-28T00:01:24.104515-05:00 claude-cloud sshd[3993680]: Invalid user postgres from 91.92.40.237 port 52468 2026-06-28T00:01:24.120436-05:00 claude-cloud sshd[3993680]: Connection closed by invalid user postgres 91.92.40.237 port 52468 [preauth] 2026-06-28T00:01:34.126709-05:00 claude-cloud sshd[3993716]: Invalid user jj from 103.153.110.190 port 43284 2026-06-28T00:01:34.327152-05:00 claude-cloud sshd[3993716]: Received disconnect from 103.153.110.190 port 43284:11: Bye Bye [preauth] 2026-06-28T00:01:34.327375-05:00 claude-cloud sshd[3993716]: Disconnected from invalid user jj 103.153.110.190 port 43284 [preauth] 2026-06-28T00:02:07.512815-05:00 claude-cloud sshd[3993818]: Invalid user admin from 43.133.26.159 port 43438 2026-06-28T00:02:07.769600-05:00 claude-cloud sshd[3993818]: Received disconnect from 43.133.26.159 port 43438:11: Bye Bye [preauth] 2026-06-28T00:02:07.769808-05:00 claude-cloud sshd[3993818]: Disconnected from invalid user admin 43.133.26.159 port 43438 [preauth] 2026-06-28T00:02:51.455932-05:00 claude-cloud sshd[3993939]: Invalid user admin from 195.178.110.227 port 59626 2026-06-28T00:02:51.470546-05:00 claude-cloud sshd[3993939]: Connection closed by invalid user admin 195.178.110.227 port 59626 [preauth] 2026-06-28T00:03:03.907876-05:00 claude-cloud sshd[3993972]: Invalid user postgres from 91.92.40.237 port 41584 2026-06-28T00:03:04.123912-05:00 claude-cloud sshd[3993972]: Connection closed by invalid user postgres 91.92.40.237 port 41584 [preauth] 2026-06-28T00:03:51.218646-05:00 claude-cloud sshd[3994092]: Invalid user kate from 43.133.26.159 port 39634 2026-06-28T00:03:51.479179-05:00 claude-cloud sshd[3994075]: Connection closed by authenticating user root 27.71.230.31 port 53342 [preauth] 2026-06-28T00:03:51.479724-05:00 claude-cloud sshd[3994092]: Received disconnect from 43.133.26.159 port 39634:11: Bye Bye [preauth] 2026-06-28T00:03:51.479883-05:00 claude-cloud sshd[3994092]: Disconnected from invalid user kate 43.133.26.159 port 39634 [preauth] 2026-06-28T00:03:53.432509-05:00 claude-cloud sshd[3994104]: Invalid user ubuntu from 103.153.110.190 port 34072 2026-06-28T00:03:53.638532-05:00 claude-cloud sshd[3994104]: Received disconnect from 103.153.110.190 port 34072:11: Bye Bye [preauth] 2026-06-28T00:03:53.638916-05:00 claude-cloud sshd[3994104]: Disconnected from invalid user ubuntu 103.153.110.190 port 34072 [preauth] 2026-06-28T00:04:35.467131-05:00 claude-cloud sshd[3994229]: Connection closed by 161.35.47.134 port 47002 2026-06-28T00:04:43.458238-05:00 claude-cloud sshd[3994250]: Invalid user postgres from 91.92.40.237 port 37754 2026-06-28T00:04:43.678006-05:00 claude-cloud sshd[3994250]: Connection closed by invalid user postgres 91.92.40.237 port 37754 [preauth] 2026-06-28T00:05:01.808249-05:00 claude-cloud CRON[3994321]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-28T00:05:01.819988-05:00 claude-cloud CRON[3994321]: pam_unix(cron:session): session closed for user root 2026-06-28T00:05:38.274113-05:00 claude-cloud systemd-logind[853]: New session c4247 of user claude. 2026-06-28T00:05:38.532032-05:00 claude-cloud systemd-logind[853]: Session c4247 logged out. Waiting for processes to exit. 2026-06-28T00:05:38.534213-05:00 claude-cloud systemd-logind[853]: Removed session c4247. 2026-06-28T00:05:45.368462-05:00 claude-cloud sshd[3994444]: Connection closed by 118.193.39.146 port 2570 2026-06-28T00:05:59.758320-05:00 claude-cloud sshd[3994445]: Connection closed by 118.193.39.146 port 2794 [preauth] 2026-06-28T00:06:06.379968-05:00 claude-cloud sshd[3994492]: Invalid user mehdi from 103.153.110.190 port 42260 2026-06-28T00:06:06.586328-05:00 claude-cloud sshd[3994492]: Received disconnect from 103.153.110.190 port 42260:11: Bye Bye [preauth] 2026-06-28T00:06:06.586577-05:00 claude-cloud sshd[3994492]: Disconnected from invalid user mehdi 103.153.110.190 port 42260 [preauth] 2026-06-28T00:06:14.962571-05:00 claude-cloud sshd[3994520]: Invalid user ubuntu from 45.198.224.46 port 49828 2026-06-28T00:06:16.182875-05:00 claude-cloud sshd[3994520]: Connection closed by invalid user ubuntu 45.198.224.46 port 49828 [preauth] 2026-06-28T00:06:21.932724-05:00 claude-cloud sshd[3994535]: Invalid user ftp from 91.92.40.237 port 53710 2026-06-28T00:06:22.198942-05:00 claude-cloud sshd[3994535]: Connection closed by invalid user ftp 91.92.40.237 port 53710 [preauth] 2026-06-28T00:08:08.982617-05:00 claude-cloud systemd-logind[853]: Session c4221 logged out. Waiting for processes to exit. 2026-06-28T00:08:08.983199-05:00 claude-cloud systemd-logind[853]: Session c4223 logged out. Waiting for processes to exit. 2026-06-28T00:08:08.984344-05:00 claude-cloud systemd-logind[853]: Removed session c4221. 2026-06-28T00:08:08.985420-05:00 claude-cloud systemd-logind[853]: Removed session c4223. 2026-06-28T00:08:21.382443-05:00 claude-cloud systemd-logind[853]: New session c4248 of user claude. 2026-06-28T00:08:21.413383-05:00 claude-cloud systemd-logind[853]: New session c4249 of user claude. 2026-06-28T00:08:21.446879-05:00 claude-cloud systemd-logind[853]: Session c4248 logged out. Waiting for processes to exit. 2026-06-28T00:08:21.447980-05:00 claude-cloud systemd-logind[853]: Removed session c4248. 2026-06-28T00:08:22.227080-05:00 claude-cloud systemd-logind[853]: New session c4250 of user claude. 2026-06-28T00:08:22.265819-05:00 claude-cloud systemd-logind[853]: Session c4250 logged out. Waiting for processes to exit. 2026-06-28T00:08:22.267617-05:00 claude-cloud systemd-logind[853]: Removed session c4250. 2026-06-28T00:08:22.803167-05:00 claude-cloud sshd[3994909]: Invalid user pix from 103.153.110.190 port 58904 2026-06-28T00:08:23.007938-05:00 claude-cloud sshd[3994909]: Received disconnect from 103.153.110.190 port 58904:11: Bye Bye [preauth] 2026-06-28T00:08:23.008186-05:00 claude-cloud sshd[3994909]: Disconnected from invalid user pix 103.153.110.190 port 58904 [preauth] 2026-06-28T00:08:39.181574-05:00 claude-cloud systemd-logind[853]: New session c4251 of user claude. 2026-06-28T00:08:41.596900-05:00 claude-cloud sshd[3994993]: Invalid user admin from 195.178.110.227 port 34502 2026-06-28T00:08:41.613044-05:00 claude-cloud sshd[3994993]: Connection closed by invalid user admin 195.178.110.227 port 34502 [preauth] 2026-06-28T00:08:53.588855-05:00 claude-cloud sshd[3995031]: banner exchange: Connection from 184.105.139.67 port 9926: invalid format 2026-06-28T00:09:00.125499-05:00 claude-cloud systemd-logind[853]: New session c4252 of user claude. 2026-06-28T00:09:00.144708-05:00 claude-cloud systemd-logind[853]: New session c4253 of user claude. 2026-06-28T00:09:00.176110-05:00 claude-cloud systemd-logind[853]: Session c4253 logged out. Waiting for processes to exit. 2026-06-28T00:09:00.177452-05:00 claude-cloud systemd-logind[853]: Removed session c4253. 2026-06-28T00:09:00.878977-05:00 claude-cloud systemd-logind[853]: New session c4254 of user claude. 2026-06-28T00:09:00.918348-05:00 claude-cloud systemd-logind[853]: Session c4254 logged out. Waiting for processes to exit. 2026-06-28T00:09:00.920138-05:00 claude-cloud systemd-logind[853]: Removed session c4254. 2026-06-28T00:09:01.492573-05:00 claude-cloud systemd-logind[853]: New session c4255 of user claude. 2026-06-28T00:09:02.176330-05:00 claude-cloud systemd-logind[853]: Session c4251 logged out. Waiting for processes to exit. 2026-06-28T00:09:02.180518-05:00 claude-cloud systemd-logind[853]: Session c4249 logged out. Waiting for processes to exit. 2026-06-28T00:09:02.185037-05:00 claude-cloud systemd-logind[853]: Removed session c4249. 2026-06-28T00:09:02.187194-05:00 claude-cloud systemd-logind[853]: Removed session c4251. 2026-06-28T00:09:54.914982-05:00 claude-cloud systemd-logind[853]: Session c4255 logged out. Waiting for processes to exit. 2026-06-28T00:09:54.918123-05:00 claude-cloud systemd-logind[853]: Session c4252 logged out. Waiting for processes to exit. 2026-06-28T00:09:54.919863-05:00 claude-cloud systemd-logind[853]: Removed session c4255. 2026-06-28T00:09:54.921772-05:00 claude-cloud systemd-logind[853]: Removed session c4252. 2026-06-28T00:10:06.285531-05:00 claude-cloud systemd-logind[853]: New session c4256 of user claude. 2026-06-28T00:10:06.293625-05:00 claude-cloud systemd-logind[853]: New session c4257 of user claude. 2026-06-28T00:10:06.315317-05:00 claude-cloud systemd-logind[853]: Session c4256 logged out. Waiting for processes to exit. 2026-06-28T00:10:06.318960-05:00 claude-cloud systemd-logind[853]: Removed session c4256. 2026-06-28T00:10:07.006072-05:00 claude-cloud systemd-logind[853]: New session c4258 of user claude. 2026-06-28T00:10:07.046540-05:00 claude-cloud systemd-logind[853]: Session c4258 logged out. Waiting for processes to exit. 2026-06-28T00:10:07.049480-05:00 claude-cloud systemd-logind[853]: Removed session c4258. 2026-06-28T00:10:07.639439-05:00 claude-cloud systemd-logind[853]: New session c4259 of user claude. 2026-06-28T00:10:09.606985-05:00 claude-cloud sshd[3995298]: Connection closed by authenticating user root 27.71.230.31 port 48344 [preauth] 2026-06-28T00:10:32.327994-05:00 claude-cloud systemd-logind[853]: Session c4259 logged out. Waiting for processes to exit. 2026-06-28T00:10:32.330875-05:00 claude-cloud systemd-logind[853]: Session c4257 logged out. Waiting for processes to exit. 2026-06-28T00:10:32.332295-05:00 claude-cloud systemd-logind[853]: Removed session c4259. 2026-06-28T00:10:32.333772-05:00 claude-cloud systemd-logind[853]: Removed session c4257. 2026-06-28T00:10:40.170853-05:00 claude-cloud systemd-logind[853]: New session c4260 of user claude. 2026-06-28T00:10:40.184601-05:00 claude-cloud systemd-logind[853]: New session c4261 of user claude. 2026-06-28T00:10:40.215240-05:00 claude-cloud systemd-logind[853]: Session c4260 logged out. Waiting for processes to exit. 2026-06-28T00:10:40.216857-05:00 claude-cloud systemd-logind[853]: Removed session c4260. 2026-06-28T00:10:41.814945-05:00 claude-cloud sshd[3995512]: Invalid user xiwen from 103.153.110.190 port 41390 2026-06-28T00:10:42.007499-05:00 claude-cloud sshd[3995512]: Received disconnect from 103.153.110.190 port 41390:11: Bye Bye [preauth] 2026-06-28T00:10:42.007756-05:00 claude-cloud sshd[3995512]: Disconnected from invalid user xiwen 103.153.110.190 port 41390 [preauth] 2026-06-28T00:10:42.380871-05:00 claude-cloud systemd-logind[853]: New session c4262 of user claude. 2026-06-28T00:10:42.419656-05:00 claude-cloud systemd-logind[853]: Session c4262 logged out. Waiting for processes to exit. 2026-06-28T00:10:42.421591-05:00 claude-cloud systemd-logind[853]: Removed session c4262. 2026-06-28T00:10:42.966472-05:00 claude-cloud systemd-logind[853]: New session c4263 of user claude. 2026-06-28T00:10:50.711013-05:00 claude-cloud systemd-logind[853]: New session c4264 of user claude. 2026-06-28T00:10:50.984669-05:00 claude-cloud systemd-logind[853]: Session c4264 logged out. Waiting for processes to exit. 2026-06-28T00:10:50.986860-05:00 claude-cloud systemd-logind[853]: Removed session c4264. 2026-06-28T00:12:19.003985-05:00 claude-cloud sshd[3995835]: Connection closed by 161.35.47.134 port 38138 2026-06-28T00:13:06.303791-05:00 claude-cloud sshd[3995952]: Invalid user webapps from 103.153.110.190 port 59442 2026-06-28T00:13:06.503108-05:00 claude-cloud sshd[3995952]: Received disconnect from 103.153.110.190 port 59442:11: Bye Bye [preauth] 2026-06-28T00:13:06.503347-05:00 claude-cloud sshd[3995952]: Disconnected from invalid user webapps 103.153.110.190 port 59442 [preauth] 2026-06-28T00:14:00.431589-05:00 claude-cloud sshd[3996127]: Invalid user admin from 195.178.110.227 port 37584 2026-06-28T00:14:00.444645-05:00 claude-cloud sshd[3996127]: Connection closed by invalid user admin 195.178.110.227 port 37584 [preauth] 2026-06-28T00:15:01.832157-05:00 claude-cloud CRON[3996302]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-28T00:15:01.843515-05:00 claude-cloud CRON[3996302]: pam_unix(cron:session): session closed for user root 2026-06-28T00:15:28.436424-05:00 claude-cloud sshd[3996381]: Invalid user mysftp from 103.153.110.190 port 50130 2026-06-28T00:15:28.635364-05:00 claude-cloud sshd[3996381]: Received disconnect from 103.153.110.190 port 50130:11: Bye Bye [preauth] 2026-06-28T00:15:28.635554-05:00 claude-cloud sshd[3996381]: Disconnected from invalid user mysftp 103.153.110.190 port 50130 [preauth] 2026-06-28T00:15:49.121138-05:00 claude-cloud sshd[3996407]: Connection closed by authenticating user root 27.71.230.31 port 45346 [preauth] 2026-06-28T00:15:54.664506-05:00 claude-cloud systemd-logind[853]: New session c4265 of user claude. 2026-06-28T00:15:54.935687-05:00 claude-cloud systemd-logind[853]: Session c4265 logged out. Waiting for processes to exit. 2026-06-28T00:15:54.936750-05:00 claude-cloud systemd-logind[853]: Removed session c4265. 2026-06-28T00:16:08.218240-05:00 claude-cloud sshd[3996499]: Invalid user http from 45.198.224.46 port 54034 2026-06-28T00:16:09.439464-05:00 claude-cloud sshd[3996499]: Connection closed by invalid user http 45.198.224.46 port 54034 [preauth] 2026-06-28T00:17:01.850706-05:00 claude-cloud CRON[3996674]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-28T00:17:01.856288-05:00 claude-cloud CRON[3996674]: pam_unix(cron:session): session closed for user root 2026-06-28T00:17:41.368171-05:00 claude-cloud sshd[3996771]: Invalid user ftp from 91.92.40.237 port 35718 2026-06-28T00:17:41.446178-05:00 claude-cloud sshd[3996771]: Connection closed by invalid user ftp 91.92.40.237 port 35718 [preauth] 2026-06-28T00:17:43.242898-05:00 claude-cloud sshd[3996773]: Invalid user ubuntu from 103.153.110.190 port 54700 2026-06-28T00:17:43.443127-05:00 claude-cloud sshd[3996773]: Received disconnect from 103.153.110.190 port 54700:11: Bye Bye [preauth] 2026-06-28T00:17:43.443404-05:00 claude-cloud sshd[3996773]: Disconnected from invalid user ubuntu 103.153.110.190 port 54700 [preauth] 2026-06-28T00:17:44.176898-05:00 claude-cloud systemd-logind[853]: Session c4263 logged out. Waiting for processes to exit. 2026-06-28T00:17:44.177612-05:00 claude-cloud systemd-logind[853]: Session c4261 logged out. Waiting for processes to exit. 2026-06-28T00:17:44.178830-05:00 claude-cloud systemd-logind[853]: Removed session c4263. 2026-06-28T00:17:44.180106-05:00 claude-cloud systemd-logind[853]: Removed session c4261. 2026-06-28T00:18:25.776685-05:00 claude-cloud systemd-logind[853]: New session c4266 of user claude. 2026-06-28T00:18:25.791975-05:00 claude-cloud systemd-logind[853]: New session c4267 of user claude. 2026-06-28T00:18:25.819074-05:00 claude-cloud systemd-logind[853]: Session c4267 logged out. Waiting for processes to exit. 2026-06-28T00:18:25.824881-05:00 claude-cloud systemd-logind[853]: Removed session c4267. 2026-06-28T00:18:26.800865-05:00 claude-cloud systemd-logind[853]: New session c4268 of user claude. 2026-06-28T00:18:26.852489-05:00 claude-cloud systemd-logind[853]: Session c4268 logged out. Waiting for processes to exit. 2026-06-28T00:18:26.854507-05:00 claude-cloud systemd-logind[853]: Removed session c4268. 2026-06-28T00:18:27.542595-05:00 claude-cloud systemd-logind[853]: New session c4269 of user claude. 2026-06-28T00:19:18.018307-05:00 claude-cloud sshd[3997124]: Invalid user admin from 195.178.110.227 port 40630 2026-06-28T00:19:18.031694-05:00 claude-cloud sshd[3997124]: Connection closed by invalid user admin 195.178.110.227 port 40630 [preauth] 2026-06-28T00:19:18.129593-05:00 claude-cloud sshd[3997115]: Invalid user ftp from 91.92.40.237 port 58928 2026-06-28T00:19:18.417773-05:00 claude-cloud sshd[3997115]: Connection closed by invalid user ftp 91.92.40.237 port 58928 [preauth] 2026-06-28T00:19:58.762080-05:00 claude-cloud sshd[3997308]: Invalid user scptest from 103.153.110.190 port 42304 2026-06-28T00:19:58.960260-05:00 claude-cloud sshd[3997308]: Received disconnect from 103.153.110.190 port 42304:11: Bye Bye [preauth] 2026-06-28T00:19:58.960647-05:00 claude-cloud sshd[3997308]: Disconnected from invalid user scptest 103.153.110.190 port 42304 [preauth] 2026-06-28T00:20:12.051465-05:00 claude-cloud systemd-logind[853]: Session c4266 logged out. Waiting for processes to exit. 2026-06-28T00:20:12.065135-05:00 claude-cloud systemd-logind[853]: Session c4269 logged out. Waiting for processes to exit. 2026-06-28T00:20:12.067460-05:00 claude-cloud systemd-logind[853]: Removed session c4266. 2026-06-28T00:20:12.070272-05:00 claude-cloud systemd-logind[853]: Removed session c4269. 2026-06-28T00:20:49.749703-05:00 claude-cloud systemd-logind[853]: New session c4270 of user claude. 2026-06-28T00:20:49.766502-05:00 claude-cloud systemd-logind[853]: New session c4271 of user claude. 2026-06-28T00:20:49.788476-05:00 claude-cloud systemd-logind[853]: Session c4270 logged out. Waiting for processes to exit. 2026-06-28T00:20:49.791901-05:00 claude-cloud systemd-logind[853]: Removed session c4270. 2026-06-28T00:20:50.954660-05:00 claude-cloud systemd-logind[853]: New session c4272 of user claude. 2026-06-28T00:20:50.999481-05:00 claude-cloud systemd-logind[853]: Session c4272 logged out. Waiting for processes to exit. 2026-06-28T00:20:51.001717-05:00 claude-cloud systemd-logind[853]: Removed session c4272. 2026-06-28T00:20:51.568130-05:00 claude-cloud systemd-logind[853]: New session c4273 of user claude. 2026-06-28T00:20:52.348607-05:00 claude-cloud sshd[3997496]: Invalid user apache from 91.92.40.237 port 52620 2026-06-28T00:20:52.523209-05:00 claude-cloud sshd[3997496]: Connection closed by invalid user apache 91.92.40.237 port 52620 [preauth] 2026-06-28T00:21:13.305182-05:00 claude-cloud systemd-logind[853]: New session c4274 of user claude. 2026-06-28T00:21:13.558231-05:00 claude-cloud systemd-logind[853]: Session c4274 logged out. Waiting for processes to exit. 2026-06-28T00:21:13.561660-05:00 claude-cloud systemd-logind[853]: Removed session c4274. 2026-06-28T00:21:53.937996-05:00 claude-cloud sshd[3997638]: Connection closed by authenticating user root 27.71.230.31 port 36982 [preauth] 2026-06-28T00:22:12.259611-05:00 claude-cloud systemd-logind[853]: Session c4271 logged out. Waiting for processes to exit. 2026-06-28T00:22:12.260669-05:00 claude-cloud systemd-logind[853]: Session c4273 logged out. Waiting for processes to exit. 2026-06-28T00:22:12.262612-05:00 claude-cloud systemd-logind[853]: Removed session c4271. 2026-06-28T00:22:12.264162-05:00 claude-cloud systemd-logind[853]: Removed session c4273. 2026-06-28T00:22:27.472406-05:00 claude-cloud systemd-logind[853]: New session c4275 of user claude. 2026-06-28T00:22:27.492984-05:00 claude-cloud systemd-logind[853]: New session c4276 of user claude. 2026-06-28T00:22:27.523696-05:00 claude-cloud systemd-logind[853]: Session c4276 logged out. Waiting for processes to exit. 2026-06-28T00:22:27.526195-05:00 claude-cloud systemd-logind[853]: Removed session c4276. 2026-06-28T00:22:28.650312-05:00 claude-cloud systemd-logind[853]: New session c4277 of user claude. 2026-06-28T00:22:28.695642-05:00 claude-cloud systemd-logind[853]: Session c4277 logged out. Waiting for processes to exit. 2026-06-28T00:22:28.699659-05:00 claude-cloud systemd-logind[853]: Removed session c4277. 2026-06-28T00:22:29.440570-05:00 claude-cloud systemd-logind[853]: New session c4278 of user claude. 2026-06-28T00:22:30.264881-05:00 claude-cloud sshd[3997833]: Invalid user apache from 91.92.40.237 port 58542 2026-06-28T00:22:30.664424-05:00 claude-cloud sshd[3997833]: Connection closed by invalid user apache 91.92.40.237 port 58542 [preauth] 2026-06-28T00:23:48.184509-05:00 claude-cloud systemd-logind[853]: Session c4278 logged out. Waiting for processes to exit. 2026-06-28T00:23:48.187520-05:00 claude-cloud systemd-logind[853]: Session c4275 logged out. Waiting for processes to exit. 2026-06-28T00:23:48.188803-05:00 claude-cloud systemd-logind[853]: Removed session c4275. 2026-06-28T00:23:48.190157-05:00 claude-cloud systemd-logind[853]: Removed session c4278. 2026-06-28T00:23:58.147730-05:00 claude-cloud sshd[3998096]: Invalid user ftpguest from 212.129.35.101 port 64801 2026-06-28T00:23:58.173716-05:00 claude-cloud sshd[3998096]: Received disconnect from 212.129.35.101 port 64801:11: Bye Bye [preauth] 2026-06-28T00:23:58.173845-05:00 claude-cloud sshd[3998096]: Disconnected from invalid user ftpguest 212.129.35.101 port 64801 [preauth] 2026-06-28T00:24:09.129583-05:00 claude-cloud sshd[3998130]: Invalid user apache from 91.92.40.237 port 55254 2026-06-28T00:24:09.389445-05:00 claude-cloud sshd[3998130]: Connection closed by invalid user apache 91.92.40.237 port 55254 [preauth] 2026-06-28T00:24:48.841585-05:00 claude-cloud systemd-logind[853]: New session c4279 of user claude. 2026-06-28T00:24:48.854320-05:00 claude-cloud systemd-logind[853]: New session c4280 of user claude. 2026-06-28T00:24:48.877904-05:00 claude-cloud systemd-logind[853]: Session c4280 logged out. Waiting for processes to exit. 2026-06-28T00:24:48.879125-05:00 claude-cloud systemd-logind[853]: Removed session c4280. 2026-06-28T00:24:51.496378-05:00 claude-cloud systemd-logind[853]: New session c4281 of user claude. 2026-06-28T00:24:51.540853-05:00 claude-cloud systemd-logind[853]: Session c4281 logged out. Waiting for processes to exit. 2026-06-28T00:24:51.543701-05:00 claude-cloud systemd-logind[853]: Removed session c4281. 2026-06-28T00:24:54.256687-05:00 claude-cloud systemd-logind[853]: New session c4282 of user claude. 2026-06-28T00:25:01.458759-05:00 claude-cloud sshd[3998340]: Invalid user admin from 195.178.110.227 port 43664 2026-06-28T00:25:01.473634-05:00 claude-cloud sshd[3998340]: Connection closed by invalid user admin 195.178.110.227 port 43664 [preauth] 2026-06-28T00:25:01.867192-05:00 claude-cloud CRON[3998342]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-28T00:25:01.874223-05:00 claude-cloud CRON[3998342]: pam_unix(cron:session): session closed for user root 2026-06-28T00:25:48.561988-05:00 claude-cloud systemd-logind[853]: Session c4282 logged out. Waiting for processes to exit. 2026-06-28T00:25:48.564201-05:00 claude-cloud systemd-logind[853]: Removed session c4282. 2026-06-28T00:25:48.668781-05:00 claude-cloud systemd-logind[853]: Session c4279 logged out. Waiting for processes to exit. 2026-06-28T00:25:48.670713-05:00 claude-cloud systemd-logind[853]: Removed session c4279. 2026-06-28T00:25:50.290872-05:00 claude-cloud systemd-logind[853]: New session c4283 of user claude. 2026-06-28T00:25:50.314877-05:00 claude-cloud systemd-logind[853]: New session c4284 of user claude. 2026-06-28T00:25:50.346603-05:00 claude-cloud systemd-logind[853]: Session c4283 logged out. Waiting for processes to exit. 2026-06-28T00:25:50.349718-05:00 claude-cloud systemd-logind[853]: Removed session c4283. 2026-06-28T00:25:51.058209-05:00 claude-cloud systemd-logind[853]: New session c4285 of user claude. 2026-06-28T00:25:51.109722-05:00 claude-cloud systemd-logind[853]: Session c4285 logged out. Waiting for processes to exit. 2026-06-28T00:25:51.114827-05:00 claude-cloud systemd-logind[853]: Removed session c4285. 2026-06-28T00:25:51.668742-05:00 claude-cloud systemd-logind[853]: New session c4286 of user claude. 2026-06-28T00:25:59.327626-05:00 claude-cloud sshd[3998547]: Connection closed by authenticating user root 45.198.224.46 port 45276 [preauth] 2026-06-28T00:26:14.918747-05:00 claude-cloud systemd-logind[853]: Session c4286 logged out. Waiting for processes to exit. 2026-06-28T00:26:14.919789-05:00 claude-cloud systemd-logind[853]: Session c4284 logged out. Waiting for processes to exit. 2026-06-28T00:26:14.921501-05:00 claude-cloud systemd-logind[853]: Removed session c4284. 2026-06-28T00:26:14.923030-05:00 claude-cloud systemd-logind[853]: Removed session c4286. 2026-06-28T00:26:20.261948-05:00 claude-cloud systemd-logind[853]: New session c4287 of user claude. 2026-06-28T00:26:20.623883-05:00 claude-cloud systemd-logind[853]: Session c4287 logged out. Waiting for processes to exit. 2026-06-28T00:26:20.625020-05:00 claude-cloud systemd-logind[853]: Removed session c4287. 2026-06-28T00:26:43.886057-05:00 claude-cloud systemd-logind[853]: New session c4288 of user claude. 2026-06-28T00:26:44.026704-05:00 claude-cloud systemd-logind[853]: New session c4289 of user claude. 2026-06-28T00:26:44.085022-05:00 claude-cloud systemd-logind[853]: Session c4289 logged out. Waiting for processes to exit. 2026-06-28T00:26:44.087014-05:00 claude-cloud systemd-logind[853]: Removed session c4289. 2026-06-28T00:26:44.665385-05:00 claude-cloud systemd-logind[853]: New session c4290 of user claude. 2026-06-28T00:26:44.705030-05:00 claude-cloud systemd-logind[853]: Session c4290 logged out. Waiting for processes to exit. 2026-06-28T00:26:44.706264-05:00 claude-cloud systemd-logind[853]: Removed session c4290. 2026-06-28T00:26:45.313693-05:00 claude-cloud systemd-logind[853]: New session c4291 of user claude. 2026-06-28T00:27:38.342111-05:00 claude-cloud sshd[3998868]: Received disconnect from 150.95.82.21 port 51400:11: Bye Bye [preauth] 2026-06-28T00:27:38.342425-05:00 claude-cloud sshd[3998868]: Disconnected from authenticating user root 150.95.82.21 port 51400 [preauth] 2026-06-28T00:27:50.497372-05:00 claude-cloud sshd[3998880]: Connection closed by authenticating user root 27.71.230.31 port 52524 [preauth] 2026-06-28T00:28:18.651159-05:00 claude-cloud systemd-logind[853]: Session c4291 logged out. Waiting for processes to exit. 2026-06-28T00:28:18.651682-05:00 claude-cloud systemd-logind[853]: Session c4288 logged out. Waiting for processes to exit. 2026-06-28T00:28:18.653601-05:00 claude-cloud systemd-logind[853]: Removed session c4288. 2026-06-28T00:28:18.655246-05:00 claude-cloud systemd-logind[853]: Removed session c4291. 2026-06-28T00:28:23.372796-05:00 claude-cloud systemd-logind[853]: New session c4292 of user claude. 2026-06-28T00:28:23.387202-05:00 claude-cloud systemd-logind[853]: New session c4293 of user claude. 2026-06-28T00:28:23.420607-05:00 claude-cloud systemd-logind[853]: Session c4292 logged out. Waiting for processes to exit. 2026-06-28T00:28:23.422546-05:00 claude-cloud systemd-logind[853]: Removed session c4292. 2026-06-28T00:28:35.294999-05:00 claude-cloud systemd-logind[853]: New session c4294 of user claude. 2026-06-28T00:28:35.340421-05:00 claude-cloud systemd-logind[853]: Session c4294 logged out. Waiting for processes to exit. 2026-06-28T00:28:35.340720-05:00 claude-cloud systemd-logind[853]: Removed session c4294. 2026-06-28T00:28:35.887969-05:00 claude-cloud systemd-logind[853]: New session c4295 of user claude. 2026-06-28T00:29:41.158407-05:00 claude-cloud sshd[3999296]: Connection closed by authenticating user root 89.203.249.139 port 53274 [preauth] 2026-06-28T00:30:16.612318-05:00 claude-cloud systemd-logind[853]: Session c4295 logged out. Waiting for processes to exit. 2026-06-28T00:30:16.614536-05:00 claude-cloud systemd-logind[853]: Session c4293 logged out. Waiting for processes to exit. 2026-06-28T00:30:16.616997-05:00 claude-cloud systemd-logind[853]: Removed session c4293. 2026-06-28T00:30:16.620853-05:00 claude-cloud systemd-logind[853]: Removed session c4295. 2026-06-28T00:30:19.841884-05:00 claude-cloud systemd-logind[853]: New session c4296 of user claude. 2026-06-28T00:30:19.978426-05:00 claude-cloud systemd-logind[853]: New session c4297 of user claude. 2026-06-28T00:30:20.023551-05:00 claude-cloud systemd-logind[853]: Session c4297 logged out. Waiting for processes to exit. 2026-06-28T00:30:20.024950-05:00 claude-cloud systemd-logind[853]: Removed session c4297. 2026-06-28T00:30:20.963033-05:00 claude-cloud systemd-logind[853]: New session c4298 of user claude. 2026-06-28T00:30:21.000895-05:00 claude-cloud systemd-logind[853]: Session c4298 logged out. Waiting for processes to exit. 2026-06-28T00:30:21.002158-05:00 claude-cloud systemd-logind[853]: Removed session c4298. 2026-06-28T00:30:21.598978-05:00 claude-cloud systemd-logind[853]: New session c4299 of user claude. 2026-06-28T00:30:33.893735-05:2026-06-28T01:24:56.370316-05:00 claude-cloud sshd[4009918]: Invalid user bot1 from 102.88.137.213 port 17490 2026-06-28T01:24:56.530350-05:00 claude-cloud sshd[4009918]: Received disconnect from 102.88.137.213 port 17490:11: Bye Bye [preauth] 2026-06-28T01:24:56.530670-05:00 claude-cloud sshd[4009918]: Disconnected from invalid user bot1 102.88.137.213 port 17490 [preauth] 2026-06-28T01:25:01.063829-05:00 claude-cloud CRON[4009936]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-28T01:25:01.069893-05:00 claude-cloud CRON[4009936]: pam_unix(cron:session): session closed for user root 2026-06-28T01:25:17.687857-05:00 claude-cloud systemd-logind[853]: New session c4342 of user claude. 2026-06-28T01:25:17.978581-05:00 claude-cloud systemd-logind[853]: Session c4342 logged out. Waiting for processes to exit. 2026-06-28T01:25:17.981137-05:00 claude-cloud systemd-logind[853]: Removed session c4342. 2026-06-28T01:25:20.003128-05:00 claude-cloud sshd[4009994]: Invalid user jb from 150.95.82.21 port 48964 2026-06-28T01:25:20.174417-05:00 claude-cloud sshd[4009996]: Invalid user ftpuser from 20.173.116.24 port 39826 2026-06-28T01:25:20.224055-05:00 claude-cloud sshd[4009994]: Received disconnect from 150.95.82.21 port 48964:11: Bye Bye [preauth] 2026-06-28T01:25:20.224257-05:00 claude-cloud sshd[4009994]: Disconnected from invalid user jb 150.95.82.21 port 48964 [preauth] 2026-06-28T01:25:20.267535-05:00 claude-cloud sshd[4009996]: Received disconnect from 20.173.116.24 port 39826:11: Bye Bye [preauth] 2026-06-28T01:25:20.267733-05:00 claude-cloud sshd[4009996]: Disconnected from invalid user ftpuser 20.173.116.24 port 39826 [preauth] 2026-06-28T01:26:05.364484-05:00 claude-cloud sshd[4010121]: Invalid user minecraft from 91.92.40.237 port 47064 2026-06-28T01:26:05.678004-05:00 claude-cloud sshd[4010121]: Connection closed by invalid user minecraft 91.92.40.237 port 47064 [preauth] 2026-06-28T01:26:11.563007-05:00 claude-cloud sshd[4010133]: Invalid user ubuntu from 45.198.224.46 port 46492 2026-06-28T01:26:12.273231-05:00 claude-cloud sshd[4010133]: Connection closed by invalid user ubuntu 45.198.224.46 port 46492 [preauth] 2026-06-28T01:26:53.244546-05:00 claude-cloud sshd[4010261]: Invalid user mongod from 102.88.137.213 port 49886 2026-06-28T01:26:53.420867-05:00 claude-cloud sshd[4010261]: Received disconnect from 102.88.137.213 port 49886:11: Bye Bye [preauth] 2026-06-28T01:26:53.421160-05:00 claude-cloud sshd[4010261]: Disconnected from invalid user mongod 102.88.137.213 port 49886 [preauth] 2026-06-28T01:27:11.255996-05:00 claude-cloud sshd[4010318]: Invalid user pilot from 150.95.82.21 port 55568 2026-06-28T01:27:11.460062-05:00 claude-cloud sshd[4010318]: Received disconnect from 150.95.82.21 port 55568:11: Bye Bye [preauth] 2026-06-28T01:27:11.460261-05:00 claude-cloud sshd[4010318]: Disconnected from invalid user pilot 150.95.82.21 port 55568 [preauth] 2026-06-28T01:27:19.108400-05:00 claude-cloud sshd[4010327]: Connection closed by 45.148.10.121 port 32806 [preauth] 2026-06-28T01:27:24.311206-05:00 claude-cloud sshd[4010332]: Connection closed by authenticating user root 115.248.8.65 port 51008 [preauth] 2026-06-28T01:27:36.473316-05:00 claude-cloud sshd[4010388]: Invalid user inspector from 20.173.116.24 port 39656 2026-06-28T01:27:36.566952-05:00 claude-cloud sshd[4010388]: Received disconnect from 20.173.116.24 port 39656:11: Bye Bye [preauth] 2026-06-28T01:27:36.567221-05:00 claude-cloud sshd[4010388]: Disconnected from invalid user inspector 20.173.116.24 port 39656 [preauth] 2026-06-28T01:27:40.794212-05:00 claude-cloud sshd[4010405]: Invalid user minecraft from 91.92.40.237 port 57962 2026-06-28T01:27:40.989391-05:00 claude-cloud sshd[4010405]: Connection closed by invalid user minecraft 91.92.40.237 port 57962 [preauth] 2026-06-28T01:27:44.414782-05:00 claude-cloud sshd[4010357]: Connection closed by authenticating user root 27.71.230.31 port 50220 [preauth] 2026-06-28T01:28:52.158226-05:00 claude-cloud sshd[4010601]: Invalid user inspector from 102.88.137.213 port 33467 2026-06-28T01:28:52.323361-05:00 claude-cloud sshd[4010601]: Received disconnect from 102.88.137.213 port 33467:11: Bye Bye [preauth] 2026-06-28T01:28:52.323515-05:00 claude-cloud sshd[4010601]: Disconnected from invalid user inspector 102.88.137.213 port 33467 [preauth] 2026-06-28T01:29:05.920869-05:00 claude-cloud sshd[4010629]: Received disconnect from 150.95.82.21 port 33926:11: Bye Bye [preauth] 2026-06-28T01:29:05.921205-05:00 claude-cloud sshd[4010629]: Disconnected from authenticating user root 150.95.82.21 port 33926 [preauth] 2026-06-28T01:29:19.792990-05:00 claude-cloud sshd[4010679]: Invalid user minecraft from 91.92.40.237 port 45620 2026-06-28T01:29:20.062585-05:00 claude-cloud sshd[4010679]: Connection closed by invalid user minecraft 91.92.40.237 port 45620 [preauth] 2026-06-28T01:29:54.639557-05:00 claude-cloud sshd[4010796]: Invalid user audit from 20.173.116.24 port 59908 2026-06-28T01:29:54.730679-05:00 claude-cloud sshd[4010796]: Received disconnect from 20.173.116.24 port 59908:11: Bye Bye [preauth] 2026-06-28T01:29:54.730850-05:00 claude-cloud sshd[4010796]: Disconnected from invalid user audit 20.173.116.24 port 59908 [preauth] 2026-06-28T01:30:21.350002-05:00 claude-cloud systemd-logind[853]: New session c4343 of user claude. 2026-06-28T01:30:21.637758-05:00 claude-cloud systemd-logind[853]: Session c4343 logged out. Waiting for processes to exit. 2026-06-28T01:30:21.639782-05:00 claude-cloud systemd-logind[853]: Removed session c4343. 2026-06-28T01:30:49.928327-05:00 claude-cloud sshd[4010952]: Invalid user audit from 102.88.137.213 port 1511 2026-06-28T01:30:50.096157-05:00 claude-cloud sshd[4010952]: Received disconnect from 102.88.137.213 port 1511:11: Bye Bye [preauth] 2026-06-28T01:30:50.096384-05:00 claude-cloud sshd[4010952]: Disconnected from invalid user audit 102.88.137.213 port 1511 [preauth] 2026-06-28T01:30:58.311585-05:00 claude-cloud sshd[4010968]: Invalid user git from 91.92.40.237 port 57758 2026-06-28T01:30:58.591336-05:00 claude-cloud sshd[4010968]: Connection closed by invalid user git 91.92.40.237 port 57758 [preauth] 2026-06-28T01:31:06.823056-05:00 claude-cloud sshd[4010992]: Connection closed by authenticating user root 115.248.8.65 port 36158 [preauth] 2026-06-28T01:32:12.239820-05:00 claude-cloud sshd[4011186]: Received disconnect from 20.173.116.24 port 36332:11: Bye Bye [preauth] 2026-06-28T01:32:12.240339-05:00 claude-cloud sshd[4011186]: Disconnected from authenticating user root 20.173.116.24 port 36332 [preauth] 2026-06-28T01:32:34.989747-05:00 claude-cloud sshd[4011238]: Invalid user git from 91.92.40.237 port 33294 2026-06-28T01:32:35.261680-05:00 claude-cloud sshd[4011238]: Connection closed by invalid user git 91.92.40.237 port 33294 [preauth] 2026-06-28T01:32:43.976963-05:00 claude-cloud sshd[4011276]: Received disconnect from 102.88.137.213 port 17370:11: Bye Bye [preauth] 2026-06-28T01:32:43.977241-05:00 claude-cloud sshd[4011276]: Disconnected from authenticating user root 102.88.137.213 port 17370 [preauth] 2026-06-28T01:33:35.632403-05:00 claude-cloud sshd[4011451]: Connection closed by authenticating user root 27.71.230.31 port 43318 [preauth] 2026-06-28T01:34:31.152065-05:00 claude-cloud sshd[4011618]: Received disconnect from 20.173.116.24 port 33544:11: Bye Bye [preauth] 2026-06-28T01:34:31.152681-05:00 claude-cloud sshd[4011618]: Disconnected from authenticating user root 20.173.116.24 port 33544 [preauth] 2026-06-28T01:34:35.868105-05:00 claude-cloud sshd[4011632]: Invalid user jeremy from 102.88.137.213 port 33459 2026-06-28T01:34:36.038964-05:00 claude-cloud sshd[4011632]: Received disconnect from 102.88.137.213 port 33459:11: Bye Bye [preauth] 2026-06-28T01:34:36.039140-05:00 claude-cloud sshd[4011632]: Disconnected from invalid user jeremy 102.88.137.213 port 33459 [preauth] 2026-06-28T01:34:41.961806-05:00 claude-cloud sshd[4011647]: Connection closed by authenticating user root 115.248.8.65 port 35504 [preauth] 2026-06-28T01:35:01.080743-05:00 claude-cloud CRON[4011729]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-28T01:35:01.088411-05:00 claude-cloud CRON[4011729]: pam_unix(cron:session): session closed for user root 2026-06-28T01:35:25.001303-05:00 claude-cloud systemd-logind[853]: New session c4344 of user claude. 2026-06-28T01:35:25.305476-05:00 claude-cloud systemd-logind[853]: Session c4344 logged out. Waiting for processes to exit. 2026-06-28T01:35:25.307177-05:00 claude-cloud systemd-logind[853]: Removed session c4344. 2026-06-28T01:36:15.499557-05:00 claude-cloud sshd[4011944]: Invalid user boris from 45.198.224.46 port 41434 2026-06-28T01:36:16.304791-05:00 claude-cloud sshd[4011944]: Connection closed by invalid user boris 45.198.224.46 port 41434 [preauth] 2026-06-28T01:36:34.673228-05:00 claude-cloud sshd[4011989]: Received disconnect from 102.88.137.213 port 33541:11: Bye Bye [preauth] 2026-06-28T01:36:34.673793-05:00 claude-cloud sshd[4011989]: Disconnected from authenticating user root 102.88.137.213 port 33541 [preauth] 2026-06-28T01:36:54.569190-05:00 claude-cloud sshd[4012056]: Invalid user ftp_user from 20.173.116.24 port 49572 2026-06-28T01:36:54.666075-05:00 claude-cloud sshd[4012056]: Received disconnect from 20.173.116.24 port 49572:11: Bye Bye [preauth] 2026-06-28T01:36:54.666218-05:00 claude-cloud sshd[4012056]: Disconnected from invalid user ftp_user 20.173.116.24 port 49572 [preauth] 2026-06-28T01:38:26.371251-05:00 claude-cloud sshd[4012274]: Connection closed by authenticating user root 115.248.8.65 port 46106 [preauth] 2026-06-28T01:38:31.405806-05:00 claude-cloud sshd[4012314]: Invalid user git from 102.88.137.213 port 1467 2026-06-28T01:38:31.573434-05:00 claude-cloud sshd[4012314]: Received disconnect from 102.88.137.213 port 1467:11: Bye Bye [preauth] 2026-06-28T01:38:31.573679-05:00 claude-cloud sshd[4012314]: Disconnected from invalid user git 102.88.137.213 port 1467 [preauth] 2026-06-28T01:39:17.710333-05:00 claude-cloud sshd[4012453]: Invalid user git from 20.173.116.24 port 44898 2026-06-28T01:39:17.805498-05:00 claude-cloud sshd[4012453]: Received disconnect from 20.173.116.24 port 44898:11: Bye Bye [preauth] 2026-06-28T01:39:17.805860-05:00 claude-cloud sshd[4012453]: Disconnected from invalid user git 20.173.116.24 port 44898 [preauth] 2026-06-28T01:39:41.718565-05:00 claude-cloud sshd[4012522]: Received disconnect from 13.71.92.229 port 46134:11: Bye Bye [preauth] 2026-06-28T01:39:41.719182-05:00 claude-cloud sshd[4012522]: Disconnected from authenticating user root 13.71.92.229 port 46134 [preauth] 2026-06-28T01:40:26.893231-05:00 claude-cloud sshd[4012645]: Invalid user manu from 102.88.137.213 port 33711 2026-06-28T01:40:27.057886-05:00 claude-cloud sshd[4012645]: Received disconnect from 102.88.137.213 port 33711:11: Bye Bye [preauth] 2026-06-28T01:40:27.058181-05:00 claude-cloud sshd[4012645]: Disconnected from invalid user manu 102.88.137.213 port 33711 [preauth] 2026-06-28T01:40:29.385448-05:00 claude-cloud systemd-logind[853]: New session c4345 of user claude. 2026-06-28T01:40:29.764603-05:00 claude-cloud systemd-logind[853]: Session c4345 logged out. Waiting for processes to exit. 2026-06-28T01:40:29.765684-05:00 claude-cloud systemd-logind[853]: Removed session c4345. 2026-06-28T01:40:43.379318-05:00 claude-cloud sshd[4012466]: Connection closed by authenticating user root 27.71.230.31 port 45230 [preauth] 2026-06-28T01:41:16.481926-05:00 claude-cloud sshd[4012797]: Received disconnect from 172.245.225.106 port 53418:11: disconnected by user [preauth] 2026-06-28T01:41:16.482659-05:00 claude-cloud sshd[4012797]: Disconnected from authenticating user root 172.245.225.106 port 53418 [preauth] 2026-06-28T01:41:39.672443-05:00 claude-cloud sshd[4012869]: Invalid user erick from 20.173.116.24 port 50830 2026-06-28T01:41:39.771683-05:00 claude-cloud sshd[4012869]: Received disconnect from 20.173.116.24 port 50830:11: Bye Bye [preauth] 2026-06-28T01:41:39.771927-05:00 claude-cloud sshd[4012869]: Disconnected from invalid user erick 20.173.116.24 port 50830 [preauth] 2026-06-28T01:42:07.804506-05:00 claude-cloud sshd[4012941]: Invalid user test from 115.248.8.65 port 52312 2026-06-28T01:42:08.383385-05:00 claude-cloud sshd[4012941]: Connection closed by invalid user test 115.248.8.65 port 52312 [preauth] 2026-06-28T01:42:18.010859-05:00 claude-cloud sshd[4012979]: Invalid user david from 58.209.82.184 port 42145 2026-06-28T01:42:18.182021-05:00 claude-cloud sshd[4012979]: Received disconnect from 58.209.82.184 port 42145:11: Bye Bye [preauth] 2026-06-28T01:42:18.182367-05:00 claude-cloud sshd[4012979]: Disconnected from invalid user david 58.209.82.184 port 42145 [preauth] 2026-06-28T01:42:28.661243-05:00 claude-cloud sshd[4013003]: Received disconnect from 102.88.137.213 port 1331:11: Bye Bye [preauth] 2026-06-28T01:42:28.661867-05:00 claude-cloud sshd[4013003]: Disconnected from authenticating user root 102.88.137.213 port 1331 [preauth] 2026-06-28T01:43:13.271411-05:00 claude-cloud sshd[4013195]: Connection closed by 161.35.47.134 port 57056 2026-06-28T01:43:38.062483-05:00 claude-cloud sshd[4013260]: Invalid user git from 91.92.40.237 port 40236 2026-06-28T01:43:38.149796-05:00 claude-cloud sshd[4013260]: Connection closed by invalid user git 91.92.40.237 port 40236 [preauth] 2026-06-28T01:44:00.570546-05:00 claude-cloud sshd[4013329]: Invalid user jeremy from 20.173.116.24 port 48992 2026-06-28T01:44:00.662035-05:00 claude-cloud sshd[4013329]: Received disconnect from 20.173.116.24 port 48992:11: Bye Bye [preauth] 2026-06-28T01:44:00.662249-05:00 claude-cloud sshd[4013329]: Disconnected from invalid user jeremy 20.173.116.24 port 48992 [preauth] 2026-06-28T01:44:28.367208-05:00 claude-cloud sshd[4013404]: Received disconnect from 102.88.137.213 port 33617:11: Bye Bye [preauth] 2026-06-28T01:44:28.367618-05:00 claude-cloud sshd[4013404]: Disconnected from authenticating user root 102.88.137.213 port 33617 [preauth] 2026-06-28T01:45:01.101189-05:00 claude-cloud CRON[4013523]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-28T01:45:01.108339-05:00 claude-cloud CRON[4013523]: pam_unix(cron:session): session closed for user root 2026-06-28T01:45:15.909418-05:00 claude-cloud sshd[4013565]: Invalid user jenkins from 91.92.40.237 port 39510 2026-06-28T01:45:16.322607-05:00 claude-cloud sshd[4013565]: Connection closed by invalid user jenkins 91.92.40.237 port 39510 [preauth] 2026-06-28T01:45:31.153488-05:00 claude-cloud sshd[4013567]: Connection closed by authenticating user root 27.71.230.31 port 36836 [preauth] 2026-06-28T01:45:32.596477-05:00 claude-cloud sshd[4013607]: Invalid user adeel from 58.209.82.184 port 58665 2026-06-28T01:45:32.764922-05:00 claude-cloud sshd[4013607]: Received disconnect from 58.209.82.184 port 58665:11: Bye Bye [preauth] 2026-06-28T01:45:32.765139-05:00 claude-cloud sshd[4013607]: Disconnected from invalid user adeel 58.209.82.184 port 58665 [preauth] 2026-06-28T01:45:33.378314-05:00 claude-cloud systemd-logind[853]: New session c4346 of user claude. 2026-06-28T01:45:33.644592-05:00 claude-cloud systemd-logind[853]: Session c4346 logged out. Waiting for processes to exit. 2026-06-28T01:45:33.645916-05:00 claude-cloud systemd-logind[853]: Removed session c4346. 2026-06-28T01:45:52.244521-05:00 claude-cloud sshd[4013657]: Invalid user user from 115.248.8.65 port 54862 2026-06-28T01:45:52.719173-05:00 claude-cloud sshd[4013657]: Connection closed by invalid user user 115.248.8.65 port 54862 [preauth] 2026-06-28T01:46:10.633933-05:00 claude-cloud sshd[4013694]: Connection closed by authenticating user root 45.198.224.46 port 39064 [preauth] 2026-06-28T01:46:16.091930-05:00 claude-cloud sshd[4013725]: Received disconnect from 20.173.116.24 port 54716:11: Bye Bye [preauth] 2026-06-28T01:46:16.092308-05:00 claude-cloud sshd[4013725]: Disconnected from authenticating user root 20.173.116.24 port 54716 [preauth] 2026-06-28T01:46:22.681722-05:00 claude-cloud sshd[4013750]: Received disconnect from 102.88.137.213 port 1339:11: Bye Bye [preauth] 2026-06-28T01:46:22.682068-05:00 claude-cloud sshd[4013750]: Disconnected from authenticating user root 102.88.137.213 port 1339 [preauth] 2026-06-28T01:46:36.999230-05:00 claude-cloud sshd[4013784]: Invalid user ftptest from 58.209.82.184 port 37598 2026-06-28T01:46:37.199111-05:00 claude-cloud sshd[4013784]: Received disconnect from 58.209.82.184 port 37598:11: Bye Bye [preauth] 2026-06-28T01:46:37.199502-05:00 claude-cloud sshd[4013784]: Disconnected from invalid user ftptest 58.209.82.184 port 37598 [preauth] 2026-06-28T01:46:55.218150-05:00 claude-cloud sshd[4013864]: Invalid user jenkins from 91.92.40.237 port 58948 2026-06-28T01:46:55.578296-05:00 claude-cloud sshd[4013864]: Connection closed by invalid user jenkins 91.92.40.237 port 58948 [preauth] 2026-06-28T01:47:05.534675-05:00 claude-cloud sshd[4013888]: Connection closed by 161.35.47.134 port 48082 2026-06-28T01:48:03.131879-05:00 claude-cloud sshd[4014056]: Invalid user testuser from 116.123.150.231 port 44856 2026-06-28T01:48:03.358055-05:00 claude-cloud sshd[4014056]: Received disconnect from 116.123.150.231 port 44856:11: Bye Bye [preauth] 2026-06-28T01:48:03.358222-05:00 claude-cloud sshd[4014056]: Disconnected from invalid user testuser 116.123.150.231 port 44856 [preauth] 2026-06-28T01:48:31.572456-05:00 claude-cloud sshd[4014131]: Invalid user jenkins from 91.92.40.237 port 37482 2026-06-28T01:48:31.660656-05:00 claude-cloud sshd[4014131]: Connection closed by invalid user jenkins 91.92.40.237 port 37482 [preauth] 2026-06-28T01:48:32.534147-05:00 claude-cloud sshd[4014133]: Invalid user ben from 20.173.116.24 port 50672 2026-06-28T01:48:32.626208-05:00 claude-cloud sshd[4014133]: Received disconnect from 20.173.116.24 port 50672:11: Bye Bye [preauth] 2026-06-28T01:48:32.626556-05:00 claude-cloud sshd[4014133]: Disconnected from invalid user ben 20.173.116.24 port 50672 [preauth] 2026-06-28T01:49:36.918266-05:00 claude-cloud sshd[4014304]: Connection closed by authenticating user root 115.248.8.65 port 52740 [preauth] 2026-06-28T01:50:06.812268-05:00 claude-cloud sshd[4014394]: Invalid user jenkins from 91.92.40.237 port 50758 2026-06-28T01:50:07.089433-05:00 claude-cloud sshd[4014394]: Connection closed by invalid user jenkins 91.92.40.237 port 50758 [preauth] 2026-06-28T01:50:36.298963-05:00 claude-cloud sshd[4014492]: Received disconnect from 208.115.214.194 port 59236:11: disconnected by user [preauth] 2026-06-28T01:50:36.299126-05:00 claude-cloud sshd[4014492]: Disconnected from authenticating user root 208.115.214.194 port 59236 [preauth] 2026-06-28T01:50:37.177872-05:00 claude-cloud systemd-logind[853]: New session c4347 of user claude. 2026-06-28T01:50:37.429947-05:00 claude-cloud systemd-logind[853]: Session c4347 logged out. Waiting for processes to exit. 2026-06-28T01:50:37.431888-05:00 claude-cloud systemd-logind[853]: Removed session c4347. 2026-06-28T01:50:54.250878-05:00 claude-cloud sshd[4014574]: Received disconnect from 20.173.116.24 port 59610:11: Bye Bye [preauth] 2026-06-28T01:50:54.251036-05:00 claude-cloud sshd[4014574]: Disconnected from authenticating user root 20.173.116.24 port 59610 [preauth] 2026-06-28T01:51:28.146467-05:00 claude-cloud sshd[4014636]: Connection closed by authenticating user root 27.71.230.31 port 50868 [preauth] 2026-06-28T01:53:04.429817-05:00 claude-cloud sshd[4014957]: Received disconnect from 13.71.92.229 port 32856:11: Bye Bye [preauth] 2026-06-28T01:53:04.429964-05:00 claude-cloud sshd[4014957]: Disconnected from authenticating user root 13.71.92.229 port 32856 [preauth] 2026-06-28T01:53:15.304030-05:00 claude-cloud sshd[4014978]: Invalid user admin from 115.248.8.65 port 57544 2026-06-28T01:53:15.831043-05:00 claude-cloud sshd[4014978]: Connection closed by invalid user admin 115.248.8.65 port 57544 [preauth] 2026-06-28T01:53:19.084639-05:00 claude-cloud sshd[4014998]: Received disconnect from 20.173.116.24 port 53802:11: Bye Bye [preauth] 2026-06-28T01:53:19.084786-05:00 claude-cloud sshd[4014998]: Disconnected from authenticating user root 20.173.116.24 port 53802 [preauth] 2026-06-28T01:54:27.416396-05:00 claude-cloud sshd[4015188]: Invalid user Test from 116.123.150.231 port 46844 2026-06-28T01:54:27.644010-05:00 claude-cloud sshd[4015188]: Received disconnect from 116.123.150.231 port 46842026-06-28T02:48:31.795797-05:00 claude-cloud sshd[4025596]: Received disconnect from 13.71.92.229 port 39486:11: Bye Bye [preauth] 2026-06-28T02:48:31.796162-05:00 claude-cloud sshd[4025596]: Disconnected from authenticating user root 13.71.92.229 port 39486 [preauth] 2026-06-28T02:48:57.133312-05:00 claude-cloud sshd[4025671]: Invalid user linaro from 115.248.8.65 port 48668 2026-06-28T02:48:57.543760-05:00 claude-cloud sshd[4025671]: Connection closed by invalid user linaro 115.248.8.65 port 48668 [preauth] 2026-06-28T02:49:08.983936-05:00 claude-cloud sshd[4025702]: Connection closed by authenticating user www-data 91.92.40.237 port 49674 [preauth] 2026-06-28T02:49:35.691353-05:00 claude-cloud sshd[4025789]: Invalid user azure from 116.123.150.231 port 45187 2026-06-28T02:49:35.923441-05:00 claude-cloud sshd[4025789]: Received disconnect from 116.123.150.231 port 45187:11: Bye Bye [preauth] 2026-06-28T02:49:35.923690-05:00 claude-cloud sshd[4025789]: Disconnected from invalid user azure 116.123.150.231 port 45187 [preauth] 2026-06-28T02:49:46.377472-05:00 claude-cloud sshd[4025836]: Invalid user iktisat from 189.178.86.243 port 50402 2026-06-28T02:49:46.581237-05:00 claude-cloud sshd[4025836]: Received disconnect from 189.178.86.243 port 50402:11: Bye Bye [preauth] 2026-06-28T02:49:46.581428-05:00 claude-cloud sshd[4025836]: Disconnected from invalid user iktisat 189.178.86.243 port 50402 [preauth] 2026-06-28T02:50:38.988969-05:00 claude-cloud sshd[4025976]: Connection closed by authenticating user www-data 91.92.40.237 port 35670 [preauth] 2026-06-28T02:51:05.299745-05:00 claude-cloud sshd[4026064]: Received disconnect from 13.71.92.229 port 49888:11: Bye Bye [preauth] 2026-06-28T02:51:05.300038-05:00 claude-cloud sshd[4026064]: Disconnected from authenticating user root 13.71.92.229 port 49888 [preauth] 2026-06-28T02:51:17.578972-05:00 claude-cloud sshd[4026069]: Connection closed by authenticating user root 27.71.230.31 port 52016 [preauth] 2026-06-28T02:51:29.033718-05:00 claude-cloud systemd-logind[853]: New session c4359 of user claude. 2026-06-28T02:51:29.356633-05:00 claude-cloud systemd-logind[853]: Session c4359 logged out. Waiting for processes to exit. 2026-06-28T02:51:29.357444-05:00 claude-cloud systemd-logind[853]: Removed session c4359. 2026-06-28T02:51:32.163852-05:00 claude-cloud sshd[4026160]: Connection closed by 161.35.47.134 port 60618 2026-06-28T02:51:41.203926-05:00 claude-cloud sshd[4026180]: Invalid user forum3 from 189.178.86.243 port 57572 2026-06-28T02:51:41.403394-05:00 claude-cloud sshd[4026180]: Received disconnect from 189.178.86.243 port 57572:11: Bye Bye [preauth] 2026-06-28T02:51:41.403747-05:00 claude-cloud sshd[4026180]: Disconnected from invalid user forum3 189.178.86.243 port 57572 [preauth] 2026-06-28T02:51:56.217829-05:00 claude-cloud sshd[4026234]: Invalid user gmodserver from 116.123.150.231 port 36503 2026-06-28T02:51:56.442868-05:00 claude-cloud sshd[4026234]: Received disconnect from 116.123.150.231 port 36503:11: Bye Bye [preauth] 2026-06-28T02:51:56.443044-05:00 claude-cloud sshd[4026234]: Disconnected from invalid user gmodserver 116.123.150.231 port 36503 [preauth] 2026-06-28T02:52:11.067882-05:00 claude-cloud sshd[4026274]: Connection closed by authenticating user www-data 91.92.40.237 port 55158 [preauth] 2026-06-28T02:52:33.573372-05:00 claude-cloud sshd[4026325]: Connection closed by authenticating user root 115.248.8.65 port 50572 [preauth] 2026-06-28T02:53:38.448512-05:00 claude-cloud sshd[4026516]: Invalid user mobiel from 189.178.86.243 port 36494 2026-06-28T02:53:38.649795-05:00 claude-cloud sshd[4026516]: Received disconnect from 189.178.86.243 port 36494:11: Bye Bye [preauth] 2026-06-28T02:53:38.650102-05:00 claude-cloud sshd[4026516]: Disconnected from invalid user mobiel 189.178.86.243 port 36494 [preauth] 2026-06-28T02:53:41.585040-05:00 claude-cloud sshd[4026543]: Invalid user ubuntu from 13.71.92.229 port 60674 2026-06-28T02:53:41.749613-05:00 claude-cloud sshd[4026543]: Received disconnect from 13.71.92.229 port 60674:11: Bye Bye [preauth] 2026-06-28T02:53:41.749785-05:00 claude-cloud sshd[4026543]: Disconnected from invalid user ubuntu 13.71.92.229 port 60674 [preauth] 2026-06-28T02:53:41.851232-05:00 claude-cloud sshd[4026545]: Connection closed by authenticating user backup 91.92.40.237 port 42178 [preauth] 2026-06-28T02:54:18.262453-05:00 claude-cloud sshd[4026665]: Invalid user usuario2 from 116.123.150.231 port 56067 2026-06-28T02:54:18.489092-05:00 claude-cloud sshd[4026665]: Received disconnect from 116.123.150.231 port 56067:11: Bye Bye [preauth] 2026-06-28T02:54:18.489258-05:00 claude-cloud sshd[4026665]: Disconnected from invalid user usuario2 116.123.150.231 port 56067 [preauth] 2026-06-28T02:54:57.869145-05:00 claude-cloud sshd[4026773]: Invalid user admin from 193.46.255.86 port 60918 2026-06-28T02:54:57.894500-05:00 claude-cloud sshd[4026773]: Connection closed by invalid user admin 193.46.255.86 port 60918 [preauth] 2026-06-28T02:55:01.262847-05:00 claude-cloud CRON[4026787]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-28T02:55:01.271420-05:00 claude-cloud CRON[4026787]: pam_unix(cron:session): session closed for user root 2026-06-28T02:55:08.664220-05:00 claude-cloud sshd[4026809]: Connection closed by authenticating user backup 91.92.40.237 port 51794 [preauth] 2026-06-28T02:55:34.161619-05:00 claude-cloud sshd[4026869]: Invalid user elvis from 189.178.86.243 port 43688 2026-06-28T02:55:34.357644-05:00 claude-cloud sshd[4026869]: Received disconnect from 189.178.86.243 port 43688:11: Bye Bye [preauth] 2026-06-28T02:55:34.358022-05:00 claude-cloud sshd[4026869]: Disconnected from invalid user elvis 189.178.86.243 port 43688 [preauth] 2026-06-28T02:55:44.593369-05:00 claude-cloud sshd[4026897]: Invalid user ubuntu from 45.198.224.46 port 56476 2026-06-28T02:55:45.602062-05:00 claude-cloud sshd[4026897]: Connection closed by invalid user ubuntu 45.198.224.46 port 56476 [preauth] 2026-06-28T02:56:15.090411-05:00 claude-cloud sshd[4026987]: Received disconnect from 13.71.92.229 port 43046:11: Bye Bye [preauth] 2026-06-28T02:56:15.090757-05:00 claude-cloud sshd[4026987]: Disconnected from authenticating user root 13.71.92.229 port 43046 [preauth] 2026-06-28T02:56:18.433239-05:00 claude-cloud sshd[4026986]: Connection closed by authenticating user root 115.248.8.65 port 49002 [preauth] 2026-06-28T02:56:33.722326-05:00 claude-cloud systemd-logind[853]: New session c4360 of user claude. 2026-06-28T02:56:34.031449-05:00 claude-cloud systemd-logind[853]: Session c4360 logged out. Waiting for processes to exit. 2026-06-28T02:56:34.032836-05:00 claude-cloud systemd-logind[853]: Removed session c4360. 2026-06-28T02:56:36.872051-05:00 claude-cloud sshd[4027070]: Connection closed by authenticating user backup 91.92.40.237 port 37484 [preauth] 2026-06-28T02:56:38.651839-05:00 claude-cloud sshd[4027075]: Invalid user deploy from 116.123.150.231 port 47398 2026-06-28T02:56:38.878415-05:00 claude-cloud sshd[4027075]: Received disconnect from 116.123.150.231 port 47398:11: Bye Bye [preauth] 2026-06-28T02:56:38.878609-05:00 claude-cloud sshd[4027075]: Disconnected from invalid user deploy 116.123.150.231 port 47398 [preauth] 2026-06-28T02:57:20.138361-05:00 claude-cloud sshd[4027258]: Connection closed by authenticating user root 27.71.230.31 port 60080 [preauth] 2026-06-28T02:57:30.169687-05:00 claude-cloud sshd[4027291]: Invalid user tutorial from 189.178.86.243 port 50872 2026-06-28T02:57:30.365342-05:00 claude-cloud sshd[4027291]: Received disconnect from 189.178.86.243 port 50872:11: Bye Bye [preauth] 2026-06-28T02:57:30.365518-05:00 claude-cloud sshd[4027291]: Disconnected from invalid user tutorial 189.178.86.243 port 50872 [preauth] 2026-06-28T02:58:04.885179-05:00 claude-cloud sshd[4027384]: Connection closed by authenticating user backup 91.92.40.237 port 59600 [preauth] 2026-06-28T02:58:46.467830-05:00 claude-cloud sshd[4027510]: Invalid user io from 13.71.92.229 port 53590 2026-06-28T02:58:46.629989-05:00 claude-cloud sshd[4027510]: Received disconnect from 13.71.92.229 port 53590:11: Bye Bye [preauth] 2026-06-28T02:58:46.630168-05:00 claude-cloud sshd[4027510]: Disconnected from invalid user io 13.71.92.229 port 53590 [preauth] 2026-06-28T02:59:00.960460-05:00 claude-cloud sshd[4027577]: Invalid user ubuntu from 116.123.150.231 port 38730 2026-06-28T02:59:01.192253-05:00 claude-cloud sshd[4027577]: Received disconnect from 116.123.150.231 port 38730:11: Bye Bye [preauth] 2026-06-28T02:59:01.192434-05:00 claude-cloud sshd[4027577]: Disconnected from invalid user ubuntu 116.123.150.231 port 38730 [preauth] 2026-06-28T02:59:34.878060-05:00 claude-cloud sshd[4027689]: Connection closed by authenticating user backup 91.92.40.237 port 38050 [preauth] 2026-06-28T03:00:11.589404-05:00 claude-cloud sshd[4027768]: Connection closed by authenticating user root 115.248.8.65 port 34312 [preauth] 2026-06-28T03:01:05.844745-05:00 claude-cloud sshd[4027932]: Connection closed by authenticating user backup 91.92.40.237 port 34540 [preauth] 2026-06-28T03:01:17.245155-05:00 claude-cloud sshd[4027984]: Invalid user localadmin from 13.71.92.229 port 35982 2026-06-28T03:01:17.409937-05:00 claude-cloud sshd[4027984]: Received disconnect from 13.71.92.229 port 35982:11: Bye Bye [preauth] 2026-06-28T03:01:17.410224-05:00 claude-cloud sshd[4027984]: Disconnected from invalid user localadmin 13.71.92.229 port 35982 [preauth] 2026-06-28T03:01:27.934615-05:00 claude-cloud sshd[4028015]: Received disconnect from 116.123.150.231 port 58297:11: Bye Bye [preauth] 2026-06-28T03:01:27.934940-05:00 claude-cloud sshd[4028015]: Disconnected from authenticating user root 116.123.150.231 port 58297 [preauth] 2026-06-28T03:01:38.529599-05:00 claude-cloud systemd-logind[853]: New session c4361 of user claude. 2026-06-28T03:01:38.892250-05:00 claude-cloud systemd-logind[853]: Session c4361 logged out. Waiting for processes to exit. 2026-06-28T03:01:38.894774-05:00 claude-cloud systemd-logind[853]: Removed session c4361. 2026-06-28T03:02:36.011458-05:00 claude-cloud sshd[4028223]: Connection closed by authenticating user backup 91.92.40.237 port 36028 [preauth] 2026-06-28T03:03:34.294551-05:00 claude-cloud sshd[4028404]: Invalid user bbx from 13.71.92.229 port 46540 2026-06-28T03:03:34.453364-05:00 claude-cloud sshd[4028404]: Received disconnect from 13.71.92.229 port 46540:11: Bye Bye [preauth] 2026-06-28T03:03:34.453720-05:00 claude-cloud sshd[4028404]: Disconnected from invalid user bbx 13.71.92.229 port 46540 [preauth] 2026-06-28T03:03:48.106773-05:00 claude-cloud sshd[4028434]: Connection closed by authenticating user root 115.248.8.65 port 37926 [preauth] 2026-06-28T03:04:06.405238-05:00 claude-cloud sshd[4028499]: Connection closed by authenticating user backup 91.92.40.237 port 41684 [preauth] 2026-06-28T03:04:31.450201-05:00 claude-cloud sshd[4028543]: Connection closed by authenticating user root 27.71.230.31 port 50028 [preauth] 2026-06-28T03:05:01.285226-05:00 claude-cloud CRON[4028655]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-28T03:05:01.290204-05:00 claude-cloud CRON[4028655]: pam_unix(cron:session): session closed for user root 2026-06-28T03:05:36.229726-05:00 claude-cloud sshd[4028758]: Connection closed by authenticating user backup 91.92.40.237 port 56930 [preauth] 2026-06-28T03:05:47.496700-05:00 claude-cloud sshd[4028780]: Connection closed by authenticating user root 45.198.224.46 port 38640 [preauth] 2026-06-28T03:06:42.721624-05:00 claude-cloud systemd-logind[853]: New session c4362 of user claude. 2026-06-28T03:06:43.011758-05:00 claude-cloud systemd-logind[853]: Session c4362 logged out. Waiting for processes to exit. 2026-06-28T03:06:43.012962-05:00 claude-cloud systemd-logind[853]: Removed session c4362. 2026-06-28T03:07:05.792011-05:00 claude-cloud sshd[4029087]: Invalid user support from 91.92.40.237 port 37192 2026-06-28T03:07:05.957436-05:00 claude-cloud sshd[4029087]: Connection closed by invalid user support 91.92.40.237 port 37192 [preauth] 2026-06-28T03:07:34.828137-05:00 claude-cloud sshd[4029155]: Connection closed by authenticating user root 115.248.8.65 port 41552 [preauth] 2026-06-28T03:08:35.545798-05:00 claude-cloud sshd[4029358]: Invalid user support from 91.92.40.237 port 40722 2026-06-28T03:08:35.761654-05:00 claude-cloud sshd[4029358]: Connection closed by invalid user support 91.92.40.237 port 40722 [preauth] 2026-06-28T03:10:01.299242-05:00 claude-cloud CRON[4029585]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-28T03:10:01.303887-05:00 claude-cloud CRON[4029585]: pam_unix(cron:session): session closed for user root 2026-06-28T03:10:03.538431-05:00 claude-cloud sshd[4029597]: Invalid user support from 91.92.40.237 port 50420 2026-06-28T03:10:03.569946-05:00 claude-cloud sshd[4029597]: Connection closed by invalid user support 91.92.40.237 port 50420 [preauth] 2026-06-28T03:10:07.457259-05:00 claude-cloud sshd[4029612]: Invalid user dbadmin from 20.219.91.90 port 42776 2026-06-28T03:10:07.606950-05:00 claude-cloud sshd[4029612]: Received disconnect from 20.219.91.90 port 42776:11: Bye Bye [preauth] 2026-06-28T03:10:07.607221-05:00 claude-cloud sshd[4029612]: Disconnected from invalid user dbadmin 20.219.91.90 port 42776 [preauth] 2026-06-28T03:10:40.280139-05:00 claude-cloud sshd[4029673]: Connection closed by authenticating user root 27.71.230.31 port 47106 [preauth] 2026-06-28T03:11:22.929378-05:00 claude-cloud sshd[4029846]: Connection closed by authenticating user root 115.248.8.65 port 42032 [preauth] 2026-06-28T03:11:33.160620-05:00 claude-cloud sshd[4029883]: Invalid user support from 91.92.40.237 port 42156 2026-06-28T03:11:33.270713-05:00 claude-cloud sshd[4029883]: Connection closed by invalid user support 91.92.40.237 port 42156 [preauth] 2026-06-28T03:11:47.043591-05:00 claude-cloud systemd-logind[853]: New session c4363 of user claude. 2026-06-28T03:11:47.455686-05:00 claude-cloud systemd-logind[853]: Session c4363 logged out. Waiting for processes to exit. 2026-06-28T03:11:47.457593-05:00 claude-cloud systemd-logind[853]: Removed session c4363. 2026-06-28T03:13:01.091670-05:00 claude-cloud sshd[4030152]: Invalid user support from 91.92.40.237 port 33532 2026-06-28T03:13:01.223306-05:00 claude-cloud sshd[4030152]: Connection closed by invalid user support 91.92.40.237 port 33532 [preauth] 2026-06-28T03:14:20.861160-05:00 claude-cloud sshd[4030383]: Connection closed by 161.35.47.134 port 59994 2026-06-28T03:15:01.312962-05:00 claude-cloud CRON[4030488]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-28T03:15:01.319960-05:00 claude-cloud CRON[4030488]: pam_unix(cron:session): session closed for user root 2026-06-28T03:15:03.782450-05:00 claude-cloud sshd[4030486]: Invalid user admin from 115.248.8.65 port 53094 2026-06-28T03:15:04.550675-05:00 claude-cloud sshd[4030486]: Connection closed by invalid user admin 115.248.8.65 port 53094 [preauth] 2026-06-28T03:15:57.314331-05:00 claude-cloud sshd[4030655]: Connection closed by authenticating user root 45.198.224.46 port 40602 [preauth] 2026-06-28T03:16:30.568518-05:00 claude-cloud sshd[4030740]: Connection closed by authenticating user root 27.71.230.31 port 51632 [preauth] 2026-06-28T03:16:51.839907-05:00 claude-cloud systemd-logind[853]: New session c4364 of user claude. 2026-06-28T03:16:52.130606-05:00 claude-cloud systemd-logind[853]: Session c4364 logged out. Waiting for processes to exit. 2026-06-28T03:16:52.132831-05:00 claude-cloud systemd-logind[853]: Removed session c4364. 2026-06-28T03:17:01.328811-05:00 claude-cloud CRON[4030873]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-28T03:17:01.334382-05:00 claude-cloud CRON[4030873]: pam_unix(cron:session): session closed for user root 2026-06-28T03:18:53.230476-05:00 claude-cloud sshd[4031247]: Connection closed by authenticating user root 115.248.8.65 port 34404 [preauth] 2026-06-28T03:20:46.165938-05:00 claude-cloud sshd[4031584]: Connection closed by authenticating user root 45.148.10.121 port 55000 [preauth] 2026-06-28T03:20:54.376939-05:00 claude-cloud sshd[4031565]: Connection closed by 167.94.146.59 port 45192 [preauth] 2026-06-28T03:21:04.333730-05:00 claude-cloud sshd[4031643]: banner exchange: Connection from 64.62.156.66 port 23546: invalid format 2026-06-28T03:21:11.650156-05:00 claude-cloud sshd[4031663]: Invalid user filemaker from 20.219.91.90 port 41714 2026-06-28T03:21:11.805450-05:00 claude-cloud sshd[4031663]: Received disconnect from 20.219.91.90 port 41714:11: Bye Bye [preauth] 2026-06-28T03:21:11.805789-05:00 claude-cloud sshd[4031663]: Disconnected from invalid user filemaker 20.219.91.90 port 41714 [preauth] 2026-06-28T03:21:56.830255-05:00 claude-cloud systemd-logind[853]: New session c4365 of user claude. 2026-06-28T03:21:57.122444-05:00 claude-cloud systemd-logind[853]: Session c4365 logged out. Waiting for processes to exit. 2026-06-28T03:21:57.123917-05:00 claude-cloud systemd-logind[853]: Removed session c4365. 2026-06-28T03:22:19.293918-05:00 claude-cloud sshd[4031904]: Invalid user dbadmin from 185.153.231.45 port 35704 2026-06-28T03:22:19.353366-05:00 claude-cloud sshd[4031904]: Received disconnect from 185.153.231.45 port 35704:11: Bye Bye [preauth] 2026-06-28T03:22:19.353531-05:00 claude-cloud sshd[4031904]: Disconnected from invalid user dbadmin 185.153.231.45 port 35704 [preauth] 2026-06-28T03:22:31.782657-05:00 claude-cloud sshd[4031906]: Connection closed by authenticating user root 27.71.230.31 port 53990 [preauth] 2026-06-28T03:22:37.859295-05:00 claude-cloud sshd[4031944]: Connection closed by authenticating user root 115.248.8.65 port 43778 [preauth] 2026-06-28T03:23:02.864121-05:00 claude-cloud sshd[4032005]: Invalid user hh from 20.219.91.90 port 48814 2026-06-28T03:23:03.018990-05:00 claude-cloud sshd[4032005]: Received disconnect from 20.219.91.90 port 48814:11: Bye Bye [preauth] 2026-06-28T03:23:03.019176-05:00 claude-cloud sshd[4032005]: Disconnected from invalid user hh 20.219.91.90 port 48814 [preauth] 2026-06-28T03:24:16.738920-05:00 claude-cloud sshd[4032245]: Invalid user developer from 91.92.40.237 port 44266 2026-06-28T03:24:16.758557-05:00 claude-cloud sshd[4032245]: Connection closed by invalid user developer 91.92.40.237 port 44266 [preauth] 2026-06-28T03:24:17.629386-05:00 claude-cloud sshd[4032254]: Connection closed by 161.35.47.134 port 60108 2026-06-28T03:25:01.347987-05:00 claude-cloud CRON[4032379]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-28T03:25:01.353335-05:00 claude-cloud CRON[4032379]: pam_unix(cron:session): session closed for user root 2026-06-28T03:25:02.103207-05:00 claude-cloud sshd[4032377]: Invalid user sed from 20.219.91.90 port 55934 2026-06-28T03:25:02.271530-05:00 claude-cloud sshd[4032377]: Received disconnect from 20.219.91.90 port 55934:11: Bye Bye [preauth] 2026-06-28T03:25:02.271817-05:00 claude-cloud sshd[4032377]: Disconnected from invalid user sed 20.219.91.90 port 55934 [preauth] 2026-06-28T03:25:12.847166-05:00 claude-cloud sshd[4032427]: banner exchange: Connection from 45.79.181.104 port 40298: invalid format 2026-06-28T03:25:13.043249-05:00 claude-cloud sshd[4032428]: banner exchange: Connection from 45.79.181.104 port 40304: invalid format 2026-06-28T03:25:43.026217-05:00 claude-cloud sshd[4032488]: Invalid user developer from 91.92.40.237 port 43412 2026-06-28T03:25:43.467950-05:00 claude-cloud sshd[4032488]: Connection closed by invalid user developer 91.92.40.237 port 43412 [preauth] 2026-06-28T03:25:52.690178-05:00 claude-cloud sshd[4032516]: Invalid user tomcat from 45.198.224.46 port 51602 2026-06-28T03:25:53.677972-05:00 claude-cloud sshd[4032516]: Connection closed by invalid user tomcat 45.198.224.46 port 51602 [preauth] 2026-06-28T03:26:17.497248-05:00 claude-cloud sshd[4032579]: Connection closed by authenticating user root 115.248.8.65 port 38960 [preauth] 2026-06-28T03:26:26.578080-05:00 claude-cloud sshd[4032631]: Invalid user sed from 185.153.231.45 port 57650 2026-06-28T03:26:26.636826-05:00 claude-cloud sshd[4032631]: Received disconnect from 185.153.231.45 port 57650:11: Bye Bye [preauth] 2026-06-28T03:26:26.636995-05:00 claude-cloud sshd[4032631]: Disconnected from invalid user sed 185.153.231.45 port 57650 [preauth] 2026-06-28T03:27:00.943070-05:00 claude-cloud systemd-logind[853]: New session c4366 of user claude. 2026-06-28T03:27:01.327883-05:00 claude-cloud systemd-logind[853]: Session c4366 logged out. Waiting for processes to exit. 2026-06-28T03:27:01.329708-05:00 claude-cloud systemd-logind[853]: Removed session c4366. 2026-06-28T03:27:07.491585-05:00 claude-cloud sshd[4032764]: Invalid user ltx from 20.219.91.90 port 34834 2026-06-28T03:27:07.651021-05:00 claude-cloud sshd[4032764]: Received disconnect from 20.219.91.90 port 34834:11: Bye Bye [preauth] 2026-06-28T03:27:07.651265-05:00 claude-cloud sshd[4032764]: Disconnected from invalid user ltx 20.219.91.90 port 34834 [preauth] 2026-06-28T03:27:09.869111-05:00 claude-cloud sshd[4032766]: Invalid user developer from 91.92.40.237 port 55314 2026-06-28T03:27:10.150939-05:00 claude-cloud sshd[4032766]: Connection closed by invalid user developer 91.92.40.237 port 55314 [preauth] 2026-06-28T03:28:30.700704-05:00 claude-cloud sshd[4033043]: Connection closed by authenticating user root 27.71.230.31 port 46214 [preauth] 2026-06-28T03:28:37.881216-05:00 claude-cloud sshd[4033094]: Invalid user developer from 91.92.40.237 port 36580 2026-06-28T03:28:38.027075-05:00 claude-cloud sshd[4033094]: Connection closed by invalid user developer 91.92.40.237 port 36580 [preauth] 2026-06-28T03:28:41.354341-05:00 claude-cloud sshd[4033110]: Invalid user admin from 2.57.121.25 port 34306 2026-06-28T03:28:41.380260-05:00 claude-cloud sshd[4033110]: Connection closed by invalid user admin 2.57.121.25 port 34306 [preauth] 2026-06-28T03:29:12.118571-05:00 claude-cloud sshd[4033182]: Invalid user ny from 20.219.91.90 port 41946 2026-06-28T03:29:12.277416-05:00 claude-cloud sshd[4033182]: Received disconnect from 20.219.91.90 port 41946:11: Bye Bye [preauth] 2026-06-28T03:29:12.277723-05:00 claude-cloud sshd[4033182]: Disconnected from invalid user ny 20.219.91.90 port 41946 [preauth] 2026-06-28T03:30:01.364590-05:00 claude-cloud CRON[4033336]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-28T03:30:01.370176-05:00 claude-cloud CRON[4033336]: pam_unix(cron:session): session closed for user root 2026-06-28T03:30:02.955078-05:00 claude-cloud sshd[4033334]: Connection closed by authenticating user root 115.248.8.65 port 47412 [preauth] 2026-06-28T03:30:05.443391-05:00 claude-cloud sshd[4033358]: Invalid user developer from 91.92.40.237 port 58246 2026-06-28T03:30:05.479085-05:00 claude-cloud sshd[4033358]: Connection closed by invalid user developer 91.92.40.237 port 58246 [preauth] 2026-06-28T03:31:22.654076-05:00 claude-cloud sshd[4033573]: Invalid user john from 45.148.10.239 port 51408 2026-06-28T03:31:22.667409-05:00 claude-cloud sshd[4033573]: Connection closed by invalid user john 45.148.10.239 port 51408 [preauth] 2026-06-28T03:32:05.103019-05:00 claude-cloud systemd-logind[853]: New session c4367 of user claude. 2026-06-28T03:32:05.449659-05:00 claude-cloud systemd-logind[853]: Session c4367 logged out. Waiting for processes to exit. 2026-06-28T03:32:05.451026-05:00 claude-cloud systemd-logind[853]: Removed session c4367. 2026-06-28T03:32:57.911988-05:00 claude-cloud sshd[4033848]: Invalid user swa from 185.153.231.45 port 37648 2026-06-28T03:32:57.976768-05:00 claude-cloud sshd[4033848]: Received disconnect from 185.153.231.45 port 37648:11: Bye Bye [preauth] 2026-06-28T03:32:57.976980-05:00 claude-cloud sshd[4033848]: Disconnected from invalid user swa 185.153.231.45 port 37648 [preauth] 2026-06-28T03:33:43.816193-05:00 claude-cloud sshd[4033991]: Invalid user admin from 115.248.8.65 port 41416 2026-06-28T03:33:44.390476-05:00 claude-cloud sshd[4033991]: Connection closed by invalid user admin 115.248.8.65 port 41416 [preauth] 2026-06-28T03:33:56.502803-05:00 claude-cloud sshd[4034049]: Invalid user cu from 185.153.231.45 port 35472 2026-06-28T03:33:56.597740-05:00 claude-cloud sshd[4034049]: Received disconnect from 185.153.231.45 port 35472:11: Bye Bye [preauth] 2026-06-28T03:33:56.597891-05:00 claude-cloud sshd[4034049]: Disconnected from invalid user cu 185.153.231.45 port 35472 [preauth] 2026-06-28T03:34:53.915733-05:00 claude-cloud sshd[4034184]: Invalid user gw from 185.153.231.45 port 60218 2026-06-28T03:34:53.981292-05:00 claude-cloud sshd[4034184]: Received disconnect from 185.153.231.45 port 60218:11: Bye Bye [preauth] 2026-06-28T03:34:53.981418-05:00 claude-cloud sshd[4034184]: Disconnected from invalid user gw 185.153.231.45 port 60218 [preauth] 2026-06-28T03:35:01.378380-05:00 claude-cloud CRON[4034205]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-28T03:35:01.384000-05:00 claude-cloud CRON[4034205]: pam_unix(cron:session): session closed for user root 2026-06-28T03:35:21.222197-05:00 claude-cloud sshd[4034100]: Connection closed by authenticating user root 27.71.230.31 port 55672 [preauth] 2026-06-28T03:35:51.037140-05:00 claude-cloud sshd[4034377]: Invalid user zabbix from 45.198.224.46 port 45764 2026-06-28T03:35:51.695205-05:00 claude-cloud sshd[4034377]: Connection closed by invalid user zabbix 45.198.224.46 port 45764 [preauth] 2026-06-28T03:37:10.400352-05:00 claude-cloud systemd-logind[853]: New session c4368 of user claude. 2026-06-28T03:37:10.675433-05:00 claude-cloud systemd-logind[853]: Session c4368 logged out. Waiting for processes to exit. 2026-06-28T03:37:10.677196-05:00 claude-cloud systemd-logind[853]: Removed session c4368. 2026-06-28T03:37:30.267225-05:00 claude-cloud sshd[4034647]: Invalid user user from 115.248.8.65 port 36570 2026-06-28T03:37:31.009162-05:00 claude-cloud sshd[4034647]: Connection closed by invalid user user 115.248.8.65 port 36570 [preauth] 2026-06-28T03:37:43.329676-05:00 claude-cloud sshd[4034697]: Connection closed by 161.35.47.134 port 51752 2026-06-28T03:39:53.333910-05:00 claude-cloud sshd[4035152]: Invalid user senate from 20.219.91.90 port 49350 2026-06-28T03:39:53.493791-05:00 claude-cloud sshd[4035152]: Received disconnect from 20.219.91.90 port 49350:11: Bye Bye [preauth] 2026-06-28T03:39:53.494035-05:00 claude-cloud sshd[4035152]: Disconnected from invalid user senate 20.219.91.90 port 49350 [preauth] 2026-06-28T03:41:16.659643-05:00 claude-cloud sshd[4035381]: Connection closed by authenticating user root 115.248.8.65 port 38258 [preauth] 2026-06-28T03:41:20.415551-05:00 claude-cloud sshd[4035395]: Invalid user webadmin from 91.92.40.237 port 36930 2026-06-28T03:41:20.463433-05:00 claude-cloud sshd[4035395]: Connection closed by invalid user webadmin 91.92.40.237 port 36930 [preauth] 2026-06-28T03:41:27.666709-05:00 claude-cloud sshd[4035383]: Connection closed by authenticating user root 27.71.230.31 port 57410 [preauth] 2026-06-28T03:41:59.399559-05:00 claude-cloud sshd[4035514]: Invalid user rb from 20.219.91.90 port 56426 2026-06-28T03:41:59.556535-05:00 claude-cloud sshd[4035514]: Received disconnect from 20.219.91.90 port 56426:11: Bye Bye [preauth] 2026-06-28T03:41:59.556718-05:00 claude-cloud sshd[4035514]: Disconnected from invalid user rb 20.219.91.90 port 56426 [preauth] 2026-06-28T03:42:14.367888-05:00 claude-cloud systemd-logind[853]: New session c4369 of user claude. 2026-06-28T03:42:14.669675-05:00 claude-cloud systemd-logind[853]: Session c4369 logged out. Waiting for processes to exit. 2026-06-28T03:42:14.671471-05:00 claude-cloud systemd-logind[853]: Removed session c4369. 2026-06-28T03:42:48.307812-05:00 claude-cloud sshd[4035693]: Invalid user webadmin from 91.92.40.237 port 34388 2026-06-28T03:42:48.448039-05:00 claude-cloud sshd[4035693]: Connection closed by invalid user webadmin 91.92.40.237 port 34388 [preauth] 2026-06-28T03:44:09.736448-05:00 claude-cloud sshd[4035919]: Invalid user elektra from 20.219.91.90 port 35324 2026-06-28T03:44:09.903164-05:00 claude-cloud sshd[4035919]: Received disconnect from 20.219.91.90 port 35324:11: Bye Bye [preauth] 2026-06-28T03:44:09.903420-05:00 claude-cloud sshd[4035919]: Disconnected from invalid user elektra 20.219.91.90 port 35324 [preauth] 2026-06-28T03:44:18.147325-05:00 claude-cloud sshd[4035942]: Invalid user webadmin from 91.92.40.237 port 54850 2026-06-28T03:44:18.210727-05:00 claude-cloud sshd[4035942]: Connection closed by invalid user webadmin 91.92.40.237 port 54850 [preauth] 2026-06-28T03:45:01.393933-05:00 claude-cloud CRON[4036084]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-28T03:45:01.399351-05:00 claude-cloud CRON[4036084]: pam_unix(cron:session): session closed for user root 2026-06-28T03:45:03.040857-05:00 claude-cloud sshd[4036058]: Connection closed by authenticating user root 115.248.8.65 port 42306 [preauth] 2026-06-28T03:45:44.554304-05:00 claude-cloud sshd[4036211]: Connection closed by authenticating user root 45.198.224.46 port 48334 [preauth] 2026-06-28T03:45:47.274549-05:00 claude-cloud sshd[4036236]: Invalid user newuser from 91.92.40.237 port 36562 2026-06-28T03:45:47.422172-05:00 claude-cloud sshd[4036236]: Connection closed by invalid user newuser 91.92.40.237 port 36562 [preauth] 2026-06-28T03:46:21.936479-05:00 claude-cloud sshd[4036324]: Invalid user proposal from 20.219.91.90 port 42466 2026-06-28T03:46:22.095616-05:00 claude-cloud sshd[4036324]: Received disconnect from 20.219.91.90 port 42466:11: Bye Bye [preauth] 2026-06-28T03:46:22.095820-05:00 claude-cloud sshd[4036324]: Disconnected from invalid user proposal 20.219.91.90 port 42466 [preauth] 2026-06-28T03:47:13.952808-05:00 claude-cloud sshd[4036453]: Invalid user newuser from 91.92.40.237 port 45414 2026-06-28T03:47:13.977100-05:00 claude-cloud sshd[4036453]: Connection closed by invalid user newuser 91.92.40.237 port 45414 [preauth] 2026-06-28T03:47:18.764415-05:00 claude-cloud systemd-logind[853]: New session c4370 of user claude. 2026-06-28T03:47:19.058489-05:00 claude-cloud systemd-logind[853]: Session c4370 logged out. Waiting for processes to exit. 2026-06-28T03:47:19.060474-05:00 claude-cloud systemd-logind[853]: Removed session c4370. 2026-06-28T03:47:38.337680-05:00 claude-cloud sshd[4036556]: Connection closed by 161.35.47.134 port 55058 2026-06-28T03:48:29.123114-05:00 claude-cloud sshd[4036775]: Invalid user fat from 20.219.91.90 port 49598 2026-06-28T03:48:29.292149-05:00 claude-cloud sshd[4036775]: Received disconnect from 20.219.91.90 port 49598:11: Bye Bye [preauth] 2026-06-28T03:48:29.292412-05:00 claude-cloud sshd[4036775]: Disconnected from invalid user fat 20.219.91.90 port 49598 [preauth] 2026-06-28T03:48:31.186346-05:00 claude-cloud sshd[4036735]: Connection closed by authenticating user root 27.71.230.31 port 33230 [preauth] 2026-06-28T03:48:48.566740-05:00 claude-cloud sshd[4036821]: Invalid user admin from 115.248.8.65 port 56910 2026-06-28T03:48:49.101659-05:00 claude-cloud sshd[4036821]: Connection closed by invalid user admin 115.248.8.65 port 56910 [preauth] 2026-06-28T03:52:22.741850-05:00 claude-cloud systemd-logind[853]: New session c4371 of user claude. 2026-06-28T03:52:23.066611-05:00 claude-cloud systemd-logind[853]: Session c4371 logged out. Waiting for processes to exit. 2026-06-28T03:52:23.069386-05:00 claude-cloud systemd-logind[853]: Removed session c4371. 2026-06-28T03:52:30.299552-05:00 claude-cloud sshd[4037484]: Connection closed by authenticating user root 115.248.8.65 port 33148 [preauth] 2026-06-28T03:52:43.487258-05:00 claude-cloud sshd[4037540]: Invalid user devlin from 2.57.121.112 port 37568 2026-06-28T03:52:43.513964-05:00 claude-cloud sshd[4037540]: Connection closed by invalid user devlin 2.57.121.112 port 37568 [preauth] 2026-06-28T03:54:39.122992-05:00 claude-cloud sshd[4037885]: Invalid user user from 45.148.10.121 port 47514 2026-06-28T03:54:39.148912-05:00 claude-cloud sshd[4037885]: Connection closed by invalid user user 45.148.10.121 port 47514 [preauth] 2026-06-28T03:54:49.774339-05:00 claude-cloud sshd[4037911]: Connection closed by authenticating user root 193.46.255.86 port 14310 [preauth] 2026-06-28T03:55:01.411928-05:00 claude-cloud CRON[4037940]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-28T03:55:01.420065-05:00 claude-cloud CRON[4037940]: pam_unix(cron:session): session closed for user root 2026-06-28T03:55:42.137859-05:00 claude-cloud sshd[4038049]: Connection closed by authenticating user root 45.198.224.46 port 59556 [preauth] 2026-06-28T03:56:14.110915-05:00 claude-cloud sshd[4038153]: Connection closed by authenticating user root 115.248.8.65 port 49478 [preauth] 2026-06-28T03:57:27.321724-05:00 claude-cloud systemd-logind[853]: New session c4372 of user claude. 2026-06-28T03:57:27.575374-05:00 claude-cloud systemd-logind[853]: Session c4372 logged out. Waiting for processes to exit. 2026-06-28T03:57:27.576389-05:00 claude-cloud systemd-logind[853]: Removed session c4372. 2026-06-28T03:57:43.777585-05:00 claude-cloud sshd[4038437]: Invalid user newuser from 91.92.40.237 port 38542 2026-06-28T03:57:43.936437-05:00 claude-cloud sshd[4038437]: Connection closed by invalid user newuser 91.92.40.237 port 38542 [preauth] 2026-06-28T03:59:12.808610-05:00 claude-cloud sshd[4038787]: Invalid user mole from 20.219.91.90 port 56922 2026-06-28T03:59:12.965403-05:00 claude-cloud sshd[4038787]: Received disconnect from 20.219.91.90 port 56922:11: Bye Bye [preauth] 2026-06-28T03:59:12.965708-05:00 claude-cloud sshd[4038787]: Disconnected from invalid user mole 20.219.91.90 port 56922 [preauth] 2026-06-28T03:59:19.223659-05:00 claude-cloud sshd[4038810]: Connection closed by 195.178.110.217 port 56810 2026-06-28T03:59:30.761810-05:00 claude-cloud sshd[4038831]: Connection closed by authenticating user root 123.31.20.162 port 50815 [preauth] 2026-06-28T03:59:38.473564-05:00 claude-cloud sshd[4038851]: Invalid user administrator from 91.92.40.237 port 35408 2026-06-28T03:59:38.777401-05:00 claude-cloud sshd[4038851]: Connection closed by invalid user administrator 91.92.40.237 port 35408 [preauth] 2026-06-28T03:59:58.613732-05:00 claude-cloud sshd[4038915]: Invalid user postgres from 115.248.8.65 port 57596 2026-06-28T03:59:59.016961-05:00 claude-cloud sshd[4038915]: Connection closed by invalid user postgres 115.248.8.65 port 57596 [preauth] 2026-06-28T04:00:27.777444-05:00 claude-cloud sshd[4038971]: Connection closed by authenticating user root 27.71.230.31 port 35064 [preauth] 2026-06-28T04:01:24.521879-05:00 claude-cloud sshd[4039153]: Invalid user administrator from 91.92.40.237 port 43850 2026-06-28T04:01:24.790516-05:00 claude-cloud sshd[4039153]: Connection closed by invalid user administrator 91.92.40.237 port 43850 [preauth] 2026-06-28T04:02:01.428699-05:00 claude-cloud sshd[4039276]: Connection closed by 161.35.47.134 port 39812 2026-06-28T04:02:31.518363-05:00 claude-cloud systemd-logind[853]: New session c4373 of user claude. 2026-06-28T04:02:31.932955-05:00 claude-cloud systemd-logind[853]: Session c4373 logged out. Waiting for processes to exit. 2026-06-28T04:02:31.934750-05:00 claude-cloud systemd-logind[853]: Removed session c4373. 2026-06-28T04:02:34.987553-05:00 claude-cloud sshd[4039379]: Connection reset by 46.101.232.106 port 29421 [preauth] 2026-06-28T04:03:09.676933-05:00 claude-cloud sshd[4039496]: Invalid user administrator from 91.92.40.237 port 47312 2026-06-28T04:03:09.785862-05:00 claude-cloud sshd[4039496]: Connection closed by invalid user administrator 91.92.40.237 port 47312 [preauth] 2026-06-28T04:03:39.158902-05:00 claude-cloud sshd[4039562]: Connection closed by authenticating user root 115.248.8.65 port 46124 [preauth] 2026-06-28T04:04:39.842536-05:00 claude-cloud sshd[4039756]: Connection closed by authenticating user root 89.203.249.139 port 46712 [preauth] 2026-06-28T04:04:55.452244-05:00 claude-cloud sshd[4039816]: Invalid user administrator from 91.92.40.237 port 54264 2026-06-28T04:04:55.911241-05:00 claude-cloud sshd[4039816]: Connection closed by invalid user administrator 91.92.40.237 port 54264 [preauth] 2026-06-28T04:05:01.433257-05:00 claude-cloud CRON[4039830]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-28T04:05:01.440517-05:00 claude-cloud CRON[4039830]: pam_unix(cron:session): session closed for user root 2026-06-28T04:05:36.726104-05:00 claude-cloud sshd[4039927]: Invalid user falcon from 45.198.224.46 port 37212 2026-06-28T04:05:37.573845-05:00 claude-cloud sshd[4039927]: Connection closed by invalid user falcon 45.198.224.46 port 37212 [preauth] 2026-06-28T04:06:31.976080-05:00 claude-cloud sshd[4040059]: Connection closed by authenticating user root 27.71.230.31 port 45794 [preauth] 2026-06-28T04:06:47.695667-05:00 claude-cloud sshd[4040137]: Received disconnect from 64.31.53.170 port 55526:11: disconnected by user [preauth] 2026-06-28T04:06:47.695864-05:00 claude-cloud sshd[4040137]: Disconnected from authenticating user root 64.31.53.170 port 55526 [preauth] 2026-06-28T04:07:26.113427-05:00 claude-cloud sshd[4040231]: Connection closed by authenticating user root 115.248.8.65 port 38140 [preauth] 2026-06-28T04:07:35.722110-05:00 claude-cloud systemd-logind[853]: New session c4374 of user claude. 2026-06-28T04:07:36.001104-05:00 claude-cloud systemd-logind[853]: Session c4374 logged out. Waiting for processes to exit. 2026-06-28T04:07:36.002410-05:00 claude-cloud systemd-logind[853]: Removed session c4374. 2026-06-28T04:09:02.364974-05:00 claude-cloud sshd[4040584]: Connection closed by authenticating user root 195.178.110.217 port 60862 [preauth] 2026-06-28T04:10:33.870856-05:00 claude-cloud sshd[4040829]: Connection closed by 161.35.47.134 port 45492 2026-06-28T04:10:48.590839-05:00 claude-cloud sshd[4040884]: Connection closed by authenticating user root 195.178.110.217 port 35670 [preauth] 2026-06-28T04:11:04.703648-05:00 claude-cloud sshd[4040917]: Invalid user openhabian from 115.248.8.65 port 54788 2026-06-28T04:11:05.059990-05:00 claude-cloud sshd[4040917]: Connection closed by invalid user openhabian 115.248.8.65 port 54788 [preauth] 2026-06-28T04:12:34.430677-05:00 claude-cloud sshd[4041147]: Connection closed by authenticating user root 27.71.230.31 port 53368 [preauth] 2026-06-28T04:12:38.536025-05:00 claude-cloud sshd[4041174]: Connection closed by authenticating user root 195.178.110.217 port 38702 [preauth] 2026-06-28T04:12:39.874803-05:00 claude-cloud systemd-logind[853]: New session c4375 of user claude. 2026-06-28T04:12:40.155636-05:00 claude-cloud systemd-logind[853]: Session c4375 logged out. Waiting for processes to exit. 2026-06-28T04:12:40.158374-05:00 claude-cloud systemd-logind[853]: Removed session c4375. 2026-06-28T04:14:28.235478-05:00 claude-cloud sshd[4041499]: Connection closed by authenticating user root 195.178.110.217 port 41770 [preauth] 2026-06-28T04:14:48.374597-05:00 claude-cloud sshd[4041561]: Connection closed by authenticating user root 115.248.8.65 port 35682 [preauth] 2026-06-28T04:15:01.452474-05:00 claude-cloud CRON[4041609]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-28T04:15:01.457567-05:00 claude-cloud CRON[4041609]: pam_unix(cron:session): session closed for user root 2026-06-28T04:15:30.596711-05:00 claude-cloud sshd[4041687]: Invalid user ssh from 91.92.40.237 port 58800 2026-06-28T04:15:30.742410-05:00 claude-cloud sshd[4041687]: Connection closed by invalid user ssh 91.92.40.237 port 58800 [preauth] 2026-06-28T04:15:35.866054-05:00 claude-cloud sshd[4041689]: Invalid user babashahi from 45.198.224.46 port 49746 2026-06-28T04:15:37.242258-05:00 claude-cloud sshd[4041689]: Connection closed by invalid user babashahi 45.198.224.46 port 49746 [preauth] 2026-06-28T04:16:17.510216-05:00 claude-cloud sshd[4041819]: Connection closed by authenticating user root 195.178.110.217 port 44784 [preauth] 2026-06-28T04:17:01.466185-05:00 claude-cloud CRON[4041964]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-28T04:17:01.476479-05:00 claude-cloud CRON[4041964]: pam_unix(cron:session): session closed for user root 2026-06-28T04:17:10.631739-05:00 claude-cloud sshd[4041988]: Invalid user ssh from 91.92.40.237 port 49514 2026-06-28T04:17:11.042053-05:00 claude-cloud sshd[4041988]: Connection closed by invalid user ssh 91.92.40.237 port 49514 [preauth] 2026-06-28T04:17:43.746817-05:00 claude-cloud systemd-logind[853]: New session c4376 of user claude. 2026-06-28T04:17:44.169533-05:00 claude-cloud systemd-logind[853]: Session c4376 logged out. Waiting for processes to exit. 2026-06-28T04:17:44.171581-05:00 claude-cloud systemd-logind[853]: Removed session c4376. 2026-06-28T04:18:08.216857-05:00 claude-cloud sshd[4042143]: Connection closed by authenticating user root 195.178.110.217 port 47810 [preauth] 2026-06-28T04:18:35.024537-05:00 claude-cloud sshd[4042196]: Connection closed by authenticating user root 27.71.230.31 port 40634 [preauth] 2026-06-28T04:18:35.415472-05:00 claude-cloud sshd[4042205]: Invalid user sshadmin from 115.248.8.65 port 45396 2026-06-28T04:18:36.076099-05:00 claude-cloud sshd[4042205]: Connection closed by invalid user sshadmin 115.248.8.65 port 45396 [preauth] 2026-06-28T04:18:49.802536-05:00 claude-cloud sshd[4042341]: Invalid user ssh from 91.92.40.237 port 44306 2026-06-28T04:18:49.901360-05:00 claude-cloud sshd[4042341]: Connection closed by invalid user ssh 91.92.40.237 port 44306 [preauth] 2026-06-28T04:19:55.517965-05:00 claude-cloud sshd[4042532]: Connection closed by authenticating user root 195.178.110.217 port 50816 [preauth] 2026-06-28T04:20:38.684323-05:00 claude-cloud sshd[4042635]: Invalid user ssh from 91.92.40.237 port 60408 2026-06-28T04:20:38.965948-05:00 claude-cloud sshd[4042635]: Connection closed by invalid user ssh 91.92.40.237 port 60408 [preauth] 2026-06-28T04:21:36.478180-05:00 claude-cloud sshd[4042811]: Connection closed by 161.35.47.134 port 45784 2026-06-28T04:21:45.921271-05:00 claude-cloud sshd[4042838]: Connection closed by authenticating user root 195.178.110.217 port 53866 [preauth] 2026-06-28T04:22:16.230695-05:00 claude-cloud sshd[4042917]: Connection closed by authenticating user root 115.248.8.65 port 50674 [preauth] 2026-06-28T04:22:26.643156-05:00 claude-cloud sshd[4042952]: Invalid user ssh from 91.92.40.237 port 41768 2026-06-28T04:22:26.993565-05:00 claude-cloud sshd[4042952]: Connection closed by invalid user ssh 91.92.40.237 port 41768 [preauth] 2026-06-28T04:22:48.158442-05:00 claude-cloud systemd-logind[853]: New session c4377 of user claude. 2026-06-28T04:22:48.457872-05:00 claude-cloud systemd-logind[853]: Session c4377 logged out. Waiting for processes to exit. 2026-06-28T04:22:48.460047-05:00 claude-cloud systemd-logind[853]: Removed session c4377. 2026-06-28T04:23:39.983479-05:00 claude-cloud sshd[4043166]: Connection closed by authenticating user root 195.178.110.217 port 56914 [preauth] 2026-06-28T04:24:41.732521-05:00 claude-cloud sshd[4043292]: Connection closed by authenticating user root 27.71.230.31 port 36462 [preauth] 2026-06-28T04:25:01.491462-05:00 claude-cloud CRON[4043393]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-28T04:25:01.499163-05:00 claude-cloud CRON[4043393]: pam_unix(cron:session): session closed for user root 2026-06-28T04:25:27.966365-05:00 claude-cloud sshd[4043478]: Connection closed by authenticating user root 45.198.224.46 port 50808 [preauth] 2026-06-28T04:25:39.200344-05:00 claude-cloud sshd[4043512]: Connection closed by authenticating user root 195.178.110.217 port 59930 [preauth] 2026-06-28T04:26:03.069706-05:00 claude-cloud sshd[4043556]: Invalid user frappe from 115.248.8.65 port 50004 2026-06-28T04:26:03.396839-05:00 claude-cloud sshd[4043556]: Connection closed by invalid user frappe 115.248.8.65 port 50004 [preauth] 2026-06-28T04:27:45.873379-05:00 claude-cloud sshd[4043855]: Connection closed by authenticating user root 195.178.110.217 port 34698 [preauth] 2026-06-28T04:27:53.005492-05:00 claude-cloud systemd-logind[853]: New session c4378 of user claude. 2026-06-28T04:27:53.287990-05:00 claude-cloud systemd-logind[853]: Session c4378 logged out. Waiting for processes to exit. 2026-06-28T04:27:53.289856-05:00 claude-cloud systemd-logind[853]: Removed session c4378. 2026-06-28T04:28:00.855924-05:00 claude-cloud sshd[4043910]: Connection closed by authenticating user root 45.148.10.121 port 47280 [preauth] 2026-06-28T04:29:47.832375-05:00 claude-cloud sshd[4044241]: Invalid user huawei from 115.248.8.65 port 55650 2026-06-28T04:29:48.129114-05:00 claude-cloud sshd[4044241]: Connection closed by invalid user huawei 115.248.8.65 port 55650 [preauth] 2026-06-28T04:29:54.469404-05:00 claude-cloud sshd[4044286]: Connection closed by 161.35.47.134 port 56068 2026-06-28T04:30:01.039082-05:00 claude-cloud sshd[4044301]: Connection closed by authenticating user root 195.178.110.217 port 37718 [preauth] 2026-06-28T04:30:38.459765-05:00 claude-cloud sshd[4044388]: Connection closed by authenticating user root 27.71.230.31 port 54822 [preauth] 2026-06-28T04:32:21.834409-05:00 claude-cloud sshd[4044694]: Connection closed by authenticating user root 195.178.110.217 port 40738 [preauth] 2026-06-28T04:32:42.005625-05:00 claude-cloud sshd[4044771]: Invalid user sysadmin from 91.92.40.237 port 47134 2026-06-28T04:32:42.378316-05:00 claude-cloud sshd[4044771]: Connection closed by invalid user sysadmin 91.92.40.237 port 47134 [preauth] 2026-06-28T04:32:57.069566-05:00 claude-cloud systemd-logind[853]: New session c4379 of user claude. 2026-06-28T04:32:57.387556-05:00 claude-cloud systemd-logind[853]: Session c4379 logged out. Waiting for processes to exit. 2026-06-28T04:32:57.389068-05:00 claude-cloud systemd-logind[853]: Removed session c4379. 2026-06-28T04:33:28.554227-05:00 claude-cloud sshd[4044919]: Invalid user ubuntu from 115.248.8.65 port 47180 2026-06-28T04:33:29.234912-05:00 claude-cloud sshd[4044919]: Connection closed by invalid user ubuntu 115.248.8.65 port 47180 [preauth] 2026-06-28T04:34:26.539713-05:00 claude-cloud sshd[4045093]: Invalid user sysadmin from 91.92.40.237 port 48538 2026-06-28T04:34:26.629185-05:00 claude-cloud sshd[4045093]: Connection closed by invalid user sysadmin 91.92.40.237 port 48538 [preauth] 2026-06-28T04:34:59.507410-05:00 claude-cloud sshd[4045190]: Connection closed by authenticating user root 195.178.110.217 port 43752 [preauth] 2026-06-28T04:35:01.518291-05:00 claude-cloud CRON[4045192]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-28T04:35:01.526713-05:00 claude-cloud CRON[4045192]: pam_unix(cron:session): session closed for user root 2026-06-28T04:35:20.320968-05:00 claude-cloud sshd[4045248]: Connection closed by authenticating user root 45.198.224.46 port 35152 [preauth] 2026-06-28T04:36:08.727298-05:00 claude-cloud sshd[4045404]: Invalid user sysadmin from 91.92.40.237 port 35048 2026-06-28T04:36:08.865436-05:00 claude-cloud sshd[4045404]: Connection closed by invalid user sysadmin 91.92.40.237 port 35048 [preauth] 2026-06-28T04:36:21.644949-05:00 claude-cloud sshd[4045445]: Invalid user admin from 2.57.121.25 port 54418 2026-06-28T04:36:21.670337-05:00 claude-cloud sshd[4045445]: Connection closed by invalid user admin 2.57.121.25 port 54418 [preauth] 2026-06-28T04:36:37.151183-05:00 claude-cloud sshd[4045465]: Connection closed by authenticating user root 27.71.230.31 port 46408 [preauth] 2026-06-28T04:37:14.060585-05:00 claude-cloud sshd[4045582]: Invalid user vyos from 115.248.8.65 port 53718 2026-06-28T04:37:14.392913-05:00 claude-cloud sshd[4045582]: Connection closed by invalid user vyos 115.248.8.65 port 53718 [preauth] 2026-06-28T04:37:49.654977-05:00 claude-cloud sshd[4045686]: Invalid user sysadmin from 91.92.40.237 port 46092 2026-06-28T04:37:49.817914-05:00 claude-cloud sshd[4045686]: Connection closed by invalid user sysadmin 91.92.40.237 port 46092 [preauth] 2026-06-28T04:37:50.849003-05:00 claude-cloud sshd[4045691]: Connection closed by authenticating user root 195.178.110.217 port 46782 [preauth] 2026-06-28T04:38:01.028413-05:00 claude-cloud systemd-logind[853]: New session c4380 of user claude. 2026-06-28T04:38:01.344729-05:00 claude-cloud systemd-logind[853]: Session c4380 logged out. Waiting for processes to exit. 2026-06-28T04:38:01.346521-05:00 claude-cloud systemd-logind[853]: Removed session c4380. 2026-06-28T04:39:32.034238-05:00 claude-cloud sshd[4045992]: Invalid user sysadmin from 91.92.40.237 port 43200 2026-06-28T04:39:32.142881-05:00 claude-cloud sshd[4045992]: Connection closed by invalid user sysadmin 91.92.40.237 port 43200 [preauth] 2026-06-28T04:40:59.972184-05:00 claude-cloud sshd[4046244]: Connection closed by authenticating user root 115.248.8.65 port 35272 [preauth] 2026-06-28T04:41:11.714828-05:00 claude-clou2026-06-28T11:07:56.586844-05:00 claude-cloud sshd[4159236]: Invalid user validator from 45.148.10.240 port 40896 2026-06-28T11:07:56.600083-05:00 claude-cloud sshd[4159236]: Connection closed by invalid user validator 45.148.10.240 port 40896 [preauth] 2026-06-28T11:09:03.570556-05:00 claude-cloud sshd[4159400]: Invalid user teste from 115.248.8.65 port 58138 2026-06-28T11:09:04.005581-05:00 claude-cloud sshd[4159400]: Connection closed by invalid user teste 115.248.8.65 port 58138 [preauth] 2026-06-28T11:09:44.776166-05:00 claude-cloud sshd[4159563]: Invalid user node from 45.148.10.240 port 37644 2026-06-28T11:09:44.789895-05:00 claude-cloud sshd[4159563]: Connection closed by invalid user node 45.148.10.240 port 37644 [preauth] 2026-06-28T11:09:58.421664-05:00 claude-cloud systemd-logind[853]: Session c4502 logged out. Waiting for processes to exit. 2026-06-28T11:09:58.424129-05:00 claude-cloud systemd-logind[853]: Removed session c4502. 2026-06-28T11:09:59.328697-05:00 claude-cloud systemd-logind[853]: Session c4499 logged out. Waiting for processes to exit. 2026-06-28T11:09:59.330344-05:00 claude-cloud systemd-logind[853]: Removed session c4499. 2026-06-28T11:10:09.289489-05:00 claude-cloud systemd-logind[853]: New session c4507 of user claude. 2026-06-28T11:10:09.309393-05:00 claude-cloud systemd-logind[853]: New session c4508 of user claude. 2026-06-28T11:10:09.333819-05:00 claude-cloud systemd-logind[853]: Session c4507 logged out. Waiting for processes to exit. 2026-06-28T11:10:09.335553-05:00 claude-cloud systemd-logind[853]: Removed session c4507. 2026-06-28T11:10:10.020596-05:00 claude-cloud systemd-logind[853]: New session c4509 of user claude. 2026-06-28T11:10:10.081812-05:00 claude-cloud systemd-logind[853]: Session c4509 logged out. Waiting for processes to exit. 2026-06-28T11:10:10.083844-05:00 claude-cloud systemd-logind[853]: Removed session c4509. 2026-06-28T11:10:10.615033-05:00 claude-cloud systemd-logind[853]: New session c4510 of user claude. 2026-06-28T11:10:54.321621-05:00 claude-cloud systemd-logind[853]: New session c4511 of user claude. 2026-06-28T11:10:54.868222-05:00 claude-cloud systemd-logind[853]: Session c4511 logged out. Waiting for processes to exit. 2026-06-28T11:10:54.870724-05:00 claude-cloud systemd-logind[853]: Removed session c4511. 2026-06-28T11:11:30.249590-05:00 claude-cloud sshd[4159904]: Invalid user operator from 45.148.10.240 port 59360 2026-06-28T11:11:30.263475-05:00 claude-cloud sshd[4159904]: Connection closed by invalid user operator 45.148.10.240 port 59360 [preauth] 2026-06-28T11:12:44.732019-05:00 claude-cloud sshd[4160133]: Invalid user admin from 115.248.8.65 port 35268 2026-06-28T11:12:45.098102-05:00 claude-cloud sshd[4160133]: Connection closed by invalid user admin 115.248.8.65 port 35268 [preauth] 2026-06-28T11:12:52.018233-05:00 claude-cloud sshd[4160148]: Connection closed by authenticating user root 45.198.224.46 port 42258 [preauth] 2026-06-28T11:12:54.282732-05:00 claude-cloud sshd[4160192]: Invalid user admin from 2.57.121.25 port 9422 2026-06-28T11:12:54.307845-05:00 claude-cloud sshd[4160192]: Connection closed by invalid user admin 2.57.121.25 port 9422 [preauth] 2026-06-28T11:13:12.010003-05:00 claude-cloud sshd[4160226]: Invalid user trader from 45.148.10.240 port 36324 2026-06-28T11:13:12.022033-05:00 claude-cloud sshd[4160226]: Connection closed by invalid user trader 45.148.10.240 port 36324 [preauth] 2026-06-28T11:14:04.051950-05:00 claude-cloud sshd[4160399]: Connection closed by authenticating user root 27.71.230.31 port 39840 [preauth] 2026-06-28T11:14:10.563626-05:00 claude-cloud sshd[4160448]: Connection closed by authenticating user root 186.96.145.241 port 46946 [preauth] 2026-06-28T11:15:01.061539-05:00 claude-cloud CRON[4160615]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-28T11:15:01.070179-05:00 claude-cloud CRON[4160615]: pam_unix(cron:session): session closed for user root 2026-06-28T11:15:04.843180-05:00 claude-cloud sshd[4160628]: Invalid user trading from 45.148.10.240 port 48916 2026-06-28T11:15:04.856093-05:00 claude-cloud sshd[4160628]: Connection closed by invalid user trading 45.148.10.240 port 48916 [preauth] 2026-06-28T11:15:58.143613-05:00 claude-cloud systemd-logind[853]: New session c4512 of user claude. 2026-06-28T11:15:58.668325-05:00 claude-cloud systemd-logind[853]: Session c4512 logged out. Waiting for processes to exit. 2026-06-28T11:15:58.669408-05:00 claude-cloud systemd-logind[853]: Removed session c4512. 2026-06-28T11:16:30.746155-05:00 claude-cloud sshd[4160879]: Connection closed by authenticating user root 115.248.8.65 port 34292 [preauth] 2026-06-28T11:16:52.705744-05:00 claude-cloud sshd[4160968]: Connection closed by 185.247.137.67 port 53589 2026-06-28T11:16:52.819115-05:00 claude-cloud sshd[4160969]: Connection closed by 185.247.137.67 port 39183 [preauth] 2026-06-28T11:17:01.083528-05:00 claude-cloud CRON[4160993]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-28T11:17:01.085354-05:00 claude-cloud sshd[4160991]: Invalid user trader from 45.148.10.240 port 58774 2026-06-28T11:17:01.091929-05:00 claude-cloud CRON[4160993]: pam_unix(cron:session): session closed for user root 2026-06-28T11:17:01.096463-05:00 claude-cloud sshd[4160991]: Connection closed by invalid user trader 45.148.10.240 port 58774 [preauth] 2026-06-28T11:18:44.227263-05:00 claude-cloud sshd[4161307]: Connection closed by 161.35.47.134 port 55106 2026-06-28T11:18:46.443722-05:00 claude-cloud sshd[4161315]: Invalid user trader from 45.148.10.240 port 57886 2026-06-28T11:18:46.456820-05:00 claude-cloud sshd[4161315]: Connection closed by invalid user trader 45.148.10.240 port 57886 [preauth] 2026-06-28T11:19:50.428159-05:00 claude-cloud sshd[4161467]: Connection closed by authenticating user root 27.71.230.31 port 45388 [preauth] 2026-06-28T11:20:16.196199-05:00 claude-cloud sshd[4161568]: Invalid user user from 115.248.8.65 port 33620 2026-06-28T11:20:16.910958-05:00 claude-cloud sshd[4161568]: Connection closed by invalid user user 115.248.8.65 port 33620 [preauth] 2026-06-28T11:20:29.383906-05:00 claude-cloud sshd[4161621]: Invalid user trader from 45.148.10.240 port 55130 2026-06-28T11:20:29.397216-05:00 claude-cloud sshd[4161621]: Connection closed by invalid user trader 45.148.10.240 port 55130 [preauth] 2026-06-28T11:21:02.219661-05:00 claude-cloud systemd-logind[853]: New session c4513 of user claude. 2026-06-28T11:21:02.559465-05:00 claude-cloud systemd-logind[853]: Session c4513 logged out. Waiting for processes to exit. 2026-06-28T11:21:02.560810-05:00 claude-cloud systemd-logind[853]: Removed session c4513. 2026-06-28T11:21:24.672248-05:00 claude-cloud sshd[4161814]: banner exchange: Connection from 20.65.193.121 port 53368: invalid format 2026-06-28T11:21:34.046934-05:00 claude-cloud sshd[4161812]: Connection closed by 20.65.193.121 port 53354 [preauth] 2026-06-28T11:22:15.694212-05:00 claude-cloud sshd[4161947]: Invalid user trading from 45.148.10.240 port 41468 2026-06-28T11:22:15.708034-05:00 claude-cloud sshd[4161947]: Connection closed by invalid user trading 45.148.10.240 port 41468 [preauth] 2026-06-28T11:23:20.509017-05:00 claude-cloud sshd[4162117]: Connection closed by authenticating user root 45.198.224.46 port 44948 [preauth] 2026-06-28T11:23:54.192442-05:00 claude-cloud sshd[4162311]: Connection closed by authenticating user root 115.248.8.65 port 40888 [preauth] 2026-06-28T11:24:00.532335-05:00 claude-cloud sshd[4162333]: Connection closed by authenticating user root 45.148.10.240 port 37570 [preauth] 2026-06-28T11:25:01.106259-05:00 claude-cloud CRON[4162498]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-28T11:25:01.112144-05:00 claude-cloud CRON[4162498]: pam_unix(cron:session): session closed for user root 2026-06-28T11:25:42.077497-05:00 claude-cloud sshd[4162601]: Invalid user shardeum from 45.148.10.240 port 57484 2026-06-28T11:25:42.089428-05:00 claude-cloud sshd[4162601]: Connection closed by invalid user shardeum 45.148.10.240 port 57484 [preauth] 2026-06-28T11:25:54.003009-05:00 claude-cloud sshd[4162618]: Connection closed by authenticating user root 27.71.230.31 port 56874 [preauth] 2026-06-28T11:26:05.745799-05:00 claude-cloud systemd-logind[853]: New session c4514 of user claude. 2026-06-28T11:26:06.047665-05:00 claude-cloud systemd-logind[853]: Session c4514 logged out. Waiting for processes to exit. 2026-06-28T11:26:06.049058-05:00 claude-cloud systemd-logind[853]: Removed session c4514. 2026-06-28T11:27:30.979046-05:00 claude-cloud sshd[4162940]: Connection closed by authenticating user root 45.148.10.240 port 48494 [preauth] 2026-06-28T11:27:39.321910-05:00 claude-cloud sshd[4162949]: Invalid user pi from 115.248.8.65 port 52292 2026-06-28T11:27:39.755335-05:00 claude-cloud sshd[4162949]: Connection closed by invalid user pi 115.248.8.65 port 52292 [preauth] 2026-06-28T11:28:29.727366-05:00 claude-cloud sshd[4163140]: Connection closed by authenticating user root 186.96.145.241 port 39344 [preauth] 2026-06-28T11:29:13.789863-05:00 claude-cloud sshd[4163246]: Received disconnect from 38.137.11.14 port 60213:11: Bye Bye [preauth] 2026-06-28T11:29:13.790255-05:00 claude-cloud sshd[4163246]: Disconnected from authenticating user root 38.137.11.14 port 60213 [preauth] 2026-06-28T11:29:28.281680-05:00 claude-cloud sshd[4163307]: Connection closed by authenticating user root 45.148.10.240 port 52780 [preauth] 2026-06-28T11:31:09.311633-05:00 claude-cloud systemd-logind[853]: New session c4515 of user claude. 2026-06-28T11:31:09.627822-05:00 claude-cloud systemd-logind[853]: Session c4515 logged out. Waiting for processes to exit. 2026-06-28T11:31:09.629100-05:00 claude-cloud systemd-logind[853]: Removed session c4515. 2026-06-28T11:31:20.780946-05:00 claude-cloud sshd[4163664]: Connection closed by authenticating user root 45.148.10.240 port 55902 [preauth] 2026-06-28T11:31:20.857841-05:00 claude-cloud sshd[4163632]: Invalid user httpadmin from 115.248.8.65 port 39636 2026-06-28T11:31:21.223951-05:00 claude-cloud sshd[4163632]: Connection closed by invalid user httpadmin 115.248.8.65 port 39636 [preauth] 2026-06-28T11:31:45.608389-05:00 claude-cloud sshd[4163686]: Connection closed by authenticating user root 27.71.230.31 port 50918 [preauth] 2026-06-28T11:33:09.455396-05:00 claude-cloud sshd[4163992]: Invalid user firedancer from 45.148.10.240 port 59598 2026-06-28T11:33:09.467381-05:00 claude-cloud sshd[4163992]: Connection closed by invalid user firedancer 45.148.10.240 port 59598 [preauth] 2026-06-28T11:33:26.326847-05:00 claude-cloud sshd[4164039]: Connection closed by authenticating user root 45.148.10.239 port 58630 [preauth] 2026-06-28T11:33:53.084295-05:00 claude-cloud sshd[4164179]: Invalid user tai from 2.57.121.112 port 63490 2026-06-28T11:33:53.109999-05:00 claude-cloud sshd[4164179]: Connection closed by invalid user tai 2.57.121.112 port 63490 [preauth] 2026-06-28T11:34:01.902701-05:00 claude-cloud sshd[4164194]: Invalid user teamspeak from 45.198.224.46 port 36884 2026-06-28T11:34:02.811054-05:00 claude-cloud sshd[4164194]: Connection closed by invalid user teamspeak 45.198.224.46 port 36884 [preauth] 2026-06-28T11:35:01.123380-05:00 claude-cloud CRON[4164360]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-28T11:35:01.128922-05:00 claude-cloud CRON[4164360]: pam_unix(cron:session): session closed for user root 2026-06-28T11:35:03.639909-05:00 claude-cloud sshd[4164372]: Invalid user blockchain from 45.148.10.240 port 39404 2026-06-28T11:35:03.651350-05:00 claude-cloud sshd[4164372]: Connection closed by invalid user blockchain 45.148.10.240 port 39404 [preauth] 2026-06-28T11:35:05.952896-05:00 claude-cloud sshd[4164363]: Invalid user admin from 115.248.8.65 port 43170 2026-06-28T11:35:06.558976-05:00 claude-cloud sshd[4164363]: Connection closed by invalid user admin 115.248.8.65 port 43170 [preauth] 2026-06-28T11:36:12.872533-05:00 claude-cloud systemd-logind[853]: New session c4516 of user claude. 2026-06-28T11:36:13.372020-05:00 claude-cloud systemd-logind[853]: Session c4516 logged out. Waiting for processes to exit. 2026-06-28T11:36:13.373618-05:00 claude-cloud systemd-logind[853]: Removed session c4516. 2026-06-28T11:36:50.066757-05:00 claude-cloud sshd[4164707]: Connection closed by authenticating user www-data 45.148.10.240 port 42366 [preauth] 2026-06-28T11:37:39.667907-05:00 claude-cloud sshd[4164821]: Connection closed by authenticating user root 27.71.230.31 port 52004 [preauth] 2026-06-28T11:38:27.540117-05:00 claude-cloud sshd[4165006]: Connection reset by 198.235.24.66 port 62242 [preauth] 2026-06-28T11:38:30.675673-05:00 claude-cloud sshd[4165034]: Invalid user user from 45.148.10.240 port 52460 2026-06-28T11:38:30.688855-05:00 claude-cloud sshd[4165034]: Connection closed by invalid user user 45.148.10.240 port 52460 [preauth] 2026-06-28T11:38:54.575713-05:00 claude-cloud sshd[4165087]: Invalid user teamspeak from 115.248.8.65 port 39120 2026-06-28T11:38:55.225615-05:00 claude-cloud sshd[4165087]: Connection closed by invalid user teamspeak 115.248.8.65 port 39120 [preauth] 2026-06-28T11:39:42.497862-05:00 claude-cloud sshd[4165218]: Invalid user admin from 193.46.255.86 port 38824 2026-06-28T11:39:42.524729-05:00 claude-cloud sshd[4165218]: Connection closed by invalid user admin 193.46.255.86 port 38824 [preauth] 2026-06-28T11:40:16.414325-05:00 claude-cloud sshd[4165346]: Invalid user user from 45.148.10.240 port 36294 2026-06-28T11:40:16.426563-05:00 claude-cloud sshd[4165346]: Connection closed by invalid user user 45.148.10.240 port 36294 [preauth] 2026-06-28T11:41:16.809568-05:00 claude-cloud systemd-logind[853]: New session c4517 of user claude. 2026-06-28T11:41:17.097795-05:00 claude-cloud systemd-logind[853]: Session c4517 logged out. Waiting for processes to exit. 2026-06-28T11:41:17.099831-05:00 claude-cloud systemd-logind[853]: Removed session c4517. 2026-06-28T11:42:07.464791-05:00 claude-cloud sshd[4165662]: Connection closed by authenticating user root 45.148.10.240 port 58724 [preauth] 2026-06-28T11:42:42.517400-05:00 claude-cloud sshd[4165766]: Connection closed by authenticating user root 115.248.8.65 port 49334 [preauth] 2026-06-28T11:42:57.323388-05:00 claude-cloud sshd[4165826]: Received disconnect from 38.137.11.14 port 54247:11: Bye Bye [preauth] 2026-06-28T11:42:57.323585-05:00 claude-cloud sshd[4165826]: Disconnected from authenticating user root 38.137.11.14 port 54247 [preauth] 2026-06-28T11:43:29.603911-05:00 claude-cloud sshd[4165911]: Connection closed by authenticating user root 186.96.145.241 port 31870 [preauth] 2026-06-28T11:43:38.338806-05:00 claude-cloud sshd[4165916]: Connection closed by authenticating user root 27.71.230.31 port 50468 [preauth] 2026-06-28T11:43:53.027947-05:00 claude-cloud sshd[4166001]: Invalid user elround from 45.148.10.240 port 44746 2026-06-28T11:43:53.041409-05:00 claude-cloud sshd[4166001]: Connection closed by invalid user elround 45.148.10.240 port 44746 [preauth] 2026-06-28T11:44:35.492953-05:00 claude-cloud sshd[4166135]: Connection closed by authenticating user root 45.198.224.46 port 45846 [preauth] 2026-06-28T11:45:01.139041-05:00 claude-cloud CRON[4166279]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-28T11:45:01.145451-05:00 claude-cloud CRON[4166279]: pam_unix(cron:session): session closed for user root 2026-06-28T11:45:12.045215-05:00 claude-cloud sshd[4166309]: Received disconnect from 38.137.11.14 port 12581:11: Bye Bye [preauth] 2026-06-28T11:45:12.045717-05:00 claude-cloud sshd[4166309]: Disconnected from authenticating user root 38.137.11.14 port 12581 [preauth] 2026-06-28T11:45:39.685191-05:00 claude-cloud sshd[4166374]: Invalid user elrond from 45.148.10.240 port 58026 2026-06-28T11:45:39.697710-05:00 claude-cloud sshd[4166374]: Connection closed by invalid user elrond 45.148.10.240 port 58026 [preauth] 2026-06-28T11:46:20.522241-05:00 claude-cloud systemd-logind[853]: New session c4518 of user claude. 2026-06-28T11:46:20.944321-05:00 claude-cloud systemd-logind[853]: Session c4518 logged out. Waiting for processes to exit. 2026-06-28T11:46:20.946159-05:00 claude-cloud systemd-logind[853]: Removed session c4518. 2026-06-28T11:46:25.488661-05:00 claude-cloud sshd[4166487]: Connection closed by authenticating user root 115.248.8.65 port 56854 [preauth] 2026-06-28T11:47:15.623128-05:00 claude-cloud sshd[4166685]: Received disconnect from 146.190.112.200 port 51068:11: Bye Bye [preauth] 2026-06-28T11:47:15.623469-05:00 claude-cloud sshd[4166685]: Disconnected from authenticating user root 146.190.112.200 port 51068 [preauth] 2026-06-28T11:47:26.035579-05:00 claude-cloud sshd[4166715]: Received disconnect from 105.96.13.6 port 49752:11: Bye Bye [preauth] 2026-06-28T11:47:26.035816-05:00 claude-cloud sshd[4166715]: Disconnected from authenticating user root 105.96.13.6 port 49752 [preauth] 2026-06-28T11:47:27.422492-05:00 claude-cloud sshd[4166717]: Received disconnect from 38.137.11.14 port 5013:11: Bye Bye [preauth] 2026-06-28T11:47:27.422724-05:00 claude-cloud sshd[4166717]: Disconnected from authenticating user root 38.137.11.14 port 5013 [preauth] 2026-06-28T11:47:36.321269-05:00 claude-cloud sshd[4166739]: Invalid user admin from 45.148.10.240 port 44788 2026-06-28T11:47:36.333597-05:00 claude-cloud sshd[4166739]: Connection closed by invalid user admin 45.148.10.240 port 44788 [preauth] 2026-06-28T11:48:16.400179-05:00 claude-cloud sshd[4166838]: Received disconnect from 36.66.16.233 port 34118:11: Bye Bye [preauth] 2026-06-28T11:48:16.400876-05:00 claude-cloud sshd[4166838]: Disconnected from authenticating user root 36.66.16.233 port 34118 [preauth] 2026-06-28T11:48:26.343158-05:00 claude-cloud sshd[4166883]: banner exchange: Connection from 192.253.248.180 port 62545: invalid format 2026-06-28T11:48:38.862209-05:00 claude-cloud sshd[4166924]: Received disconnect from 131.100.242.102 port 52382:11: Bye Bye [preauth] 2026-06-28T11:48:38.862630-05:00 claude-cloud sshd[4166924]: Disconnected from authenticating user root 131.100.242.102 port 52382 [preauth] 2026-06-28T11:49:26.225119-05:00 claude-cloud sshd[4167085]: Invalid user test from 116.228.233.93 port 35195 2026-06-28T11:49:26.413083-05:00 claude-cloud sshd[4167085]: Received disconnect from 116.228.233.93 port 35195:11: Bye Bye [preauth] 2026-06-28T11:49:26.413435-05:00 claude-cloud sshd[4167085]: Disconnected from invalid user test 116.228.233.93 port 35195 [preauth] 2026-06-28T11:49:26.984066-05:00 claude-cloud sshd[4167096]: Connection closed by authenticating user root 45.148.10.240 port 53256 [preauth] 2026-06-28T11:49:36.103248-05:00 claude-cloud sshd[4167117]: Connection closed by 91.92.40.231 port 38640 2026-06-28T11:49:39.030733-05:00 claude-cloud sshd[4167105]: Connection closed by authenticating user root 27.71.230.31 port 34966 [preauth] 2026-06-28T11:49:42.049190-05:00 claude-cloud sshd[4167128]: Received disconnect from 38.137.11.14 port 44124:11: Bye Bye [preauth] 2026-06-28T11:49:42.049531-05:00 claude-cloud sshd[4167128]: Disconnected from authenticating user root 38.137.11.14 port 44124 [preauth] 2026-06-28T11:49:42.248119-05:00 claude-cloud sshd[4167130]: Received disconnect from 197.248.8.33 port 33100:11: Bye Bye [preauth] 2026-06-28T11:49:42.248389-05:00 claude-cloud sshd[4167130]: Disconnected from authenticating user root 197.248.8.33 port 33100 [preauth] 2026-06-28T11:50:00.441214-05:00 claude-cloud sshd[4167195]: Connection closed by 161.35.47.134 port 60418 2026-06-28T11:50:02.799086-05:00 claude-cloud sshd[4167193]: Connection closed by authenticating user root 115.248.8.65 port 54370 [preauth] 2026-06-28T11:50:56.821763-05:00 claude-cloud sshd[4167379]: Received disconnect from 197.248.8.33 port 53252:11: Bye Bye [preauth] 2026-06-28T11:50:56.822060-05:00 claude-cloud sshd[4167379]: Disconnected from authenticating user root 197.248.8.33 port 53252 [preauth] 2026-06-28T11:51:11.536086-05:00 claude-cloud sshd[4167427]: Received disconnect from 45.78.206.111 port 37374:11: Bye Bye [preauth] 2026-06-28T11:51:11.536210-05:00 claude-cloud sshd[4167427]: Disconnected from authenticating user root 45.78.206.111 port 37374 [preauth] 2026-06-28T11:51:11.536467-05:00 claude-cloud sshd[4167429]: Invalid user user from 45.148.10.240 port 51660 2026-06-28T11:51:11.548948-05:00 claude-cl2026-06-28T15:06:29.690753-05:00 claude-cloud sshd[10660]: Connection closed by authenticating user root 186.96.145.241 port 61768 [preauth] 2026-06-28T15:06:54.893384-05:00 claude-cloud sshd[10769]: banner exchange: Connection from 192.253.248.180 port 63197: invalid format 2026-06-28T15:08:03.779590-05:00 claude-cloud sshd[10936]: Invalid user test2 from 115.248.8.65 port 47030 2026-06-28T15:08:04.126347-05:00 claude-cloud sshd[10936]: Connection closed by invalid user test2 115.248.8.65 port 47030 [preauth] 2026-06-28T15:09:08.757591-05:00 claude-cloud sshd[11147]: Connection reset by authenticating user root 45.148.10.151 port 24026 [preauth] 2026-06-28T15:10:19.895368-05:00 claude-cloud systemd-logind[853]: New session c4572 of user claude. 2026-06-28T15:10:20.406666-05:00 claude-cloud systemd-logind[853]: Session c4572 logged out. Waiting for processes to exit. 2026-06-28T15:10:20.408193-05:00 claude-cloud systemd-logind[853]: Removed session c4572. 2026-06-28T15:11:47.415073-05:00 claude-cloud sshd[11611]: Connection closed by authenticating user root 27.71.230.31 port 40506 [preauth] 2026-06-28T15:11:49.030464-05:00 claude-cloud sshd[11667]: Connection closed by authenticating user root 115.248.8.65 port 36586 [preauth] 2026-06-28T15:14:43.846713-05:00 claude-cloud sshd[12187]: Connection reset by authenticating user root 45.227.254.170 port 2694 [preauth] 2026-06-28T15:15:01.903485-05:00 claude-cloud CRON[12254]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-28T15:15:01.909778-05:00 claude-cloud CRON[12254]: pam_unix(cron:session): session closed for user root 2026-06-28T15:15:23.910674-05:00 claude-cloud systemd-logind[853]: New session c4573 of user claude. 2026-06-28T15:15:24.376955-05:00 claude-cloud systemd-logind[853]: Session c4573 logged out. Waiting for processes to exit. 2026-06-28T15:15:24.378668-05:00 claude-cloud systemd-logind[853]: Removed session c4573. 2026-06-28T15:15:33.631887-05:00 claude-cloud sshd[12339]: Connection closed by authenticating user root 115.248.8.65 port 43346 [preauth] 2026-06-28T15:16:27.009564-05:00 claude-cloud sshd[12485]: Connection closed by authenticating user root 45.198.224.46 port 54850 [preauth] 2026-06-28T15:17:01.920873-05:00 claude-cloud CRON[12615]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-28T15:17:01.928145-05:00 claude-cloud CRON[12615]: pam_unix(cron:session): session closed for user root 2026-06-28T15:17:12.301368-05:00 claude-cloud sshd[12638]: Connection closed by authenticating user root 80.94.92.55 port 59630 [preauth] 2026-06-28T15:18:04.973730-05:00 claude-cloud sshd[12754]: Connection closed by authenticating user root 27.71.230.31 port 60406 [preauth] 2026-06-28T15:18:15.441410-05:00 claude-cloud sshd[12812]: Connection closed by 161.35.47.134 port 35452 2026-06-28T15:19:12.799089-05:00 claude-cloud sshd[12989]: Connection closed by authenticating user root 115.248.8.65 port 55258 [preauth] 2026-06-28T15:19:37.113087-05:00 claude-cloud sshd[13061]: Connection closed by authenticating user root 80.94.92.55 port 34398 [preauth] 2026-06-28T15:20:12.921393-05:00 claude-cloud sshd[13163]: Connection closed by authenticating user root 186.96.145.241 port 53934 [preauth] 2026-06-28T15:20:18.906624-05:00 claude-cloud sshd[13185]: Connection reset by authenticating user root 45.227.254.170 port 31940 [preauth] 2026-06-28T15:20:27.778871-05:00 claude-cloud systemd-logind[853]: New session c4574 of user claude. 2026-06-28T15:20:28.328199-05:00 claude-cloud systemd-logind[853]: Session c4574 logged out. Waiting for processes to exit. 2026-06-28T15:20:28.330867-05:00 claude-cloud systemd-logind[853]: Removed session c4574. 2026-06-28T15:22:20.832823-05:00 claude-cloud sshd[13565]: Connection closed by authenticating user root 80.94.92.55 port 37360 [preauth] 2026-06-28T15:22:59.001514-05:00 claude-cloud sshd[13692]: Connection closed by authenticating user root 115.248.8.65 port 52276 [preauth] 2026-06-28T15:24:48.971180-05:00 claude-cloud sshd[13873]: Connection closed by authenticat2026-06-29T18:19:28.659747-05:00 claude-cloud sshd[320581]: Invalid user tyrus from 2.57.121.112 port 39144 2026-06-29T18:19:28.685148-05:00 claude-cloud sshd[320581]: Connection closed by invalid user tyrus 2.57.121.112 port 39144 [preauth] 2026-06-29T18:19:51.460941-05:00 claude-cloud sshd[320616]: Invalid user ubuntu from 120.48.54.130 port 54118 2026-06-29T18:19:51.616615-05:00 claude-cloud sshd[320616]: Received disconnect from 120.48.54.130 port 54118:11: Bye Bye [preauth] 2026-06-29T18:19:51.616728-05:00 claude-cloud sshd[320616]: Disconnected from invalid user ubuntu 120.48.54.130 port 54118 [preauth] 2026-06-29T18:20:23.904630-05:00 claude-cloud sshd[320661]: Connection reset by authenticating user root 45.148.10.147 port 19482 [preauth] 2026-06-29T18:20:31.970522-05:00 claude-cloud sshd[320678]: Connection closed by authenticating user root 115.248.8.65 port 58498 [preauth] 2026-06-29T18:20:43.924514-05:00 claude-cloud sshd[320677]: Connection closed by authenticating user root 27.71.230.31 port 54234 [preauth] 2026-06-29T18:20:49.330824-05:00 claude-cloud sshd[320708]: Connection closed by authenticating user root 193.46.255.86 port 48840 [preauth] 2026-06-29T18:21:03.329925-05:00 claude-cloud sshd[320746]: Received disconnect from 103.97.101.25 port 40460:11: Bye Bye [preauth] 2026-06-29T18:21:03.332439-05:00 claude-cloud sshd[320746]: Disconnected from authenticating user root 103.97.101.25 port 40460 [preauth] 2026-06-29T18:21:39.976798-05:00 claude-cloud sshd[320790]: Received disconnect from 120.48.54.130 port 35368:11: Bye Bye [preauth] 2026-06-29T18:21:39.977195-05:00 claude-cloud sshd[320790]: Disconnected from authenticating user root 120.48.54.130 port 35368 [preauth] 2026-06-29T18:21:46.985703-05:00 claude-cloud systemd-logind[853]: New session c4982 of user claude. 2026-06-29T18:21:47.254870-05:00 claude-cloud systemd-logind[853]: Session c4982 logged out. Waiting for processes to exit. 2026-06-29T18:21:47.256979-05:00 claude-cloud systemd-logind[853]: Removed session c4982. 2026-06-29T18:22:44.200716-05:00 claude-cloud sshd[320892]: Received disconnect from 103.97.101.25 port 56842:11: Bye Bye [preauth] 2026-06-29T18:22:44.201231-05:00 claude-cloud sshd[320892]: Disconnected from authenticating user root 103.97.101.25 port 56842 [preauth] 2026-06-29T18:23:28.340050-05:00 claude-cloud sshd[320983]: Received disconnect from 120.48.54.130 port 35640:11: Bye Bye [preauth] 2026-06-29T18:23:28.340552-05:00 claude-cloud sshd[320983]: Disconnected from authenticating user root 120.48.54.130 port 35640 [preauth] 2026-06-29T18:24:07.158754-05:00 claude-cloud sshd[321028]: Invalid user admin from 120.236.49.131 port 51902 2026-06-29T18:24:08.974318-05:00 claude-cloud sshd[321028]: Connection closed by invalid user admin 120.236.49.131 port 51902 [preauth] 2026-06-29T18:24:12.015459-05:00 claude-cloud sshd[321033]: Connection closed by authenticating user root 115.248.8.65 port 42450 [preauth] 2026-06-29T18:24:23.851332-05:00 claude-cloud sshd[321062]: Invalid user dep from 103.97.101.25 port 51998 2026-06-29T18:24:24.053151-05:00 claude-cloud sshd[321062]: Received disconnect from 103.97.101.25 port 51998:11: Bye Bye [preauth] 2026-06-29T18:24:24.053362-05:00 claude-cloud sshd[321062]: Disconnected from invalid user dep 103.97.101.25 port 51998 [preauth] 2026-06-29T18:24:46.608573-05:00 claude-cloud sshd[321088]: Invalid user orangepi from 120.236.49.131 port 47574 2026-06-29T18:24:47.309685-05:00 claude-cloud sshd[321088]: Connection closed by invalid user orangepi 120.236.49.131 port 47574 [preauth] 2026-06-29T18:25:02.008185-05:00 claude-cloud CRON[321136]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-29T18:25:02.017931-05:00 claude-cloud CRON[321136]: pam_unix(cron:session): session closed for user root 2026-06-29T18:25:17.225238-05:00 claude-cloud sshd[321145]: Invalid user odoo from 120.48.54.130 port 50640 2026-06-29T18:25:17.384312-05:00 claude-cloud sshd[321145]: Received disconnect from 120.48.54.130 port 50640:11: Bye Bye [preauth] 2026-06-29T18:25:17.384670-05:00 claude-cloud sshd[321145]: Disconnected from invalid user odoo 120.48.54.130 port 50640 [preauth] 2026-06-29T18:25:26.913848-05:00 claude-cloud sshd[321147]: Connection closed by authenticating user root 120.236.49.131 port 43048 [preauth] 2026-06-29T18:26:11.666425-05:00 claude-cloud sshd[321234]: Invalid user user-1 from 103.97.101.25 port 48188 2026-06-29T18:26:11.863859-05:00 claude-cloud sshd[321234]: Received disconnect from 103.97.101.25 port 48188:11: Bye Bye [preauth] 2026-06-29T18:26:11.864113-05:00 claude-cloud sshd[321234]: Disconnected from invalid user user-1 103.97.101.25 port 48188 [preauth] 2026-06-29T18:26:49.703755-05:00 claude-cloud sshd[321269]: Connection closed by authenticating user root 27.71.230.31 port 47530 [preauth] 2026-06-29T18:26:51.264310-05:00 claude-cloud systemd-logind[853]: New session c4983 of user claude. 2026-06-29T18:26:51.525960-05:00 claude-cloud systemd-logind[853]: Session c4983 logged out. Waiting for processes to exit. 2026-06-29T18:26:51.527929-05:00 claude-cloud systemd-logind[853]: Removed session c4983. 2026-06-29T18:27:05.632712-05:00 claude-cloud sshd[321400]: Received disconnect from 120.48.54.130 port 38012:11: Bye Bye [preauth] 2026-06-29T18:27:05.633344-05:00 claude-cloud sshd[321400]: Disconnected from authenticating user root 120.48.54.130 port 38012 [preauth] 2026-06-29T18:27:59.410961-05:00 claude-cloud sshd[321477]: Received disconnect from 103.97.101.25 port 42478:11: Bye Bye [preauth] 2026-06-29T18:27:59.411618-05:00 claude-cloud sshd[321477]: Disconnected from authenticating user root 103.97.101.25 port 42478 [preauth] 2026-06-29T18:28:00.905977-05:00 claude-cloud sshd[321485]: Connection reset by authenticating user root 45.148.10.157 port 45136 [preauth] 2026-06-29T18:28:01.185036-05:00 claude-cloud sshd[321475]: Connection closed by authenticating user root 115.248.8.65 port 39514 [preauth] 2026-06-29T18:28:31.813140-05:00 claude-cloud sshd[321523]: Invalid user centos from 45.198.224.46 port 59516 2026-06-29T18:28:32.515982-05:00 claude-cloud sshd[321523]: Connection closed by invalid user centos 45.198.224.46 port 59516 [preauth] 2026-06-29T18:28:56.063495-05:00 claude-cloud sshd[321574]: Received disconnect from 120.48.54.130 port 59264:11: Bye Bye [preauth] 2026-06-29T18:28:56.063946-05:00 claude-cloud sshd[321574]: Disconnected from authenticating user root 120.48.54.130 port 59264 [preauth] 2026-06-29T18:29:40.952347-05:00 claude-cloud sshd[321645]: Received disconnect from 103.97.101.25 port 39018:11: Bye Bye [preauth] 2026-06-29T18:29:40.952875-05:00 claude-cloud sshd[321645]: Disconnected from authenticating user root 103.97.101.25 port 39018 [preauth] 2026-06-29T18:30:48.275081-05:00 claude-cloud sshd[321744]: Received disconnect from 120.48.54.130 port 33092:11: Bye Bye [preauth] 2026-06-29T18:30:48.275596-05:00 claude-cloud sshd[321744]: Disconnected from authenticating user root 120.48.54.130 port 33092 [preauth] 2026-06-29T18:31:23.517540-05:00 claude-cloud sshd[321801]: Invalid user elastic from 103.97.101.25 port 60530 2026-06-29T18:31:23.711500-05:00 claude-cloud sshd[321801]: Received disconnect from 103.97.101.25 port 60530:11: Bye Bye [preauth] 2026-06-29T18:31:23.711694-05:00 claude-cloud sshd[321801]: Disconnected from invalid user elastic 103.97.101.25 port 60530 [preauth] 2026-06-29T18:31:26.622515-05:00 claude-cloud sshd[321818]: Connection closed by authenticating user root 45.148.10.121 port 57400 [preauth] 2026-06-29T18:31:40.078872-05:00 claude-cloud sshd[321832]: Connection closed by authenticating user root 115.248.8.65 port 42734 [preauth] 2026-06-29T18:32:00.649711-05:00 claude-cloud systemd-logind[853]: New session c4984 of user claude. 2026-06-29T18:32:01.207772-05:00 claude-cloud systemd-logind[853]: Session c4984 logged out. Waiting for processes to exit. 2026-06-29T18:32:01.208597-05:00 claude-cloud systemd-logind[853]: Removed session c4984. 2026-06-29T18:32:47.410190-05:00 claude-cloud sshd[321953]: Received disconnect from 120.48.54.130 port 41154:11: Bye Bye [preauth] 2026-06-29T18:32:47.410712-05:00 claude-cloud sshd[321953]: Disconnected from authenticating user root 120.48.54.130 port 41154 [preauth] 2026-06-29T18:32:53.307244-05:00 claude-cloud sshd[321930]: Connection closed by authenticating user root 27.71.230.31 port 35696 [preauth] 2026-06-29T18:34:39.445039-05:00 claude-cloud sshd[322122]: Received disconnect from 120.48.54.130 port 54980:11: Bye Bye [preauth] 2026-06-29T18:34:39.445724-05:00 claude-cloud sshd[322122]: Disconnected from authenticating user root 120.48.54.130 port 54980 [preauth] 2026-06-29T18:35:01.035411-05:00 claude-cloud CRON[322170]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-29T18:35:01.043425-05:00 claude-cloud CRON[322170]: pam_unix(cron:session): session closed for user root 2026-06-29T18:35:24.191168-05:00 claude-cloud sshd[322182]: Connection closed by authenticating user root 115.248.8.65 port 47484 [preauth] 2026-06-29T18:35:34.866534-05:00 claude-cloud sshd[322220]: Connection reset by authenticating user root 45.148.10.147 port 42154 [preauth] 2026-06-29T18:36:33.536241-05:00 claude-cloud sshd[322309]: Received disconnect from 120.48.54.130 port 46024:11: Bye Bye [preauth] 2026-06-29T18:36:33.536720-05:00 claude-cloud sshd[322309]: Disconnected from authenticating user root 120.48.54.130 port 46024 [preauth] 2026-06-29T18:38:06.825466-05:00 claude-cloud sshd[322511]: Invalid user ubuntu from 45.198.224.46 port 55510 2026-06-29T18:38:07.580174-05:00 claude-cloud sshd[322511]: Connection closed by invalid user ubuntu 45.198.224.46 port 55510 [preauth] 2026-06-29T18:39:00.608234-05:00 claude-cloud sshd[322555]: Connection closed by authenticating user root 27.71.230.31 port 35676 [preauth] 2026-06-29T18:39:09.461318-05:00 claude-cloud sshd[322615]: Connection closed by authenticating user root 115.248.8.65 port 39330 [preauth] 2026-06-29T18:39:56.548479-05:00 claude-cloud sshd[322694]: Connection closed by authenticating user root 167.233.84.171 port 51944 [preauth] 2026-06-29T18:43:06.832001-05:00 claude-cloud sshd[322990]: Connection reset by authenticating user root 45.148.10.147 port 46506 [preauth] 2026-06-29T18:43:14.655171-05:00 claude-cloud sshd[322995]: Connection closed by authenticating user root 115.248.8.65 port 52712 [preauth] 2026-06-29T18:45:01.061997-05:00 claude-cloud CRON[323171]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-29T18:45:01.070517-05:00 claude-cloud CRON[323171]: pam_unix(cron:session): session closed for user root 2026-06-29T18:45:10.432659-05:00 claude-cloud sshd[323123]: Connection closed by authenticating user root 27.71.230.31 port 49628 [preauth] 2026-06-29T18:45:50.995724-05:00 claude-cloud sshd[323228]: Invalid user demo from 101.126.54.245 port 52730 2026-06-29T18:45:51.148423-05:00 claude-cloud sshd[323228]: Received disconnect from 101.126.54.245 port 52730:11: Bye Bye [preauth] 2026-06-29T18:45:51.148836-05:00 claude-cloud sshd[323228]: Disconnected from invalid user demo 101.126.54.245 port 52730 [preauth] 2026-06-29T18:46:46.984856-05:00 claude-cloud sshd[323329]: Received disconnect from 43.156.92.183 port 60182:11: Bye Bye [preauth] 2026-06-29T18:46:46.985410-05:00 claude-cloud sshd[323329]: Disconnected from authenticating user root 43.156.92.183 port 60182 [preauth] 2026-06-29T18:47:13.728735-05:00 claude-cloud sshd[323368]: Connection closed by authenticating user root 115.248.8.65 port 41870 [preauth] 2026-06-29T18:47:48.507102-05:00 claude-cloud sshd[323473]: Connection closed by authenticating user root 45.198.224.46 port 56282 [preauth] 2026-06-29T18:48:54.834456-05:00 claude-cloud sshd[323590]: Connection closed by 161.35.47.134 port 57172 2026-06-29T18:49:40.595360-05:00 claude-cloud sshd[323664]: Invalid user test from 202.29.225.206 port 47308 2026-06-29T18:49:40.784668-05:00 claude-cloud sshd[323664]: Received disconnect from 202.29.225.206 port 47308:11: Bye Bye [preauth] 2026-06-29T18:49:40.785166-05:00 claude-cloud sshd[323664]: Disconnected from invalid user test 202.29.225.206 port 47308 [preauth] 2026-06-29T18:50:40.412119-05:00 claude-cloud sshd[323762]: Connection reset by authenticating user root 45.148.10.147 port 21598 [preauth] 2026-06-29T18:50:41.667494-05:00 claude-cloud sshd[323756]: Connection closed by authenticating user root 115.248.8.65 port 40446 [preauth] 2026-06-29T18:51:09.317097-05:00 claude-cloud sshd[323764]: Connection closed by authenticating user root 27.71.230.31 port 40158 [preauth] 2026-06-29T18:51:53.848353-05:00 claude-cloud sshd[323883]: Invalid user git from 103.187.146.90 port 54384 2026-06-29T18:51:54.019907-05:00 claude-cloud sshd[323883]: Received disconnect from 103.187.146.90 port 54384:11: Bye Bye [preauth] 2026-06-29T18:51:54.020164-05:00 claude-cloud sshd[323883]: Disconnected from invalid user git 103.187.146.90 port 54384 [preauth] 2026-06-29T18:52:39.306130-05:00 claude-cloud sshd[323952]: Received disconnect from 103.241.43.193 port 43568:11: Bye Bye [preauth] 2026-06-29T18:52:39.306409-05:00 claude-cloud sshd[323952]: Disconnected from authenticating user root 103.241.43.193 port 43568 [preauth] 2026-06-29T18:54:07.609021-05:00 claude-cloud systemd-logind[853]: New session c4985 of user claude. 2026-06-29T18:54:07.918210-05:00 claude-cloud systemd-logind[853]: Session c4985 logged out. Waiting for processes to exit. 2026-06-29T18:54:07.919727-05:00 claude-cloud systemd-logind[853]: Removed session c4985. 2026-06-29T18:54:11.235263-05:00 claude-cloud sshd[324098]: Connection closed by authenticating user root 115.248.8.65 port 58744 [preauth] 2026-06-29T18:55:01.082299-05:00 claude-cloud CRON[324187]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-29T18:55:01.089504-05:00 claude-cloud CRON[324187]: pam_unix(cron:session): session closed for user root 2026-06-29T18:55:07.831904-05:00 claude-cloud sshd[324193]: Received disconnect from 87.121.69.138 port 54912:11: disconnected by user [preauth] 2026-06-29T18:55:07.832134-05:00 claude-cloud sshd[324193]: Disconnected from authenticating user root 87.121.69.138 port 54912 [preauth] 2026-06-29T18:55:18.048126-05:00 claude-cloud sshd[324201]: Received disconnect from 122.168.194.41 port 38692:11: Bye Bye [preauth] 2026-06-29T18:55:18.048376-05:00 claude-cloud sshd[324201]: Disconnected from authenticating user root 122.168.194.41 port 38692 [preauth] 2026-06-29T18:56:58.453762-05:00 claude-cloud sshd[324344]: Connection closed by authenticating user root 27.71.230.31 port 44180 [preauth] 2026-06-29T18:57:21.505009-05:00 claude-cloud sshd[324392]: Connection closed by authenticating user root 45.198.224.46 port 45304 [preauth] 2026-06-29T18:57:42.544351-05:00 claude-cloud sshd[324430]: Connection closed by authenticating user root 115.248.8.65 port 33106 [preauth] 2026-06-29T18:58:15.953324-05:00 claude-cloud sshd[324550]: Connection reset by authenticating user root 45.148.10.151 port 40636 [preauth] 2026-06-29T18:59:10.981506-05:00 claude-cloud sshd[324634]: Received disconnect from 43.156.92.183 port 48028:11: Bye Bye [preauth] 2026-06-29T18:59:10.981746-05:00 claude-cloud sshd[324634]: Disconnected from authenticating user root 43.156.92.183 port 48028 [preauth] 2026-06-29T18:59:11.835373-05:00 claude-cloud systemd-logind[853]: New session c4986 of user claude. 2026-06-29T18:59:12.147052-05:00 claude-cloud systemd-logind[853]: Session c4986 logged out. Waiting for processes to exit. 2026-06-29T18:59:12.148898-05:00 claude-cloud systemd-logind[853]: Removed session c4986. 2026-06-29T19:00:15.084384-05:00 claude-cloud sshd[324744]: Invalid user ubuntu from 103.187.146.90 port 45538 2026-06-29T19:00:15.257374-05:00 claude-cloud sshd[324744]: Received disconnect from 103.187.146.90 port 45538:11: Bye Bye [preauth] 2026-06-29T19:00:15.257551-05:00 claude-cloud sshd[324744]: Disconnected from invalid user ubuntu 103.187.146.90 port 45538 [preauth] 2026-06-29T19:00:24.570896-05:00 claude-cloud sshd[324761]: Received disconnect from 202.29.225.206 port 32776:11: Bye Bye [preauth] 2026-06-29T19:00:24.571113-05:00 claude-cloud sshd[324761]: Disconnected from authenticating user root 202.29.225.206 port 32776 [preauth] 2026-06-29T19:00:55.766255-05:00 claude-cloud sshd[324808]: Received disconnect from 103.241.43.193 port 34850:11: Bye Bye [preauth] 2026-06-29T19:00:55.769033-05:00 claude-cloud sshd[324808]: Disconnected from authenticating user root 103.241.43.193 port 34850 [preauth] 2026-06-29T19:00:58.410143-05:00 claude-cloud sshd[324822]: Received disconnect from 122.168.194.41 port 59024:11: Bye Bye [preauth] 2026-06-29T19:00:58.410381-05:00 claude-cloud sshd[324822]: Disconnected from authenticating user root 122.168.194.41 port 59024 [preauth] 2026-06-29T19:01:14.578134-05:00 claude-cloud sshd[324839]: Connection closed by authenticating user root 115.248.8.65 port 48466 [preauth] 2026-06-29T19:01:22.945540-05:00 claude-cloud sshd[324850]: Invalid user test from 43.156.92.183 port 46074 2026-06-29T19:01:23.129532-05:00 claude-cloud sshd[324850]: Received disconnect from 43.156.92.183 port 46074:11: Bye Bye [preauth] 2026-06-29T19:01:23.129725-05:00 claude-cloud sshd[324850]: Disconnected from invalid user test 43.156.92.183 port 46074 [preauth] 2026-06-29T19:02:03.462554-05:00 claude-cloud sshd[324940]: Received disconnect from 103.187.146.90 port 59710:11: Bye Bye [preauth] 2026-06-29T19:02:03.462942-05:00 claude-cloud sshd[324940]: Disconnected from authenticating user root 103.187.146.90 port 59710 [preauth] 2026-06-29T19:02:19.060979-05:00 claude-cloud sshd[324948]: Received disconnect from 202.29.225.206 port 52700:11: Bye Bye [preauth] 2026-06-29T19:02:19.061408-05:00 claude-cloud sshd[324948]: Disconnected from authenticating user root 202.29.225.206 port 52700 [preauth] 2026-06-29T19:02:49.557921-05:00 claude-cloud sshd[324995]: Received disconnect from 103.241.43.193 port 47858:11: Bye Bye [preauth] 2026-06-29T19:02:49.558344-05:00 claude-cloud sshd[324995]: Disconnected from authenticating user root 103.241.43.193 port 47858 [preauth] 2026-06-29T19:02:54.298212-05:00 claude-cloud sshd[324990]: Connection closed by authenticating user root 27.71.230.31 port 44506 [preauth] 2026-06-29T19:03:02.722897-05:00 claude-cloud sshd[325034]: Connection closed by authenticating user root 171.244.61.79 port 47908 [preauth] 2026-06-29T19:03:14.364110-05:00 claude-cloud sshd[325039]: Received disconnect from 122.168.194.41 port 55418:11: Bye Bye [preauth] 2026-06-29T19:03:14.364493-05:00 claude-cloud sshd[325039]: Disconnected from authenticating user root 122.168.194.41 port 55418 [preauth] 2026-06-29T19:03:33.998504-05:00 claude-cloud sshd[325081]: Received disconnect from 43.156.92.183 port 47652:11: Bye Bye [preauth] 2026-06-29T19:03:33.999199-05:00 claude-cloud sshd[325081]: Disconnected from authenticating user root 43.156.92.183 port 47652 [preauth] 2026-06-29T19:03:56.517068-05:00 claude-cloud sshd[325120]: Invalid user test from 103.187.146.90 port 46318 2026-06-29T19:03:56.690210-05:00 claude-cloud sshd[325120]: Received disconnect from 103.187.146.90 port 46318:11: Bye Bye [preauth] 2026-06-29T19:03:56.690511-05:00 claude-cloud sshd[325120]: Disconnected from invalid user test 103.187.146.90 port 46318 [preauth] 2026-06-29T19:04:16.521631-05:00 claude-cloud systemd-logind[853]: New session c4987 of user claude. 2026-06-29T19:04:16.837252-05:00 claude-cloud systemd-logind[853]: Session c4987 logged out. Waiting for processes to exit. 2026-06-29T19:04:16.839646-05:00 claude-cloud systemd-logind[853]: Removed session c4987. 2026-06-29T19:04:30.944046-05:00 claude-cloud sshd[325193]: Received disconnect from 202.29.225.206 port 34600:11: Bye Bye [preauth] 2026-06-29T19:04:30.944510-05:00 claude-cloud sshd[325193]: Disconnected from authenticating user root 202.29.225.206 port 34600 [preauth] 2026-06-29T19:04:43.098891-05:00 claude-cloud sshd[325205]: Invalid user ubnt from 45.148.10.121 port 58928 2026-06-29T19:04:43.112782-05:00 claude-cloud sshd[325205]: Connection closed by invalid user ubnt 45.148.10.121 port 58928 [preauth] 2026-06-29T19:04:45.135215-05:00 claude-cloud sshd[325212]: Invalid user admin from 2.57.121.25 port 17380 2026-06-29T19:04:45.160310-05:00 claude-cloud sshd[325212]: Connection closed by invalid user admin 2.57.121.25 port 17380 [preauth] 2026-06-29T19:04:48.133006-05:00 claude-cloud sshd[325210]: Connection closed by authenticating user root 115.248.8.65 port 59034 [preauth] 2026-06-29T19:04:59.681370-05:00 claude-cloud sshd[325239]: Invalid user postgres from 103.241.43.193 port 38086 2026-06-29T19:04:59.912538-05:00 claude-cloud sshd[325239]: Received disconnect from 103.241.43.193 port 38086:11: Bye Bye [preauth] 2026-06-29T19:04:59.912755-05:00 claude-cloud sshd[325239]: Disconnected from invalid user postgres 103.241.43.193 port 38086 [preauth] 2026-06-29T19:05:01.103637-05:00 claude-cloud CRON[325241]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-29T19:05:01.113518-05:00 claude-cloud CRON[325241]: pam_unix(cron:session): session closed for user root 2026-06-29T19:05:32.675418-05:00 claude-cloud sshd[325290]: Received disconnect from 122.168.194.41 port 34154:11: Bye Bye [preauth] 2026-06-29T19:05:32.675958-05:00 claude-cloud sshd[325290]: Disconnected from authenticating user root 122.168.194.41 port 34154 [preauth] 2026-06-29T19:05:42.809120-05:00 claude-cloud sshd[325316]: Invalid user postgres from 103.187.146.90 port 34078 2026-06-29T19:05:42.988197-05:00 claude-cloud sshd[325316]: Received disconnect from 103.187.146.90 port 34078:11: Bye Bye [preauth] 2026-06-29T19:05:42.988696-05:00 claude-cloud sshd[325316]: Disconnected from invalid user postgres 103.187.146.90 port 34078 [preauth] 2026-06-29T19:05:46.088970-05:00 claude-cloud sshd[325336]: Invalid user git from 43.156.92.183 port 58912 2026-06-29T19:05:46.263711-05:00 claude-cloud sshd[325336]: Received disconnect from 43.156.92.183 port 58912:11: Bye Bye [preauth] 2026-06-29T19:05:46.263969-05:00 claude-cloud sshd[325336]: Disconnected from invalid user git 43.156.92.183 port 58912 [preauth] 2026-06-29T19:05:51.807205-05:00 claude-cloud sshd[325344]: Connection reset by authenticating user root 45.148.10.152 port 14942 [preauth] 2026-06-29T19:06:30.604387-05:00 claude-cloud sshd[325409]: Invalid user postgres from 202.29.225.206 port 60930 2026-06-29T19:06:30.802337-05:00 claude-cloud sshd[325409]: Received disconnect from 202.29.225.206 port 60930:11: Bye Bye [preauth] 2026-06-29T19:06:30.802698-05:00 claude-cloud sshd[325409]: Disconnected from invalid user postgres 202.29.225.206 port 60930 [preauth] 2026-06-29T19:06:52.334530-05:00 claude-cloud sshd[325432]: Received disconnect from 103.241.43.193 port 48568:11: Bye Bye [preauth] 2026-06-29T19:06:52.334956-05:00 claude-cloud sshd[325432]: Disconnected from authenticating user root 103.241.43.193 port 48568 [preauth] 2026-06-29T19:06:59.728971-05:00 claude-cloud sshd[325456]: Invalid user police from 45.198.224.46 port 41628 2026-06-29T19:07:00.368487-05:00 claude-cloud sshd[325456]: Connection closed by invalid user police 45.198.224.46 port 41628 [preauth] 2026-06-29T19:07:24.351037-05:00 claude-cloud sshd[325488]: Received disconnect from 103.187.146.90 port 55180:11: Bye Bye [preauth] 2026-06-29T19:07:24.351401-05:00 claude-cloud sshd[325488]: Disconnected from authenticating user root 103.187.146.90 port 55180 [preauth] 2026-06-29T19:07:46.948242-05:00 claude-cloud sshd[325606]: Received disconnect from 122.168.194.41 port 56402:11: Bye Bye [preauth] 2026-06-29T19:07:46.948932-05:00 claude-cloud sshd[325606]: Disconnected from authenticating user root 122.168.194.41 port 56402 [preauth] 2026-06-29T19:07:50.112753-05:00 claude-cloud sshd[325613]: Received disconnect from 43.156.92.183 port 48192:11: Bye Bye [preauth] 2026-06-29T19:07:50.113023-05:00 claude-cloud sshd[325613]: Disconnected from authenticating user root 43.156.92.183 port 48192 [preauth] 2026-06-29T19:07:55.654738-05:00 claude-cloud sshd[325633]: Invalid user user from 45.148.10.239 port 47250 2026-06-29T19:07:55.668155-05:00 claude-cloud sshd[325633]: Connection closed by invalid user user 45.148.10.239 port 47250 [preauth] 2026-06-29T19:08:12.908537-05:00 claude-cloud sshd[325656]: Connection closed by authenticating user root 115.248.8.65 port 48290 [preauth] 2026-06-29T19:08:13.779390-05:00 claude-cloud sshd[325661]: Received disconnect from 202.29.225.206 port 48404:11: Bye Bye [preauth] 2026-06-29T19:08:13.779608-05:00 claude-cloud sshd[325661]: Disconnected from authenticating user root 202.29.225.206 port 48404 [preauth] 2026-06-29T19:08:38.820146-05:00 claude-cloud sshd[325702]: Received disconnect from 103.241.43.193 port 60750:11: Bye Bye [preauth] 2026-06-29T19:08:38.820373-05:00 claude-cloud sshd[325702]: Disconnected from authenticating user root 103.241.43.193 port 60750 [preauth] 2026-06-29T19:09:12.689150-05:00 claude-cloud sshd[325752]: Invalid user demo from 103.187.146.90 port 55624 2026-06-29T19:09:12.863777-05:00 claude-cloud sshd[325752]: Received disconnect from 103.187.146.90 port 55624:11: Bye Bye [preauth] 2026-06-29T19:09:12.863933-05:00 claude-cloud sshd[325752]: Disconnected from invalid user demo 103.187.146.90 port 55624 [preauth] 2026-06-29T19:09:18.382307-05:00 claude-cloud sshd[325710]: Connection closed by authenticating user root 27.71.230.31 port 59276 [preauth] 2026-06-29T19:09:21.144452-05:00 claude-cloud systemd-logind[853]: New session c4988 of user claude. 2026-06-29T19:09:21.568711-05:00 claude-cloud systemd-logind[853]: Session c4988 logged out. Waiting for processes to exit. 2026-06-29T19:09:21.571088-05:00 claude-cloud systemd-logind[853]: Removed session c4988. 2026-06-29T19:09:44.767723-05:00 claude-cloud sshd[325826]: Connection closed by 161.35.47.134 port 33336 2026-06-29T19:09:56.537826-05:00 claude-cloud sshd[325843]: Received disconnect from 43.156.92.183 port 58172:11: Bye Bye [preauth] 2026-06-29T19:09:56.538047-05:00 claude-cloud sshd[325843]: Disconnected from authenticating user root 43.156.92.183 port 58172 [preauth] 2026-06-29T19:10:07.809963-05:00 claude-cloud sshd[325878]: Invalid user ubuntu from 122.168.194.41 port 36616 2026-06-29T19:10:08.019590-05:00 claude-cloud sshd[325878]: Received disconnect from 122.168.194.41 port 36616:11: Bye Bye [preauth] 2026-06-29T19:10:08.019767-05:00 claude-cloud sshd[325878]: Disconnected from invalid user ubuntu 122.168.194.41 port 36616 [preauth] 2026-06-29T19:10:09.021502-05:00 claude-cloud sshd[325881]: Received disconnect from 202.29.225.206 port 46980:11: Bye Bye [preauth] 2026-06-29T19:10:09.021763-05:00 claude-cloud sshd[325881]: Disconnected from authenticating user root 202.29.225.206 port 46980 [preauth] 2026-06-29T19:10:28.268343-05:00 claude-cloud sshd[325915]: Received disconnect from 103.241.43.193 port 44438:11: Bye Bye [preauth] 2026-06-29T19:10:28.269075-05:00 claude-cloud sshd[325915]: Disconnected from authenticating user root 103.241.43.193 port 44438 [preauth] 2026-06-29T19:10:58.404855-05:00 claude-cloud sshd[325963]: Received disconnect from 103.187.146.90 port 34512:11: Bye Bye [preauth] 2026-06-29T19:10:58.408594-05:00 claude-cloud sshd[325963]: Disconnected from authenticating user root 103.187.146.90 port 34512 [preauth] 2026-06-29T19:11:40.127407-05:00 claude-cloud sshd[326025]: Connection reset by authenticating user root 62.60.130.219 port 30486 [preauth] 2026-06-29T19:11:43.165197-05:00 claude-cloud sshd[326020]: Connection closed by authenticating user root 115.248.8.65 port 42940 [preauth] 2026-06-29T19:11:52.267717-05:00 claude-cloud sshd[326051]: Invalid user ubuntu from 185.242.3.195 port 47034 2026-06-29T19:11:52.275659-05:00 claude-cloud sshd[326051]: Connection closed by invalid user ubuntu 185.242.3.195 port 47034 [preauth] 2026-06-29T19:12:00.805700-05:00 claude-cloud sshd[326072]: Invalid user demo from 202.29.225.206 port 44530 2026-06-29T19:12:01.003204-05:00 claude-cloud sshd[326072]: Received disconnect from 202.29.225.206 port 44530:11: Bye Bye [preauth] 2026-06-29T19:12:01.003530-05:00 claude-cloud sshd[326072]: Disconnected from invalid user demo 202.29.225.206 port 44530 [preauth] 2026-06-29T19:12:03.978659-05:00 claude-cloud sshd[326086]: Invalid user ubuntu from 43.156.92.183 port 38224 2026-06-29T19:12:04.156761-05:00 claude-cloud sshd[326086]: Received disconnect from 43.156.92.183 port 38224:11: Bye Bye [preauth] 2026-06-29T19:12:04.157163-05:00 claude-cloud sshd[326086]: Disconnected from invalid user ubuntu 43.156.92.183 port 38224 [preauth] 2026-06-29T19:12:19.301821-05:00 claude-cloud sshd[326115]: Invalid user git from 103.241.43.193 port 43006 2026-06-29T19:12:19.534269-05:00 claude-cloud sshd[326115]: Received disconnect from 103.241.43.193 port 43006:11: Bye Bye [preauth] 2026-06-29T19:12:19.534622-05:00 claude-cloud sshd[326115]: Disconnected from invalid user git 103.241.43.193 port 43006 [preauth] 2026-06-29T19:12:22.410467-05:00 claude-cloud sshd[326120]: Invalid user git from 122.168.194.41 port 56062 2026-06-29T19:12:22.623693-05:00 claude-cloud sshd[326120]: Received disconnect from 122.168.194.41 port 56062:11: Bye Bye [preauth] 2026-06-29T19:12:22.624119-05:00 claude-cloud sshd[326120]: Disconnected from invalid user git 122.168.194.41 port 56062 [preauth] 2026-06-29T19:12:50.941055-05:00 claude-cloud sshd[326164]: Received disconnect from 103.187.146.90 port 54128:11: Bye Bye [preauth] 2026-06-29T19:12:50.941643-05:00 claude-cloud sshd[326164]: Disconnected from authenticating user root 103.187.146.90 port 54128 [preauth] 2026-06-29T19:12:53.866913-05:00 claude-cloud sshd[326175]: Invalid user ubnt from 193.46.255.86 port 16360 2026-06-29T19:12:53.892348-05:00 claude-cloud sshd[326175]: Connection closed by invalid user ubnt 193.46.255.86 port 16360 [preauth] 2026-06-29T19:13:32.001817-05:00 claude-cloud sshd[326239]: Received disconnect from 198.199.106.159 port 51362:11: disconnected by user [preauth] 2026-06-29T19:13:32.002810-05:00 claude-cloud sshd[326239]: Disconnected from authenticating user root 198.199.106.159 port 51362 [preauth] 2026-06-29T19:13:44.735653-05:00 claude-cloud sshd[326258]: Received disconnect from 202.29.225.206 port 41886:11: Bye Bye [preauth] 2026-06-29T19:13:44.736210-05:00 claude-cloud sshd[326258]: Disconnected from authenticating user root 202.29.225.206 port 41886 [preauth] 2026-06-29T19:14:11.948813-05:00 claude-cloud sshd[326310]: Received disconnect from 43.156.92.183 port 41732:11: Bye Bye [preauth] 2026-06-29T19:14:11.949308-05:00 claude-cloud sshd[326310]: Disconnected from authenticating user root 43.156.92.183 port 41732 [preauth] 2026-06-29T19:14:17.462606-05:00 claude-cloud sshd[326315]: Received disconnect from 103.241.43.193 port 42664:11: Bye Bye [preauth] 2026-06-29T19:14:17.463335-05:00 claude-cloud sshd[326315]: Disconnected from authenticating user root 103.241.43.193 port 42664 [preauth] 2026-06-29T19:14:28.198045-05:00 claude-cloud systemd-logind[853]: New session c4989 of user claude. 2026-06-29T19:14:28.740397-05:00 claude-cloud systemd-logind[853]: Session c4989 logged out. Waiting for processes to exit. 2026-06-29T19:14:28.741841-05:00 claude-cloud systemd-logind[853]: Removed session c4989. 2026-06-29T19:14:30.814677-05:00 claude-cloud sshd[326359]: Received disconnect from 122.168.194.41 port 48824:11: Bye Bye [preauth] 2026-06-29T19:14:30.814914-05:00 claude-cloud sshd[326359]: Disconnected from authenticating user root 122.168.194.41 port 48824 [preauth] 2026-06-29T19:14:45.548789-05:00 claude-cloud sshd[326397]: Invalid user user from 103.187.146.90 port 48628 2026-06-29T19:14:45.722748-05:00 claude-cloud sshd[326397]: Received disconnect from 103.187.146.90 port 48628:11: Bye Bye [preauth] 2026-06-29T19:14:45.723015-05:00 claude-cloud sshd[326397]: Disconnected from invalid user user 103.187.146.90 port 48628 [preauth] 2026-06-29T19:15:01.134395-05:00 claude-cloud CRON[326426]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-29T19:15:01.152343-05:00 claude-cloud CRON[326426]: pam_unix(cron:session): session closed for user root 2026-06-29T19:15:14.467948-05:00 claude-cloud sshd[326435]: Connection closed by authenticating user root 115.248.8.65 port 41242 [preauth] 2026-06-29T19:15:34.332564-05:00 claude-cloud sshd[326476]: Received disconnect from 202.29.225.206 port 56948:11: Bye Bye [preauth] 2026-06-29T19:15:34.333123-05:00 claude-cloud sshd[326476]: Disconnected from authenticating user root 202.29.225.206 port 56948 [preauth] 2026-06-29T19:15:51.122540-05:00 claude-cloud sshd[326399]: Connection closed by authenticating user root 27.71.230.31 port 51780 [preauth] 2026-06-29T19:16:02.633596-05:00 claude-cloud sshd[326532]: Received disconnect from 103.241.43.193 port 56352:11: Bye Bye [preauth] 2026-06-29T19:16:02.634317-05:00 claude-cloud sshd[326532]: Disconnected from authenticating user root 103.241.43.193 port 56352 [preauth] 2026-06-29T19:16:26.308712-05:00 claude-cloud sshd[326562]: Received disconnect from 43.156.92.183 port 39754:11: Bye Bye [preauth] 2026-06-29T19:16:26.309112-05:00 claude-cloud sshd[326562]: Disconnected from authenticating user root 43.156.92.183 port 39754 [preauth] 2026-06-29T19:16:32.491749-05:00 claude-cloud sshd[326573]: Connection closed by authenticating user root 45.198.224.46 port 39774 [preauth] 2026-06-29T19:16:35.979381-05:00 claude-cloud sshd[326587]: Received disconnect from 103.187.146.90 port 46226:11: Bye Bye [preauth] 2026-06-29T19:16:35.979673-05:00 claude-cloud sshd[326587]: Disconnected from authenticating user root 103.187.146.90 port 46226 [preauth] 2026-06-29T19:16:40.137177-05:00 claude-cloud sshd[326589]: Received disconnect from 122.168.194.41 port 55988:11: Bye Bye [preauth] 2026-06-29T19:16:40.137672-05:00 claude-cloud sshd[326589]: Disconnected from authenticating user root 122.168.194.41 port 55988 [preauth] 2026-06-29T19:17:01.160821-05:00 claude-cloud CRON[326649]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-29T19:17:01.169846-05:00 claude-cloud CRON[326649]: pam_unix(cron:session): session closed for user root 2026-06-29T19:17:04.657424-05:00 claude-cloud sshd[326658]: Connection reset by authenticating user root 45.148.10.147 port 63808 [preauth] 2026-06-29T19:17:22.009264-05:00 claude-cloud sshd[326669]: Received disconnect from 202.29.225.206 port 35054:11: Bye Bye [preauth] 2026-06-29T19:17:22.009614-05:00 claude-cloud sshd[326669]: Disconnected from authenticating user root 202.29.225.206 port 35054 [preauth] 2026-06-29T19:17:39.065369-05:00 claude-cloud sshd[326704]: Connection closed by 77.90.185.16 port 65105 2026-06-29T19:18:01.901626-05:00 claude-cloud sshd[326758]: Received disconnect from 103.241.43.193 port 50452:11: Bye Bye [preauth] 2026-06-29T19:18:01.901880-05:00 claude-cloud sshd[326758]: Disconnected from authenticating user root 103.241.43.193 port 50452 [preauth] 2026-06-29T19:18:28.815324-05:00 claude-cloud sshd[326796]: Received disconnect from 103.187.146.90 port 57264:11: Bye Bye [preauth] 2026-06-29T19:18:28.815895-05:00 claude-cloud sshd[326796]: Disconnected from authenticating user root 103.187.146.90 port 57264 [preauth] 2026-06-29T19:18:33.972468-05:00 claude-cloud sshd[326810]: Received disconnect from 149.56.241.206 port 38918:11: disconnected by user [preauth] 2026-06-29T19:18:33.973094-05:00 claude-cloud sshd[326810]: Disconnected from authenticating user root 149.56.241.206 port 38918 [preauth] 2026-06-29T19:18:39.020323-05:00 claude-cloud sshd[326812]: Received disconnect from 43.156.92.183 port 47650:11: Bye Bye [preauth] 2026-06-29T19:18:39.020635-05:00 claude-cloud sshd[326812]: Disconnected from authenticating user root 43.156.92.183 port 47650 [preauth] 2026-06-29T19:18:49.595083-05:00 claude-cloud sshd[326889]: Connection closed by authenticating user root 115.248.8.65 port 40704 [preauth] 2026-06-29T19:18:50.723806-05:00 claude-cloud sshd[326895]: Invalid user postgres from 122.168.194.41 port 45674 2026-06-29T19:18:50.918017-05:00 claude-cloud sshd[326895]: Received disconnect from 122.168.194.41 port 45674:11: Bye Bye [preauth] 2026-06-29T19:18:50.918320-05:00 claude-cloud sshd[326895]: Disconnected from invalid user postgres 122.168.194.41 port 45674 [preauth] 2026-06-29T19:19:13.077817-05:00 claude-cloud sshd[326934]: Received disconnect from 202.29.225.206 port 54432:11: Bye Bye [preauth] 2026-06-29T19:19:13.079012-05:00 claude-cloud sshd[326934]: Disconnected from authenticating user root 202.29.225.206 port 54432 [preauth] 2026-06-29T19:19:42.394902-05:00 claude-cloud systemd-logind[853]: New session c4990 of user claude. 2026-06-29T19:19:42.883663-05:00 claude-cloud systemd-logind[853]: Session c4990 logged out. Waiting for processes to exit. 2026-06-29T19:19:42.886369-05:00 claude-cloud systemd-logind[853]: Removed session c4990. 2026-06-29T19:19:54.312220-05:00 claude-cloud sshd[327027]: Invalid user user from 103.241.43.193 port 59552 2026-06-29T19:19:54.543854-05:00 claude-cloud sshd[327027]: Received disconnect from 103.241.43.193 port 59552:11: Bye Bye [preauth] 2026-06-29T19:19:54.544259-05:00 claude-cloud sshd[327027]: Disconnected from invalid user user 103.241.43.193 port 59552 [preauth] 2026-06-29T19:20:25.935562-05:00 claude-cloud sshd[327066]: Received disconnect from 103.187.146.90 port 36036:11: Bye Bye [preauth] 2026-06-29T19:20:25.935928-05:00 claude-cloud sshd[327066]: Disconnected from authenticating user root 103.187.146.90 port 36036 [preauth] 2026-06-29T19:20:45.872493-05:00 claude-cloud sshd[327114]: Invalid user demo from 43.156.92.183 port 49072 2026-06-29T19:20:46.042156-05:00 claude-cloud sshd[327114]: Received disconnect from 43.156.92.183 port 49072:11: Bye Bye [preauth] 2026-06-29T19:20:46.042367-05:00 claude-cloud sshd[327114]: Disconnected from invalid user demo 43.156.92.183 port 49072 [preauth] 2026-06-29T19:20:56.296375-05:00 claude-cloud sshd[327113]: Connection closed by authenticating user root 27.71.230.31 port 35280 [preauth] 2026-06-29T19:20:57.285454-05:00 claude-cloud sshd[327138]: Invalid user ubuntu from 202.29.225.206 port 51418 2026-06-29T19:20:57.483072-05:00 claude-cloud sshd[327138]: Received disconnect from 202.29.225.206 port 51418:11: Bye Bye [preauth] 2026-06-29T19:20:57.483454-05:00 claude-cloud sshd[327138]: Disconnected from invalid user ubuntu 202.29.225.206 port 51418 [preauth] 2026-06-29T19:20:59.657754-05:00 claude-cloud sshd[327146]: Invalid user demo from 122.168.194.41 port 44044 2026-06-29T19:20:59.872438-05:00 claude-cloud sshd[327146]: Received disconnect from 122.168.194.41 port 44044:11: Bye Bye [preauth] 2026-06-29T19:20:59.872716-05:00 claude-cloud sshd[327146]: Disconnected from invalid user demo 122.168.194.41 port 44044 [preauth] 2026-06-29T19:21:40.549654-05:00 claude-cloud sshd[327225]: Invalid user demo from 103.241.43.193 port 59594 2026-06-29T19:21:40.557208-05:00 claude-cloud sshd[327184]: Connection closed by authenticating user root 141.11.88.121 port 55016 [preauth] 2026-06-29T19:21:40.781904-05:00 claude-cloud sshd[327225]: Received disconnect from 103.241.43.193 port 59594:11: Bye Bye [preauth] 2026-06-29T19:21:40.782112-05:00 claude-cloud sshd[327225]: Disconnected from invalid user demo 103.241.43.193 port 59594 [preauth] 2026-06-29T19:22:00.376188-05:00 claude-cloud sshd[327231]: Connection closed by authenticating user root 141.11.88.121 port 46948 [preauth] 2026-06-29T19:22:05.126984-05:00 claude-cloud sshd[327274]: Connection closed by 161.35.47.134 port 33680 2026-06-29T19:22:12.299098-05:00 claude-cloud sshd[327279]: Received disconnect from 103.187.146.90 port 51064:11: Bye Bye [preauth] 2026-06-29T19:22:12.299893-05:00 claude-cloud sshd[327279]: Disconnected from authenticating user root 103.187.146.90 port 51064 [preauth] 2026-06-29T19:22:21.236132-05:00 claude-cloud sshd[327284]: Connection closed by authenticating user root 115.248.8.65 port 47760 [preauth] 2026-06-29T19:22:23.143154-05:00 claude-cloud sshd[327267]: Connection closed by authenticating user root 141.11.88.121 port 44906 [preauth] 2026-06-29T19:22:27.664624-05:00 claude-cloud sshd[327311]: Connection reset by authenticating user root 45.148.10.157 port 10834 [preauth] 2026-06-29T19:22:45.861559-05:00 claude-cloud sshd[327347]: Invalid user git from 202.29.225.206 port 51992 2026-06-29T19:22:46.051730-05:00 claude-cloud sshd[327347]: Received disconnect from 202.29.225.206 port 51992:11: Bye Bye [preauth] 2026-06-29T19:22:46.051969-05:00 claude-cloud sshd[327347]: Disconnected from invalid user git 202.29.225.206 port 51992 [preauth] 2026-06-29T19:22:47.942529-05:00 claude-cloud sshd[327298]: Connection reset by authenticating user root 141.11.88.121 port 33566 [preauth] 2026-06-29T19:22:54.444265-05:00 claude-cloud sshd[327361]: Received disconnect from 43.156.92.183 port 49458:11: Bye Bye [preauth] 2026-06-29T19:22:54.444536-05:00 claude-cloud sshd[327361]: Disconnected from authenticating user root 43.156.92.183 port 49458 [preauth] 2026-06-29T19:23:22.104090-05:00 claude-cloud sshd[327397]: Invalid user test from 122.168.194.41 port 38802 2026-06-29T19:23:22.324112-05:00 claude-cloud sshd[327397]: Received disconnect from 122.168.194.41 port 38802:11: Bye Bye [preauth] 2026-06-29T19:23:22.324551-05:00 claude-cloud sshd[327397]: Disconnected from invalid user test 122.168.194.41 port 38802 [preauth] 2026-06-29T19:23:35.477785-05:00 claude-cloud sshd[327432]: Invalid user ubuntu from 103.241.43.193 port 40638 2026-06-29T19:23:35.715743-05:00 claude-cloud sshd[327432]: Received disconnect from 103.241.43.193 port 40638:11: Bye Bye [preauth] 2026-06-29T19:23:35.715949-05:00 claude-cloud sshd[327432]: Disconnected from invalid user ubuntu 103.241.43.193 port 40638 [preauth] 2026-06-29T19:24:04.863879-05:00 claude-cloud sshd[327498]: Received disconnect from 103.187.146.90 port 36036:11: Bye Bye [preauth] 2026-06-29T19:24:04.864266-05:00 claude-cloud sshd[327498]: Disconnected from authenticating user root 103.187.146.90 port 36036 [preauth] 2026-06-29T19:24:21.057832-05:00 claude-cloud sshd[327506]: Received disconnect from 101.126.54.245 port 53768:11: Bye Bye [preauth] 2026-06-29T19:24:21.058487-05:00 claude-cloud sshd[327506]: Disconnected from authenticating user root 101.126.54.245 port 53768 [preauth] 2026-06-29T19:24:34.970269-05:00 claude-cloud sshd[327545]: Invalid user user from 202.29.225.206 port 38002 2026-06-29T19:24:35.169301-05:00 claude-cloud sshd[327545]: Received disconnect from 202.29.225.206 port 38002:11: Bye Bye [preauth] 2026-06-29T19:24:35.169495-05:00 claude-cloud sshd[327545]: Disconnected from invalid user user 202.29.225.206 port 38002 [preauth] 2026-06-29T19:24:40.546314-05:00 claude-cloud sshd[327550]: Connection closed by 161.35.47.134 port 56698 2026-06-29T19:24:50.304667-05:00 claude-cloud systemd-logind[853]: New session c4991 of user claude. 2026-06-29T19:24:50.725417-05:00 claude-cloud systemd-logind[853]: Session c4991 logged out. Waiting for processes to exit. 2026-06-29T19:24:50.727347-05:00 claude-cloud systemd-logind[853]: Removed session c4991. 2026-06-29T19:25:01.185239-05:00 claude-cloud CRON[327605]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-29T19:25:01.197530-05:00 claude-cloud CRON[327605]: pam_unix(cron:session): session closed for user root 2026-06-29T19:25:03.843897-05:00 claude-cloud sshd[327611]: Invalid user postgres from 43.156.92.183 port 33792 2026-06-29T19:25:04.011370-05:00 claude-cloud sshd[327611]: Received disconnect from 43.156.92.183 port 33792:11: Bye Bye [preauth] 2026-06-29T19:25:04.011550-05:00 claude-cloud sshd[327611]: Disconnected from invalid user postgres 43.156.92.183 port 33792 [preauth] 2026-06-29T19:25:09.293426-05:00 claude-cloud sshd[327613]: userauth_pubkey: signature algorithm ssh-dss not in PubkeyAcceptedAlgorithms [preauth] 2026-06-29T19:25:09.379618-05:00 claude-cloud sshd[327613]: Received disconnect from 176.65.131.188 port 8236:11: disconnected by user [preauth] 2026-06-29T19:25:09.379793-05:00 claude-cloud sshd[327613]: Disconnected from authenticating user root 176.65.131.188 port 8236 [preauth] 2026-06-29T19:25:24.801976-05:00 claude-cloud sshd[327633]: Invalid user test from 103.241.43.193 port 39314 2026-06-29T19:25:25.037104-05:00 claude-cloud sshd[327633]: Received disconnect from 103.241.43.193 port 39314:11: Bye Bye [preauth] 2026-06-29T19:25:25.037458-05:00 claude-cloud sshd[327633]: Disconnected from invalid user test 103.241.43.193 port 39314 [preauth] 2026-06-29T19:25:39.640623-05:00 claude-cloud sshd[327659]: Received disconnect from 122.168.194.41 port 38578:11: Bye Bye [preauth] 2026-06-29T19:25:39.641110-05:00 claude-cloud sshd[327659]: Disconnected from authenticating user root 122.168.194.41 port 38578 [preauth] 2026-06-29T19:25:59.399754-05:00 claude-cloud sshd[327685]: Connection closed by authenticating user root 115.248.8.65 port 58890 [preauth] 2026-06-29T19:26:01.380851-05:00 claude-cloud sshd[327696]: Invalid user ubuntu from 45.198.224.46 port 44946 2026-06-29T19:26:02.170562-05:00 claude-cloud sshd[327696]: Connection closed by invalid user ubuntu 45.198.224.46 port 44946 [preauth] 2026-06-29T19:26:56.139954-05:00 claude-cloud sshd[327782]: Connection closed by authenticating user root 27.71.230.31 port 37550 [preauth] 2026-06-29T19:27:00.393196-05:00 claude-cloud sshd[327824]: Received disconnect from 101.126.54.245 port 33524:11: Bye Bye [preauth] 2026-06-29T19:27:00.393487-05:00 claude-cloud sshd[327824]: Disconnected from authenticating user root 101.126.54.245 port 33524 [preauth] 2026-06-29T19:27:02.272394-05:00 claude-cloud sshd[327826]: Connection closed by authenticating user root 118.194.249.186 port 38404 [preauth] 2026-06-29T19:27:03.975583-05:00 claude-cloud sshd[327840]: Connection closed by authenticating user root 118.194.249.186 port 49054 [preauth] 2026-06-29T19:27:05.716763-05:00 claude-cloud sshd[327842]: Connection closed by authenticating user root 118.194.249.186 port 52560 [preauth] 2026-06-29T19:27:07.400391-05:00 claude-cloud sshd[327844]: Connection closed by authenticating user root 118.194.249.186 port 59282 [preauth] 2026-06-29T19:27:09.175066-05:00 claude-cloud sshd[327846]: Connection closed by authenticating user root 118.194.249.186 port 59516 [preauth] 2026-06-29T19:27:10.684173-05:00 claude-cloud sshd[327853]: Invalid user user from 43.156.92.183 port 43932 2026-06-29T19:27:10.859424-05:00 claude-cloud sshd[327853]: Received disconnect from 43.156.92.183 port 43932:11: Bye Bye [preauth] 2026-06-29T19:27:10.859626-05:00 claude-cloud sshd[327853]: Disconnected from invalid user user 43.156.92.183 port 43932 [preauth] 2026-06-29T19:27:10.930992-05:00 claude-cloud sshd[327851]: Connection closed by authenticating user root 118.194.249.186 port 40040 [preauth] 2026-06-29T19:27:12.645731-05:00 claude-cloud sshd[327855]: Connection closed by authenticating user root 118.194.249.186 port 49024 [preauth] 2026-06-29T19:27:14.363776-05:00 claude-cloud sshd[327857]: Connection closed by authenticating user root 118.194.249.186 port 54406 [preauth] 2026-06-29T19:27:16.114913-05:00 claude-cloud sshd[327862]: Connection closed by authenticating user root 118.194.249.186 port 53404 [preauth] 2026-06-29T19:27:17.867267-05:00 claude-cloud sshd[327864]: Connection closed by authenticating user root 118.194.249.186 port 37804 [preauth] 2026-06-29T19:27:19.543607-05:00 claude-cloud sshd[327866]: Connection closed by authenticating user root 118.194.249.186 port 47638 [preauth] 2026-06-29T19:27:21.328595-05:00 claude-cloud sshd[327871]: Connection closed by authenticating user root 118.194.249.186 port 51826 [preauth] 2026-06-29T19:27:23.088111-05:00 claude-cloud sshd[327876]: Connection closed by authenticating user root 118.194.249.186 port 36622 [preauth] 2026-06-29T19:27:24.815956-05:00 claude-cloud sshd[327884]: Connection closed by authenticating user root 118.194.249.186 port 48146 [preauth] 2026-06-29T19:27:26.584994-05:00 claude-cloud sshd[327889]: Connection closed by authenticating user root 118.194.249.186 port 59126 [preauth] 2026-06-29T19:27:28.299674-05:00 claude-cloud sshd[327894]: Connection closed by authenticating user root 118.194.249.186 port 38910 [preauth] 2026-06-29T19:27:30.059385-05:00 claude-cloud sshd[327902]: Connection closed by authenticating user root 118.194.249.186 port 48404 [preauth] 2026-06-29T19:27:31.816664-05:00 claude-cloud sshd[327904]: Connection closed by authenticating user root 118.194.249.186 port 58476 [preauth] 2026-06-29T19:27:33.575031-05:00 claude-cloud sshd[327918]: Connection closed by authenticating user root 118.194.249.186 port 41954 [preauth] 2026-06-29T19:27:35.329951-05:00 claude-cloud sshd[327920]: Connection closed by authenticating user root 118.194.249.186 port 50294 [preauth] 2026-06-29T19:27:37.042564-05:00 claude-cloud sshd[327922]: Connection closed by authenticating user root 118.194.249.186 port 54544 [preauth] 2026-06-29T19:27:38.806713-05:00 claude-cloud sshd[327924]: Connection closed by authenticating user root 118.194.249.186 port 59412 [preauth] 2026-06-29T19:27:40.570070-05:00 claude-cloud sshd[327926]: Connection closed by authenticating user root 118.194.249.186 port 42032 [preauth] 2026-06-29T19:27:42.294172-05:00 claude-cloud sshd[327931]: Connection closed by authenticating user root 118.194.249.186 port 54358 [preauth] 2026-06-29T19:27:44.066252-05:00 claude-cloud sshd[327933]: Connection closed by authenticating user root 118.194.249.186 port 33870 [preauth] 2026-06-29T19:27:45.843184-05:00 claude-cloud sshd[327938]: Connection closed by authenticating user root 118.194.249.186 port 42240 [preauth] 2026-06-29T19:27:47.584841-05:00 claude-cloud sshd[327940]: Connection closed by authenticating user root 118.194.249.186 port 52140 [preauth] 2026-06-29T19:27:49.343650-05:00 claude-cloud sshd[327942]: Connection closed by authenticating user root 118.194.249.186 port 57002 [preauth] 2026-06-29T19:27:49.519389-05:00 claude-cloud sshd[327944]: Received disconnect from 122.168.194.41 port 46586:11: Bye Bye [preauth] 2026-06-29T19:27:49.519793-05:00 claude-cloud sshd[327944]: Disconnected from authenticating user root 122.168.194.41 port 46586 [preauth] 2026-06-29T19:27:51.061911-05:00 claude-cloud sshd[327949]: Connection closed by authenticating user root 118.194.249.186 port 39940 [preauth] 2026-06-29T19:27:52.826352-05:00 claude-cloud sshd[327951]: Connection closed by authenticating user root 118.194.249.186 port 49996 [preauth] 2026-06-29T19:27:54.429833-05:00 claude-cloud sshd[327965]: Connection reset by authenticating user root 45.148.10.151 port 23830 [preauth] 2026-06-29T19:27:54.585050-05:00 claude-cloud sshd[327962]: Connection closed by authenticating user root 118.194.249.186 port 60456 [preauth] 2026-06-29T19:27:56.273632-05:00 claude-cloud sshd[327967]: Connection closed by authenticating user root 118.194.249.186 port 37424 [preauth] 2026-06-29T19:27:58.054023-05:00 claude-cloud sshd[327975]: Connection closed by authenticating user root 118.194.249.186 port 44580 [preauth] 2026-06-29T19:27:59.770572-05:00 claude-cloud sshd[327983]: Connection closed by authenticating user root 118.194.249.186 port 54708 [preauth] 2026-06-29T19:28:01.456069-05:00 claude-cloud sshd[327985]: Connection closed by authenticating user root 118.194.249.186 port 57702 [preauth] 2026-06-29T19:28:03.226409-05:00 claude-cloud sshd[327999]: Connection closed by authenticating user root 118.194.249.186 port 53752 [preauth] 2026-06-29T19:28:04.982679-05:00 claude-cloud sshd[328001]: Connection closed by authenticating user root 118.194.249.186 port 33080 [preauth] 2026-06-29T19:28:06.735850-05:00 claude-cloud sshd[328003]: Connection closed by authenticating user root 118.194.249.186 port 40798 [preauth] 2026-06-29T19:28:08.510033-05:00 claude-cloud sshd[328005]: Connection closed by authenticating user root 118.194.249.186 port 44700 [preauth] 2026-06-29T19:28:10.261709-05:00 claude-cloud sshd[328007]: Connection closed by authenticating user root 118.194.249.186 port 53712 [preauth] 2026-06-29T19:28:11.945099-05:00 claude-cloud sshd[328012]: Connection closed by authenticating user root 118.194.249.186 port 60068 [preauth] 2026-06-29T19:28:13.691971-05:00 claude-cloud sshd[328014]: Connection closed by authenticating user root 118.194.249.186 port 37384 [preauth] 2026-06-29T19:28:15.404212-05:00 claude-cloud sshd[328019]: Connection closed by authenticating user root 118.194.249.186 port 47038 [preauth] 2026-06-29T19:28:17.109046-05:00 claude-cloud sshd[328021]: Connection closed by authenticating user root 118.194.249.186 port 58724 [preauth] 2026-06-29T19:28:18.818748-05:00 claude-cloud sshd[328023]: Connection closed by authenticating user root 118.194.249.186 port 34520 [preauth] 2026-06-29T19:28:20.594592-05:00 claude-cloud sshd[328025]: Connection closed by authenticating user root 118.194.249.186 port 42656 [preauth] 2026-06-29T19:28:22.358569-05:00 claude-cloud sshd[328030]: Connection closed by authenticating user root 118.194.249.186 port 50694 [preauth] 2026-06-29T19:28:24.039130-05:00 claude-cloud sshd[328041]: Connection closed by authenticating user root 118.194.249.186 port 58704 [preauth] 2026-06-29T19:28:25.740811-05:00 claude-cloud sshd[328043]: Connection closed by authenticating user root 118.194.249.186 port 33828 [preauth] 2026-06-29T19:28:27.513252-05:00 claude-cloud sshd[328051]: Connection closed by authenticating user root 118.194.249.186 port 35358 [preauth] 2026-06-29T19:28:29.264739-05:00 claude-cloud sshd[328059]: Connection closed by authenticating user root 118.194.249.186 port 53192 [preauth] 2026-06-29T19:28:31.028150-05:00 claude-cloud sshd[328061]: Connection closed by authenticating user root 118.194.249.186 port 34438 [preauth] 2026-06-29T19:28:32.767873-05:00 claude-cloud sshd[328072]: Connection closed by authenticating user root 118.194.249.186 port 40764 [preauth] 2026-06-29T19:28:34.447676-05:00 claude-cloud sshd[328077]: Connection closed by authenticating user root 118.194.249.186 port 50790 [preauth] 2026-06-29T19:28:36.231626-05:00 claude-cloud sshd[328079]: Connection closed by authenticating user root 118.194.249.186 port 54122 [preauth] 2026-06-29T19:28:37.960846-05:00 claude-cloud sshd[328081]: Connection closed by authenticating user root 118.194.249.186 port 60344 [preauth] 2026-06-29T19:28:39.682352-05:00 claude-cloud sshd[328083]: Connection closed by authenticating user root 118.194.249.186 port 41058 [preauth] 2026-06-29T19:28:41.449401-05:00 claude-cloud sshd[328088]: Connection closed by authenticating user root 118.194.249.186 port 46770 [preauth] 2026-06-29T19:28:43.124067-05:00 claude-cloud sshd[328090]: Connection closed by authenticating user root 118.194.249.186 port 50316 [preauth] 2026-06-29T19:28:44.890545-05:00 claude-cloud sshd[328114]: Connection closed by authenticating user root 118.194.249.186 port 54334 [preauth] 2026-06-29T19:28:46.571883-05:00 claude-cloud sshd[328181]: Connection closed by authenticating user root 118.194.249.186 port 35238 [preauth] 2026-06-29T19:28:48.255066-05:00 claude-cloud sshd[328193]: Connection closed by authenticating user root 118.194.249.186 port 39414 [preauth] 2026-06-29T19:28:49.978950-05:00 claude-cloud sshd[328195]: Connection closed by authenticating user root 118.194.249.186 port 40432 [preauth] 2026-06-29T19:28:51.743411-05:00 claude-cloud sshd[328200]: Connection closed by authenticating user root 118.194.249.186 port 42912 [preauth] 2026-06-29T19:28:53.496511-05:00 claude-cloud sshd[328205]: Connection closed by authenticating user root 118.194.249.186 port 49288 [preauth] 2026-06-29T19:28:55.260864-05:00 claude-cloud sshd[328213]: Connection closed by authenticating user root 118.194.249.186 port 57978 [preauth] 2026-06-29T19:28:56.971352-05:00 claude-cloud sshd[328220]: Connection closed by authenticating user root 118.194.249.186 port 39662 [preauth] 2026-06-29T19:28:58.734502-05:00 claude-cloud sshd[328231]: Connection closed by authenticating user root 118.194.249.186 port 40760 [preauth] 2026-06-29T19:29:00.436625-05:00 claude-cloud sshd[328233]: Connection closed by authenticating user root 118.194.249.186 port 49010 [preauth] 2026-06-29T19:29:02.161949-05:00 claude-cloud sshd[328235]: Connection closed by authenticating user root 118.194.249.186 port 48188 [preauth] 2026-06-29T19:29:03.930590-05:00 claude-cloud sshd[328249]: Connection closed by authenticating user root 118.194.249.186 port 49280 [preauth] 2026-06-29T19:29:05.669759-05:00 claude-cloud sshd[328251]: Connection closed by authenticating user root 118.194.249.186 port 53466 [preauth] 2026-06-29T19:29:07.369826-05:00 claude-cloud sshd[328253]: Connection closed by authenticating user root 118.194.249.186 port 54706 [preauth] 2026-06-29T19:29:09.119916-05:00 claude-cloud sshd[328255]: Connection closed by authenticating user root 118.194.249.186 port 55662 [preauth] 2026-06-29T19:29:10.799957-05:00 claude-cloud sshd[328257]: Connection closed by authenticating user root 118.194.249.186 port 52720 [preauth] 2026-06-29T19:29:12.589353-05:00 claude-cloud sshd[328262]: Connection closed by authenticating user root 118.194.249.186 port 59620 [preauth] 2026-06-29T19:29:14.286705-05:00 claude-cloud sshd[328264]: Connection closed by authenticating user root 118.194.249.186 port 39084 [preauth] 2026-06-29T19:29:15.980634-05:00 claude-cloud sshd[328269]: Connection closed by authenticating user root 118.194.249.186 port 45036 [preauth] 2026-06-29T19:29:17.755573-05:00 claude-cloud sshd[328271]: Connection closed by authenticating user root 118.194.249.186 port 50312 [preauth] 2026-06-29T19:29:19.483551-05:00 claude-cloud sshd[328273]: Connection closed by authenticating user root 118.194.249.186 port 33920 [preauth] 2026-06-29T19:29:21.261401-05:00 claude-cloud sshd[328278]: Connection closed by authenticating user root 118.194.249.186 port 35770 [preauth] 2026-06-29T19:29:23.033660-05:00 claude-cloud sshd[328283]: Connection closed by authenticating user root 118.194.249.186 port 41408 [preauth] 2026-06-29T19:29:25.299206-05:00 claude-cloud sshd[328291]: Connection closed by authenticating user root 118.194.249.186 port 35374 [preauth] 2026-06-29T19:29:27.067706-05:00 claude-cloud sshd[328296]: Connection closed by authenticating user root 118.194.249.186 port 46192 [preauth] 2026-06-29T19:29:28.788154-05:00 claude-cloud sshd[328307]: Connection closed by authenticating user root 118.194.249.186 port 58484 [preauth] 2026-06-29T19:29:30.497079-05:00 claude-cloud sshd[328309]: Connection closed by authenticating user root 118.194.249.186 port 36468 [preauth] 2026-06-29T19:29:32.269766-05:00 claude-cloud sshd[328322]: Connection closed by authenticating user root 118.194.249.186 port 37232 [preauth] 2026-06-29T19:29:33.956744-05:00 claude-cloud sshd[328327]: Connection closed by authenticating user root 118.194.249.186 port 45478 [preauth] 2026-06-29T19:29:35.363118-05:00 claude-cloud sshd[328329]: Invalid user user from 118.194.249.186 port 46364 2026-06-29T19:29:35.638050-05:00 claude-cloud sshd[328329]: Connection closed by invalid user user 118.194.249.186 port 46364 [preauth] 2026-06-29T19:29:37.138511-05:00 claude-cloud sshd[328333]: Invalid user user from 118.194.249.186 port 52038 2026-06-29T19:29:37.427154-05:00 claude-cloud sshd[328333]: Connection closed by invalid user user 118.194.249.186 port 52038 [preauth] 2026-06-29T19:29:38.491020-05:00 claude-cloud sshd[328331]: Connection closed by authenticating user root 115.248.8.65 port 34484 [preauth] 2026-06-29T19:29:38.916914-05:00 claude-cloud sshd[328336]: Invalid user user from 118.194.249.186 port 33884 2026-06-29T19:29:39.206134-05:00 claude-cloud sshd[328336]: Connection closed by invalid user user 118.194.249.186 port 33884 [preauth] 2026-06-29T19:29:40.684103-05:00 claude-cloud sshd[328341]: Invalid user user from 118.194.249.186 port 46924 2026-06-29T19:29:40.973988-05:00 claude-cloud sshd[328341]: Connection closed by invalid user user 118.194.249.186 port 46924 [preauth] 2026-06-29T19:29:42.409317-05:00 claude-cloud sshd[328343]: Invalid user user from 118.194.249.186 port 55690 2026-06-29T19:29:42.690602-05:00 claude-cloud sshd[328343]: Connection closed by invalid user user 118.194.249.186 port 55690 [preauth] 2026-06-29T19:29:48.215566-05:00 claude-cloud sshd[328352]: Connection closed by 85.217.149.67 port 46926 [preauth] 2026-06-29T19:29:57.108264-05:00 claude-cloud systemd-logind[853]: New session c4992 of user claude. 2026-06-29T19:29:57.547520-05:00 claude-cloud systemd-logind[853]: Session c4992 logged out. Waiting for processes to exit. 2026-06-29T19:29:57.548885-05:00 claude-cloud systemd-logind[853]: Removed session c4992. 2026-06-29T19:30:00.788164-05:00 claude-cloud sshd[328389]: Invalid user user from 122.168.194.41 port 44022 2026-06-29T19:30:01.011073-05:00 claude-cloud sshd[328389]: Received disconnect from 122.168.194.41 port 44022:11: Bye Bye [preauth] 2026-06-29T19:30:01.011320-05:00 claude-cloud sshd[328389]: Disconnected from invalid user user 122.168.194.41 port 44022 [preauth] 2026-06-29T19:33:07.149441-05:00 claude-cloud sshd[328670]: Connection closed by authenticating user root 27.71.230.31 port 37034 [preauth] 2026-06-29T19:33:18.959845-05:00 claude-cloud sshd[328715]: Connection closed by authenticating user root 115.248.8.65 port 59884 [preauth] 2026-06-29T19:33:21.472097-05:00 claude-cloud sshd[328720]: Connection reset by authenticating user root 45.227.254.170 port 21816 [preauth] 2026-06-29T19:33:25.101088-05:00 claude-cloud sshd[328734]: Connection closed by 92.118.39.71 port 57254 2026-06-29T19:35:01.217520-05:00 claude-cloud CRON[328912]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-29T19:35:01.226170-05:00 claude-cloud CRON[328912]: pam_unix(cron:session): session closed for user root 2026-06-29T19:35:05.602054-05:00 claude-cloud systemd-logind[853]: New session c4993 of user claude. 2026-06-29T19:35:06.060075-05:00 claude-cloud systemd-logind[853]: Session c4993 logged out. Waiting for processes to exit. 2026-06-29T19:35:06.061173-05:00 claude-cloud systemd-logind[853]: Removed session c4993. 2026-06-29T19:35:14.448883-05:00 claude-cloud sshd[328933]: Connection closed by authenticating user root 45.148.10.121 port 52498 [preauth] 2026-06-29T19:35:41.840656-05:00 claude-cloud sshd[328971]: Connection closed by authenticating user root 45.198.224.46 port 33696 [preauth] 2026-06-29T19:36:28.123776-05:00 claude-cloud sshd[329063]: Invalid user devblog from 191.97.12.90 port 56682 2026-06-29T19:36:28.294176-05:00 claude-cloud sshd[329063]: Received disconnect from 191.97.12.90 port 56682:11: Bye Bye [preauth] 2026-06-29T19:36:28.294658-05:00 claude-cloud sshd[329063]: Disconnected from invalid user devblog 191.97.12.90 port 56682 [preauth] 2026-06-29T19:36:43.835626-05:00 claude-cloud sshd[329086]: Connection closed by authenticating user root 92.118.39.71 port 60678 [preauth] 2026-06-29T19:36:50.340122-05:00 claude-cloud sshd[329106]: Connection closed by authenticating user root 115.248.8.65 port 56436 [preauth] 2026-06-29T19:38:32.911081-05:00 claude-cloud sshd[329293]: Invalid user wallace from 2.57.121.112 port 59498 2026-06-29T19:38:32.936685-05:00 claude-cloud sshd[329293]: Connection closed by invalid user wallace 2.57.121.112 port 59498 [preauth] 2026-06-29T19:38:34.975065-05:00 claude-cloud sshd[329295]: Connection closed by authenticating user root 92.118.39.71 port 35484 [preauth] 2026-06-29T19:38:52.174684-05:00 claude-cloud sshd[329382]: Connection reset by authenticating user root 45.148.10.157 port 21538 [preauth] 2026-06-29T19:39:13.551529-05:00 claude-cloud sshd[329329]: Connection closed by authenticating user root 27.71.230.31 port 40632 [preauth] 2026-06-29T19:40:11.666561-05:00 claude-cloud systemd-logind[853]: New session c4994 of user claude. 2026-06-29T19:40:12.156838-05:00 claude-cloud systemd-logind[853]: Session c4994 logged out. Waiting for processes to exit. 2026-06-29T19:40:12.158566-05:00 claude-cloud systemd-logind[853]: Removed session c4994. 2026-06-29T19:40:26.149789-05:00 claude-cloud sshd[329529]: Connection closed by authenticating user root 92.118.39.71 port 38500 [preauth] 2026-06-29T19:40:34.841497-05:00 claude-cloud sshd[329566]: Connection closed by authenticating user root 115.248.8.65 port 33620 [preauth] 2026-06-29T19:41:39.594233-05:00 claude-cloud sshd[329680]: Invalid user user from 118.194.249.186 port 50954 2026-06-29T19:41:39.876181-05:00 claude-cloud sshd[329680]: Connection closed by invalid user user 118.194.249.186 port 50954 [preauth] 2026-06-29T19:41:41.320266-05:00 claude-cloud sshd[329685]: Invalid user user from 118.194.249.186 port 36396 2026-06-29T19:41:41.603692-05:00 claude-cloud sshd[329685]: Connection closed by invalid user user 118.194.249.186 port 36396 [preauth] 2026-06-29T19:41:43.083837-05:00 claude-cloud sshd[329687]: Invalid user user from 118.194.249.186 port 44960 2026-06-29T19:41:43.376163-05:00 claude-cloud sshd[329687]: Connection closed by invalid user user 118.194.249.186 port 44960 [preauth] 2026-06-29T19:41:44.848538-05:00 claude-cloud sshd[329692]: Invalid user user from 118.194.249.186 port 56796 2026-06-29T19:41:45.136004-05:00 claude-cloud sshd[329692]: Connection closed by invalid user user 118.194.249.186 port 56796 [preauth] 2026-06-29T19:41:46.597440-05:00 claude-cloud sshd[329694]: Invalid user user from 118.194.249.186 port 37996 2026-06-29T19:41:46.883061-05:00 claude-cloud sshd[329694]: Connection closed by invalid user user 118.194.249.186 port 37996 [preauth] 2026-06-29T19:42:15.099018-05:00 claude-cloud sshd[329741]: Connection closed by authenticating user root 92.118.39.71 port 41502 [preauth] 2026-06-29T19:42:28.298217-05:00 claude-cloud sshd[329761]: Invalid user savannah from 191.97.12.90 port 46830 2026-06-29T19:42:28.473843-05:00 claude-cloud sshd[329761]: Received disconnect from 191.97.12.90 port 46830:11: Bye Bye [preauth] 2026-06-29T19:42:28.474019-05:00 claude-cloud sshd[329761]: Disconnected from invalid user savannah 191.97.12.90 port 46830 [preauth] 2026-06-29T19:43:27.541361-05:00 claude-cloud sshd[329884]: Connection closed by 161.35.47.134 port 49158 2026-06-29T19:44:01.599563-05:00 claude-cloud sshd[329934]: Connection closed by authenticating user root 92.118.39.71 port 44504 [preauth] 2026-06-29T19:44:12.941255-05:00 claude-cloud sshd[329948]: Connection closed by authenticating user root 115.248.8.65 port 35248 [preauth] 2026-06-29T19:44:16.641848-05:00 claude-cloud sshd[329956]: Connection reset by authenticating user root 45.148.10.152 port 46294 [preauth] 2026-06-29T19:44:21.102347-05:00 claude-cloud sshd[329962]: Invalid user ocw from 191.97.12.90 port 60536 2026-06-29T19:44:21.271234-05:00 claude-cloud sshd[329962]: Received disconnect from 191.97.12.90 port 60536:11: Bye Bye [preauth] 2026-06-29T19:44:21.271437-05:00 claude-cloud sshd[329962]: Disconnected from invalid user ocw 191.97.12.90 port 60536 [preauth] 2026-06-29T19:44:43.099981-05:00 claude-cloud sshd[329998]: Connection closed by authenticating user root 141.11.88.122 port 48672 [preauth] 2026-06-29T19:44:43.409387-05:00 claude-cloud sshd[330003]: Connection closed by authenticating user root 141.11.88.121 port 41376 [preauth] 2026-06-29T19:44:48.486353-05:00 claude-cloud sshd[330018]: Connection closed by authenticating user root 141.11.88.121 port 38932 [preauth] 2026-06-29T19:44:55.070414-05:00 claude-cloud sshd[330029]: Connection closed by authenticating user root 141.11.88.121 port 44960 [preauth] 2026-06-29T19:44:57.596121-05:00 claude-cloud sshd[330027]: Connection closed by authenticating user root 27.71.230.31 port 58690 [preauth] 2026-06-29T19:45:01.239054-05:00 claude-cloud CRON[330061]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-29T19:45:01.244029-05:00 claude-cloud CRON[330061]: pam_unix(cron:session): session closed for user root 2026-06-29T19:45:03.054050-05:00 claude-cloud sshd[330005]: Connection closed by authenticating user root 141.11.88.122 port 41508 [preauth] 2026-06-29T19:45:03.650927-05:00 claude-cloud sshd[330047]: Connection closed by authenticating user root 141.11.88.121 port 38810 [preauth] 2026-06-29T19:45:07.208934-05:00 claude-cloud sshd[330066]: Connection closed by authenticating user root 45.198.224.46 port 53814 [preauth] 2026-06-29T19:45:11.875519-05:00 claude-cloud sshd[330065]: Connection closed by authenticating user root 141.11.88.121 port 39450 [preauth] 2026-06-29T19:45:18.054463-05:00 claude-cloud systemd-logind[853]: New session c4995 of user claude. 2026-06-29T19:45:18.532416-05:00 claude-cloud systemd-logind[853]: Session c4995 logged out. Waiting for processes to exit. 2026-06-29T19:45:18.534109-05:00 claude-cloud systemd-logind[853]: Removed session c4995. 2026-06-29T19:45:22.350136-05:00 claude-cloud sshd[330073]: Connection closed by authenticating user root 141.11.88.121 port 40000 [preauth] 2026-06-29T19:45:28.086766-05:00 claude-cloud sshd[330064]: Connection closed by authenticating user root 141.11.88.122 port 59004 [preauth] 2026-06-29T19:45:40.601261-05:00 claude-cloud sshd[330149]: Connection closed by authenticating user root 92.118.39.71 port 47504 [preauth] 2026-06-29T19:45:40.719510-05:00 claude-cloud sshd[330115]: Connection closed by authenticating user root 141.11.88.121 port 58066 [preauth] 2026-06-29T19:45:56.657703-05:00 claude-cloud sshd[330154]: Connection closed by authenticating user root 141.11.88.121 port 36614 [preauth] 2026-06-29T19:45:57.742476-05:00 claude-cloud sshd[330135]: Connection closed by authenticating user root 141.11.88.122 port 53550 [preauth] 2026-06-29T19:46:03.191682-05:00 claude-cloud sshd[330187]: error: kex_exchange_identification: read: Connection reset by peer 2026-06-29T19:46:03.191939-05:00 claude-cloud sshd[330187]: Connection reset by 141.11.88.122 port 42362 2026-06-29T19:46:05.414320-05:00 claude-cloud sshd[330180]: Connection closed by authenticating user root 141.11.88.121 port 33966 [preauth] 2026-06-29T19:46:07.732476-05:00 claude-cloud sshd[330203]: Invalid user smpp from 191.97.12.90 port 60088 2026-06-29T19:46:07.897264-05:00 claude-cloud sshd[330203]: Received disconnect from 191.97.12.90 port 60088:11: Bye Bye [preauth] 2026-06-29T19:46:07.897699-05:00 claude-cloud sshd[330203]: Disconnected from invalid user smpp 191.97.12.90 port 60088 [preauth] 2026-06-29T19:46:23.457728-05:00 claude-cloud sshd[330202]: Connection closed by authenticating user root 141.11.88.121 port 35030 [preauth] 2026-06-29T19:46:50.625005-05:00 claude-cloud sshd[330224]: Connection closed by authenticating user root 141.11.88.121 port 42796 [preauth] 2026-06-29T19:47:00.271785-05:00 claude-cloud sshd[330253]: Connection closed by authenticating user root 141.11.88.122 port 54474 [preauth] 2026-06-29T19:47:07.756002-05:00 claude-cloud sshd[330306]: Connection closed by authenticating user root 141.11.88.122 port 58430 [preauth] 2026-06-29T19:47:15.053341-05:00 claude-cloud sshd[330322]: Connection closed by authenticating user root 92.118.39.71 port 50476 [preauth] 2026-06-29T19:47:21.661513-05:00 claude-cloud sshd[330276]: Connection reset by authenticating user root 141.11.88.121 port 58120 [preauth] 2026-06-29T19:47:38.242352-05:00 claude-cloud sshd[330314]: Connection closed by authenticating user root 141.11.88.122 port 50164 [preauth] 2026-06-29T19:47:46.839851-05:00 claude-cloud sshd[330389]: Invalid user zzb from 191.97.12.90 port 33774 2026-06-29T19:47:47.016209-05:00 claude-cloud sshd[330389]: Received disconnect from 191.97.12.90 port 33774:11: Bye Bye [preauth] 2026-06-29T19:47:47.016640-05:00 claude-cloud sshd[330389]: Disconnected from invalid user zzb 191.97.12.90 port 33774 [preauth] 2026-06-29T19:47:58.637065-05:00 claude-cloud sshd[330405]: Connection closed by authenticating user root 115.248.8.65 port 55282 [preauth] 2026-06-29T19:48:08.112259-05:00 claude-cloud sshd[330432]: Connection closed by authenticating user root 141.11.88.121 port 47216 [preauth] 2026-06-29T19:48:14.929912-05:00 claude-cloud sshd[330434]: Connection closed by authenticating user root 141.11.88.121 port 56736 [preauth] 2026-06-29T19:48:15.166418-05:00 claude-cloud sshd[330381]: Connection reset by authenticating user root 141.11.88.122 port 53718 [preauth] 2026-06-29T19:48:21.975662-05:00 claude-cloud sshd[330442]: Connection closed by authenticating user root 141.11.88.121 port 43972 [preauth] 2026-06-29T19:48:29.647445-05:00 claude-cloud sshd[330450]: Connection closed by authenticating user root 141.11.88.121 port 35148 [preauth] 2026-06-29T19:48:38.085185-05:00 claude-cloud sshd[330470]: Connection closed by authenticating user root 141.11.88.121 port 59262 [preauth] 2026-06-29T19:48:45.342841-05:00 claude-cloud sshd[330484]: Connection closed by authenticating user root 141.11.88.121 port 33246 [preauth] 2026-06-29T19:48:53.614967-05:00 claude-cloud sshd[330507]: Connection closed by authenticating user root 141.11.88.121 port 54708 [preauth] 2026-06-29T19:48:57.620908-05:00 claude-cloud sshd[330526]: Connection closed by authenticating user root 92.118.39.71 port 53420 [preauth] 2026-06-29T19:49:03.588584-05:00 claude-cloud sshd[330521]: Connection closed by authenticating user root 141.11.88.121 port 59076 [preauth] 2026-06-29T19:49:05.504201-05:00 claude-cloud sshd[330532]: Connection closed by authenticating user root 141.11.88.122 port 52058 [preauth] 2026-06-29T19:49:18.397829-05:00 claude-cloud sshd[330552]: Connection closed by authenticating user root 141.11.88.121 port 37370 [preauth] 2026-06-29T19:49:23.547851-05:00 claude-cloud sshd[330553]: Connection closed by authenticating user root 141.11.88.122 port 50602 [preauth] 2026-06-29T19:49:39.153790-05:00 claude-cloud sshd[330562]: Connection closed by authenticating user root 141.11.88.121 port 48408 [preauth] 2026-06-29T19:49:42.172386-05:00 claude-cloud sshd[330608]: Connection reset by authenticating user root 45.148.10.151 port 64222 [preauth] 2026-06-29T19:49:47.210451-05:00 claude-cloud sshd[330576]: Connection closed by authenticating user root 141.11.88.122 port 56266 [preauth] 2026-06-29T19:49:54.866580-05:00 claude-cloud sshd[330604]: Connection closed by authenticating user root 141.11.88.121 port 41464 [preauth] 2026-06-29T19:50:13.921561-05:00 claude-cloud sshd[330684]: Connection closed by authenticating user root 141.11.88.122 port 44498 [preauth] 2026-06-29T19:50:16.849708-05:00 claude-cloud sshd[330699]: Connection closed by authenticating user root 141.11.88.121 port 57356 [preauth] 2026-06-29T19:50:24.136933-05:00 claude-cloud systemd-logind[853]: New session c4996 of user claude. 2026-06-29T19:50:24.419062-05:00 claude-cloud systemd-logind[853]: Session c4996 logged out. Waiting for processes to exit. 2026-06-29T19:50:24.421389-05:00 claude-cloud systemd-logind[853]: Removed session c4996. 2026-06-29T19:50:30.544116-05:00 claude-cloud sshd[330746]: Connection reset by 141.11.88.122 port 44096 [preauth] 2026-06-29T19:50:41.155396-05:00 claude-cloud sshd[330796]: Connection closed by authenticating user root 92.118.39.71 port 56370 [preauth] 2026-06-29T19:50:43.609785-05:00 claude-cloud sshd[330747]: Connection closed by authenticating user root 141.11.88.121 port 60846 [preauth] 2026-06-29T19:50:53.681222-05:00 claude-cloud sshd[330804]: Connection closed by authenticating user root 141.11.88.121 port 39838 [preauth] 2026-06-29T19:50:57.298003-05:00 claude-cloud sshd[330805]: Connection closed by authenticating user root 27.71.230.31 port 34956 [preauth] 2026-06-29T19:51:03.701678-05:00 claude-cloud sshd[330820]: error: kex_exchange_identification: read: Connection reset by peer 2026-06-29T19:51:03.701947-05:00 claude-cloud sshd[330820]: Connection reset by 141.11.88.121 port 49018 2026-06-29T19:51:27.394004-05:00 claude-cloud sshd[330851]: Connection closed by authenticating user root 141.11.88.122 port 34396 [preauth] 2026-06-29T19:51:40.900064-05:00 claude-cloud sshd[330894]: Connection closed by authenticating user root 115.248.8.65 port 52492 [preauth] 2026-06-29T19:51:49.207906-05:00 claude-cloud sshd[330874]: Connection closed by authenticating user root 141.11.88.122 port 42112 [preauth] 2026-06-29T19:51:51.584974-05:00 claude-cloud sshd[330917]: Connection closed by authenticating user root 141.11.88.121 port 42838 [preauth] 2026-06-29T19:51:57.600680-05:00 claude-cloud sshd[330928]: Connection closed by authenticating user root 141.11.88.121 port 53716 [preauth] 2026-06-29T19:52:04.086790-05:00 claude-cloud sshd[330944]: Connection closed by authenticating user root 141.11.88.121 port 42708 [preauth] 2026-06-29T19:52:09.827989-05:00 claude-cloud sshd[330964]: Connection closed by authenticating user root 141.11.88.121 port 35522 [preauth] 2026-06-29T19:52:17.445348-05:00 claude-cloud sshd[330921]: Connection closed by authenticating user root 141.11.88.122 port 34740 [preauth] 2026-06-29T19:52:19.241692-05:00 claude-cloud sshd[330969]: Connection closed by authenticating user root 141.11.88.121 port 51106 [preauth] 2026-06-29T19:52:24.365528-05:00 claude-cloud sshd[331004]: Connection closed by authenticating user root 92.118.39.71 port 59286 [preauth] 2026-06-29T19:52:27.715215-05:00 claude-cloud sshd[330992]: Connection closed by authenticating user root 141.11.88.121 port 55592 [preauth] 2026-06-29T19:52:39.896009-05:00 claude-cloud sshd[331025]: Connection closed by authenticating user root 141.11.88.121 port 53756 [preauth] 2026-06-29T19:52:51.597775-05:00 claude-cloud sshd[330974]: Connection reset by 141.11.88.122 port 48996 [preauth] 2026-06-29T19:52:54.006928-05:00 claude-cloud sshd[331042]: Connection closed by authenticating user root 141.11.88.121 port 50826 [preauth] 2026-06-29T19:53:04.448349-05:00 claude-cloud sshd[331059]: Connection closed by authenticating user root 141.11.88.121 port 59186 [preauth] 2026-06-29T19:53:18.439530-05:00 claude-cloud sshd[331086]: Connection closed by authenticating user root 141.11.88.121 port 44038 [preauth] 2026-06-29T19:53:36.900318-05:00 claude-cloud sshd[331094]: Connection closed by authenticating user root 141.11.88.121 port 56638 [preauth] 2026-06-29T19:53:48.717288-05:00 claude-cloud sshd[331157]: Invalid user user from 118.194.249.186 port 37806 2026-06-29T19:53:49.004654-05:00 claude-cloud sshd[331157]: Connection closed by invalid user user 118.194.249.186 port 37806 [preauth] 2026-06-29T19:53:50.478078-05:00 claude-cloud sshd[331159]: Invalid user user from 118.194.249.186 port 43084 2026-06-29T19:53:50.767525-05:00 claude-cloud sshd[331159]: Connection closed by invalid user user 118.194.249.186 port 43084 [preauth] 2026-06-29T19:53:51.412270-05:00 claude-cloud sshd[331132]: Connection closed by authenticating user root 141.11.88.122 port 37884 [preauth] 2026-06-29T19:53:52.244931-05:00 claude-cloud sshd[331164]: Invalid user user from 118.194.249.186 port 49816 2026-06-29T19:53:52.533488-05:00 claude-cloud sshd[331164]: Connection closed by invalid user user 118.194.249.186 port 49816 [preauth] 2026-06-29T19:53:54.001649-05:00 claude-cloud sshd[331176]: Invalid user user from 118.194.249.186 port 51448 2026-06-29T19:53:54.289468-05:00 claude-cloud sshd[331176]: Connection closed by invalid user user 118.194.249.186 port 51448 [preauth] 2026-06-29T19:53:55.751892-05:00 claude-cloud sshd[331179]: Invalid user user from 118.194.249.186 port 33274 2026-06-29T19:53:56.038468-05:00 claude-cloud sshd[331179]: Connection closed by invalid user user 118.194.249.186 port 33274 [preauth] 2026-06-29T19:53:57.975845-05:00 claude-cloud sshd[331134]: Connection closed by authenticating user root 141.11.88.121 port 42228 [preauth] 2026-06-29T19:54:12.191431-05:00 claude-cloud sshd[331213]: Connection closed by authenticating user root 92.118.39.71 port 33996 [preauth] 2026-06-29T19:54:13.820657-05:00 claude-cloud sshd[331169]: Connection closed by authenticating user root 141.11.88.122 port 43936 [preauth] 2026-06-29T19:54:15.085132-05:00 claude-cloud sshd[331219]: Received disconnect from 50.7.127.99 port 23228:11: disconnected by user [preauth] 2026-06-29T19:54:15.085400-05:00 claude-cloud sshd[331219]: Disconnected from authenticating user root 50.7.127.99 port 23228 [preauth] 2026-06-29T19:54:26.745737-05:00 claude-cloud sshd[331196]: Connection closed by authenticating user root 141.11.88.121 port 40322 [preauth] 2026-06-29T19:54:30.886916-05:00 claude-cloud sshd[331247]: Invalid user ubuntu from 45.198.224.46 port 47624 2026-06-29T19:54:31.534991-05:00 claude-cloud sshd[331247]: Connection closed by invalid user ubuntu 45.198.224.46 port 47624 [preauth] 2026-06-29T19:54:40.137159-05:00 claude-cloud sshd[331240]: Connection reset by 141.11.88.121 port 47360 [preauth] 2026-06-29T19:54:45.858192-05:00 claude-cloud sshd[331218]: Connection closed by authenticating user root 141.11.88.122 port 52062 [preauth] 2026-06-29T19:55:01.257445-05:00 claude-cloud CRON[331321]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-29T19:55:01.262556-05:00 claude-cloud CRON[331321]: pam_unix(cron:session): session closed for user root 2026-06-29T19:55:06.895227-05:00 claude-cloud sshd[331324]: Connection reset by authenticating user root 45.148.10.141 port 34106 [preauth] 2026-06-29T19:55:09.676753-05:00 claude-cloud sshd[331291]: Connection reset by 141.11.88.122 port 43312 [preauth] 2026-06-29T19:55:16.777634-05:00 claude-cloud sshd[331329]: Invalid user oracle from 115.248.8.65 port 56326 2026-06-29T19:55:17.558616-05:00 claude-cloud sshd[331329]: Connection closed by invalid user oracle 115.248.8.65 port 56326 [preauth] 2026-06-29T19:55:27.821983-05:00 claude-cloud sshd[331340]: Connection closed by authenticating user root 141.11.88.121 port 58338 [preauth] 2026-06-29T19:55:32.891399-05:00 claude-cloud sshd[331354]: Connection closed by authenticating user root 141.11.88.121 port 43024 [preauth] 2026-06-29T19:55:40.204763-05:00 claude-cloud sshd[331374]: Connection closed by authenticating user root 141.11.88.121 port 52544 [preauth] 2026-06-29T19:55:47.070771-05:00 claude-cloud sshd[331379]: Connection closed by authenticating user root 141.11.88.121 port 45404 [preauth] 2026-06-29T19:55:57.125848-05:00 claude-cloud sshd[331401]: Connection closed by authenticating user root 141.11.88.121 port 33646 [preauth] 2026-06-29T19:56:01.815813-05:00 claude-cloud sshd[331434]: Connection closed by authenticating user root 92.118.39.71 port 36954 [preauth] 2026-06-29T19:56:08.119433-05:00 claude-cloud sshd[331426]: Connection closed by authenticating user root 141.11.88.121 port 42326 [preauth] 2026-06-29T19:56:08.871402-05:00 claude-cloud sshd[331409]: Connection closed by authenticating user root 141.11.88.122 port 41430 [preauth] 2026-06-29T19:56:20.452031-05:00 claude-cloud sshd[331448]: Connection closed by authenticating user root 141.11.88.121 port 59558 [preauth] 2026-06-29T19:56:31.036438-05:00 claude-cloud sshd[331461]: Connection closed by authenticating user root 141.11.88.121 port 57654 [preauth] 2026-06-29T19:56:32.873512-05:00 claude-cloud sshd[331449]: Connection closed by authenticating user root 141.11.88.122 port 35666 [preauth] 2026-06-29T19:56:47.731395-05:00 claude-cloud sshd[331484]: Connection closed by authenticating user root 141.11.88.121 port 47688 [preauth] 2026-06-29T19:56:59.069461-05:00 claude-cloud sshd[331497]: Connection closed by authenticating user root 141.11.88.122 port 48208 [preauth] 2026-06-29T19:57:07.242765-05:00 claude-cloud sshd[331508]: Connection closed by authenticating user root 141.11.88.121 port 40816 [preauth] 2026-06-29T19:57:14.008579-05:00 claude-cloud sshd[331506]: Connection closed by authenticating user root 27.71.230.31 port 40412 [preauth] 2026-06-29T19:57:15.071802-05:00 claude-cloud sshd[331570]: Connection closed by authenticating user root 141.11.88.121 port 54156 [preauth] 2026-06-29T19:57:20.610149-05:00 claude-cloud sshd[331535]: Connection reset by 141.11.88.122 port 42358 [preauth] 2026-06-29T19:57:36.518186-05:00 claude-cloud sshd[331578]: Connection closed by authenticating user root 141.11.88.121 port 54238 [preauth] 2026-06-29T19:57:51.385024-05:00 claude-cloud sshd[331644]: Connection closed by authenticating user root 92.118.39.71 port 39860 [preauth] 2026-06-29T19:58:02.983136-05:00 claude-cloud sshd[331616]: Connection closed by authenticating user root 141.11.88.121 port 60620 [preauth] 2026-06-29T19:58:13.563008-05:00 claude-cloud sshd[331668]: Connection closed by authenticating user root 141.11.88.122 port 60868 [preauth] 2026-06-29T19:58:21.673043-05:00 claude-cloud sshd[331681]: Connection reset by 141.11.88.121 port 36926 [preauth] 2026-06-29T19:58:28.699786-05:00 claude-cloud sshd[331690]: Connection closed by authenticating user root 141.11.88.122 port 35208 [preauth] 2026-06-29T19:58:50.219107-05:00 claude-cloud sshd[331716]: Connection closed by authenticating user root 141.11.88.122 port 55384 [preauth] 2026-06-29T19:58:58.697120-05:00 claude-cloud sshd[331758]: Invalid user screenshot from 191.97.12.90 port 36302 2026-06-29T19:58:58.870598-05:00 claude-cloud sshd[331758]: Received disconnect from 191.97.12.90 port 36302:11: Bye Bye [preauth] 2026-06-29T19:58:58.870880-05:00 claude-cloud sshd[331758]: Disconnected from invalid user screenshot 191.97.12.90 port 36302 [preauth] 2026-06-29T19:59:01.808979-05:00 claude-cloud sshd[331757]: Invalid user nick from 115.248.8.65 port 48508 2026-06-29T19:59:02.390755-05:00 claude-cloud sshd[331757]: Connection closed by invalid user nick 115.248.8.65 port 48508 [preauth] 2026-06-29T19:59:05.199770-05:00 claude-cloud sshd[331767]: Connection closed by authenticating user root 141.11.88.121 port 37038 [preauth] 2026-06-29T19:59:10.613012-05:00 claude-cloud sshd[331781]: Connection closed by authenticating user root 141.11.88.121 port 50238 [preauth] 2026-06-29T19:59:17.004114-05:00 claude-cloud sshd[331786]: Connection closed by authenticating user root 141.11.88.121 port 57878 [preauth] 2026-06-29T19:59:18.010405-05:00 claude-cloud sshd[331739]: Connection closed by authenticating user root 141.11.88.122 port 49934 [preauth] 2026-06-29T19:59:23.378143-05:00 claude-cloud sshd[331791]: Connection closed by authenticating user root 141.11.88.121 port 48994 [preauth] 2026-06-29T19:59:32.264922-05:00 claude-cloud sshd[331820]: Connection closed by authenticating user root 141.11.88.121 port 41346 [preauth] 2026-06-29T19:59:34.730413-05:00 claude-cloud sshd[331792]: Connection reset by 141.11.88.122 port 36528 [preauth] 2026-06-29T19:59:39.694211-05:00 claude-cloud sshd[331859]: Connection closed by authenticating user root 92.118.39.71 port 42826 [preauth] 2026-06-29T19:59:45.254465-05:00 claude-cloud sshd[331857]: Connection closed by authenticating user root 141.11.88.121 port 43790 [preauth] 2026-06-29T19:59:57.479351-05:00 claude-cloud sshd[331937]: Connection closed by authenticating user root 141.11.88.121 port 40862 [preauth] 2026-06-29T20:00:09.532090-05:00 claude-cloud sshd[331958]: Connection closed by authenticating user root 141.11.88.121 port 35856 [preauth] 2026-06-29T20:00:14.937463-05:00 claude-cloud sshd[331980]: Received disconnect from 45.148.146.49 port 56116:11: disconnected by user [preauth] 2026-06-29T20:00:14.937718-05:00 claude-cloud sshd[331980]: Disconnected from authenticating user root 45.148.146.49 port 56116 [preauth] 2026-06-29T20:00:24.535805-05:00 claude-cloud sshd[331975]: Connection closed by authenticating user root 141.11.88.121 port 39950 [preauth] 2026-06-29T20:00:33.647171-05:00 claude-cloud sshd[331982]: Connection closed by authenticating user root 141.11.88.122 port 36928 [preauth] 2026-06-29T20:00:34.829194-05:00 claude-cloud sshd[332023]: Connection reset by authenticating user root 45.148.10.151 port 35886 [preauth] 2026-06-29T20:00:45.418007-05:00 claude-cloud sshd[331999]: Connection closed by authenticating user root 141.11.88.121 port 34264 [preauth] 2026-06-29T20:00:53.282732-05:00 claude-cloud sshd[332040]: Invalid user community from 191.97.12.90 port 42350 2026-06-29T20:00:53.472163-05:00 claude-cloud sshd[332040]: Received disconnect from 191.97.12.90 port 42350:11: Bye Bye [preauth] 2026-06-29T20:00:53.472741-05:00 claude-cloud sshd[332040]: Disconnected from invalid user community 191.97.12.90 port 42350 [preauth] 2026-06-29T20:00:55.546790-05:00 claude-cloud sshd[332022]: Connection closed by authenticating user root 141.11.88.122 port 38872 [preauth] 2026-06-29T20:01:07.807445-05:00 claude-cloud sshd[332032]: Connection closed by authenticating user root 141.11.88.121 port 48444 [preauth] 2026-06-29T20:01:25.280113-05:00 claude-cloud sshd[332054]: Connection closed by authenticating user root 141.11.88.122 port 43790 [preauth] 2026-06-29T20:01:30.473426-05:00 claude-cloud sshd[332110]: Connection closed by authenticating user root 92.118.39.71 port 45764 [preauth] 2026-06-29T20:01:33.377347-05:00 claude-cloud sshd[332077]: Connection closed by authenticating user root 141.11.88.121 port 59590 [preauth] 2026-06-29T20:01:45.216841-05:00 claude-cloud sshd[332164]: Connection closed by 203.121.106.56 port 56646 [preauth] 2026-06-29T20:01:48.427363-05:00 claude-cloud sshd[332100]: Connection reset by 141.11.88.122 port 47004 [preauth] 2026-06-29T20:02:01.242807-05:00 claude-cloud sshd[332125]: Connection reset by 141.11.88.121 port 54250 [preauth] 2026-06-29T20:02:42.690730-05:00 claude-cloud sshd[332258]: Invalid user mpg from 191.97.12.90 port 54416 2026-06-29T20:02:42.866470-05:00 claude-cloud sshd[332258]: Received disconnect from 191.97.12.90 port 54416:11: Bye Bye [preauth] 2026-06-29T20:02:42.866949-05:00 claude-cloud sshd[332258]: Disconnected from invalid user mpg 191.97.12.90 port 54416 [preauth] 2026-06-29T20:02:46.486345-05:00 claude-cloud sshd[332251]: Connection closed by authenticating user root 141.11.88.122 port 47186 [preauth] 2026-06-29T20:02:46.664402-05:00 claude-cloud sshd[332264]: Invalid user nexus from 115.248.8.65 port 43022 2026-06-29T20:02:47.068242-05:00 claude-cloud sshd[332264]: Connection closed by invalid user nexus 115.248.8.65 port 43022 [preauth] 2026-06-29T20:02:47.930472-05:00 claude-cloud sshd[332260]: Connection closed by authenticating user root 141.11.88.121 port 50304 [preauth] 2026-06-29T20:02:52.709097-05:00 claude-cloud sshd[332268]: Connection closed by authenticating user root 141.11.88.121 port 58752 [preauth] 2026-06-29T20:02:53.356306-05:00 claude-cloud sshd[332256]: Connection closed by authenticating user root 27.71.230.31 port 42446 [preauth] 2026-06-29T20:02:59.389134-05:00 claude-cloud sshd[332283]: Connection closed by authenticating user root 141.11.88.121 port 35668 [preauth] 2026-06-29T20:03:05.078415-05:00 claude-cloud sshd[332299]: Connection closed by authenticating user root 141.11.88.121 port 54298 [preauth] 2026-06-29T20:03:06.569035-05:00 claude-cloud sshd[332267]: Connection closed by authenticating user root 141.11.88.122 port 37042 [preauth] 2026-06-29T20:03:12.742031-05:00 claude-cloud sshd[332313]: Connection closed by authenticating user root 141.11.88.121 port 38198 [preauth] 2026-06-29T20:03:13.181393-05:00 claude-cloud sshd[332321]: Invalid user admin from 2.57.121.25 port 23092 2026-06-29T20:03:13.208804-05:00 claude-cloud sshd[332321]: Connection closed by invalid user admin 2.57.121.25 port 23092 [preauth] 2026-06-29T20:03:15.448708-05:00 claude-cloud sshd[332326]: Connection closed by authenticating user root 92.118.39.71 port 48678 [preauth] 2026-06-29T20:03:20.170038-05:00 claude-cloud sshd[332320]: Connection closed by authenticating user root 141.11.88.121 port 35954 [preauth] 2026-06-29T20:03:23.613209-05:00 claude-cloud sshd[332343]: Invalid user test from 45.148.10.121 port 46026 2026-06-29T20:03:23.629177-05:00 claude-cloud sshd[332343]: Connection closed by invalid user test 45.148.10.121 port 46026 [preauth] 2026-06-29T20:03:29.098821-05:00 claude-cloud sshd[332315]: Connection closed by authenticating user root 141.11.88.122 port 56588 [preauth] 2026-06-29T20:03:30.015221-05:00 claude-cloud sshd[332332]: Connection closed by authenticating user root 141.11.88.121 port 60366 [preauth] 2026-06-29T20:03:39.027729-05:00 claude-cloud sshd[332358]: Connection closed by authenticating user root 141.11.88.121 port 46468 [preauth] 2026-06-29T20:03:51.567018-05:00 claude-cloud sshd[332373]: Connection closed by authenticating user root 141.11.88.121 port 54412 [preauth] 2026-06-29T20:04:00.113505-05:00 claude-cloud sshd[332419]: Connection closed by authenticating user root 45.198.224.46 port 53020 [preauth] 2026-06-29T20:04:06.180249-05:00 claude-cloud sshd[332402]: Connection closed by authenticating user root 141.11.88.121 port 56024 [preauth] 2026-06-29T20:04:06.217831-05:00 claude-cloud sshd[332357]: Connection closed by authenticating user root 141.11.88.122 port 57140 [preauth] 2026-06-29T20:04:11.142756-05:00 claude-cloud sshd[332456]: error: kex_exchange_identification: read: Connection reset by peer 2026-06-29T20:04:11.143509-05:00 claude-cloud sshd[332456]: Connection reset by 141.11.88.122 port 37464 2026-06-29T20:04:24.675268-05:00 claude-cloud sshd[332455]: Connection closed by authenticating user root 141.11.88.121 port 47386 [preauth] 2026-06-29T20:04:30.722195-05:00 claude-cloud sshd[332504]: Invalid user pje from 191.97.12.90 port 57978 2026-06-29T20:04:30.904522-05:00 claude-cloud sshd[332504]: Received disconnect from 191.97.12.90 port 57978:11: Bye Bye [preauth] 2026-06-29T20:04:30.904945-05:00 claude-cloud sshd[332504]: Disconnected from invalid user pje 191.97.12.90 port 57978 [preauth] 2026-06-29T20:04:45.806781-05:00 claude-cloud sshd[332481]: Connection closed by authenticating user root 141.11.88.121 port 60718 [preauth] 2026-06-29T20:04:47.565933-05:00 claude-cloud sshd[332519]: Connection closed by authenticating user root 193.46.255.86 port 50774 [preauth] 2026-06-29T20:04:57.949053-05:00 claude-cloud sshd[332542]: Connection closed by authenticating user root 92.118.39.71 port 51604 [preauth] 2026-06-29T20:05:01.272705-05:00 claude-cloud CRON[332554]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-29T20:05:01.280359-05:00 claude-cloud CRON[332554]: pam_unix(cron:session): session closed for user root 2026-06-29T20:05:10.205409-05:00 claude-cloud sshd[332518]: Connection closed by authenticating user root 141.11.88.121 port 60426 [preauth] 2026-06-29T20:05:10.305791-05:00 claude-cloud sshd[332535]: Connection closed by authenticating user root 141.11.88.122 port 54920 [preauth] 2026-06-29T20:05:32.454025-05:00 claude-cloud sshd[332561]: Connection closed by authenticating user root 141.11.88.122 port 44446 [preauth] 2026-06-29T20:05:34.955814-05:00 claude-cloud sshd[332560]: Connection reset by authenticating user root 141.11.88.121 port 46442 [preauth] 2026-06-29T20:05:57.799458-05:00 claude-cloud sshd[332647]: Invalid user user from 118.194.249.186 port 57008 2026-06-29T20:05:58.085366-05:00 claude-cloud sshd[332647]: Connection closed by invalid user user 118.194.249.186 port 57008 [preauth] 2026-06-29T20:05:59.560364-05:00 claude-cloud sshd[332655]: Invalid user user from 118.194.249.186 port 38284 2026-06-29T20:05:59.851126-05:00 claude-cloud sshd[332655]: Connection closed by invalid user user 118.194.249.186 port 38284 [preauth] 2026-06-29T20:06:01.324185-05:00 claude-cloud sshd[332657]: Invalid user user from 118.194.249.186 port 45214 2026-06-29T20:06:01.612045-05:00 claude-cloud sshd[332657]: Connection closed by invalid user user 118.194.249.186 port 45214 [preauth] 2026-06-29T20:06:03.087217-05:00 claude-cloud sshd[332671]: Invalid user user from 118.194.249.186 port 46428 2026-06-29T20:06:03.375492-05:00 claude-cloud sshd[332671]: Connection closed by invalid user user 118.194.249.186 port 46428 [preauth] 2026-06-29T20:06:04.116337-05:00 claude-cloud sshd[332603]: Connection closed by authenticating user root 141.11.88.122 port 45614 [preauth] 2026-06-29T20:06:04.842072-05:00 claude-cloud sshd[332673]: Invalid user user from 118.194.249.186 port 51850 2026-06-29T20:06:05.130843-05:00 claude-cloud sshd[332673]: Connection closed by invalid user user 118.194.249.186 port 51850 [preauth] 2026-06-29T20:06:20.067975-05:00 claude-cloud sshd[332687]: Connection closed by authenticating user root 141.11.88.121 port 49342 [preauth] 2026-06-29T20:06:21.178760-05:00 claude-cloud sshd[332694]: Invalid user anthropology from 191.97.12.90 port 55314 2026-06-29T20:06:21.346252-05:00 claude-cloud sshd[332694]: Received disconnect from 191.97.12.90 port 55314:11: Bye Bye [preauth] 2026-06-29T20:06:21.346695-05:00 claude-cloud sshd[332694]: Disconnected from invalid user anthropology 191.97.12.90 port 55314 [preauth] 2026-06-29T20:06:23.737895-05:00 claude-cloud sshd[332693]: Invalid user git from 115.248.8.65 port 33772 2026-06-29T20:06:24.265594-05:00 claude-cloud sshd[332693]: Connection closed by invalid user git 115.248.8.65 port 33772 [preauth] 2026-06-29T20:06:25.719447-05:00 claude-cloud sshd[332692]: Connection closed by authenticating user root 141.11.88.121 port 47838 [preauth] 2026-06-29T20:06:30.079716-05:00 claude-cloud sshd[332675]: Connection reset by 141.11.88.122 port 43450 [preauth] 2026-06-29T20:06:31.615415-05:00 claude-cloud sshd[332712]: Connection closed by authenticating user root 141.11.88.121 port 60562 [preauth] 2026-06-29T20:06:38.605186-05:00 claude-cloud sshd[332747]: Connection closed by authenticating user root 141.11.88.121 port 41714 [preauth] 2026-06-29T20:06:40.687850-05:00 claude-cloud sshd[332750]: Connection closed by authenticating user root 92.118.39.71 port 54526 [preauth] 2026-06-29T20:06:41.602253-05:00 claude-cloud sshd[332756]: Received disconnect from 107.172.88.206 port 44926:11: disconnected by user [preauth] 2026-06-29T20:06:41.602734-05:00 claude-cloud sshd[332756]: Disconnected from authenticating user root 107.172.88.206 port 44926 [preauth] 2026-06-29T20:06:46.667367-05:00 claude-cloud sshd[332749]: Connection closed by authenticating user root 141.11.88.121 port 37202 [preauth] 2026-06-29T20:06:56.034862-05:00 claude-cloud sshd[332761]: Connection closed by authenticating user root 141.11.88.121 port 38372 [preauth] 2026-06-29T20:07:08.403750-05:00 claude-cloud sshd[332782]: Connection closed by authenticating user root 141.11.88.121 port 49510 [preauth] 2026-06-29T20:07:20.451447-05:00 claude-cloud sshd[332802]: Connection closed by authenticating user root 141.11.88.121 port 45024 [preauth] 2026-06-29T20:07:23.660974-05:00 claude-cloud sshd[332803]: Connection closed by authenticating user root 141.11.88.122 port 55000 [preauth] 2026-06-29T20:07:34.737856-05:00 claude-cloud sshd[332815]: Connection closed by authenticating user root 141.11.88.121 port 47142 [preauth] 2026-06-29T20:07:38.934138-05:00 claude-cloud sshd[332826]: Connection closed by authenticating user root 141.11.88.122 port 38646 [preauth] 2026-06-29T20:07:53.680560-05:00 claude-cloud sshd[332864]: Connection closed by authenticating user root 141.11.88.121 port 59792 [preauth] 2026-06-29T20:07:59.348748-05:00 claude-cloud sshd[332866]: Connection closed by authenticating user root 141.11.88.122 port 52448 [preauth] 2026-06-29T20:08:10.089015-05:00 claude-cloud sshd[332902]: Connection closed by authenticating user root 141.11.88.121 port 49174 [preauth] 2026-06-29T20:08:15.569804-05:00 claude-cloud sshd[332915]: Connection closed by 66.132.172.197 port 54204 [preauth] 2026-06-29T20:08:21.746331-05:00 claude-cloud sshd[332943]: Connection closed by authenticating user root 92.118.39.71 port 57436 [preauth] 2026-06-29T20:08:27.163860-05:00 claude-cloud sshd[332935]: Connection closed by authenticating user root 141.11.88.121 port 48088 [preauth] 2026-06-29T20:08:43.490782-05:00 claude-cloud sshd[332960]: Connection closed by authenticating user root 141.11.88.121 port 56356 [preauth] 2026-06-29T20:08:49.477414-05:00 claude-cloud sshd[333002]: Received disconnect from 176.65.136.31 port 33770:11: disconnected by user [preauth] 2026-06-29T20:08:49.477772-05:00 claude-cloud sshd[333002]: Disconnected from authenticating user root 176.65.136.31 port 33770 [preauth] 2026-06-29T20:08:49.788712-05:00 claude-cloud sshd[332917]: Connection closed by authenticating user root 141.11.88.122 port 42346 [preauth] 2026-06-29T20:08:51.039970-05:00 claude-cloud sshd[333007]: error: kex_exchange_identification: read: Connection reset by peer 2026-06-29T20:08:51.040362-05:00 claude-cloud sshd[333007]: Connection reset by 141.11.88.122 port 58476 2026-06-29T20:09:06.060027-05:00 claude-cloud sshd[332995]: Connection closed by authenticating user root 27.71.230.31 port 56846 [preauth] 2026-06-29T20:09:11.648409-05:00 claude-cloud sshd[333000]: Connection reset by authenticating user root 141.11.88.121 port 33534 [preauth] 2026-06-29T20:09:44.248847-05:00 claude-cloud sshd[333078]: Connection closed by authenticating user root 141.11.88.122 port 50034 [preauth] 2026-06-29T20:09:57.136147-05:00 claude-cloud sshd[333183]: Connection closed by authenticating user root 141.11.88.121 port 44642 [preauth] 2026-06-29T20:10:03.173238-05:00 claude-cloud sshd[333199]: Connection closed by authenticating user root 141.11.88.121 port 52162 [preauth] 2026-06-29T20:10:03.442432-05:00 claude-cloud sshd[333132]: Connection closed by authenticating user root 141.11.88.122 port 36282 [preauth] 2026-06-29T20:10:05.247642-05:00 claude-cloud sshd[333215]: Connection closed by authenticating user root 92.118.39.71 port 60342 [preauth] 2026-06-29T20:10:08.165682-05:00 claude-cloud sshd[333211]: Connection closed by authenticating user root 141.11.88.121 port 38006 [preauth] 2026-06-29T20:10:09.466189-05:00 claude-cloud sshd[333218]: Invalid user es from 115.248.8.65 port 50568 2026-06-29T20:10:10.076107-05:00 claude-cloud sshd[333218]: Connection closed by invalid user es 115.248.8.65 port 50568 [preauth] 2026-06-29T20:10:15.163166-05:00 claude-cloud sshd[333221]: Connection closed by authenticating user root 141.11.88.121 port 47440 [preauth] 2026-06-29T20:10:23.395399-05:00 claude-cloud sshd[333214]: Connection closed by authenticating user root 141.11.88.122 port 46626 [preauth] 2026-06-29T20:10:23.952573-05:00 claude-cloud sshd[333229]: Connection closed by authenticating user root 141.11.88.121 port 42284 [preauth] 2026-06-29T20:10:30.951551-05:00 claude-cloud sshd[333245]: Connection closed by authenticating user root 141.11.88.121 port 46392 [preauth] 2026-06-29T20:10:33.428834-05:00 claude-cloud sshd[333243]: Connection closed by authenticating user root 141.11.88.122 port 39082 [preauth] 2026-06-29T20:10:41.858953-05:00 claude-cloud sshd[333265]: Connection closed by authenticating user root 141.11.88.121 port 42806 [preauth] 2026-06-29T20:10:52.152390-05:00 claude-cloud sshd[333277]: Connection closed by authenticating user root 141.11.88.121 port 33334 [preauth] 2026-06-29T20:11:01.535468-05:00 claude-cloud sshd[333301]: Connection closed by authenticating user root 141.11.88.121 port 46340 [preauth] 2026-06-29T20:11:04.110369-05:00 claude-cloud sshd[333273]: Connection reset by 141.11.88.122 port 54946 [preauth] 2026-06-29T20:11:16.418699-05:00 claude-cloud sshd[333333]: Connection closed by authenticating user root 141.11.88.121 port 59832 [preauth] 2026-06-29T20:11:34.478726-05:00 claude-cloud sshd[333344]: Connection closed by authenticating user root 141.11.88.121 port 53550 [preauth] 2026-06-29T20:11:49.959555-05:00 claude-cloud sshd[333382]: Connection closed by authenticating user root 141.11.88.121 port 35260 [preauth] 2026-06-29T20:11:51.328225-05:00 claude-cloud sshd[333423]: Connection closed by authenticating user root 92.118.39.71 port 35010 [preauth] 2026-06-29T20:11:55.457008-05:00 claude-cloud sshd[333434]: Received disconnect from 103.57.224.219 port 27760:11: disconnected by user [preauth] 2026-06-29T20:11:55.457491-05:00 claude-cloud sshd[333434]: Disconnected from authenticating user root 103.57.224.219 port 27760 [preauth] 2026-06-29T20:12:01.264501-05:00 claude-cloud sshd[333417]: Connection closed by authenticating user root 141.11.88.122 port 46748 [preauth] 2026-06-29T20:12:12.122087-05:00 claude-cloud sshd[333422]: Connection closed by authenticating user root 141.11.88.121 port 60314 [preauth] 2026-06-29T20:12:18.631382-05:00 claude-cloud sshd[333459]: Connection closed by authenticating user root 141.11.88.122 port 38272 [preauth] 2026-06-29T20:12:40.814020-05:00 claude-cloud sshd[333467]: Connection closed by authenticating user root 141.11.88.121 port 46704 [preauth] 2026-06-29T20:12:43.617579-05:00 claude-cloud sshd[333525]: error: kex_exchange_identification: read: Connection reset by peer 2026-06-29T20:12:43.618050-05:00 claude-cloud sshd[333525]: Connection reset by 141.11.88.121 port 55738 2026-06-29T20:12:46.736429-05:00 claude-cloud sshd[333472]: Connection closed by authenticating user root 141.11.88.122 port 40250 [preauth] 2026-06-29T20:13:18.268329-05:00 claude-cloud sshd[333529]: Connection reset by 141.11.88.122 port 57088 [preauth] 2026-06-29T20:13:23.128771-05:00 claude-cloud sshd[333577]: Connection closed by authenticating user root 45.198.224.46 port 54294 [preauth] 2026-06-29T20:13:24.875794-05:00 claude-cloud sshd[333579]: Connection closed by authenticating user root 141.11.88.121 port 33208 [preauth] 2026-06-29T20:13:30.679240-05:00 claude-cloud sshd[333602]: Connection closed by authenticating user root 141.11.88.121 port 33182 [preauth] 2026-06-29T20:13:35.359867-05:00 claude-cloud sshd[333622]: Connection closed by authenticating user root 141.11.88.121 port 46326 [preauth] 2026-06-29T20:13:40.193681-05:00 claude-cloud sshd[333630]: Connection closed by authenticating user root 141.11.88.121 port 48686 [preauth] 2026-06-29T20:13:40.537687-05:00 claude-cloud sshd[333632]: Connection closed by authenticating user root 92.118.39.71 port 37924 [preauth] 2026-06-29T20:13:48.607358-05:00 claude-cloud sshd[333637]: Connection closed by authenticating user root 141.11.88.121 port 56130 [preauth] 2026-06-29T20:13:51.252652-05:00 claude-cloud sshd[333657]: Invalid user dd from 115.248.8.65 port 55412 2026-06-29T20:13:51.636864-05:00 claude-cloud sshd[333657]: Connection closed by invalid user dd 115.248.8.65 port 55412 [preauth] 2026-06-29T20:13:57.411334-05:00 claude-cloud sshd[333658]: Connection closed by authenticating user root 141.11.88.121 port 58408 [preauth] 2026-06-29T20:14:07.270087-05:00 claude-cloud sshd[333681]: Connection closed by authenticating user root 141.11.88.121 port 34756 [preauth] 2026-06-29T20:14:09.925039-05:00 claude-cloud sshd[333680]: Connection closed by authenticating user root 141.11.88.122 port 42884 [preauth] 2026-06-29T20:14:15.562433-05:00 claude-cloud sshd[333702]: Connection closed by authenticating user root 141.11.88.121 port 47622 [preauth] 2026-06-29T20:14:27.956101-05:00 claude-cloud sshd[333712]: Connection closed by authenticating user root 141.11.88.121 port 52944 [preauth] 2026-06-29T20:14:32.334249-05:00 claude-cloud sshd[333707]: Connection closed by authenticating user root 141.11.88.122 port 54130 [preauth] 2026-06-29T20:14:41.440515-05:00 claude-cloud sshd[333744]: Connection closed by authenticating user root 141.11.88.121 port 51902 [preauth] 2026-06-29T20:14:51.671835-05:00 claude-cloud sshd[333766]: Connection closed by authenticating user root 141.11.88.122 port 58106 [preauth] 2026-06-29T20:14:58.358685-05:00 claude-cloud sshd[333772]: Connection closed by authenticating user root 141.11.88.121 port 38652 [preauth] 2026-06-29T20:15:00.889334-05:00 claude-cloud sshd[333773]: Connection closed by authenticating user root 27.71.230.31 port 60554 [preauth] 2026-06-29T20:15:01.290635-05:00 claude-cloud CRON[333816]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-29T20:15:01.297464-05:00 claude-cloud CRON[333816]: pam_unix(cron:session): session closed for user root 2026-06-29T20:15:18.980815-05:00 claude-cloud sshd[333806]: Connection closed by authenticating user root 141.11.88.121 port 41838 [preauth] 2026-06-29T20:15:28.430271-05:00 claude-cloud sshd[333785]: Connection reset by 141.11.88.122 port 60442 [preauth] 2026-06-29T20:15:29.407582-05:00 claude-cloud sshd[333873]: Connection closed by authenticating user root 92.118.39.71 port 40798 [preauth] 2026-06-29T20:15:36.727313-05:00 claude-cloud sshd[333842]: Connection closed by authenticating user root 141.11.88.121 port 34528 [preauth] 2026-06-29T20:16:09.467396-05:00 claude-cloud sshd[333887]: Connection closed by authenticating user root 141.11.88.121 port 40562 [preauth] 2026-06-29T20:16:26.968171-05:00 claude-cloud sshd[334005]: Connection reset by 141.11.88.121 port 41376 [preauth] 2026-06-29T20:16:27.070415-05:00 claude-cloud sshd[334032]: Connection closed by 161.35.47.134 port 32856 2026-06-29T20:16:31.144079-05:00 claude-cloud sshd[334006]: Connection closed by authenticating user root 141.11.88.122 port 53268 [preauth] 2026-06-29T20:16:38.496798-05:00 claude-cloud sshd[334053]: Invalid user from 176.65.139.92 port 56264 2026-06-29T20:16:46.396262-05:00 claude-cloud sshd[334053]: Connection closed by invalid user 176.65.139.92 port 56264 [preauth] 2026-06-29T20:16:49.705871-05:00 claude-cloud sshd[334039]: Connection closed by authenticating user root 141.11.88.122 port 45428 [preauth] 2026-06-29T20:17:01.304524-05:00 claude-cloud CRON[334091]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-29T20:17:01.311027-05:00 claude-cloud CRON[334091]: pam_unix(cron:session): session closed for user root 2026-06-29T20:17:14.838903-05:00 claude-cloud sshd[334103]: Connection closed by authenticating user root 141.11.88.121 port 43280 [preauth] 2026-06-29T20:17:17.777304-05:00 claude-cloud sshd[334064]: Connection closed by authenticating user root 141.11.88.122 port 50658 [preauth] 2026-06-29T20:17:18.305011-05:00 claude-cloud sshd[334113]: Connection closed by authenticating user root 92.118.39.71 port 43724 [preauth] 2026-06-29T20:17:20.637721-05:00 claude-cloud sshd[334111]: Connection closed by authenticating user root 141.11.88.121 port 54312 [preauth] 2026-06-29T20:17:27.084114-05:00 claude-cloud sshd[334119]: Connection closed by authenticating user root 141.11.88.121 port 41082 [preauth] 2026-06-29T20:17:33.478936-05:00 claude-cloud sshd[334145]: Invalid user bitrix from 115.248.8.65 port 37258 2026-06-29T20:17:33.933182-05:00 claude-cloud sshd[334145]: Connection closed by invalid user bitrix 115.248.8.65 port 37258 [preauth] 2026-06-29T20:17:34.043664-05:00 claude-cloud sshd[334137]: Connection closed by authenticating user root 141.11.88.121 port 59316 [preauth] 2026-06-29T20:17:42.880816-05:00 claude-cloud sshd[334159]: Connection closed by authenticating user root 141.11.88.121 port 52090 [preauth] 2026-06-29T20:17:48.369541-05:00 claude-cloud sshd[334115]: Connection reset by 141.11.88.122 port 35178 [preauth] 2026-06-29T20:17:53.010400-05:00 claude-cloud sshd[334184]: Connection closed by authenticating user root 141.11.88.121 port 33982 [preauth] 2026-06-29T20:18:02.413053-05:00 claude-cloud sshd[334217]: Connection closed by authenticating user root 141.11.88.121 port 44842 [preauth] 2026-06-29T20:18:02.713966-05:00 claude-cloud sshd[334241]: Invalid user user from 118.194.249.186 port 44038 2026-06-29T20:18:02.990050-05:00 claude-cloud sshd[334241]: Connection closed by invalid user user 118.194.249.186 port 44038 [preauth] 2026-06-29T20:18:04.489877-05:00 claude-cloud sshd[334247]: Invalid user user from 118.194.249.186 port 44290 2026-06-29T20:18:04.779957-05:00 claude-cloud sshd[334247]: Connection closed by invalid user user 118.194.249.186 port 44290 [preauth] 2026-06-29T20:18:06.247822-05:00 claude-cloud sshd[334250]: Invalid user user from 118.194.249.186 port 51098 2026-06-29T20:18:06.535685-05:00 claude-cloud sshd[334250]: Connection closed by invalid user user 118.194.249.186 port 51098 [preauth] 2026-06-29T20:18:08.008159-05:00 claude-cloud sshd[334252]: Invalid user user from 118.194.249.186 port 59332 2026-06-29T20:18:08.296194-05:00 claude-cloud sshd[334252]: Connection closed by invalid user user 118.194.249.186 port 59332 [preauth] 2026-06-29T20:18:09.769496-05:00 claude-cloud sshd[334254]: Invalid user user from 118.194.249.186 port 36754 2026-06-29T20:18:10.060683-05:00 claude-cloud sshd[334254]: Connection closed by invalid user user 118.194.249.186 port 36754 [preauth] 2026-06-29T20:18:14.167090-05:00 claude-cloud sshd[334246]: Connection closed by authenticating user root 141.11.88.121 port 49948 [preauth] 2026-06-29T20:18:16.306636-05:00 claude-cloud sshd[334267]: Connection closed by 117.50.195.240 port 63698 2026-06-29T20:18:28.181639-05:00 claude-cloud sshd[334266]: Connection closed by authenticating user root 141.11.88.121 port 46590 [preauth] 2026-06-29T20:18:41.932996-05:00 claude-cloud sshd[334295]: Connection closed by authenticating user root 141.11.88.122 port 44942 [preauth] 2026-06-29T20:18:49.862551-05:00 claude-cloud sshd[334288]: Connection closed by authenticating user root 141.11.88.121 port 33766 [preauth] 2026-06-29T20:18:56.666096-05:00 claude-cloud sshd[334315]: Connection closed by authenticating user root 141.11.88.122 port 42066 [preauth] 2026-06-29T20:19:05.539468-05:00 claude-cloud sshd[334323]: Connection closed by authenticating user root 141.11.88.121 port 39870 [preauth] 2026-06-29T20:19:07.232458-05:00 claude-cloud sshd[334362]: Connection closed by authenticating user root 92.118.39.71 port 46630 [preauth] 2026-06-29T20:19:13.453159-05:00 claude-cloud sshd[334361]: Connection closed by authenticating user root 141.11.88.121 port 60626 [preauth] 2026-06-29T20:19:22.966501-05:00 claude-cloud sshd[334341]: Connection closed by authenticating user root 141.11.88.122 port 54732 [preauth] 2026-06-29T20:19:31.562571-05:00 claude-cloud sshd[334375]: Connection closed by authenticating user root 141.11.88.121 port 59460 [preauth] 2026-06-29T20:19:57.280208-05:00 claude-cloud sshd[334389]: Connection closed by authenticating user root 141.11.88.122 port 53284 [preauth] 2026-06-29T20:19:59.454108-05:00 claude-cloud sshd[334418]: Connection reset by authenticating user root 141.11.88.121 port 45268 [preauth] 2026-06-29T20:20:08.356991-05:00 claude-cloud sshd[334464]: error: kex_exchange_identification: read: Connection reset by peer 2026-06-29T20:20:08.357129-05:00 claude-cloud sshd2026-06-30T00:26:34.802667-05:00 claude-cloud sshd[375414]: Invalid user gif from 165.154.235.9 port 36910 2026-06-30T00:26:34.983179-05:00 claude-cloud sshd[375414]: Received disconnect from 165.154.235.9 port 36910:11: Bye Bye [preauth] 2026-06-30T00:26:34.983423-05:00 claude-cloud sshd[375414]: Disconnected from invalid user gif 165.154.235.9 port 36910 [preauth] 2026-06-30T00:26:50.309341-05:00 claude-cloud sshd[375461]: Connection closed by 220.160.56.48 port 47292 2026-06-30T00:26:53.728418-05:00 claude-cloud sshd[375456]: Connection closed by authenticating user root 115.248.8.65 port 41146 [preauth] 2026-06-30T00:28:08.912417-05:00 claude-cloud sshd[375568]: Invalid user suspended from 165.154.235.9 port 58818 2026-06-30T00:28:09.089487-05:00 claude-cloud sshd[375568]: Received disconnect from 165.154.235.9 port 58818:11: Bye Bye [preauth] 2026-06-30T00:28:09.089680-05:00 claude-cloud sshd[375568]: Disconnected from invalid user suspended 165.154.235.9 port 58818 [preauth] 2026-06-30T00:28:44.904633-05:00 claude-cloud sshd[375591]: Connection closed by authenticating user root 27.71.230.31 port 36184 [preauth] 2026-06-30T00:29:19.991659-05:00 claude-cloud sshd[375684]: Connection closed by authenticating user root 45.198.224.46 port 60146 [preauth] 2026-06-30T00:29:41.231376-05:00 claude-cloud systemd-logind[853]: New session c5047 of user claude. 2026-06-30T00:29:41.496163-05:00 claude-cloud systemd-logind[853]: Session c5047 logged out. Waiting for processes to exit. 2026-06-30T00:29:41.498670-05:00 claude-cloud systemd-logind[853]: Removed session c5047. 2026-06-30T00:29:47.709800-05:00 claude-cloud sshd[375738]: Invalid user myspace from 165.154.235.9 port 40774 2026-06-30T00:29:47.886213-05:00 claude-cloud sshd[375738]: Received disconnect from 165.154.235.9 port 40774:11: Bye Bye [preauth] 2026-06-30T00:29:47.886524-05:00 claude-cloud sshd[375738]: Disconnected from invalid user myspace 165.154.235.9 port 40774 [preauth] 2026-06-30T00:30:42.465952-05:00 claude-cloud sshd[375810]: Connection closed by authenticating user root 115.248.8.65 port 52548 [preauth] 2026-06-30T00:30:52.130522-05:00 claude-cloud sshd[375851]: Connection closed by 161.35.47.134 port 33930 2026-06-30T00:31:26.151756-05:00 claude-cloud sshd[375895]: Invalid user classifieds from 165.154.235.9 port 33932 2026-06-30T00:31:26.339354-05:00 claude-cloud sshd[375895]: Received disconnect from 165.154.235.9 port 33932:11: Bye Bye [preauth] 2026-06-30T00:31:26.339715-05:00 claude-cloud sshd[375895]: Disconnected from invalid user classifieds 165.154.235.9 port 33932 [preauth] 2026-06-30T00:32:18.611450-05:00 claude-cloud sshd[375974]: Invalid user admin from 2.57.122.150 port 36160 2026-06-30T00:32:18.637175-05:00 claude-cloud sshd[375974]: Connection closed by invalid user admin 2.57.122.150 port 36160 [preauth] 2026-06-30T00:34:20.492567-05:00 claude-cloud sshd[376158]: Connection closed by authenticating user root 115.248.8.65 port 36766 [preauth] 2026-06-30T00:34:43.292033-05:00 claude-cloud sshd[376169]: Connection closed by authenticating user root 27.71.230.31 port 57240 [preauth] 2026-06-30T00:34:44.689442-05:00 claude-cloud systemd-logind[853]: New session c5048 of user claude. 2026-06-30T00:34:44.955805-05:00 claude-cloud systemd-logind[853]: Session c5048 logged out. Waiting for processes to exit. 2026-06-30T00:34:44.959751-05:00 claude-cloud systemd-logind[853]: Removed session c5048. 2026-06-30T00:35:01.098811-05:00 claude-cloud CRON[376246]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T00:35:01.111834-05:00 claude-cloud CRON[376246]: pam_unix(cron:session): session closed for user root 2026-06-30T00:36:46.746213-05:00 claude-cloud sshd[376475]: Connection closed by 161.35.47.134 port 57246 2026-06-30T00:38:06.427629-05:00 claude-cloud sshd[376571]: Connection closed by authenticating user root 115.248.8.65 port 56972 [preauth] 2026-06-30T00:38:31.657870-05:00 claude-cloud sshd[376615]: Connection closed by authenticating user root 45.198.224.46 port 52192 [preauth] 2026-06-30T00:39:05.073504-05:00 claude-cloud sshd[376687]: Connection closed by 203.55.131.4 port 37000 [preauth] 2026-06-30T00:39:49.275495-05:00 claude-cloud systemd-logind[853]: New session c5049 of user claude. 2026-06-30T00:39:49.555568-05:00 claude-cloud systemd-logind[853]: Session c5049 logged out. Waiting for processes to exit. 2026-06-30T00:39:49.557632-05:00 claude-cloud systemd-logind[853]: Removed session c5049. 2026-06-30T00:40:04.662872-05:00 claude-cloud systemd-logind[853]: New session c5050 of user claude. 2026-06-30T00:40:04.705019-05:00 claude-cloud systemd-logind[853]: Session c5050 logged out. Waiting for processes to exit. 2026-06-30T00:40:04.708944-05:00 claude-cloud systemd-logind[853]: Removed session c5050. 2026-06-30T00:40:26.413543-05:00 claude-cloud sshd[376825]: Connection closed by authenticating user root 27.71.230.31 port 36888 [preauth] 2026-06-30T00:40:30.180208-05:00 claude-cloud systemd-logind[853]: New session c5051 of user claude. 2026-06-30T00:40:30.211311-05:00 claude-cloud systemd-logind[853]: Session c5051 logged out. Waiting for processes to exit. 2026-06-30T00:40:30.213434-05:00 claude-cloud systemd-logind[853]: Removed session c5051. 2026-06-30T00:41:00.198157-05:00 claude-cloud systemd-logind[853]: New session c5052 of user claude. 2026-06-30T00:41:00.221555-05:00 claude-cloud systemd-logind[853]: Session c5052 logged out. Waiting for processes to exit. 2026-06-30T00:41:00.222630-05:00 claude-cloud systemd-logind[853]: Removed session c5052. 2026-06-30T00:41:27.445859-05:00 claude-cloud systemd-logind[853]: New session c5053 of user claude. 2026-06-30T00:41:52.458095-05:00 claude-cloud sshd[376998]: Connection closed by authenticating user root 115.248.8.65 port 51176 [preauth] 2026-06-30T00:42:11.638059-05:00 claude-cloud systemd-logind[853]: Session c5053 logged out. Waiting for processes to exit. 2026-06-30T00:42:11.642466-05:00 claude-cloud systemd-logind[853]: Removed session c5053. 2026-06-30T00:42:15.119120-05:00 claude-cloud systemd-logind[853]: New session c5054 of user claude. 2026-06-30T00:42:15.406695-05:00 claude-cloud systemd-logind[853]: Session c5054 logged out. Waiting for processes to exit. 2026-06-30T00:42:15.408215-05:00 claude-cloud systemd-logind[853]: Removed session c5054. 2026-06-30T00:43:17.873552-05:00 claude-cloud systemd-logind[853]: New session c5055 of user claude. 2026-06-30T00:43:21.202834-05:00 claude-cloud systemd-logind[853]: Session c5055 logged out. Waiting for processes to exit. 2026-06-30T00:43:21.204248-05:00 claude-cloud systemd-logind[853]: Removed session c5055. 2026-06-30T00:43:25.169153-05:00 claude-cloud sshd[377147]: Connection closed by 161.35.47.134 port 44872 2026-06-30T00:43:25.258527-05:00 claude-cloud sshd[377146]: Invalid user admin from 2.57.122.150 port 39138 2026-06-30T00:43:25.286696-05:00 claude-cloud sshd[377146]: Connection closed by invalid user admin 2.57.122.150 port 39138 [preauth] 2026-06-30T00:43:37.398805-05:00 claude-cloud systemd-logind[853]: New session c5056 of user claude. 2026-06-30T00:43:37.428470-05:00 claude-cloud systemd-logind[853]: Session c5056 logged out. Waiting for processes to exit. 2026-06-30T00:43:37.430686-05:00 claude-cloud systemd-logind[853]: Removed session c5056. 2026-06-30T00:44:08.973964-05:00 claude-cloud systemd-logind[853]: New session c5057 of user claude. 2026-06-30T00:44:09.006961-05:00 claude-cloud systemd-logind[853]: Session c5057 logged out. Waiting for processes to exit. 2026-06-30T00:44:09.008621-05:00 claude-cloud systemd-logind[853]: Removed session c5057. 2026-06-30T00:44:13.626573-05:00 claude-cloud systemd-logind[853]: New session c5058 of user claude. 2026-06-30T00:44:13.691772-05:00 claude-cloud systemd-logind[853]: Session c5058 logged out. Waiting for processes to exit. 2026-06-30T00:44:13.692966-05:00 claude-cloud systemd-logind[853]: Removed session c5058. 2026-06-30T00:44:13.816639-05:00 claude-cloud sshd[377251]: Accepted publickey for claude from 104.189.115.46 port 65047 ssh2: ED25519 SHA256:EaJCYdZ/laq73Y0xG2DuEon5sDeah/mZfFu2siLMOlw 2026-06-30T00:44:13.822170-05:00 claude-cloud sshd[377251]: pam_unix(sshd:session): session opened for user claude(uid=1000) by claude(uid=0) 2026-06-30T00:44:13.832176-05:00 claude-cloud systemd-logind[853]: New session 2419 of user claude. 2026-06-30T00:44:15.650563-05:00 claude-cloud sshd[377341]: Received disconnect from 104.189.115.46 port 65047:11: disconnected by user 2026-06-30T00:44:15.652056-05:00 claude-cloud sshd[377341]: Disconnected from user claude 104.189.115.46 port 65047 2026-06-30T00:44:15.653351-05:00 claude-cloud sshd[377251]: pam_unix(sshd:session): session closed for user claude 2026-06-30T00:44:15.661954-05:00 claude-cloud systemd-logind[853]: Session 2419 logged out. Waiting for processes to exit. 2026-06-30T00:44:16.472820-05:00 claude-cloud systemd-logind[853]: Removed session 2419. 2026-06-30T00:44:31.211642-05:00 claude-cloud systemd-logind[853]: New session c5059 of user claude. 2026-06-30T00:44:31.570139-05:00 claude-cloud systemd-logind[853]: Session c5059 logged out. Waiting for processes to exit. 2026-06-30T00:44:31.574662-05:00 claude-cloud systemd-logind[853]: Removed session c5059. 2026-06-30T00:44:33.717482-05:00 claude-cloud sshd[377421]: Received disconnect from 188.44.20.33 port 59984:11: disconnected by user [preauth] 2026-06-30T00:44:33.718406-05:00 claude-cloud sshd[377421]: Disconnected from authenticating user root 188.44.20.33 port 59984 [preauth] 2026-06-30T00:44:48.995196-05:00 claude-cloud systemd-logind[853]: New session c5060 of user claude. 2026-06-30T00:44:49.038762-05:00 claude-cloud systemd-logind[853]: Session c5060 logged out. Waiting for processes to exit. 2026-06-30T00:44:49.040474-05:00 claude-cloud systemd-logind[853]: Removed session c5060. 2026-06-30T00:44:51.267763-05:00 claude-cloud systemd-logind[853]: New session c5061 of user claude. 2026-06-30T00:44:51.279752-05:00 claude-cloud systemd-logind[853]: New session c5062 of user claude. 2026-06-30T00:44:51.301381-05:00 claude-cloud systemd-logind[853]: New session c5063 of user claude. 2026-06-30T00:44:51.320413-05:00 claude-cloud systemd-logind[853]: New session c5064 of user claude. 2026-06-30T00:44:53.020048-05:00 claude-cloud systemd-logind[853]: Session c5063 logged out. Waiting for processes to exit. 2026-06-30T00:44:53.023056-05:00 claude-cloud systemd-logind[853]: Session c5062 logged out. Waiting for processes to exit. 2026-06-30T00:44:53.025414-05:00 claude-cloud systemd-logind[853]: Session c5064 logged out. Waiting for processes to exit. 2026-06-30T00:44:53.028667-05:00 claude-cloud systemd-logind[853]: Removed session c5064. 2026-06-30T00:44:53.030873-05:00 claude-cloud systemd-logind[853]: Removed session c5062. 2026-06-30T00:44:53.033386-05:00 claude-cloud systemd-logind[853]: Removed session c5063. 2026-06-30T00:44:53.058760-05:00 claude-cloud systemd-logind[853]: Session c5061 logged out. Waiting for processes to exit. 2026-06-30T00:44:53.061856-05:00 claude-cloud systemd-logind[853]: Removed session c5061. 2026-06-30T00:44:58.582401-05:00 claude-cloud systemd-logind[853]: New session c5065 of user claude. 2026-06-30T00:44:58.945564-05:00 claude-cloud systemd-logind[853]: Session c5065 logged out. Waiting for processes to exit. 2026-06-30T00:44:58.947250-05:00 claude-cloud systemd-logind[853]: Removed session c5065. 2026-06-30T00:45:01.125550-05:00 claude-cloud CRON[377559]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T00:45:01.133795-05:00 claude-cloud CRON[377559]: pam_unix(cron:session): session closed for user root 2026-06-30T00:45:11.462662-05:00 claude-cloud systemd-logind[853]: New session c5066 of user claude. 2026-06-30T00:45:11.522923-05:00 claude-cloud systemd-logind[853]: Session c5066 logged out. Waiting for processes to exit. 2026-06-30T00:45:11.525417-05:00 claude-cloud systemd-logind[853]: Removed session c5066. 2026-06-30T00:45:15.952105-05:00 claude-cloud systemd-logind[853]: New session c5067 of user claude. 2026-06-30T00:45:15.969549-05:00 claude-cloud systemd-logind[853]: New session c5068 of user claude. 2026-06-30T00:45:15.995383-05:00 claude-cloud systemd-logind[853]: New session c5069 of user claude. 2026-06-30T00:45:16.009515-05:00 claude-cloud systemd-logind[853]: New session c5070 of user claude. 2026-06-30T00:45:16.013787-05:00 claude-cloud systemd-logind[853]: Session c5067 logged out. Waiting for processes to exit. 2026-06-30T00:45:16.020589-05:00 claude-cloud systemd-logind[853]: Removed session c5067. 2026-06-30T00:45:16.041643-05:00 claude-cloud sudo: claude : PWD=/home/claude ; USER=root ; COMMAND=/usr/bin/du -hxd1 /var/log 2026-06-30T00:45:16.042914-05:00 claude-cloud sudo: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) 2026-06-30T00:45:16.054017-05:00 claude-cloud sudo: pam_unix(sudo:session): session closed for user root 2026-06-30T00:45:20.388223-05:00 claude-cloud systemd-logind[853]: Session c5069 logged out. Waiting for processes to exit. 2026-06-30T00:45:20.388954-05:00 claude-cloud systemd-logind[853]: Removed session c5069. 2026-06-30T00:45:24.842055-05:00 claude-cloud systemd-logind[853]: New session c5071 of user claude. 2026-06-30T00:45:24.876154-05:00 claude-cloud systemd-logind[853]: Session c5071 logged out. Waiting for processes to exit. 2026-06-30T00:45:24.877794-05:00 claude-cloud systemd-logind[853]: Removed session c5071. 2026-06-30T00:45:28.878636-05:00 claude-cloud sshd[377778]: Connection closed by authenticating user root 115.248.8.65 port 33332 [preauth] 2026-06-30T00:45:46.042330-05:00 claude-cloud systemd-logind[853]: New session c5072 of user claude. 2026-06-30T00:45:46.072487-05:00 claude-cloud systemd-logind[853]: Session c5072 logged out. Waiting for processes to exit. 2026-06-30T00:45:46.073811-05:00 claude-cloud systemd-logind[853]: Removed session c5072. 2026-06-30T00:45:51.364858-05:00 claude-cloud systemd-logind[853]: Session c5070 logged out. Waiting for processes to exit. 2026-06-30T00:45:51.365345-05:00 claude-cloud systemd-logind[853]: Removed session c5070. 2026-06-30T00:45:51.397585-05:00 claude-cloud sudo: claude : PWD=/home/claude ; USER=root ; COMMAND=/usr/bin/du -xhd1 / 2026-06-30T00:45:51.404967-05:00 claude-cloud sudo: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) 2026-06-30T00:46:07.635020-05:00 claude-cloud sshd[378173]: Connection closed by 161.35.47.134 port 52718 2026-06-30T00:46:11.541657-05:00 claude-cloud systemd-logind[853]: New session c5073 of user claude. 2026-06-30T00:46:11.603485-05:00 claude-cloud systemd-logind[853]: Session c5073 logged out. Waiting for processes to exit. 2026-06-30T00:46:11.606239-05:00 claude-cloud systemd-logind[853]: Removed session c5073. 2026-06-30T00:46:15.621434-05:00 claude-cloud sshd[378177]: Connection closed by authenticating user root 27.71.230.31 port 33214 [preauth] 2026-06-30T00:46:21.997846-05:00 claude-cloud systemd-logind[853]: New session c5074 of user claude. 2026-06-30T00:46:22.061849-05:00 claude-cloud systemd-logind[853]: Session c5074 logged out. Waiting for processes to exit. 2026-06-30T00:46:22.065328-05:00 claude-cloud systemd-logind[853]: Removed session c5074. 2026-06-30T00:46:32.424731-05:00 claude-cloud systemd-logind[853]: New session c5075 of user claude. 2026-06-30T00:46:32.445330-05:00 claude-cloud systemd-logind[853]: New session c5076 of user claude. 2026-06-30T00:46:32.754697-05:00 claude-cloud systemd-logind[853]: Session c5076 logged out. Waiting for processes to exit. 2026-06-30T00:46:32.756131-05:00 claude-cloud systemd-logind[853]: Removed session c5076. 2026-06-30T00:46:36.730182-05:00 claude-cloud systemd-logind[853]: Session c5075 logged out. Waiting for processes to exit. 2026-06-30T00:46:36.731759-05:00 claude-cloud systemd-logind[853]: Removed session c5075. 2026-06-30T00:46:42.046027-05:00 claude-cloud sudo: pam_unix(sudo:session): session closed for user root 2026-06-30T00:46:42.067094-05:00 claude-cloud systemd-logind[853]: Session c5068 logged out. Waiting for processes to exit. 2026-06-30T00:46:42.069143-05:00 claude-cloud systemd-logind[853]: Removed session c5068. 2026-06-30T00:46:54.123760-05:00 claude-cloud systemd-logind[853]: New session c5077 of user claude. 2026-06-30T00:46:54.160890-05:00 claude-cloud systemd-logind[853]: Session c5077 logged out. Waiting for processes to exit. 2026-06-30T00:46:54.163184-05:00 claude-cloud systemd-logind[853]: Removed session c5077. 2026-06-30T00:46:57.005354-05:00 claude-cloud systemd-logind[853]: New session c5078 of user claude. 2026-06-30T00:46:57.023693-05:00 claude-cloud systemd-logind[853]: New session c5079 of user claude. 2026-06-30T00:46:57.042518-05:00 claude-cloud systemd-logind[853]: New session c5080 of user claude. 2026-06-30T00:46:57.407364-05:00 claude-cloud systemd-logind[853]: Session c5080 logged out. Waiting for processes to exit. 2026-06-30T00:46:57.409702-05:00 claude-cloud systemd-logind[853]: Removed session c5080. 2026-06-30T00:46:57.518971-05:00 claude-cloud systemd-logind[853]: Session c5079 logged out. Waiting for processes to exit. 2026-06-30T00:46:57.522161-05:00 claude-cloud systemd-logind[853]: Removed session c5079. 2026-06-30T00:46:57.909731-05:00 claude-cloud systemd-logind[853]: Session c5078 logged out. Waiting for processes to exit. 2026-06-30T00:46:57.911654-05:00 claude-cloud systemd-logind[853]: Removed session c5078. 2026-06-30T00:47:04.144480-05:00 claude-cloud systemd-logind[853]: New session c5081 of user claude. 2026-06-30T00:47:04.189700-05:00 claude-cloud systemd-logind[853]: Session c5081 logged out. Waiting for processes to exit. 2026-06-30T00:47:04.192886-05:00 claude-cloud systemd-logind[853]: Removed session c5081. 2026-06-30T00:47:18.747159-05:00 claude-cloud systemd-logind[853]: New session c5082 of user claude. 2026-06-30T00:47:18.761057-05:00 claude-cloud systemd-logind[853]: New session c5083 of user claude. 2026-06-30T00:47:19.505451-05:00 claude-cloud systemd-logind[853]: Session c5082 logged out. Waiting for processes to exit. 2026-06-30T00:47:19.506460-05:00 claude-cloud systemd-logind[853]: Removed session c5082. 2026-06-30T00:47:33.414559-05:00 claude-cloud systemd-logind[853]: Session c5083 logged out. Waiting for processes to exit. 2026-06-30T00:47:33.419556-05:00 claude-cloud systemd-logind[853]: Removed session c5083. 2026-06-30T00:47:52.637702-05:00 claude-cloud systemd-logind[853]: New session c5084 of user claude. 2026-06-30T00:47:52.664693-05:00 claude-cloud systemd-logind[853]: New session c5085 of user claude. 2026-06-30T00:47:52.679542-05:00 claude-cloud systemd-logind[853]: New session c5086 of user claude. 2026-06-30T00:47:52.727077-05:00 claude-cloud systemd-logind[853]: Session c5085 logged out. Waiting for processes to exit. 2026-06-30T00:47:52.728776-05:00 claude-cloud systemd-logind[853]: Removed session c5085. 2026-06-30T00:47:52.753567-05:00 claude-cloud systemd-logind[853]: Session c5084 logged out. Waiting for processes to exit. 2026-06-30T00:47:52.755090-05:00 claude-cloud systemd-logind[853]: Removed session c5084. 2026-06-30T00:47:52.931070-05:00 claude-cloud systemd-logind[853]: Session c5086 logged out. Waiting for processes to exit. 2026-06-30T00:47:52.932853-05:00 claude-cloud systemd-logind[853]: Removed session c5086. 2026-06-30T00:47:53.519721-05:00 claude-cloud systemd-logind[853]: New session c5087 of user claude. 2026-06-30T00:47:53.551314-05:00 claude-cloud systemd-logind[853]: Session c5087 logged out. Waiting for processes to exit. 2026-06-30T00:47:53.553989-05:00 claude-cloud systemd-logind[853]: Removed session c5087. 2026-06-30T00:47:56.782423-05:00 claude-cloud sshd[379068]: Connection closed by authenticating user root 45.198.224.46 port 60148 [preauth] 2026-06-30T00:48:03.388893-05:00 claude-cloud systemd-logind[853]: New session c5088 of user claude. 2026-06-30T00:48:03.416375-05:00 claude-cloud systemd-logind[853]: Session c5088 logged out. Waiting for processes to exit. 2026-06-30T00:48:03.418834-05:00 claude-cloud systemd-logind[853]: Removed session c5088. 2026-06-30T00:48:13.897612-05:00 claude-cloud systemd-logind[853]: New session c5089 of user claude. 2026-06-30T00:48:13.954832-05:00 claude-cloud systemd-logind[853]: New session c5090 of user claude. 2026-06-30T00:48:13.966184-05:00 claude-cloud systemd-logind[853]: New session c5091 of user claude. 2026-06-30T00:48:14.009804-05:00 claude-cloud systemd-logind[853]: Session c5091 logged out. Waiting for processes to exit. 2026-06-30T00:48:14.011797-05:00 claude-cloud systemd-logind[853]: Removed session c5091. 2026-06-30T00:48:14.350890-05:00 claude-cloud systemd-logind[853]: Session c5090 logged out. Waiting for processes to exit. 2026-06-30T00:48:14.352511-05:00 claude-cloud systemd-logind[853]: Removed session c5090. 2026-06-30T00:48:22.140979-05:00 claude-cloud systemd-logind[853]: Session c5089 logged out. Waiting for processes to exit. 2026-06-30T00:48:22.142857-05:00 claude-cloud systemd-logind[853]: Removed session c5089. 2026-06-30T00:48:23.635257-05:00 claude-cloud systemd-logind[853]: New session c5092 of user claude. 2026-06-30T00:48:23.689177-05:00 claude-cloud systemd-logind[853]: Session c5092 logged out. Waiting for processes to exit. 2026-06-30T00:48:23.691028-05:00 claude-cloud systemd-logind[853]: Removed session c5092. 2026-06-30T00:48:51.364155-05:00 claude-cloud systemd-logind[853]: New session c5093 of user claude. 2026-06-30T00:48:51.402141-05:00 claude-cloud systemd-logind[853]: New session c5094 of user claude. 2026-06-30T00:49:02.164666-05:00 claude-cloud systemd-logind[853]: Session c5094 logged out. Waiting for processes to exit. 2026-06-30T00:49:02.165551-05:00 claude-cloud systemd-logind[853]: Removed session c5094. 2026-06-30T00:49:09.521156-05:00 claude-cloud systemd-logind[853]: Session c5093 logged out. Waiting for processes to exit. 2026-06-30T00:49:09.522678-05:00 claude-cloud systemd-logind[853]: Removed session c5093. 2026-06-30T00:49:14.297251-05:00 claude-cloud systemd-logind[853]: New session c5095 of user claude. 2026-06-30T00:49:14.339952-05:00 claude-cloud systemd-logind[853]: Session c5095 logged out. Waiting for processes to exit. 2026-06-30T00:49:14.341883-05:00 claude-cloud systemd-logind[853]: Removed session c5095. 2026-06-30T00:49:16.973521-05:00 claude-cloud sshd[380259]: Connection closed by authenticating user root 115.248.8.65 port 45316 [preauth] 2026-06-30T00:50:02.188320-05:00 claude-cloud systemd-logind[853]: New session c5096 of user claude. 2026-06-30T00:50:02.784141-05:00 claude-cloud systemd-logind[853]: Session c5096 logged out. Waiting for processes to exit. 2026-06-30T00:50:02.785476-05:00 claude-cloud systemd-logind[853]: Removed session c5096. 2026-06-30T00:50:15.243661-05:00 claude-cloud systemd-logind[853]: New session c5097 of user claude. 2026-06-30T00:50:15.295485-05:00 claude-cloud systemd-logind[853]: Session c5097 logged out. Waiting for processes to exit. 2026-06-30T00:50:15.296090-05:00 claude-cloud systemd-logind[853]: Removed session c5097. 2026-06-30T00:50:34.528624-05:00 claude-cloud sshd[380909]: Connection closed by 161.35.47.134 port 42860 2026-06-30T00:50:37.906188-05:00 claude-cloud systemd-logind[853]: New session c5098 of user claude. 2026-06-30T00:50:37.945707-05:00 claude-cloud systemd-logind[853]: Session c5098 logged out. Waiting for processes to exit. 2026-06-30T00:50:37.947058-05:00 claude-cloud systemd-logind[853]: Removed session c5098. 2026-06-30T00:50:50.492214-05:00 claude-cloud systemd-logind[853]: New session c5099 of user claude. 2026-06-30T00:50:50.531715-05:00 claude-cloud systemd-logind[853]: Session c5099 logged out. Waiting for processes to exit. 2026-06-30T00:50:50.533834-05:00 claude-cloud systemd-logind[853]: Removed session c5099. 2026-06-30T00:51:00.996317-05:00 claude-cloud systemd-logind[853]: New session c5100 of user claude. 2026-06-30T00:51:01.338870-05:00 claude-cloud systemd-logind[853]: Session c5100 logged out. Waiting for processes to exit. 2026-06-30T00:51:01.345062-05:00 claude-cloud systemd-logind[853]: Removed session c5100. 2026-06-30T00:51:08.940408-05:00 claude-cloud systemd-logind[853]: New session c5101 of user claude. 2026-06-30T00:51:08.964100-05:00 claude-cloud systemd-logind[853]: Session c5101 logged out. Waiting for processes to exit. 2026-06-30T00:51:08.965945-05:00 claude-cloud systemd-logind[853]: Removed session c5101. 2026-06-30T00:51:12.955884-05:00 claude-cloud systemd-logind[853]: New session c5102 of user claude. 2026-06-30T00:51:12.997251-05:00 claude-cloud systemd-logind[853]: Session c5102 logged out. Waiting for processes to exit. 2026-06-30T00:51:12.998726-05:00 claude-cloud systemd-logind[853]: Removed session c5102. 2026-06-30T00:51:18.646548-05:00 claude-cloud systemd-logind[853]: New session c5103 of user claude. 2026-06-30T00:51:18.683712-05:00 claude-cloud systemd-logind[853]: Session c5103 logged out. Waiting for processes to exit. 2026-06-30T00:51:18.690521-05:00 claude-cloud systemd-logind[853]: Removed session c5103. 2026-06-30T00:51:25.950046-05:00 claude-cloud systemd-logind[853]: New session c5104 of user claude. 2026-06-30T00:51:25.975493-05:00 claude-cloud systemd-logind[853]: New session c5105 of user claude. 2026-06-30T00:51:26.013948-05:00 claude-cloud systemd-logind[853]: Session c5105 logged out. Waiting for processes to exit. 2026-06-30T00:51:26.015511-05:00 claude-cloud systemd-logind[853]: Removed session c5105. 2026-06-30T00:51:26.318598-05:00 claude-cloud systemd-logind[853]: Session c5104 logged out. Waiting for processes to exit. 2026-06-30T00:51:26.320485-05:00 claude-cloud systemd-logind[853]: Removed session c5104. 2026-06-30T00:51:37.813183-05:00 claude-cloud sshd[381234]: Invalid user izabel from 2.57.121.112 port 38386 2026-06-30T00:51:37.839357-05:00 claude-cloud sshd[381234]: Connection closed by invalid user izabel 2.57.121.112 port 38386 [preauth] 2026-06-30T00:51:39.099972-05:00 claude-cloud systemd-logind[853]: New session c5106 of user claude. 2026-06-30T00:51:39.147795-05:00 claude-cloud systemd-logind[853]: Session c5106 logged out. Waiting for processes to exit. 2026-06-30T00:51:39.150696-05:00 claude-cloud systemd-logind[853]: Removed session c5106. 2026-06-30T00:51:57.448663-05:00 claude-cloud systemd-logind[853]: New session c5107 of user claude. 2026-06-30T00:51:58.215727-05:00 claude-cloud systemd-logind[853]: Session c5107 logged out. Waiting for processes to exit. 2026-06-30T00:51:58.218355-05:00 claude-cloud systemd-logind[853]: Removed session c5107. 2026-06-30T00:52:21.529797-05:00 claude-cloud systemd-logind[853]: New session c5108 of user claude. 2026-06-30T00:52:21.548904-05:00 claude-cloud systemd-logind[853]: New session c5109 of user claude. 2026-06-30T00:52:21.571256-05:00 claude-cloud systemd-logind[853]: New session c5110 of user claude. 2026-06-30T00:52:21.756802-05:00 claude-cloud systemd-logind[853]: Session c5108 logged out. Waiting for processes to exit. 2026-06-30T00:52:21.758773-05:00 claude-cloud systemd-logind[853]: Removed session c5108. 2026-06-30T00:52:22.146242-05:00 claude-cloud systemd-logind[853]: Session c5110 logged out. Waiting for processes to exit. 2026-06-30T00:52:22.149253-05:00 claude-cloud systemd-logind[853]: Removed session c5110. 2026-06-30T00:52:22.561998-05:00 claude-cloud systemd-logind[853]: Session c5109 logged out. Waiting for processes to exit. 2026-06-30T00:52:22.562857-05:00 claude-cloud systemd-logind[853]: Removed session c5109. 2026-06-30T00:52:27.506210-05:00 claude-cloud sshd[381539]: Connection closed by authenticating user root 27.71.230.31 port 35228 [preauth] 2026-06-30T00:52:57.696045-05:00 claude-cloud sshd[381748]: Connection closed by authenticating user root 115.248.8.65 port 57756 [preauth] 2026-06-30T00:53:05.027842-05:00 claude-cloud systemd-logind[853]: New session c5111 of user claude. 2026-06-30T00:53:05.496419-05:00 claude-cloud systemd-logind[853]: Session c5111 logged out. Waiting for processes to exit. 2026-06-30T00:53:05.497641-05:00 claude-cloud systemd-logind[853]: Removed session c5111. 2026-06-30T00:53:34.193761-05:00 claude-cloud systemd-logind[853]: New session c5112 of user claude. 2026-06-30T00:53:34.231665-05:00 claude-cloud systemd-logind[853]: Session c5112 logged out. Waiting for processes to exit. 2026-06-30T00:53:34.233516-05:00 claude-cloud systemd-logind[853]: Removed session c5112. 2026-06-30T00:53:48.914810-05:00 claude-cloud sshd[381979]: Invalid user admin from 2.57.121.25 port 23786 2026-06-30T00:53:48.941381-05:00 claude-cloud sshd[381979]: Connection closed by invalid user admin 2.57.121.25 port 23786 [preauth] 2026-06-30T00:55:01.179017-05:00 claude-cloud CRON[382993]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T00:55:01.189405-05:00 claude-cloud CRON[382993]: pam_unix(cron:session): session closed for user root 2026-06-30T00:55:06.045824-05:00 claude-cloud systemd-logind[853]: New session c5113 of user claude. 2026-06-30T00:55:06.631068-05:00 claude-cloud systemd-logind[853]: Session c5113 logged out. Waiting for processes to exit. 2026-06-30T00:55:06.632894-05:00 claude-cloud systemd-logind[853]: Removed session c5113. 2026-06-30T00:55:09.098262-05:00 claude-cloud sshd[383081]: Invalid user admin from 2.57.122.150 port 42144 2026-06-30T00:55:09.133380-05:00 claude-cloud sshd[383081]: Connection closed by invalid user admin 2.57.122.150 port 42144 [preauth] 2026-06-30T00:56:24.905618-05:00 claude-cloud sshd[383752]: Connection closed by 144.202.92.17 port 47008 [preauth] 2026-06-30T00:56:43.623948-05:00 claude-cloud sshd[383902]: Connection closed by authenticating user root 115.248.8.65 port 34880 [preauth] 2026-06-30T00:57:12.692846-05:00 claude-cloud sshd[384206]: Connection closed by authenticating user root 45.198.224.46 port 57384 [preauth] 2026-06-30T00:58:08.933379-05:00 claude-cloud sshd[385151]: Connection closed by 203.121.106.56 port 39862 [preauth] 2026-06-30T00:58:17.487440-05:00 claude-cloud sshd[385017]: Connection closed by authenticating user root 27.71.230.31 port 51444 [preauth] 2026-06-30T00:59:15.968188-05:00 claude-cloud systemd-logind[853]: New session c5114 of user claude. 2026-06-30T00:59:16.013906-05:00 claude-cloud systemd-logind[853]: Session c5114 logged out. Waiting for processes to exit. 2026-06-30T00:59:16.015998-05:00 claude-cloud systemd-logind[853]: Removed session c5114. 2026-06-30T01:00:10.391907-05:00 claude-cloud systemd-logind[853]: New session c5115 of user claude. 2026-06-30T01:00:10.984145-05:00 claude-cloud systemd-logind[853]: Session c5115 logged out. Waiting for processes to exit. 2026-06-30T01:00:10.986301-05:00 claude-cloud systemd-logind[853]: Removed session c5115. 2026-06-30T01:00:13.399985-05:00 claude-cloud sshd[386775]: Received disconnect from 23.94.23.226 port 41280:11: disconnected by user [preauth] 2026-06-30T01:00:13.400630-05:00 claude-cloud sshd[386775]: Disconnected from authenticating user root 23.94.23.226 port 41280 [preauth] 2026-06-30T01:00:27.814959-05:00 claude-cloud sshd[386835]: Connection closed by authenticating user root 115.248.8.65 port 34682 [preauth] 2026-06-30T01:02:00.852009-05:00 claude-cloud sshd[388631]: error: kex_exchange_identification: read: Connection reset by peer 2026-06-30T01:02:00.855463-05:00 claude-cloud sshd[388631]: Connection reset by 135.232.216.67 port 61440 2026-06-30T01:03:04.725487-05:00 claude-cloud systemd-logind[853]: New session c5116 of user claude. 2026-06-30T01:03:04.743906-05:00 claude-cloud systemd-logind[853]: New session c5117 of user claude. 2026-06-30T01:03:04.757225-05:00 claude-cloud systemd-logind[853]: New session c5118 of user claude. 2026-06-30T01:03:04.772371-05:00 claude-cloud systemd-logind[853]: New session c5119 of user claude. 2026-06-30T01:03:04.930627-05:00 claude-cloud systemd-logind[853]: Session c5116 logged out. Waiting for processes to exit. 2026-06-30T01:03:04.936542-05:00 claude-cloud systemd-logind[853]: Removed session c5116. 2026-06-30T01:03:05.095642-05:00 claude-cloud systemd-logind[853]: Session c5119 logged out. Waiting for processes to exit. 2026-06-30T01:03:05.097592-05:00 claude-cloud systemd-logind[853]: Removed session c5119. 2026-06-30T01:03:05.283970-05:00 claude-cloud systemd-logind[853]: Session c5118 logged out. Waiting for processes to exit. 2026-06-30T01:03:05.286722-05:00 claude-cloud systemd-logind[853]: Removed session c5118. 2026-06-30T01:03:42.339020-05:00 claude-cloud systemd-logind[853]: New session c5120 of user claude. 2026-06-30T01:03:42.354564-05:00 claude-cloud systemd-logind[853]: New session c5121 of user claude. 2026-06-30T01:03:42.362447-05:00 claude-cloud systemd-logind[853]: New session c5122 of user claude. 2026-06-30T01:03:42.367485-05:00 claude-cloud systemd-logind[853]: New session c5123 of user claude. 2026-06-30T01:03:42.394190-05:00 claude-cloud systemd-logind[853]: Session c5120 logged out. Waiting for processes to exit. 2026-06-30T01:03:42.397331-05:00 claude-cloud systemd-logind[853]: Removed session c5120. 2026-06-30T01:03:42.528677-05:00 claude-cloud systemd-logind[853]: Session c5123 logged out. Waiting for processes to exit. 2026-06-30T01:03:42.530186-05:00 claude-cloud systemd-logind[853]: Removed session c5123. 2026-06-30T01:03:42.706838-05:00 claude-cloud systemd-logind[853]: Session c5121 logged out. Waiting for processes to exit. 2026-06-30T01:03:42.708897-05:00 claude-cloud systemd-logind[853]: Removed session c5121. 2026-06-30T01:03:42.869765-05:00 claude-cloud systemd-logind[853]: Session c5122 logged out. Waiting for processes to exit. 2026-06-30T01:03:42.871987-05:00 claude-cloud systemd-logind[853]: Removed session c5122. 2026-06-30T01:03:52.095880-05:00 claude-cloud sshd[390381]: Received disconnect from 192.250.227.24 port 38084:11: disconnected by user [preauth] 2026-06-30T01:03:52.096339-05:00 claude-cloud sshd[390381]: Disconnected from authenticating user root 192.250.227.24 port 38084 [preauth] 2026-06-30T01:03:55.969151-05:00 claude-cloud sshd[390395]: Connection closed by 111.70.1.128 port 41680 2026-06-30T01:04:06.767826-05:00 claude-cloud sshd[390407]: Connection closed by authenticating user root 115.248.8.65 port 35554 [preauth] 2026-06-30T01:04:26.802057-05:00 claude-cloud systemd-logind[853]: New session c5124 of user claude. 2026-06-30T01:04:26.858635-05:00 claude-cloud systemd-logind[853]: Session c5124 logged out. Waiting for processes to exit. 2026-06-30T01:04:26.860636-05:00 claude-cloud systemd-logind[853]: Removed session c5124. 2026-06-30T01:04:28.322935-05:00 claude-cloud sshd[390383]: Connection closed by authenticating user root 27.71.230.31 port 60696 [preauth] 2026-06-30T01:04:48.103765-05:00 claude-cloud systemd-logind[853]: New session c5125 of user claude. 2026-06-30T01:04:48.121399-05:00 claude-cloud systemd-logind[853]: New session c5126 of user claude. 2026-06-30T01:04:48.622962-05:00 claude-cloud systemd-logind[853]: New session c5127 of user claude. 2026-06-30T01:04:48.646692-05:00 claude-cloud systemd-logind[853]: Session c5126 logged out. Waiting for processes to exit. 2026-06-30T01:04:48.647968-05:00 claude-cloud systemd-logind[853]: Removed session c5126. 2026-06-30T01:04:48.706804-05:00 claude-cloud systemd-logind[853]: Session c5127 logged out. Waiting for processes to exit. 2026-06-30T01:04:48.708135-05:00 claude-cloud systemd-logind[853]: Removed session c5127. 2026-06-30T01:04:49.660141-05:00 claude-cloud systemd-logind[853]: Session c5125 logged out. Waiting for processes to exit. 2026-06-30T01:04:49.664413-05:00 claude-cloud systemd-logind[853]: Removed session c5125. 2026-06-30T01:05:01.206037-05:00 claude-cloud CRON[390627]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T01:05:01.211894-05:00 claude-cloud CRON[390627]: pam_unix(cron:session): session closed for user root 2026-06-30T01:05:14.354991-05:00 claude-cloud systemd-logind[853]: New session c5128 of user claude. 2026-06-30T01:05:14.868039-05:00 claude-cloud systemd-logind[853]: Session c5128 logged out. Waiting for processes to exit. 2026-06-30T01:05:14.872470-05:00 claude-cloud systemd-logind[853]: Removed session c5128. 2026-06-30T01:05:54.340463-05:00 claude-cloud systemd-logind[853]: Session c5117 logged out. Waiting for processes to exit. 2026-06-30T01:05:54.342074-05:00 claude-cloud systemd-logind[853]: Removed session c5117. 2026-06-30T01:06:17.636007-05:00 claude-cloud sshd[390874]: Invalid user admin from 2.57.122.150 port 45166 2026-06-30T01:06:17.664800-05:00 claude-cloud sshd[390874]: Connection closed by invalid user admin 2.57.122.150 port 45166 [preauth] 2026-06-30T01:06:32.650132-05:00 claude-cloud sshd[390908]: Connection closed by authenticating user root 45.198.224.46 port 49294 [preauth] 2026-06-30T01:07:43.642522-05:00 claude-cloud systemd-logind[853]: New session c5129 of user claude. 2026-06-30T01:07:45.865438-05:00 claude-cloud systemd-logind[853]: Session c5129 logged out. Waiting for processes to exit. 2026-06-30T01:07:45.868670-05:00 claude-cloud systemd-logind[853]: Removed session c5129. 2026-06-30T01:07:47.833938-05:00 claude-cloud sshd[391216]: Connection closed by 161.35.47.134 port 40084 2026-06-30T01:07:54.179779-05:00 claude-cloud sshd[391220]: Connection closed by authenticating user root 115.248.8.65 port 51546 [preauth] 2026-06-30T01:07:54.370567-05:00 claude-cloud systemd-logind[853]: New session c5130 of user claude. 2026-06-30T01:07:55.430675-05:00 claude-cloud systemd-logind[853]: Session c5130 logged out. Waiting for processes to exit. 2026-06-30T01:07:55.431430-05:00 claude-cloud systemd-logind[853]: Removed session c5130. 2026-06-30T01:08:04.343547-05:00 claude-cloud systemd-logind[853]: New session c5131 of user claude. 2026-06-30T01:08:06.934052-05:00 claude-cloud systemd-logind[853]: Session c5131 logged out. Waiting for processes to exit. 2026-06-30T01:08:06.935724-05:00 claude-cloud systemd-logind[853]: Removed session c5131. 2026-06-30T01:08:36.424909-05:00 claude-cloud systemd-logind[853]: New session c5132 of user claude. 2026-06-30T01:08:36.526418-05:00 claude-cloud systemd-logind[853]: Session c5132 logged out. Waiting for processes to exit. 2026-06-30T01:08:36.527873-05:00 claude-cloud systemd-logind[853]: Removed session c5132. 2026-06-30T01:10:18.144041-05:00 claude-cloud systemd-logind[853]: New session c5133 of user claude. 2026-06-30T01:10:18.572770-05:00 claude-cloud systemd-logind[853]: Session c5133 logged out. Waiting for processes to exit. 2026-06-30T01:10:18.574154-05:00 claude-cloud systemd-logind[853]: Removed session c5133. 2026-06-30T01:10:19.125729-05:00 claude-cloud sshd[391802]: Connection closed by authenticating user root 27.71.230.31 port 46412 [preauth] 2026-06-30T01:11:40.253024-05:00 claude-cloud sshd[392151]: Connection closed by authenticating user root 115.248.8.65 port 54990 [preauth] 2026-06-30T01:14:37.038548-05:00 claude-cloud sshd[392698]: Invalid user wangxin5 from 185.242.3.195 port 37520 2026-06-30T01:14:37.047117-05:00 claude-cloud sshd[392698]: Connection closed by invalid user wangxin5 185.242.3.195 port 37520 [preauth] 2026-06-30T01:15:01.224764-05:00 claude-cloud CRON[392761]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T01:15:01.231638-05:00 claude-cloud CRON[392761]: pam_unix(cron:session): session closed for user root 2026-06-30T01:15:02.950842-05:00 claude-cloud sshd[392774]: Invalid user admin from 193.46.255.86 port 15788 2026-06-30T01:15:02.975983-05:00 claude-cloud sshd[392774]: Connection closed by invalid user admin 193.46.255.86 port 15788 [preauth] 2026-06-30T01:15:21.108232-05:00 claude-cloud sshd[392815]: Connection closed by authenticating user root 115.248.8.65 port 54972 [preauth] 2026-06-30T01:15:21.955826-05:00 claude-cloud systemd-logind[853]: New session c5134 of user claude. 2026-06-30T01:15:22.265756-05:00 claude-cloud systemd-logind[853]: Session c5134 logged out. Waiting for processes to exit. 2026-06-30T01:15:22.267791-05:00 claude-cloud systemd-logind[853]: Removed session c5134. 2026-06-30T01:15:55.083956-05:00 claude-cloud sshd[392949]: Invalid user ubuntu from 45.198.224.46 port 46802 2026-06-30T01:15:55.807915-05:00 claude-cloud sshd[392949]: Connection closed by invalid user ubuntu 45.198.224.46 port 46802 [preauth] 2026-06-30T01:16:58.853091-05:00 claude-cloud sshd[392902]: Connection closed by authenticating user root 27.71.230.31 port 50738 [preauth] 2026-06-30T01:17:01.239745-05:00 claude-cloud CRON[393137]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T01:17:01.247526-05:00 claude-cloud CRON[393137]: pam_unix(cron:session): session closed for user root 2026-06-30T01:18:26.343187-05:00 claude-cloud sshd[393516]: Invalid user admin from 2.57.122.150 port 48194 2026-06-30T01:18:26.369051-05:00 claude-cloud sshd[393516]: Connection closed by invalid user admin 2.57.122.150 port 48194 [preauth] 2026-06-30T01:19:04.352226-05:00 claude-cloud sshd[393605]: Connection closed by authenticating user root 115.248.8.65 port 55878 [preauth] 2026-06-30T01:20:25.559191-05:00 claude-cloud systemd-logind[853]: New session c5135 of user claude. 2026-06-30T01:20:25.854562-05:00 claude-cloud systemd-logind[853]: Session c5135 logged out. Waiting for processes to exit. 2026-06-30T01:20:25.856725-05:00 claude-cloud systemd-logind[853]: Removed session c5135. 2026-06-30T01:21:45.246933-05:00 claude-cloud sshd[394071]: Connection closed by authenticating user root 27.71.230.31 port 54192 [preauth] 2026-06-30T01:22:53.058675-05:00 claude-cloud sshd[394299]: Connection closed by authenticating user root 115.248.8.65 port 45732 [preauth] 2026-06-30T01:24:58.177484-05:00 claude-cloud sshd[394686]: Invalid user test3 from 45.198.224.46 port 33194 2026-06-30T01:24:58.785378-05:00 claude-cloud sshd[394686]: Connection closed by invalid user test3 45.198.224.46 port 33194 [preauth] 2026-06-30T01:25:01.260056-05:00 claude-cloud CRON[394701]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T01:25:01.265323-05:00 claude-cloud CRON[394701]: pam_unix(cron:session): session closed for user root 2026-06-30T01:25:29.201581-05:00 claude-cloud systemd-logind[853]: New session c5136 of user claude. 2026-06-30T01:25:29.527576-05:00 claude-cloud systemd-logind[853]: Session c5136 logged out. Waiting for processes to exit. 2026-06-30T01:25:29.529566-05:00 claude-cloud systemd-logind[853]: Removed session c5136. 2026-06-30T01:26:32.034491-05:00 claude-cloud sshd[394961]: Connection closed by authenticating user root 115.248.8.65 port 38280 [preauth] 2026-06-30T01:27:39.622864-05:00 claude-cloud sshd[395138]: Connection closed by authenticating user root 27.71.230.31 port 36092 [preauth] 2026-06-30T01:29:49.826706-05:00 claude-cloud sshd[395633]: Connection closed by 161.35.47.134 port 40290 2026-06-30T01:30:17.888429-05:00 claude-cloud sshd[395688]: Connection closed by authenticating user root 115.248.8.65 port 40132 [preauth] 2026-06-30T01:30:32.803624-05:00 claude-cloud systemd-logind[853]: New session c5137 of user claude. 2026-06-30T01:30:33.144551-05:00 claude-cloud systemd-logind[853]: Session c5137 logged out. Waiting for processes to exit. 2026-06-30T01:30:33.146914-05:00 claude-cloud systemd-logind[853]: Removed session c5137. 2026-06-30T01:32:49.980902-05:00 claude-cloud sshd[396173]: Received disconnect from 80.211.131.36 port 43760:11: Bye Bye [preauth] 2026-06-30T01:32:49.981802-05:00 claude-cloud sshd[396173]: Disconnected from authenticating user root 80.211.131.36 port 43760 [preauth] 2026-06-30T01:33:34.905570-05:00 claude-cloud sshd[396265]: Connection closed by authenticating user root 27.71.230.31 port 44144 [preauth] 2026-06-30T01:33:57.254896-05:00 claude-cloud sshd[396351]: userauth_pubkey: signature algorithm ssh-dss not in PubkeyAcceptedAlgorithms [preauth] 2026-06-30T01:33:57.612796-05:00 claude-cloud sshd[396351]: Received disconnect from 86.111.176.100 port 55018:11: disconnected by user [preauth] 2026-06-30T01:33:57.612953-05:00 claude-cloud sshd[396351]: Disconnected from authenticating user root 86.111.176.100 port 55018 [preauth] 2026-06-30T01:34:05.362241-05:00 claude-cloud sshd[396377]: Connection closed by authenticating user root 115.248.8.65 port 35650 [preauth] 2026-06-30T01:34:06.973310-05:00 claude-cloud sshd[396385]: Connection closed by authenticating user root 45.198.224.46 port 44550 [preauth] 2026-06-30T01:35:01.275908-05:00 claude-cloud CRON[396566]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T01:35:01.283217-05:00 claude-cloud CRON[396566]: pam_unix(cron:session): session closed for user root 2026-06-30T01:35:18.468628-05:00 claude-cloud sshd[396619]: Connection closed by 161.35.47.134 port 52470 2026-06-30T01:35:36.377222-05:00 claude-cloud systemd-logind[853]: New session c5138 of user claude. 2026-06-30T01:35:36.718588-05:00 claude-cloud systemd-logind[853]: Session c5138 logged out. Waiting for processes to exit. 2026-06-30T01:35:36.720070-05:00 claude-cloud systemd-logind[853]: Removed session c5138. 2026-06-30T01:36:03.231862-05:00 claude-cloud sshd[396752]: Received disconnect from 206.189.51.81 port 54512:11: Bye Bye [preauth] 2026-06-30T01:36:03.235380-05:00 claude-cloud sshd[396752]: Disconnected from authenticating user root 206.189.51.81 port 54512 [preauth] 2026-06-30T01:37:43.011773-05:00 claude-cloud sshd[397038]: Connection closed by authenticating user root 115.248.8.65 port 38580 [preauth] 2026-06-30T01:39:42.466208-05:00 claude-cloud sshd[397474]: Received disconnect from 80.211.131.36 port 40268:11: Bye Bye [preauth] 2026-06-30T01:39:42.467127-05:00 claude-cloud sshd[397474]: Disconnected from authenticating user root 80.211.131.36 port 40268 [preauth] 2026-06-30T01:39:57.052399-05:00 claude-cloud sshd[397391]: Connection closed by authenticating user root 27.71.230.31 port 46238 [preauth] 2026-06-30T01:40:40.044369-05:00 claude-cloud systemd-logind[853]: New session c5139 of user claude. 2026-06-30T01:40:40.335471-05:00 claude-cloud systemd-logind[853]: Session c5139 logged out. Waiting for processes to exit. 2026-06-30T01:40:40.337596-05:00 claude-cloud systemd-logind[853]: Removed session c5139. 2026-06-30T01:41:26.640422-05:00 claude-cloud sshd[397799]: Connection closed by authenticating user root 115.248.8.65 port 54366 [preauth] 2026-06-30T01:41:38.412518-05:00 claude-cloud sshd[397847]: Received disconnect from 80.211.131.36 port 44184:11: Bye Bye [preauth] 2026-06-30T01:41:38.412919-05:00 claude-cloud sshd[397847]: Disconnected from authenticating user root 80.211.131.36 port 44184 [preauth] 2026-06-30T01:41:53.051441-05:00 claude-cloud sshd[397886]: Received disconnect from 206.189.51.81 port 49630:11: Bye Bye [preauth] 2026-06-30T01:41:53.052048-05:00 claude-cloud sshd[397886]: Disconnected from authenticating user root 206.189.51.81 port 49630 [preauth] 2026-06-30T01:43:29.939515-05:00 claude-cloud sshd[398158]: Received disconnect from 80.211.131.36 port 60372:11: Bye Bye [preauth] 2026-06-30T01:43:29.940157-05:00 claude-cloud sshd[398158]: Disconnected from authenticating user root 80.211.131.36 port 60372 [preauth] 2026-06-30T01:43:43.015316-05:00 claude-cloud sshd[398206]: Connection closed by authenticating user root 45.198.224.46 port 46276 [preauth] 2026-06-30T01:45:01.294681-05:00 claude-cloud CRON[398444]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T01:45:01.300146-05:00 claude-cloud CRON[398444]: pam_unix(cron:session): session closed for user root 2026-06-30T01:45:05.904415-05:00 claude-cloud sshd[398443]: Connection closed by authenticating user root 115.248.8.65 port 40338 [preauth] 2026-06-30T01:45:25.719009-05:00 claude-cloud sshd[398499]: Received disconnect from 80.211.131.36 port 48754:11: Bye Bye [preauth] 2026-06-30T01:45:25.719444-05:00 claude-cloud sshd[398499]: Disconnected from authenticating user root 80.211.131.36 port 48754 [preauth] 2026-06-30T01:45:36.953878-05:00 claude-cloud sshd[398539]: Received disconnect from 206.189.51.81 port 35644:11: Bye Bye [preauth] 2026-06-30T01:45:36.954142-05:00 claude-cloud sshd[398539]: Disconnected from authenticating user root 206.189.51.81 port 35644 [preauth] 2026-06-30T01:45:43.521160-05:00 claude-cloud systemd-logind[853]: New session c5140 of user claude. 2026-06-30T01:45:43.791447-05:00 claude-cloud systemd-logind[853]: Session c5140 logged out. Waiting for processes to exit. 2026-06-30T01:45:43.793261-05:00 claude-cloud systemd-logind[853]: Removed session c5140. 2026-06-30T01:46:10.541456-05:00 claude-cloud sshd[398622]: Connection closed by authenticating user root 27.71.230.31 port 51686 [preauth] 2026-06-30T01:47:19.341550-05:00 claude-cloud sshd[398854]: Received disconnect from 80.211.131.36 port 51542:11: Bye Bye [preauth] 2026-06-30T01:47:19.342191-05:00 claude-cloud sshd[398854]: Disconnected from authenticating user root 80.211.131.36 port 51542 [preauth] 2026-06-30T01:48:50.392109-05:00 claude-cloud sshd[399188]: Connection closed by authenticating user root 115.248.8.65 port 57636 [preauth] 2026-06-30T01:49:06.486905-05:00 claude-cloud sshd[399245]: Received disconnect from 80.211.131.36 port 51408:11: Bye Bye [preauth] 2026-06-30T01:49:06.487205-05:00 claude-cloud sshd[399245]: Disconnected from authenticating user root 80.211.131.36 port 51408 [preauth] 2026-06-30T01:50:46.982845-05:00 claude-cloud systemd-logind[853]: New session c5141 of user claude. 2026-06-30T01:50:47.274890-05:00 claude-cloud systemd-logind[853]: Session c5141 logged out. Waiting for processes to exit. 2026-06-30T01:50:47.278192-05:00 claude-cloud systemd-logind[853]: Removed session c5141. 2026-06-30T01:50:54.479483-05:00 claude-cloud sshd[399588]: Received disconnect from 80.211.131.36 port 59104:11: Bye Bye [preauth] 2026-06-30T01:50:54.479853-05:00 claude-cloud sshd[399588]: Disconnected from authenticating user root 80.211.131.36 port 59104 [preauth] 2026-06-30T01:51:47.574910-05:00 claude-cloud sshd[399737]: Invalid user admin from 2.57.121.25 port 45330 2026-06-30T01:51:47.601893-05:00 claude-cloud sshd[399737]: Connection closed by invalid user admin 2.57.121.25 port 45330 [preauth] 2026-06-30T01:52:32.655033-05:00 claude-cloud sshd[399846]: Connection closed by authenticating user root 115.248.8.65 port 54284 [preauth] 2026-06-30T01:52:46.179296-05:00 claude-cloud sshd[399906]: Received disconnect from 80.211.131.36 port 40246:11: Bye Bye [preauth] 2026-06-30T01:52:46.179636-05:00 claude-cloud sshd[399906]: Disconnected from authenticating user root 80.211.131.36 port 40246 [preauth] 2026-06-30T01:53:18.838313-05:00 claude-cloud sshd[400013]: Invalid user ubuntu from 45.198.224.46 port 37974 2026-06-30T01:53:19.677124-05:00 claude-cloud sshd[400013]: Connection closed by invalid user ubuntu 45.198.224.46 port 37974 [preauth] 2026-06-30T01:53:19.864600-05:00 claude-cloud sshd[400025]: Connection closed by 195.123.210.209 port 57036 [preauth] 2026-06-30T01:53:29.582354-05:00 claude-cloud sshd[400062]: Connection closed by 31.13.213.232 port 51134 [preauth] 2026-06-30T01:53:30.512730-05:00 claude-cloud sshd[400064]: Received disconnect from 203.190.153.90 port 49982:11: Bye Bye [preauth] 2026-06-30T01:53:30.512987-05:00 claude-cloud sshd[400064]: Disconnected from authenticating user root 203.190.153.90 port 49982 [preauth] 2026-06-30T01:53:44.965134-05:00 claude-cloud sshd[400098]: Connection closed by authenticating user root 167.233.84.171 port 60288 [preauth] 2026-06-30T01:54:36.366212-05:00 claude-cloud sshd[400251]: Received disconnect from 80.211.131.36 port 41536:11: Bye Bye [preauth] 2026-06-30T01:54:36.367131-05:00 claude-cloud sshd[400251]: Disconnected from authenticating user root 80.211.131.36 port 41536 [preauth] 2026-06-30T01:54:40.739343-05:00 claude-cloud sshd[400086]: Connection closed by authenticating user root 27.71.230.31 port 50952 [preauth] 2026-06-30T01:55:01.314185-05:00 claude-cloud CRON[400340]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T01:55:01.319794-05:00 claude-cloud CRON[400340]: pam_unix(cron:session): session closed for user root 2026-06-30T01:55:50.673713-05:00 claude-cloud systemd-logind[853]: New session c5142 of user claude. 2026-06-30T01:55:50.958997-05:00 claude-cloud systemd-logind[853]: Session c5142 logged out. Waiting for processes to exit. 2026-06-30T01:55:50.961374-05:00 claude-cloud systemd-logind[853]: Removed session c5142. 2026-06-30T01:56:06.267989-05:00 claude-cloud sshd[400538]: Connection closed by authenticating user root 115.248.8.65 port 33092 [preauth] 2026-06-30T01:56:24.171563-05:00 claude-cloud sshd[400591]: Received disconnect from 80.211.131.36 port 48974:11: Bye Bye [preauth] 2026-06-30T01:56:24.171910-05:00 claude-cloud sshd[400591]: Disconnected from authenticating user root 80.211.131.36 port 48974 [preauth] 2026-06-30T01:56:26.310887-05:00 claude-cloud sshd[400595]: Received disconnect from 206.189.51.81 port 33148:11: Bye Bye [preauth] 2026-06-30T01:56:26.311137-05:00 claude-cloud sshd[400595]: Disconnected from authenticating user root 206.189.51.81 port 33148 [preauth] 2026-06-30T01:56:36.747200-05:00 claude-cloud sshd[400635]: Received disconnect from 38.242.209.160 port 42210:11: Bye Bye [preauth] 2026-06-30T01:56:36.747856-05:00 claude-cloud sshd[400635]: Disconnected from authenticating user root 38.242.209.160 port 42210 [preauth] 2026-06-30T01:56:51.679233-05:00 claude-cloud sshd[400689]: Received disconnect from 103.143.238.100 port 33514:11: Bye Bye [preauth] 2026-06-30T01:56:51.679693-05:00 claude-cloud sshd[400689]: Disconnected from authenticating user root 103.143.238.100 port 33514 [preauth] 2026-06-30T01:58:17.479561-05:00 claude-cloud sshd[400934]: Received disconnect from 80.211.131.36 port 37706:11: Bye Bye [preauth] 2026-06-30T01:58:17.480133-05:00 claude-cloud sshd[400934]: Disconnected from authenticating user root 80.211.131.36 port 37706 [preauth] 2026-06-30T01:59:51.219322-05:00 claude-cloud sshd[401265]: Connection closed by authenticating user root 115.248.8.65 port 39018 [preauth] 2026-06-30T01:59:53.681542-05:00 claude-cloud sshd[401172]: Connection closed by authenticating user root 27.71.230.31 port 45432 [preauth] 2026-06-30T02:00:04.792615-05:00 claude-cloud sshd[401341]: userauth_pubkey: signature algorithm ssh-dss not in PubkeyAcceptedAlgorithms [preauth] 2026-06-30T02:00:04.960602-05:00 claude-cloud sshd[401341]: Received disconnect from 23.94.104.251 port 43830:11: disconnected by user [preauth] 2026-06-30T02:00:04.960906-05:00 claude-cloud sshd[401341]: Disconnected from authenticating user root 23.94.104.251 port 43830 [preauth] 2026-06-30T02:00:09.123730-05:00 claude-cloud sshd[401356]: Received disconnect from 206.189.51.81 port 59418:11: Bye Bye [preauth] 2026-06-30T02:00:09.124124-05:00 claude-cloud sshd[401356]: Disconnected from authenticating user root 206.189.51.81 port 59418 [preauth] 2026-06-30T02:00:11.204434-05:00 claude-cloud sshd[401368]: Received disconnect from 80.211.131.36 port 58174:11: Bye Bye [preauth] 2026-06-30T02:00:11.204665-05:00 claude-cloud sshd[401368]: Disconnected from authenticating user root 80.211.131.36 port 58174 [preauth] 2026-06-30T02:00:54.161335-05:00 claude-cloud systemd-logind[853]: New session c5143 of user claude. 2026-06-30T02:00:54.459851-05:00 claude-cloud systemd-logind[853]: Session c5143 logged out. Waiting for processes to exit. 2026-06-30T02:00:54.462419-05:00 claude-cloud systemd-logind[853]: Removed session c5143. 2026-06-30T02:01:00.803413-05:00 claude-cloud sshd[401522]: Connection closed by 91.92.40.231 port 46146 2026-06-30T02:02:00.921391-05:00 claude-cloud sshd[401710]: Received disconnect from 80.211.131.36 port 48204:11: Bye Bye [preauth] 2026-06-30T02:02:00.921619-05:00 claude-cloud sshd[401710]: Disconnected from authenticating user root 80.211.131.36 port 48204 [preauth] 2026-06-30T02:02:26.866153-05:00 claude-cloud sshd[401733]: error: kex_exchange_identification: read: Connection reset by peer 2026-06-30T02:02:26.866615-05:00 claude-cloud sshd[401733]: Connection reset by 222.108.109.37 port 41634 2026-06-30T02:03:03.874445-05:00 claude-cloud sshd[401878]: Invalid user oracle from 45.198.224.46 port 48908 2026-06-30T02:03:04.547539-05:00 claude-cloud sshd[401878]: Connection closed by invalid user oracle 45.198.224.46 port 48908 [preauth] 2026-06-30T02:03:39.016876-05:00 claude-cloud sshd[401971]: Connection closed by authenticating user root 115.248.8.65 port 41492 [preauth] 2026-06-30T02:03:42.590679-05:00 claude-cloud sshd[401997]: Received disconnect from 206.189.51.81 port 52768:11: Bye Bye [preauth] 2026-06-30T02:03:42.591190-05:00 claude-cloud sshd[401997]: Disconnected from authenticating user root 206.189.51.81 port 52768 [preauth] 2026-06-30T02:03:51.044261-05:00 claude-cloud sshd[402031]: Received disconnect from 80.211.131.36 port 32792:11: Bye Bye [preauth] 2026-06-30T02:03:51.044855-05:00 claude-cloud sshd[402031]: Disconnected from authenticating user root 80.211.131.36 port 32792 [preauth] 2026-06-30T02:04:16.271600-05:00 claude-cloud sshd[402121]: Connection closed by authenticating user root 91.92.40.231 port 56276 [preauth] 2026-06-30T02:05:01.330405-05:00 claude-cloud CRON[402252]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T02:05:01.336074-05:00 claude-cloud CRON[402252]: pam_unix(cron:session): session closed for user root 2026-06-30T02:05:57.855065-05:00 claude-cloud systemd-logind[853]: New session c5144 of user claude. 2026-06-30T02:05:58.141579-05:00 claude-cloud systemd-logind[853]: Session c5144 logged out. Waiting for processes to exit. 2026-06-30T02:05:58.144091-05:00 claude-cloud systemd-logind[853]: Removed session c5144. 2026-06-30T02:06:12.440190-05:00 claude-cloud sshd[402467]: Received disconnect from 38.242.209.160 port 41994:11: Bye Bye [preauth] 2026-06-30T02:06:12.440817-05:00 claude-cloud sshd[402467]: Disconnected from authenticating user root 38.242.209.160 port 41994 [preauth] 2026-06-30T02:06:22.630749-05:00 claude-cloud sshd[402514]: Connection closed by authenticating user root 91.92.40.231 port 57928 [preauth] 2026-06-30T02:06:30.199567-05:00 claude-cloud sshd[402552]: Connection reset by authenticating user root 45.148.10.152 port 57596 [preauth] 2026-06-30T02:06:30.824134-05:00 claude-cloud sshd[402554]: Invalid user user from 193.46.255.86 port 48714 2026-06-30T02:06:30.849248-05:00 claude-cloud sshd[402554]: Connection closed by invalid user user 193.46.255.86 port 48714 [preauth] 2026-06-30T02:06:40.807222-05:00 claude-cloud sshd[402576]: Received disconnect from 103.143.238.100 port 58564:11: Bye Bye [preauth] 2026-06-30T02:06:40.807672-05:00 claude-cloud sshd[402576]: Disconnected from authenticating user root 103.143.238.100 port 58564 [preauth] 2026-06-30T02:06:47.718562-05:00 claude-cloud sshd[402592]: Received disconnect from 203.190.153.90 port 39580:11: Bye Bye [preauth] 2026-06-30T02:06:47.719267-05:00 claude-cloud sshd[402592]: Disconnected from authenticating user root 203.190.153.90 port 39580 [preauth] 2026-06-30T02:07:13.144382-05:00 claude-cloud sshd[402660]: banner exchange: Connection from 164.92.75.217 port 43056: invalid format 2026-06-30T02:07:13.580337-05:00 claude-cloud sshd[402661]: banner exchange: Connection from 164.92.75.217 port 43068: invalid format 2026-06-30T02:07:19.980637-05:00 claude-cloud sshd[402669]: Connection closed by authenticating user root 115.248.8.65 port 46764 [preauth] 2026-06-30T02:08:38.398357-05:00 claude-cloud sshd[402933]: Connection closed by authenticating user root 91.92.40.231 port 44334 [preauth] 2026-06-30T02:08:45.876647-05:00 claude-cloud sshd[402952]: Received disconnect from 38.242.209.160 port 55134:11: Bye Bye [preauth] 2026-06-30T02:08:45.877020-05:00 claude-cloud sshd[402952]: Disconnected from authenticating user root 38.242.209.160 port 55134 [preauth] 2026-06-30T02:08:48.170454-05:00 claude-cloud sshd[402958]: Received disconnect from 103.143.238.100 port 40648:11: Bye Bye [preauth] 2026-06-30T02:08:48.170956-05:00 claude-cloud sshd[402958]: Disconnected from authenticating user root 103.143.238.100 port 40648 [preauth] 2026-06-30T02:09:07.605883-05:00 claude-cloud sshd[403022]: Received disconnect from 203.190.153.90 port 44198:11: Bye Bye [preauth] 2026-06-30T02:09:07.606217-05:00 claude-cloud sshd[403022]: Disconnected from authenticating user root 203.190.153.90 port 44198 [preauth] 2026-06-30T02:09:19.012766-05:00 claude-cloud sshd[403046]: Invalid user jaylah from 2.57.121.112 port 58090 2026-06-30T02:09:19.038240-05:00 claude-cloud sshd[403046]: Connection closed by invalid user jaylah 2.57.121.112 port 58090 [preauth] 2026-06-30T02:10:53.619752-05:00 claude-cloud sshd[403376]: Connection closed by authenticating user root 91.92.40.231 port 57128 [preauth] 2026-06-30T02:10:58.041925-05:00 claude-cloud sshd[403422]: Received disconnect from 206.189.51.81 port 55240:11: Bye Bye [preauth] 2026-06-30T02:10:58.042669-05:00 claude-cloud sshd[403422]: Disconnected from authenticating user root 206.189.51.81 port 55240 [preauth] 2026-06-30T02:10:58.766139-05:00 claude-cloud sshd[403420]: Received disconnect from 103.143.238.100 port 50942:11: Bye Bye [preauth] 2026-06-30T02:10:58.768580-05:00 claude-cloud sshd[403420]: Disconnected from authenticating user root 103.143.238.100 port 50942 [preauth] 2026-06-30T02:11:01.327118-05:00 claude-cloud systemd-logind[853]: New session c5145 of user claude. 2026-06-30T02:11:01.609058-05:00 claude-cloud systemd-logind[853]: Session c5145 logged out. Waiting for processes to exit. 2026-06-30T02:11:01.610449-05:00 claude-cloud systemd-logind[853]: Removed session c5145. 2026-06-30T02:11:08.345690-05:00 claude-cloud sshd[403454]: Connection closed by authenticating user root 115.248.8.65 port 39328 [preauth] 2026-06-30T02:11:17.652602-05:00 claude-cloud sshd[403487]: Received disconnect from 38.242.209.160 port 40360:11: Bye Bye [preauth] 2026-06-30T02:11:17.653180-05:00 claude-cloud sshd[403487]: Disconnected from authenticating user root 38.242.209.160 port 40360 [preauth] 2026-06-30T02:11:30.586748-05:00 claude-cloud sshd[403529]: Received disconnect from 203.190.153.90 port 33764:11: Bye Bye [preauth] 2026-06-30T02:11:30.588673-05:00 claude-cloud sshd[403529]: Disconnected from authenticating user root 203.190.153.90 port 33764 [preauth] 2026-06-30T02:11:35.576173-05:00 claude-cloud sshd[403502]: Connection closed by authenticating user root 27.71.230.31 port 39026 [preauth] 2026-06-30T02:12:43.217023-05:00 claude-cloud sshd[403724]: Invalid user ubuntu from 45.198.224.46 port 58276 2026-06-30T02:12:43.881227-05:00 claude-cloud sshd[403724]: Connection closed by invalid user ubuntu 45.198.224.46 port 58276 [preauth] 2026-06-30T02:12:47.226235-05:00 claude-cloud sshd[403741]: Connection reset by authenticating user root 45.148.10.141 port 20164 [preauth] 2026-06-30T02:13:08.798271-05:00 claude-cloud sshd[403805]: Received disconnect from 103.143.238.100 port 33020:11: Bye Bye [preauth] 2026-06-30T02:13:08.798927-05:00 claude-cloud sshd[403805]: Disconnected from authenticating user root 103.143.238.100 port 33020 [preauth] 2026-06-30T02:13:19.036233-05:00 claude-cloud sshd[403849]: Connection closed by authenticating user root 91.92.40.231 port 53804 [preauth] 2026-06-30T02:13:49.417623-05:00 claude-cloud sshd[403955]: Received disconnect from 38.242.209.160 port 39578:11: Bye Bye [preauth] 2026-06-30T02:13:49.418175-05:00 claude-cloud sshd[403955]: Disconnected from authenticating user root 38.242.209.160 port 39578 [preauth] 2026-06-30T02:13:53.953110-05:00 claude-cloud sshd[403964]: Received disconnect from 203.190.153.90 port 49590:11: Bye Bye [preauth] 2026-06-30T02:13:53.953589-05:00 claude-cloud sshd[403964]: Disconnected from authenticating user root 203.190.153.90 port 49590 [preauth] 2026-06-30T02:14:35.473012-05:00 claude-cloud sshd[404090]: Received disconnect from 206.189.51.81 port 49854:11: Bye Bye [preauth] 2026-06-30T02:14:35.473790-05:00 claude-cloud sshd[404090]: Disconnected from authenticating user root 206.189.51.81 port 49854 [preauth] 2026-06-30T02:14:55.586836-05:00 claude-cloud sshd[404130]: Connection closed by authenticating user root 115.248.8.65 port 48890 [preauth] 2026-06-30T02:15:01.349112-05:00 claude-cloud CRON[404170]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T02:15:01.354517-05:00 claude-cloud CRON[404170]: pam_unix(cron:session): session closed for user root 2026-06-30T02:15:13.315848-05:00 claude-cloud sshd[404196]: Received disconnect from 103.143.238.100 port 43326:11: Bye Bye [preauth] 2026-06-30T02:15:13.316228-05:00 claude-cloud sshd[404196]: Disconnected from authenticating user root 103.143.238.100 port 43326 [preauth] 2026-06-30T02:15:37.940534-05:00 claude-cloud sshd[404281]: Connection closed by authenticating user root 91.92.40.231 port 49920 [preauth] 2026-06-30T02:16:04.885611-05:00 claude-cloud systemd-logind[853]: New session c5146 of user claude. 2026-06-30T02:16:05.236136-05:00 claude-cloud systemd-logind[853]: Session c5146 logged out. Waiting for processes to exit. 2026-06-30T02:16:05.237427-05:00 claude-cloud systemd-logind[853]: Removed session c5146. 2026-06-30T02:16:11.791794-05:00 claude-cloud sshd[404444]: Received disconnect from 203.190.153.90 port 51024:11: Bye Bye [preauth] 2026-06-30T02:16:11.792254-05:00 claude-cloud sshd[404444]: Disconnected from authenticating user root 203.190.153.90 port 51024 [preauth] 2026-06-30T02:16:25.626951-05:00 claude-cloud sshd[404476]: Received disconnect from 38.242.209.160 port 41262:11: Bye Bye [preauth] 2026-06-30T02:16:25.627418-05:00 claude-cloud sshd[404476]: Disconnected from authenticating user root 38.242.209.160 port 41262 [preauth] 2026-06-30T02:17:01.362523-05:00 claude-cloud CRON[404588]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T02:17:01.367678-05:00 claude-cloud CRON[404588]: pam_unix(cron:session): session closed for user root 2026-06-30T02:17:18.569600-05:00 claude-cloud sshd[404631]: Received disconnect from 103.143.238.100 port 53626:11: Bye Bye [preauth] 2026-06-30T02:17:18.570129-05:00 claude-cloud sshd[404631]: Disconnected from authenticating user root 103.143.238.100 port 53626 [preauth] 2026-06-30T02:17:30.978162-05:00 claude-cloud sshd[404625]: Connection closed by authenticating user root 27.71.230.31 port 51680 [preauth] 2026-06-30T02:17:50.042889-05:00 claude-cloud sshd[404729]: Connection closed by authenticating user root 91.92.40.231 port 40690 [preauth] 2026-06-30T02:18:22.119124-05:00 claude-cloud sshd[404841]: Connection reset by authenticating user root 45.148.10.151 port 60132 [preauth] 2026-06-30T02:18:30.904215-05:00 claude-cloud sshd[404875]: Received disconnect from 203.190.153.90 port 38148:11: Bye Bye [preauth] 2026-06-30T02:18:30.905096-05:00 claude-cloud sshd[404875]: Disconnected from authenticating user root 203.190.153.90 port 38148 [preauth] 2026-06-30T02:18:37.909063-05:00 claude-cloud sshd[404884]: Connection closed by authenticating user root 115.248.8.65 port 54158 [preauth] 2026-06-30T02:18:56.160965-05:00 claude-cloud sshd[404939]: Received disconnect from 38.242.209.160 port 55782:11: Bye Bye [preauth] 2026-06-30T02:18:56.161405-05:00 claude-cloud sshd[404939]: Disconnected from authenticating user root 38.242.209.160 port 55782 [preauth] 2026-06-30T02:19:24.384807-05:00 claude-cloud sshd[405018]: Received disconnect from 103.143.238.100 port 35690:11: Bye Bye [preauth] 2026-06-30T02:19:24.385125-05:00 claude-cloud sshd[405018]: Disconnected from authenticating user root 103.143.238.100 port 35690 [preauth] 2026-06-30T02:20:06.517810-05:00 claude-cloud sshd[405209]: Connection closed by authenticating user root 91.92.40.231 port 51168 [preauth] 2026-06-30T02:20:51.789091-05:00 claude-cloud sshd[405347]: Received disconnect from 203.190.153.90 port 55072:11: Bye Bye [preauth] 2026-06-30T02:20:51.789687-05:00 claude-cloud sshd[405347]: Disconnected from authenticating user root 203.190.153.90 port 55072 [preauth] 2026-06-30T02:21:08.587831-05:00 claude-cloud systemd-logind[853]: New session c5147 of user claude. 2026-06-30T02:21:08.875506-05:00 claude-cloud systemd-logind[853]: Session c5147 logged out. Waiting for processes to exit. 2026-06-30T02:21:08.877253-05:00 claude-cloud systemd-logind[853]: Removed session c5147. 2026-06-30T02:21:28.282115-05:00 claude-cloud sshd[405464]: Received disconnect from 103.143.238.100 port 46020:11: Bye Bye [preauth] 2026-06-30T02:21:28.282837-05:00 claude-cloud sshd[405464]: Disconnected from authenticating user root 103.143.238.100 port 46020 [preauth] 2026-06-30T02:22:22.751927-05:00 claude-cloud sshd[405608]: Connection closed by authenticating user root 115.248.8.65 port 49414 [preauth] 2026-06-30T02:22:23.277014-05:00 claude-cloud sshd[405610]: Connection closed by authenticating user root 45.198.224.46 port 50588 [preauth] 2026-06-30T02:22:23.304409-05:00 claude-cloud sshd[405625]: Invalid user admin from 91.92.40.231 port 60666 2026-06-30T02:22:23.383028-05:00 claude-cloud sshd[405625]: Connection closed by invalid user admin 91.92.40.231 port 60666 [preauth] 2026-06-30T02:23:09.023246-05:00 claude-cloud sshd[405774]: Received disconnect from 203.190.153.90 port 40780:11: Bye Bye [preauth] 2026-06-30T02:23:09.023712-05:00 claude-cloud sshd[405774]: Disconnected from authenticating user root 203.190.153.90 port 40780 [preauth] 2026-06-30T02:23:17.907219-05:00 claude-cloud sshd[405776]: Connection closed by authenticating user root 27.71.230.31 port 47596 [preauth] 2026-06-30T02:23:35.041498-05:00 claude-cloud sshd[405847]: Received disconnect from 103.143.238.100 port 56312:11: Bye Bye [preauth] 2026-06-30T02:23:35.041699-05:00 claude-cloud sshd[405847]: Disconnected from authenticating user root 103.143.238.100 port 56312 [preauth] 2026-06-30T02:23:56.070901-05:00 claude-cloud sshd[405914]: Connection reset by authenticating user root 45.148.10.141 port 20468 [preauth] 2026-06-30T02:24:01.824743-05:00 claude-cloud sshd[405945]: Received disconnect from 38.242.209.160 port 49564:11: Bye Bye [preauth] 2026-06-30T02:24:01.825070-05:00 claude-cloud sshd[405945]: Disconnected from authenticating user root 38.242.209.160 port 49564 [preauth] 2026-06-30T02:24:49.575323-05:00 claude-cloud sshd[406065]: Invalid user admin from 91.92.40.231 port 38862 2026-06-30T02:24:49.723517-05:00 claude-cloud sshd[406065]: Connection closed by invalid user admin 91.92.40.231 port 38862 [preauth] 2026-06-30T02:25:01.378596-05:00 claude-cloud CRON[406107]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T02:25:01.385124-05:00 claude-cloud CRON[406107]: pam_unix(cron:session): session closed for user root 2026-06-30T02:25:27.643372-05:00 claude-cloud sshd[406187]: Received disconnect from 203.190.153.90 port 34208:11: Bye Bye [preauth] 2026-06-30T02:25:27.643946-05:00 claude-cloud sshd[406187]: Disconnected from authenticating user root 203.190.153.90 port 34208 [preauth] 2026-06-30T02:25:43.184800-05:00 claude-cloud sshd[406234]: Received disconnect from 103.143.238.100 port 38404:11: Bye Bye [preauth] 2026-06-30T02:25:43.185446-05:00 claude-cloud sshd[406234]: Disconnected from authenticating user root 103.143.238.100 port 38404 [preauth] 2026-06-30T02:26:03.884947-05:00 claude-cloud sshd[406312]: Connection closed by authenticating user root 115.248.8.65 port 43576 [preauth] 2026-06-30T02:26:12.240124-05:00 claude-cloud systemd-logind[853]: New session c5148 of user claude. 2026-06-30T02:26:12.513929-05:00 claude-cloud systemd-logind[853]: Session c5148 logged out. Waiting for processes to exit. 2026-06-30T02:26:12.515773-05:00 claude-cloud systemd-logind[853]: Removed session c5148. 2026-06-30T02:26:37.843882-05:00 claude-cloud sshd[406420]: Received disconnect from 38.242.209.160 port 52944:11: Bye Bye [preauth] 2026-06-30T02:26:37.844440-05:00 claude-cloud sshd[406420]: Disconnected from authenticating user root 38.242.209.160 port 52944 [preauth] 2026-06-30T02:27:11.361184-05:00 claude-cloud sshd[406509]: Connection closed by 161.35.47.134 port 38310 2026-06-30T02:27:19.877730-05:00 claude-cloud sshd[406532]: Invalid user admin from 91.92.40.231 port 51606 2026-06-30T02:27:20.012004-05:00 claude-cloud sshd[406532]: Connection closed by invalid user admin 91.92.40.231 port 51606 [preauth] 2026-06-30T02:27:41.982813-05:00 claude-cloud sshd[406612]: Received disconnect from 203.190.153.90 port 35286:11: Bye Bye [preauth] 2026-06-30T02:27:41.983345-05:00 claude-cloud sshd[406612]: Disconnected from authenticating user root 203.190.153.90 port 35286 [preauth] 2026-06-30T02:27:47.312082-05:00 claude-cloud sshd[406640]: Received disconnect from 103.143.238.100 port 48718:11: Bye Bye [preauth] 2026-06-30T02:27:47.313657-05:00 claude-cloud sshd[406640]: Disconnected from authenticating user root 103.143.238.100 port 48718 [preauth] 2026-06-30T02:27:54.830992-05:00 claude-cloud sshd[406659]: Received disconnect from 172.96.182.111 port 32854:11: Bye Bye [preauth] 2026-06-30T02:27:54.831490-05:00 claude-cloud sshd[406659]: Disconnected from authenticating user root 172.96.182.111 port 32854 [preauth] 2026-06-30T02:28:20.342498-05:00 claude-cloud sshd[406742]: userauth_pubkey: signature algorithm ssh-dss not in PubkeyAcceptedAlgorithms [preauth] 2026-06-30T02:28:20.478587-05:00 claude-cloud sshd[406742]: Received disconnect from 178.73.210.62 port 53334:11: disconnected by user [preauth] 2026-06-30T02:28:20.478814-05:00 claude-cloud sshd[406742]: Disconnected from authenticating user root 178.73.210.62 port 53334 [preauth] 2026-06-30T02:29:16.485656-05:00 claude-cloud sshd[406895]: Invalid user test from 43.156.24.132 port 56264 2026-06-30T02:29:16.651981-05:00 claude-cloud sshd[406895]: Received disconnect from 43.156.24.132 port 56264:11: Bye Bye [preauth] 2026-06-30T02:29:16.652766-05:00 claude-cloud sshd[406895]: Disconnected from invalid user test 43.156.24.132 port 56264 [preauth] 2026-06-30T02:29:23.257436-05:00 claude-cloud sshd[406914]: Connection reset by authenticating user root 45.148.10.147 port 34662 [preauth] 2026-06-30T02:29:45.759337-05:00 claude-cloud sshd[406971]: Connection closed by authenticating user root 115.248.8.65 port 42980 [preauth] 2026-06-30T02:29:53.645350-05:00 claude-cloud sshd[407033]: Received disconnect from 103.143.238.100 port 59044:11: Bye Bye [preauth] 2026-06-30T02:29:53.645808-05:00 claude-cloud sshd[407033]: Disconnected from authenticating user root 103.143.238.100 port 59044 [preauth] 2026-06-30T02:30:01.602883-05:00 claude-cloud sshd[407072]: Invalid user admin from 91.92.40.231 port 43310 2026-06-30T02:30:01.753679-05:00 claude-cloud sshd[407072]: Connection closed by invalid user admin 91.92.40.231 port 43310 [preauth] 2026-06-30T02:30:02.206807-05:00 claude-cloud sshd[407070]: Received disconnect from 203.190.153.90 port 52132:11: Bye Bye [preauth] 2026-06-30T02:30:02.207137-05:00 claude-cloud sshd[407070]: Disconnected from authenticating user root 203.190.153.90 port 52132 [preauth] 2026-06-30T02:30:40.415704-05:00 claude-cloud sshd[407170]: Received disconnect from 103.97.101.25 port 58144:11: Bye Bye [preauth] 2026-06-30T02:30:40.416257-05:00 claude-cloud sshd[407170]: Disconnected from authenticating user root 103.97.101.25 port 58144 [preauth] 2026-06-30T02:30:42.713781-05:00 claude-cloud sshd[407182]: Received disconnect from 45.86.86.162 port 37482:11: disconnected by user [preauth] 2026-06-30T02:30:42.714382-05:00 claude-cloud sshd[407182]: Disconnected from authenticating user root 45.86.86.162 port 37482 [preauth] 2026-06-30T02:30:53.979406-05:00 claude-cloud sshd[407274]: Invalid user ubuntu from 170.0.62.246 port 33518 2026-06-30T02:30:54.184711-05:00 claude-cloud sshd[407274]: Received disconnect from 170.0.62.246 port 33518:11: Bye Bye [preauth] 2026-06-30T02:30:54.185118-05:00 claude-cloud sshd[407274]: Disconnected from invalid user ubuntu 170.0.62.246 port 33518 [preauth] 2026-06-30T02:31:16.003986-05:00 claude-cloud systemd-logind[853]: New session c5149 of user claude. 2026-06-30T02:31:16.427418-05:00 claude-cloud systemd-logind[853]: Session c5149 logged out. Waiting for processes to exit. 2026-06-30T02:31:16.428934-05:00 claude-cloud systemd-logind[853]: Removed session c5149. 2026-06-30T02:31:45.742123-05:00 claude-cloud sshd[407433]: Received disconnect from 38.242.209.160 port 45414:11: Bye Bye [preauth] 2026-06-30T02:31:45.742813-05:00 claude-cloud sshd[407433]: Disconnected from authenticating user root 38.242.209.160 port 45414 [preauth] 2026-06-30T02:32:01.684574-05:00 claude-cloud sshd[407479]: Invalid user ubuntu from 45.198.224.46 port 46972 2026-06-30T02:32:02.016072-05:00 claude-cloud sshd[407481]: Received disconnect from 103.143.238.100 port 41140:11: Bye Bye [preauth] 2026-06-30T02:32:02.016345-05:00 claude-cloud sshd[407481]: Disconnected from authenticating user root 103.143.238.100 port 41140 [preauth] 2026-06-30T02:32:02.467214-05:00 claude-cloud sshd[407479]: Connection closed by invalid user ubuntu 45.198.224.46 port 46972 [preauth] 2026-06-30T02:32:22.381788-05:00 claude-cloud sshd[407552]: Received disconnect from 203.190.153.90 port 39140:11: Bye Bye [preauth] 2026-06-30T02:32:22.382251-05:00 claude-cloud sshd[407552]: Disconnected from authenticating user root 203.190.153.90 port 39140 [preauth] 2026-06-30T02:32:48.088806-05:00 claude-cloud sshd[407649]: Invalid user admin from 91.92.40.231 port 52882 2026-06-30T02:32:48.105540-05:00 claude-cloud sshd[407649]: Connection closed by invalid user admin 91.92.40.231 port 52882 [preauth] 2026-06-30T02:33:31.169382-05:00 claude-cloud sshd[407747]: Connection closed by authenticating user root 115.248.8.65 port 60278 [preauth] 2026-06-30T02:34:08.335449-05:00 claude-cloud sshd[407871]: Received disconnect from 103.143.238.100 port 51466:11: Bye Bye [preauth] 2026-06-30T02:34:08.335840-05:00 claude-cloud sshd[407871]: Disconnected from authenticating user root 103.143.238.100 port 51466 [preauth] 2026-06-30T02:34:21.332072-05:00 claude-cloud sshd[407904]: Received disconnect from 38.242.209.160 port 38482:11: Bye Bye [preauth] 2026-06-30T02:34:21.332454-05:00 claude-cloud sshd[407904]: Disconnected from authenticating user root 38.242.209.160 port 38482 [preauth] 2026-06-30T02:34:40.302525-05:00 claude-cloud sshd[407984]: Received disconnect from 203.190.153.90 port 34164:11: Bye Bye [preauth] 2026-06-30T02:34:40.303130-05:00 claude-cloud sshd[407984]: Disconnected from authenticating user root 203.190.153.90 port 34164 [preauth] 2026-06-30T02:34:52.873686-05:00 claude-cloud sshd[408027]: Connection reset by authenticating user root 45.148.10.151 port 14070 [preauth] 2026-06-30T02:34:53.372969-05:00 claude-cloud sshd[408025]: Received disconnect from 117.50.199.249 port 39356:11: Bye Bye [preauth] 2026-06-30T02:34:53.373380-05:00 claude-cloud sshd[408025]: Disconnected from authenticating user root 117.50.199.249 port 39356 [preauth] 2026-06-30T02:35:01.396932-05:00 claude-cloud CRON[408066]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T02:35:01.402697-05:00 claude-cloud CRON[408066]: pam_unix(cron:session): session closed for user root 2026-06-30T02:35:06.346008-05:00 claude-cloud sshd[408058]: Connection closed by authenticating user root 27.71.230.31 port 45484 [preauth] 2026-06-30T02:35:46.907703-05:00 claude-cloud sshd[408175]: Received disconnect from 14.103.112.35 port 53982:11: Bye Bye [preauth] 2026-06-30T02:35:46.908528-05:00 claude-cloud sshd[408175]: Disconnected from authenticating user root 14.103.112.35 port 53982 [preauth] 2026-06-30T02:36:19.755434-05:00 claude-cloud systemd-logind[853]: New session c5150 of user claude. 2026-06-30T02:36:20.163488-05:00 claude-cloud systemd-logind[853]: Session c5150 logged out. Waiting for processes to exit. 2026-06-30T02:36:20.165347-05:00 claude-cloud systemd-logind[853]: Removed session c5150. 2026-06-30T02:36:50.502550-05:00 claude-cloud sshd[408381]: Invalid user from 64.62.197.80 port 47783 2026-06-30T02:36:53.819874-05:00 claude-cloud sshd[408381]: Connection closed by invalid user 64.62.197.80 port 47783 [preauth] 2026-06-30T02:36:56.111211-05:00 claude-cloud sshd[408409]: Received disconnect from 14.103.117.116 port 53870:11: Bye Bye [preauth] 2026-06-30T02:36:56.111926-05:00 claude-cloud sshd[408409]: Disconnected from authenticating user root 14.103.117.116 port 53870 [preauth] 2026-06-30T02:37:01.606112-05:00 claude-cloud sshd[408442]: Received disconnect from 203.190.153.90 port 51608:11: Bye Bye [preauth] 2026-06-30T02:37:01.606561-05:00 claude-cloud sshd[408442]: Disconnected from authenticating user root 203.190.153.90 port 51608 [preauth] 2026-06-30T02:37:02.255974-05:00 claude-cloud sshd[408444]: Received disconnect from 38.242.209.160 port 37664:11: Bye Bye [preauth] 2026-06-30T02:37:02.256197-05:00 claude-cloud sshd[408444]: Disconnected from authenticating user root 38.242.209.160 port 37664 [preauth] 2026-06-30T02:37:11.402566-05:00 claude-cloud sshd[408460]: Connection closed by authenticating user root 115.248.8.65 port 48542 [preauth] 2026-06-30T02:37:44.469240-05:00 claude-cloud sshd[408555]: Received disconnect from 117.72.212.5 port 43340:11: Bye Bye [preauth] 2026-06-30T02:37:44.470068-05:00 claude-cloud sshd[408555]: Disconnected from authenticating user root 117.72.212.5 port 43340 [preauth] 2026-06-30T02:39:09.933853-05:00 claude-cloud sshd[408795]: Connection reset by 14.103.112.35 port 51290 [preauth] 2026-06-30T02:39:30.404581-05:00 claude-cloud sshd[408846]: Received disconnect from 14.103.112.35 port 55696:11: Bye Bye [preauth] 2026-06-30T02:39:30.404975-05:00 claude-cloud sshd[408846]: Disconnected from authenticating user root 14.103.112.35 port 55696 [preauth] 2026-06-30T02:39:39.584135-05:00 claude-cloud sshd[408891]: Received disconnect from 38.242.209.160 port 38900:11: Bye Bye [preauth] 2026-06-30T02:39:39.584588-05:00 claude-cloud sshd[408891]: Disconnected from authenticating user root 38.242.209.160 port 38900 [preauth] 2026-06-30T02:39:53.090698-05:00 claude-cloud sshd[408928]: Invalid user ansible from 85.24.223.224 port 60914 2026-06-30T02:39:53.128403-05:00 claude-cloud sshd[408928]: Received disconnect from 85.24.223.224 port 60914:11: Bye Bye [preauth] 2026-06-30T02:39:53.128821-05:00 claude-cloud sshd[408928]: Disconnected from invalid user ansible 85.24.223.224 port 60914 [preauth] 2026-06-30T02:40:26.496272-05:00 claude-cloud sshd[409018]: Connection reset by authenticating user root 45.227.254.170 port 30952 [preauth] 2026-06-30T02:40:32.595866-05:00 claude-cloud sshd[409043]: Received disconnect from 176.65.131.188 port 26028:11: disconnected by user [preauth] 2026-06-30T02:40:32.596209-05:00 claude-cloud sshd[409043]: Disconnected from authenticating user root 176.65.131.188 port 26028 [preauth] 2026-06-30T02:40:54.845934-05:00 claude-cloud sshd[409161]: Connection closed by authenticating user root 115.248.8.65 port 36690 [preauth] 2026-06-30T02:40:58.784793-05:00 claude-cloud sshd[408991]: Connection closed by 14.103.112.35 port 41898 [preauth] 2026-06-30T02:41:06.145782-05:00 claude-cloud sshd[409204]: Connection reset by 14.103.112.35 port 40766 [preauth] 2026-06-30T02:41:23.438679-05:00 claude-cloud systemd-logind[853]: New session c5151 of user claude. 2026-06-30T02:41:23.764049-05:00 claude-cloud systemd-logind[853]: Session c5151 logged out. Waiting for processes to exit. 2026-06-30T02:41:23.765475-05:00 claude-cloud systemd-logind[853]: Removed session c5151. 2026-06-30T02:41:24.326505-05:00 claude-cloud sshd[409256]: Invalid user robin from 45.198.224.46 port 59790 2026-06-30T02:41:25.009624-05:00 claude-cloud sshd[409256]: Connection closed by invalid user robin 45.198.224.46 port 59790 [preauth] 2026-06-30T02:41:27.778630-05:00 claude-cloud sshd[409174]: Connection closed by authenticating user root 27.71.230.31 port 44020 [preauth] 2026-06-30T02:41:31.546482-05:00 claude-cloud sshd[409255]: Connection closed by 14.103.112.35 port 40746 [preauth] 2026-06-30T02:41:34.947084-05:00 claude-cloud sshd[409316]: Invalid user ubuntu from 43.156.24.132 port 53698 2026-06-30T02:41:35.113745-05:00 claude-cloud sshd[409316]: Received disconnect from 43.156.24.132 port 53698:11: Bye Bye [preauth] 2026-06-30T02:41:35.114159-05:00 claude-cloud sshd[409316]: Disconnected from invalid user ubuntu 43.156.24.132 port 53698 [preauth] 2026-06-30T02:41:35.212249-05:00 claude-cloud sshd[409318]: Received disconnect from 172.96.182.111 port 46554:11: Bye Bye [preauth] 2026-06-30T02:41:35.212657-05:00 claude-cloud sshd[409318]: Disconnected from authenticating user root 172.96.182.111 port 46554 [preauth] 2026-06-30T02:41:43.166010-05:00 claude-cloud sshd[409333]: Received disconnect from 170.0.62.246 port 56768:11: Bye Bye [preauth] 2026-06-30T02:41:43.166839-05:00 claude-cloud sshd[409333]: Disconnected from authenticating user root 170.0.62.246 port 56768 [preauth] 2026-06-30T02:41:50.432269-05:00 claude-cloud sshd[409342]: Connection reset by 14.103.112.35 port 41970 [preauth] 2026-06-30T02:41:59.251111-05:00 claude-cloud sshd[409384]: Invalid user user from 103.97.101.25 port 47414 2026-06-30T02:41:59.450169-05:00 claude-cloud sshd[409384]: Received disconnect from 103.97.101.25 port 47414:11: Bye Bye [preauth] 2026-06-30T02:41:59.450478-05:00 claude-cloud sshd[409384]: Disconnected from invalid user user 103.97.101.25 port 47414 [preauth] 2026-06-30T02:42:26.980619-05:00 claude-cloud sshd[409452]: Received disconnect from 117.50.199.249 port 59882:11: Bye Bye [preauth] 2026-06-30T02:42:26.981033-05:00 claude-cloud sshd[409452]: Disconnected from authenticating user root 117.50.199.249 port 59882 [preauth] 2026-06-30T02:42:31.451052-05:00 claude-cloud sshd[409413]: Connection closed by 14.103.112.35 port 49694 [preauth] 2026-06-30T02:42:48.520991-05:00 claude-cloud sshd[409532]: error: kex_exchange_identification: read: Connection reset by peer 2026-06-30T02:42:48.521319-05:00 claude-cloud sshd[409532]: Connection reset by 14.103.112.35 port 58168 2026-06-30T02:43:20.282745-05:00 claude-cloud sshd[409615]: Received disconnect from 172.96.182.111 port 53048:11: Bye Bye [preauth] 2026-06-30T02:43:20.283343-05:00 claude-cloud sshd[409615]: Disconnected from authenticating user root 172.96.182.111 port 53048 [preauth] 2026-06-30T02:43:23.441127-05:00 claude-cloud sshd[409627]: Received disconnect from 43.156.24.132 port 44128:11: Bye Bye [preauth] 2026-06-30T02:43:23.441394-05:00 claude-cloud sshd[409627]: Disconnected from authenticating user root 43.156.24.132 port 44128 [preauth] 2026-06-30T02:43:34.937159-05:00 claude-cloud sshd[409666]: Received disconnect from 85.24.223.224 port 47996:11: Bye Bye [preauth] 2026-06-30T02:43:34.937661-05:00 claude-cloud sshd[409666]: Disconnected from authenticating user root 85.24.223.224 port 47996 [preauth] 2026-06-30T02:43:44.500956-05:00 claude-cloud sshd[409689]: Invalid user postgres from 14.103.112.35 port 50232 2026-06-30T02:43:45.535198-05:00 claude-cloud sshd[409689]: Received disconnect from 14.103.112.35 port 50232:11: Bye Bye [preauth] 2026-06-30T02:43:45.535821-05:00 claude-cloud sshd[409689]: Disconnected from invalid user postgres 14.103.112.35 port 50232 [preauth] 2026-06-30T02:43:47.256763-05:00 claude-cloud sshd[409701]: Received disconnect from 103.97.101.25 port 56076:11: Bye Bye [preauth] 2026-06-30T02:43:47.257176-05:00 claude-cloud sshd[409701]: Disconnected from authenticating user root 103.97.101.25 port 56076 [preauth] 2026-06-30T02:44:11.580372-05:00 claude-cloud sshd[409769]: Received disconnect from 170.0.62.246 port 35786:11: Bye Bye [preauth] 2026-06-30T02:44:11.581068-05:00 claude-cloud sshd[409769]: Disconnected from authenticating user root 170.0.62.246 port 35786 [preauth] 2026-06-30T02:44:15.415163-05:00 claude-cloud sshd[409762]: Connection closed by 14.103.112.35 port 53074 [preauth] 2026-06-30T02:44:21.710724-05:00 claude-cloud sshd[409797]: Received disconnect from 117.72.212.5 port 43616:11: Bye Bye [preauth] 2026-06-30T02:44:21.711146-05:00 claude-cloud sshd[409797]: Disconnected from authenticating user root 117.72.212.5 port 43616 [preauth] 2026-06-30T02:44:25.138734-05:00 claude-cloud sshd[409556]: Connection closed by 14.103.112.35 port 43852 [preauth] 2026-06-30T02:44:37.269957-05:00 claude-cloud sshd[409858]: Invalid user test from 91.92.40.231 port 56832 2026-06-30T02:44:37.331254-05:00 claude-cloud sshd[409858]: Connection closed by invalid user test 91.92.40.231 port 56832 [preauth] 2026-06-30T02:44:39.865470-05:00 claude-cloud sshd[409846]: Connection closed by authenticating user root 115.248.8.65 port 60428 [preauth] 2026-06-30T02:44:53.813732-05:00 claude-cloud sshd[409614]: Connection closed by 14.103.112.35 port 39834 [preauth] 2026-06-30T02:44:58.714424-05:00 claude-cloud sshd[409902]: Connection closed by 117.50.199.249 port 41002 [preauth] 2026-06-30T02:45:01.416664-05:00 claude-cloud CRON[409947]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T02:45:01.422731-05:00 claude-cloud CRON[409947]: pam_unix(cron:session): session closed for user root 2026-06-30T02:45:06.067547-05:00 claude-cloud sshd[409950]: Received disconnect from 172.96.182.111 port 59576:11: Bye Bye [preauth] 2026-06-30T02:45:06.068008-05:00 claude-cloud sshd[409950]: Disconnected from authenticating user root 172.96.182.111 port 59576 [preauth] 2026-06-30T02:45:11.284347-05:00 claude-cloud sshd[409965]: Received disconnect from 43.156.24.132 port 60508:11: Bye Bye [preauth] 2026-06-30T02:45:11.284820-05:00 claude-cloud sshd[409965]: Disconnected from authenticating user root 43.156.24.132 port 60508 [preauth] 2026-06-30T02:45:28.490878-05:00 claude-cloud sshd[410019]: Invalid user ansible from 103.97.101.25 port 42386 2026-06-30T02:45:28.686363-05:00 claude-cloud sshd[410019]: Received disconnect from 103.97.101.25 port 42386:11: Bye Bye [preauth] 2026-06-30T02:45:28.687744-05:00 claude-cloud sshd[410019]: Disconnected from invalid user ansible 103.97.101.25 port 42386 [preauth] 2026-06-30T02:45:54.313435-05:00 claude-cloud sshd[410084]: Connection reset by authenticating user root 45.227.254.170 port 54886 [preauth] 2026-06-30T02:46:00.928075-05:00 claude-cloud sshd[410113]: Connection closed by authenticating user root 185.242.3.195 port 45846 [preauth] 2026-06-30T02:46:26.984965-05:00 claude-cloud systemd-logind[853]: New session c5152 of user claude. 2026-06-30T02:46:27.341440-05:00 claude-cloud systemd-logind[853]: Session c5152 logged out. Waiting for processes to exit. 2026-06-30T02:46:27.343523-05:00 claude-cloud systemd-logind[853]: Removed session c5152. 2026-06-30T02:46:34.238197-05:00 claude-cloud sshd[410217]: Received disconnect from 170.0.62.246 port 42776:11: Bye Bye [preauth] 2026-06-30T02:46:34.238507-05:00 claude-cloud sshd[410217]: Disconnected from authenticating user root 170.0.62.246 port 42776 [preauth] 2026-06-30T02:46:40.215477-05:00 claude-cloud sshd[410232]: Received disconnect from 117.72.212.5 port 43770:11: Bye Bye [preauth] 2026-06-30T02:46:40.215895-05:00 claude-cloud sshd[410232]: Disconnected from authenticating user root 117.72.212.5 port 43770 [preauth] 2026-06-30T02:46:43.939756-05:00 claude-cloud sshd[410264]: Received disconnect from 85.24.223.224 port 53026:11: Bye Bye [preauth] 2026-06-30T02:46:43.940006-05:00 claude-cloud sshd[410264]: Disconnected from authenticating user root 85.24.223.224 port 53026 [preauth] 2026-06-30T02:46:44.465631-05:00 claude-cloud sshd[410261]: Invalid user test from 172.96.182.111 port 37832 2026-06-30T02:46:44.640479-05:00 claude-cloud sshd[410261]: Received disconnect from 172.96.182.111 port 37832:11: Bye Bye [preauth] 2026-06-30T02:46:44.640703-05:00 claude-cloud sshd[410261]: Disconnected from invalid user test 172.96.182.111 port 37832 [preauth] 2026-06-30T02:46:52.960640-05:00 claude-cloud sshd[410282]: Received disconnect from 43.156.24.132 port 35642:11: Bye Bye [preauth] 2026-06-30T02:46:52.961035-05:00 claude-cloud sshd[410282]: Disconnected from authenticating user root 43.156.24.132 port 35642 [preauth] 2026-06-30T02:46:56.672764-05:00 claude-cloud sshd[410277]: Connection closed by authenticating user root 27.71.230.31 port 52980 [preauth] 2026-06-30T02:47:10.435084-05:00 claude-cloud sshd[410333]: Received disconnect from 103.97.101.25 port 53234:11: Bye Bye [preauth] 2026-06-30T02:47:10.435480-05:00 claude-cloud sshd[410333]: Disconnected from authenticating user root 103.97.101.25 port 53234 [preauth] 2026-06-30T02:48:09.871043-05:00 claude-cloud sshd[410498]: Invalid user test from 91.92.40.231 port 51050 2026-06-30T02:48:09.887060-05:00 claude-cloud sshd[410498]: Connection closed by invalid user test 91.92.40.231 port 51050 [preauth] 2026-06-30T02:48:17.533268-05:00 claude-cloud sshd[410503]: Connection closed by authenticating user root 115.248.8.65 port 38704 [preauth] 2026-06-30T02:48:24.513187-05:00 claude-cloud sshd[410526]: Invalid user test from 14.103.117.116 port 55880 2026-06-30T02:48:25.340687-05:00 claude-cloud sshd[410526]: Received disconnect from 14.103.117.116 port 55880:11: Bye Bye [preauth] 2026-06-30T02:48:25.341044-05:00 claude-cloud sshd[410526]: Disconnected from invalid user test 14.103.117.116 port 55880 [preauth] 2026-06-30T02:48:29.937728-05:00 claude-cloud sshd[410562]: Invalid user ubuntu from 172.96.182.111 port 44362 2026-06-30T02:48:30.104637-05:00 claude-cloud sshd[410562]: Received disconnect from 172.96.182.111 port 44362:11: Bye Bye [preauth] 2026-06-30T02:48:30.104821-05:00 claude-cloud sshd[410562]: Disconnected from invalid user ubuntu 172.96.182.111 port 44362 [preauth] 2026-06-30T02:48:36.601232-05:00 claude-cloud sshd[410575]: Received disconnect from 43.156.24.132 port 38428:11: Bye Bye [preauth] 2026-06-30T02:48:36.601595-05:00 claude-cloud sshd[410575]: Disconnected from authenticating user root 43.156.24.132 port 38428 [preauth] 2026-06-30T02:48:42.787525-05:00 claude-cloud sshd[410564]: Connection closed by 117.50.199.249 port 51044 [preauth] 2026-06-30T02:48:49.689786-05:00 claude-cloud sshd[410620]: Received disconnect from 103.97.101.25 port 47974:11: Bye Bye [preauth] 2026-06-30T02:48:49.690125-05:00 claude-cloud sshd[410620]: Disconnected from authenticating user root 103.97.101.25 port 47974 [preauth] 2026-06-30T02:48:59.259573-05:00 claude-cloud sshd[410654]: Invalid user ubuntu from 170.0.62.246 port 35902 2026-06-30T02:48:59.459892-05:00 claude-cloud sshd[410654]: Received disconnect from 170.0.62.246 port 35902:11: Bye Bye [preauth] 2026-06-30T02:48:59.460170-05:00 claude-cloud sshd[410654]: Disconnected from invalid user ubuntu 170.0.62.246 port 35902 [preauth] 2026-06-30T02:49:00.963408-05:00 claude-cloud sshd[410669]: Invalid user oracle from 117.72.212.5 port 43926 2026-06-30T02:49:01.101430-05:00 claude-cloud sshd[410669]: Received disconnect from 117.72.212.5 port 43926:11: Bye Bye [preauth] 2026-06-30T02:49:01.101671-05:00 claude-cloud sshd[410669]: Disconnected from invalid user oracle 117.72.212.5 port 43926 [preauth] 2026-06-30T02:49:39.609046-05:00 claude-cloud sshd[410764]: Invalid user admin from 2.57.121.25 port 5726 2026-06-30T02:49:39.635461-05:00 claude-cloud sshd[410764]: Connection closed by invalid user admin 2.57.121.25 port 5726 [preauth] 2026-06-30T02:49:44.347602-05:00 claude-cloud sshd[410779]: Connection closed by 161.35.47.134 port 57154 2026-06-30T02:49:48.708301-05:00 claude-cloud sshd[410787]: Received disconnect from 117.50.199.249 port 57534:11: Bye Bye [preauth] 2026-06-30T02:49:48.708560-05:00 claude-cloud sshd[410787]: Disconnected from authenticating user root 117.50.199.249 port 57534 [preauth] 2026-06-30T02:49:49.782784-05:00 claude-cloud sshd[410794]: Received disconnect from 85.24.223.224 port 52982:11: Bye Bye [preauth] 2026-06-30T02:49:49.783064-05:00 claude-cloud sshd[410794]: Disconnected from authenticating user root 85.24.223.224 port 52982 [preauth] 2026-06-30T02:49:55.765248-05:00 claude-cloud sshd[410788]: Connection closed by 14.103.117.116 port 40716 [preauth] 2026-06-30T02:50:05.879742-05:00 claude-cloud sshd[410845]: Received disconnect from 172.96.182.111 port 50834:11: Bye Bye [preauth] 2026-06-30T02:50:05.879969-05:00 claude-cloud sshd[410845]: Disconnected from authenticating user root 172.96.182.111 port 50834 [preauth] 2026-06-30T02:50:22.372183-05:00 claude-cloud sshd[410891]: Received disconnect from 43.156.24.132 port 55328:11: Bye Bye [preauth] 2026-06-30T02:50:22.372563-05:00 claude-cloud sshd[410891]: Disconnected from authenticating user root 43.156.24.132 port 55328 [preauth] 2026-06-30T02:50:32.024306-05:00 claude-cloud sshd[410928]: Received disconnect from 103.97.101.25 port 59044:11: Bye Bye [preauth] 2026-06-30T02:50:32.024739-05:00 claude-cloud sshd[410928]: Disconnected from authenticating user root 103.97.101.25 port 59044 [preauth] 2026-06-30T02:50:54.382055-05:00 claude-cloud sshd[411047]: Connection closed by authenticating user root 45.198.224.46 port 59064 [preauth] 2026-06-30T02:51:20.590584-05:00 claude-cloud sshd[411126]: Received disconnect from 117.72.212.5 port 44088:11: Bye Bye [preauth] 2026-06-30T02:51:20.593225-05:00 claude-cloud sshd[411126]: Disconnected from authenticating user root 117.72.212.5 port 44088 [preauth] 2026-06-30T02:51:24.193664-05:00 claude-cloud sshd[411138]: Received disconnect from 170.0.62.246 port 51592:11: Bye Bye [preauth] 2026-06-30T02:51:24.194486-05:00 claude-cloud sshd[411138]: Disconnected from authenticating user root 170.0.62.246 port 51592 [preauth] 2026-06-30T02:51:28.880557-05:00 claude-cloud sshd[411168]: Connection reset by authenticating user root 62.60.130.219 port 64650 [preauth] 2026-06-30T02:51:30.730766-05:00 claude-cloud systemd-logind[853]: New session c5153 of user claude. 2026-06-30T02:51:31.163590-05:00 claude-cloud systemd-logind[853]: Session c5153 logged out. Waiting for processes to exit. 2026-06-30T02:51:31.167569-05:00 claude-cloud systemd-logind[853]: Removed session c5153. 2026-06-30T02:51:39.239217-05:00 claude-cloud sshd[411201]: Invalid user ubuntu from 172.96.182.111 port 57318 2026-06-30T02:51:39.405367-05:00 claude-cloud sshd[411201]: Received disconnect from 172.96.182.111 port 57318:11: Bye Bye [preauth] 2026-06-30T02:51:39.405764-05:00 claude-cloud sshd[411201]: Disconnected from invalid user ubuntu 172.96.182.111 port 57318 [preauth] 2026-06-30T02:51:59.271605-05:00 claude-cloud sshd[411262]: Invalid user test from 91.92.40.231 port 55412 2026-06-30T02:51:59.287413-05:00 claude-cloud sshd[411262]: Connection closed by invalid user test 91.92.40.231 port 55412 [preauth] 2026-06-30T02:52:02.318743-05:00 claude-cloud sshd[411260]: Connection closed by authenticating user root 115.248.8.65 port 39030 [preauth] 2026-06-30T02:52:03.310724-05:00 claude-cloud sshd[411272]: Invalid user centos from 43.156.24.132 port 51296 2026-06-30T02:52:03.479196-05:00 claude-cloud sshd[411272]: Received disconnect from 43.156.24.132 port 51296:11: Bye Bye [preauth] 2026-06-30T02:52:03.479411-05:00 claude-cloud sshd[411272]: Disconnected from invalid user centos 43.156.24.132 port 51296 [preauth] 2026-06-30T02:52:08.700350-05:00 claude-cloud sshd[411287]: Received disconnect from 103.97.101.25 port 46438:11: Bye Bye [preauth] 2026-06-30T02:52:08.700561-05:00 claude-cloud sshd[411287]: Disconnected from authenticating user root 103.97.101.25 port 46438 [preauth] 2026-06-30T02:52:36.657026-05:00 claude-cloud sshd[411358]: Received disconnect from 14.103.117.116 port 37486:11: Bye Bye [preauth] 2026-06-30T02:52:36.657472-05:00 claude-cloud sshd[411358]: Disconnected from authenticating user root 14.103.117.116 port 37486 [preauth] 2026-06-30T02:52:53.783850-05:00 claude-cloud sshd[411383]: Connection closed by authenticating user root 27.71.230.31 port 49732 [preauth] 2026-06-30T02:52:55.276251-05:00 claude-cloud sshd[411422]: Received disconnect from 85.24.223.224 port 35128:11: Bye Bye [preauth] 2026-06-30T02:52:55.276557-05:00 claude-cloud sshd[411422]: Disconnected from authenticating user root 85.24.223.224 port 35128 [preauth] 2026-06-30T02:53:08.324731-05:00 claude-cloud sshd[411474]: Invalid user centos from 172.96.182.111 port 35616 2026-06-30T02:53:08.499603-05:00 claude-cloud sshd[411474]: Received disconnect from 172.96.182.111 port 35616:11: Bye Bye [preauth] 2026-06-30T02:53:08.499834-05:00 claude-cloud sshd[411474]: Disconnected from invalid user centos 172.96.182.111 port 35616 [preauth] 2026-06-30T02:53:30.594483-05:00 claude-cloud sshd[411535]: Invalid user github from 117.72.212.5 port 44232 2026-06-30T02:53:30.748046-05:00 claude-cloud sshd[411535]: Received disconnect from 117.72.212.5 port 44232:11: Bye Bye [preauth] 2026-06-30T02:53:30.748540-05:00 claude-cloud sshd[411535]: Disconnected from invalid user github 117.72.212.5 port 44232 [preauth] 2026-06-30T02:53:38.572349-05:00 claude-cloud sshd[411560]: Invalid user test from 170.0.62.246 port 46362 2026-06-30T02:53:38.775869-05:00 claude-cloud sshd[411560]: Received disconnect from 170.0.62.246 port 46362:11: Bye Bye [preauth] 2026-06-30T02:53:38.776209-05:00 claude-cloud sshd[411560]: Disconnected from invalid user test 170.0.62.246 port 46362 [preauth] 2026-06-30T02:53:43.062603-05:00 claude-cloud sshd[411565]: Received disconnect from 43.156.24.132 port 32900:11: Bye Bye [preauth] 2026-06-30T02:53:43.062792-05:00 claude-cloud sshd[411565]: Disconnected from authenticating user root 43.156.24.132 port 32900 [preauth] 2026-06-30T02:53:44.121444-05:00 claude-cloud sshd[411574]: Invalid user user2 from 103.97.101.25 port 59906 2026-06-30T02:53:44.316481-05:00 claude-cloud sshd[411574]: Received disconnect from 103.97.101.25 port 59906:11: Bye Bye [preauth] 2026-06-30T02:53:44.316668-05:00 claude-cloud sshd[411574]: Disconnected from invalid user user2 103.97.101.25 port 59906 [preauth] 2026-06-30T02:54:43.013595-05:00 claude-cloud sshd[411730]: Received disconnect from 172.96.182.111 port 42116:11: Bye Bye [preauth] 2026-06-30T02:54:43.013890-05:00 claude-cloud sshd[411730]: Disconnected from authenticating user root 172.96.182.111 port 42116 [preauth] 2026-06-30T02:55:01.432594-05:00 claude-cloud CRON[411805]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T02:55:01.437445-05:00 claude-cloud CRON[411805]: pam_unix(cron:session): session closed for user root 2026-06-30T02:55:22.464602-05:00 claude-cloud sshd[411856]: Received disconnect from 103.97.101.25 port 39678:11: Bye Bye [preauth] 2026-06-30T02:55:22.464778-05:00 claude-cloud sshd[411856]: Disconnected from authenticating user root 103.97.101.25 port 39678 [preauth] 2026-06-30T02:55:32.293386-05:00 claude-cloud sshd[411889]: Invalid user ubuntu from 43.156.24.132 port 50208 2026-06-30T02:55:32.460264-05:00 claude-cloud sshd[411889]: Received disconnect from 43.156.24.132 port 50208:11: Bye Bye [preauth] 2026-06-30T02:55:32.460630-05:00 claude-cloud sshd[411889]: Disconnected from invalid user ubuntu 43.156.24.132 port 50208 [preauth] 2026-06-30T02:55:41.407982-05:00 claude-cloud sshd[411914]: Received disconnect from 117.72.212.5 port 44382:11: Bye Bye [preauth] 2026-06-30T02:55:41.408330-05:00 claude-cloud sshd[411914]: Disconnected from authenticating user root 117.72.212.5 port 44382 [preauth] 2026-06-30T02:55:46.831489-05:00 claude-cloud sshd[411919]: Connection closed by authenticating user root 115.248.8.65 port 58618 [preauth] 2026-06-30T02:55:50.063664-05:00 claude-cloud sshd[411945]: Invalid user test from 91.92.40.231 port 56538 2026-06-30T02:55:50.078330-05:00 claude-cloud sshd[411945]: Connection closed by invalid user test 91.92.40.231 port 56538 [preauth] 2026-06-30T02:55:56.047833-05:00 claude-cloud sshd[411955]: Invalid user centos from 170.0.62.246 port 46866 2026-06-30T02:55:56.248301-05:00 claude-cloud sshd[411955]: Received disconnect from 170.0.62.246 port 46866:11: Bye Bye [preauth] 2026-06-30T02:55:56.248474-05:00 claude-cloud sshd[411955]: Disconnected from invalid user centos 170.0.62.246 port 46866 [preauth] 2026-06-30T02:56:12.822626-05:00 claude-cloud sshd[412010]: Received disconnect from 85.24.223.224 port 45698:11: Bye Bye [preauth] 2026-06-30T02:56:12.823024-05:00 claude-cloud sshd[412010]: Disconnected from authenticating user root 85.24.223.224 port 45698 [preauth] 2026-06-30T02:56:18.976473-05:00 claude-cloud sshd[412019]: Received disconnect from 172.96.182.111 port 48636:11: Bye Bye [preauth] 2026-06-30T02:56:18.980647-05:00 claude-cloud sshd[412019]: Disconnected from authenticating user root 172.96.182.111 port 48636 [preauth] 2026-06-30T02:56:34.626517-05:00 claude-cloud systemd-logind[853]: New session c5154 of user claude. 2026-06-30T02:56:34.927370-05:00 claude-cloud systemd-logind[853]: Session c5154 logged out. Waiting for processes to exit. 2026-06-30T02:56:34.928959-05:00 claude-cloud systemd-logind[853]: Removed session c5154. 2026-06-30T02:56:58.733589-05:00 claude-cloud sshd[412167]: Connection reset by authenticating user root 45.148.10.141 port 39576 [preauth] 2026-06-30T02:57:03.088860-05:00 claude-cloud sshd[412176]: Received disconnect from 103.97.101.25 port 36436:11: Bye Bye [preauth] 2026-06-30T02:57:03.089260-05:00 claude-cloud sshd[412176]: Disconnected from authenticating user root 103.97.101.25 port 36436 [preauth] 2026-06-30T02:57:18.581321-05:00 claude-cloud sshd[412211]: Received disconnect from 43.156.24.132 port 41094:11: Bye Bye [preauth] 2026-06-30T02:57:18.582011-05:00 claude-cloud sshd[412211]: Disconnected from authenticating user root 43.156.24.132 port 41094 [preauth] 2026-06-30T02:57:42.771100-05:00 claude-cloud sshd[412288]: Invalid user admin1 from 193.46.255.86 port 21510 2026-06-30T02:57:42.797022-05:00 claude-cloud sshd[412288]: Connection closed by invalid user admin1 193.46.255.86 port 21510 [preauth] 2026-06-30T02:57:50.263339-05:00 claude-cloud sshd[412304]: Received disconnect from 117.72.212.5 port 44544:11: Bye Bye [preauth] 2026-06-30T02:57:50.264100-05:00 claude-cloud sshd[412304]: Disconnected from authenticating user root 117.72.212.5 port 44544 [preauth] 2026-06-30T02:57:55.966242-05:00 claude-cloud sshd[412316]: Received disconnect from 172.96.182.111 port 55174:11: Bye Bye [preauth] 2026-06-30T02:57:55.967045-05:00 claude-cloud sshd[412316]: Disconnected from authenticating user root 172.96.182.111 port 55174 [preauth] 2026-06-30T02:58:09.941820-05:00 claude-cloud sshd[412367]: Received disconnect from 170.0.62.246 port 60664:11: Bye Bye [preauth] 2026-06-30T02:58:09.942305-05:00 claude-cloud sshd[412367]: Disconnected from authenticating user root 170.0.62.246 port 60664 [preauth] 2026-06-30T02:58:12.149354-05:00 claude-cloud sshd[412353]: Connection closed by 14.103.117.116 port 43972 [preauth] 2026-06-30T02:58:45.043637-05:00 claude-cloud sshd[412479]: Received disconnect from 103.97.101.25 port 49460:11: Bye Bye [preauth] 2026-06-30T02:58:45.044393-05:00 claude-cloud sshd[412479]: Disconnected from authenticating user root 103.97.101.25 port 49460 [preauth] 2026-06-30T02:58:49.653556-05:00 claude-cloud sshd[412452]: Connection closed by authenticating user root 27.71.230.31 port 60488 [preauth] 2026-06-30T02:59:02.629833-05:00 claude-cloud sshd[412537]: Received disconnect from 43.156.24.132 port 53756:11: Bye Bye [preauth] 2026-06-30T02:59:02.630430-05:00 claude-cloud sshd[412537]: Disconnected from authenticating user root 43.156.24.132 port 53756 [preauth] 2026-06-30T02:59:28.656425-05:00 claude-cloud sshd[412589]: Connection closed by authenticating user root 115.248.8.65 port 49408 [preauth] 2026-06-30T02:59:32.991666-05:00 claude-cloud sshd[412622]: Received disconnect from 172.96.182.111 port 33450:11: Bye Bye [preauth] 2026-06-30T02:59:32.991932-05:00 claude-cloud sshd[412622]: Disconnected from authenticating user root 172.96.182.111 port 33450 [preauth] 2026-06-30T02:59:36.484385-05:00 claude-cloud sshd[412627]: Received disconnect from 14.103.117.116 port 52150:11: Bye Bye [preauth] 2026-06-30T02:59:36.484725-05:00 claude-cloud sshd[412627]: Disconnected from authenticating user root 14.103.117.116 port 52150 [preauth] 2026-06-30T02:59:57.515903-05:00 claude-cloud sshd[412697]: Invalid user test from 91.92.40.231 port 40142 2026-06-30T02:59:57.530697-05:00 claude-cloud sshd[412697]: Connection closed by invalid user test 91.92.40.231 port 40142 [preauth] 2026-06-30T02:59:58.747294-05:00 claude-cloud sshd[412695]: Invalid user ubuntu from 117.72.212.5 port 44698 2026-06-30T02:59:58.896651-05:00 claude-cloud sshd[412695]: Received disconnect from 117.72.212.5 port 44698:11: Bye Bye [preauth] 2026-06-30T02:59:58.896940-05:00 claude-cloud sshd[412695]: Disconnected from invalid user ubuntu 117.72.212.5 port 44698 [preauth] 2026-06-30T03:00:24.337326-05:00 claude-cloud sshd[412763]: Invalid user git from 45.198.224.46 port 41158 2026-06-30T03:00:24.983749-05:00 claude-cloud sshd[412763]: Connection closed by invalid user git 45.198.224.46 port 41158 [preauth] 2026-06-30T03:00:25.376253-05:00 claude-cloud sshd[412765]: Received disconnect from 170.0.62.246 port 38868:11: Bye Bye [preauth] 2026-06-30T03:00:25.376640-05:00 claude-cloud sshd[412765]: Disconnected from authenticating user root 170.0.62.246 port 38868 [preauth] 2026-06-30T03:00:25.778185-05:00 claude-cloud sshd[412767]: Invalid user oracle from 103.97.101.25 port 56426 2026-06-30T03:00:25.974087-05:00 claude-cloud sshd[412767]: Received disconnect from 103.97.101.25 port 56426:11: Bye Bye [preauth] 2026-06-30T03:00:25.974385-05:00 claude-cloud sshd[412767]: Disconnected from invalid user oracle 103.97.101.25 port 56426 [preauth] 2026-06-30T03:00:48.329624-05:00 claude-cloud sshd[412898]: Received disconnect from 43.156.24.132 port 36758:11: Bye Bye [preauth] 2026-06-30T03:00:48.330238-05:00 claude-cloud sshd[412898]: Disconnected from authenticating user root 43.156.24.132 port 36758 [preauth] 2026-06-30T03:00:58.114588-05:00 claude-cloud sshd[412927]: Received disconnect from 14.103.117.116 port 42862:11: Bye Bye [preauth] 2026-06-30T03:00:58.117683-05:00 claude-cloud sshd[412927]: Disconnected from authenticating user root 14.103.117.116 port 42862 [preauth] 2026-06-30T03:01:12.859613-05:00 claude-cloud sshd[412979]: Received disconnect from 172.96.182.111 port 39958:11: Bye Bye [preauth] 2026-06-30T03:01:12.859895-05:00 claude-cloud sshd[412979]: Disconnected from authenticating user root 172.96.182.111 port 39958 [preauth] 2026-06-30T03:01:38.135593-05:00 claude-cloud systemd-logind[853]: New session c5155 of user claude. 2026-06-30T03:01:38.440722-05:00 claude-cloud systemd-logind[853]: Session c5155 logged out. Waiting for processes to exit. 2026-06-30T03:01:38.443085-05:00 claude-cloud systemd-logind[853]: Removed session c5155. 2026-06-30T03:02:10.863262-05:00 claude-cloud sshd[413148]: Received disconnect from 103.97.101.25 port 39854:11: Bye Bye [preauth] 2026-06-30T03:02:10.863683-05:00 claude-cloud sshd[413148]: Disconnected from authenticating user root 103.97.101.25 port 39854 [preauth] 2026-06-30T03:02:12.855954-05:00 claude-cloud sshd[413153]: Invalid user ubuntu from 117.72.212.5 port 44852 2026-06-30T03:02:12.993421-05:00 claude-cloud sshd[413153]: Received disconnect from 117.72.212.5 port 44852:11: Bye Bye [preauth] 2026-06-30T03:02:12.993739-05:00 claude-cloud sshd[413153]: Disconnected from invalid user ubuntu 117.72.212.5 port 44852 [preauth] 2026-06-30T03:02:25.423992-05:00 claude-cloud sshd[413187]: Received disconnect from 85.24.223.224 port 40456:11: Bye Bye [preauth] 2026-06-30T03:02:25.424717-05:00 claude-cloud sshd[413187]: Disconnected from authenticating user root 85.24.223.224 port 40456 [preauth] 2026-06-30T03:02:28.268650-05:00 claude-cloud sshd[413200]: Connection reset by authenticating user root 45.148.10.151 port 41204 [preauth] 2026-06-30T03:02:34.496720-05:00 claude-cloud sshd[413221]: Received disconnect from 43.156.24.132 port 55178:11: Bye Bye [preauth] 2026-06-30T03:02:34.497235-05:00 claude-cloud sshd[413221]: Disconnected from authenticating user root 43.156.24.132 port 55178 [preauth] 2026-06-30T03:02:50.237617-05:00 claude-cloud sshd[413277]: Received disconnect from 170.0.62.246 port 48408:11: Bye Bye [preauth] 2026-06-30T03:02:50.238361-05:00 claude-cloud sshd[413277]: Disconnected from authenticating user root 170.0.62.246 port 48408 [preauth] 2026-06-30T03:02:54.562701-05:00 claude-cloud sshd[413282]: Received disconnect from 205.185.125.209 port 51264:11: disconnected by user [preauth] 2026-06-30T03:02:54.562944-05:00 claude-cloud sshd[413282]: Disconnected from authenticating user root 205.185.125.209 port 51264 [preauth] 2026-06-30T03:02:54.649882-05:00 claude-cloud sshd[413284]: Received disconnect from 172.96.182.111 port 46450:11: Bye Bye [preauth] 2026-06-30T03:02:54.650350-05:00 claude-cloud sshd[413284]: Disconnected from authenticating user root 172.96.182.111 port 46450 [preauth] 2026-06-30T03:03:09.056852-05:00 claude-cloud sshd[413328]: Connection closed by authenticating user root 115.248.8.65 port 46408 [preauth] 2026-06-30T03:03:54.234387-05:00 claude-cloud sshd[413466]: Received disconnect from 103.97.101.25 port 43444:11: Bye Bye [preauth] 2026-06-30T03:03:54.234974-05:00 claude-cloud sshd[413466]: Disconnected from authenticating user root 103.97.101.25 port 43444 [preauth] 2026-06-30T03:04:19.371332-05:00 claude-cloud sshd[413533]: Received disconnect from 43.156.24.132 port 39454:11: Bye Bye [preauth] 2026-06-30T03:04:19.371693-05:00 claude-cloud sshd[413533]: Disconnected from authenticating user root 43.156.24.132 port 39454 [preauth] 2026-06-30T03:04:31.437425-05:00 claude-cloud sshd[413583]: Received disconnect from 117.72.212.5 port 45002:11: Bye Bye [preauth] 2026-06-30T03:04:31.437895-05:00 claude-cloud sshd[413583]: Disconnected from authenticating user root 117.72.212.5 port 45002 [preauth] 2026-06-30T03:04:36.335119-05:00 claude-cloud sshd[413598]: Invalid user test from 91.92.40.231 port 53374 2026-06-30T03:04:36.351768-05:00 claude-cloud sshd[413598]: Connection closed by invalid user test 91.92.40.231 port 53374 [preauth] 2026-06-30T03:04:41.931089-05:00 claude-cloud sshd[413586]: Connection closed by authenticating user root 27.71.230.31 port 35314 [preauth] 2026-06-30T03:05:01.448432-05:00 claude-cloud CRON[413688]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T03:05:01.454100-05:00 claude-cloud CRON[413688]: pam_unix(cron:session): session closed for user root 2026-06-30T03:05:08.048612-05:00 claude-cloud sshd[413701]: Received disconnect from 170.0.62.246 port 47958:11: Bye Bye [preauth] 2026-06-30T03:05:08.049574-05:00 claude-cloud sshd[413701]: Disconnected from authenticating user root 170.0.62.246 port 47958 [preauth] 2026-06-30T03:05:13.333691-05:00 claude-cloud sshd[413716]: Connection reset by 14.103.117.116 port 39458 [preauth] 2026-06-30T03:05:36.268531-05:00 claude-cloud sshd[413784]: Received disconnect from 85.24.223.224 port 54588:11: Bye Bye [preauth] 2026-06-30T03:05:36.270167-05:00 claude-cloud sshd[413784]: Disconnected from authenticating user root 85.24.223.224 port 54588 [preauth] 2026-06-30T03:06:13.382910-05:00 claude-cloud sshd[413886]: Connection closed by authenticating user root 45.148.10.239 port 47344 [preauth] 2026-06-30T03:06:41.713270-05:00 claude-cloud systemd-logind[853]: New session c5156 of user claude. 2026-06-30T03:06:41.991480-05:00 claude-cloud systemd-logind[853]: Session c5156 logged out. Waiting for processes to exit. 2026-06-30T03:06:41.994058-05:00 claude-cloud systemd-logind[853]: Removed session c5156. 2026-06-30T03:06:49.242867-05:00 claude-cloud sshd[414003]: Received disconnect from 117.72.212.5 port 45152:11: Bye Bye [preauth] 2026-06-30T03:06:49.243337-05:00 claude-cloud sshd[414003]: Disconnected from authenticating user root 117.72.212.5 port 45152 [preauth] 2026-06-30T03:06:53.558993-05:00 claude-cloud sshd[414015]: Invalid user photo from 115.248.8.65 port 32830 2026-06-30T03:06:54.147410-05:00 claude-cloud sshd[414015]: Connection closed by invalid user photo 115.248.8.65 port 32830 [preauth] 2026-06-30T03:07:28.193862-05:00 claude-cloud sshd[414119]: Received disconnect from 170.0.62.246 port 55704:11: Bye Bye [preauth] 2026-06-30T03:07:28.194195-05:00 claude-cloud sshd[414119]: Disconnected from authenticating user root 170.0.62.246 port 55704 [preauth] 2026-06-30T03:07:57.123936-05:00 claude-cloud sshd[414196]: Connection reset by authenticating user root 45.148.10.151 port 56208 [preauth] 2026-06-30T03:08:16.520063-05:00 claude-cloud sshd[414245]: Connection closed by 141.11.88.11 port 14210 2026-06-30T03:08:38.402202-05:00 claude-cloud sshd[414310]: Connection closed by authenticating user root 141.11.88.11 port 40822 [preauth] 2026-06-30T03:09:06.619760-05:00 claude-cloud sshd[414404]: Invalid user userftp from 117.72.212.5 port 45300 2026-06-30T03:09:06.784983-05:00 claude-cloud sshd[414404]: Received disconnect from 117.72.212.5 port 45300:11: Bye Bye [preauth] 2026-06-30T03:09:06.785447-05:00 claude-cloud sshd[414404]: Disconnected from invalid user userftp 117.72.212.5 port 45300 [preauth] 2026-06-30T03:09:33.970162-05:00 claude-cloud sshd[414487]: Invalid user test from 91.92.40.231 port 59370 2026-06-30T03:09:33.988657-05:00 claude-cloud sshd[414487]: Connection closed by invalid user test 91.92.40.231 port 59370 [preauth] 2026-06-30T03:09:51.961445-05:00 claude-cloud sshd[414529]: Received disconnect from 170.0.62.246 port 35476:11: Bye Bye [preauth] 2026-06-30T03:09:51.961942-05:00 claude-cloud sshd[414529]: Disconnected from authenticating user root 170.0.62.246 port 35476 [preauth] 2026-06-30T03:10:01.197013-05:00 claude-cloud sshd[414550]: Connection closed by authenticating user root 45.198.224.46 port 44360 [preauth] 2026-06-30T03:10:01.464840-05:00 claude-cloud CRON[414568]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T03:10:01.469226-05:00 claude-cloud CRON[414568]: pam_unix(cron:session): session closed for user root 2026-06-30T03:10:38.768371-05:00 claude-cloud sshd[414648]: Connection closed by authenticating user root 27.71.230.31 port 49118 [preauth] 2026-06-30T03:10:39.991564-05:00 claude-cloud sshd[414661]: Invalid user oracle from 115.248.8.65 port 37972 2026-06-30T03:10:40.657320-05:00 claude-cloud sshd[414661]: Connection closed by invalid user oracle 115.248.8.65 port 37972 [preauth] 2026-06-30T03:11:19.281801-05:00 claude-cloud sshd[414785]: Invalid user ftpuser from 117.72.212.5 port 45448 2026-06-30T03:11:19.796995-05:00 claude-cloud sshd[414785]: Received disconnect from 117.72.212.5 port 45448:11: Bye Bye [preauth] 2026-06-30T03:11:19.797249-05:00 claude-cloud sshd[414785]: Disconnected from invalid user ftpuser 117.72.212.5 port 45448 [preauth] 2026-06-30T03:11:45.279194-05:00 claude-cloud systemd-logind[853]: New session c5157 of user claude. 2026-06-30T03:11:45.552273-05:00 claude-cloud systemd-logind[853]: Session c5157 logged out. Waiting for processes to exit. 2026-06-30T03:11:45.554107-05:00 claude-cloud systemd-logind[853]: Removed session c5157. 2026-06-30T03:12:08.433465-05:00 claude-cloud sshd[415012]: Received disconnect from 170.0.62.246 port 59666:11: Bye Bye [preauth] 2026-06-30T03:12:08.433790-05:00 claude-cloud sshd[415012]: Disconnected from authenticating user root 170.0.62.246 port 59666 [preauth] 2026-06-30T03:13:20.341022-05:00 claude-cloud sshd[415203]: Connection closed by 161.35.47.134 port 50566 2026-06-30T03:13:23.817003-05:00 claude-cloud sshd[415214]: Connection reset by authenticating user root 45.227.254.170 port 30414 [preauth] 2026-06-30T03:13:32.755625-05:00 claude-cloud sshd[415247]: Received disconnect from 117.72.212.5 port 45600:11: Bye Bye [preauth] 2026-06-30T03:13:32.756040-05:00 claude-cloud sshd[415247]: Disconnected from authenticating user root 117.72.212.5 port 45600 [preauth] 2026-06-30T03:14:16.652395-05:00 claude-cloud sshd[415375]: Invalid user test from 91.92.40.231 port 40396 2026-06-30T03:14:16.667100-05:00 claude-cloud sshd[415375]: Connection closed by invalid user test 91.92.40.231 port 40396 [preauth] 2026-06-30T03:14:17.898733-05:00 claude-cloud sshd[415373]: Invalid user moxa from 115.248.8.65 port 34060 2026-06-30T03:14:18.234663-05:00 claude-cloud sshd[415373]: Connection closed by invalid user moxa 115.248.8.65 port 34060 [preauth] 2026-06-30T03:14:58.883139-05:00 claude-cloud sshd[415510]: Invalid user oracle from 85.24.223.224 port 49640 2026-06-30T03:14:58.921269-05:00 claude-cloud sshd[415510]: Received disconnect from 85.24.223.224 port 49640:11: Bye Bye [preauth] 2026-06-30T03:14:58.921793-05:00 claude-cloud sshd[415510]: Disconnected from invalid user oracle 85.24.223.224 port 49640 [preauth] 2026-06-30T03:15:01.479789-05:00 claude-cloud CRON[415512]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T03:15:01.486844-05:00 claude-cloud CRON[415512]: pam_unix(cron:session): session closed for user root 2026-06-30T03:16:31.267916-05:00 claude-cloud sshd[415775]: Connection closed by 161.35.47.134 port 33794 2026-06-30T03:16:39.620498-05:00 claude-cloud sshd[415747]: Connection closed by authenticating user root 27.71.230.31 port 42718 [preauth] 2026-06-30T03:16:48.783847-05:00 claude-cloud systemd-logind[853]: New session c5158 of user claude. 2026-06-30T03:16:49.101041-05:00 claude-cloud systemd-logind[853]: Session c5158 logged out. Waiting for processes to exit. 2026-06-30T03:16:49.102607-05:00 claude-cloud systemd-logind[853]: Removed session c5158. 2026-06-30T03:17:01.494296-05:00 claude-cloud CRON[415861]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T03:17:01.503947-05:00 claude-cloud CRON[415861]: pam_unix(cron:session): session closed for user root 2026-06-30T03:18:05.827828-05:00 claude-cloud sshd[416042]: Invalid user miner from 115.248.8.65 port 43630 2026-06-30T03:18:06.260142-05:00 claude-cloud sshd[416054]: Invalid user user2 from 85.24.223.224 port 53302 2026-06-30T03:18:06.286636-05:00 claude-cloud sshd[416042]: Connection closed by invalid user miner 115.248.8.65 port 43630 [preauth] 2026-06-30T03:18:06.305096-05:00 claude-cloud sshd[416054]: Received disconnect from 85.24.223.224 port 53302:11: Bye Bye [preauth] 2026-06-30T03:18:06.305571-05:00 claude-cloud sshd[416054]: Disconnected from invalid user user2 85.24.223.224 port 53302 [preauth] 2026-06-30T03:18:51.897670-05:00 claude-cloud sshd[416174]: Connection reset by authenticating user root 45.227.254.170 port 16336 [preauth] 2026-06-30T03:19:17.787405-05:00 claude-cloud sshd[416246]: Connection closed by 36.41.186.9 port 46858 2026-06-30T03:19:21.546230-05:00 claude-cloud sshd[416263]: Invalid user user from 91.92.40.231 port 43928 2026-06-30T03:19:21.562007-05:00 claude-cloud sshd[416263]: Connection closed by invalid user user 91.92.40.231 port 43928 [preauth] 2026-06-30T03:19:22.988825-05:00 claude-cloud sshd[416250]: Connection closed by authenticating user root 36.41.186.9 port 47376 [preauth] 2026-06-30T03:19:29.207153-05:00 claude-cloud sshd[416272]: Invalid user guest from 45.198.224.46 port 34818 2026-06-30T03:19:29.896214-05:00 claude-cloud sshd[416272]: Connection closed by invalid user guest 45.198.224.46 port 34818 [preauth] 2026-06-30T03:20:49.475228-05:00 claude-cloud sshd[416520]: Connection closed by 45.148.10.121 port 50444 [preauth] 2026-06-30T03:21:16.506222-05:00 claude-cloud sshd[416593]: Received disconnect from 85.24.223.224 port 59928:11: Bye Bye [preauth] 2026-06-30T03:21:16.506743-05:00 claude-cloud sshd[416593]: Disconnected from authenticating user root 85.24.223.224 port 59928 [preauth] 2026-06-30T03:21:50.257985-05:00 claude-cloud sshd[416748]: Invalid user install from 115.248.8.65 port 60556 2026-06-30T03:21:51.099497-05:00 claude-cloud sshd[416748]: Connection closed by invalid user install 115.248.8.65 port 60556 [preauth] 2026-06-30T03:21:53.088722-05:00 claude-cloud systemd-logind[853]: New session c5159 of user claude. 2026-06-30T03:21:53.474527-05:00 claude-cloud systemd-logind[853]: Session c5159 logged out. Waiting for processes to exit. 2026-06-30T03:21:53.476072-05:00 claude-cloud systemd-logind[853]: Removed session c5159. 2026-06-30T03:22:34.533387-05:00 claude-cloud sshd[416837]: Connection closed by authenticating user root 27.71.230.31 port 39712 [preauth] 2026-06-30T03:24:17.650470-05:00 claude-cloud sshd[417183]: Connection reset by authenticating user root 45.227.254.170 port 39078 [preauth] 2026-06-30T03:24:22.219911-05:00 claude-cloud sshd[417199]: Received disconnect from 85.24.223.224 port 46678:11: Bye Bye [preauth] 2026-06-30T03:24:22.220200-05:00 claude-cloud sshd[417199]: Disconnected from authenticating user root 85.24.223.224 port 46678 [preauth] 2026-06-30T03:24:50.694133-05:00 claude-cloud sshd[417284]: Invalid user user from 91.92.40.231 port 49264 2026-06-30T03:24:50.718984-05:00 claude-cloud sshd[417284]: Connection closed by invalid user user 91.92.40.231 port 49264 [preauth] 2026-06-30T03:25:01.517589-05:00 claude-cloud CRON[417318]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T03:25:01.523605-05:00 claude-cloud CRON[417318]: pam_unix(cron:session): session closed for user root 2026-06-30T03:25:29.747793-05:00 claude-cloud sshd[417375]: Invalid user ftpuser from 115.248.8.65 port 38604 2026-06-30T03:25:30.473848-05:00 claude-cloud sshd[417375]: Connection closed by invalid user ftpuser 115.248.8.65 port 38604 [preauth] 2026-06-30T03:26:44.524776-05:00 claude-cloud sshd[417613]: Invalid user jazzmine from 2.57.121.112 port 21806 2026-06-30T03:26:44.550787-05:00 claude-cloud sshd[417613]: Connection closed by invalid user jazzmine 2.57.121.112 port 21806 [preauth] 2026-06-30T03:26:56.770523-05:00 claude-cloud systemd-logind[853]: New session c5160 of user claude. 2026-06-30T03:26:57.063652-05:00 claude-cloud systemd-logind[853]: Session c5160 logged out. Waiting for processes to exit. 2026-06-30T03:26:57.065169-05:00 claude-cloud systemd-logind[853]: Removed session c5160. 2026-06-30T03:28:18.417253-05:00 claude-cloud sshd[417882]: Connection closed by authenticating user root 27.71.230.31 port 55476 [preauth] 2026-06-30T03:29:08.034619-05:00 claude-cloud sshd[418020]: Connection closed by authenticating user root 45.198.224.46 port 43572 [preauth] 2026-06-30T03:29:14.604849-05:00 claude-cloud sshd[418041]: Invalid user ftp from 115.248.8.65 port 33948 2026-06-30T03:29:15.034438-05:00 claude-cloud sshd[418041]: Connection closed by invalid user ftp 115.248.8.65 port 33948 [preauth] 2026-06-30T03:29:52.150520-05:00 claude-cloud sshd[418163]: Connection reset by authenticating user root 45.148.10.147 port 27660 [preauth] 2026-06-30T03:30:25.494852-05:00 claude-cloud sshd[418251]: Invalid user user from 91.92.40.231 port 51982 2026-06-30T03:30:25.511271-05:00 claude-cloud sshd[418251]: Connection closed by invalid user user 91.92.40.231 port 51982 [preauth] 2026-06-30T03:30:54.669217-05:00 claude-cloud sshd[418337]: Connection closed by 161.35.47.134 port 40842 2026-06-30T03:32:00.312510-05:00 claude-cloud systemd-logind[853]: New session c5161 of user claude. 2026-06-30T03:32:00.629521-05:00 claude-cloud systemd-logind[853]: Session c5161 logged out. Waiting for processes to exit. 2026-06-30T03:32:00.630950-05:00 claude-cloud systemd-logind[853]: Removed session c5161. 2026-06-30T03:32:53.718414-05:00 claude-cloud sshd[418738]: Invalid user fa from 115.248.8.65 port 47970 2026-06-30T03:32:54.182964-05:00 claude-cloud sshd[418738]: Connection closed by invalid user fa 115.248.8.65 port 47970 [preauth] 2026-06-30T03:34:16.808728-05:00 claude-cloud sshd[418954]: Connection closed by authenticating user root 27.71.230.31 port 36616 [preauth] 2026-06-30T03:35:01.538369-05:00 claude-cloud CRON[419118]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T03:35:01.545208-05:00 claude-cloud CRON[419118]: pam_unix(cron:session): session closed for user root 2026-06-30T03:35:23.923229-05:00 claude-cloud sshd[419169]: Connection reset by authenticating user root 45.148.10.147 port 21346 [preauth] 2026-06-30T03:36:03.621787-05:00 claude-cloud sshd[419302]: Invalid user user from 91.92.40.231 port 60498 2026-06-30T03:36:03.639577-05:00 claude-cloud sshd[419302]: Connection closed by invalid user user 91.92.40.231 port 60498 [preauth] 2026-06-30T03:36:38.890915-05:00 claude-cloud sshd[419389]: Invalid user deployer from 115.248.8.65 port 59260 2026-06-30T03:36:39.357551-05:00 claude-cloud sshd[419389]: Connection closed by invalid user deployer 115.248.8.65 port 59260 [preauth] 2026-06-30T03:36:56.481583-05:00 claude-cloud sshd[419439]: Connection closed by 51.158.205.203 port 61000 2026-06-30T03:37:04.029874-05:00 claude-cloud systemd-logind[853]: New session c5162 of user claude. 2026-06-30T03:37:04.324666-05:00 claude-cloud systemd-logind[853]: Session c5162 logged out. Waiting for processes to exit. 2026-06-30T03:37:04.326024-05:00 claude-cloud systemd-logind[853]: Removed session c5162. 2026-06-30T03:38:33.820610-05:00 claude-cloud sshd[419729]: Connection closed by authenticating user root 45.198.224.46 port 54286 [preauth] 2026-06-30T03:40:14.159560-05:00 claude-cloud sshd[419979]: Connection closed by authenticating user root 27.71.230.31 port 33248 [preauth] 2026-06-30T03:40:23.925009-05:00 claude-cloud sshd[420040]: Invalid user deploy from 115.248.8.65 port 59660 2026-06-30T03:40:24.330163-05:00 claude-cloud sshd[420040]: Connection closed by invalid user deploy 115.248.8.65 port 59660 [preauth] 2026-06-30T03:40:58.566888-05:00 claude-cloud sshd[420148]: Connection reset by authenticating user root 45.148.10.152 port 10686 [preauth] 2026-06-30T03:41:42.844043-05:00 claude-cloud sshd[420269]: Invalid user user from 91.92.40.231 port 42398 2026-06-30T03:41:42.859982-05:00 claude-cloud sshd[420269]: Connection closed by invalid user user 91.92.40.231 port 42398 [preauth] 2026-06-30T03:42:07.740991-05:00 claude-cloud systemd-logind[853]: New session c5163 of user claude. 2026-06-30T03:42:08.043940-05:00 claude-cloud systemd-logind[853]: Session c5163 logged out. Waiting for processes to exit. 2026-06-30T03:42:08.045225-05:00 claude-cloud systemd-logind[853]: Removed session c5163. 2026-06-30T03:43:49.029172-05:00 claude-cloud sshd[420699]: Unable to negotiate with 51.158.205.203 port 53028: no matching host key type found. Their offer: sk-ecdsa-sha2-nistp256@openssh.com [preauth] 2026-06-30T03:43:49.270142-05:00 claude-cloud sshd[420702]: Connection closed by 51.158.205.203 port 52998 [preauth] 2026-06-30T03:43:49.451037-05:00 claude-cloud sshd[420701]: Connection closed by 51.158.205.203 port 53000 [preauth] 2026-06-30T03:43:49.645163-05:00 claude-cloud sshd[420703]: Connection closed by 51.158.205.203 port 53016 [preauth] 2026-06-30T03:43:49.666606-05:00 claude-cloud sshd[420700]: Unable to negotiate with 51.158.205.203 port 53044: no matching host key type found. Their offer: sk-ssh-ed25519@openssh.com [preauth] 2026-06-30T03:44:09.617890-05:00 claude-cloud sshd[420759]: Invalid user debian from 115.248.8.65 port 46698 2026-06-30T03:44:10.329228-05:00 claude-cloud sshd[420759]: Connection closed by invalid user debian 115.248.8.65 port 46698 [preauth] 2026-06-30T03:45:01.556730-05:00 claude-cloud CRON[420915]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T03:45:01.562541-05:00 claude-cloud CRON[420915]: pam_unix(cron:session): session closed for user root 2026-06-30T03:45:59.217779-05:00 claude-cloud sshd[421058]: Connection closed by authenticating user root 27.71.230.31 port 54776 [preauth] 2026-06-30T03:46:09.237463-05:00 claude-cloud sshd[421117]: userauth_pubkey: signature algorithm ssh-dss not in PubkeyAcceptedAlgorithms [preauth] 2026-06-30T03:46:09.347355-05:00 claude-cloud sshd[421117]: Received disconnect from 176.65.131.192 port 49928:11: disconnected by user [preauth] 2026-06-30T03:46:09.347638-05:00 claude-cloud sshd[421117]: Disconnected from authenticating user root 176.65.131.192 port 49928 [preauth] 2026-06-30T03:46:29.123271-05:00 claude-cloud sshd[421181]: Connection reset by authenticating user root 45.227.254.170 port 41026 [preauth] 2026-06-30T03:47:11.354383-05:00 claude-cloud systemd-logind[853]: New session c5164 of user claude. 2026-06-30T03:47:11.668230-05:00 claude-cloud systemd-logind[853]: Session c5164 logged out. Waiting for processes to exit. 2026-06-30T03:47:11.670872-05:00 claude-cloud systemd-logind[853]: Removed session c5164. 2026-06-30T03:47:15.227861-05:00 claude-cloud sshd[421307]: Invalid user user from 91.92.40.231 port 33072 2026-06-30T03:47:15.247972-05:00 claude-cloud sshd[421307]: Connection closed by invalid user user 91.92.40.231 port 33072 [preauth] 2026-06-30T03:47:25.714781-05:00 claude-cloud sshd[421330]: Invalid user admin from 2.57.121.25 port 36750 2026-06-30T03:47:25.740910-05:00 claude-cloud sshd[421330]: Connection closed by invalid user admin 2.57.121.25 port 36750 [preauth] 2026-06-30T03:47:55.983898-05:00 claude-cloud sshd[421421]: Invalid user cacti from 115.248.8.65 port 47594 2026-06-30T03:47:56.712702-05:00 claude-cloud sshd[421421]: Connection closed by invalid user cacti 115.248.8.65 port 47594 [preauth] 2026-06-30T03:48:02.985200-05:00 claude-cloud sshd[421455]: Invalid user john from 45.198.224.46 port 38196 2026-06-30T03:48:03.579212-05:00 claude-cloud sshd[421455]: Connection closed by invalid user john 45.198.224.46 port 38196 [preauth] 2026-06-30T03:49:04.251641-05:00 claude-cloud sshd[421625]: Connection closed by authenticating user root 193.46.255.86 port 27962 [preauth] 2026-06-30T03:49:54.870715-05:00 claude-cloud sshd[421771]: Connection closed by 161.35.47.134 port 45968 2026-06-30T03:51:31.556921-05:00 claude-cloud sshd[422036]: Invalid user amssys from 115.248.8.65 port 44534 2026-06-30T03:51:32.036619-05:00 claude-cloud sshd[422036]: Connection closed by invalid user amssys 115.248.8.65 port 44534 [preauth] 2026-06-30T03:51:59.143566-05:00 claude-cloud sshd[422142]: Connection reset by authenticating user root 45.148.10.157 port 46314 [preauth] 2026-06-30T03:52:04.758954-05:00 claude-cloud sshd[422107]: Connection closed by authenticating user root 27.71.230.31 port 44152 [preauth] 2026-06-30T03:52:09.658681-05:00 claude-cloud sshd[422168]: Invalid user admin from 45.148.10.121 port 58526 2026-06-30T03:52:09.673901-05:00 claude-cloud sshd[422168]: Connection closed by invalid user admin 45.148.10.121 port 58526 [preauth] 2026-06-30T03:52:14.927078-05:00 claude-cloud systemd-logind[853]: New session c5165 of user claude. 2026-06-30T03:52:15.217511-05:00 claude-cloud systemd-logind[853]: Session c5165 logged out. Waiting for processes to exit. 2026-06-30T03:52:15.218623-05:00 claude-cloud systemd-logind[853]: Removed session c5165. 2026-06-30T03:52:47.048550-05:00 claude-cloud sshd[422347]: Invalid user user from 91.92.40.231 port 34928 2026-06-30T03:52:47.064990-05:00 claude-cloud sshd[422347]: Connection closed by invalid user user 91.92.40.231 port 34928 [preauth] 2026-06-30T03:53:53.737683-05:00 claude-cloud sshd[422524]: Connection closed by 161.35.47.134 port 58518 2026-06-30T03:55:01.583410-05:00 claude-cloud CRON[422736]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T03:55:01.587213-05:00 claude-cloud CRON[422736]: pam_unix(cron:session): session closed for user root 2026-06-30T03:55:17.611975-05:00 claude-cloud sshd[422765]: Invalid user test from 115.248.8.65 port 35384 2026-06-30T03:55:18.273209-05:00 claude-cloud sshd[422765]: Connection closed by invalid user test 115.248.8.65 port 35384 [preauth] 2026-06-30T03:57:18.504598-05:00 claude-cloud systemd-logind[853]: New session c5166 of user claude. 2026-06-30T03:57:18.857594-05:00 claude-cloud systemd-logind[853]: Session c5166 logged out. Waiting for processes to exit. 2026-06-30T03:57:18.859232-05:00 claude-cloud systemd-logind[853]: Removed session c5166. 2026-06-30T03:57:30.593106-05:00 claude-cloud sshd[423161]: Connection reset by authenticating user root 45.148.10.151 port 42448 [preauth] 2026-06-30T03:57:36.978950-05:00 claude-cloud sshd[423170]: Connection closed by authenticating user root 45.198.224.46 port 51754 [preauth] 2026-06-30T03:58:01.103233-05:00 claude-cloud sshd[423191]: Connection closed by authenticating user root 27.71.230.31 port 60208 [preauth] 2026-06-30T03:58:22.508754-05:00 claude-cloud sshd[423304]: Invalid user user from 91.92.40.231 port 36138 2026-06-30T03:58:22.524745-05:00 claude-cloud sshd[423304]: Connection closed by invalid user user 91.92.40.231 port 36138 [preauth] 2026-06-30T03:58:54.361097-05:00 claude-cloud sshd[423404]: Invalid user tester from 115.248.8.65 port 40822 2026-06-30T03:58:54.708038-05:00 claude-cloud sshd[423404]: Connection closed by invalid user tester 115.248.8.65 port 40822 [preauth] 2026-06-30T04:02:22.226124-05:00 claude-cloud systemd-logind[853]: New session c5167 of user claude. 2026-06-30T04:02:22.526061-05:00 claude-cloud systemd-logind[853]: Session c5167 logged out. Waiting for processes to exit. 2026-06-30T04:02:22.528188-05:00 claude-cloud systemd-logind[853]: Removed session c5167. 2026-06-30T04:02:39.462932-05:00 claude-cloud sshd[424042]: Invalid user scanner from 115.248.8.65 port 54390 2026-06-30T04:02:39.904701-05:00 claude-cloud sshd[424042]: Connection closed by invalid user scanner 115.248.8.65 port 54390 [preauth] 2026-06-30T04:03:02.176957-05:00 claude-cloud sshd[424183]: Connection reset by authenticating user root 45.148.10.152 port 57406 [preauth] 2026-06-30T04:03:44.459712-05:00 claude-cloud sshd[424297]: Invalid user ubuntu from 91.92.40.231 port 45872 2026-06-30T04:03:44.478474-05:00 claude-cloud sshd[424297]: Connection closed by invalid user ubuntu 91.92.40.231 port 45872 [preauth] 2026-06-30T04:03:47.496417-05:00 claude-cloud sshd[424269]: Connection closed by authenticating user root 27.71.230.31 port 58394 [preauth] 2026-06-30T04:05:01.600129-05:00 claude-cloud CRON[424531]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T04:05:01.606366-05:00 claude-cloud CRON[424531]: pam_unix(cron:session): session closed for user root 2026-06-30T04:06:15.753902-05:00 claude-cloud sshd[424726]: Received disconnect from 64.98.83.243 port 45638:11: Bye Bye [preauth] 2026-06-30T04:06:15.754950-05:00 claude-cloud sshd[424726]: Disconnected from authenticating user root 64.98.83.243 port 45638 [preauth] 2026-06-30T04:06:24.110523-05:00 claude-cloud sshd[424739]: Invalid user rust from 115.248.8.65 port 47282 2026-06-30T04:06:24.556532-05:00 claude-cloud sshd[424739]: Connection closed by invalid user rust 115.248.8.65 port 47282 [preauth] 2026-06-30T04:07:07.768536-05:00 claude-cloud sshd[424879]: Connection closed by authenticating user root 45.198.224.46 port 34166 [preauth] 2026-06-30T04:07:25.758622-05:00 claude-cloud systemd-logind[853]: New session c5168 of user claude. 2026-06-30T04:07:26.041646-05:00 claude-cloud systemd-logind[853]: Session c5168 logged out. Waiting for processes to exit. 2026-06-30T04:07:26.043833-05:00 claude-cloud systemd-logind[853]: Removed session c5168. 2026-06-30T04:08:37.203632-05:00 claude-cloud sshd[425139]: Connection reset by authenticating user root 45.148.10.141 port 60782 [preauth] 2026-06-30T04:09:02.617546-05:00 claude-cloud sshd[425225]: Invalid user ubuntu from 91.92.40.231 port 47182 2026-06-30T04:09:02.634923-05:00 claude-cloud sshd[425225]: Connection closed by invalid user ubuntu 91.92.40.231 port 47182 [preauth] 2026-06-30T04:09:48.724672-05:00 claude-cloud sshd[425321]: Connection closed by authenticating user root 27.71.230.31 port 58752 [preauth] 2026-06-30T04:10:03.098072-05:00 claude-cloud sshd[425385]: Connection closed by authenticating user root 115.248.8.65 port 42522 [preauth] 2026-06-30T04:12:29.292260-05:00 claude-cloud systemd-logind[853]: New session c5169 of user claude. 2026-06-30T04:12:29.610766-05:00 claude-cloud systemd-logind[853]: Session c5169 logged out. Waiting for processes to exit. 2026-06-30T04:12:29.612063-05:00 claude-cloud systemd-logind[853]: Removed session c5169. 2026-06-30T04:13:50.384861-05:00 claude-cloud sshd[426105]: Connection closed by authenticating user root 115.248.8.65 port 39564 [preauth] 2026-06-30T04:14:11.207937-05:00 claude-cloud sshd[426179]: Connection reset by authenticating user root 45.148.10.151 port 19658 [preauth] 2026-06-30T04:14:20.003349-05:00 claude-cloud sshd[426199]: Invalid user ubuntu from 91.92.40.231 port 36974 2026-06-30T04:14:20.019673-05:00 claude-cloud sshd[426199]: Connection closed by invalid user ubuntu 91.92.40.231 port 36974 [preauth] 2026-06-30T04:14:26.863084-05:00 claude-cloud sshd[426212]: Invalid user test from 64.98.83.243 port 51550 2026-06-30T04:14:26.971576-05:00 claude-cloud sshd[426212]: Received disconnect from 64.98.83.243 port 51550:11: Bye Bye [preauth] 2026-06-30T04:14:26.971754-05:00 claude-cloud sshd[426212]: Disconnected from invalid user test 64.98.83.243 port 51550 [preauth] 2026-06-30T04:15:01.625616-05:00 claude-cloud CRON[426331]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T04:15:01.631373-05:00 claude-cloud CRON[426331]: pam_unix(cron:session): session closed for user root 2026-06-30T04:15:57.836072-05:00 claude-cloud sshd[426409]: Connection closed by authenticating user root 27.71.230.31 port 56158 [preauth] 2026-06-30T04:16:04.777378-05:00 claude-cloud sshd[426523]: Received disconnect from 64.98.83.243 port 58968:11: Bye Bye [preauth] 2026-06-30T04:16:04.777604-05:00 claude-cloud sshd[426523]: Disconnected from authenticating user root 64.98.83.243 port 58968 [preauth] 2026-06-30T04:16:42.535884-05:00 claude-cloud sshd[426618]: Invalid user cs from 45.198.224.46 port 49786 2026-06-30T04:16:43.242388-05:00 claude-cloud sshd[426618]: Connection closed by invalid user cs 45.198.224.46 port 49786 [preauth] 2026-06-30T04:17:01.640633-05:00 claude-cloud CRON[426676]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T04:17:01.647835-05:00 claude-cloud CRON[426676]: pam_unix(cron:session): session closed for user root 2026-06-30T04:17:33.186069-05:00 claude-cloud systemd-logind[853]: New session c5170 of user claude. 2026-06-30T04:17:33.485248-05:00 claude-cloud systemd-logind[853]: Session c5170 logged out. Waiting for processes to exit. 2026-06-30T04:17:33.486703-05:00 claude-cloud systemd-logind[853]: Removed session c5170. 2026-06-30T04:17:33.510032-05:00 claude-cloud sshd[426772]: Connection closed by authenticating user root 185.242.3.195 port 38654 [preauth] 2026-06-30T04:17:35.036778-05:00 claude-cloud sshd[426748]: Connection closed by authenticating user root 115.248.8.65 port 46044 [preauth] 2026-06-30T04:17:47.429685-05:00 claude-cloud sshd[426826]: Invalid user demo from 64.98.83.243 port 51304 2026-06-30T04:17:47.542740-05:00 claude-cloud sshd[426826]: Received disconnect from 64.98.83.243 port 51304:11: Bye Bye [preauth] 2026-06-30T04:17:47.542991-05:00 claude-cloud sshd[426826]: Disconnected from invalid user demo 64.98.83.243 port 51304 [preauth] 2026-06-30T04:19:29.928333-05:00 claude-cloud sshd[427104]: Received disconnect from 64.98.83.243 port 54448:11: Bye Bye [preauth] 2026-06-30T04:19:29.929028-05:00 claude-cloud sshd[427104]: Disconnected from authenticating user root 64.98.83.243 port 54448 [preauth] 2026-06-30T04:19:36.191420-05:00 claude-cloud sshd[427132]: Invalid user ubuntu from 91.92.40.231 port 49226 2026-06-30T04:19:36.207512-05:00 claude-cloud sshd[427132]: Connection closed by invalid user ubuntu 91.92.40.231 port 49226 [preauth] 2026-06-30T04:19:43.636194-05:00 claude-cloud sshd[427153]: Connection reset by authenticating user root 45.227.254.170 port 17636 [preauth] 2026-06-30T04:21:07.859242-05:00 claude-cloud sshd[427402]: Received disconnect from 64.98.83.243 port 47540:11: Bye Bye [preauth] 2026-06-30T04:21:07.859930-05:00 claude-cloud sshd[427402]: Disconnected from authenticating user root 64.98.83.243 port 47540 [preauth] 2026-06-30T04:21:12.963073-05:00 claude-cloud sshd[427404]: Connection closed by authenticating user root 115.248.8.65 port 55926 [preauth] 2026-06-30T04:21:36.191183-05:00 claude-cloud sshd[427440]: Connection closed by authenticating user root 27.71.230.31 port 38330 [preauth] 2026-06-30T04:22:36.751499-05:00 claude-cloud systemd-logind[853]: New session c5171 of user claude. 2026-06-30T04:22:37.060810-05:00 claude-cloud systemd-logind[853]: Session c5171 logged out. Waiting for processes to exit. 2026-06-30T04:22:37.063906-05:00 claude-cloud systemd-logind[853]: Removed session c5171. 2026-06-30T04:22:39.705737-05:00 claude-cloud sshd[427674]: Invalid user username from 64.98.83.243 port 47346 2026-06-30T04:22:39.815860-05:00 claude-cloud sshd[427674]: Received disconnect from 64.98.83.243 port 47346:11: Bye Bye [preauth] 2026-06-30T04:22:39.816075-05:00 claude-cloud sshd[427674]: Disconnected from invalid user username 64.98.83.243 port 47346 [preauth] 2026-06-30T04:23:06.399043-05:00 claude-cloud sshd[427751]: banner exchange: Connection from 3.132.26.232 port 18474: invalid format 2026-06-30T04:23:52.524558-05:00 claude-cloud sshd[427940]: Invalid user admin from 34.38.145.239 port 20212 2026-06-30T04:23:52.543464-05:00 claude-cloud sshd[427940]: Connection closed by invalid user admin 34.38.145.239 port 20212 [preauth] 2026-06-30T04:23:55.854258-05:00 claude-cloud sshd[427950]: Connection closed by 104.199.71.189 port 50268 2026-06-30T04:23:58.234353-05:00 claude-cloud sshd[427938]: Connection closed by 34.38.145.239 port 20198 [preauth] 2026-06-30T04:24:14.688746-05:00 claude-cloud sshd[428007]: Received disconnect from 64.98.83.243 port 35460:11: Bye Bye [preauth] 2026-06-30T04:24:14.689057-05:00 claude-cloud sshd[428007]: Disconnected from authenticating user root 64.98.83.243 port 35460 [preauth] 2026-06-30T04:24:17.967094-05:00 claude-cloud sshd[428016]: Connection closed by 3.132.26.232 port 57700 [preauth] 2026-06-30T04:24:58.708140-05:00 claude-cloud sshd[428110]: Connection closed by authenticating user root 115.248.8.65 port 58572 [preauth] 2026-06-30T04:25:01.658573-05:00 claude-cloud CRON[428144]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T04:25:01.668119-05:00 claude-cloud CRON[428144]: pam_unix(cron:session): session closed for user root 2026-06-30T04:25:08.495987-05:00 claude-cloud sshd[428157]: Invalid user ubuntu from 91.92.40.231 port 34600 2026-06-30T04:25:08.512344-05:00 claude-cloud sshd[428157]: Connection closed by invalid user ubuntu 91.92.40.231 port 34600 [preauth] 2026-06-30T04:25:17.205763-05:00 claude-cloud sshd[428182]: Connection reset by authenticating user root 45.148.10.157 port 8400 [preauth] 2026-06-30T04:25:50.652883-05:00 claude-cloud sshd[428302]: Invalid user deploy from 64.98.83.243 port 35428 2026-06-30T04:25:50.762411-05:00 claude-cloud sshd[428302]: Received disconnect from 64.98.83.243 port 35428:11: Bye Bye [preauth] 2026-06-30T04:25:50.762817-05:00 claude-cloud sshd[428302]: Disconnected from invalid user deploy 64.98.83.243 port 35428 [preauth] 2026-06-30T04:26:08.781256-05:00 claude-cloud sshd[428362]: Connection closed by authenticating user root 45.198.224.46 port 36910 [preauth] 2026-06-30T04:27:24.146951-05:00 claude-cloud sshd[428558]: Received disconnect from 64.98.83.243 port 41706:11: Bye Bye [preauth] 2026-06-30T04:27:24.147577-05:00 claude-cloud sshd[428558]: Disconnected from authenticating user root 64.98.83.243 port 41706 [preauth] 2026-06-30T04:27:40.347426-05:00 claude-cloud systemd-logind[853]: New session c5172 of user claude. 2026-06-30T04:27:40.664055-05:00 claude-cloud systemd-logind[853]: Session c5172 logged out. Waiting for processes to exit. 2026-06-30T04:27:40.665300-05:00 claude-cloud systemd-logind[853]: Removed session c5172. 2026-06-30T04:28:18.863395-05:00 claude-cloud sshd[428560]: Connection closed by authenticating user root 27.71.230.31 port 44792 [preauth] 2026-06-30T04:28:46.053262-05:00 claude-cloud sshd[428824]: Connection closed by authenticating user root 115.248.8.65 port 34968 [preauth] 2026-06-30T04:28:58.068234-05:00 claude-cloud sshd[428865]: Received disconnect from 64.98.83.243 port 59702:11: Bye Bye [preauth] 2026-06-30T04:28:58.068676-05:00 claude-cloud sshd[428865]: Disconnected from authenticating user root 64.98.83.243 port 59702 [preauth] 2026-06-30T04:30:23.237818-05:00 claude-cloud sshd[429129]: Connection closed by 161.35.47.134 port 43380 2026-06-30T04:30:35.816373-05:00 claude-cloud sshd[429177]: Invalid user ubuntu from 91.92.40.231 port 37046 2026-06-30T04:30:35.831631-05:00 claude-cloud sshd[429177]: Connection closed by invalid user ubuntu 91.92.40.231 port 37046 [preauth] 2026-06-30T04:30:39.618090-05:00 claude-cloud sshd[429189]: Received disconnect from 64.98.83.243 port 37982:11: Bye Bye [preauth] 2026-06-30T04:30:39.618494-05:00 claude-cloud sshd[429189]: Disconnected from authenticating user root 64.98.83.243 port 37982 [preauth] 2026-06-30T04:30:52.025346-05:00 claude-cloud sshd[429218]: Connection reset by authenticating user root 62.60.130.219 port 65318 [preauth] 2026-06-30T04:32:25.763438-05:00 claude-cloud sshd[429508]: Invalid user postgres from 64.98.83.243 port 43350 2026-06-30T04:32:25.875157-05:00 claude-cloud sshd[429508]: Received disconnect from 64.98.83.243 port 43350:11: Bye Bye [preauth] 2026-06-30T04:32:25.875591-05:00 claude-cloud sshd[429508]: Disconnected from invalid user postgres 64.98.83.243 port 43350 [preauth] 2026-06-30T04:32:27.464215-05:00 claude-cloud sshd[429499]: Connection closed by authenticating user root 115.248.8.65 port 39624 [preauth] 2026-06-30T04:32:30.615836-05:00 claude-cloud sshd[429534]: Invalid user AdminGPON from 45.148.10.121 port 32978 2026-06-30T04:32:30.628745-05:00 claude-cloud sshd[429534]: Connection closed by invalid user AdminGPON 45.148.10.121 port 32978 [preauth] 2026-06-30T04:32:44.012885-05:00 claude-cloud systemd-logind[853]: New session c5173 of user claude. 2026-06-30T04:32:44.320534-05:00 claude-cloud systemd-logind[853]: Session c5173 logged out. Waiting for processes to exit. 2026-06-30T04:32:44.322297-05:00 claude-cloud systemd-logind[853]: Removed session c5173. 2026-06-30T04:34:04.962706-05:00 claude-cloud sshd[429819]: Received disconnect from 64.98.83.243 port 43878:11: Bye Bye [preauth] 2026-06-30T04:34:04.963178-05:00 claude-cloud sshd[429819]: Disconnected from authenticating user root 64.98.83.243 port 43878 [preauth] 2026-06-30T04:34:14.392349-05:00 claude-cloud sshd[429679]: Connection closed by authenticating user root 27.71.230.31 port 54012 [preauth] 2026-06-30T04:35:01.678191-05:00 claude-cloud CRON[430059]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T04:35:01.684845-05:00 claude-cloud CRON[430059]: pam_unix(cron:session): session closed for user root 2026-06-30T04:35:31.879190-05:00 claude-cloud sshd[430130]: Connection closed by authenticating user root 45.198.224.46 port 48238 [preauth] 2026-06-30T04:35:41.163448-05:00 claude-cloud sshd[430168]: Invalid user testuser from 64.98.83.243 port 46108 2026-06-30T04:35:41.278298-05:00 claude-cloud sshd[430168]: Received disconnect from 64.98.83.243 port 46108:11: Bye Bye [preauth] 2026-06-30T04:35:41.278842-05:00 claude-cloud sshd[430168]: Disconnected from invalid user testuser 64.98.83.243 port 46108 [preauth] 2026-06-30T04:36:14.897457-05:00 claude-cloud sshd[430271]: Invalid user ubuntu from 91.92.40.231 port 38226 2026-06-30T04:36:14.912645-05:00 claude-cloud sshd[430271]: Connection closed by invalid user ubuntu 91.92.40.231 port 38226 [preauth] 2026-06-30T04:36:15.117111-05:00 claude-cloud sshd[430256]: Connection closed by authenticating user root 115.248.8.65 port 49750 [preauth] 2026-06-30T04:36:27.566730-05:00 claude-cloud sshd[430297]: Connection reset by authenticating user root 45.148.10.157 port 11306 [preauth] 2026-06-30T04:36:32.642727-05:00 claude-cloud sshd[430317]: Received disconnect from 168.197.250.14 port 38214:11: disconnected by user [preauth] 2026-06-30T04:36:32.643381-05:00 claude-cloud sshd[430317]: Disconnected from authenticating user root 168.197.250.14 port 38214 [preauth] 2026-06-30T04:37:12.574003-05:00 claude-cloud sshd[430463]: Received disconnect from 210.245.20.230 port 33516:11: Bye Bye [preauth] 2026-06-30T04:37:12.574872-05:00 claude-cloud sshd[430463]: Disconnected from authenticating user root 210.245.20.230 port 33516 [preauth] 2026-06-30T04:37:48.577231-05:00 claude-cloud systemd-logind[853]: New session c5174 of user claude. 2026-06-30T04:37:48.876249-05:00 claude-cloud systemd-logind[853]: Session c5174 logged out. Waiting for processes to exit. 2026-06-30T04:37:48.878473-05:00 claude-cloud systemd-logind[853]: Removed session c5174. 2026-06-30T04:39:53.267924-05:00 claude-cloud sshd[430932]: Connection closed by authenticating user root 115.248.8.65 port 40064 [preauth] 2026-06-30T04:40:25.413966-05:00 claude-cloud sshd[431027]: Invalid user admin from 193.46.255.86 port 46546 2026-06-30T04:40:25.439417-05:00 claude-cloud sshd[431027]: Connection closed by invalid user admin 193.46.255.86 port 46546 [preauth] 2026-06-30T04:41:20.183170-05:00 claude-cloud sshd[431197]: Received disconnect from 210.245.20.230 port 50886:11: Bye Bye [preauth] 2026-06-30T04:41:20.183802-05:00 claude-cloud sshd[431197]: Disconnected from authenticating user root 210.245.20.230 port 50886 [preauth] 2026-06-30T04:41:47.350238-05:00 claude-cloud sshd[431301]: Invalid user ubuntu from 91.92.40.231 port 50410 2026-06-30T04:41:47.365388-05:00 claude-cloud sshd[431301]: Connection closed by invalid user ubuntu 91.92.40.231 port 50410 [preauth] 2026-06-30T04:41:57.190127-05:00 claude-cloud sshd[431328]: Received disconnect from 176.65.131.192 port 41788:11: disconnected by user [preauth] 2026-06-30T04:41:57.190405-05:00 claude-cloud sshd[431328]: Disconnected from authenticating user root 176.65.131.192 port 41788 [preauth] 2026-06-30T04:42:03.495405-05:00 claude-cloud sshd[431342]: Connection reset by authenticating user root 45.148.10.147 port 18632 [preauth] 2026-06-30T04:42:52.353965-05:00 claude-cloud systemd-logind[853]: New session c5175 of user claude. 2026-06-30T04:42:52.625195-05:00 claude-cloud systemd-logind[853]: Session c5175 logged out. Waiting for processes to exit. 2026-06-30T04:42:52.627798-05:00 claude-cloud systemd-logind[853]: Removed session c5175. 2026-06-30T04:43:09.459351-05:00 claude-cloud sshd[431551]: Received disconnect from 210.245.20.230 port 56484:11: Bye Bye [preauth] 2026-06-30T04:43:09.460008-05:00 claude-cloud sshd[431551]: Disconnected from authenticating user root 210.245.20.230 port 56484 [preauth] 2026-06-30T04:43:38.258246-05:00 claude-cloud sshd[431619]: Connection closed by authenticating user root 115.248.8.65 port 41548 [preauth] 2026-06-30T04:44:02.275834-05:00 claude-cloud sshd[431717]: Invalid user kaylene from 2.57.121.112 port 52250 2026-06-30T04:44:02.301610-05:00 claude-cloud sshd[431717]: Connection closed by invalid user kaylene 2.57.121.112 port 52250 [preauth] 2026-06-30T04:44:59.854892-05:00 claude-cloud sshd[431947]: Invalid user admin from 2.57.121.25 port 7052 2026-06-30T04:44:59.880752-05:00 claude-cloud sshd[431947]: Connection closed by invalid user admin 2.57.121.25 port 7052 [preauth] 2026-06-30T04:45:01.281910-05:00 claude-cloud sshd[431946]: Invalid user sophie from 45.198.224.46 port 40982 2026-06-30T04:45:01.696129-05:00 claude-cloud CRON[431955]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T04:45:01.702952-05:00 claude-cloud CRON[431955]: pam_unix(cron:session): session closed for user root 2026-06-30T04:45:01.839138-05:00 claude-cloud sshd[431946]: Connection closed by invalid user sophie 45.198.224.46 port 40982 [preauth] 2026-06-30T04:45:02.119790-05:00 claude-cloud sshd[431953]: Received disconnect from 210.245.20.230 port 33858:11: Bye Bye [preauth] 2026-06-30T04:45:02.120067-05:00 claude-cloud sshd[431953]: Disconnected from authenticating user root 210.245.20.230 port 33858 [preauth] 2026-06-30T04:45:30.536060-05:00 claude-cloud sshd[431994]: Connection closed by authenticating user root 27.71.230.31 port 39330 [preauth] 2026-06-30T04:46:13.958118-05:00 claude-cloud sshd[432172]: Connection closed by authenticating user root 167.233.84.171 port 45170 [preauth] 2026-06-30T04:46:52.083776-05:00 claude-cloud sshd[432290]: Received disconnect from 210.245.20.230 port 39474:11: Bye Bye [preauth] 2026-06-30T04:46:52.084761-05:00 claude-cloud sshd[432290]: Disconnected from authenticating user root 210.245.20.230 port 39474 [preauth] 2026-06-30T04:47:21.976885-05:00 claude-cloud sshd[432361]: Connection closed by authenticating user root 115.248.8.65 port 55218 [preauth] 2026-06-30T04:47:36.952689-05:00 claude-cloud sshd[432421]: Invalid user guest from 91.92.40.231 port 41006 2026-06-30T04:47:36.968742-05:00 claude-cloud sshd[432421]: Connection closed by invalid user guest 91.92.40.231 port 41006 [preauth] 2026-06-30T04:47:38.570110-05:00 claude-cloud sshd[432423]: Connection closed by 161.35.47.134 port 50350 2026-06-30T04:47:41.876435-05:00 claude-cloud sshd[432437]: Connection reset by authenticating user root 45.148.10.152 port 47270 [preauth] 2026-06-30T04:47:56.141725-05:00 claude-cloud systemd-logind[853]: New session c5176 of user claude. 2026-06-30T04:47:56.425552-05:00 claude-cloud systemd-logind[853]: Session c5176 logged out. Waiting for processes to exit. 2026-06-30T04:47:56.427907-05:00 claude-cloud systemd-logind[853]: Removed session c5176. 2026-06-30T04:48:42.813971-05:00 claude-cloud sshd[432634]: Received disconnect from 210.245.20.230 port 45138:11: Bye Bye [preauth] 2026-06-30T04:48:42.814509-05:00 claude-cloud sshd[432634]: Disconnected from authenticating user root 210.245.20.230 port 45138 [preauth] 2026-06-30T04:50:33.952341-05:00 claude-cloud sshd[432945]: Received disconnect from 210.245.20.230 port 50758:11: Bye Bye [preauth] 2026-06-30T04:50:33.952834-05:00 claude-cloud sshd[432945]: Disconnected from authenticating user root 210.245.20.230 port 50758 [preauth] 2026-06-30T04:50:59.120513-05:00 claude-cloud sshd[433029]: Connection closed by authenticating user root 115.248.8.65 port 54378 [preauth] 2026-06-30T04:52:23.374521-05:00 claude-cloud sshd[433287]: Received disconnect from 210.245.20.230 port 56364:11: Bye Bye [preauth] 2026-06-30T04:52:23.375047-05:00 claude-cloud sshd[433287]: Disconnected from authenticating user root 210.245.20.230 port 56364 [preauth] 2026-06-30T04:52:59.788731-05:00 claude-cloud systemd-logind[853]: New session c5177 of user claude. 2026-06-30T04:53:00.128957-05:00 claude-cloud systemd-logind[853]: Session c5177 logged out. Waiting for processes to exit. 2026-06-30T04:53:00.130921-05:00 claude-cloud systemd-logind[853]: Removed session c5177. 2026-06-30T04:53:23.352321-05:00 claude-cloud sshd[433502]: Connection reset by authenticating user root 62.60.130.219 port 3048 [preauth] 2026-06-30T04:53:28.045493-05:00 claude-cloud sshd[433517]: Invalid user guest from 91.92.40.231 port 56688 2026-06-30T04:53:28.061352-05:00 claude-cloud sshd[433517]: Connection closed by invalid user guest 91.92.40.231 port 56688 [preauth] 2026-06-30T04:54:08.570932-05:00 claude-cloud sshd[433632]: Received disconnect from 210.245.20.230 port 33736:11: Bye Bye [preauth] 2026-06-30T04:54:08.571369-05:00 claude-cloud sshd[433632]: Disconnected from authenticating user root 210.245.20.230 port 33736 [preauth] 2026-06-30T04:54:29.233739-05:00 claude-cloud sshd[433686]: Invalid user ubuntu from 45.198.224.46 port 37488 2026-06-30T04:54:29.869645-05:00 claude-cloud sshd[433686]: Connection closed by invalid user ubuntu 45.198.224.46 port 37488 [preauth] 2026-06-30T04:54:42.482855-05:00 claude-cloud sshd[433719]: Connection closed by authenticating user root 115.248.8.65 port 48236 [preauth] 2026-06-30T04:55:01.715712-05:00 claude-cloud CRON[433865]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T04:55:01.721417-05:00 claude-cloud CRON[433865]: pam_unix(cron:session): session closed for user root 2026-06-30T04:55:56.329618-05:00 claude-cloud sshd[434017]: Received disconnect from 210.245.20.230 port 39358:11: Bye Bye [preauth] 2026-06-30T04:55:56.333199-05:00 claude-cloud sshd[434017]: Disconnected from authenticating user root 210.245.20.230 port 39358 [preauth] 2026-06-30T04:57:22.129727-05:00 claude-cloud sshd[434229]: Connection closed by authenticating user root 27.71.230.31 port 45666 [preauth] 2026-06-30T04:57:47.636491-05:00 claude-cloud sshd[434345]: Received disconnect from 210.245.20.230 port 44932:11: Bye Bye [preauth] 2026-06-30T04:57:47.636824-05:00 claude-cloud sshd[434345]: Disconnected from authenticating user root 210.245.20.230 port 44932 [preauth] 2026-06-30T04:58:03.722823-05:00 claude-cloud systemd-logind[853]: New session c5178 of user claude. 2026-06-30T04:58:04.044506-05:00 claude-cloud systemd-logind[853]: Session c5178 logged out. Waiting for processes to exit. 2026-06-30T04:58:04.047159-05:00 claude-cloud systemd-logind[853]: Removed session c5178. 2026-06-30T04:58:29.664784-05:00 claude-cloud sshd[434480]: Connection closed by authenticating user root 115.248.8.65 port 32792 [preauth] 2026-06-30T04:59:03.054624-05:00 claude-cloud sshd[434604]: Connection reset by authenticating user root 45.148.10.151 port 19072 [preauth] 2026-06-30T04:59:36.832844-05:00 claude-cloud sshd[434697]: Received disconnect from 210.245.20.230 port 50678:11: Bye Bye [preauth] 2026-06-30T04:59:36.833680-05:00 claude-cloud sshd[434697]: Disconnected from authenticating user root 210.245.20.230 port 50678 [preauth] 2026-06-30T04:59:45.112770-05:00 claude-cloud sshd[434728]: Invalid user guest from 91.92.40.231 port 36656 2026-06-30T04:59:45.130050-05:00 claude-cloud sshd[434728]: Connection closed by invalid user guest 91.92.40.231 port 36656 [preauth] 2026-06-30T05:01:25.168484-05:00 claude-cloud sshd[435028]: Received disconnect from 210.245.20.230 port 56370:11: Bye Bye [preauth] 2026-06-30T05:01:25.169545-05:00 claude-cloud sshd[435028]: Disconnected from authenticating user root 210.245.20.230 port 56370 [preauth] 2026-06-30T05:02:16.985989-05:00 claude-cloud sshd[435169]: Connection closed by authenticating user root 115.248.8.65 port 43046 [preauth] 2026-06-30T05:02:58.328244-05:00 claude-cloud sshd[435319]: Connection closed by 161.35.47.134 port 54422 2026-06-30T05:03:04.575724-05:00 claude-cloud sshd[435304]: Connection closed by authenticating user root 27.71.230.31 port 50170 [preauth] 2026-06-30T05:03:07.629788-05:00 claude-cloud systemd-logind[853]: New session c5179 of user claude. 2026-06-30T05:03:07.993602-05:00 claude-cloud systemd-logind[853]: Session c5179 logged out. Waiting for processes to exit. 2026-06-30T05:03:07.995405-05:00 claude-cloud systemd-logind[853]: Removed session c5179. 2026-06-30T05:03:18.221234-05:00 claude-cloud sshd[435384]: Received disconnect from 210.245.20.230 port 34176:11: Bye Bye [preauth] 2026-06-30T05:03:18.221794-05:00 claude-cloud sshd[435384]: Disconnected from authenticating user root 210.245.20.230 port 34176 [preauth] 2026-06-30T05:03:47.773240-05:00 claude-cloud sshd[435457]: Invalid user usuario from 45.198.224.46 port 57806 2026-06-30T05:03:48.510498-05:00 claude-cloud sshd[435457]: Connection closed by invalid user usuario 45.198.224.46 port 57806 [preauth] 2026-06-30T05:05:01.734841-05:00 claude-cloud CRON[435733]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T05:05:01.739373-05:00 claude-cloud CRON[435733]: pam_unix(cron:session): session closed for user root 2026-06-30T05:05:08.585763-05:00 claude-cloud sshd[435762]: Received disconnect from 210.245.20.230 port 40868:11: Bye Bye [preauth] 2026-06-30T05:05:08.586018-05:00 claude-cloud sshd[435762]: Disconnected from authenticating user root 210.245.20.230 port 40868 [preauth] 2026-06-30T05:05:58.002040-05:00 claude-cloud sshd[435882]: Connection closed by authenticating user root 115.248.8.65 port 39162 [preauth] 2026-06-30T05:06:11.090174-05:00 claude-cloud sshd[435944]: Invalid user guest from 91.92.40.231 port 38718 2026-06-30T05:06:11.109910-05:00 claude-cloud sshd[435944]: Connection closed by invalid user guest 91.92.40.231 port 38718 [preauth] 2026-06-30T05:07:16.023509-05:00 claude-cloud sshd[436125]: Connection closed by authenticating user root 45.148.10.121 port 43984 [preauth] 2026-06-30T05:08:11.313875-05:00 claude-cloud systemd-logind[853]: New session c5180 of user claude. 2026-06-30T05:08:11.602668-05:00 claude-cloud systemd-logind[853]: Session c5180 logged out. Waiting for processes to exit. 2026-06-30T05:08:11.604960-05:00 claude-cloud systemd-logind[853]: Removed session c5180. 2026-06-30T05:08:55.688912-05:00 claude-cloud sshd[436410]: Connection closed by authenticating user root 27.71.230.31 port 49618 [preauth] 2026-06-30T05:09:38.646577-05:00 claude-cloud sshd[436538]: Connection closed by authenticating user root 115.248.8.65 port 58394 [preauth] 2026-06-30T05:12:21.083028-05:00 claude-cloud sshd[437024]: Invalid user guest from 91.92.40.231 port 53480 2026-06-30T05:12:21.098443-05:00 claude-cloud sshd[437024]: Connection closed by invalid user guest 91.92.40.231 port 53480 [preauth] 2026-06-30T05:13:15.494415-05:00 claude-cloud systemd-logind[853]: New session c5181 of user claude. 2026-06-30T05:13:15.820038-05:00 claude-cloud systemd-logind[853]: Session c5181 logged out. Waiting for processes to exit. 2026-06-30T05:13:15.823472-05:00 claude-cloud systemd-logind[853]: Removed session c5181. 2026-06-30T05:13:23.269995-05:00 claude-cloud sshd[437203]: Connection closed by authenticating user root 115.248.8.65 port 59580 [preauth] 2026-06-30T05:13:23.313830-05:00 claude-cloud sshd[437212]: Invalid user ubuntu from 45.198.224.46 port 33496 2026-06-30T05:13:23.906818-05:00 claude-cloud sshd[437212]: Connection closed by invalid user ubuntu 45.198.224.46 port 33496 [preauth] 2026-06-30T05:15:01.755085-05:00 claude-cloud CRON[437525]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T05:15:01.763294-05:00 claude-cloud CRON[437525]: pam_unix(cron:session): session closed for user root 2026-06-30T05:15:18.541965-05:00 claude-cloud sshd[437480]: Connection closed by authenticating user root 27.71.230.31 port 40048 [preauth] 2026-06-30T05:17:01.599717-05:00 claude-cloud sshd[437899]: Connection closed by authenticating user root 115.248.8.65 port 37814 [preauth] 2026-06-30T05:17:01.776896-05:00 claude-cloud CRON[437931]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T05:17:01.783658-05:00 claude-cloud CRON[437931]: pam_unix(cron:session): session closed for user root 2026-06-30T05:18:19.217380-05:00 claude-cloud systemd-logind[853]: New session c5182 of user claude. 2026-06-30T05:18:19.486514-05:00 claude-cloud systemd-logind[853]: Session c5182 logged out. Waiting for processes to exit. 2026-06-30T05:18:19.487408-05:00 claude-cloud systemd-logind[853]: Removed session c5182. 2026-06-30T05:18:31.250918-05:00 claude-cloud sshd[438189]: Invalid user guest from 91.92.40.231 port 60054 2026-06-30T05:18:31.265975-05:00 claude-cloud sshd[438189]: Connection closed by invalid user guest 91.92.40.231 port 60054 [preauth] 2026-06-30T05:20:45.732573-05:00 claude-cloud sshd[438573]: Connection closed by authenticating user root 115.248.8.65 port 33144 [preauth] 2026-06-30T05:20:50.646180-05:00 claude-cloud sshd[438568]: Connection closed by authenticating user root 27.71.230.31 port 52850 [preauth] 2026-06-30T05:21:50.756995-05:00 claude-cloud sshd[438780]: userauth_pubkey: signature algorithm ssh-dss not in PubkeyAcceptedAlgorithms [preauth] 2026-06-30T05:21:50.946640-05:00 claude-cloud sshd[438780]: Received disconnect from 64.31.53.170 port 49846:11: disconnected by user [preauth] 2026-06-30T05:21:50.946976-05:00 claude-cloud sshd[438780]: Disconnected from authenticating user root 64.31.53.170 port 49846 [preauth] 2026-06-30T05:22:47.477964-05:00 claude-cloud sshd[438927]: Invalid user ubuntu from 45.198.224.46 port 59320 2026-06-30T05:22:48.168753-05:00 claude-cloud sshd[438927]: Connection closed by invalid user ubuntu 45.198.224.46 port 59320 [preauth] 2026-06-30T05:23:22.701089-05:00 claude-cloud systemd-logind[853]: New session c5183 of user claude. 2026-06-30T05:23:23.048371-05:00 claude-cloud systemd-logind[853]: Session c5183 logged out. Waiting for processes to exit. 2026-06-30T05:23:23.049650-05:00 claude-cloud systemd-logind[853]: Removed session c5183. 2026-06-30T05:23:56.073080-05:00 claude-cloud sshd[439131]: error: kex_exchange_identification: read: Connection reset by peer 2026-06-30T05:23:56.073797-05:00 claude-cloud sshd[439131]: Connection reset by 141.11.88.122 port 50548 2026-06-30T05:24:27.083503-05:00 claude-cloud sshd[439232]: Connection closed by authenticating user root 115.248.8.65 port 53190 [preauth] 2026-06-30T05:24:52.569726-05:00 claude-cloud sshd[439312]: Invalid user guest from 91.92.40.231 port 35386 2026-06-30T05:24:52.587499-05:00 claude-cloud sshd[439312]: Connection closed by invalid user guest 91.92.40.231 port 35386 [preauth] 2026-06-30T05:25:01.796402-05:00 claude-cloud CRON[439340]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T05:25:01.802871-05:00 claude-cloud CRON[439340]: pam_unix(cron:session): session closed for user root 2026-06-30T05:26:51.867881-05:00 claude-cloud sshd[439675]: Connection closed by authenticating user root 27.71.230.31 port 55660 [preauth] 2026-06-30T05:27:48.612836-05:00 claude-cloud sshd[439873]: Received disconnect from 103.149.26.43 port 59062:11: disconnected by user [preauth] 2026-06-30T05:27:48.613489-05:00 claude-cloud sshd[439873]: Disconnected from authenticating user root 103.149.26.43 port 59062 [preauth] 2026-06-30T05:28:07.032735-05:00 claude-cloud sshd[439918]: Connection closed by authenticating user root 115.248.8.65 port 42366 [preauth] 2026-06-30T05:28:26.216146-05:00 claude-cloud systemd-logind[853]: New session c5184 of user claude. 2026-06-30T05:28:26.540751-05:00 claude-cloud systemd-logind[853]: Session c5184 logged out. Waiting for processes to exit. 2026-06-30T05:28:26.542245-05:00 claude-cloud systemd-logind[853]: Removed session c5184. 2026-06-30T05:30:20.485213-05:00 claude-cloud sshd[440313]: Connection closed by 185.235.198.56 port 21486 2026-06-30T05:30:26.631986-05:00 claude-cloud sshd[440325]: error: maximum authentication attempts exceeded for root from 193.163.187.75 port 41386 ssh2 [preauth] 2026-06-30T05:30:26.632833-05:00 claude-cloud sshd[440325]: Disconnecting authenticating user root 193.163.187.75 port 41386: Too many authentication failures [preauth] 2026-06-30T05:30:28.816035-05:00 claude-cloud sshd[440337]: error: maximum authentication attempts exceeded for root from 193.163.187.75 port 41534 ssh2 [preauth] 2026-06-30T05:30:28.816338-05:00 claude-cloud sshd[440337]: Disconnecting authenticating user root 193.163.187.75 port 41534: Too many authentication failures [preauth] 2026-06-30T05:30:32.213505-05:00 claude-cloud sshd[440345]: error: maximum authentication attempts exceeded for root from 193.163.187.75 port 41662 ssh2 [preauth] 2026-06-30T05:30:32.213847-05:00 claude-cloud sshd[440345]: Disconnecting authenticating user root 193.163.187.75 port 41662: Too many authentication failures [preauth] 2026-06-30T05:30:34.563140-05:00 claude-cloud sshd[440365]: Received disconnect from 193.163.187.75 port 41874:11: disconnected by user [preauth] 2026-06-30T05:30:34.563404-05:00 claude-cloud sshd[440365]: Disconnected from authenticating user root 193.163.187.75 port 41874 [preauth] 2026-06-30T05:30:36.533825-05:00 claude-cloud sshd[440370]: Invalid user admin from 193.163.187.75 port 42010 2026-06-30T05:30:36.758893-05:00 claude-cloud sshd[440370]: error: maximum authentication attempts exceeded for invalid user admin from 193.163.187.75 port 42010 ssh2 [preauth] 2026-06-30T05:30:36.759105-05:00 claude-cloud sshd[440370]: Disconnecting invalid user admin 193.163.187.75 port 42010: Too many authentication failures [preauth] 2026-06-30T05:31:35.586672-05:00 claude-cloud sshd[440557]: Invalid user ftpuser from 193.46.255.86 port 41872 2026-06-30T05:31:35.612855-05:00 claude-cloud sshd[440557]: Connection closed by invalid user ftpuser 193.46.255.86 port 41872 [preauth] 2026-06-30T05:31:48.579738-05:00 claude-cloud sshd[440600]: Connection closed by authenticating user root 115.248.8.65 port 53296 [preauth] 2026-06-30T05:31:48.988057-05:00 claude-cloud sshd[440609]: Invalid user guest from 91.92.40.231 port 36322 2026-06-30T05:31:49.005948-05:00 claude-cloud sshd[440609]: Connection closed by invalid user guest 91.92.40.231 port 36322 [preauth] 2026-06-30T05:32:15.749386-05:00 claude-cloud sshd[440677]: Invalid user ubuntu from 45.198.224.46 port 50170 2026-06-30T05:32:16.648482-05:00 claude-cloud sshd[440677]: Connection closed by invalid user ubuntu 45.198.224.46 port 50170 [preauth] 2026-06-30T05:32:44.997553-05:00 claude-cloud sshd[440735]: Connection closed by authenticating user root 27.71.230.31 port 47666 [preauth] 2026-06-30T05:33:25.464013-05:00 claude-cloud sshd[440859]: Received disconnect from 51.79.99.235 port 40736:11: disconnected by user [preauth] 2026-06-30T05:33:25.464444-05:00 claude-cloud sshd[440859]: Disconnected from authenticating user root 51.79.99.235 port 40736 [preauth] 2026-06-30T05:33:30.132947-05:00 claude-cloud systemd-logind[853]: New session c5185 of user claude. 2026-06-30T05:33:30.514638-05:00 claude-cloud systemd-logind[853]: Session c5185 logged out. Waiting for processes to exit. 2026-06-30T05:33:30.517293-05:00 claude-cloud systemd-logind[853]: Removed session c5185. 2026-06-30T05:35:01.815023-05:00 claude-cloud CRON[441169]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T05:35:01.821051-05:00 claude-cloud CRON[441169]: pam_unix(cron:session): session closed for user root 2026-06-30T05:35:28.450638-05:00 claude-cloud sshd[441216]: Connection closed by authenticating user root 115.248.8.65 port 38084 [preauth] 2026-06-30T05:38:33.803902-05:00 claude-cloud systemd-logind[853]: New session c5186 of user claude. 2026-06-30T05:38:34.130091-05:00 claude-cloud systemd-logind[853]: Session c5186 logged out. Waiting for processes to exit. 2026-06-30T05:38:34.131412-05:00 claude-cloud systemd-logind[853]: Removed session c5186. 2026-06-30T05:38:34.433300-05:00 claude-cloud sshd[441815]: Connection closed by authenticating user root 27.71.230.31 port 57846 [preauth] 2026-06-30T05:39:04.976989-05:00 claude-cloud sshd[441953]: Invalid user oracle from 91.92.40.231 port 51310 2026-06-30T05:39:04.992982-05:00 claude-cloud sshd[441953]: Connection closed by invalid user oracle 91.92.40.231 port 51310 [preauth] 2026-06-30T05:39:13.643901-05:00 claude-cloud sshd[441968]: Connection closed by authenticating user root 115.248.8.65 port 33216 [preauth] 2026-06-30T05:41:08.224700-05:00 claude-cloud sshd[442317]: Invalid user user from 45.148.10.121 port 46154 2026-06-30T05:41:08.237808-05:00 claude-cloud sshd[442317]: Connection closed by invalid user user 45.148.10.121 port 46154 [preauth] 2026-06-30T05:41:21.351448-05:00 claude-cloud sshd[442342]: Connection reset by 205.210.31.78 port 61308 [preauth] 2026-06-30T05:41:59.357663-05:00 claude-cloud sshd[442457]: Connection closed by authenticating user root 45.198.224.46 port 53470 [preauth] 2026-06-30T05:42:41.900021-05:00 claude-cloud sshd[442601]: Invalid user admin from 2.57.121.25 port 47718 2026-06-30T05:42:41.926004-05:00 claude-cloud sshd[442601]: Connection closed by invalid user admin 2.57.121.25 port 47718 [preauth] 2026-06-30T05:42:51.335444-05:00 claude-cloud sshd[442613]: Received disconnect from 43.160.246.215 port 52268:11: Bye Bye [preauth] 2026-06-30T05:42:51.335870-05:00 claude-cloud sshd[442613]: Disconnected from authenticating user root 43.160.246.215 port 52268 [preauth] 2026-06-30T05:42:58.109445-05:00 claude-cloud sshd[442626]: Connection closed by authenticating user root 115.248.8.65 port 46198 [preauth] 2026-06-30T05:43:37.573212-05:00 claude-cloud systemd-logind[853]: New session c5187 of user claude. 2026-06-30T05:43:37.897492-05:00 claude-cloud systemd-logind[853]: Session c5187 logged out. Waiting for processes to exit. 2026-06-30T05:43:37.900717-05:00 claude-cloud systemd-logind[853]: Removed session c5187. 2026-06-30T05:44:27.364923-05:00 claude-cloud sshd[442869]: Connection closed by authenticating user root 27.71.230.31 port 38190 [preauth] 2026-06-30T05:45:01.835775-05:00 claude-cloud CRON[443017]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T05:45:01.843897-05:00 claude-cloud CRON[443017]: pam_unix(cron:session): session closed for user root 2026-06-30T05:46:34.837457-05:00 claude-cloud sshd[443322]: Connection closed by authenticating user root 115.248.8.65 port 37240 [preauth] 2026-06-30T05:46:36.129767-05:00 claude-cloud sshd[443359]: Invalid user oracle from 91.92.40.231 port 58566 2026-06-30T05:46:36.145610-05:00 claude-cloud sshd[443359]: Connection closed by invalid user oracle 91.92.40.231 port 58566 [preauth] 2026-06-30T05:48:31.266786-05:00 claude-cloud sshd[443677]: Invalid user zabbix from 185.242.3.195 port 33670 2026-06-30T05:48:31.273336-05:00 claude-cloud sshd[443677]: Connection closed by invalid user zabbix 185.242.3.195 port 33670 [preauth] 2026-06-30T05:48:41.192867-05:00 claude-cloud systemd-logind[853]: New session c5188 of user claude. 2026-06-30T05:48:41.474676-05:00 claude-cloud systemd-logind[853]: Session c5188 logged out. Waiting for processes to exit. 2026-06-30T05:48:41.476999-05:00 claude-cloud systemd-logind[853]: Removed session c5188. 2026-06-30T05:49:21.868934-05:00 claude-cloud sshd[443832]: Received disconnect from 43.160.246.215 port 40448:11: Bye Bye [preauth] 2026-06-30T05:49:21.869877-05:00 claude-cloud sshd[443832]: Disconnected from authenticating user root 43.160.246.215 port 40448 [preauth] 2026-06-30T05:50:17.089047-05:00 claude-cloud sshd[443978]: Connection closed by authenticating user root 27.71.230.31 port 37248 [preauth] 2026-06-30T05:50:21.409686-05:00 claude-cloud sshd[444000]: Connection closed by authenticating user root 115.248.8.65 port 52936 [preauth] 2026-06-30T05:51:36.955476-05:00 claude-cloud sshd[444227]: Connection closed by authenticating user root 45.198.224.46 port 53206 [preauth] 2026-06-30T05:51:46.512081-05:00 claude-cloud sshd[444274]: userauth_pubkey: signature algorithm ssh-dss not in PubkeyAcceptedAlgorithms [preauth] 2026-06-30T05:51:46.619001-05:00 claude-cloud sshd[444274]: Received disconnect from 148.113.190.153 port 49676:11: disconnected by user [preauth] 2026-06-30T05:51:46.619351-05:00 claude-cloud sshd[444274]: Disconnected from authenticating user root 148.113.190.153 port 49676 [preauth] 2026-06-30T05:52:33.209812-05:00 claude-cloud sshd[444391]: Received disconnect from 43.160.246.215 port 51766:11: Bye Bye [preauth] 2026-06-30T05:52:33.210899-05:00 claude-cloud sshd[444391]: Disconnected from authenticating user root 43.160.246.215 port 51766 [preauth] 2026-06-30T05:53:44.935980-05:00 claude-cloud systemd-logind[853]: New session c5189 of user claude. 2026-06-30T05:53:45.219843-05:00 claude-cloud systemd-logind[853]: Session c5189 logged out. Waiting for processes to exit. 2026-06-30T05:53:45.222006-05:00 claude-cloud systemd-logind[853]: Removed session c5189. 2026-06-30T05:54:11.940055-05:00 claude-cloud sshd[444693]: Connection closed by authenticating user root 115.248.8.65 port 57708 [preauth] 2026-06-30T05:54:31.818825-05:00 claude-cloud sshd[444760]: Invalid user oracle from 91.92.40.231 port 57620 2026-06-30T05:54:31.839917-05:00 claude-cloud sshd[444760]: Connection closed by invalid user oracle 91.92.40.231 port 57620 [preauth] 2026-06-30T05:55:01.862251-05:00 claude-cloud CRON[444842]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T05:55:01.870232-05:00 claude-cloud CRON[444842]: pam_unix(cron:session): session closed for user root 2026-06-30T05:56:05.773955-05:00 claude-cloud sshd[444984]: Connection closed by authenticating user root 27.71.230.31 port 52268 [preauth] 2026-06-30T05:56:06.449101-05:00 claude-cloud sshd[445051]: Received disconnect from 43.160.246.215 port 53548:11: Bye Bye [preauth] 2026-06-30T05:56:06.449671-05:00 claude-cloud sshd[445051]: Disconnected from authenticating user root 43.160.246.215 port 53548 [preauth] 2026-06-30T05:56:40.911047-05:00 claude-cloud sshd[445145]: Connection closed by 203.121.106.56 port 24020 [preauth] 2026-06-30T05:57:57.855845-05:00 claude-cloud sshd[445389]: Connection closed by authenticating user root 115.248.8.65 port 49980 [preauth] 2026-06-30T05:58:48.524060-05:00 claude-cloud systemd-logind[853]: New session c5190 of user claude. 2026-06-30T05:58:48.808337-05:00 claude-cloud systemd-logind[853]: Session c5190 logged out. Waiting for processes to exit. 2026-06-30T05:58:48.810446-05:00 claude-cloud systemd-logind[853]: Removed session c5190. 2026-06-30T05:59:25.250191-05:00 claude-cloud sshd[445679]: Received disconnect from 43.160.246.215 port 60352:11: Bye Bye [preauth] 2026-06-30T05:59:25.250874-05:00 claude-cloud sshd[445679]: Disconnected from authenticating user root 43.160.246.215 port 60352 [preauth] 2026-06-30T06:01:19.365110-05:00 claude-cloud sshd[446017]: Connection closed by authenticating user root 45.198.224.46 port 34568 [preauth] 2026-06-30T06:01:22.054838-05:00 claude-cloud sshd[446026]: Invalid user keasia from 2.57.121.112 port 41698 2026-06-30T06:01:22.080618-05:00 claude-cloud sshd[446026]: Connection closed by invalid user keasia 2.57.121.112 port 41698 [preauth] 2026-06-30T06:01:44.546397-05:00 claude-cloud sshd[446087]: Connection closed by authenticating user root 115.248.8.65 port 43546 [preauth] 2026-06-30T06:01:47.840216-05:00 claude-cloud sshd[446089]: Connection closed by authenticating user root 27.71.230.31 port 35014 [preauth] 2026-06-30T06:02:38.392838-05:00 claude-cloud sshd[446237]: Invalid user oracle from 91.92.40.231 port 41504 2026-06-30T06:02:38.409797-05:00 claude-cloud sshd[446237]: Connection closed by invalid user oracle 91.92.40.231 port 41504 [preauth] 2026-06-30T06:03:01.003418-05:00 claude-cloud sshd[446312]: Received disconnect from 43.160.246.215 port 44340:11: Bye Bye [preauth] 2026-06-30T06:03:01.003827-05:00 claude-cloud sshd[446312]: Disconnected from authenticating user root 43.160.246.215 port 44340 [preauth] 2026-06-30T06:03:52.635994-05:00 claude-cloud systemd-logind[853]: New session c5191 of user claude. 2026-06-30T06:03:52.964696-05:00 claude-cloud systemd-logind[853]: Session c5191 logged out. Waiting for processes to exit. 2026-06-30T06:03:52.966870-05:00 claude-cloud systemd-logind[853]: Removed session c5191. 2026-06-30T06:04:12.737409-05:00 claude-cloud sshd[446525]: error: kex_exchange_identification: read: Connection reset by peer 2026-06-30T06:04:12.738162-05:00 claude-cloud sshd[446525]: Connection reset by 141.11.88.122 port 35922 2026-06-30T06:05:01.886512-05:00 claude-cloud CRON[446682]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T06:05:01.894955-05:00 claude-cloud CRON[446682]: pam_unix(cron:session): session closed for user root 2026-06-30T06:05:19.585525-05:00 claude-cloud sshd[446711]: Connection closed by authenticating user root 115.248.8.65 port 48114 [preauth] 2026-06-30T06:06:08.778815-05:00 claude-cloud sshd[446883]: Received disconnect from 195.26.87.217 port 43838:11: disconnected by user [preauth] 2026-06-30T06:06:08.779208-05:00 claude-cloud sshd[446883]: Disconnected from authenticating user root 195.26.87.217 port 43838 [preauth] 2026-06-30T06:07:46.403146-05:00 claude-cloud sshd[447175]: Connection closed by authenticating user root 27.71.230.31 port 56016 [preauth] 2026-06-30T06:08:56.208421-05:00 claude-cloud systemd-logind[853]: New session c5192 of user claude. 2026-06-30T06:08:56.550489-05:00 claude-cloud systemd-logind[853]: Session c5192 logged out. Waiting for processes to exit. 2026-06-30T06:08:56.552859-05:00 claude-cloud systemd-logind[853]: Removed session c5192. 2026-06-30T06:09:03.428184-05:00 claude-cloud sshd[447435]: Connection closed by authenticating user root 115.248.8.65 port 51866 [preauth] 2026-06-30T06:09:49.710223-05:00 claude-cloud sshd[447570]: Received disconnect from 43.160.246.215 port 60388:11: Bye Bye [preauth] 2026-06-30T06:09:49.711873-05:00 claude-cloud sshd[447570]: Disconnected from authenticating user root 43.160.246.215 port 60388 [preauth] 2026-06-30T06:10:40.589188-05:00 claude-cloud sshd[447732]: Invalid user oracle from 91.92.40.231 port 57266 2026-06-30T06:10:40.608128-05:00 claude-cloud sshd[447732]: Connection closed by invalid user oracle 91.92.40.231 port 57266 [preauth] 2026-06-30T06:11:13.196308-05:00 claude-cloud sshd[447827]: Invalid user ubnt from 45.198.224.46 port 48046 2026-06-30T06:11:14.170123-05:00 claude-cloud sshd[447827]: Connection closed by invalid user ubnt 45.198.224.46 port 48046 [preauth] 2026-06-30T06:12:41.199036-05:00 claude-cloud sshd[448072]: Connection closed by authenticating user root 115.248.8.65 port 42606 [preauth] 2026-06-30T06:13:41.390185-05:00 claude-cloud sshd[448207]: Connection closed by authenticating user root 27.71.230.31 port 58234 [preauth] 2026-06-30T06:13:59.825790-05:00 claude-cloud systemd-logind[853]: New session c5193 of user claude. 2026-06-30T06:14:00.203093-05:00 claude-cloud systemd-logind[853]: Session c5193 logged out. Waiting for processes to exit. 2026-06-30T06:14:00.204719-05:00 claude-cloud systemd-logind[853]: Removed session c5193. 2026-06-30T06:14:29.662206-05:00 claude-cloud sshd[448403]: Connection closed by authenticating user root 45.148.10.121 port 44726 [preauth] 2026-06-30T06:15:01.907148-05:00 claude-cloud CRON[448532]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T06:15:01.914228-05:00 claude-cloud CRON[448532]: pam_unix(cron:session): session closed for user root 2026-06-30T06:16:25.293573-05:00 claude-cloud sshd[448734]: Connection closed by authenticating user root 115.248.8.65 port 58410 [preauth] 2026-06-30T06:17:01.923619-05:00 claude-cloud CRON[448919]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T06:17:01.929873-05:00 claude-cloud CRON[448919]: pam_unix(cron:session): session closed for user root 2026-06-30T06:17:23.863094-05:00 claude-cloud systemd-logind[853]: Session c3849 logged out. Waiting for processes to exit. 2026-06-30T06:17:23.864813-05:00 claude-cloud systemd-logind[853]: Session c3851 logged out. Waiting for processes to exit. 2026-06-30T06:17:23.867125-05:00 claude-cloud systemd-logind[853]: Removed session c3849. 2026-06-30T06:17:23.872598-05:00 claude-cloud systemd-logind[853]: Removed session c3851. 2026-06-30T06:19:03.550478-05:00 claude-cloud systemd-logind[853]: New session c5194 of user claude. 2026-06-30T06:19:03.905618-05:00 claude-cloud systemd-logind[853]: Session c5194 logged out. Waiting for processes to exit. 2026-06-30T06:19:03.907510-05:00 claude-cloud systemd-logind[853]: Removed session c5194. 2026-06-30T06:19:16.492895-05:00 claude-cloud sshd[449318]: Invalid user oracle from 91.92.40.231 port 58508 2026-06-30T06:19:16.509582-05:00 claude-cloud sshd[449318]: Connection closed by invalid user oracle 91.92.40.231 port 58508 [preauth] 2026-06-30T06:19:23.700584-05:00 claude-cloud sshd[449316]: Connection closed by authenticating user root 27.71.230.31 port 51454 [preauth] 2026-06-30T06:20:06.712828-05:00 claude-cloud sshd[449470]: Received disconnect from 43.160.246.215 port 48826:11: Bye Bye [preauth] 2026-06-30T06:20:06.713265-05:00 claude-cloud sshd[449470]: Disconnected from authenticating user root 43.160.246.215 port 48826 [preauth] 2026-06-30T06:20:10.649171-05:00 claude-cloud sshd[449477]: Connection closed by authenticating user root 115.248.8.65 port 38752 [preauth] 2026-06-30T06:20:49.114651-05:00 claude-cloud sshd[449597]: Invalid user internet from 45.198.224.46 port 48088 2026-06-30T06:20:49.807381-05:00 claude-cloud sshd[449597]: Connection closed by invalid user internet 45.198.224.46 port 48088 [preauth] 2026-06-30T06:22:46.961983-05:00 claude-cloud sshd[449926]: Invalid user admin from 193.46.255.86 port 38268 2026-06-30T06:22:46.989185-05:00 claude-cloud sshd[449926]: Connection closed by invalid user admin 193.46.255.86 port 38268 [preauth] 2026-06-30T06:23:41.217515-05:00 claude-cloud sshd[450068]: Received disconnect from 43.160.246.215 port 40368:11: Bye Bye [preauth] 2026-06-30T06:23:41.218827-05:00 claude-cloud sshd[450068]: Disconnected from authenticating user root 43.160.246.215 port 40368 [preauth] 2026-06-30T06:23:57.123662-05:00 claude-cloud sshd[450094]: Connection closed by authenticating user root 115.248.8.65 port 51512 [preauth] 2026-06-30T06:24:07.233386-05:00 claude-cloud systemd-logind[853]: New session c5195 of user claude. 2026-06-30T06:24:07.594527-05:00 claude-cloud systemd-logind[853]: Session c5195 logged out. Waiting for processes to exit. 2026-06-30T06:24:07.596642-05:00 claude-cloud systemd-logind[853]: Removed session c5195. 2026-06-30T06:25:01.941099-05:00 claude-cloud CRON[450318]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T06:25:01.942206-05:00 claude-cloud CRON[450319]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T06:25:01.949464-05:00 claude-cloud CRON[450319]: pam_unix(cron:session): session closed for user root 2026-06-30T06:25:02.064648-05:00 claude-cloud CRON[450318]: pam_unix(cron:session): session closed for user root 2026-06-30T06:25:21.263804-05:00 claude-cloud sshd[450350]: Connection closed by authenticating user root 27.71.230.31 port 52024 [preauth] 2026-06-30T06:27:02.385441-05:00 claude-cloud sshd[450726]: Received disconnect from 43.160.246.215 port 42186:11: Bye Bye [preauth] 2026-06-30T06:27:02.386103-05:00 claude-cloud sshd[450726]: Disconnected from authenticating user root 43.160.246.215 port 42186 [preauth] 2026-06-30T06:27:44.456311-05:00 claude-cloud sshd[450832]: Connection closed by authenticating user root 115.248.8.65 port 48444 [preauth] 2026-06-30T06:27:48.909478-05:00 claude-cloud sshd[450854]: Invalid user oracle from 91.92.40.231 port 33122 2026-06-30T06:27:48.925631-05:00 claude-cloud sshd[450854]: Connection closed by invalid user oracle 91.92.40.231 port 33122 [preauth] 2026-06-30T06:27:57.302171-05:00 claude-cloud sshd[450874]: Received disconnect from 141.11.88.122 port 34370:11: Bye Bye [preauth] 2026-06-30T06:27:57.302773-05:00 claude-cloud sshd[450874]: Disconnected from 141.11.88.122 port 34370 [preauth] 2026-06-30T06:29:11.151426-05:00 claude-cloud systemd-logind[853]: New session c5196 of user claude. 2026-06-30T06:29:11.488590-05:00 claude-cloud systemd-logind[853]: Session c5196 logged out. Waiting for processes to exit. 2026-06-30T06:29:11.490525-05:00 claude-cloud systemd-logind[853]: Removed session c5196. 2026-06-30T06:30:30.483661-05:00 claude-cloud sshd[451299]: Connection closed by authenticating user root 45.198.224.46 port 36474 [preauth] 2026-06-30T06:30:32.174149-05:00 claude-cloud sshd[451319]: Received disconnect from 43.160.246.215 port 51234:11: Bye Bye [preauth] 2026-06-30T06:30:32.174840-05:00 claude-cloud sshd[451319]: Disconnected from authenticating user root 43.160.246.215 port 51234 [preauth] 2026-06-30T06:31:23.470514-05:00 claude-cloud sshd[451457]: Connection closed by authenticating user root 115.248.8.65 port 56502 [preauth] 2026-06-30T06:31:25.625496-05:00 claude-cloud sshd[451374]: Connection closed by authenticating user root 27.71.230.31 port 39330 [preauth] 2026-06-30T06:33:54.326816-05:00 claude-cloud sshd[451875]: Received disconnect from 43.160.246.215 port 52426:11: Bye Bye [preauth] 2026-06-30T06:33:54.328023-05:00 claude-cloud sshd[451875]: Disconnected from authenticating user root 43.160.246.215 port 52426 [preauth] 2026-06-30T06:34:14.786150-05:00 claude-cloud systemd-logind[853]: New session c5197 of user claude. 2026-06-30T06:34:15.096402-05:00 claude-cloud systemd-logind[853]: Session c5197 logged out. Waiting for processes to exit. 2026-06-30T06:34:15.098531-05:00 claude-cloud systemd-logind[853]: Removed session c5197. 2026-06-30T06:35:01.079593-05:00 claude-cloud CRON[452086]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T06:35:01.091223-05:00 claude-cloud CRON[452086]: pam_unix(cron:session): session closed for user root 2026-06-30T06:35:05.728689-05:00 claude-cloud sshd[452089]: Connection closed by authenticating user root 115.248.8.65 port 33010 [preauth] 2026-06-30T06:36:35.509803-05:00 claude-cloud sshd[452454]: Invalid user oracle from 91.92.40.231 port 35852 2026-06-30T06:36:35.525247-05:00 claude-cloud sshd[452454]: Connection closed by invalid user oracle 91.92.40.231 port 35852 [preauth] 2026-06-30T06:37:01.819942-05:00 claude-cloud sshd[452497]: Connection closed by authenticating user root 27.71.230.31 port 58368 [preauth] 2026-06-30T06:38:50.530801-05:00 claude-cloud sshd[452872]: Connection closed by authenticating user root 115.248.8.65 port 33262 [preauth] 2026-06-30T06:39:18.381560-05:00 claude-cloud systemd-logind[853]: New session c5198 of user claude. 2026-06-30T06:39:18.759237-05:00 claude-cloud systemd-logind[853]: Session c5198 logged out. Waiting for processes to exit. 2026-06-30T06:39:18.760871-05:00 claude-cloud systemd-logind[853]: Removed session c5198. 2026-06-30T06:40:07.348900-05:00 claude-cloud sshd[453107]: Invalid user ubuntu from 45.198.224.46 port 59498 2026-06-30T06:40:08.010247-05:00 claude-cloud sshd[453107]: Connection closed by invalid user ubuntu 45.198.224.46 port 59498 [preauth] 2026-06-30T06:40:18.355671-05:00 claude-cloud sshd[453145]: Invalid user admin from 2.57.121.25 port 13818 2026-06-30T06:40:18.382234-05:00 claude-cloud sshd[453145]: Connection closed by invalid user admin 2.57.121.25 port 13818 [preauth] 2026-06-30T06:42:32.284076-05:00 claude-cloud sshd[453492]: Connection closed by authenticating user root 115.248.8.65 port 33102 [preauth] 2026-06-30T06:43:03.037556-05:00 claude-cloud sshd[453500]: Connection closed by authenticating user root 27.71.230.31 port 38606 [preauth] 2026-06-30T06:44:22.366865-05:00 claude-cloud systemd-logind[853]: New session c5199 of user claude. 2026-06-30T06:44:22.697703-05:00 claude-cloud systemd-logind[853]: Session c5199 logged out. Waiting for processes to exit. 2026-06-30T06:44:22.700198-05:00 claude-cloud systemd-logind[853]: Removed session c5199. 2026-06-30T06:44:48.593496-05:00 claude-cloud sshd[453891]: Invalid user oracle from 91.92.40.231 port 57080 2026-06-30T06:44:48.609739-05:00 claude-cloud sshd[453891]: Connection closed by invalid user oracle 91.92.40.231 port 57080 [preauth] 2026-06-30T06:45:01.107684-05:00 claude-cloud CRON[453935]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T06:45:01.116473-05:00 claude-cloud CRON[453935]: pam_unix(cron:session): session closed for user root 2026-06-30T06:46:18.202745-05:00 claude-cloud sshd[454141]: Connection closed by authenticating user root 115.248.8.65 port 34272 [preauth] 2026-06-30T06:47:32.169596-05:00 claude-cloud sshd[454335]: Invalid user ubnt from 45.148.10.121 port 51568 2026-06-30T06:47:32.182463-05:00 claude-cloud sshd[454335]: Connection closed by invalid user ubnt 45.148.10.121 port 51568 [preauth] 2026-06-30T06:48:25.699831-05:00 claude-cloud sshd[454533]: Connection closed by authenticating user root 27.71.230.31 port 41010 [preauth] 2026-06-30T06:49:26.065394-05:00 claude-cloud systemd-logind[853]: New session c5200 of user claude. 2026-06-30T06:49:26.356755-05:00 claude-cloud systemd-logind[853]: Session c5200 logged out. Waiting for processes to exit. 2026-06-30T06:49:26.358523-05:00 claude-cloud systemd-logind[853]: Removed session c5200. 2026-06-30T06:49:41.869683-05:00 claude-cloud sshd[454755]: Connection closed by authenticating user root 45.198.224.46 port 55728 [preauth] 2026-06-30T06:50:02.882330-05:00 claude-cloud sshd[454820]: Connection closed by authenticating user root 115.248.8.65 port 34058 [preauth] 2026-06-30T06:53:14.523482-05:00 claude-cloud sshd[455350]: Invalid user postgres from 91.92.40.231 port 39210 2026-06-30T06:53:14.543591-05:00 claude-cloud sshd[455350]: Connection closed by invalid user postgres 91.92.40.231 port 39210 [preauth] 2026-06-30T06:53:40.141511-05:00 claude-cloud sshd[455411]: Connection closed by authenticating user root 115.248.8.65 port 48184 [preauth] 2026-06-30T06:54:28.995626-05:00 claude-cloud sshd[455518]: Connection closed by authenticating user root 27.71.230.31 port 59308 [preauth] 2026-06-30T06:54:29.855893-05:00 claude-cloud systemd-logind[853]: New session c5201 of user claude. 2026-06-30T06:54:30.244907-05:00 claude-cloud systemd-logind[853]: Session c5201 logged out. Waiting for processes to exit. 2026-06-30T06:54:30.247458-05:00 claude-cloud systemd-logind[853]: Removed session c5201. 2026-06-30T06:55:01.130065-05:00 claude-cloud CRON[455663]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T06:55:01.136818-05:00 claude-cloud CRON[455663]: pam_unix(cron:session): session closed for user root 2026-06-30T06:57:25.450133-05:00 claude-cloud sshd[456036]: Connection closed by authenticating user root 115.248.8.65 port 44314 [preauth] 2026-06-30T06:59:13.707867-05:00 claude-cloud sshd[456397]: Invalid user oracle from 45.198.224.46 port 37422 2026-06-30T06:59:14.313146-05:00 claude-cloud sshd[456397]: Connection closed by invalid user oracle 45.198.224.46 port 37422 [preauth] 2026-06-30T06:59:33.548068-05:00 claude-cloud systemd-logind[853]: New session c5202 of user claude. 2026-06-30T06:59:33.902579-05:00 claude-cloud systemd-logind[853]: Session c5202 logged out. Waiting for processes to exit. 2026-06-30T06:59:33.905159-05:00 claude-cloud systemd-logind[853]: Removed session c5202. 2026-06-30T07:00:10.975294-05:00 claude-cloud sshd[456558]: Connection closed by authenticating user root 27.71.230.31 port 52218 [preauth] 2026-06-30T07:01:14.336891-05:00 claude-cloud sshd[456742]: Connection closed by authenticating user root 115.248.8.65 port 33010 [preauth] 2026-06-30T07:01:51.413099-05:00 claude-cloud sshd[456865]: Invalid user postgres from 91.92.40.231 port 42354 2026-06-30T07:01:51.428436-05:00 claude-cloud sshd[456865]: Connection closed by invalid user postgres 91.92.40.231 port 42354 [preauth] 2026-06-30T07:04:05.175334-05:00 claude-cloud sshd[457228]: Received disconnect from 45.86.86.162 port 53652:11: disconnected by user [preauth] 2026-06-30T07:04:05.176209-05:00 claude-cloud sshd[457228]: Disconnected from authenticating user root 45.86.86.162 port 53652 [preauth] 2026-06-30T07:04:37.198033-05:00 claude-cloud systemd-logind[853]: New session c5203 of user claude. 2026-06-30T07:04:37.543194-05:00 claude-cloud systemd-logind[853]: Session c5203 logged out. Waiting for processes to exit. 2026-06-30T07:04:37.545400-05:00 claude-cloud systemd-logind[853]: Removed session c5203. 2026-06-30T07:04:50.114451-05:00 claude-cloud sshd[457345]: Connection closed by authenticating user root 115.248.8.65 port 55772 [preauth] 2026-06-30T07:05:01.153310-05:00 claude-cloud CRON[457398]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T07:05:01.159255-05:00 claude-cloud CRON[457398]: pam_unix(cron:session): session closed for user root 2026-06-30T07:06:04.385905-05:00 claude-cloud sshd[457538]: Connection closed by authenticating user root 27.71.230.31 port 48480 [preauth] 2026-06-30T07:08:34.324698-05:00 claude-cloud sshd[458028]: Connection closed by authenticating user root 115.248.8.65 port 33300 [preauth] 2026-06-30T07:08:54.774463-05:00 claude-cloud sshd[458078]: Connection closed by authenticating user root 45.198.224.46 port 48618 [preauth] 2026-06-30T07:09:40.874199-05:00 claude-cloud systemd-logind[853]: New session c5204 of user claude. 2026-06-30T07:09:41.194876-05:00 claude-cloud systemd-logind[853]: Session c5204 logged out. Waiting for processes to exit. 2026-06-30T07:09:41.197789-05:00 claude-cloud systemd-logind[853]: Removed session c5204. 2026-06-30T07:11:11.848446-05:00 claude-cloud sshd[458482]: Invalid user postgres from 91.92.40.231 port 48926 2026-06-30T07:11:11.864090-05:00 claude-cloud sshd[458482]: Connection closed by invalid user postgres 91.92.40.231 port 48926 [preauth] 2026-06-30T07:12:04.820577-05:00 claude-cloud sshd[458589]: Connection closed by authenticating user root 27.71.230.31 port 49268 [preauth] 2026-06-30T07:12:18.926755-05:00 claude-cloud sshd[458664]: Connection closed by authenticating user root 115.248.8.65 port 43108 [preauth] 2026-06-30T07:13:53.062645-05:00 claude-cloud sshd[458929]: Invalid user oracle from 193.46.255.86 port 13032 2026-06-30T07:13:53.088923-05:00 claude-cloud sshd[458929]: Connection closed by invalid user oracle 193.46.255.86 port 13032 [preauth] 2026-06-30T07:14:44.492194-05:00 claude-cloud systemd-logind[853]: New session c5205 of user claude. 2026-06-30T07:14:44.793298-05:00 claude-cloud systemd-logind[853]: Session c5205 logged out. Waiting for processes to exit. 2026-06-30T07:14:44.795070-05:00 claude-cloud systemd-logind[853]: Removed session c5205. 2026-06-30T07:15:01.171476-05:00 claude-cloud CRON[459127]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T07:15:01.177390-05:00 claude-cloud CRON[459127]: pam_unix(cron:session): session closed for user root 2026-06-30T07:15:56.297631-05:00 claude-cloud sshd[459265]: Connection closed by authenticating user root 115.248.8.65 port 45820 [preauth] 2026-06-30T07:17:01.186135-05:00 claude-cloud CRON[459455]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T07:17:01.191824-05:00 claude-cloud CRON[459455]: pam_unix(cron:session): session closed for user root 2026-06-30T07:17:37.892157-05:00 claude-cloud sshd[459554]: Connection closed by authenticating user root 45.148.10.121 port 39334 [preauth] 2026-06-30T07:18:06.739927-05:00 claude-cloud sshd[459534]: Connection closed by authenticating user root 27.71.230.31 port 58696 [preauth] 2026-06-30T07:18:30.502739-05:00 claude-cloud sshd[459699]: Connection closed by authenticating user root 45.198.224.46 port 54012 [preauth] 2026-06-30T07:18:31.636823-05:00 claude-cloud sshd[459717]: Invalid user keren from 2.57.121.112 port 22326 2026-06-30T07:18:31.662325-05:00 claude-cloud sshd[459717]: Connection closed by invalid user keren 2.57.121.112 port 22326 [preauth] 2026-06-30T07:19:33.506819-05:00 claude-cloud sshd[459949]: Invalid user nagios from 185.242.3.195 port 46106 2026-06-30T07:19:33.515408-05:00 claude-cloud sshd[459949]: Connection closed by invalid user nagios 185.242.3.195 port 46106 [preauth] 2026-06-30T07:19:44.707347-05:00 claude-cloud sshd[459966]: Connection closed by authenticating user root 115.248.8.65 port 38642 [preauth] 2026-06-30T07:19:48.034614-05:00 claude-cloud systemd-logind[853]: New session c5206 of user claude. 2026-06-30T07:19:48.374017-05:00 claude-cloud systemd-logind[853]: Session c5206 logged out. Waiting for processes to exit. 2026-06-30T07:19:48.376774-05:00 claude-cloud systemd-logind[853]: Removed session c5206. 2026-06-30T07:20:05.875877-05:00 claude-cloud sshd[460045]: Invalid user postgres from 91.92.40.231 port 48042 2026-06-30T07:20:05.891980-05:00 claude-cloud sshd[460045]: Connection closed by invalid user postgres 91.92.40.231 port 48042 [preauth] 2026-06-30T07:23:24.832145-05:00 claude-cloud sshd[460604]: Invalid user oracle from 115.248.8.65 port 60130 2026-06-30T07:23:25.332020-05:00 claude-cloud sshd[460604]: Connection closed by invalid user oracle 115.248.8.65 port 60130 [preauth] 2026-06-30T07:23:32.245178-05:00 claude-cloud sshd[460605]: Connection closed by authenticating user root 27.71.230.31 port 37536 [preauth] 2026-06-30T07:24:51.781404-05:00 claude-cloud systemd-logind[853]: New session c5207 of user claude. 2026-06-30T07:24:52.129019-05:00 claude-cloud systemd-logind[853]: Session c5207 logged out. Waiting for processes to exit. 2026-06-30T07:24:52.130020-05:00 claude-cloud systemd-logind[853]: Removed session c5207. 2026-06-30T07:25:01.202236-05:00 claude-cloud CRON[460923]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T07:25:01.216128-05:00 claude-cloud CRON[460923]: pam_unix(cron:session): session closed for user root 2026-06-30T07:25:24.631650-05:00 claude-cloud sshd[460968]: Received disconnect from 172.245.225.106 port 56352:11: disconnected by user [preauth] 2026-06-30T07:25:24.632186-05:00 claude-cloud sshd[460968]: Disconnected from authenticating user root 172.245.225.106 port 56352 [preauth] 2026-06-30T07:27:14.226230-05:00 claude-cloud sshd[461289]: Invalid user oracle from 115.248.8.65 port 39986 2026-06-30T07:27:15.018230-05:00 claude-cloud sshd[461289]: Connection closed by invalid user oracle 115.248.8.65 port 39986 [preauth] 2026-06-30T07:28:06.680454-05:00 claude-cloud sshd[461426]: Connection closed by authenticating user root 45.198.224.46 port 52826 [preauth] 2026-06-30T07:29:29.071250-05:00 claude-cloud sshd[461715]: Connection closed by authenticating user root 27.71.230.31 port 55348 [preauth] 2026-06-30T07:29:42.566211-05:00 claude-cloud sshd[461785]: Received disconnect from 210.210.155.71 port 33192:11: disconnected by user [preauth] 2026-06-30T07:29:42.566841-05:00 claude-cloud sshd[461785]: Disconnected from authenticating user root 210.210.155.71 port 33192 [preauth] 2026-06-30T07:29:50.930742-05:00 claude-cloud sshd[461810]: Invalid user postgres from 91.92.40.231 port 35450 2026-06-30T07:29:50.946626-05:00 claude-cloud sshd[461810]: Connection closed by invalid user postgres 91.92.40.231 port 35450 [preauth] 2026-06-30T07:29:55.575971-05:00 claude-cloud systemd-logind[853]: New session c5208 of user claude. 2026-06-30T07:29:55.865095-05:00 claude-cloud systemd-logind[853]: Session c5208 logged out. Waiting for processes to exit. 2026-06-30T07:29:55.867350-05:00 claude-cloud systemd-logind[853]: Removed session c5208. 2026-06-30T07:30:51.710921-05:00 claude-cloud sshd[461996]: Received disconnect from 185.233.3.95 port 35078:11: Bye Bye [preauth] 2026-06-30T07:30:51.711409-05:00 claude-cloud sshd[461996]: Disconnected from authenticating user root 185.233.3.95 port 35078 [preauth] 2026-06-30T07:31:02.313528-05:00 claude-cloud sshd[462018]: Invalid user oracle from 115.248.8.65 port 41790 2026-06-30T07:31:03.056713-05:00 claude-cloud sshd[462018]: Connection closed by invalid user oracle 115.248.8.65 port 41790 [preauth] 2026-06-30T07:31:45.303874-05:00 claude-cloud sshd[462165]: Received disconnect from 103.57.224.219 port 55118:11: disconnected by user [preauth] 2026-06-30T07:31:45.304517-05:00 claude-cloud sshd[462165]: Disconnected from authenticating user root 103.57.224.219 port 55118 [preauth] 2026-06-30T07:34:40.654224-05:00 claude-cloud sshd[462660]: Invalid user nginx from 115.248.8.65 port 51640 2026-06-30T07:34:41.096013-05:00 claude-cloud sshd[462660]: Connection closed by invalid user nginx 115.248.8.65 port 51640 [preauth] 2026-06-30T07:34:59.206939-05:00 claude-cloud systemd-logind[853]: New session c5209 of user claude. 2026-06-30T07:34:59.545414-05:00 claude-cloud systemd-logind[853]: Session c5209 logged out. Waiting for processes to exit. 2026-06-30T07:34:59.548088-05:00 claude-cloud systemd-logind[853]: Removed session c5209. 2026-06-30T07:35:01.229939-05:00 claude-cloud CRON[462747]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T07:35:01.237912-05:00 claude-cloud CRON[462747]: pam_unix(cron:session): session closed for user root 2026-06-30T07:35:01.309683-05:00 claude-cloud sshd[462745]: Received disconnect from 132.145.213.106 port 54492:11: Bye Bye [preauth] 2026-06-30T07:35:01.309979-05:00 claude-cloud sshd[462745]: Disconnected from authenticating user root 132.145.213.106 port 54492 [preauth] 2026-06-30T07:35:22.492037-05:00 claude-cloud sshd[462782]: Connection closed by authenticating user root 27.71.230.31 port 35752 [preauth] 2026-06-30T07:37:42.964262-05:00 claude-cloud sshd[463191]: Connection closed by authenticating user root 45.198.224.46 port 35156 [preauth] 2026-06-30T07:37:50.294432-05:00 claude-cloud sshd[463223]: Invalid user admin from 2.57.121.25 port 43198 2026-06-30T07:37:50.324462-05:00 claude-cloud sshd[463223]: Connection closed by invalid user admin 2.57.121.25 port 43198 [preauth] 2026-06-30T07:38:27.787529-05:00 claude-cloud sshd[463325]: Invalid user manager from 115.248.8.65 port 56062 2026-06-30T07:38:28.134773-05:00 claude-cloud sshd[463325]: Connection closed by invalid user manager 115.248.8.65 port 56062 [preauth] 2026-06-30T07:38:57.268555-05:00 claude-cloud sshd[463439]: Invalid user postgres from 91.92.40.231 port 51532 2026-06-30T07:38:57.285382-05:00 claude-cloud sshd[463439]: Connection closed by invalid user postgres 91.92.40.231 port 51532 [preauth] 2026-06-30T07:40:03.124298-05:00 claude-cloud systemd-logind[853]: New session c5210 of user claude. 2026-06-30T07:40:03.577759-05:00 claude-cloud systemd-logind[853]: Session c5210 logged out. Waiting for processes to exit. 2026-06-30T07:40:03.579102-05:00 claude-cloud systemd-logind[853]: Removed session c5210. 2026-06-30T07:41:10.357501-05:00 claude-cloud sshd[463855]: Connection closed by authenticating user root 27.71.230.31 port 56920 [preauth] 2026-06-30T07:42:14.627634-05:00 claude-cloud sshd[464049]: Invalid user jan from 115.248.8.65 port 48166 2026-06-30T07:42:15.187681-05:00 claude-cloud sshd[464049]: Connection closed by invalid user jan 115.248.8.65 port 48166 [preauth] 2026-06-30T07:43:08.343651-05:00 claude-cloud sshd[464222]: Received disconnect from 185.233.3.95 port 59628:11: Bye Bye [preauth] 2026-06-30T07:43:08.344386-05:00 claude-cloud sshd[464222]: Disconnected from authenticating user root 185.233.3.95 port 59628 [preauth] 2026-06-30T07:44:07.920860-05:00 claude-cloud sshd[464396]: Received disconnect from 132.145.213.106 port 39888:11: Bye Bye [preauth] 2026-06-30T07:44:07.921517-05:00 claude-cloud sshd[464396]: Disconnected from authenticating user root 132.145.213.106 port 39888 [preauth] 2026-06-30T07:44:43.896757-05:00 claude-cloud sshd[464487]: Received disconnect from 74.48.105.66 port 45624:11: disconnected by user [preauth] 2026-06-30T07:44:43.897210-05:00 claude-cloud sshd[464487]: Disconnected from authenticating user root 74.48.105.66 port 45624 [preauth] 2026-06-30T07:45:01.248697-05:00 claude-cloud CRON[464543]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T07:45:01.254925-05:00 claude-cloud CRON[464543]: pam_unix(cron:session): session closed for user root 2026-06-30T07:45:06.863626-05:00 claude-cloud systemd-logind[853]: New session c5211 of user claude. 2026-06-30T07:45:07.242073-05:00 claude-cloud systemd-logind[853]: Session c5211 logged out. Waiting for processes to exit. 2026-06-30T07:45:07.244012-05:00 claude-cloud systemd-logind[853]: Removed session c5211. 2026-06-30T07:45:54.219642-05:00 claude-cloud sshd[464703]: Invalid user hacluster from 115.248.8.65 port 43102 2026-06-30T07:45:54.692072-05:00 claude-cloud sshd[464703]: Connection closed by invalid user hacluster 115.248.8.65 port 43102 [preauth] 2026-06-30T07:46:15.783944-05:00 claude-cloud sshd[464779]: Received disconnect from 185.233.3.95 port 48828:11: Bye Bye [preauth] 2026-06-30T07:46:15.784776-05:00 claude-cloud sshd[464779]: Disconnected from authenticating user root 185.233.3.95 port 48828 [preauth] 2026-06-30T07:46:20.522351-05:00 claude-cloud sshd[464791]: Received disconnect from 132.145.213.106 port 39266:11: Bye Bye [preauth] 2026-06-30T07:46:20.523130-05:00 claude-cloud sshd[464791]: Disconnected from authenticating user root 132.145.213.106 port 39266 [preauth] 2026-06-30T07:46:28.305733-05:00 claude-cloud sshd[464820]: Received disconnect from 180.247.179.206 port 41852:11: Bye Bye [preauth] 2026-06-30T07:46:28.306105-05:00 claude-cloud sshd[464820]: Disconnected from authenticating user root 180.247.179.206 port 41852 [preauth] 2026-06-30T07:47:06.158127-05:00 claude-cloud sshd[464876]: Connection closed by authenticating user root 27.71.230.31 port 49634 [preauth] 2026-06-30T07:47:13.751659-05:00 claude-cloud sshd[464925]: Connection closed by authenticating user root 45.198.224.46 port 47788 [preauth] 2026-06-30T07:47:36.931883-05:00 claude-cloud sshd[465020]: Invalid user postgres from 91.92.40.231 port 33172 2026-06-30T07:47:36.947238-05:00 claude-cloud sshd[465020]: Connection closed by invalid user postgres 91.92.40.231 port 33172 [preauth] 2026-06-30T07:47:55.859333-05:00 claude-cloud sshd[465083]: Invalid user test from 45.148.10.121 port 34280 2026-06-30T07:47:55.873228-05:00 claude-cloud sshd[465083]: Connection closed by invalid user test 45.148.10.121 port 34280 [preauth] 2026-06-30T07:48:27.844767-05:00 claude-cloud sshd[465174]: Received disconnect from 132.145.213.106 port 57438:11: Bye Bye [preauth] 2026-06-30T07:48:27.845656-05:00 claude-cloud sshd[465174]: Disconnected from authenticating user root 132.145.213.106 port 57438 [preauth] 2026-06-30T07:49:38.788844-05:00 claude-cloud sshd[465363]: Received disconnect from 185.233.3.95 port 46258:11: Bye Bye [preauth] 2026-06-30T07:49:38.789643-05:00 claude-cloud sshd[465363]: Disconnected from authenticating user root 185.233.3.95 port 46258 [preauth] 2026-06-30T07:49:42.220855-05:00 claude-cloud sshd[465365]: Invalid user git from 115.248.8.65 port 37278 2026-06-30T07:49:42.804213-05:00 claude-cloud sshd[465365]: Connection closed by invalid user git 115.248.8.65 port 37278 [preauth] 2026-06-30T07:50:31.207584-05:00 claude-cloud sshd[465588]: Received disconnect from 132.145.213.106 port 46774:11: Bye Bye [preauth] 2026-06-30T07:50:31.208008-05:00 claude-cloud sshd[465588]: Disconnected from authenticating user root 132.145.213.106 port 46774 [preauth] 2026-06-30T07:52:27.858868-05:00 claude-cloud sshd[465677]: Connection closed by 118.145.225.50 port 43772 [preauth] 2026-06-30T07:52:33.839147-05:00 claude-cloud sshd[465947]: Received disconnect from 132.145.213.106 port 44462:11: Bye Bye [preauth] 2026-06-30T07:52:33.839655-05:00 claude-cloud sshd[465947]: Disconnected from authenticating user root 132.145.213.106 port 44462 [preauth] 2026-06-30T07:52:50.190469-05:00 claude-cloud sshd[465974]: Connection closed by authenticating user root 27.71.230.31 port 43886 [preauth] 2026-06-30T07:52:52.558792-05:00 claude-cloud sshd[465999]: Invalid user lighthouse from 185.233.3.95 port 56834 2026-06-30T07:52:52.644498-05:00 claude-cloud sshd[465999]: Received disconnect from 185.233.3.95 port 56834:11: Bye Bye [preauth] 2026-06-30T07:52:52.644830-05:00 claude-cloud sshd[465999]: Disconnected from invalid user lighthouse 185.233.3.95 port 56834 [preauth] 2026-06-30T07:53:01.493952-05:00 claude-cloud sshd[465979]: Connection closed by 167.94.146.50 port 36462 [preauth] 2026-06-30T07:53:27.926986-05:00 claude-cloud sshd[466089]: Invalid user frappe from 115.248.8.65 port 52390 2026-06-30T07:53:28.310373-05:00 claude-cloud sshd[466089]: Connection closed by invalid user frappe 115.248.8.65 port 52390 [preauth] 2026-06-30T07:54:36.175410-05:00 claude-cloud sshd[466295]: Received disconnect from 132.145.213.106 port 56704:11: Bye Bye [preauth] 2026-06-30T07:54:36.176006-05:00 claude-cloud sshd[466295]: Disconnected from authenticating user root 132.145.213.106 port 56704 [preauth] 2026-06-30T07:55:01.266367-05:00 claude-cloud CRON[466385]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T07:55:01.272130-05:00 claude-cloud CRON[466385]: pam_unix(cron:session): session closed for user root 2026-06-30T07:56:14.474082-05:00 claude-cloud sshd[466594]: Received disconnect from 185.233.3.95 port 39868:11: Bye Bye [preauth] 2026-06-30T07:56:14.477910-05:00 claude-cloud sshd[466594]: Disconnected from authenticating user root 185.233.3.95 port 39868 [preauth] 2026-06-30T07:56:33.658347-05:00 claude-cloud sshd[466647]: Invalid user postgres from 91.92.40.231 port 48324 2026-06-30T07:56:33.674779-05:00 claude-cloud sshd[466647]: Connection closed by invalid user postgres 91.92.40.231 port 48324 [preauth] 2026-06-30T07:56:38.539636-05:00 claude-cloud sshd[466657]: Received disconnect from 132.145.213.106 port 48528:11: Bye Bye [preauth] 2026-06-30T07:56:38.540074-05:00 claude-cloud sshd[466657]: Disconnected from authenticating user root 132.145.213.106 port 48528 [preauth] 2026-06-30T07:56:47.388786-05:00 claude-cloud sshd[466679]: Invalid user test1 from 45.198.224.46 port 47572 2026-06-30T07:56:48.090959-05:00 claude-cloud sshd[466679]: Connection closed by invalid user test1 45.198.224.46 port 47572 [preauth] 2026-06-30T07:57:07.825665-05:00 claude-cloud sshd[466742]: Invalid user es from 115.248.8.65 port 47010 2026-06-30T07:57:08.095162-05:00 claude-cloud sshd[466742]: Connection closed by invalid user es 115.248.8.65 port 47010 [preauth] 2026-06-30T07:58:39.199119-05:00 claude-cloud sshd[467011]: Received disconnect from 132.145.213.106 port 36060:11: Bye Bye [preauth] 2026-06-30T07:58:39.200150-05:00 claude-cloud sshd[467011]: Disconnected from authenticating user root 132.145.213.106 port 36060 [preauth] 2026-06-30T07:58:56.015588-05:00 claude-cloud sshd[466994]: Connection closed by authenticating user root 27.71.230.31 port 39166 [preauth] 2026-06-30T07:59:04.762612-05:00 claude-cloud sshd[467077]: Received disconnect from 180.247.179.206 port 54868:11: Bye Bye [preauth] 2026-06-30T07:59:04.763065-05:00 claude-cloud sshd[467077]: Disconnected from authenticating user root 180.247.179.206 port 54868 [preauth] 2026-06-30T08:00:04.141533-05:00 claude-cloud sshd[467274]: Received disconnect from 62.210.199.83 port 14962:11: disconnected by user [preauth] 2026-06-30T08:00:04.141891-05:00 claude-cloud sshd[467274]: Disconnected from authenticating user root 62.210.199.83 port 14962 [preauth] 2026-06-30T08:00:41.996442-05:00 claude-cloud sshd[467379]: Received disconnect from 132.145.213.106 port 56738:11: Bye Bye [preauth] 2026-06-30T08:00:41.996826-05:00 claude-cloud sshd[467379]: Disconnected from authenticating user root 132.145.213.106 port 56738 [preauth] 2026-06-30T08:00:52.015037-05:00 claude-cloud sshd[467629]: Invalid user cloud from 115.248.8.65 port 44210 2026-06-30T08:00:52.390151-05:00 claude-cloud sshd[467629]: Connection closed by invalid user cloud 115.248.8.65 port 44210 [preauth] 2026-06-30T08:01:31.359744-05:00 claude-cloud sshd[467765]: Received disconnect from 180.247.179.206 port 34476:11: Bye Bye [preauth] 2026-06-30T08:01:31.360392-05:00 claude-cloud sshd[467765]: Disconnected from authenticating user root 180.247.179.206 port 34476 [preauth] 2026-06-30T08:02:44.887893-05:00 claude-cloud sshd[467986]: Invalid user user4 from 132.145.213.106 port 54778 2026-06-30T08:02:44.990373-05:00 claude-cloud sshd[467986]: Received disconnect from 132.145.213.106 port 54778:11: Bye Bye [preauth] 2026-06-30T08:02:44.990566-05:00 claude-cloud sshd[467986]: Disconnected from invalid user user4 132.145.213.106 port 54778 [preauth] 2026-06-30T08:02:45.144473-05:00 claude-cloud sshd[467988]: Received disconnect from 185.233.3.95 port 42472:11: Bye Bye [preauth] 2026-06-30T08:02:45.144914-05:00 claude-cloud sshd[467988]: Disconnected from authenticating user root 185.233.3.95 port 42472 [preauth] 2026-06-30T08:04:18.828778-05:00 claude-cloud sshd[468257]: Received disconnect from 180.247.179.206 port 43266:11: Bye Bye [preauth] 2026-06-30T08:04:18.829877-05:00 claude-cloud sshd[468257]: Disconnected from authenticating user root 180.247.179.206 port 43266 [preauth] 2026-06-30T08:04:35.993627-05:00 claude-cloud sshd[468298]: Invalid user client from 115.248.8.65 port 47244 2026-06-30T08:04:36.436880-05:00 claude-cloud sshd[468298]: Connection closed by invalid user client 115.248.8.65 port 47244 [preauth] 2026-06-30T08:04:40.660366-05:00 claude-cloud sshd[468279]: Connection closed by authenticating user root 27.71.230.31 port 37096 [preauth] 2026-06-30T08:04:45.848233-05:00 claude-cloud sshd[468357]: Invalid user ubnt from 193.46.255.86 port 34138 2026-06-30T08:04:45.895132-05:00 claude-cloud sshd[468357]: Connection closed by invalid user ubnt 193.46.255.86 port 34138 [preauth] 2026-06-30T08:04:46.975441-05:00 claude-cloud sshd[468359]: Received disconnect from 132.145.213.106 port 33706:11: Bye Bye [preauth] 2026-06-30T08:04:46.975907-05:00 claude-cloud sshd[468359]: Disconnected from authenticating user root 132.145.213.106 port 33706 [preauth] 2026-06-30T08:05:01.287585-05:00 claude-cloud CRON[468399]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T08:05:01.292654-05:00 claude-cloud CRON[468399]: pam_unix(cron:session): session closed for user root 2026-06-30T08:05:59.407896-05:00 claude-cloud sshd[468546]: Invalid user user4 from 185.233.3.95 port 57766 2026-06-30T08:05:59.505074-05:00 claude-cloud sshd[468546]: Received disconnect from 185.233.3.95 port 57766:11: Bye Bye [preauth] 2026-06-30T08:05:59.505500-05:00 claude-cloud sshd[468546]: Disconnected from invalid user user4 185.233.3.95 port 57766 [preauth] 2026-06-30T08:06:13.684266-05:00 claude-cloud sshd[468583]: Invalid user pi from 45.198.224.46 port 35684 2026-06-30T08:06:14.295210-05:00 claude-cloud sshd[468583]: Connection closed by invalid user pi 45.198.224.46 port 35684 [preauth] 2026-06-30T08:06:19.916458-05:00 claude-cloud sshd[468607]: Invalid user postgres from 91.92.40.231 port 39562 2026-06-30T08:06:19.931602-05:00 claude-cloud sshd[468607]: Connection closed by invalid user postgres 91.92.40.231 port 39562 [preauth] 2026-06-30T08:06:36.741109-05:00 claude-cloud sshd[468676]: Received disconnect from 180.247.179.206 port 58296:11: Bye Bye [preauth] 2026-06-30T08:06:36.741721-05:00 claude-cloud sshd[468676]: Disconnected from authenticating user root 180.247.179.206 port 58296 [preauth] 2026-06-30T08:06:49.810967-05:00 claude-cloud sshd[468723]: Received disconnect from 132.145.213.106 port 42860:11: Bye Bye [preauth] 2026-06-30T08:06:49.811369-05:00 claude-cloud sshd[468723]: Disconnected from authenticating user root 132.145.213.106 port 42860 [preauth] 2026-06-30T08:08:16.197617-05:00 claude-cloud sshd[468936]: Invalid user bot from 115.248.8.65 port 36006 2026-06-30T08:08:17.060611-05:00 claude-cloud sshd[468936]: Connection closed by invalid user bot 115.248.8.65 port 36006 [preauth] 2026-06-30T08:08:50.542092-05:00 claude-cloud sshd[469055]: Received disconnect from 132.145.213.106 port 55226:11: Bye Bye [preauth] 2026-06-30T08:08:50.542420-05:00 claude-cloud sshd[469055]: Disconnected from authenticating user root 132.145.213.106 port 55226 [preauth] 2026-06-30T08:08:52.512609-05:00 claude-cloud sshd[469071]: Received disconnect from 180.247.179.206 port 34098:11: Bye Bye [preauth] 2026-06-30T08:08:52.513040-05:00 claude-cloud sshd[469071]: Disconnected from authenticating user root 180.247.179.206 port 34098 [preauth] 2026-06-30T08:09:17.966119-05:00 claude-cloud sshd[469156]: Received disconnect from 185.233.3.95 port 42642:11: Bye Bye [preauth] 2026-06-30T08:09:17.966500-05:00 claude-cloud sshd[469156]: Disconnected from authenticating user root 185.233.3.95 port 42642 [preauth] 2026-06-30T08:10:22.337929-05:00 claude-cloud sshd[469289]: Connection closed by authenticating user root 27.71.230.31 port 49514 [preauth] 2026-06-30T08:10:51.153895-05:00 claude-cloud sshd[469468]: Invalid user lighthouse from 132.145.213.106 port 36430 2026-06-30T08:10:51.266063-05:00 claude-cloud sshd[469468]: Received disconnect from 132.145.213.106 port 36430:11: Bye Bye [preauth] 2026-06-30T08:10:51.266250-05:00 claude-cloud sshd[469468]: Disconnected from invalid user lighthouse 132.145.213.106 port 36430 [preauth] 2026-06-30T08:10:59.022494-05:00 claude-cloud sshd[469487]: Received disconnect from 180.247.179.206 port 43728:11: Bye Bye [preauth] 2026-06-30T08:10:59.023005-05:00 claude-cloud sshd[469487]: Disconnected from authenticating user root 180.247.179.206 port 43728 [preauth] 2026-06-30T08:12:01.932822-05:00 claude-cloud sshd[469667]: Invalid user ansible from 115.248.8.65 port 47158 2026-06-30T08:12:02.230608-05:00 claude-cloud sshd[469667]: Connection closed by invalid user ansible 115.248.8.65 port 47158 [preauth] 2026-06-30T08:12:32.256811-05:00 claude-cloud sshd[469755]: Received disconnect from 185.233.3.95 port 43096:11: Bye Bye [preauth] 2026-06-30T08:12:32.257569-05:00 claude-cloud sshd[469755]: Disconnected from authenticating user root 185.233.3.95 port 43096 [preauth] 2026-06-30T08:13:06.315564-05:00 claude-cloud sshd[469859]: Received disconnect from 180.247.179.206 port 46764:11: Bye Bye [preauth] 2026-06-30T08:13:06.316191-05:00 claude-cloud sshd[469859]: Disconnected from authenticating user root 180.247.179.206 port 46764 [preauth] 2026-06-30T08:15:01.306075-05:00 claude-cloud CRON[470205]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T08:15:01.312818-05:00 claude-cloud CRON[470205]: pam_unix(cron:session): session closed for user root 2026-06-30T08:15:18.863107-05:00 claude-cloud sshd[470253]: Received disconnect from 180.247.179.206 port 48988:11: Bye Bye [preauth] 2026-06-30T08:15:18.864069-05:00 claude-cloud sshd[470253]: Disconnected from authenticating user root 180.247.179.206 port 48988 [preauth] 2026-06-30T08:15:29.742509-05:00 claude-cloud sshd[470280]: Invalid user pi from 91.92.40.231 port 51824 2026-06-30T08:15:29.759490-05:00 claude-cloud sshd[470280]: Connection closed by invalid user pi 91.92.40.231 port 51824 [preauth] 2026-06-30T08:15:37.072476-05:00 claude-cloud sshd[470295]: Connection closed by authenticating user root 45.198.224.46 port 57596 [preauth] 2026-06-30T08:15:47.633783-05:00 claude-cloud sshd[470322]: Invalid user vpn from 115.248.8.65 port 57978 2026-06-30T08:15:48.011771-05:00 claude-cloud sshd[470322]: Connection closed by invalid user vpn 115.248.8.65 port 57978 [preauth] 2026-06-30T08:15:57.771390-05:00 claude-cloud sshd[470376]: Received disconnect from 185.233.3.95 port 53642:11: Bye Bye [preauth] 2026-06-30T08:15:57.775581-05:00 claude-cloud sshd[470376]: Disconnected from authenticating user root 185.233.3.95 port 53642 [preauth] 2026-06-30T08:16:07.624944-05:00 claude-cloud sshd[470395]: Connection closed by authenticating user root 27.71.230.31 port 54216 [preauth] 2026-06-30T08:17:01.331363-05:00 claude-cloud CRON[470565]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T08:17:01.337302-05:00 claude-cloud CRON[470565]: pam_unix(cron:session): session closed for user root 2026-06-30T08:17:29.231699-05:00 claude-cloud sshd[470634]: Received disconnect from 180.247.179.206 port 41184:11: Bye Bye [preauth] 2026-06-30T08:17:29.232161-05:00 claude-cloud sshd[470634]: Disconnected from authenticating user root 180.247.179.206 port 41184 [preauth] 2026-06-30T08:17:49.366245-05:00 claude-cloud sshd[470697]: Connection closed by authenticating user root 45.148.10.121 port 42944 [preauth] 2026-06-30T08:19:03.501447-05:00 claude-cloud sshd[470925]: Received disconnect from 185.233.3.95 port 50868:11: Bye Bye [preauth] 2026-06-30T08:19:03.502181-05:00 claude-cloud sshd[470925]: Disconnected from authenticating user root 185.233.3.95 port 50868 [preauth] 2026-06-30T08:19:30.658947-05:00 claude-cloud sshd[470988]: Invalid user ubuntu from 115.248.8.65 port 52602 2026-06-30T08:19:31.093977-05:00 claude-cloud sshd[470988]: Connection closed by invalid user ubuntu 115.248.8.65 port 52602 [preauth] 2026-06-30T08:19:36.443790-05:00 claude-cloud sshd[471017]: Received disconnect from 180.247.179.206 port 51176:11: Bye Bye [preauth] 2026-06-30T08:19:36.444268-05:00 claude-cloud sshd[471017]: Disconnected from authenticating user root 180.247.179.206 port 51176 [preauth] 2026-06-30T08:21:46.644525-05:00 claude-cloud sshd[472171]: Received disconnect from 180.247.179.206 port 58590:11: Bye Bye [preauth] 2026-06-30T08:21:46.653578-05:00 claude-cloud sshd[472171]: Disconnected from authenticating user root 180.247.179.206 port 58590 [preauth] 2026-06-30T08:21:54.165571-05:00 claude-cloud sshd[472196]: Connection closed by authenticating user root 27.71.230.31 port 49014 [preauth] 2026-06-30T08:22:19.395611-05:00 claude-cloud sshd[472501]: Received disconnect from 185.233.3.95 port 49702:11: Bye Bye [preauth] 2026-06-30T08:22:19.395962-05:00 claude-cloud sshd[472501]: Disconnected from authenticating user root 185.233.3.95 port 49702 [preauth] 2026-06-30T08:23:14.591733-05:00 claude-cloud sshd[472873]: Connection closed by authenticating user root 115.248.8.65 port 47994 [preauth] 2026-06-30T08:23:52.619241-05:00 claude-cloud sshd[473349]: Received disconnect from 180.247.179.206 port 38036:11: Bye Bye [preauth] 2026-06-30T08:23:52.619983-05:00 claude-cloud sshd[473349]: Disconnected from authenticating user root 180.247.179.206 port 38036 [preauth] 2026-06-30T08:24:53.069581-05:00 claude-cloud sshd[474186]: Invalid user pi from 91.92.40.231 port 42880 2026-06-30T08:24:53.088025-05:00 claude-cloud sshd[474186]: Connection closed by invalid user pi 91.92.40.231 port 42880 [preauth] 2026-06-30T08:25:01.363546-05:00 claude-cloud CRON[474442]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T08:25:01.371846-05:00 claude-cloud CRON[474442]: pam_unix(cron:session): session closed for user root 2026-06-30T08:25:02.256702-05:00 claude-cloud sshd[474337]: Connection closed by authenticating user root 45.198.224.46 port 60120 [preauth] 2026-06-30T08:25:34.005128-05:00 claude-cloud sshd[474892]: Received disconnect from 185.233.3.95 port 40692:11: Bye Bye [preauth] 2026-06-30T08:25:34.006448-05:00 claude-cloud sshd[474892]: Disconnected from authenticating user root 185.233.3.95 port 40692 [preauth] 2026-06-30T08:26:03.836777-05:00 claude-cloud sshd[475338]: Received disconnect from 180.247.179.206 port 49096:11: Bye Bye [preauth] 2026-06-30T08:26:03.837386-05:00 claude-cloud sshd[475338]: Disconnected from authenticating user root 180.247.179.206 port 49096 [preauth] 2026-06-30T08:26:53.678092-05:00 claude-cloud sshd[476031]: Connection closed by authenticating user root 115.248.8.65 port 37360 [preauth] 2026-06-30T08:27:47.536477-05:00 claude-cloud sshd[477276]: Connection closed by authenticating user root 27.71.230.31 port 57086 [preauth] 2026-06-30T08:28:15.073788-05:00 claude-cloud sshd[477975]: Received disconnect from 180.247.179.206 port 58096:11: Bye Bye [preauth] 2026-06-30T08:28:15.075435-05:00 claude-cloud sshd[477975]: Disconnected from authenticating user root 180.247.179.206 port 58096 [preauth] 2026-06-30T08:30:40.309374-05:00 claude-cloud sshd[480049]: Connection closed by authenticating user root 115.248.8.65 port 36616 [preauth] 2026-06-30T08:33:30.209814-05:00 claude-cloud sshd[482189]: Connection closed by authenticating user root 27.71.230.31 port 39718 [preauth] 2026-06-30T08:34:21.602248-05:00 claude-cloud sshd[483276]: Connection closed by authenticating user root 115.248.8.65 port 49450 [preauth] 2026-06-30T08:34:31.217690-05:00 claude-cloud sshd[483546]: Connection closed by authenticating user www-data 45.198.224.46 port 59048 [preauth] 2026-06-30T08:35:00.988412-05:00 claude-cloud sshd[484279]: Invalid user pi from 91.92.40.231 port 50390 2026-06-30T08:35:01.012251-05:00 claude-cloud sshd[484279]: Connection closed by invalid user pi 91.92.40.231 port 50390 [preauth] 2026-06-30T08:35:01.395714-05:00 claude-cloud CRON[484282]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T08:35:01.410058-05:00 claude-cloud CRON[484282]: pam_unix(cron:session): session closed for user root 2026-06-30T08:35:08.272778-05:00 claude-cloud sshd[484521]: Invalid user admin from 2.57.121.25 port 42218 2026-06-30T08:35:08.299413-05:00 claude-cloud sshd[484521]: Connection closed by invalid user admin 2.57.121.25 port 42218 [preauth] 2026-06-30T08:35:26.737132-05:00 claude-cloud sshd[484842]: Invalid user leena from 2.57.121.112 port 13706 2026-06-30T08:35:26.763595-05:00 claude-cloud sshd[484842]: Connection closed by invalid user leena 2.57.121.112 port 13706 [preauth] 2026-06-30T08:38:04.642035-05:00 claude-cloud sshd[487124]: Connection closed by authenticating user root 115.248.8.65 port 47382 [preauth] 2026-06-30T08:39:29.272447-05:00 claude-cloud sshd[487692]: Connection closed by authenticating user root 27.71.230.31 port 45866 [preauth] 2026-06-30T08:41:48.007538-05:00 claude-cloud sshd[488928]: Connection closed by authenticating user root 115.248.8.65 port 52508 [preauth] 2026-06-30T08:43:55.945244-05:00 claude-cloud sshd[489383]: Connection closed by authenticating user root 45.198.224.46 port 35954 [preauth] 2026-06-30T08:45:01.428403-05:00 claude-cloud CRON[489569]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T08:45:01.436243-05:00 claude-cloud CRON[489569]: pam_unix(cron:session): session closed for user root 2026-06-30T08:45:15.076837-05:00 claude-cloud sshd[489573]: Connection closed by authenticating user root 27.71.230.31 port 42360 [preauth] 2026-06-30T08:45:19.179549-05:00 claude-cloud sshd[489623]: Received disconnect from 179.61.232.245 port 54036:11: disconnected by user [preauth] 2026-06-30T08:45:19.180270-05:00 claude-cloud sshd[489623]: Disconnected from authenticating user root 179.61.232.245 port 54036 [preauth] 2026-06-30T08:45:26.033610-05:00 claude-cloud sshd[489632]: Connection closed by authenticating user root 115.248.8.65 port 42028 [preauth] 2026-06-30T08:45:31.065089-05:00 claude-cloud sshd[489652]: Invalid user pi from 91.92.40.231 port 48638 2026-06-30T08:45:31.081788-05:00 claude-cloud sshd[489652]: Connection closed by invalid user pi 91.92.40.231 port 48638 [preauth] 2026-06-30T08:46:34.004025-05:00 claude-cloud sshd[489828]: Connection closed by 66.132.224.234 port 56688 [preauth] 2026-06-30T08:47:55.658847-05:00 claude-cloud sshd[490405]: Connection closed by authenticating user root 45.148.10.121 port 32838 [preauth] 2026-06-30T08:49:09.907730-05:00 claude-cloud sshd[491504]: Connection closed by authenticating user root 115.248.8.65 port 53058 [preauth] 2026-06-30T08:51:13.844322-05:00 claude-cloud sshd[493195]: Connection closed by authenticating user root 27.71.230.31 port 44876 [preauth] 2026-06-30T08:51:33.670820-05:00 claude-cloud sshd[493499]: Connection closed by authenticating user root 185.242.3.195 port 45324 [preauth] 2026-06-30T08:53:22.668802-05:00 claude-cloud sshd[493630]: Connection closed by authenticating user root 115.248.8.65 port 54538 [preauth] 2026-06-30T08:53:37.040300-05:00 claude-cloud sshd[493811]: Connection closed by authenticating user root 45.198.224.46 port 58244 [preauth] 2026-06-30T08:55:03.550064-05:00 claude-cloud CRON[494003]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T08:55:04.829816-05:00 claude-cloud CRON[494003]: pam_unix(cron:session): session closed for user root 2026-06-30T08:55:43.100527-05:00 claude-cloud sshd[494050]: ssh_dispatch_run_fatal: Connection from 193.46.255.86 port 60074: Broken pipe [preauth] 2026-06-30T09:05:09.634919-05:00 claude-cloud sshd[494187]: ssh_dispatch_run_fatal: Connection from 115.248.8.65 port 48714: Broken pipe [preauth] 2026-06-30T09:05:09.644475-05:00 claude-cloud CRON[494555]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T09:05:09.659532-05:00 claude-cloud CRON[494555]: pam_unix(cron:session): session closed for user root 2026-06-30T09:05:11.949230-05:00 claude-cloud sshd[494484]: Connection closed by authenticating user root 45.198.224.46 port 39818 [preauth] 2026-06-30T09:05:20.712572-05:00 claude-cloud sshd[494477]: Connection closed by authenticating user root 27.71.230.31 port 57918 [preauth] 2026-06-30T09:08:32.286236-05:00 claude-cloud sshd[497229]: Connection closed by authenticating user root 27.71.230.31 port 38214 [preauth] 2026-06-30T09:12:42.832322-05:00 claude-cloud sshd[497958]: Connection closed by authenticating user root 45.198.224.46 port 47250 [preauth] 2026-06-30T09:14:24.783083-05:00 claude-cloud sshd[498305]: Connection closed by authenticating user root 27.71.230.31 port 35148 [preauth] 2026-06-30T09:15:01.473441-05:00 claude-cloud CRON[498447]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T09:15:01.479010-05:00 claude-cloud CRON[498447]: pam_unix(cron:session): session closed for user root 2026-06-30T09:15:23.640559-05:00 claude-cloud systemd-logind[853]: New session c5212 of user claude. 2026-06-30T09:15:23.985593-05:00 claude-cloud systemd-logind[853]: Session c5212 logged out. Waiting for processes to exit. 2026-06-30T09:15:23.988373-05:00 claude-cloud systemd-logind[853]: Removed session c5212. 2026-06-30T09:16:42.469092-05:00 claude-cloud sshd[498773]: Connection closed by 115.190.138.119 port 59292 2026-06-30T09:17:01.487240-05:00 claude-cloud CRON[498828]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T09:17:01.494709-05:00 claude-cloud CRON[498828]: pam_unix(cron:session): session closed for user root 2026-06-30T09:18:36.408614-05:00 claude-cloud sshd[499127]: Received disconnect from 185.28.37.194 port 37890:11: disconnected by user [preauth] 2026-06-30T09:18:36.409246-05:00 claude-cloud sshd[499127]: Disconnected from authenticating user root 185.28.37.194 port 37890 [preauth] 2026-06-30T09:20:09.282107-05:00 claude-cloud sshd[499393]: Invalid user admin from 45.148.10.121 port 54302 2026-06-30T09:20:09.296914-05:00 claude-cloud sshd[499393]: Connection closed by invalid user admin 45.148.10.121 port 54302 [preauth] 2026-06-30T09:20:17.493878-05:00 claude-cloud sshd[499374]: Connection closed by authenticating user root 27.71.230.31 port 59662 [preauth] 2026-06-30T09:20:28.724404-05:00 claude-cloud systemd-logind[853]: New session c5213 of user claude. 2026-06-30T09:20:28.971099-05:00 claude-cloud systemd-logind[853]: Session c5213 logged out. Waiting for processes to exit. 2026-06-30T09:20:28.973580-05:00 claude-cloud systemd-logind[853]: Removed session c5213. 2026-06-30T09:20:37.202859-05:00 claude-cloud sshd[499493]: Invalid user total from 103.38.182.49 port 46672 2026-06-30T09:20:37.379989-05:00 claude-cloud sshd[499493]: Received disconnect from 103.38.182.49 port 46672:11: Bye Bye [preauth] 2026-06-30T09:20:37.380476-05:00 claude-cloud sshd[499493]: Disconnected from invalid user total 103.38.182.49 port 46672 [preauth] 2026-06-30T09:22:21.233646-05:00 claude-cloud sshd[499810]: Invalid user oracle from 45.198.224.46 port 54328 2026-06-30T09:22:22.103263-05:00 claude-cloud sshd[499810]: Connection closed by invalid user oracle 45.198.224.46 port 54328 [preauth] 2026-06-30T09:25:01.504609-05:00 claude-cloud CRON[500341]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T09:25:01.513798-05:00 claude-cloud CRON[500341]: pam_unix(cron:session): session closed for user root 2026-06-30T09:25:33.156844-05:00 claude-cloud systemd-logind[853]: New session c5214 of user claude. 2026-06-30T09:25:33.440258-05:00 claude-cloud systemd-logind[853]: Session c5214 logged out. Waiting for processes to exit. 2026-06-30T09:25:33.442195-05:00 claude-cloud systemd-logind[853]: Removed session c5214. 2026-06-30T09:25:51.111726-05:00 claude-cloud sshd[500517]: Connection closed by authenticating user root 27.71.230.31 port 38108 [preauth] 2026-06-30T09:29:22.576042-05:00 claude-cloud sshd[501137]: Invalid user answers from 103.38.182.49 port 53800 2026-06-30T09:29:22.735724-05:00 claude-cloud sshd[501137]: Received disconnect from 103.38.182.49 port 53800:11: Bye Bye [preauth] 2026-06-30T09:29:22.735944-05:00 claude-cloud sshd[501137]: Disconnected from invalid user answers 103.38.182.49 port 53800 [preauth] 2026-06-30T09:30:38.458459-05:00 claude-cloud systemd-logind[853]: New session c5215 of user claude. 2026-06-30T09:30:38.753116-05:00 claude-cloud systemd-logind[853]: Session c5215 logged out. Waiting for processes to exit. 2026-06-30T09:30:38.755047-05:00 claude-cloud systemd-logind[853]: Removed session c5215. 2026-06-30T09:31:34.006811-05:00 claude-cloud sshd[501510]: Invalid user cam1 from 103.38.182.49 port 59140 2026-06-30T09:31:34.176707-05:00 claude-cloud sshd[501510]: Received disconnect from 103.38.182.49 port 59140:11: Bye Bye [preauth] 2026-06-30T09:31:34.177061-05:00 claude-cloud sshd[501510]: Disconnected from invalid user cam1 103.38.182.49 port 59140 [preauth] 2026-06-30T09:31:34.936271-05:00 claude-cloud sshd[501508]: Invalid user tester from 45.198.224.46 port 58202 2026-06-30T09:31:35.602489-05:00 claude-cloud sshd[501508]: Connection closed by invalid user tester 45.198.224.46 port 58202 [preauth] 2026-06-30T09:31:42.519841-05:00 claude-cloud sshd[501519]: Connection closed by authenticating user root 27.71.230.31 port 41154 [preauth] 2026-06-30T09:32:22.779516-05:00 claude-cloud sshd[501679]: Invalid user admin from 2.57.121.25 port 45060 2026-06-30T09:32:22.805095-05:00 claude-cloud sshd[501679]: Connection closed by invalid user admin 2.57.121.25 port 45060 [preauth] 2026-06-30T09:33:40.701239-05:00 claude-cloud sshd[501878]: Invalid user gazeta from 103.38.182.49 port 44036 2026-06-30T09:33:40.860614-05:00 claude-cloud sshd[501878]: Received disconnect from 103.38.182.49 port 44036:11: Bye Bye [preauth] 2026-06-30T09:33:40.860972-05:00 claude-cloud sshd[501878]: Disconnected from invalid user gazeta 103.38.182.49 port 44036 [preauth] 2026-06-30T09:35:01.525620-05:00 claude-cloud CRON[502196]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T09:35:01.532044-05:00 claude-cloud CRON[502196]: pam_unix(cron:session): session closed for user root 2026-06-30T09:35:22.128705-05:00 claude-cloud sshd[502253]: Received disconnect from 103.112.62.144 port 48278:11: disconnected by user [preauth] 2026-06-30T09:35:22.129361-05:00 claude-cloud sshd[502253]: Disconnected from authenticating user root 103.112.62.144 port 48278 [preauth] 2026-06-30T09:35:33.646892-05:00 claude-cloud sshd[502282]: Invalid user pv from 103.38.182.49 port 36796 2026-06-30T09:35:33.825974-05:00 claude-cloud sshd[502282]: Received disconnect from 103.38.182.49 port 36796:11: Bye Bye [preauth] 2026-06-30T09:35:33.826104-05:00 claude-cloud sshd[502282]: Disconnected from invalid user pv 103.38.182.49 port 36796 [preauth] 2026-06-30T09:35:43.964512-05:00 claude-cloud systemd-logind[853]: New session c5216 of user claude. 2026-06-30T09:35:44.314058-05:00 claude-cloud systemd-logind[853]: Session c5216 logged out. Waiting for processes to exit. 2026-06-30T09:35:44.315334-05:00 claude-cloud systemd-logind[853]: Removed session c5216. 2026-06-30T09:37:08.211708-05:00 claude-cloud systemd-logind[853]: New session c5217 of user claude. 2026-06-30T09:37:08.236431-05:00 claude-cloud systemd-logind[853]: New session c5218 of user claude. 2026-06-30T09:37:08.290566-05:00 claude-cloud systemd-logind[853]: Session c5218 logged out. Waiting for processes to exit. 2026-06-30T09:37:08.295651-05:00 claude-cloud systemd-logind[853]: Removed session c5218. 2026-06-30T09:37:09.040104-05:00 claude-cloud systemd-logind[853]: New session c5219 of user claude. 2026-06-30T09:37:09.102107-05:00 claude-cloud systemd-logind[853]: Session c5219 logged out. Waiting for processes to exit. 2026-06-30T09:37:09.104080-05:00 claude-cloud systemd-logind[853]: Removed session c5219. 2026-06-30T09:37:09.787949-05:00 claude-cloud systemd-logind[853]: New session c5220 of user claude. 2026-06-30T09:37:10.854913-05:00 claude-cloud systemd-logind[853]: Session c5220 logged out. Waiting for processes to exit. 2026-06-30T09:37:10.856523-05:00 claude-cloud systemd-logind[853]: Removed session c5220. 2026-06-30T09:37:12.749109-05:00 claude-cloud systemd-logind[853]: New session c5221 of user claude. 2026-06-30T09:37:12.878899-05:00 claude-cloud systemd-logind[853]: Removed session c2896. 2026-06-30T09:37:12.887786-05:00 claude-cloud systemd-logind[853]: Session c5221 logged out. Waiting for processes to exit. 2026-06-30T09:37:13.620175-05:00 claude-cloud systemd-logind[853]: New session c5222 of user claude. 2026-06-30T09:37:25.168581-05:00 claude-cloud sshd[502719]: Connection closed by authenticating user root 27.71.230.31 port 49862 [preauth] 2026-06-30T09:37:29.377513-05:00 claude-cloud sshd[502743]: Invalid user perfil from 103.38.182.49 port 41738 2026-06-30T09:37:29.534799-05:00 claude-cloud sshd[502743]: Received disconnect from 103.38.182.49 port 41738:11: Bye Bye [preauth] 2026-06-30T09:37:29.535055-05:00 claude-cloud sshd[502743]: Disconnected from invalid user perfil 103.38.182.49 port 41738 [preauth] 2026-06-30T09:38:29.184506-05:00 claude-cloud sshd[503243]: Connection reset by 104.206.128.38 port 57478 [preauth] 2026-06-30T09:39:27.396044-05:00 claude-cloud sshd[503836]: Invalid user jl from 103.38.182.49 port 57368 2026-06-30T09:39:27.563478-05:00 claude-cloud sshd[503836]: Received disconnect from 103.38.182.49 port 57368:11: Bye Bye [preauth] 2026-06-30T09:39:27.563783-05:00 claude-cloud sshd[503836]: Disconnected from invalid user jl 103.38.182.49 port 57368 [preauth] 2026-06-30T09:40:37.127042-05:00 claude-cloud sshd[504083]: Invalid user shutinggu3 from 45.198.224.46 port 33614 2026-06-30T09:40:38.262112-05:00 claude-cloud sshd[504083]: Connection closed by invalid user shutinggu3 45.198.224.46 port 33614 [preauth] 2026-06-30T09:40:48.548565-05:00 claude-cloud systemd-logind[853]: New session c5223 of user claude. 2026-06-30T09:40:48.874802-05:00 claude-cloud systemd-logind[853]: Session c5223 logged out. Waiting for processes to exit. 2026-06-30T09:40:48.877245-05:00 claude-cloud systemd-logind[853]: Removed session c5223. 2026-06-30T09:41:18.304371-05:00 claude-cloud sshd[504292]: Invalid user franchise from 103.38.182.49 port 41658 2026-06-30T09:41:18.474383-05:00 claude-cloud sshd[504292]: Received disconnect from 103.38.182.49 port 41658:11: Bye Bye [preauth] 2026-06-30T09:41:18.474765-05:00 claude-cloud sshd[504292]: Disconnected from invalid user franchise 103.38.182.49 port 41658 [preauth] 2026-06-30T09:43:14.660566-05:00 claude-cloud sshd[504642]: Invalid user biurokarier from 103.38.182.49 port 59464 2026-06-30T09:43:14.822931-05:00 claude-cloud sshd[504642]: Received disconnect from 103.38.182.49 port 59464:11: Bye Bye [preauth] 2026-06-30T09:43:14.823344-05:00 claude-cloud sshd[504642]: Disconnected from invalid user biurokarier 103.38.182.49 port 59464 [preauth] 2026-06-30T09:43:23.542112-05:00 claude-cloud sshd[504608]: Connection closed by authenticating user root 27.71.230.31 port 51392 [preauth] 2026-06-30T09:45:01.545657-05:00 claude-cloud CRON[505089]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T09:45:01.553264-05:00 claude-cloud CRON[505089]: pam_unix(cron:session): session closed for user root 2026-06-30T09:45:14.215493-05:00 claude-cloud sshd[505130]: Invalid user wtest from 103.38.182.49 port 47454 2026-06-30T09:45:14.382704-05:00 claude-cloud sshd[505130]: Received disconnect from 103.38.182.49 port 47454:11: Bye Bye [preauth] 2026-06-30T09:45:14.383045-05:00 claude-cloud sshd[505130]: Disconnected from invalid user wtest 103.38.182.49 port 47454 [preauth] 2026-06-30T09:45:53.256673-05:00 claude-cloud systemd-logind[853]: New session c5224 of user claude. 2026-06-30T09:45:53.567631-05:00 claude-cloud systemd-logind[853]: Session c5224 logged out. Waiting for processes to exit. 2026-06-30T09:45:53.569915-05:00 claude-cloud systemd-logind[853]: Removed session c5224. 2026-06-30T09:46:07.725118-05:00 claude-cloud sshd[505402]: Invalid user testuser from 193.46.255.86 port 13774 2026-06-30T09:46:07.752411-05:00 claude-cloud sshd[505402]: Connection closed by invalid user testuser 193.46.255.86 port 13774 [preauth] 2026-06-30T09:47:10.898774-05:00 claude-cloud sshd[505598]: Invalid user zmail from 103.38.182.49 port 45166 2026-06-30T09:47:11.080069-05:00 claude-cloud sshd[505598]: Received disconnect from 103.38.182.49 port 45166:11: Bye Bye [preauth] 2026-06-30T09:47:11.080494-05:00 claude-cloud sshd[505598]: Disconnected from invalid user zmail 103.38.182.49 port 45166 [preauth] 2026-06-30T09:49:08.280404-05:00 claude-cloud sshd[505934]: Connection closed by authenticating user root 27.71.230.31 port 41314 [preauth] 2026-06-30T09:49:13.215827-05:00 claude-cloud sshd[505972]: Invalid user usuarios from 103.38.182.49 port 41544 2026-06-30T09:49:13.383033-05:00 claude-cloud sshd[505972]: Received disconnect from 103.38.182.49 port 41544:11: Bye Bye [preauth] 2026-06-30T09:49:13.383687-05:00 claude-cloud sshd[505972]: Disconnected from invalid user usuarios 103.38.182.49 port 41544 [preauth] 2026-06-30T09:50:10.274229-05:00 claude-cloud sshd[506135]: Connection closed by authenticating user root 45.198.224.46 port 55222 [preauth] 2026-06-30T09:50:58.464021-05:00 claude-cloud systemd-logind[853]: New session c5225 of user claude. 2026-06-30T09:50:58.777939-05:00 claude-cloud systemd-logind[853]: Session c5225 logged out. Waiting for processes to exit. 2026-06-30T09:50:58.780848-05:00 claude-cloud systemd-logind[853]: Removed session c5225. 2026-06-30T09:51:09.352040-05:00 claude-cloud sshd[506339]: Invalid user certificate from 103.38.182.49 port 44502 2026-06-30T09:51:09.514325-05:00 claude-cloud sshd[506339]: Received disconnect from 103.38.182.49 port 44502:11: Bye Bye [preauth] 2026-06-30T09:51:09.514581-05:00 claude-cloud sshd[506339]: Disconnected from invalid user certificate 103.38.182.49 port 44502 [preauth] 2026-06-30T09:52:07.179236-05:00 claude-cloud sshd[506503]: Invalid user malina from 2.57.121.112 port 33300 2026-06-30T09:52:07.204764-05:00 claude-cloud sshd[506503]: Connection closed by invalid user malina 2.57.121.112 port 33300 [preauth] 2026-06-30T09:52:09.056997-05:00 claude-cloud sshd[506512]: Invalid user admin from 45.148.10.121 port 34642 2026-06-30T09:52:09.070247-05:00 claude-cloud sshd[506512]: Connection closed by invalid user admin 45.148.10.121 port 34642 [preauth] 2026-06-30T09:53:01.157619-05:00 claude-cloud sshd[506679]: Invalid user forestdnszones from 103.38.182.49 port 39164 2026-06-30T09:53:01.323397-05:00 claude-cloud sshd[506679]: Received disconnect from 103.38.182.49 port 39164:11: Bye Bye [preauth] 2026-06-30T09:53:01.323582-05:00 claude-cloud sshd[506679]: Disconnected from invalid user forestdnszones 103.38.182.49 port 39164 [preauth] 2026-06-30T09:54:53.535745-05:00 claude-cloud sshd[507072]: Invalid user sensor from 103.38.182.49 port 51622 2026-06-30T09:54:53.721093-05:00 claude-cloud sshd[507072]: Received disconnect from 103.38.182.49 port 51622:11: Bye Bye [preauth] 2026-06-30T09:54:53.721462-05:00 claude-cloud sshd[507072]: Disconnected from invalid user sensor 103.38.182.49 port 51622 [preauth] 2026-06-30T09:55:01.565519-05:00 claude-cloud CRON[507091]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T09:55:01.573188-05:00 claude-cloud CRON[507091]: pam_unix(cron:session): session closed for user root 2026-06-30T09:55:16.475712-05:00 claude-cloud sshd[507052]: Connection closed by authenticating user root 27.71.230.31 port 57886 [preauth] 2026-06-30T09:56:00.036895-05:00 claude-cloud sshd[507246]: Connection closed by 64.89.160.135 port 58000 2026-06-30T09:56:03.254009-05:00 claude-cloud systemd-logind[853]: New session c5226 of user claude. 2026-06-30T09:56:03.627366-05:00 claude-cloud systemd-logind[853]: Session c5226 logged out. Waiting for processes to exit. 2026-06-30T09:56:03.629013-05:00 claude-cloud systemd-logind[853]: Removed session c5226. 2026-06-30T09:56:53.372135-05:00 claude-cloud sshd[507426]: Invalid user person from 103.38.182.49 port 35298 2026-06-30T09:56:53.540676-05:00 claude-cloud sshd[507426]: Received disconnect from 103.38.182.49 port 35298:11: Bye Bye [preauth] 2026-06-30T09:56:53.540903-05:00 claude-cloud sshd[507426]: Disconnected from invalid user person 103.38.182.49 port 35298 [preauth] 2026-06-30T09:58:47.378823-05:00 claude-cloud sshd[507743]: Invalid user mobileapps from 103.38.182.49 port 53248 2026-06-30T09:58:47.543041-05:00 claude-cloud sshd[507743]: Received disconnect from 103.38.182.49 port 53248:11: Bye Bye [preauth] 2026-06-30T09:58:47.543480-05:00 claude-cloud sshd[507743]: Disconnected from invalid user mobileapps 103.38.182.49 port 53248 [preauth] 2026-06-30T09:59:43.780120-05:00 claude-cloud sshd[507882]: Connection closed by authenticating user root 45.198.224.46 port 49858 [preauth] 2026-06-30T10:00:46.220003-05:00 claude-cloud sshd[508081]: Invalid user ru from 103.38.182.49 port 48926 2026-06-30T10:00:46.393845-05:00 claude-cloud sshd[508081]: Received disconnect from 103.38.182.49 port 48926:11: Bye Bye [preauth] 2026-06-30T10:00:46.394083-05:00 claude-cloud sshd[508081]: Disconnected from invalid user ru 103.38.182.49 port 48926 [preauth] 2026-06-30T10:00:47.833721-05:00 claude-cloud sshd[508052]: Connection closed by authenticating user root 27.71.230.31 port 35290 [preauth] 2026-06-30T10:01:07.938179-05:00 claude-cloud systemd-logind[853]: New session c5227 of user claude. 2026-06-30T10:01:08.237457-05:00 claude-cloud systemd-logind[853]: Session c5227 logged out. Waiting for processes to exit. 2026-06-30T10:01:08.238781-05:00 claude-cloud systemd-logind[853]: Removed session c5227. 2026-06-30T10:01:24.449924-05:00 claude-cloud sshd[508195]: Invalid user admin from 125.20.210.182 port 37498 2026-06-30T10:01:24.721261-05:00 claude-cloud sshd[508195]: Connection closed by invalid user admin 125.20.210.182 port 37498 [preauth] 2026-06-30T10:02:50.258231-05:00 claude-cloud sshd[508453]: Invalid user lan from 103.38.182.49 port 50124 2026-06-30T10:02:50.421759-05:00 claude-cloud sshd[508453]: Received disconnect from 103.38.182.49 port 50124:11: Bye Bye [preauth] 2026-06-30T10:02:50.422228-05:00 claude-cloud sshd[508453]: Disconnected from invalid user lan 103.38.182.49 port 50124 [preauth] 2026-06-30T10:04:52.686789-05:00 claude-cloud sshd[508888]: Invalid user sjc from 103.38.182.49 port 49556 2026-06-30T10:04:52.853632-05:00 claude-cloud sshd[508888]: Received disconnect from 103.38.182.49 port 49556:11: Bye Bye [preauth] 2026-06-30T10:04:52.853956-05:00 claude-cloud sshd[508888]: Disconnected from invalid user sjc 103.38.182.49 port 49556 [preauth] 2026-06-30T10:05:01.585262-05:00 claude-cloud CRON[508908]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T10:05:01.591824-05:00 claude-cloud CRON[508908]: pam_unix(cron:session): session closed for user root 2026-06-30T10:06:13.430206-05:00 claude-cloud systemd-logind[853]: New session c5228 of user claude. 2026-06-30T10:06:13.739897-05:00 claude-cloud systemd-logind[853]: Session c5228 logged out. Waiting for processes to exit. 2026-06-30T10:06:13.741748-05:00 claude-cloud systemd-logind[853]: Removed session c5228. 2026-06-30T10:06:45.948828-05:00 claude-cloud sshd[509170]: Connection closed by authenticating user root 27.71.230.31 port 58988 [preauth] 2026-06-30T10:09:33.815620-05:00 claude-cloud sshd[509718]: Invalid user ubuntu from 45.198.224.46 port 40910 2026-06-30T10:09:34.467882-05:00 claude-cloud sshd[509718]: Connection closed by invalid user ubuntu 45.198.224.46 port 40910 [preauth] 2026-06-30T10:09:49.252364-05:00 claude-cloud sshd[509747]: Invalid user orangepi from 125.20.210.182 port 42600 2026-06-30T10:09:50.100057-05:00 claude-cloud sshd[509747]: Connection closed by invalid user orangepi 125.20.210.182 port 42600 [preauth] 2026-06-30T10:11:20.514083-05:00 claude-cloud systemd-logind[853]: New session c5229 of user claude. 2026-06-30T10:11:20.843489-05:00 claude-cloud systemd-logind[853]: Session c5229 logged out. Waiting for processes to exit. 2026-06-30T10:11:20.845710-05:00 claude-cloud systemd-logind[853]: Removed session c5229. 2026-06-30T10:12:48.997839-05:00 claude-cloud sshd[510218]: Connection closed by authenticating user root 27.71.230.31 port 40302 [preauth] 2026-06-30T10:15:01.603610-05:00 claude-cloud CRON[510734]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T10:15:01.610372-05:00 claude-cloud CRON[510734]: pam_unix(cron:session): session closed for user root 2026-06-30T10:16:28.883487-05:00 claude-cloud systemd-logind[853]: New session c5230 of user claude. 2026-06-30T10:16:29.219167-05:00 claude-cloud systemd-logind[853]: Session c5230 logged out. Waiting for processes to exit. 2026-06-30T10:16:29.220929-05:00 claude-cloud systemd-logind[853]: Removed session c5230. 2026-06-30T10:17:01.618229-05:00 claude-cloud CRON[511104]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T10:17:01.623843-05:00 claude-cloud CRON[511104]: pam_unix(cron:session): session closed for user root 2026-06-30T10:18:48.648642-05:00 claude-cloud sshd[511366]: Connection closed by authenticating user root 125.20.210.182 port 60340 [preauth] 2026-06-30T10:19:11.220971-05:00 claude-cloud sshd[511457]: Connection closed by authenticating user root 45.198.224.46 port 59712 [preauth] 2026-06-30T10:21:35.054601-05:00 claude-cloud systemd-logind[853]: New session c5231 of user claude. 2026-06-30T10:21:35.405459-05:00 claude-cloud systemd-logind[853]: Session c5231 logged out. Waiting for processes to exit. 2026-06-30T10:21:35.407364-05:00 claude-cloud systemd-logind[853]: Removed session c5231. 2026-06-30T10:23:06.896514-05:00 claude-cloud sshd[512191]: Invalid user dis from 185.242.3.195 port 59556 2026-06-30T10:23:06.904057-05:00 claude-cloud sshd[512191]: Connection closed by invalid user dis 185.242.3.195 port 59556 [preauth] 2026-06-30T10:23:57.852216-05:00 claude-cloud sshd[512335]: Received disconnect from 23.95.20.168 port 35824:11: disconnected by user [preauth] 2026-06-30T10:23:57.853158-05:00 claude-cloud sshd[512335]: Disconnected from authenticating user root 23.95.20.168 port 35824 [preauth] 2026-06-30T10:24:25.179892-05:00 claude-cloud sshd[512362]: Connection closed by authenticating user root 27.71.230.31 port 41760 [preauth] 2026-06-30T10:25:01.635468-05:00 claude-cloud CRON[512519]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T10:25:01.642950-05:00 claude-cloud CRON[512519]: pam_unix(cron:session): session closed for user root 2026-06-30T10:26:41.018363-05:00 claude-cloud systemd-logind[853]: New session c5232 of user claude. 2026-06-30T10:26:41.353802-05:00 claude-cloud systemd-logind[853]: Session c5232 logged out. Waiting for processes to exit. 2026-06-30T10:26:41.354938-05:00 claude-cloud systemd-logind[853]: Removed session c5232. 2026-06-30T10:27:10.339042-05:00 claude-cloud sshd[512941]: Connection closed by authenticating user root 125.20.210.182 port 43616 [preauth] 2026-06-30T10:28:50.471211-05:00 claude-cloud sshd[513264]: Invalid user jinyutian from 45.198.224.46 port 42480 2026-06-30T10:28:51.016843-05:00 claude-cloud sshd[513264]: Connection closed by invalid user jinyutian 45.198.224.46 port 42480 [preauth] 2026-06-30T10:29:32.376002-05:00 claude-cloud sshd[513384]: Invalid user admin from 2.57.121.25 port 17236 2026-06-30T10:29:32.401249-05:00 claude-cloud sshd[513384]: Connection closed by invalid user admin 2.57.121.25 port 17236 [preauth] 2026-06-30T10:30:10.380678-05:00 claude-cloud sshd[513483]: Connection closed by authenticating user root 27.71.230.31 port 33310 [preauth] 2026-06-30T10:31:46.641238-05:00 claude-cloud systemd-logind[853]: New session c5233 of user claude. 2026-06-30T10:31:46.923710-05:00 claude-cloud systemd-logind[853]: Session c5233 logged out. Waiting for processes to exit. 2026-06-30T10:31:46.925001-05:00 claude-cloud systemd-logind[853]: Removed session c5233. 2026-06-30T10:31:53.438807-05:00 claude-cloud sshd[513843]: Received disconnect from 93.77.187.140 port 44430:11: Bye Bye [preauth] 2026-06-30T10:31:53.439363-05:00 claude-cloud sshd[513843]: Disconnected from authenticating user root 93.77.187.140 port 44430 [preauth] 2026-06-30T10:35:01.655438-05:00 claude-cloud CRON[514401]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T10:35:01.660862-05:00 claude-cloud CRON[514401]: pam_unix(cron:session): session closed for user root 2026-06-30T10:36:05.907385-05:00 claude-cloud sshd[514620]: Connection closed by authenticating user root 27.71.230.31 port 58408 [preauth] 2026-06-30T10:36:06.020096-05:00 claude-cloud sshd[514629]: Connection closed by authenticating user root 125.20.210.182 port 50712 [preauth] 2026-06-30T10:36:49.269961-05:00 claude-cloud sshd[514765]: Invalid user admin from 193.46.255.86 port 34844 2026-06-30T10:36:49.296160-05:00 claude-cloud sshd[514765]: Connection closed by invalid user admin 193.46.255.86 port 34844 [preauth] 2026-06-30T10:36:51.702944-05:00 claude-cloud systemd-logind[853]: New session c5234 of user claude. 2026-06-30T10:36:52.031134-05:00 claude-cloud systemd-logind[853]: Session c5234 logged out. Waiting for processes to exit. 2026-06-30T10:36:52.032841-05:00 claude-cloud systemd-logind[853]: Removed session c5234. 2026-06-30T10:38:24.632364-05:00 claude-cloud sshd[515070]: Invalid user ubuntu from 45.198.224.46 port 50212 2026-06-30T10:38:25.510182-05:00 claude-cloud sshd[515070]: Connection closed by invalid user ubuntu 45.198.224.46 port 50212 [preauth] 2026-06-30T10:39:03.939232-05:00 claude-cloud sshd[515188]: Received disconnect from 175.110.112.8 port 42052:11: disconnected by user [preauth] 2026-06-30T10:39:03.940232-05:00 claude-cloud sshd[515188]: Disconnected from authenticating user root 175.110.112.8 port 42052 [preauth] 2026-06-30T10:41:29.433039-05:00 claude-cloud sshd[515653]: Connection closed by 4.240.8.92 port 56302 2026-06-30T10:41:58.010186-05:00 claude-cloud systemd-logind[853]: New session c5235 of user claude. 2026-06-30T10:41:58.296365-05:00 claude-cloud systemd-logind[853]: Session c5235 logged out. Waiting for processes to exit. 2026-06-30T10:41:58.299356-05:00 claude-cloud systemd-logind[853]: Removed session c5235. 2026-06-30T10:42:00.840363-05:00 claude-cloud sshd[515691]: Connection closed by authenticating user root 27.71.230.31 port 52812 [preauth] 2026-06-30T10:43:11.245636-05:00 claude-cloud sshd[515951]: Received disconnect from 42.200.78.166 port 40727:11: Bye Bye [preauth] 2026-06-30T10:43:11.246004-05:00 claude-cloud sshd[515951]: Disconnected from authenticating user root 42.200.78.166 port 40727 [preauth] 2026-06-30T10:44:07.703388-05:00 claude-cloud sshd[516138]: Connection closed by 170.130.187.22 port 51347 2026-06-30T10:44:20.553816-05:00 claude-cloud sshd[516156]: Connection closed by authenticating user root 125.20.210.182 port 33728 [preauth] 2026-06-30T10:45:01.672934-05:00 claude-cloud CRON[516308]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T10:45:01.678813-05:00 claude-cloud CRON[516308]: pam_unix(cron:session): session closed for user root 2026-06-30T10:45:09.375664-05:00 claude-cloud sshd[516318]: Received disconnect from 93.77.187.140 port 39980:11: Bye Bye [preauth] 2026-06-30T10:45:09.375976-05:00 claude-cloud sshd[516318]: Disconnected from authenticating user root 93.77.187.140 port 39980 [preauth] 2026-06-30T10:46:53.555093-05:00 claude-cloud sshd[516710]: Received disconnect from 93.77.187.140 port 44428:11: Bye Bye [preauth] 2026-06-30T10:46:53.555734-05:00 claude-cloud sshd[516710]: Disconnected from authenticating user root 93.77.187.140 port 44428 [preauth] 2026-06-30T10:47:04.535999-05:00 claude-cloud systemd-logind[853]: New session c5236 of user claude. 2026-06-30T10:47:04.824398-05:00 claude-cloud systemd-logind[853]: Session c5236 logged out. Waiting for processes to exit. 2026-06-30T10:47:04.826206-05:00 claude-cloud systemd-logind[853]: Removed session c5236. 2026-06-30T10:47:34.701730-05:00 claude-cloud sshd[516818]: Received disconnect from 42.200.78.166 port 64439:11: Bye Bye [preauth] 2026-06-30T10:47:34.702607-05:00 claude-cloud sshd[516818]: Disconnected from authenticating user root 42.200.78.166 port 64439 [preauth] 2026-06-30T10:47:47.783257-05:00 claude-cloud sshd[516820]: Connection closed by authenticating user root 27.71.230.31 port 57198 [preauth] 2026-06-30T10:48:05.195982-05:00 claude-cloud sshd[516928]: Invalid user data from 45.198.224.46 port 48208 2026-06-30T10:48:06.084247-05:00 claude-cloud sshd[516928]: Connection closed by invalid user data 45.198.224.46 port 48208 [preauth] 2026-06-30T10:48:37.516066-05:00 claude-cloud sshd[517024]: Received disconnect from 93.77.187.140 port 42392:11: Bye Bye [preauth] 2026-06-30T10:48:37.517054-05:00 claude-cloud sshd[517024]: Disconnected from authenticating user root 93.77.187.140 port 42392 [preauth] 2026-06-30T10:49:28.795302-05:00 claude-cloud sshd[517176]: Received disconnect from 42.200.78.166 port 58157:11: Bye Bye [preauth] 2026-06-30T10:49:28.795692-05:00 claude-cloud sshd[517176]: Disconnected from authenticating user root 42.200.78.166 port 58157 [preauth] 2026-06-30T10:50:22.442651-05:00 claude-cloud sshd[517349]: Received disconnect from 93.77.187.140 port 39898:11: Bye Bye [preauth] 2026-06-30T10:50:22.442914-05:00 claude-cloud sshd[517349]: Disconnected from authenticating user root 93.77.187.140 port 39898 [preauth] 2026-06-30T10:51:23.318388-05:00 claude-cloud sshd[517506]: Received disconnect from 42.200.78.166 port 42838:11: Bye Bye [preauth] 2026-06-30T10:51:23.321932-05:00 claude-cloud sshd[517506]: Disconnected from authenticating user root 42.200.78.166 port 42838 [preauth] 2026-06-30T10:52:05.838415-05:00 claude-cloud sshd[517621]: Received disconnect from 93.77.187.140 port 60160:11: Bye Bye [preauth] 2026-06-30T10:52:05.839029-05:00 claude-cloud sshd[517621]: Disconnected from authenticating user root 93.77.187.140 port 60160 [preauth] 2026-06-30T10:52:10.139132-05:00 claude-cloud systemd-logind[853]: New session c5237 of user claude. 2026-06-30T10:52:10.517798-05:00 claude-cloud systemd-logind[853]: Session c5237 logged out. Waiting for processes to exit. 2026-06-30T10:52:10.520159-05:00 claude-cloud systemd-logind[853]: Removed session c5237. 2026-06-30T10:52:37.035107-05:00 claude-cloud sshd[517715]: Connection closed by authenticating user root 125.20.210.182 port 37322 [preauth] 2026-06-30T10:53:24.004097-05:00 claude-cloud sshd[517867]: Received disconnect from 42.200.78.166 port 60300:11: Bye Bye [preauth] 2026-06-30T10:53:24.005089-05:00 claude-cloud sshd[517867]: Disconnected from authenticating user root 42.200.78.166 port 60300 [preauth] 2026-06-30T10:53:43.115846-05:00 claude-cloud sshd[517878]: Connection closed by authenticating user root 27.71.230.31 port 41148 [preauth] 2026-06-30T10:53:47.938071-05:00 claude-cloud sshd[517949]: Received disconnect from 93.77.187.140 port 54608:11: Bye Bye [preauth] 2026-06-30T10:53:47.938497-05:00 claude-cloud sshd[517949]: Disconnected from authenticating user root 93.77.187.140 port 54608 [preauth] 2026-06-30T10:55:01.692502-05:00 claude-cloud CRON[518143]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T10:55:01.699459-05:00 claude-cloud CRON[518143]: pam_unix(cron:session): session closed for user root 2026-06-30T10:55:09.688168-05:00 claude-cloud sshd[518146]: Connection closed by 54.235.13.138 port 27618 [preauth] 2026-06-30T10:55:22.308449-05:00 claude-cloud sshd[518218]: Received disconnect from 42.200.78.166 port 54020:11: Bye Bye [preauth] 2026-06-30T10:55:22.308872-05:00 claude-cloud sshd[518218]: Disconnected from authenticating user root 42.200.78.166 port 54020 [preauth] 2026-06-30T10:55:25.752485-05:00 claude-cloud sshd[518229]: Received disconnect from 93.77.187.140 port 51544:11: Bye Bye [preauth] 2026-06-30T10:55:25.752867-05:00 claude-cloud sshd[518229]: Disconnected from authenticating user root 93.77.187.140 port 51544 [preauth] 2026-06-30T10:55:59.794332-05:00 claude-cloud sshd[518383]: Connection closed by 203.121.106.56 port 63264 [preauth] 2026-06-30T10:57:01.286315-05:00 claude-cloud sshd[518551]: Received disconnect from 93.77.187.140 port 56274:11: Bye Bye [preauth] 2026-06-30T10:57:01.286993-05:00 claude-cloud sshd[518551]: Disconnected from authenticating user root 93.77.187.140 port 56274 [preauth] 2026-06-30T10:57:15.768673-05:00 claude-cloud systemd-logind[853]: New session c5238 of user claude. 2026-06-30T10:57:16.127209-05:00 claude-cloud systemd-logind[853]: Session c5238 logged out. Waiting for processes to exit. 2026-06-30T10:57:16.128737-05:00 claude-cloud systemd-logind[853]: Removed session c5238. 2026-06-30T10:57:20.335513-05:00 claude-cloud sshd[518617]: Received disconnect from 42.200.78.166 port 38707:11: Bye Bye [preauth] 2026-06-30T10:57:20.335968-05:00 claude-cloud sshd[518617]: Disconnected from authenticating user root 42.200.78.166 port 38707 [preauth] 2026-06-30T10:57:36.807203-05:00 claude-cloud sshd[518648]: Connection closed by authenticating user root 45.198.224.46 port 46800 [preauth] 2026-06-30T10:58:39.657610-05:00 claude-cloud sshd[518835]: Received disconnect from 93.77.187.140 port 57544:11: Bye Bye [preauth] 2026-06-30T10:58:39.658161-05:00 claude-cloud sshd[518835]: Disconnected from authenticating user root 93.77.187.140 port 57544 [preauth] 2026-06-30T10:59:24.146740-05:00 claude-cloud sshd[518981]: Received disconnect from 42.200.78.166 port 56166:11: Bye Bye [preauth] 2026-06-30T10:59:24.147778-05:00 claude-cloud sshd[518981]: Disconnected from authenticating user root 42.200.78.166 port 56166 [preauth] 2026-06-30T10:59:26.864238-05:00 claude-cloud sshd[518946]: Connection closed by authenticating user root 27.71.230.31 port 60864 [preauth] 2026-06-30T10:59:37.378660-05:00 claude-cloud sshd[518997]: Received disconnect from 107.173.122.15 port 35020:11: disconnected by user [preauth] 2026-06-30T10:59:37.378988-05:00 claude-cloud sshd[518997]: Disconnected from authenticating user root 107.173.122.15 port 35020 [preauth] 2026-06-30T11:00:20.156945-05:00 claude-cloud sshd[519209]: Received disconnect from 93.77.187.140 port 38238:11: Bye Bye [preauth] 2026-06-30T11:00:20.157404-05:00 claude-cloud sshd[519209]: Disconnected from authenticating user root 93.77.187.140 port 38238 [preauth] 2026-06-30T11:00:30.193881-05:00 claude-cloud sshd[519225]: Connection closed by authenticating user root 125.20.210.182 port 38148 [preauth] 2026-06-30T11:01:58.678748-05:00 claude-cloud sshd[519520]: Received disconnect from 93.77.187.140 port 51434:11: Bye Bye [preauth] 2026-06-30T11:01:58.679652-05:00 claude-cloud sshd[519520]: Disconnected from authenticating user root 93.77.187.140 port 51434 [preauth] 2026-06-30T11:02:23.728905-05:00 claude-cloud systemd-logind[853]: New session c5239 of user claude. 2026-06-30T11:02:24.041492-05:00 claude-cloud systemd-logind[853]: Session c5239 logged out. Waiting for processes to exit. 2026-06-30T11:02:24.044960-05:00 claude-cloud systemd-logind[853]: Removed session c5239. 2026-06-30T11:03:31.236901-05:00 claude-cloud sshd[519784]: Connection closed by 152.32.252.233 port 39416 2026-06-30T11:03:31.781161-05:00 claude-cloud sshd[519785]: Connection closed by 152.32.252.233 port 39430 [preauth] 2026-06-30T11:03:33.052544-05:00 claude-cloud sshd[519787]: Unable to negotiate with 152.32.252.233 port 39440: no matching host key type found. Their offer: ssh-rsa [preauth] 2026-06-30T11:03:42.014570-05:00 claude-cloud sshd[519813]: Received disconnect from 93.77.187.140 port 41540:11: Bye Bye [preauth] 2026-06-30T11:03:42.014905-05:00 claude-cloud sshd[519813]: Disconnected from authenticating user root 93.77.187.140 port 41540 [preauth] 2026-06-30T11:04:02.727812-05:00 claude-cloud sshd[519888]: Connection closed by 45.148.10.240 port 54734 2026-06-30T11:05:01.710867-05:00 claude-cloud CRON[520053]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T11:05:01.717317-05:00 claude-cloud CRON[520053]: pam_unix(cron:session): session closed for user root 2026-06-30T11:05:28.024731-05:00 claude-cloud sshd[520133]: Received disconnect from 93.77.187.140 port 55562:11: Bye Bye [preauth] 2026-06-30T11:05:28.025439-05:00 claude-cloud sshd[520133]: Disconnected from authenticating user root 93.77.187.140 port 55562 [preauth] 2026-06-30T11:05:41.026355-05:00 claude-cloud sshd[520149]: Invalid user eth-docker from 45.148.10.240 port 53542 2026-06-30T11:05:41.074835-05:00 claude-cloud sshd[520149]: Connection closed by invalid user eth-docker 45.148.10.240 port 53542 [preauth] 2026-06-30T11:05:48.529013-05:00 claude-cloud sshd[520063]: Connection closed by authenticating user root 27.71.230.31 port 51834 [preauth] 2026-06-30T11:06:17.643210-05:00 claude-cloud sshd[520279]: Connection reset by authenticating user root 45.148.10.147 port 44586 [preauth] 2026-06-30T11:07:15.534007-05:00 claude-cloud sshd[520505]: Received disconnect from 93.77.187.140 port 38122:11: Bye Bye [preauth] 2026-06-30T11:07:15.534389-05:00 claude-cloud sshd[520505]: Disconnected from authenticating user root 93.77.187.140 port 38122 [preauth] 2026-06-30T11:07:19.186235-05:00 claude-cloud sshd[520510]: Invalid user admin from 45.198.224.46 port 44870 2026-06-30T11:07:19.978319-05:00 claude-cloud sshd[520510]: Connection closed by invalid user admin 45.198.224.46 port 44870 [preauth] 2026-06-30T11:07:28.923910-05:00 claude-cloud systemd-logind[853]: New session c5240 of user claude. 2026-06-30T11:07:29.284213-05:00 claude-cloud systemd-logind[853]: Session c5240 logged out. Waiting for processes to exit. 2026-06-30T11:07:29.285949-05:00 claude-cloud systemd-logind[853]: Removed session c5240. 2026-06-30T11:07:34.396435-05:00 claude-cloud sshd[520567]: Invalid user ethdocker from 45.148.10.240 port 55402 2026-06-30T11:07:34.409116-05:00 claude-cloud sshd[520567]: Connection closed by invalid user ethdocker 45.148.10.240 port 55402 [preauth] 2026-06-30T11:08:36.388735-05:00 claude-cloud sshd[520735]: Invalid user pricilla from 2.57.121.112 port 24330 2026-06-30T11:08:36.415235-05:00 claude-cloud sshd[520735]: Connection closed by invalid user pricilla 2.57.121.112 port 24330 [preauth] 2026-06-30T11:08:41.249558-05:00 claude-cloud sshd[520725]: Invalid user test from 125.20.210.182 port 36334 2026-06-30T11:08:43.791843-05:00 claude-cloud sshd[520725]: Connection closed by invalid user test 125.20.210.182 port 36334 [preauth] 2026-06-30T11:09:18.475236-05:00 claude-cloud sshd[520876]: Invalid user sol from 45.148.10.240 port 54870 2026-06-30T11:09:18.488048-05:00 claude-cloud sshd[520876]: Connection closed by invalid user sol 45.148.10.240 port 54870 [preauth] 2026-06-30T11:11:05.515888-05:00 claude-cloud sshd[521173]: Invalid user sol from 45.148.10.240 port 51416 2026-06-30T11:11:05.530167-05:00 claude-cloud sshd[521173]: Connection closed by invalid user sol 45.148.10.240 port 51416 [preauth] 2026-06-30T11:11:10.205932-05:00 claude-cloud sshd[521150]: Connection closed by authenticating user root 27.71.230.31 port 60038 [preauth] 2026-06-30T11:12:34.044556-05:00 claude-cloud systemd-logind[853]: New session c5241 of user claude. 2026-06-30T11:12:34.361466-05:00 claude-cloud systemd-logind[853]: Session c5241 logged out. Waiting for processes to exit. 2026-06-30T11:12:34.364025-05:00 claude-cloud systemd-logind[853]: Removed session c5241. 2026-06-30T11:12:38.550243-05:00 claude-cloud sshd[521489]: Connection reset by authenticating user root 45.148.10.152 port 49016 [preauth] 2026-06-30T11:12:48.118778-05:00 claude-cloud sshd[521565]: Invalid user sol from 45.148.10.240 port 43580 2026-06-30T11:12:48.132881-05:00 claude-cloud sshd[521565]: Connection closed by invalid user sol 45.148.10.240 port 43580 [preauth] 2026-06-30T11:15:01.729806-05:00 claude-cloud CRON[522070]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T11:15:01.736203-05:00 claude-cloud CRON[522070]: pam_unix(cron:session): session closed for user root 2026-06-30T11:16:48.315076-05:00 claude-cloud sshd[522419]: Connection closed by authenticating user root 45.198.224.46 port 37340 [preauth] 2026-06-30T11:16:57.368695-05:00 claude-cloud sshd[522340]: Connection closed by authenticating user root 27.71.230.31 port 41260 [preauth] 2026-06-30T11:16:59.292639-05:00 claude-cloud sshd[522469]: Invalid user user from 125.20.210.182 port 42244 2026-06-30T11:16:59.517850-05:00 claude-cloud sshd[522469]: Connection closed by invalid user user 125.20.210.182 port 42244 [preauth] 2026-06-30T11:17:01.744865-05:00 claude-cloud CRON[522478]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T11:17:01.751308-05:00 claude-cloud CRON[522478]: pam_unix(cron:session): session closed for user root 2026-06-30T11:17:39.164759-05:00 claude-cloud systemd-logind[853]: New session c5242 of user claude. 2026-06-30T11:17:39.444774-05:00 claude-cloud systemd-logind[853]: Session c5242 logged out. Waiting for processes to exit. 2026-06-30T11:17:39.446004-05:00 claude-cloud systemd-logind[853]: Removed session c5242. 2026-06-30T11:18:19.647339-05:00 claude-cloud sshd[522708]: Connection reset by authenticating user root 45.148.10.151 port 45100 [preauth] 2026-06-30T11:21:33.379104-05:00 claude-cloud systemd-logind[853]: Session c5222 logged out. Waiting for processes to exit. 2026-06-30T11:21:33.381034-05:00 claude-cloud systemd-logind[853]: Session c5217 logged out. Waiting for processes to exit. 2026-06-30T11:21:33.382243-05:00 claude-cloud systemd-logind[853]: Removed session c5217. 2026-06-30T11:21:33.383587-05:00 claude-cloud systemd-logind[853]: Removed session c5222. 2026-06-30T11:21:53.784332-05:00 claude-cloud systemd-logind[853]: New session c5243 of user claude. 2026-06-30T11:21:53.807656-05:00 claude-cloud systemd-logind[853]: New session c5244 of user claude. 2026-06-30T11:21:53.851615-05:00 claude-cloud systemd-logind[853]: Session c5243 logged out. Waiting for processes to exit. 2026-06-30T11:21:53.856337-05:00 claude-cloud systemd-logind[853]: Removed session c5243. 2026-06-30T11:22:14.790405-05:00 claude-cloud systemd-logind[853]: New session c5245 of user claude. 2026-06-30T11:22:14.845172-05:00 claude-cloud systemd-logind[853]: Session c5245 logged out. Waiting for processes to exit. 2026-06-30T11:22:14.847832-05:00 claude-cloud systemd-logind[853]: Removed session c5245. 2026-06-30T11:22:16.668756-05:00 claude-cloud systemd-logind[853]: New session c5246 of user claude. 2026-06-30T11:23:02.813792-05:00 claude-cloud sshd[523608]: Invalid user ubuntu from 45.148.10.240 port 38468 2026-06-30T11:23:02.826138-05:00 claude-cloud sshd[523608]: Connection closed by invalid user ubuntu 45.148.10.240 port 38468 [preauth] 2026-06-30T11:23:07.158592-05:00 claude-cloud systemd-logind[853]: New session c5247 of user claude. 2026-06-30T11:23:07.564933-05:00 claude-cloud systemd-logind[853]: Session c5247 logged out. Waiting for processes to exit. 2026-06-30T11:23:07.566350-05:00 claude-cloud systemd-logind[853]: Removed session c5247. 2026-06-30T11:23:33.542965-05:00 claude-cloud sshd[523703]: Received disconnect from 195.62.32.180 port 42324:11: disconnected by user [preauth] 2026-06-30T11:23:33.543644-05:00 claude-cloud sshd[523703]: Disconnected from authenticating user root 195.62.32.180 port 42324 [preauth] 2026-06-30T11:23:57.598496-05:00 claude-cloud sshd[523780]: Connection reset by authenticating user root 45.148.10.152 port 50368 [preauth] 2026-06-30T11:24:51.283950-05:00 claude-cloud sshd[523954]: Invalid user ubuntu from 45.148.10.240 port 51948 2026-06-30T11:24:51.296347-05:00 claude-cloud sshd[523954]: Connection closed by invalid user ubuntu 45.148.10.240 port 51948 [preauth] 2026-06-30T11:25:01.761206-05:00 claude-cloud CRON[523972]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T11:25:01.767774-05:00 claude-cloud CRON[523972]: pam_unix(cron:session): session closed for user root 2026-06-30T11:25:14.377078-05:00 claude-cloud sshd[524002]: Invalid user jenkins from 120.48.154.88 port 57126 2026-06-30T11:25:14.553919-05:00 claude-cloud sshd[524002]: Received disconnect from 120.48.154.88 port 57126:11: Bye Bye [preauth] 2026-06-30T11:25:14.554247-05:00 claude-cloud sshd[524002]: Disconnected from invalid user jenkins 120.48.154.88 port 57126 [preauth] 2026-06-30T11:25:47.791795-05:00 claude-cloud sshd[524081]: Connection closed by authenticating user root 125.20.210.182 port 43944 [preauth] 2026-06-30T11:26:21.594402-05:00 claude-cloud sshd[524215]: Invalid user ubuntu from 45.198.224.46 port 57590 2026-06-30T11:26:22.175071-05:00 claude-cloud sshd[524215]: Connection closed by invalid user ubuntu 45.198.224.46 port 57590 [preauth] 2026-06-30T11:26:31.747372-05:00 claude-cloud sshd[524246]: Invalid user ubuntu from 45.148.10.240 port 38464 2026-06-30T11:26:31.759185-05:00 claude-cloud sshd[524246]: Connection closed by invalid user ubuntu 45.148.10.240 port 38464 [preauth] 2026-06-30T11:26:42.504035-05:00 claude-cloud sshd[524271]: Invalid user admin from 2.57.121.25 port 59996 2026-06-30T11:26:42.529921-05:00 claude-cloud sshd[524271]: Connection closed by invalid user admin 2.57.121.25 port 59996 [preauth] 2026-06-30T11:27:37.748930-05:00 claude-cloud sshd[524497]: Invalid user admin from 193.46.255.86 port 37678 2026-06-30T11:27:37.775665-05:00 claude-cloud sshd[524497]: Connection closed by invalid user admin 193.46.255.86 port 37678 [preauth] 2026-06-30T11:28:09.797220-05:00 claude-cloud sshd[524581]: Invalid user ubuntu from 45.148.10.240 port 40652 2026-06-30T11:28:09.809629-05:00 claude-cloud sshd[524581]: Connection closed by invalid user ubuntu 45.148.10.240 port 40652 [preauth] 2026-06-30T11:28:37.505492-05:00 claude-cloud sshd[524659]: Connection closed by authenticating user root 27.71.230.31 port 47608 [preauth] 2026-06-30T11:29:32.168662-05:00 claude-cloud sshd[525065]: Connection reset by authenticating user root 45.227.254.170 port 34094 [preauth] 2026-06-30T11:29:49.682557-05:00 claude-cloud sshd[525131]: Invalid user ubuntu from 45.148.10.240 port 42624 2026-06-30T11:29:49.696482-05:00 claude-cloud sshd[525131]: Connection closed by invalid user ubuntu 45.148.10.240 port 42624 [preauth] 2026-06-30T11:30:07.000796-05:00 claude-cloud systemd-logind[853]: Session c5246 logged out. Waiting for processes to exit. 2026-06-30T11:30:07.015595-05:00 claude-cloud systemd-logind[853]: Removed session c5246. 2026-06-30T11:30:11.688548-05:00 claude-cloud systemd-logind[853]: Session c5244 logged out. Waiting for processes to exit. 2026-06-30T11:30:11.690866-05:00 claude-cloud systemd-logind[853]: Removed session c5244. 2026-06-30T11:30:19.846941-05:00 claude-cloud systemd-logind[853]: New session c5248 of user claude. 2026-06-30T11:30:19.881190-05:00 claude-cloud systemd-logind[853]: Session c5248 logged out. Waiting for processes to exit. 2026-06-30T11:30:19.882356-05:00 claude-cloud systemd-logind[853]: Removed session c5248. 2026-06-30T11:30:21.718713-05:00 claude-cloud systemd-logind[853]: New session c5249 of user claude. 2026-06-30T11:30:21.734921-05:00 claude-cloud systemd-logind[853]: New session c5250 of user claude. 2026-06-30T11:30:21.758624-05:00 claude-cloud systemd-logind[853]: Session c5249 logged out. Waiting for processes to exit. 2026-06-30T11:30:21.762265-05:00 claude-cloud systemd-logind[853]: Removed session c5249. 2026-06-30T11:30:24.624690-05:00 claude-cloud systemd-logind[853]: New session c5251 of user claude. 2026-06-30T11:30:24.679260-05:00 claude-cloud systemd-logind[853]: Session c5251 logged out. Waiting for processes to exit. 2026-06-30T11:30:24.680513-05:00 claude-cloud systemd-logind[853]: Removed session c5251. 2026-06-30T11:30:24.814003-05:00 claude-cloud systemd-logind[853]: New session c5252 of user claude. 2026-06-30T11:30:24.852746-05:00 claude-cloud systemd-logind[853]: Session c5252 logged out. Waiting for processes to exit. 2026-06-30T11:30:24.855149-05:00 claude-cloud systemd-logind[853]: Removed session c5252. 2026-06-30T11:30:32.531108-05:00 claude-cloud systemd-logind[853]: New session c5253 of user claude. 2026-06-30T11:30:32.925964-05:00 claude-cloud systemd-logind[853]: New session c5254 of user claude. 2026-06-30T11:30:33.211155-05:00 claude-cloud systemd-logind[853]: Session c5254 logged out. Waiting for processes to exit. 2026-06-30T11:30:33.212748-05:00 claude-cloud systemd-logind[853]: Removed session c5254. 2026-06-30T11:32:06.260146-05:00 claude-cloud systemd-logind[853]: Session c5250 logged out. Waiting for processes to exit. 2026-06-30T11:32:06.261394-05:00 claude-cloud systemd-logind[853]: Session c5253 logged out. Waiting for processes to exit. 2026-06-30T11:32:06.263554-05:00 claude-cloud systemd-logind[853]: Removed session c5250. 2026-06-30T11:32:06.265363-05:00 claude-cloud systemd-logind[853]: Removed session c5253. 2026-06-30T11:33:24.143198-05:00 claude-cloud systemd-logind[853]: New session c5255 of user claude. 2026-06-30T11:33:24.168408-05:00 claude-cloud systemd-logind[853]: New session c5256 of user claude. 2026-06-30T11:33:24.208574-05:00 claude-cloud systemd-logind[853]: Session c5256 logged out. Waiting for processes to exit. 2026-06-30T11:33:24.211303-05:00 claude-cloud systemd-logind[853]: Removed session c5256. 2026-06-30T11:33:25.231897-05:00 claude-cloud systemd-logind[853]: New session c5257 of user claude. 2026-06-30T11:33:25.285534-05:00 claude-cloud systemd-logind[853]: Session c5257 logged out. Waiting for processes to exit. 2026-06-30T11:33:25.287816-05:00 claude-cloud systemd-logind[853]: Removed session c5257. 2026-06-30T11:33:26.251510-05:00 claude-cloud systemd-logind[853]: New session c5258 of user claude. 2026-06-30T11:34:11.289702-05:00 claude-cloud sshd[526064]: Connection closed by authenticating user root 27.71.230.31 port 45002 [preauth] 2026-06-30T11:34:17.238116-05:00 claude-cloud sshd[526084]: Invalid user admin from 125.20.210.182 port 58512 2026-06-30T11:34:17.717620-05:00 claude-cloud sshd[526110]: Received disconnect from 152.32.182.41 port 49154:11: Bye Bye [preauth] 2026-06-30T11:34:17.717929-05:00 claude-cloud sshd[526110]: Disconnected from authenticating user root 152.32.182.41 port 49154 [preauth] 2026-06-30T11:34:18.506852-05:00 claude-cloud sshd[526084]: Connection closed by invalid user admin 125.20.210.182 port 58512 [preauth] 2026-06-30T11:35:01.777449-05:00 claude-cloud CRON[526250]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T11:35:01.783450-05:00 claude-cloud CRON[526250]: pam_unix(cron:session): session closed for user root 2026-06-30T11:35:04.428222-05:00 claude-cloud sshd[526253]: Connection reset by authenticating user root 62.60.130.219 port 60732 [preauth] 2026-06-30T11:35:41.868715-05:00 claude-cloud systemd-logind[853]: New session c5259 of user claude. 2026-06-30T11:35:42.231096-05:00 claude-cloud systemd-logind[853]: Session c5259 logged out. Waiting for processes to exit. 2026-06-30T11:35:42.234359-05:00 claude-cloud systemd-logind[853]: Removed session c5259. 2026-06-30T11:36:04.651816-05:00 claude-cloud sshd[526413]: Invalid user testuser from 45.198.224.46 port 40702 2026-06-30T11:36:05.482522-05:00 claude-cloud sshd[526413]: Connection closed by invalid user testuser 45.198.224.46 port 40702 [preauth] 2026-06-30T11:36:50.323413-05:00 claude-cloud sshd[526631]: Connection closed by 165.232.122.132 port 18439 2026-06-30T11:37:11.330264-05:00 claude-cloud sshd[526635]: Connection closed by 207.154.243.117 port 3178 [preauth] 2026-06-30T11:37:19.246704-05:00 claude-cloud sshd[526698]: Received disconnect from 120.48.154.88 port 44986:11: Bye Bye [preauth] 2026-06-30T11:37:19.247506-05:00 claude-cloud sshd[526698]: Disconnected from authenticating user root 120.48.154.88 port 44986 [preauth] 2026-06-30T11:37:25.562450-05:00 claude-cloud sshd[526459]: error: kex_exchange_identification: read: Connection reset by peer 2026-06-30T11:37:25.562930-05:00 claude-cloud sshd[526459]: Connection reset by 120.48.154.88 port 54724 2026-06-30T11:38:39.057244-05:00 claude-cloud sshd[526913]: Received disconnect from 152.32.182.41 port 50246:11: Bye Bye [preauth] 2026-06-30T11:38:39.060039-05:00 claude-cloud sshd[526913]: Disconnected from authenticating user root 152.32.182.41 port 50246 [preauth] 2026-06-30T11:40:03.484995-05:00 claude-cloud sshd[527172]: Received disconnect from 120.48.154.88 port 43760:11: Bye Bye [preauth] 2026-06-30T11:40:03.485639-05:00 claude-cloud sshd[527172]: Disconnected from authenticating user root 120.48.154.88 port 43760 [preauth] 2026-06-30T11:40:11.635381-05:00 claude-cloud sshd[527150]: Connection closed by authenticating user root 27.71.230.31 port 56808 [preauth] 2026-06-30T11:40:11.834202-05:00 claude-cloud sshd[527208]: Invalid user test from 152.32.182.41 port 59878 2026-06-30T11:40:11.942128-05:00 claude-cloud sshd[527208]: Received disconnect from 152.32.182.41 port 59878:11: Bye Bye [preauth] 2026-06-30T11:40:11.942416-05:00 claude-cloud sshd[527208]: Disconnected from invalid user test 152.32.182.41 port 59878 [preauth] 2026-06-30T11:40:19.804011-05:00 claude-cloud sshd[527233]: Invalid user solana from 45.148.10.240 port 52424 2026-06-30T11:40:19.818148-05:00 claude-cloud sshd[527233]: Connection closed by invalid user solana 45.148.10.240 port 52424 [preauth] 2026-06-30T11:40:35.997759-05:00 claude-cloud sshd[527274]: Connection reset by authenticating user root 45.148.10.141 port 45002 [preauth] 2026-06-30T11:40:47.328585-05:00 claude-cloud systemd-logind[853]: New session c5260 of user claude. 2026-06-30T11:40:47.641622-05:00 claude-cloud systemd-logind[853]: Session c5260 logged out. Waiting for processes to exit. 2026-06-30T11:40:47.643100-05:00 claude-cloud systemd-logind[853]: Removed session c5260. 2026-06-30T11:41:04.233841-05:00 claude-cloud sshd[527365]: Invalid user ubuntu from 120.48.154.88 port 43972 2026-06-30T11:41:04.407253-05:00 claude-cloud sshd[527365]: Received disconnect from 120.48.154.88 port 43972:11: Bye Bye [preauth] 2026-06-30T11:41:04.407652-05:00 claude-cloud sshd[527365]: Disconnected from invalid user ubuntu 120.48.154.88 port 43972 [preauth] 2026-06-30T11:41:22.808090-05:00 claude-cloud sshd[527434]: Invalid user devops from 4.240.8.92 port 51082 2026-06-30T11:41:22.934970-05:00 claude-cloud sshd[527434]: Connection closed by invalid user devops 4.240.8.92 port 51082 [preauth] 2026-06-30T11:41:23.640535-05:00 claude-cloud sshd[527436]: Invalid user oracle from 4.240.8.92 port 51086 2026-06-30T11:41:23.773935-05:00 claude-cloud sshd[527436]: Connection closed by invalid user oracle 4.240.8.92 port 51086 [preauth] 2026-06-30T11:41:24.507962-05:00 claude-cloud sshd[527440]: Invalid user vyos from 4.240.8.92 port 51090 2026-06-30T11:41:24.648401-05:00 claude-cloud sshd[527440]: Connection closed by invalid user vyos 4.240.8.92 port 51090 [preauth] 2026-06-30T11:41:25.459421-05:00 claude-cloud sshd[527442]: Connection closed by authenticating user root 4.240.8.92 port 35698 [preauth] 2026-06-30T11:41:26.122481-05:00 claude-cloud sshd[527444]: Invalid user pi from 4.240.8.92 port 35710 2026-06-30T11:41:26.250006-05:00 claude-cloud sshd[527444]: Connection closed by invalid user pi 4.240.8.92 port 35710 [preauth] 2026-06-30T11:41:27.037171-05:00 claude-cloud sshd[527453]: Connection closed by authenticating user root 4.240.8.92 port 35718 [preauth] 2026-06-30T11:41:27.727601-05:00 claude-cloud sshd[527455]: Invalid user kafka from 4.240.8.92 port 35726 2026-06-30T11:41:27.861888-05:00 claude-cloud sshd[527455]: Connection closed by invalid user kafka 4.240.8.92 port 35726 [preauth] 2026-06-30T11:41:42.839160-05:00 claude-cloud sshd[527494]: Received disconnect from 152.32.182.41 port 35534:11: Bye Bye [preauth] 2026-06-30T11:41:42.839623-05:00 claude-cloud sshd[527494]: Disconnected from authenticating user root 152.32.182.41 port 35534 [preauth] 2026-06-30T11:41:58.764906-05:00 claude-cloud sshd[527544]: Invalid user postgres from 45.148.10.240 port 37904 2026-06-30T11:41:58.778237-05:00 claude-cloud sshd[527544]: Connection closed by invalid user postgres 45.148.10.240 port 37904 [preauth] 2026-06-30T11:42:04.364179-05:00 claude-cloud sshd[527556]: Received disconnect from 120.48.154.88 port 46536:11: Bye Bye [preauth] 2026-06-30T11:42:04.364500-05:00 claude-cloud sshd[527556]: Disconnected from authenticating user root 120.48.154.88 port 46536 [preauth] 2026-06-30T11:42:27.211610-05:00 claude-cloud sshd[527623]: Invalid user cirros from 125.20.210.182 port 54834 2026-06-30T11:42:27.467099-05:00 claude-cloud sshd[527623]: Connection closed by invalid user cirros 125.20.210.182 port 54834 [preauth] 2026-06-30T11:43:18.394879-05:00 claude-cloud sshd[527785]: Received disconnect from 152.32.182.41 port 55124:11: Bye Bye [preauth] 2026-06-30T11:43:18.395484-05:00 claude-cloud sshd[527785]: Disconnected from authenticating user root 152.32.182.41 port 55124 [preauth] 2026-06-30T11:43:44.684996-05:00 claude-cloud sshd[527858]: Connection closed by authenticating user root 45.148.10.240 port 38914 [preauth] 2026-06-30T11:44:51.001433-05:00 claude-cloud sshd[528060]: Received disconnect from 152.32.182.41 port 59800:11: Bye Bye [preauth] 2026-06-30T11:44:51.001975-05:00 claude-cloud sshd[528060]: Disconnected from authenticating user root 152.32.182.41 port 59800 [preauth] 2026-06-30T11:45:01.793868-05:00 claude-cloud CRON[528085]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T11:45:01.800157-05:00 claude-cloud CRON[528085]: pam_unix(cron:session): session closed for user root 2026-06-30T11:45:30.736834-05:00 claude-cloud sshd[528171]: Connection closed by authenticating user root 45.148.10.240 port 41640 [preauth] 2026-06-30T11:45:40.926247-05:00 claude-cloud sshd[528190]: Invalid user web from 45.198.224.46 port 55258 2026-06-30T11:45:42.205006-05:00 claude-cloud sshd[528190]: Connection closed by invalid user web 45.198.224.46 port 55258 [preauth] 2026-06-30T11:45:48.922658-05:00 claude-cloud sshd[528195]: Connection closed by authenticating user root 27.71.230.31 port 36394 [preauth] 2026-06-30T11:45:53.046906-05:00 claude-cloud systemd-logind[853]: New session c5261 of user claude. 2026-06-30T11:45:53.385686-05:00 claude-cloud systemd-logind[853]: Session c5261 logged out. Waiting for processes to exit. 2026-06-30T11:45:53.387140-05:00 claude-cloud systemd-logind[853]: Removed session c5261. 2026-06-30T11:46:09.263376-05:00 claude-cloud sshd[528270]: Connection reset by authenticating user root 45.148.10.147 port 24766 [preauth] 2026-06-30T11:46:17.785358-05:00 claude-cloud sshd[528304]: Invalid user username from 152.32.182.41 port 47234 2026-06-30T11:46:17.898712-05:00 claude-cloud sshd[528304]: Received disconnect from 152.32.182.41 port 47234:11: Bye Bye [preauth] 2026-06-30T11:46:17.899011-05:00 claude-cloud sshd[528304]: Disconnected from invalid user username 152.32.182.41 port 47234 [preauth] 2026-06-30T11:47:10.663098-05:00 claude-cloud sshd[528468]: Connection closed by authenticating user root 45.148.10.240 port 52958 [preauth] 2026-06-30T11:47:40.602745-05:00 claude-cloud sshd[528538]: Invalid user demo from 152.32.182.41 port 50954 2026-06-30T11:47:40.793103-05:00 claude-cloud sshd[528538]: Received disconnect from 152.32.182.41 port 50954:11: Bye Bye [preauth] 2026-06-30T11:47:40.793332-05:00 claude-cloud sshd[528538]: Disconnected from invalid user demo 152.32.182.41 port 50954 [preauth] 2026-06-30T11:48:30.095727-05:00 claude-cloud sshd[528748]: Connection reset by 198.235.24.206 port 59406 [preauth] 2026-06-30T11:48:57.541677-05:00 claude-cloud sshd[528838]: Connection closed by authenticating user root 45.148.10.240 port 50126 [preauth] 2026-06-30T11:49:07.380549-05:00 claude-cloud sshd[528861]: Received disconnect from 152.32.182.41 port 49472:11: Bye Bye [preauth] 2026-06-30T11:49:07.380812-05:00 claude-cloud sshd[528861]: Disconnected from authenticating user root 152.32.182.41 port 49472 [preauth] 2026-06-30T11:50:39.406136-05:00 claude-cloud sshd[529127]: Received disconnect from 152.32.182.41 port 49660:11: Bye Bye [preauth] 2026-06-30T11:50:39.407094-05:00 claude-cloud sshd[529127]: Disconnected from authenticating user root 152.32.182.41 port 49660 [preauth] 2026-06-30T11:50:51.640870-05:00 claude-cloud sshd[529165]: Invalid user solana from 45.148.10.240 port 35582 2026-06-30T11:50:51.653604-05:00 claude-cloud sshd[529165]: Connection closed by invalid user solana 45.148.10.240 port 35582 [preauth] 2026-06-30T11:50:57.560478-05:00 claude-cloud sshd[529167]: Connection closed by authenticating user root 125.20.210.182 port 35214 [preauth] 2026-06-30T11:50:58.824328-05:00 claude-cloud systemd-logind[853]: New session c5262 of user claude. 2026-06-30T11:50:59.090906-05:00 claude-cloud systemd-logind[853]: Session c5262 logged out. Waiting for processes to exit. 2026-06-30T11:50:59.093658-05:00 claude-cloud systemd-logind[853]: Removed session c5262. 2026-06-30T11:51:35.926591-05:00 claude-cloud sshd[529298]: Connection reset by authenticating user root 45.148.10.152 port 17876 [preauth] 2026-06-30T11:52:08.029184-05:00 claude-cloud sshd[529397]: Received disconnect from 152.32.182.41 port 45092:11: Bye Bye [preauth] 2026-06-30T11:52:08.029838-05:00 claude-cloud sshd[529397]: Disconnected from authenticating user root 152.32.182.41 port 45092 [preauth] 2026-06-30T11:52:12.330893-05:00 claude-cloud sshd[529283]: Connection closed by authenticating user root 27.71.230.31 port 35910 [preauth] 2026-06-30T11:52:37.205559-05:00 claude-cloud sshd[529482]: Invalid user solana from 45.148.10.240 port 38324 2026-06-30T11:52:37.217518-05:00 claude-cloud sshd[529482]: Connection closed by invalid user solana 45.148.10.240 port 38324 [preauth] 2026-06-30T11:53:36.397853-05:00 claude-cloud sshd[529651]: Received disconnect from 152.32.182.41 port 36620:11: Bye Bye [preauth] 2026-06-30T11:53:36.398615-05:00 claude-cloud sshd[529651]: Disconnected from authenticating user root 152.32.182.41 port 36620 [preauth] 2026-06-30T11:54:20.349326-05:00 claude-cloud sshd[529800]: Invalid user defi from 45.148.10.240 port 50264 2026-06-30T11:54:20.362434-05:00 claude-cloud sshd[529800]: Connection closed by invalid user defi 45.148.10.240 port 50264 [preauth] 2026-06-30T11:55:01.813361-05:00 claude-cloud CRON[529903]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T11:55:01.821114-05:00 claude-cloud CRON[529903]: pam_unix(cron:session): session closed for user root 2026-06-30T11:55:03.902821-05:00 claude-cloud sshd[529909]: Connection closed by authenticating user root 185.242.3.195 port 47468 [preauth] 2026-06-30T11:55:08.642378-05:00 claude-cloud sshd[529921]: Received disconnect from 152.32.182.41 port 58048:11: Bye Bye [preauth] 2026-06-30T11:55:08.643121-05:00 claude-cloud sshd[529921]: Disconnected from authenticating user root 152.32.182.41 port 58048 [preauth] 2026-06-30T11:55:11.767807-05:00 claude-cloud sshd[529923]: Invalid user guest from 45.198.224.46 port 41972 2026-06-30T11:55:12.808672-05:00 claude-cloud sshd[529923]: Connection closed by invalid user guest 45.198.224.46 port 41972 [preauth] 2026-06-30T11:56:04.002556-05:00 claude-cloud systemd-logind[853]: New session c5263 of user claude. 2026-06-30T11:56:04.293025-05:00 claude-cloud systemd-logind[853]: Session c5263 logged out. Waiting for processes to exit. 2026-06-30T11:56:04.294436-05:00 claude-cloud systemd-logind[853]: Removed session c5263. 2026-06-30T11:56:05.968195-05:00 claude-cloud sshd[530100]: Invalid user geth from 45.148.10.240 port 58804 2026-06-30T11:56:05.981537-05:00 claude-cloud sshd[530100]: Connection closed by invalid user geth 45.148.10.240 port 58804 [preauth] 2026-06-30T11:56:44.356597-05:00 claude-cloud sshd[530213]: Received disconnect from 152.32.182.41 port 56002:11: Bye Bye [preauth] 2026-06-30T11:56:44.357447-05:00 claude-cloud sshd[530213]: Disconnected from authenticating user root 152.32.182.41 port 56002 [preauth] 2026-06-30T11:57:01.954742-05:00 claude-cloud sshd[530258]: Connection reset by authenticating user root 45.148.10.141 port 17644 [preauth] 2026-06-30T11:57:27.037937-05:00 claude-cloud sshd[530315]: Connection closed by authenticating user root 27.71.230.31 port 52908 [preauth] 2026-06-30T11:57:52.718791-05:00 claude-cloud sshd[530487]: Invalid user ethereum from 45.148.10.240 port 50276 2026-06-30T11:57:52.733260-05:00 claude-cloud sshd[530487]: Connection closed by invalid user ethereum 45.148.10.240 port 50276 [preauth] 2026-06-30T11:58:17.199826-05:00 claude-cloud sshd[530547]: Invalid user ubuntu from 152.32.182.41 port 44152 2026-06-30T11:58:17.314504-05:00 claude-cloud sshd[530547]: Received disconnect from 152.32.182.41 port 44152:11: Bye Bye [preauth] 2026-06-30T11:58:17.314947-05:00 claude-cloud sshd[530547]: Disconnected from invalid user ubuntu 152.32.182.41 port 44152 [preauth] 2026-06-30T11:59:03.427596-05:00 claude-cloud sshd[530657]: Connection closed by authenticating user root 125.20.210.182 port 35414 [preauth] 2026-06-30T11:59:32.067831-05:00 claude-cloud sshd[530751]: Invalid user eth from 45.148.10.240 port 34122 2026-06-30T11:59:32.080823-05:00 claude-cloud sshd[530751]: Connection closed by invalid user eth 45.148.10.240 port 34122 [preauth] 2026-06-30T12:01:09.432098-05:00 claude-cloud systemd-logind[853]: New session c5264 of user claude. 2026-06-30T12:01:09.698880-05:00 claude-cloud systemd-logind[853]: Session c5264 logged out. Waiting for processes to exit. 2026-06-30T12:01:09.701458-05:00 claude-cloud systemd-logind[853]: Removed session c5264. 2026-06-30T12:01:09.888592-05:00 claude-cloud sshd[531064]: Invalid user eth-docker from 45.148.10.240 port 45730 2026-06-30T12:01:09.902435-05:00 claude-cloud sshd[531064]: Connection closed by invalid user eth-docker 45.148.10.240 port 45730 [preauth] 2026-06-30T12:02:26.722506-05:00 claude-cloud sshd[531309]: Connection reset by authenticating user root 45.148.10.157 port 55330 [preauth] 2026-06-30T12:02:58.089496-05:00 claude-cloud sshd[531392]: Invalid user eth from 45.148.10.240 port 37430 2026-06-30T12:02:58.102104-05:00 claude-cloud sshd[531392]: Connection closed by invalid user eth 45.148.10.240 port 37430 [preauth] 2026-06-30T12:03:20.894690-05:00 claude-cloud sshd[531414]: Connection closed by authenticating user root 27.71.230.31 port 57638 [preauth] 2026-06-30T12:04:42.197880-05:00 claude-cloud sshd[531678]: Connection closed by authenticating user root 45.198.224.46 port 48708 [preauth] 2026-06-30T12:04:48.943899-05:00 claude-cloud sshd[531717]: Invalid user eth from 45.148.10.240 port 50996 2026-06-30T12:04:48.956385-05:00 claude-cloud sshd[531717]: Connection closed by invalid user eth 45.148.10.240 port 50996 [preauth] 2026-06-30T12:05:01.833073-05:00 claude-cloud CRON[531743]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T12:05:01.840906-05:00 claude-cloud CRON[531743]: pam_unix(cron:session): session closed for user root 2026-06-30T12:06:14.517901-05:00 claude-cloud systemd-logind[853]: New session c5265 of user claude. 2026-06-30T12:06:14.796034-05:00 claude-cloud systemd-logind[853]: Session c5265 logged out. Waiting for processes to exit. 2026-06-30T12:06:14.797849-05:00 claude-cloud systemd-logind[853]: Removed session c5265. 2026-06-30T12:06:33.630450-05:00 claude-cloud sshd[532016]: Invalid user sol from 45.148.10.240 port 43904 2026-06-30T12:06:33.644534-05:00 claude-cloud sshd[532016]: Connection closed by invalid user sol 45.148.10.240 port 43904 [preauth] 2026-06-30T12:07:01.494606-05:00 claude-cloud sshd[532089]: Invalid user admin from 125.20.210.182 port 36502 2026-06-30T12:07:01.841345-05:00 claude-cloud sshd[532089]: Connection closed by invalid user admin 125.20.210.182 port 36502 [preauth] 2026-06-30T12:08:00.460109-05:00 claude-cloud sshd[532334]: Connection reset by authenticating user root 45.148.10.151 port 50304 [preauth] 2026-06-30T12:08:22.724378-05:00 claude-cloud sshd[532403]: Connection closed by authenticating user claude 45.148.10.240 port 57522 [preauth] 2026-06-30T12:09:19.970904-05:00 claude-cloud sshd[532506]: Connection closed by authenticating user root 27.71.230.31 port 48806 [preauth] 2026-06-30T12:10:12.047442-05:00 claude-cloud sshd[532748]: Invalid user validator from 45.148.10.240 port 44084 2026-06-30T12:10:12.059677-05:00 claude-cloud sshd[532748]: Connection closed by invalid user validator 45.148.10.240 port 44084 [preauth] 2026-06-30T12:11:19.355821-05:00 claude-cloud systemd-logind[853]: New session c5266 of user claude. 2026-06-30T12:11:19.701809-05:00 claude-cloud systemd-logind[853]: Session c5266 logged out. Waiting for processes to exit. 2026-06-30T12:11:19.703541-05:00 claude-cloud systemd-logind[853]: Removed session c5266. 2026-06-30T12:11:55.401239-05:00 claude-cloud sshd[533076]: Invalid user node from 45.148.10.240 port 43546 2026-06-30T12:11:55.414647-05:00 claude-cloud sshd[533076]: Connection closed by invalid user node 45.148.10.240 port 43546 [preauth] 2026-06-30T12:13:34.671052-05:00 claude-cloud sshd[533343]: Invalid user operator from 45.148.10.240 port 48026 2026-06-30T12:13:34.682507-05:00 claude-cloud sshd[533343]: Connection closed by invalid user operator 45.148.10.240 port 48026 [preauth] 2026-06-30T12:13:36.799071-05:00 claude-cloud sshd[533348]: Connection reset by authenticating user root 45.227.254.170 port 15686 [preauth] 2026-06-30T12:14:09.722841-05:00 claude-cloud sshd[533443]: Invalid user ubuntu from 45.198.224.46 port 37014 2026-06-30T12:14:10.495624-05:00 claude-cloud sshd[533443]: Connection closed by invalid user ubuntu 45.198.224.46 port 37014 [preauth] 2026-06-30T12:15:01.854969-05:00 claude-cloud CRON[533606]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T12:15:01.865186-05:00 claude-cloud CRON[533606]: pam_unix(cron:session): session closed for user root 2026-06-30T12:15:05.614545-05:00 claude-cloud sshd[533550]: Connection closed by authenticating user root 27.71.230.31 port 48674 [preauth] 2026-06-30T12:15:19.657963-05:00 claude-cloud sshd[533643]: Connection closed by authenticating user root 125.20.210.182 port 60456 [preauth] 2026-06-30T12:15:20.093805-05:00 claude-cloud sshd[533673]: Invalid user trader from 45.148.10.240 port 41714 2026-06-30T12:15:20.109447-05:00 claude-cloud sshd[533673]: Connection closed by invalid user trader 45.148.10.240 port 41714 [preauth] 2026-06-30T12:16:24.414948-05:00 claude-cloud systemd-logind[853]: New session c5267 of user claude. 2026-06-30T12:16:24.788400-05:00 claude-cloud systemd-logind[853]: Session c5267 logged out. Waiting for processes to exit. 2026-06-30T12:16:24.791434-05:00 claude-cloud systemd-logind[853]: Removed session c5267. 2026-06-30T12:17:01.874047-05:00 claude-cloud CRON[533960]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T12:17:01.885663-05:00 claude-cloud CRON[533960]: pam_unix(cron:session): session closed for user root 2026-06-30T12:17:08.128235-05:00 claude-cloud sshd[533977]: Invalid user trading from 45.148.10.240 port 39178 2026-06-30T12:17:08.140527-05:00 claude-cloud sshd[533977]: Connection closed by invalid user trading 45.148.10.240 port 39178 [preauth] 2026-06-30T12:18:23.212774-05:00 claude-cloud sshd[534269]: Connection closed by authenticating user root 193.46.255.86 port 65300 [preauth] 2026-06-30T12:18:52.185931-05:00 claude-cloud sshd[534345]: Invalid user trader from 45.148.10.240 port 39792 2026-06-30T12:18:52.199012-05:00 claude-cloud sshd[534345]: Connection closed by invalid user trader 45.148.10.240 port 39792 [preauth] 2026-06-30T12:19:07.378330-05:00 claude-cloud sshd[534377]: Connection reset by authenticating user root 45.148.10.157 port 51126 [preauth] 2026-06-30T12:20:40.554956-05:00 claude-cloud sshd[534680]: Invalid user trader from 45.148.10.240 port 51632 2026-06-30T12:20:40.567221-05:00 claude-cloud sshd[534680]: Connection closed by invalid user trader 45.148.10.240 port 51632 [preauth] 2026-06-30T12:20:44.630014-05:00 claude-cloud sshd[534651]: Connection closed by authenticating user root 27.71.230.31 port 59522 [preauth] 2026-06-30T12:21:29.402356-05:00 claude-cloud systemd-logind[853]: New session c5268 of user claude. 2026-06-30T12:21:29.825903-05:00 claude-cloud systemd-logind[853]: Session c5268 logged out. Waiting for processes to exit. 2026-06-30T12:21:29.827428-05:00 claude-cloud systemd-logind[853]: Removed session c5268. 2026-06-30T12:22:34.219636-05:00 claude-cloud sshd[535005]: Invalid user trader from 45.148.10.240 port 45322 2026-06-30T12:22:34.231871-05:00 claude-cloud sshd[535005]: Connection closed by invalid user trader 45.148.10.240 port 45322 [preauth] 2026-06-30T12:23:38.758598-05:00 claude-cloud sshd[535174]: Connection closed by authenticating user root 45.198.224.46 port 33630 [preauth] 2026-06-30T12:23:44.069580-05:00 claude-cloud sshd[535225]: Invalid user admin from 2.57.121.25 port 31156 2026-06-30T12:23:44.095881-05:00 claude-cloud sshd[535225]: Connection closed by invalid user admin 2.57.121.25 port 31156 [preauth] 2026-06-30T12:23:44.580042-05:00 claude-cloud sshd[535199]: Invalid user rpc from 125.20.210.182 port 38714 2026-06-30T12:23:45.428076-05:00 claude-cloud sshd[535199]: Connection closed by invalid user rpc 125.20.210.182 port 38714 [preauth] 2026-06-30T12:24:16.828604-05:00 claude-cloud sshd[535322]: Invalid user trading from 45.148.10.240 port 60558 2026-06-30T12:24:16.842365-05:00 claude-cloud sshd[535322]: Connection closed by invalid user trading 45.148.10.240 port 60558 [preauth] 2026-06-30T12:24:44.167050-05:00 claude-cloud sshd[535393]: Connection reset by authenticating user root 45.148.10.141 port 19156 [preauth] 2026-06-30T12:24:54.434973-05:00 claude-cloud sshd[535425]: Invalid user ryanne from 2.57.121.112 port 44896 2026-06-30T12:24:54.461121-05:00 claude-cloud sshd[535425]: Connection closed by invalid user ryanne 2.57.121.112 port 44896 [preauth] 2026-06-30T12:25:01.898827-05:00 claude-cloud CRON[535436]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T12:25:01.906025-05:00 claude-cloud CRON[535436]: pam_unix(cron:session): session closed for user root 2026-06-30T12:25:55.966421-05:00 claude-cloud sshd[535602]: Connection closed by authenticating user root 45.148.10.240 port 38350 [preauth] 2026-06-30T12:26:34.448264-05:00 claude-cloud systemd-logind[853]: New session c5269 of user claude. 2026-06-30T12:26:34.808630-05:00 claude-cloud systemd-logind[853]: Session c5269 logged out. Waiting for processes to exit. 2026-06-30T12:26:34.811212-05:00 claude-cloud systemd-logind[853]: Removed session c5269. 2026-06-30T12:27:06.386651-05:00 claude-cloud sshd[535659]: Connection closed by authenticating user root 27.71.230.31 port 60142 [preauth] 2026-06-30T12:27:41.038835-05:00 claude-cloud sshd[535922]: Invalid user shardeum from 45.148.10.240 port 50984 2026-06-30T12:27:41.051544-05:00 claude-cloud sshd[535922]: Connection closed by invalid user shardeum 45.148.10.240 port 50984 [preauth] 2026-06-30T12:29:29.116871-05:00 claude-cloud sshd[536312]: Connection closed by authenticating user root 45.148.10.240 port 50438 [preauth] 2026-06-30T12:30:18.247060-05:00 claude-cloud sshd[536454]: Connection reset by authenticating user root 45.148.10.157 port 48628 [preauth] 2026-06-30T12:31:13.046849-05:00 claude-cloud sshd[536620]: Connection closed by authenticating user root 45.148.10.240 port 37176 [preauth] 2026-06-30T12:31:39.512843-05:00 claude-cloud systemd-logind[853]: New session c5270 of user claude. 2026-06-30T12:31:39.834011-05:00 claude-cloud systemd-logind[853]: Session c5270 logged out. Waiting for processes to exit. 2026-06-30T12:31:39.835761-05:00 claude-cloud systemd-logind[853]: Removed session c5270. 2026-06-30T12:32:11.708988-05:00 claude-cloud sshd[536768]: Connection closed by authenticating user root 125.20.210.182 port 37154 [preauth] 2026-06-30T12:32:56.178549-05:00 claude-cloud sshd[536924]: Connection closed by authenticating user root 45.198.224.46 port 36364 [preauth] 2026-06-30T12:33:00.848098-05:00 claude-cloud sshd[536942]: Connection closed by authenticating user root 45.148.10.240 port 56146 [preauth] 2026-06-30T12:33:01.508679-05:00 claude-cloud sshd[536763]: Connection closed by authenticating user root 27.71.230.31 port 38564 [preauth] 2026-06-30T12:34:59.336974-05:00 claude-cloud sshd[537280]: Invalid user firedancer from 45.148.10.240 port 41470 2026-06-30T12:34:59.351227-05:00 claude-cloud sshd[537280]: Connection closed by invalid user firedancer 45.148.10.240 port 41470 [preauth] 2026-06-30T12:35:01.918002-05:00 claude-cloud CRON[537289]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T12:35:01.926226-05:00 claude-cloud CRON[537289]: pam_unix(cron:session): session closed for user root 2026-06-30T12:35:56.006259-05:00 claude-cloud sshd[537456]: Connection reset by authenticating user root 62.60.130.219 port 17754 [preauth] 2026-06-30T12:36:44.789458-05:00 claude-cloud systemd-logind[853]: New session c5271 of user claude. 2026-06-30T12:36:45.136447-05:00 claude-cloud systemd-logind[853]: Session c5271 logged out. Waiting for processes to exit. 2026-06-30T12:36:45.138625-05:00 claude-cloud systemd-logind[853]: Removed session c5271. 2026-06-30T12:36:50.033958-05:00 claude-cloud sshd[537677]: Invalid user blockchain from 45.148.10.240 port 49274 2026-06-30T12:36:50.046518-05:00 claude-cloud sshd[537677]: Connection closed by invalid user blockchain 45.148.10.240 port 49274 [preauth] 2026-06-30T12:37:36.523781-05:00 claude-cloud sshd[537804]: Connection closed by 77.90.185.16 port 65105 2026-06-30T12:37:45.973759-05:00 claude-cloud sshd[537826]: Received disconnect from 158.69.227.40 port 51172:11: disconnected by user [preauth] 2026-06-30T12:37:45.974086-05:00 claude-cloud sshd[537826]: Disconnected from authenticating user root 158.69.227.40 port 51172 [preauth] 2026-06-30T12:37:53.020754-05:00 claude-cloud sshd[537824]: Invalid user from 213.177.179.62 port 47510 2026-06-30T12:37:54.437570-05:00 claude-cloud sshd[537824]: Connection closed by invalid user 213.177.179.62 port 47510 [preauth] 2026-06-30T12:38:06.692323-05:00 claude-cloud sshd[537862]: Connection closed by authenticating user root 27.71.230.31 port 55542 [preauth] 2026-06-30T12:38:31.063700-05:00 claude-cloud sshd[537957]: Connection closed by authenticating user www-data 45.148.10.240 port 46136 [preauth] 2026-06-30T12:40:13.950226-05:00 claude-cloud sshd[538487]: Invalid user user from 45.148.10.240 port 55112 2026-06-30T12:40:13.963395-05:00 claude-cloud sshd[538487]: Connection closed by invalid user user 45.148.10.240 port 55112 [preauth] 2026-06-30T12:40:44.847614-05:00 claude-cloud sshd[538727]: Connection closed by authenticating user root 125.20.210.182 port 46342 [preauth] 2026-06-30T12:41:29.602427-05:00 claude-cloud sshd[538987]: Connection reset by authenticating user root 45.148.10.141 port 26740 [preauth] 2026-06-30T12:41:49.474156-05:00 claude-cloud systemd-logind[853]: New session c5272 of user claude. 2026-06-30T12:41:49.869862-05:00 claude-cloud systemd-logind[853]: Session c5272 logged out. Waiting for processes to exit. 2026-06-30T12:41:49.871776-05:00 claude-cloud systemd-logind[853]: Removed session c5272. 2026-06-30T12:42:00.891126-05:00 claude-cloud sshd[539250]: Invalid user user from 45.148.10.240 port 41330 2026-06-30T12:42:00.903003-05:00 claude-cloud sshd[539250]: Connection closed by invalid user user 45.148.10.240 port 41330 [preauth] 2026-06-30T12:42:24.957479-05:00 claude-cloud sshd[539321]: Connection closed by authenticating user root 45.198.224.46 port 42946 [preauth] 2026-06-30T12:43:41.818033-05:00 claude-cloud sshd[539671]: Connection closed by authenticating user root 45.148.10.240 port 60438 [preauth] 2026-06-30T12:43:55.342798-05:00 claude-cloud sshd[539676]: Connection closed by authenticating user root 27.71.230.31 port 56420 [preauth] 2026-06-30T12:44:07.380910-05:00 claude-cloud sshd[539764]: Invalid user or from 89.124.96.90 port 52372 2026-06-30T12:44:07.399491-05:00 claude-cloud sshd[539764]: Received disconnect from 89.124.96.90 port 52372:11: Bye Bye [preauth] 2026-06-30T12:44:07.399787-05:00 claude-cloud sshd[539764]: Disconnected from invalid user or 89.124.96.90 port 52372 [preauth] 2026-06-30T12:44:20.385607-05:00 claude-cloud sshd[539869]: Received disconnect from 185.89.249.3 port 56918:11: disconnected by user [preauth] 2026-06-30T12:44:20.386361-05:00 claude-cloud sshd[539869]: Disconnected from authenticating user root 185.89.249.3 port 56918 [preauth] 2026-06-30T12:44:45.717038-05:00 claude-cloud sshd[539967]: Invalid user lit from 168.167.72.132 port 40896 2026-06-30T12:44:45.906752-05:00 claude-cloud sshd[539967]: Received disconnect from 168.167.72.132 port 40896:11: Bye Bye [preauth] 2026-06-30T12:44:45.907156-05:00 claude-cloud sshd[539967]: Disconnected from invalid user lit 168.167.72.132 port 40896 [preauth] 2026-06-30T12:45:01.937997-05:00 claude-cloud CRON[540057]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T12:45:01.944839-05:00 claude-cloud CRON[540057]: pam_unix(cron:session): session closed for user root 2026-06-30T12:45:22.745468-05:00 claude-cloud sshd[540147]: Invalid user elround from 45.148.10.240 port 47078 2026-06-30T12:45:22.758690-05:00 claude-cloud sshd[540147]: Connection closed by invalid user elround 45.148.10.240 port 47078 [preauth] 2026-06-30T12:46:19.410990-05:00 claude-cloud sshd[540425]: Invalid user app4 from 119.47.90.19 port 55866 2026-06-30T12:46:19.584804-05:00 claude-cloud sshd[540425]: Received disconnect from 119.47.90.19 port 55866:11: Bye Bye [preauth] 2026-06-30T12:46:19.585226-05:00 claude-cloud sshd[540425]: Disconnected from invalid user app4 119.47.90.19 port 55866 [preauth] 2026-06-30T12:46:54.643744-05:00 claude-cloud systemd-logind[853]: New session c5273 of user claude. 2026-06-30T12:46:54.935106-05:00 claude-cloud systemd-logind[853]: Session c5273 logged out. Waiting for processes to exit. 2026-06-30T12:46:54.936762-05:00 claude-cloud systemd-logind[853]: Removed session c5273. 2026-06-30T12:47:05.774713-05:00 claude-cloud sshd[540680]: Connection reset by authenticating user root 45.148.10.152 port 50270 [preauth] 2026-06-30T12:47:16.241862-05:00 claude-cloud sshd[540791]: Invalid user elrond from 45.148.10.240 port 57056 2026-06-30T12:47:16.253915-05:00 claude-cloud sshd[540791]: Connection closed by invalid user elrond 45.148.10.240 port 57056 [preauth] 2026-06-30T12:48:11.801494-05:00 claude-cloud sshd[541019]: Connection closed by authenticating user root 8.152.217.58 port 58172 [preauth] 2026-06-30T12:48:20.869858-05:00 claude-cloud sshd[541106]: Invalid user lit from 202.145.0.61 port 47926 2026-06-30T12:48:21.046156-05:00 claude-cloud sshd[541106]: Received disconnect from 202.145.0.61 port 47926:11: Bye Bye [preauth] 2026-06-30T12:48:21.046676-05:00 claude-cloud sshd[541106]: Disconnected from invalid user lit 202.145.0.61 port 47926 [preauth] 2026-06-30T12:48:21.872927-05:00 claude-cloud sshd[541108]: Invalid user lit from 139.59.231.23 port 48300 2026-06-30T12:48:22.052176-05:00 claude-cloud sshd[541108]: Received disconnect from 139.59.231.23 port 48300:11: Bye Bye [preauth] 2026-06-30T12:48:22.052434-05:00 claude-cloud sshd[541108]: Disconnected from invalid user lit 139.59.231.23 port 48300 [preauth] 2026-06-30T12:48:42.453119-05:00 claude-cloud sshd[541222]: Connection closed by authenticating user root 125.20.210.182 port 39404 [preauth] 2026-06-30T12:48:55.661893-05:00 claude-cloud sshd[541274]: Invalid user lit from 43.255.118.11 port 49514 2026-06-30T12:48:55.837195-05:00 claude-cloud sshd[541274]: Received disconnect from 43.255.118.11 port 49514:11: Bye Bye [preauth] 2026-06-30T12:48:55.837533-05:00 claude-cloud sshd[541274]: Disconnected from invalid user lit 43.255.118.11 port 49514 [preauth] 2026-06-30T12:49:12.885990-05:00 claude-cloud sshd[541341]: Invalid user admin from 45.148.10.240 port 50866 2026-06-30T12:49:12.899798-05:00 claude-cloud sshd[541341]: Connection closed by invalid user admin 45.148.10.240 port 50866 [preauth] 2026-06-30T12:49:47.443257-05:00 claude-cloud sshd[541460]: Connection closed by authenticating user root 27.71.230.31 port 60300 [preauth] 2026-06-30T12:50:58.339142-05:00 claude-cloud sshd[559148]: Connection closed by authenticating user root 45.148.10.240 port 35958 [preauth] 2026-06-30T12:51:51.526116-05:00 claude-cloud sshd[559417]: Connection closed by authenticating user root 45.198.224.46 port 53576 [preauth] 2026-06-30T12:51:59.383442-05:00 claude-cloud systemd-logind[853]: New session c5274 of user claude. 2026-06-30T12:51:59.662892-05:00 claude-cloud systemd-logind[853]: Session c5274 logged out. Waiting for processes to exit. 2026-06-30T12:51:59.664590-05:00 claude-cloud systemd-logind[853]: Removed session c5274. 2026-06-30T12:52:41.738999-05:00 claude-cloud sshd[559865]: Connection reset by authenticating user root 45.227.254.170 port 40374 [preauth] 2026-06-30T12:52:45.361129-05:00 claude-cloud sshd[559903]: Invalid user user from 45.148.10.240 port 45978 2026-06-30T12:52:45.381405-05:00 claude-cloud sshd[559903]: Connection closed by invalid user user 45.148.10.240 port 45978 [preauth] 2026-06-30T12:54:32.912679-05:00 claude-cloud sshd[560998]: Invalid user user from 45.148.10.240 port 54274 2026-06-30T12:54:32.925207-05:00 claude-cloud sshd[560998]: Connection closed by invalid user user 45.148.10.240 port 54274 [preauth] 2026-06-30T12:55:01.956242-05:00 claude-cloud CRON[561114]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T12:55:01.962973-05:00 claude-cloud CRON[561114]: pam_unix(cron:session): session closed for user root 2026-06-30T12:55:28.532687-05:00 claude-cloud sshd[561445]: Connection closed by authenticating user root 27.71.230.31 port 39874 [preauth] 2026-06-30T12:56:15.177607-05:00 claude-cloud sshd[561597]: Invalid user miner from 45.148.10.240 port 39688 2026-06-30T12:56:15.191340-05:00 claude-cloud sshd[561597]: Connection closed by invalid user miner 45.148.10.240 port 39688 [preauth] 2026-06-30T12:56:54.674393-05:00 claude-cloud sshd[561754]: Invalid user rsm from 43.255.118.11 port 41784 2026-06-30T12:56:54.855128-05:00 claude-cloud sshd[561754]: Received disconnect from 43.255.118.11 port 41784:11: Bye Bye [preauth] 2026-06-30T12:56:54.855573-05:00 claude-cloud sshd[561754]: Disconnected from invalid user rsm 43.255.118.11 port 41784 [preauth] 2026-06-30T12:57:03.205017-05:00 claude-cloud sshd[561765]: Invalid user user1 from 125.20.210.182 port 39830 2026-06-30T12:57:04.456058-05:00 claude-cloud sshd[561777]: Invalid user alma from 119.47.90.19 port 51748 2026-06-30T12:57:04.596724-05:00 claude-cloud sshd[561765]: Connection closed by invalid user user1 125.20.210.182 port 39830 [preauth] 2026-06-30T12:57:04.632625-05:00 claude-cloud sshd[561777]: Received disconnect from 119.47.90.19 port 51748:11: Bye Bye [preauth] 2026-06-30T12:57:04.632946-05:00 claude-cloud sshd[561777]: Disconnected from invalid user alma 119.47.90.19 port 51748 [preauth] 2026-06-30T12:57:05.068119-05:00 claude-cloud systemd-logind[853]: New session c5275 of user claude. 2026-06-30T12:57:05.408994-05:00 claude-cloud systemd-logind[853]: Session c5275 logged out. Waiting for processes to exit. 2026-06-30T12:57:05.410742-05:00 claude-cloud systemd-logind[853]: Removed session c5275. 2026-06-30T12:57:15.258229-05:00 claude-cloud sshd[561818]: Invalid user nature from 202.145.0.61 port 36450 2026-06-30T12:57:15.433969-05:00 claude-cloud sshd[561818]: Received disconnect from 202.145.0.61 port 36450:11: Bye Bye [preauth] 2026-06-30T12:57:15.434238-05:00 claude-cloud sshd[561818]: Disconnected from invalid user nature 202.145.0.61 port 36450 [preauth] 2026-06-30T12:57:42.930127-05:00 claude-cloud sshd[561968]: Invalid user zf from 168.167.72.132 port 40897 2026-06-30T12:57:43.133667-05:00 claude-cloud sshd[561968]: Received disconnect from 168.167.72.132 port 40897:11: Bye Bye [preauth] 2026-06-30T12:57:43.134021-05:00 claude-cloud sshd[561968]: Disconnected from invalid user zf 168.167.72.132 port 40897 [preauth] 2026-06-30T12:57:51.694211-05:00 claude-cloud sshd[562037]: Connection closed by authenticating user root 45.148.10.240 port 60286 [preauth] 2026-06-30T12:57:52.946507-05:00 claude-cloud sshd[562041]: Invalid user tan from 139.59.231.23 port 39152 2026-06-30T12:57:53.120367-05:00 claude-cloud sshd[562041]: Received disconnect from 139.59.231.23 port 39152:11: Bye Bye [preauth] 2026-06-30T12:57:53.120716-05:00 claude-cloud sshd[562041]: Disconnected from invalid user tan 139.59.231.23 port 39152 [preauth] 2026-06-30T12:58:14.357205-05:00 claude-cloud sshd[562122]: Connection reset by authenticating user root 45.148.10.151 port 62718 [preauth] 2026-06-30T12:58:22.702894-05:00 claude-cloud sshd[562180]: Invalid user admin from 152.32.174.171 port 55042 2026-06-30T12:58:22.906456-05:00 claude-cloud sshd[562180]: Connection closed by invalid user admin 152.32.174.171 port 55042 [preauth] 2026-06-30T12:59:17.509927-05:00 claude-cloud sshd[562386]: Invalid user fis from 202.145.0.61 port 43838 2026-06-30T12:59:17.678533-05:00 claude-cloud sshd[562386]: Received disconnect from 202.145.0.61 port 43838:11: Bye Bye [preauth] 2026-06-30T12:59:17.678902-05:00 claude-cloud sshd[562386]: Disconnected from invalid user fis 202.145.0.61 port 43838 [preauth] 2026-06-30T12:59:28.919902-05:00 claude-cloud sshd[562446]: Invalid user images from 119.47.90.19 port 48388 2026-06-30T12:59:29.098193-05:00 claude-cloud sshd[562446]: Received disconnect from 119.47.90.19 port 48388:11: Bye Bye [preauth] 2026-06-30T12:59:29.098377-05:00 claude-cloud sshd[562446]: Disconnected from invalid user images 119.47.90.19 port 48388 [preauth] 2026-06-30T12:59:29.431724-05:00 claude-cloud sshd[562448]: Invalid user pubsub from 43.255.118.11 port 54878 2026-06-30T12:59:29.609621-05:00 claude-cloud sshd[562448]: Received disconnect from 43.255.118.11 port 54878:11: Bye Bye [preauth] 2026-06-30T12:59:29.609920-05:00 claude-cloud sshd[562448]: Disconnected from invalid user pubsub 43.255.118.11 port 54878 [preauth] 2026-06-30T12:59:43.061670-05:00 claude-cloud sshd[562522]: Invalid user git from 45.148.10.240 port 59086 2026-06-30T12:59:43.075449-05:00 claude-cloud sshd[562522]: Connection closed by invalid user git 45.148.10.240 port 59086 [preauth] 2026-06-30T12:59:48.317352-05:00 claude-cloud sshd[562601]: Invalid user eso from 139.59.231.23 port 45786 2026-06-30T12:59:48.492408-05:00 claude-cloud sshd[562601]: Received disconnect from 139.59.231.23 port 45786:11: Bye Bye [preauth] 2026-06-30T12:59:48.492702-05:00 claude-cloud sshd[562601]: Disconnected from invalid user eso 139.59.231.23 port 45786 [preauth] 2026-06-30T12:59:57.154412-05:00 claude-cloud sshd[562744]: Invalid user columbo from 168.167.72.132 port 40898 2026-06-30T12:59:57.349814-05:00 claude-cloud sshd[562744]: Received disconnect from 168.167.72.132 port 40898:11: Bye Bye [preauth] 2026-06-30T12:59:57.350094-05:00 claude-cloud sshd[562744]: Disconnected from invalid user columbo 168.167.72.132 port 40898 [preauth] 2026-06-30T13:01:21.225530-05:00 claude-cloud sshd[563188]: Invalid user cheetah from 202.145.0.61 port 51224 2026-06-30T13:01:21.396021-05:00 claude-cloud sshd[563188]: Received disconnect from 202.145.0.61 port 51224:11: Bye Bye [preauth] 2026-06-30T13:01:21.396240-05:00 claude-cloud sshd[563188]: Disconnected from invalid user cheetah 202.145.0.61 port 51224 [preauth] 2026-06-30T13:01:27.480631-05:00 claude-cloud sshd[563203]: Connection closed by authenticating user root 45.198.224.46 port 35794 [preauth] 2026-06-30T13:01:29.933408-05:00 claude-cloud sshd[563168]: Connection closed by authenticating user root 27.71.230.31 port 54868 [preauth] 2026-06-30T13:01:37.873694-05:00 claude-cloud sshd[563225]: Connection closed by authenticating user root 45.148.10.240 port 52780 [preauth] 2026-06-30T13:01:48.288852-05:00 claude-cloud sshd[563284]: Invalid user nature from 139.59.231.23 port 52460 2026-06-30T13:01:48.456488-05:00 claude-cloud sshd[563284]: Received disconnect from 139.59.231.23 port 52460:11: Bye Bye [preauth] 2026-06-30T13:01:48.456937-05:00 claude-cloud sshd[563284]: Disconnected from invalid user nature 139.59.231.23 port 52460 [preauth] 2026-06-30T13:01:49.264691-05:00 claude-cloud sshd[563286]: Invalid user baze from 43.255.118.11 port 39544 2026-06-30T13:01:49.449567-05:00 claude-cloud sshd[563286]: Received disconnect from 43.255.118.11 port 39544:11: Bye Bye [preauth] 2026-06-30T13:01:49.449824-05:00 claude-cloud sshd[563286]: Disconnected from invalid user baze 43.255.118.11 port 39544 [preauth] 2026-06-30T13:01:50.536536-05:00 claude-cloud sshd[563307]: Invalid user simpeg from 119.47.90.19 port 46452 2026-06-30T13:01:50.710864-05:00 claude-cloud sshd[563307]: Received disconnect from 119.47.90.19 port 46452:11: Bye Bye [preauth] 2026-06-30T13:01:50.711327-05:00 claude-cloud sshd[563307]: Disconnected from invalid user simpeg 119.47.90.19 port 46452 [preauth] 2026-06-30T13:02:10.223078-05:00 claude-cloud systemd-logind[853]: New session c5276 of user claude. 2026-06-30T13:02:10.318869-05:00 claude-cloud sshd[563344]: Invalid user res from 168.167.72.132 port 40899 2026-06-30T13:02:10.511899-05:00 claude-cloud sshd[563344]: Received disconnect from 168.167.72.132 port 40899:11: Bye Bye [preauth] 2026-06-30T13:02:10.512450-05:00 claude-cloud sshd[563344]: Disconnected from invalid user res 168.167.72.132 port 40899 [preauth] 2026-06-30T13:02:10.597145-05:00 claude-cloud systemd-logind[853]: Session c5276 logged out. Waiting for processes to exit. 2026-06-30T13:02:10.599694-05:00 claude-cloud systemd-logind[853]: Removed session c5276. 2026-06-30T13:03:12.470516-05:00 claude-cloud sshd[563585]: Invalid user compras from 202.145.0.61 port 58606 2026-06-30T13:03:12.643639-05:00 claude-cloud sshd[563585]: Received disconnect from 202.145.0.61 port 58606:11: Bye Bye [preauth] 2026-06-30T13:03:12.643926-05:00 claude-cloud sshd[563585]: Disconnected from invalid user compras 202.145.0.61 port 58606 [preauth] 2026-06-30T13:03:27.231744-05:00 claude-cloud sshd[563635]: Invalid user partners from 89.124.96.90 port 51878 2026-06-30T13:03:27.253982-05:00 claude-cloud sshd[563635]: Received disconnect from 89.124.96.90 port 51878:11: Bye Bye [preauth] 2026-06-30T13:03:27.254221-05:00 claude-cloud sshd[563635]: Disconnected from invalid user partners 89.124.96.90 port 51878 [preauth] 2026-06-30T13:03:28.030566-05:00 claude-cloud sshd[563637]: Invalid user admin from 45.148.10.240 port 42978 2026-06-30T13:03:28.044320-05:00 claude-cloud sshd[563637]: Connection closed by invalid user admin 45.148.10.240 port 42978 [preauth] 2026-06-30T13:03:35.495924-05:00 claude-cloud sshd[563654]: Invalid user rsm from 139.59.231.23 port 59062 2026-06-30T13:03:35.663701-05:00 claude-cloud sshd[563654]: Received disconnect from 139.59.231.23 port 59062:11: Bye Bye [preauth] 2026-06-30T13:03:35.664137-05:00 claude-cloud sshd[563654]: Disconnected from invalid user rsm 139.59.231.23 port 59062 [preauth] 2026-06-30T13:03:52.901072-05:00 claude-cloud sshd[563728]: Connection reset by authenticating user root 45.227.254.170 port 55320 [preauth] 2026-06-30T13:03:58.388220-05:00 claude-cloud sshd[563742]: Invalid user kdftp from 119.47.90.19 port 50014 2026-06-30T13:03:58.564382-05:00 claude-cloud sshd[563742]: Received disconnect from 119.47.90.19 port 50014:11: Bye Bye [preauth] 2026-06-30T13:03:58.564534-05:00 claude-cloud sshd[563742]: Disconnected from invalid user kdftp 119.47.90.19 port 50014 [preauth] 2026-06-30T13:03:58.814179-05:00 claude-cloud sshd[563744]: Invalid user zf from 43.255.118.11 port 52272 2026-06-30T13:03:58.990031-05:00 claude-cloud sshd[563744]: Received disconnect from 43.255.118.11 port 52272:11: Bye Bye [preauth] 2026-06-30T13:03:58.990178-05:00 claude-cloud sshd[563744]: Disconnected from invalid user zf 43.255.118.11 port 52272 [preauth] 2026-06-30T13:04:08.657769-05:00 claude-cloud sshd[563767]: Invalid user fis from 168.167.72.132 port 40900 2026-06-30T13:04:08.851817-05:00 claude-cloud sshd[563767]: Received disconnect from 168.167.72.132 port 40900:11: Bye Bye [preauth] 2026-06-30T13:04:08.852177-05:00 claude-cloud sshd[563767]: Disconnected from invalid user fis 168.167.72.132 port 40900 [preauth] 2026-06-30T13:05:01.979004-05:00 claude-cloud CRON[564056]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T13:05:01.985433-05:00 claude-cloud CRON[564056]: pam_unix(cron:session): session closed for user root 2026-06-30T13:05:05.068715-05:00 claude-cloud sshd[564066]: Invalid user know from 202.145.0.61 port 37750 2026-06-30T13:05:05.238201-05:00 claude-cloud sshd[564066]: Received disconnect from 202.145.0.61 port 37750:11: Bye Bye [preauth] 2026-06-30T13:05:05.238436-05:00 claude-cloud sshd[564066]: Disconnected from invalid user know 202.145.0.61 port 37750 [preauth] 2026-06-30T13:05:15.252053-05:00 claude-cloud sshd[564085]: Connection closed by authenticating user root 125.20.210.182 port 37992 [preauth] 2026-06-30T13:05:18.138204-05:00 claude-cloud sshd[564128]: Invalid user ubuntu from 45.148.10.240 port 38472 2026-06-30T13:05:18.151534-05:00 claude-cloud sshd[564128]: Connection closed by invalid user ubuntu 45.148.10.240 port 38472 [preauth] 2026-06-30T13:05:21.270087-05:00 claude-cloud sshd[564136]: Invalid user res from 139.59.231.23 port 37422 2026-06-30T13:05:21.437183-05:00 claude-cloud sshd[564136]: Received disconnect from 139.59.231.23 port 37422:11: Bye Bye [preauth] 2026-06-30T13:05:21.437629-05:00 claude-cloud sshd[564136]: Disconnected from invalid user res 139.59.231.23 port 37422 [preauth] 2026-06-30T13:05:32.468537-05:00 claude-cloud sshd[564150]: Connection closed by 66.240.223.240 port 43486 [preauth] 2026-06-30T13:06:08.421957-05:00 claude-cloud sshd[564319]: Invalid user compras from 168.167.72.132 port 40901 2026-06-30T13:06:08.612254-05:00 claude-cloud sshd[564319]: Received disconnect from 168.167.72.132 port 40901:11: Bye Bye [preauth] 2026-06-30T13:06:08.612451-05:00 claude-cloud sshd[564319]: Disconnected from invalid user compras 168.167.72.132 port 40901 [preauth] 2026-06-30T13:06:09.974072-05:00 claude-cloud sshd[564326]: Invalid user casino from 43.255.118.11 port 36828 2026-06-30T13:06:10.155457-05:00 claude-cloud sshd[564326]: Received disconnect from 43.255.118.11 port 36828:11: Bye Bye [preauth] 2026-06-30T13:06:10.155704-05:00 claude-cloud sshd[564326]: Disconnected from invalid user casino 43.255.118.11 port 36828 [preauth] 2026-06-30T13:06:10.705006-05:00 claude-cloud sshd[564333]: Invalid user sw from 119.47.90.19 port 48926 2026-06-30T13:06:10.883959-05:00 claude-cloud sshd[564333]: Received disconnect from 119.47.90.19 port 48926:11: Bye Bye [preauth] 2026-06-30T13:06:10.884265-05:00 claude-cloud sshd[564333]: Disconnected from invalid user sw 119.47.90.19 port 48926 [preauth] 2026-06-30T13:06:47.819384-05:00 claude-cloud sshd[564464]: Invalid user antivirus from 89.124.96.90 port 59760 2026-06-30T13:06:47.841565-05:00 claude-cloud sshd[564464]: Received disconnect from 89.124.96.90 port 59760:11: Bye Bye [preauth] 2026-06-30T13:06:47.841797-05:00 claude-cloud sshd[564464]: Disconnected from invalid user antivirus 89.124.96.90 port 59760 [preauth] 2026-06-30T13:06:59.879116-05:00 claude-cloud sshd[564522]: Invalid user res from 202.145.0.61 port 45128 2026-06-30T13:07:00.050902-05:00 claude-cloud sshd[564522]: Received disconnect from 202.145.0.61 port 45128:11: Bye Bye [preauth] 2026-06-30T13:07:00.051111-05:00 claude-cloud sshd[564522]: Disconnected from invalid user res 202.145.0.61 port 45128 [preauth] 2026-06-30T13:07:09.136270-05:00 claude-cloud sshd[564567]: Invalid user suzuki from 139.59.231.23 port 44084 2026-06-30T13:07:09.304836-05:00 claude-cloud sshd[564567]: Received disconnect from 139.59.231.23 port 44084:11: Bye Bye [preauth] 2026-06-30T13:07:09.305101-05:00 claude-cloud sshd[564567]: Disconnected from invalid user suzuki 139.59.231.23 port 44084 [preauth] 2026-06-30T13:07:11.331681-05:00 claude-cloud sshd[564589]: Invalid user ari from 45.148.10.240 port 53672 2026-06-30T13:07:11.344376-05:00 claude-cloud sshd[564589]: Connection closed by invalid user ari 45.148.10.240 port 53672 [preauth] 2026-06-30T13:07:15.112402-05:00 claude-cloud systemd-logind[853]: New session c5277 of user claude. 2026-06-30T13:07:15.412063-05:00 claude-cloud systemd-logind[853]: Session c5277 logged out. Waiting for processes to exit. 2026-06-30T13:07:15.414271-05:00 claude-cloud systemd-logind[853]: Removed session c5277. 2026-06-30T13:07:22.171239-05:00 claude-cloud sshd[564524]: Connection closed by authenticating user root 27.71.230.31 port 56256 [preauth] 2026-06-30T13:08:21.392486-05:00 claude-cloud sshd[564935]: Invalid user suzuki from 43.255.118.11 port 49596 2026-06-30T13:08:21.564208-05:00 claude-cloud sshd[564935]: Received disconnect from 43.255.118.11 port 49596:11: Bye Bye [preauth] 2026-06-30T13:08:21.564464-05:00 claude-cloud sshd[564935]: Disconnected from invalid user suzuki 43.255.118.11 port 49596 [preauth] 2026-06-30T13:08:52.301915-05:00 claude-cloud sshd[565048]: Invalid user gauss from 139.59.231.23 port 50662 2026-06-30T13:08:52.478075-05:00 claude-cloud sshd[565048]: Received disconnect from 139.59.231.23 port 50662:11: Bye Bye [preauth] 2026-06-30T13:08:52.478528-05:00 claude-cloud sshd[565048]: Disconnected from invalid user gauss 139.59.231.23 port 50662 [preauth] 2026-06-30T13:08:52.524018-05:00 claude-cloud sshd[565053]: Invalid user sedu from 45.148.10.240 port 35618 2026-06-30T13:08:52.537555-05:00 claude-cloud sshd[565053]: Connection closed by invalid user sedu 45.148.10.240 port 35618 [preauth] 2026-06-30T13:08:53.382618-05:00 claude-cloud sshd[565052]: Invalid user columbo from 202.145.0.61 port 52578 2026-06-30T13:08:53.555263-05:00 claude-cloud sshd[565052]: Received disconnect from 202.145.0.61 port 52578:11: Bye Bye [preauth] 2026-06-30T13:08:53.555563-05:00 claude-cloud sshd[565052]: Disconnected from invalid user columbo 202.145.0.61 port 52578 [preauth] 2026-06-30T13:09:14.188506-05:00 claude-cloud sshd[565106]: Invalid user admin from 193.46.255.86 port 9762 2026-06-30T13:09:14.214964-05:00 claude-cloud sshd[565106]: Connection closed by invalid user admin 193.46.255.86 port 9762 [preauth] 2026-06-30T13:09:25.180484-05:00 claude-cloud sshd[565148]: Connection reset by authenticating user root 45.148.10.141 port 46990 [preauth] 2026-06-30T13:09:41.701337-05:00 claude-cloud sshd[565233]: Invalid user orangepi from 152.32.174.171 port 58090 2026-06-30T13:09:41.914325-05:00 claude-cloud sshd[565233]: Connection closed by invalid user orangepi 152.32.174.171 port 58090 [preauth] 2026-06-30T13:10:03.211021-05:00 claude-cloud sshd[565385]: Invalid user devphp from 89.124.96.90 port 39378 2026-06-30T13:10:03.223599-05:00 claude-cloud sshd[565385]: Received disconnect from 89.124.96.90 port 39378:11: Bye Bye [preauth] 2026-06-30T13:10:03.223748-05:00 claude-cloud sshd[565385]: Disconnected from invalid user devphp 89.124.96.90 port 39378 [preauth] 2026-06-30T13:10:31.177639-05:00 claude-cloud sshd[565509]: Invalid user solana123 from 45.148.10.240 port 46686 2026-06-30T13:10:31.190164-05:00 claude-cloud sshd[565509]: Connection closed by invalid user solana123 45.148.10.240 port 46686 [preauth] 2026-06-30T13:10:32.800381-05:00 claude-cloud sshd[565511]: Invalid user eso from 43.255.118.11 port 34154 2026-06-30T13:10:32.981336-05:00 claude-cloud sshd[565511]: Received disconnect from 43.255.118.11 port 34154:11: Bye Bye [preauth] 2026-06-30T13:10:32.981684-05:00 claude-cloud sshd[565511]: Disconnected from invalid user eso 43.255.118.11 port 34154 [preauth] 2026-06-30T13:10:33.308026-05:00 claude-cloud sshd[565513]: Invalid user columbo from 139.59.231.23 port 57234 2026-06-30T13:10:33.478396-05:00 claude-cloud sshd[565513]: Received disconnect from 139.59.231.23 port 57234:11: Bye Bye [preauth] 2026-06-30T13:10:33.478712-05:00 claude-cloud sshd[565513]: Disconnected from invalid user columbo 139.59.231.23 port 57234 [preauth] 2026-06-30T13:10:46.291004-05:00 claude-cloud sshd[565541]: Invalid user eso from 202.145.0.61 port 59952 2026-06-30T13:10:46.467703-05:00 claude-cloud sshd[565541]: Received disconnect from 202.145.0.61 port 59952:11: Bye Bye [preauth] 2026-06-30T13:10:46.468044-05:00 claude-cloud sshd[565541]: Disconnected from invalid user eso 202.145.0.61 port 59952 [preauth] 2026-06-30T13:10:56.573180-05:00 claude-cloud sshd[565576]: Connection closed by authenticating user root 45.198.224.46 port 34006 [preauth] 2026-06-30T13:12:17.519370-05:00 claude-cloud sshd[566566]: Invalid user sol123 from 45.148.10.240 port 52710 2026-06-30T13:12:17.531063-05:00 claude-cloud sshd[566566]: Connection closed by invalid user sol123 45.148.10.240 port 52710 [preauth] 2026-06-30T13:12:20.254486-05:00 claude-cloud systemd-logind[853]: New session c5278 of user claude. 2026-06-30T13:12:20.543222-05:00 claude-cloud systemd-logind[853]: Session c5278 logged out. Waiting for processes to exit. 2026-06-30T13:12:20.544591-05:00 claude-cloud systemd-logind[853]: Removed session c5278. 2026-06-30T13:12:26.031871-05:00 claude-cloud sshd[566645]: Invalid user pubsub from 139.59.231.23 port 35626 2026-06-30T13:12:26.215899-05:00 claude-cloud sshd[566645]: Received disconnect from 139.59.231.23 port 35626:11: Bye Bye [preauth] 2026-06-30T13:12:26.216101-05:00 claude-cloud sshd[566645]: Disconnected from invalid user pubsub 139.59.231.23 port 35626 [preauth] 2026-06-30T13:12:51.634210-05:00 claude-cloud sshd[567005]: Invalid user astra from 43.255.118.11 port 47008 2026-06-30T13:12:51.808568-05:00 claude-cloud sshd[567005]: Received disconnect from 43.255.118.11 port 47008:11: Bye Bye [preauth] 2026-06-30T13:12:51.809095-05:00 claude-cloud sshd[567005]: Disconnected from invalid user astra 43.255.118.11 port 47008 [preauth] 2026-06-30T13:12:55.716718-05:00 claude-cloud sshd[567021]: Invalid user pubsub from 202.145.0.61 port 39116 2026-06-30T13:12:55.893410-05:00 claude-cloud sshd[567021]: Received disconnect from 202.145.0.61 port 39116:11: Bye Bye [preauth] 2026-06-30T13:12:55.893676-05:00 claude-cloud sshd[567021]: Disconnected from invalid user pubsub 202.145.0.61 port 39116 [preauth] 2026-06-30T13:13:01.881817-05:00 claude-cloud sshd[567010]: Connection closed by authenticating user root 27.71.230.31 port 34762 [preauth] 2026-06-30T13:13:20.283801-05:00 claude-cloud sshd[567157]: Connection closed by authenticating user root 125.20.210.182 port 37226 [preauth] 2026-06-30T13:14:09.211720-05:00 claude-cloud sshd[567515]: Invalid user sol from 45.148.10.240 port 57926 2026-06-30T13:14:09.225376-05:00 claude-cloud sshd[567515]: Connection closed by invalid user sol 45.148.10.240 port 57926 [preauth] 2026-06-30T13:14:19.020353-05:00 claude-cloud sshd[567542]: Invalid user banana from 139.59.231.23 port 42250 2026-06-30T13:14:19.205558-05:00 claude-cloud sshd[567542]: Received disconnect from 139.59.231.23 port 42250:11: Bye Bye [preauth] 2026-06-30T13:14:19.205855-05:00 claude-cloud sshd[567542]: Disconnected from invalid user banana 139.59.231.23 port 42250 [preauth] 2026-06-30T13:14:58.067249-05:00 claude-cloud sshd[567736]: Invalid user gauss from 202.145.0.61 port 46498 2026-06-30T13:14:58.237572-05:00 claude-cloud sshd[567736]: Received disconnect from 202.145.0.61 port 46498:11: Bye Bye [preauth] 2026-06-30T13:14:58.237938-05:00 claude-cloud sshd[567736]: Disconnected from invalid user gauss 202.145.0.61 port 46498 [preauth] 2026-06-30T13:15:01.999590-05:00 claude-cloud CRON[567745]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T13:15:02.007541-05:00 claude-cloud CRON[567745]: pam_unix(cron:session): session closed for user root 2026-06-30T13:15:03.377838-05:00 claude-cloud sshd[567748]: Connection reset by authenticating user root 45.148.10.152 port 12614 [preauth] 2026-06-30T13:15:10.080458-05:00 claude-cloud sshd[567770]: Invalid user cheetah from 43.255.118.11 port 59898 2026-06-30T13:15:10.259414-05:00 claude-cloud sshd[567770]: Received disconnect from 43.255.118.11 port 59898:11: Bye Bye [preauth] 2026-06-30T13:15:10.259609-05:00 claude-cloud sshd[567770]: Disconnected from invalid user cheetah 43.255.118.11 port 59898 [preauth] 2026-06-30T13:15:55.544886-05:00 claude-cloud sshd[567915]: Invalid user sol from 45.148.10.240 port 58182 2026-06-30T13:15:55.558196-05:00 claude-cloud sshd[567915]: Connection closed by invalid user sol 45.148.10.240 port 58182 [preauth] 2026-06-30T13:16:05.440785-05:00 claude-cloud sshd[567936]: Invalid user fis from 139.59.231.23 port 48916 2026-06-30T13:16:05.612961-05:00 claude-cloud sshd[567936]: Received disconnect from 139.59.231.23 port 48916:11: Bye Bye [preauth] 2026-06-30T13:16:05.613391-05:00 claude-cloud sshd[567936]: Disconnected from invalid user fis 139.59.231.23 port 48916 [preauth] 2026-06-30T13:16:34.929420-05:00 claude-cloud sshd[568021]: Invalid user suzuki from 168.167.72.132 port 40906 2026-06-30T13:16:35.121940-05:00 claude-cloud sshd[568021]: Received disconnect from 168.167.72.132 port 40906:11: Bye Bye [preauth] 2026-06-30T13:16:35.122466-05:00 claude-cloud sshd[568021]: Disconnected from invalid user suzuki 168.167.72.132 port 40906 [preauth] 2026-06-30T13:16:45.914339-05:00 claude-cloud sshd[568084]: Invalid user bach from 89.124.96.90 port 48892 2026-06-30T13:16:45.930220-05:00 claude-cloud sshd[568084]: Received disconnect from 89.124.96.90 port 48892:11: Bye Bye [preauth] 2026-06-30T13:16:45.930463-05:00 claude-cloud sshd[568084]: Disconnected from invalid user bach 89.124.96.90 port 48892 [preauth] 2026-06-30T13:16:54.290827-05:00 claude-cloud sshd[568110]: Invalid user zf from 202.145.0.61 port 53874 2026-06-30T13:16:54.462553-05:00 claude-cloud sshd[568110]: Received disconnect from 202.145.0.61 port 53874:11: Bye Bye [preauth] 2026-06-30T13:16:54.462956-05:00 claude-cloud sshd[568110]: Disconnected from invalid user zf 202.145.0.61 port 53874 [preauth] 2026-06-30T13:17:01.019406-05:00 claude-cloud CRON[568128]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T13:17:01.027576-05:00 claude-cloud CRON[568128]: pam_unix(cron:session): session closed for user root 2026-06-30T13:17:25.109969-05:00 claude-cloud systemd-logind[853]: New session c5279 of user claude. 2026-06-30T13:17:25.419100-05:00 claude-cloud systemd-logind[853]: Session c5279 logged out. Waiting for processes to exit. 2026-06-30T13:17:25.419550-05:00 claude-cloud systemd-logind[853]: Removed session c5279. 2026-06-30T13:17:26.528585-05:00 claude-cloud sshd[568204]: Invalid user tim from 119.47.90.19 port 59748 2026-06-30T13:17:26.710596-05:00 claude-cloud sshd[568204]: Received disconnect from 119.47.90.19 port 59748:11: Bye Bye [preauth] 2026-06-30T13:17:26.710815-05:00 claude-cloud sshd[568204]: Disconnected from invalid user tim 119.47.90.19 port 59748 [preauth] 2026-06-30T13:17:41.895932-05:00 claude-cloud sshd[568242]: Invalid user fis from 43.255.118.11 port 44696 2026-06-30T13:17:42.080337-05:00 claude-cloud sshd[568242]: Received disconnect from 43.255.118.11 port 44696:11: Bye Bye [preauth] 2026-06-30T13:17:42.080681-05:00 claude-cloud sshd[568242]: Disconnected from invalid user fis 43.255.118.11 port 44696 [preauth] 2026-06-30T13:17:46.509648-05:00 claude-cloud sshd[568285]: Invalid user binance from 45.148.10.240 port 43322 2026-06-30T13:17:46.523014-05:00 claude-cloud sshd[568285]: Connection closed by invalid user binance 45.148.10.240 port 43322 [preauth] 2026-06-30T13:17:49.029731-05:00 claude-cloud sshd[568289]: Invalid user qs from 139.59.231.23 port 55502 2026-06-30T13:17:49.199135-05:00 claude-cloud sshd[568289]: Received disconnect from 139.59.231.23 port 55502:11: Bye Bye [preauth] 2026-06-30T13:17:49.199594-05:00 claude-cloud sshd[568289]: Disconnected from invalid user qs 139.59.231.23 port 55502 [preauth] 2026-06-30T13:18:39.479762-05:00 claude-cloud sshd[568665]: Invalid user qs from 168.167.72.132 port 40907 2026-06-30T13:18:39.673033-05:00 claude-cloud sshd[568665]: Received disconnect from 168.167.72.132 port 40907:11: Bye Bye [preauth] 2026-06-30T13:18:39.673329-05:00 claude-cloud sshd[568665]: Disconnected from invalid user qs 168.167.72.132 port 40907 [preauth] 2026-06-30T13:18:48.410747-05:00 claude-cloud sshd[568745]: Received disconnect from 212.192.240.126 port 7810:11: disconnected by user [preauth] 2026-06-30T13:18:48.411071-05:00 claude-cloud sshd[568745]: Disconnected from authenticating user root 212.192.240.126 port 7810 [preauth] 2026-06-30T13:18:49.382637-05:00 claude-cloud sshd[568748]: Invalid user suzuki from 202.145.0.61 port 33022 2026-06-30T13:18:49.561725-05:00 claude-cloud sshd[568748]: Received disconnect from 202.145.0.61 port 33022:11: Bye Bye [preauth] 2026-06-30T13:18:49.562116-05:00 claude-cloud sshd[568748]: Disconnected from invalid user suzuki 202.145.0.61 port 33022 [preauth] 2026-06-30T13:19:36.664964-05:00 claude-cloud sshd[569004]: Invalid user casino from 139.59.231.23 port 33866 2026-06-30T13:19:36.830022-05:00 claude-cloud sshd[569004]: Received disconnect from 139.59.231.23 port 33866:11: Bye Bye [preauth] 2026-06-30T13:19:36.830359-05:00 claude-cloud sshd[569004]: Disconnected from invalid user casino 139.59.231.23 port 33866 [preauth] 2026-06-30T13:19:38.582395-05:00 claude-cloud sshd[568658]: Connection closed by authenticating user root 27.71.230.31 port 38090 [preauth] 2026-06-30T13:19:39.349177-05:00 claude-cloud sshd[569019]: Invalid user verify from 119.47.90.19 port 56320 2026-06-30T13:19:39.522603-05:00 claude-cloud sshd[569019]: Received disconnect from 119.47.90.19 port 56320:11: Bye Bye [preauth] 2026-06-30T13:19:39.522851-05:00 claude-cloud sshd[569019]: Disconnected from invalid user verify 119.47.90.19 port 56320 [preauth] 2026-06-30T13:19:43.913068-05:00 claude-cloud sshd[569055]: Invalid user okx from 45.148.10.240 port 34762 2026-06-30T13:19:43.925833-05:00 claude-cloud sshd[569055]: Connection closed by invalid user okx 45.148.10.240 port 34762 [preauth] 2026-06-30T13:19:48.814023-05:00 claude-cloud sshd[569084]: Invalid user dsi from 89.124.96.90 port 54184 2026-06-30T13:19:48.833383-05:00 claude-cloud sshd[569084]: Received disconnect from 89.124.96.90 port 54184:11: Bye Bye [preauth] 2026-06-30T13:19:48.833808-05:00 claude-cloud sshd[569084]: Disconnected from invalid user dsi 89.124.96.90 port 54184 [preauth] 2026-06-30T13:20:14.578572-05:00 claude-cloud sshd[569230]: Invalid user compras from 43.255.118.11 port 57728 2026-06-30T13:20:14.753105-05:00 claude-cloud sshd[569230]: Received disconnect from 43.255.118.11 port 57728:11: Bye Bye [preauth] 2026-06-30T13:20:14.753494-05:00 claude-cloud sshd[569230]: Disconnected from invalid user compras 43.255.118.11 port 57728 [preauth] 2026-06-30T13:20:19.959860-05:00 claude-cloud sshd[569243]: Invalid user caojinzhou from 45.198.224.46 port 44642 2026-06-30T13:20:20.799731-05:00 claude-cloud sshd[569243]: Connection closed by invalid user caojinzhou 45.198.224.46 port 44642 [preauth] 2026-06-30T13:20:43.491126-05:00 claude-cloud sshd[569412]: Connection reset by authenticating user root 45.148.10.157 port 57154 [preauth] 2026-06-30T13:20:43.774157-05:00 claude-cloud sshd[569401]: Invalid user tan from 202.145.0.61 port 40398 2026-06-30T13:20:43.947175-05:00 claude-cloud sshd[569401]: Received disconnect from 202.145.0.61 port 40398:11: Bye Bye [preauth] 2026-06-30T13:20:43.947505-05:00 claude-cloud sshd[569401]: Disconnected from invalid user tan 202.145.0.61 port 40398 [preauth] 2026-06-30T13:20:44.360259-05:00 claude-cloud sshd[569410]: Invalid user pubsub from 168.167.72.132 port 40908 2026-06-30T13:20:44.574554-05:00 claude-cloud sshd[569410]: Received disconnect from 168.167.72.132 port 40908:11: Bye Bye [preauth] 2026-06-30T13:20:44.574859-05:00 claude-cloud sshd[569410]: Disconnected from invalid user pubsub 168.167.72.132 port 40908 [preauth] 2026-06-30T13:20:47.158125-05:00 claude-cloud sshd[569493]: Invalid user admin from 2.57.121.25 port 63650 2026-06-30T13:20:47.184151-05:00 claude-cloud sshd[569493]: Connection closed by invalid user admin 2.57.121.25 port 63650 [preauth] 2026-06-30T13:21:18.988126-05:00 claude-cloud sshd[569629]: Invalid user know from 139.59.231.23 port 40464 2026-06-30T13:21:19.153409-05:00 claude-cloud sshd[569629]: Received disconnect from 139.59.231.23 port 40464:11: Bye Bye [preauth] 2026-06-30T13:21:19.153665-05:00 claude-cloud sshd[569629]: Disconnected from invalid user know 139.59.231.23 port 40464 [preauth] 2026-06-30T13:21:30.900400-05:00 claude-cloud sshd[569700]: Invalid user bot from 45.148.10.240 port 37128 2026-06-30T13:21:30.913738-05:00 claude-cloud sshd[569700]: Connection closed by invalid user bot 45.148.10.240 port 37128 [preauth] 2026-06-30T13:21:36.130466-05:00 claude-cloud sshd[569742]: Connection closed by authenticating user nobody 125.20.210.182 port 35744 [preauth] 2026-06-30T13:21:50.126182-05:00 claude-cloud sshd[569826]: Invalid user languages from 119.47.90.19 port 57692 2026-06-30T13:21:50.298043-05:00 claude-cloud sshd[569826]: Received disconnect from 119.47.90.19 port 57692:11: Bye Bye [preauth] 2026-06-30T13:21:50.301439-05:00 claude-cloud sshd[569826]: Disconnected from invalid user languages 119.47.90.19 port 57692 [preauth] 2026-06-30T13:21:55.936032-05:00 claude-cloud sshd[569868]: Connection closed by authenticating user root 152.32.174.171 port 33142 [preauth] 2026-06-30T13:22:23.694423-05:00 claude-cloud sshd[570232]: Invalid user res from 43.255.118.11 port 42262 2026-06-30T13:22:23.867207-05:00 claude-cloud sshd[570232]: Received disconnect from 43.255.118.11 port 42262:11: Bye Bye [preauth] 2026-06-30T13:22:23.867479-05:00 claude-cloud sshd[570232]: Disconnected from invalid user res 43.255.118.11 port 42262 [preauth] 2026-06-30T13:22:29.700267-05:00 claude-cloud systemd-logind[853]: New session c5280 of user claude. 2026-06-30T13:22:30.058746-05:00 claude-cloud systemd-logind[853]: Session c5280 logged out. Waiting for processes to exit. 2026-06-30T13:22:30.060115-05:00 claude-cloud systemd-logind[853]: Removed session c5280. 2026-06-30T13:22:31.691838-05:00 claude-cloud sshd[570307]: Invalid user baze from 202.145.0.61 port 47776 2026-06-30T13:22:31.863249-05:00 claude-cloud sshd[570307]: Received disconnect from 202.145.0.61 port 47776:11: Bye Bye [preauth] 2026-06-30T13:22:31.863483-05:00 claude-cloud sshd[570307]: Disconnected from invalid user baze 202.145.0.61 port 47776 [preauth] 2026-06-30T13:22:46.484955-05:00 claude-cloud sshd[570480]: Invalid user tan from 168.167.72.132 port 40909 2026-06-30T13:22:46.701608-05:00 claude-cloud sshd[570480]: Received disconnect from 168.167.72.132 port 40909:11: Bye Bye [preauth] 2026-06-30T13:22:46.701935-05:00 claude-cloud sshd[570480]: Disconnected from invalid user tan 168.167.72.132 port 40909 [preauth] 2026-06-30T13:22:57.384487-05:00 claude-cloud sshd[570555]: Invalid user zf from 139.59.231.23 port 47006 2026-06-30T13:22:57.558563-05:00 claude-cloud sshd[570555]: Received disconnect from 139.59.231.23 port 47006:11: Bye Bye [preauth] 2026-06-30T13:22:57.558930-05:00 claude-cloud sshd[570555]: Disconnected from invalid user zf 139.59.231.23 port 47006 [preauth] 2026-06-30T13:23:04.015370-05:00 claude-cloud sshd[570588]: Invalid user magellan from 89.124.96.90 port 42428 2026-06-30T13:23:04.030478-05:00 claude-cloud sshd[570588]: Received disconnect from 89.124.96.90 port 42428:11: Bye Bye [preauth] 2026-06-30T13:23:04.030720-05:00 claude-cloud sshd[570588]: Disconnected from invalid user magellan 89.124.96.90 port 42428 [preauth] 2026-06-30T13:23:09.043038-05:00 claude-cloud sshd[570600]: Invalid user telegram from 45.148.10.240 port 51298 2026-06-30T13:23:09.056144-05:00 claude-cloud sshd[570600]: Connection closed by invalid user telegram 45.148.10.240 port 51298 [preauth] 2026-06-30T13:24:03.455467-05:00 claude-cloud sshd[570891]: Invalid user webct from 119.47.90.19 port 54748 2026-06-30T13:24:03.632314-05:00 claude-cloud sshd[570891]: Received disconnect from 119.47.90.19 port 54748:11: Bye Bye [preauth] 2026-06-30T13:24:03.632570-05:00 claude-cloud sshd[570891]: Disconnected from invalid user webct 119.47.90.19 port 54748 [preauth] 2026-06-30T13:24:14.137675-05:00 claude-cloud sshd[570923]: Received disconnect from 172.110.221.82 port 10400:11: disconnected by user [preauth] 2026-06-30T13:24:14.138569-05:00 claude-cloud sshd[570923]: Disconnected from authenticating user root 172.110.221.82 port 10400 [preauth] 2026-06-30T13:24:24.533177-05:00 claude-cloud sshd[570958]: Invalid user rsm from 202.145.0.61 port 55152 2026-06-30T13:24:24.707940-05:00 claude-cloud sshd[570958]: Received disconnect from 202.145.0.61 port 55152:11: Bye Bye [preauth] 2026-06-30T13:24:24.708216-05:00 claude-cloud sshd[570958]: Disconnected from invalid user rsm 202.145.0.61 port 55152 [preauth] 2026-06-30T13:24:35.339741-05:00 claude-cloud sshd[570961]: Connection closed by authenticating user root 27.71.230.31 port 49386 [preauth] 2026-06-30T13:24:39.578156-05:00 claude-cloud sshd[571107]: Invalid user baze from 139.59.231.23 port 53558 2026-06-30T13:24:39.750500-05:00 claude-cloud sshd[571107]: Received disconnect from 139.59.231.23 port 53558:11: Bye Bye [preauth] 2026-06-30T13:24:39.750692-05:00 claude-cloud sshd[571107]: Disconnected from invalid user baze 139.59.231.23 port 53558 [preauth] 2026-06-30T13:24:40.332584-05:00 claude-cloud sshd[571111]: Invalid user tan from 43.255.118.11 port 55114 2026-06-30T13:24:40.506011-05:00 claude-cloud sshd[571111]: Received disconnect from 43.255.118.11 port 55114:11: Bye Bye [preauth] 2026-06-30T13:24:40.506445-05:00 claude-cloud sshd[571111]: Disconnected from invalid user tan 43.255.118.11 port 55114 [preauth] 2026-06-30T13:24:53.343040-05:00 claude-cloud sshd[571249]: Invalid user jito from 45.148.10.240 port 60412 2026-06-30T13:24:53.356056-05:00 claude-cloud sshd[571249]: Connection closed by invalid user jito 45.148.10.240 port 60412 [preauth] 2026-06-30T13:24:55.948320-05:00 claude-cloud sshd[571256]: Invalid user casino from 168.167.72.132 port 40910 2026-06-30T13:24:56.137234-05:00 claude-cloud sshd[571256]: Received disconnect from 168.167.72.132 port 40910:11: Bye Bye [preauth] 2026-06-30T13:24:56.137447-05:00 claude-cloud sshd[571256]: Disconnected from invalid user casino 168.167.72.132 port 40910 [preauth] 2026-06-30T13:25:01.037877-05:00 claude-cloud CRON[571414]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T13:25:01.046264-05:00 claude-cloud CRON[571414]: pam_unix(cron:session): session closed for user root 2026-06-30T13:26:15.711611-05:00 claude-cloud sshd[572494]: Invalid user groupon from 89.124.96.90 port 35204 2026-06-30T13:26:15.726669-05:00 claude-cloud sshd[572494]: Received disconnect from 89.124.96.90 port 35204:11: Bye Bye [preauth] 2026-06-30T13:26:15.729385-05:00 claude-cloud sshd[572494]: Disconnected from invalid user groupon 89.124.96.90 port 35204 [preauth] 2026-06-30T13:26:17.870267-05:00 claude-cloud sshd[572524]: Invalid user his from 119.47.90.19 port 59374 2026-06-30T13:26:18.046515-05:00 claude-cloud sshd[572524]: Received disconnect from 119.47.90.19 port 59374:11: Bye Bye [preauth] 2026-06-30T13:26:18.046935-05:00 claude-cloud sshd[572524]: Disconnected from invalid user his 119.47.90.19 port 59374 [preauth] 2026-06-30T13:26:18.798697-05:00 claude-cloud sshd[572554]: Connection reset by authenticating user root 45.148.10.152 port 45126 [preauth] 2026-06-30T13:26:27.117669-05:00 claude-cloud sshd[572640]: Invalid user banana from 202.145.0.61 port 34308 2026-06-30T13:26:27.292920-05:00 claude-cloud sshd[572640]: Received disconnect from 202.145.0.61 port 34308:11: Bye Bye [preauth] 2026-06-30T13:26:27.293322-05:00 claude-cloud sshd[572640]: Disconnected from invalid user banana 202.145.0.61 port 34308 [preauth] 2026-06-30T13:26:30.511667-05:00 claude-cloud sshd[572654]: Invalid user cheetah from 139.59.231.23 port 60136 2026-06-30T13:26:30.680447-05:00 claude-cloud sshd[572654]: Received disconnect from 139.59.231.23 port 60136:11: Bye Bye [preauth] 2026-06-30T13:26:30.680667-05:00 claude-cloud sshd[572654]: Disconnected from invalid user cheetah 139.59.231.23 port 60136 [preauth] 2026-06-30T13:26:45.344486-05:00 claude-cloud sshd[572790]: Invalid user firedancer from 45.148.10.240 port 48900 2026-06-30T13:26:45.359976-05:00 claude-cloud sshd[572790]: Connection closed by invalid user firedancer 45.148.10.240 port 48900 [preauth] 2026-06-30T13:26:47.109604-05:00 claude-cloud sshd[572800]: Invalid user ubuntu from 185.242.3.195 port 42938 2026-06-30T13:26:47.116973-05:00 claude-cloud sshd[572800]: Connection closed by invalid user ubuntu 185.242.3.195 port 42938 [preauth] 2026-06-30T13:27:15.988528-05:00 claude-cloud sshd[573074]: Invalid user banana from 43.255.118.11 port 39958 2026-06-30T13:27:16.162519-05:00 claude-cloud sshd[573074]: Received disconnect from 43.255.118.11 port 39958:11: Bye Bye [preauth] 2026-06-30T13:27:16.162916-05:00 claude-cloud sshd[573074]: Disconnected from invalid user banana 43.255.118.11 port 39958 [preauth] 2026-06-30T13:27:34.627597-05:00 claude-cloud systemd-logind[853]: New session c5281 of user claude. 2026-06-30T13:27:34.964680-05:00 claude-cloud systemd-logind[853]: Session c5281 logged out. Waiting for processes to exit. 2026-06-30T13:27:34.965953-05:00 claude-cloud systemd-logind[853]: Removed session c5281. 2026-06-30T13:28:17.394331-05:00 claude-cloud sshd[573460]: Invalid user astra from 139.59.231.23 port 38482 2026-06-30T13:28:17.557356-05:00 claude-cloud sshd[573460]: Received disconnect from 139.59.231.23 port 38482:11: Bye Bye [preauth] 2026-06-30T13:28:17.557610-05:00 claude-cloud sshd[573460]: Disconnected from invalid user astra 139.59.231.23 port 38482 [preauth] 2026-06-30T13:28:24.293305-05:00 claude-cloud sshd[573485]: Invalid user qs from 202.145.0.61 port 41690 2026-06-30T13:28:24.463056-05:00 claude-cloud sshd[573485]: Received disconnect from 202.145.0.61 port 41690:11: Bye Bye [preauth] 2026-06-30T13:28:24.463338-05:00 claude-cloud sshd[573485]: Disconnected from invalid user qs 202.145.0.61 port 41690 [preauth] 2026-06-30T13:28:29.520607-05:00 claude-cloud sshd[573512]: Connection closed by authenticating user root 45.148.10.240 port 47756 [preauth] 2026-06-30T13:29:24.855784-05:00 claude-cloud sshd[573793]: Invalid user track from 89.124.96.90 port 38064 2026-06-30T13:29:24.872043-05:00 claude-cloud sshd[573793]: Received disconnect from 89.124.96.90 port 38064:11: Bye Bye [preauth] 2026-06-30T13:29:24.872232-05:00 claude-cloud sshd[573793]: Disconnected from invalid user track 89.124.96.90 port 38064 [preauth] 2026-06-30T13:29:33.081473-05:00 claude-cloud sshd[573826]: Invalid user nature from 43.255.118.11 port 52814 2026-06-30T13:29:33.261052-05:00 claude-cloud sshd[573826]: Received disconnect from 43.255.118.11 port 52814:11: Bye Bye [preauth] 2026-06-30T13:29:33.261476-05:00 claude-cloud sshd[573826]: Disconnected from invalid user nature 43.255.118.11 port 52814 [preauth] 2026-06-30T13:29:41.315320-05:00 claude-cloud sshd[573835]: Invalid user ubuntu from 45.198.224.46 port 50330 2026-06-30T13:29:41.921400-05:00 claude-cloud sshd[573835]: Connection closed by invalid user ubuntu 45.198.224.46 port 50330 [preauth] 2026-06-30T13:30:00.275214-05:00 claude-cloud sshd[573957]: Invalid user compras from 139.59.231.23 port 45036 2026-06-30T13:30:00.290193-05:00 claude-cloud sshd[573926]: Invalid user kali from 125.20.210.182 port 54878 2026-06-30T13:30:00.449572-05:00 claude-cloud sshd[573957]: Received disconnect from 139.59.231.23 port 45036:11: Bye Bye [preauth] 2026-06-30T13:30:00.449828-05:00 claude-cloud sshd[573957]: Disconnected from invalid user compras 139.59.231.23 port 45036 [preauth] 2026-06-30T13:30:00.646376-05:00 claude-cloud sshd[573926]: Connection closed by invalid user kali 125.20.210.182 port 54878 [preauth] 2026-06-30T13:30:16.474928-05:00 claude-cloud sshd[574036]: Invalid user bitcoin from 45.148.10.240 port 34330 2026-06-30T13:30:16.487081-05:00 claude-cloud sshd[574036]: Connection closed by invalid user bitcoin 45.148.10.240 port 34330 [preauth] 2026-06-30T13:30:22.272225-05:00 claude-cloud sshd[574056]: Invalid user casino from 202.145.0.61 port 49068 2026-06-30T13:30:22.445200-05:00 claude-cloud sshd[574056]: Received disconnect from 202.145.0.61 port 49068:11: Bye Bye [preauth] 2026-06-30T13:30:22.445442-05:00 claude-cloud sshd[574056]: Disconnected from invalid user casino 202.145.0.61 port 49068 [preauth] 2026-06-30T13:30:27.909144-05:00 claude-cloud sshd[574024]: Connection closed by authenticating user root 27.71.230.31 port 34724 [preauth] 2026-06-30T13:31:52.465058-05:00 claude-cloud sshd[574594]: Invalid user columbo from 43.255.118.11 port 37468 2026-06-30T13:31:52.641496-05:00 claude-cloud sshd[574594]: Received disconnect from 43.255.118.11 port 37468:11: Bye Bye [preauth] 2026-06-30T13:31:52.641670-05:00 claude-cloud sshd[574594]: Disconnected from invalid user columbo 43.255.118.11 port 37468 [preauth] 2026-06-30T13:31:53.090315-05:00 claude-cloud sshd[574602]: Connection reset by authenticating user root 45.148.10.141 port 65158 [preauth] 2026-06-30T13:32:13.997886-05:00 claude-cloud sshd[574957]: Invalid user pool from 45.148.10.240 port 60686 2026-06-30T13:32:14.010225-05:00 claude-cloud sshd[574957]: Connection closed by invalid user pool 45.148.10.240 port 60686 [preauth] 2026-06-30T13:32:21.043568-05:00 claude-cloud sshd[575050]: Invalid user astra from 202.145.0.61 port 56452 2026-06-30T13:32:21.212300-05:00 claude-cloud sshd[575050]: Received disconnect from 202.145.0.61 port 56452:11: Bye Bye [preauth] 2026-06-30T13:32:21.212598-05:00 claude-cloud sshd[575050]: Disconnected from invalid user astra 202.145.0.61 port 56452 [preauth] 2026-06-30T13:32:36.131981-05:00 claude-cloud sshd[575230]: Invalid user tara from 89.124.96.90 port 56068 2026-06-30T13:32:36.150687-05:00 claude-cloud sshd[575230]: Received disconnect from 89.124.96.90 port 56068:11: Bye Bye [preauth] 2026-06-30T13:32:36.150929-05:00 claude-cloud sshd[575230]: Disconnected from invalid user tara 89.124.96.90 port 56068 [preauth] 2026-06-30T13:32:39.616991-05:00 claude-cloud systemd-logind[853]: New session c5282 of user claude. 2026-06-30T13:32:39.960258-05:00 claude-cloud systemd-logind[853]: Session c5282 logged out. Waiting for processes to exit. 2026-06-30T13:32:39.961665-05:00 claude-cloud systemd-logind[853]: Removed session c5282. 2026-06-30T13:34:04.243065-05:00 claude-cloud sshd[577147]: Connection closed by authenticating user root 152.32.174.171 port 58022 [preauth] 2026-06-30T13:34:07.133919-05:00 claude-cloud sshd[577654]: Invalid user miner from 45.148.10.240 port 59188 2026-06-30T13:34:07.145356-05:00 claude-cloud sshd[577654]: Connection closed by invalid user miner 45.148.10.240 port 59188 [preauth] 2026-06-30T13:34:18.678438-05:00 claude-cloud sshd[577983]: Invalid user gauss from 43.255.118.11 port 50406 2026-06-30T13:34:18.853691-05:00 claude-cloud sshd[577983]: Received disconnect from 43.255.118.11 port 50406:11: Bye Bye [preauth] 2026-06-30T13:34:18.853959-05:00 claude-cloud sshd[577983]: Disconnected from invalid user gauss 43.255.118.11 port 50406 [preauth] 2026-06-30T13:35:01.056850-05:00 claude-cloud CRON[579398]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T13:35:01.061791-05:00 claude-cloud CRON[579398]: pam_unix(cron:session): session closed for user root 2026-06-30T13:35:31.012594-05:00 claude-cloud sshd[579740]: Invalid user eso from 168.167.72.132 port 40915 2026-06-30T13:35:31.223581-05:00 claude-cloud sshd[579740]: Received disconnect from 168.167.72.132 port 40915:11: Bye Bye [preauth] 2026-06-30T13:35:31.223813-05:00 claude-cloud sshd[579740]: Disconnected from invalid user eso 168.167.72.132 port 40915 [preauth] 2026-06-30T13:35:49.863545-05:00 claude-cloud sshd[579895]: Invalid user ibkr from 45.148.10.240 port 58272 2026-06-30T13:35:49.875952-05:00 claude-cloud sshd[579895]: Connection closed by invalid user ibkr 45.148.10.240 port 58272 [preauth] 2026-06-30T13:36:27.811591-05:00 claude-cloud sshd[580329]: Invalid user qs from 43.255.118.11 port 34940 2026-06-30T13:36:27.989646-05:00 claude-cloud sshd[580329]: Received disconnect from 43.255.118.11 port 34940:11: Bye Bye [preauth] 2026-06-30T13:36:27.989959-05:00 claude-cloud sshd[580329]: Disconnected from invalid user qs 43.255.118.11 port 34940 [preauth] 2026-06-30T13:36:54.791997-05:00 claude-cloud sshd[580866]: Received disconnect from 91.208.197.64 port 42714:11: disconnected by user [preauth] 2026-06-30T13:36:54.792556-05:00 claude-cloud sshd[580866]: Disconnected from authenticating user root 91.208.197.64 port 42714 [preauth] 2026-06-30T13:37:27.037608-05:00 claude-cloud sshd[581471]: Connection reset by authenticating user root 45.148.10.157 port 47024 [preauth] 2026-06-30T13:37:28.203586-05:00 claude-cloud sshd[581473]: Invalid user radon from 119.47.90.19 port 44790 2026-06-30T13:37:28.383129-05:00 claude-cloud sshd[581473]: Received disconnect from 119.47.90.19 port 44790:11: Bye Bye [preauth] 2026-06-30T13:37:28.383479-05:00 claude-cloud sshd[581473]: Disconnected from invalid user radon 119.47.90.19 port 44790 [preauth] 2026-06-30T13:37:34.377712-05:00 claude-cloud sshd[581651]: Invalid user ibkrpro from 45.148.10.240 port 50038 2026-06-30T13:37:34.390076-05:00 claude-cloud sshd[581651]: Connection closed by invalid user ibkrpro 45.148.10.240 port 50038 [preauth] 2026-06-30T13:37:44.683803-05:00 claude-cloud systemd-logind[853]: New session c5283 of user claude. 2026-06-30T13:37:44.982726-05:00 claude-cloud systemd-logind[853]: Session c5283 logged out. Waiting for processes to exit. 2026-06-30T13:37:44.984368-05:00 claude-cloud systemd-logind[853]: Removed session c5283. 2026-06-30T13:38:12.760749-05:00 claude-cloud sshd[582596]: Invalid user linaro from 125.20.210.182 port 58268 2026-06-30T13:38:13.804698-05:00 claude-cloud sshd[582596]: Connection closed by invalid user linaro 125.20.210.182 port 58268 [preauth] 2026-06-30T13:38:43.097136-05:00 claude-cloud sshd[583356]: Invalid user know from 43.255.118.11 port 47736 2026-06-30T13:38:43.271947-05:00 claude-cloud sshd[583356]: Received disconnect from 43.255.118.11 port 47736:11: Bye Bye [preauth] 2026-06-30T13:38:43.272366-05:00 claude-cloud sshd[583356]: Disconnected from invalid user know 43.255.118.11 port 47736 [preauth] 2026-06-30T13:39:04.720245-05:00 claude-cloud sshd[583848]: Invalid user auriga from 89.124.96.90 port 37130 2026-06-30T13:39:04.733366-05:00 claude-cloud sshd[583848]: Received disconnect from 89.124.96.90 port 37130:11: Bye Bye [preauth] 2026-06-30T13:39:04.733665-05:00 claude-cloud sshd[583848]: Disconnected from invalid user auriga 89.124.96.90 port 37130 [preauth] 2026-06-30T13:39:06.785485-05:00 claude-cloud sshd[583800]: Invalid user hadoop from 45.198.224.46 port 32790 2026-06-30T13:39:07.623205-05:00 claude-cloud sshd[583800]: Connection closed by invalid user hadoop 45.198.224.46 port 32790 [preauth] 2026-06-30T13:39:26.077510-05:00 claude-cloud sshd[584409]: Connection closed by authenticating user root 45.148.10.240 port 46560 [preauth] 2026-06-30T13:41:07.767839-05:00 claude-cloud sshd[585272]: Invalid user scarlet from 2.57.121.112 port 4890 2026-06-30T13:41:07.797649-05:00 claude-cloud sshd[585272]: Connection closed by invalid user scarlet 2.57.121.112 port 4890 [preauth] 2026-06-30T13:41:10.369091-05:00 claude-cloud sshd[585380]: Connection closed by authenticating user root 45.148.10.240 port 49350 [preauth] 2026-06-30T13:42:10.299096-05:00 claude-cloud sshd[586087]: Connection closed by authenticating user root 27.71.230.31 port 37402 [preauth] 2026-06-30T13:42:16.512520-05:00 claude-cloud sshd[586194]: Invalid user hod from 89.124.96.90 port 60496 2026-06-30T13:42:16.530018-05:00 claude-cloud sshd[586194]: Received disconnect from 89.124.96.90 port 60496:11: Bye Bye [preauth] 2026-06-30T13:42:16.531441-05:00 claude-cloud sshd[586194]: Disconnected from invalid user hod 89.124.96.90 port 60496 [preauth] 2026-06-30T13:42:49.378029-05:00 claude-cloud systemd-logind[853]: New session c5284 of user claude. 2026-06-30T13:42:50.030300-05:00 claude-cloud systemd-logind[853]: Session c5284 logged out. Waiting for processes to exit. 2026-06-30T13:42:50.032885-05:00 claude-cloud systemd-logind[853]: Removed session c5284. 2026-06-30T13:42:53.775963-05:00 claude-cloud sshd[586822]: Invalid user broker from 45.148.10.240 port 49168 2026-06-30T13:42:53.789429-05:00 claude-cloud sshd[586822]: Connection closed by invalid user broker 45.148.10.240 port 49168 [preauth] 2026-06-30T13:43:02.594798-05:00 claude-cloud sshd[586853]: Connection reset by authenticating user root 62.60.130.219 port 15082 [preauth] 2026-06-30T13:44:46.180556-05:00 claude-cloud sshd[588050]: Invalid user recorder from 45.148.10.240 port 40574 2026-06-30T13:44:46.193332-05:00 claude-cloud sshd[588050]: Connection closed by invalid user recorder 45.148.10.240 port 40574 [preauth] 2026-06-30T13:45:01.109029-05:00 claude-cloud CRON[588265]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T13:45:01.119148-05:00 claude-cloud CRON[588265]: pam_unix(cron:session): session closed for user root 2026-06-30T13:45:31.332027-05:00 claude-cloud sshd[589063]: Invalid user hkbnpatch from 89.124.96.90 port 48600 2026-06-30T13:45:31.346506-05:00 claude-cloud sshd[589063]: Received disconnect from 89.124.96.90 port 48600:11: Bye Bye [preauth] 2026-06-30T13:45:31.346724-05:00 claude-cloud sshd[589063]: Disconnected from invalid user hkbnpatch 89.124.96.90 port 48600 [preauth] 2026-06-30T13:45:38.043229-05:00 claude-cloud sshd[589516]: Connection closed by authenticating user root 152.32.174.171 port 41206 [preauth] 2026-06-30T13:45:53.949920-05:00 claude-cloud sshd[589727]: Connection closed by authenticating user root 125.20.210.182 port 52948 [preauth] 2026-06-30T13:46:41.235170-05:00 claude-cloud sshd[592231]: Invalid user dvr from 45.148.10.240 port 34656 2026-06-30T13:46:41.245781-05:00 claude-cloud sshd[592231]: Connection closed by invalid user dvr 45.148.10.240 port 34656 [preauth] 2026-06-30T13:47:54.636909-05:00 claude-cloud systemd-logind[853]: New session c5285 of user claude. 2026-06-30T13:47:54.990635-05:00 claude-cloud systemd-logind[853]: Session c5285 logged out. Waiting for processes to exit. 2026-06-30T13:47:54.992973-05:00 claude-cloud systemd-logind[853]: Removed session c5285. 2026-06-30T13:48:00.348158-05:00 claude-cloud sshd[593489]: Connection closed by authenticating user root 27.71.230.31 port 36444 [preauth] 2026-06-30T13:48:22.211453-05:00 claude-cloud sshd[594098]: Connection closed by authenticating user root 45.198.224.46 port 38332 [preauth] 2026-06-30T13:48:27.774022-05:00 claude-cloud sshd[594262]: Invalid user cadami from 45.148.10.240 port 52982 2026-06-30T13:48:27.786198-05:00 claude-cloud sshd[594262]: Connection closed by invalid user cadami 45.148.10.240 port 52982 [preauth] 2026-06-30T13:48:28.397007-05:00 claude-cloud sshd[594266]: Connection reset by authenticating user root 45.148.10.151 port 11136 [preauth] 2026-06-30T13:48:43.998187-05:00 claude-cloud sshd[594463]: Invalid user proj from 89.124.96.90 port 40644 2026-06-30T13:48:44.017637-05:00 claude-cloud sshd[594463]: Received disconnect from 89.124.96.90 port 40644:11: Bye Bye [preauth] 2026-06-30T13:48:44.017993-05:00 claude-cloud sshd[594463]: Disconnected from invalid user proj 89.124.96.90 port 40644 [preauth] 2026-06-30T13:50:16.223611-05:00 claude-cloud sshd[596339]: Invalid user radar from 45.148.10.240 port 38630 2026-06-30T13:50:16.236598-05:00 claude-cloud sshd[596339]: Connection closed by invalid user radar 45.148.10.240 port 38630 [preauth] 2026-06-30T13:51:56.197882-05:00 claude-cloud sshd[597760]: Invalid user site from 89.124.96.90 port 59016 2026-06-30T13:51:56.212935-05:00 claude-cloud sshd[597760]: Received disconnect from 89.124.96.90 port 59016:11: Bye Bye [preauth] 2026-06-30T13:51:56.213195-05:00 claude-cloud sshd[597760]: Disconnected from invalid user site 89.124.96.90 port 59016 [preauth] 2026-06-30T13:52:08.985427-05:00 claude-cloud sshd[597797]: Invalid user was from 45.148.10.240 port 44862 2026-06-30T13:52:08.997755-05:00 claude-cloud sshd[597797]: Connection closed by invalid user was 45.148.10.240 port 44862 [preauth] 2026-06-30T13:52:59.698518-05:00 claude-cloud systemd-logind[853]: New session c5286 of user claude. 2026-06-30T13:53:00.235688-05:00 claude-cloud systemd-logind[853]: Session c5286 logged out. Waiting for processes to exit. 2026-06-30T13:53:00.235940-05:00 claude-cloud systemd-logind[853]: Removed session c5286. 2026-06-30T13:53:41.247459-05:00 claude-cloud sshd[598566]: Connection closed by authenticating user root 27.71.230.31 port 44108 [preauth] 2026-06-30T13:53:53.519182-05:00 claude-cloud sshd[598996]: Invalid user wadmin from 45.148.10.240 port 43674 2026-06-30T13:53:53.532590-05:00 claude-cloud sshd[598996]: Connection closed by invalid user wadmin 45.148.10.240 port 43674 [preauth] 2026-06-30T13:53:57.802972-05:00 claude-cloud sshd[599138]: Connection reset by authenticating user root 45.148.10.141 port 60490 [preauth] 2026-06-30T13:54:21.727065-05:00 claude-cloud sshd[599624]: Connection closed by 120.76.158.232 port 46882 2026-06-30T13:54:26.910927-05:00 claude-cloud sshd[599599]: Connection closed by authenticating user root 125.20.210.182 port 52520 [preauth] 2026-06-30T13:55:01.134325-05:00 claude-cloud CRON[599870]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T13:55:01.141208-05:00 claude-cloud CRON[599870]: pam_unix(cron:session): session closed for user root 2026-06-30T13:55:09.965992-05:00 claude-cloud sshd[599902]: Invalid user origen-www from 89.124.96.90 port 44420 2026-06-30T13:55:09.986816-05:00 claude-cloud sshd[599902]: Received disconnect from 89.124.96.90 port 44420:11: Bye Bye [preauth] 2026-06-30T13:55:09.987034-05:00 claude-cloud sshd[599902]: Disconnected from invalid user origen-www 89.124.96.90 port 44420 [preauth] 2026-06-30T13:55:35.146719-05:00 claude-cloud sshd[600000]: Invalid user ladmin from 45.148.10.240 port 55608 2026-06-30T13:55:35.159642-05:00 claude-cloud sshd[600000]: Connection closed by invalid user ladmin 45.148.10.240 port 55608 [preauth] 2026-06-30T13:57:25.064309-05:00 claude-cloud sshd[600396]: Invalid user bob from 45.148.10.240 port 52658 2026-06-30T13:57:25.076971-05:00 claude-cloud sshd[600396]: Connection closed by invalid user bob 45.148.10.240 port 52658 [preauth] 2026-06-30T13:57:37.975955-05:00 claude-cloud sshd[600426]: Connection closed by authenticating user root 45.198.224.46 port 53726 [preauth] 2026-06-30T13:57:45.099705-05:00 claude-cloud sshd[600454]: Connection closed by authenticating user root 152.32.174.171 port 48804 [preauth] 2026-06-30T13:58:04.459287-05:00 claude-cloud systemd-logind[853]: New session c5287 of user claude. 2026-06-30T13:58:04.950560-05:00 claude-cloud systemd-logind[853]: Session c5287 logged out. Waiting for processes to exit. 2026-06-30T13:58:04.952382-05:00 claude-cloud systemd-logind[853]: Removed session c5287. 2026-06-30T13:58:11.996998-05:00 claude-cloud sshd[600538]: Received disconnect from 217.156.65.251 port 35816:11: disconnected by user [preauth] 2026-06-30T13:58:11.997508-05:00 claude-cloud sshd[600538]: Disconnected from authenticating user root 217.156.65.251 port 35816 [preauth] 2026-06-30T13:58:44.633144-05:00 claude-cloud sshd[600698]: Received disconnect from 195.116.145.127 port 53152:11: Bye Bye [preauth] 2026-06-30T13:58:44.633966-05:00 claude-cloud sshd[600698]: Disconnected from authenticating user root 195.116.145.127 port 53152 [preauth] 2026-06-30T13:59:15.485120-05:00 claude-cloud sshd[600826]: Invalid user grid from 45.148.10.240 port 51712 2026-06-30T13:59:15.498842-05:00 claude-cloud sshd[600826]: Connection closed by invalid user grid 45.148.10.240 port 51712 [preauth] 2026-06-30T13:59:25.092754-05:00 claude-cloud sshd[600856]: Connection reset by authenticating user root 45.148.10.151 port 33156 [preauth] 2026-06-30T13:59:34.893984-05:00 claude-cloud sshd[600858]: Connection closed by authenticating user root 27.71.230.31 port 49714 [preauth] 2026-06-30T13:59:45.354856-05:00 claude-cloud sshd[601032]: Invalid user debian from 193.46.255.86 port 62926 2026-06-30T13:59:45.380494-05:00 claude-cloud sshd[601032]: Connection closed by invalid user debian 193.46.255.86 port 62926 [preauth] 2026-06-30T14:01:01.568734-05:00 claude-cloud sshd[601610]: Invalid user bank from 45.148.10.240 port 55994 2026-06-30T14:01:01.583158-05:00 claude-cloud sshd[601610]: Connection closed by invalid user bank 45.148.10.240 port 55994 [preauth] 2026-06-30T14:01:30.764312-05:00 claude-cloud sshd[601797]: Received disconnect from 106.13.181.42 port 55118:11: Bye Bye [preauth] 2026-06-30T14:01:30.764676-05:00 claude-cloud sshd[601797]: Disconnected from authenticating user root 106.13.181.42 port 55118 [preauth] 2026-06-30T14:02:14.734010-05:00 claude-cloud sshd[602638]: Invalid user ubuntu2 from 82.39.86.153 port 40576 2026-06-30T14:02:14.753199-05:00 claude-cloud sshd[602638]: Received disconnect from 82.39.86.153 port 40576:11: Bye Bye [preauth] 2026-06-30T14:02:14.753406-05:00 claude-cloud sshd[602638]: Disconnected from invalid user ubuntu2 82.39.86.153 port 40576 [preauth] 2026-06-30T14:02:34.004737-05:00 claude-cloud sshd[602823]: Connection closed by authenticating user root 125.20.210.182 port 51016 [preauth] 2026-06-30T14:02:51.578358-05:00 claude-cloud sshd[603018]: Invalid user banking from 45.148.10.240 port 59700 2026-06-30T14:02:51.591973-05:00 claude-cloud sshd[603018]: Connection closed by invalid user banking 45.148.10.240 port 59700 [preauth] 2026-06-30T14:03:10.238842-05:00 claude-cloud systemd-logind[853]: New session c5288 of user claude. 2026-06-30T14:03:10.748688-05:00 claude-cloud systemd-logind[853]: Session c5288 logged out. Waiting for processes to exit. 2026-06-30T14:03:10.751197-05:00 claude-cloud systemd-logind[853]: Removed session c5288. 2026-06-30T14:04:48.477912-05:00 claude-cloud sshd[603762]: Invalid user broker from 45.148.10.240 port 41872 2026-06-30T14:04:48.490999-05:00 claude-cloud sshd[603762]: Connection closed by invalid user broker 45.148.10.240 port 41872 [preauth] 2026-06-30T14:05:01.156813-05:00 claude-cloud CRON[603823]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T14:05:01.164381-05:00 claude-cloud CRON[603823]: pam_unix(cron:session): session closed for user root 2026-06-30T14:05:27.381214-05:00 claude-cloud sshd[603843]: Connection closed by authenticating user root 27.71.230.31 port 40784 [preauth] 2026-06-30T14:06:18.746869-05:00 claude-cloud sshd[604128]: Received disconnect from 195.116.145.127 port 56606:11: Bye Bye [preauth] 2026-06-30T14:06:18.747177-05:00 claude-cloud sshd[604128]: Disconnected from authenticating user root 195.116.145.127 port 56606 [preauth] 2026-06-30T14:06:25.313949-05:00 claude-cloud sshd[604161]: Received disconnect from 61.72.55.130 port 37808:11: Bye Bye [preauth] 2026-06-30T14:06:25.315699-05:00 claude-cloud sshd[604161]: Disconnected from authenticating user root 61.72.55.130 port 37808 [preauth] 2026-06-30T14:06:33.861349-05:00 claude-cloud sshd[604191]: Invalid user broker from 45.148.10.240 port 56090 2026-06-30T14:06:33.873994-05:00 claude-cloud sshd[604191]: Connection closed by invalid user broker 45.148.10.240 port 56090 [preauth] 2026-06-30T14:06:43.953688-05:00 claude-cloud sshd[604200]: Connection closed by 106.13.181.42 port 48556 [preauth] 2026-06-30T14:06:54.289096-05:00 claude-cloud sshd[604262]: Connection closed by authenticating user root 45.198.224.46 port 48678 [preauth] 2026-06-30T14:07:38.457990-05:00 claude-cloud sshd[604379]: Received disconnect from 222.107.156.227 port 18166:11: Bye Bye [preauth] 2026-06-30T14:07:38.459479-05:00 claude-cloud sshd[604379]: Disconnected from authenticating user root 222.107.156.227 port 18166 [preauth] 2026-06-30T14:08:05.284596-05:00 claude-cloud sshd[604453]: Received disconnect from 195.116.145.127 port 50538:11: Bye Bye [preauth] 2026-06-30T14:08:05.285774-05:00 claude-cloud sshd[604453]: Disconnected from authenticating user root 195.116.145.127 port 50538 [preauth] 2026-06-30T14:08:16.352728-05:00 claude-cloud sshd[604649]: Invalid user trader from 45.148.10.240 port 49508 2026-06-30T14:08:16.365354-05:00 claude-cloud sshd[604649]: Connection closed by invalid user trader 45.148.10.240 port 49508 [preauth] 2026-06-30T14:09:07.780179-05:00 claude-cloud sshd[604944]: Connection closed by authenticating user root 152.32.174.171 port 42842 [preauth] 2026-06-30T14:09:54.436647-05:00 claude-cloud sshd[605186]: Received disconnect from 195.116.145.127 port 58904:11: Bye Bye [preauth] 2026-06-30T14:09:54.437082-05:00 claude-cloud sshd[605186]: Disconnected from authenticating user root 195.116.145.127 port 58904 [preauth] 2026-06-30T14:10:18.927747-05:00 claude-cloud sshd[605319]: Connection closed by authenticating user root 125.20.210.182 port 38724 [preauth] 2026-06-30T14:10:33.988980-05:00 claude-cloud sshd[605420]: Invalid user milky from 20.244.95.134 port 52194 2026-06-30T14:10:34.118907-05:00 claude-cloud sshd[605420]: Received disconnect from 20.244.95.134 port 52194:11: Bye Bye [preauth] 2026-06-30T14:10:34.119128-05:00 claude-cloud sshd[605420]: Disconnected from invalid user milky 20.244.95.134 port 52194 [preauth] 2026-06-30T14:11:10.284527-05:00 claude-cloud sshd[605724]: Connection closed by authenticating user root 27.71.230.31 port 50156 [preauth] 2026-06-30T14:11:44.162733-05:00 claude-cloud sshd[606703]: Received disconnect from 195.116.145.127 port 37322:11: Bye Bye [preauth] 2026-06-30T14:11:44.163660-05:00 claude-cloud sshd[606703]: Disconnected from authenticating user root 195.116.145.127 port 37322 [preauth] 2026-06-30T14:11:47.896362-05:00 claude-cloud sshd[606711]: Connection closed by 45.148.10.240 port 33072 2026-06-30T14:12:03.573111-05:00 claude-cloud sshd[606944]: Received disconnect from 161.49.89.39 port 46928:11: Bye Bye [preauth] 2026-06-30T14:12:03.576610-05:00 claude-cloud sshd[606944]: Disconnected from authenticating user root 161.49.89.39 port 46928 [preauth] 2026-06-30T14:12:43.542505-05:00 claude-cloud sshd[607449]: Invalid user milky from 106.13.181.42 port 51790 2026-06-30T14:12:43.786987-05:00 claude-cloud sshd[607449]: Received disconnect from 106.13.181.42 port 51790:11: Bye Bye [preauth] 2026-06-30T14:12:43.787353-05:00 claude-cloud sshd[607449]: Disconnected from invalid user milky 106.13.181.42 port 51790 [preauth] 2026-06-30T14:13:23.688209-05:00 claude-cloud sshd[607717]: Received disconnect from 195.116.145.127 port 39064:11: Bye Bye [preauth] 2026-06-30T14:13:23.690092-05:00 claude-cloud sshd[607717]: Disconnected from authenticating user root 195.116.145.127 port 39064 [preauth] 2026-06-30T14:13:29.292891-05:00 claude-cloud systemd-logind[853]: New session c5289 of user claude. 2026-06-30T14:13:29.830758-05:00 claude-cloud systemd-logind[853]: Session c5289 logged out. Waiting for processes to exit. 2026-06-30T14:13:29.832637-05:00 claude-cloud systemd-logind[853]: Removed session c5289. 2026-06-30T14:13:30.945308-05:00 claude-cloud sshd[607653]: Received disconnect from 106.13.181.42 port 57200:11: Bye Bye [preauth] 2026-06-30T14:13:30.945634-05:00 claude-cloud sshd[607653]: Disconnected from authenticating user root 106.13.181.42 port 57200 [preauth] 2026-06-30T14:13:34.055798-05:00 claude-cloud sshd[607777]: Invalid user lighthouse from 82.39.86.153 port 37528 2026-06-30T14:13:34.074151-05:00 claude-cloud sshd[607777]: Received disconnect from 82.39.86.153 port 37528:11: Bye Bye [preauth] 2026-06-30T14:13:34.074549-05:00 claude-cloud sshd[607777]: Disconnected from invalid user lighthouse 82.39.86.153 port 37528 [preauth] 2026-06-30T14:13:34.368738-05:00 claude-cloud sshd[607780]: Invalid user eth-docker from 45.148.10.240 port 49560 2026-06-30T14:13:34.381262-05:00 claude-cloud sshd[607780]: Connection closed by invalid user eth-docker 45.148.10.240 port 49560 [preauth] 2026-06-30T14:14:06.940799-05:00 claude-cloud sshd[608008]: Invalid user milky from 161.49.89.39 port 57304 2026-06-30T14:14:07.137580-05:00 claude-cloud sshd[608008]: Received disconnect from 161.49.89.39 port 57304:11: Bye Bye [preauth] 2026-06-30T14:14:07.138085-05:00 claude-cloud sshd[608008]: Disconnected from invalid user milky 161.49.89.39 port 57304 [preauth] 2026-06-30T14:14:09.105918-05:00 claude-cloud sshd[608020]: Received disconnect from 61.72.55.130 port 50256:11: Bye Bye [preauth] 2026-06-30T14:14:09.106611-05:00 claude-cloud sshd[608020]: Disconnected from authenticating user root 61.72.55.130 port 50256 [preauth] 2026-06-30T14:15:01.173931-05:00 claude-cloud CRON[608286]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T14:15:01.179510-05:00 claude-cloud CRON[608286]: pam_unix(cron:session): session closed for user root 2026-06-30T14:15:01.537795-05:00 claude-cloud sshd[608289]: Received disconnect from 195.116.145.127 port 40322:11: Bye Bye [preauth] 2026-06-30T14:15:01.538124-05:00 claude-cloud sshd[608289]: Disconnected from authenticating user root 195.116.145.127 port 40322 [preauth] 2026-06-30T14:15:17.834201-05:00 claude-cloud sshd[608354]: Invalid user ethdocker from 45.148.10.240 port 56180 2026-06-30T14:15:17.847863-05:00 claude-cloud sshd[608354]: Connection closed by invalid user ethdocker 45.148.10.240 port 56180 [preauth] 2026-06-30T14:15:23.413947-05:00 claude-cloud sshd[608342]: Connection closed by 71.6.199.87 port 36502 [preauth] 2026-06-30T14:16:00.499364-05:00 claude-cloud sshd[608545]: Received disconnect from 61.72.55.130 port 35540:11: Bye Bye [preauth] 2026-06-30T14:16:00.499752-05:00 claude-cloud sshd[608545]: Disconnected from authenticating user root 61.72.55.130 port 35540 [preauth] 2026-06-30T14:16:07.555464-05:00 claude-cloud sshd[608574]: Received disconnect from 161.49.89.39 port 38846:11: Bye Bye [preauth] 2026-06-30T14:16:07.555716-05:00 claude-cloud sshd[608574]: Disconnected from authenticating user root 161.49.89.39 port 38846 [preauth] 2026-06-30T14:16:19.438082-05:00 claude-cloud sshd[608631]: Connection closed by authenticating user root 45.198.224.46 port 34740 [preauth] 2026-06-30T14:16:28.198249-05:00 claude-cloud sshd[608682]: Received disconnect from 82.39.86.153 port 45896:11: Bye Bye [preauth] 2026-06-30T14:16:28.201661-05:00 claude-cloud sshd[608682]: Disconnected from authenticating user root 82.39.86.153 port 45896 [preauth] 2026-06-30T14:16:42.163764-05:00 claude-cloud sshd[608721]: Received disconnect from 195.116.145.127 port 37554:11: Bye Bye [preauth] 2026-06-30T14:16:42.164474-05:00 claude-cloud sshd[608721]: Disconnected from authenticating user root 195.116.145.127 port 37554 [preauth] 2026-06-30T14:16:58.018012-05:00 claude-cloud sshd[608753]: Connection closed by authenticating user root 27.71.230.31 port 58352 [preauth] 2026-06-30T14:17:01.188458-05:00 claude-cloud CRON[608806]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T14:17:01.196611-05:00 claude-cloud CRON[608806]: pam_unix(cron:session): session closed for user root 2026-06-30T14:17:09.453786-05:00 claude-cloud sshd[608829]: Invalid user sol from 45.148.10.240 port 49560 2026-06-30T14:17:09.466827-05:00 claude-cloud sshd[608829]: Connection closed by invalid user sol 45.148.10.240 port 49560 [preauth] 2026-06-30T14:17:33.346580-05:00 claude-cloud sshd[608942]: Invalid user admin from 2.57.121.25 port 39942 2026-06-30T14:17:33.372121-05:00 claude-cloud sshd[608942]: Connection closed by invalid user admin 2.57.121.25 port 39942 [preauth] 2026-06-30T14:17:56.149615-05:00 claude-cloud sshd[609023]: Received disconnect from 61.72.55.130 port 56706:11: Bye Bye [preauth] 2026-06-30T14:17:56.150226-05:00 claude-cloud sshd[609023]: Disconnected from authenticating user root 61.72.55.130 port 56706 [preauth] 2026-06-30T14:18:06.824490-05:00 claude-cloud sshd[609076]: Invalid user docker from 161.49.89.39 port 48624 2026-06-30T14:18:07.035060-05:00 claude-cloud sshd[609076]: Received disconnect from 161.49.89.39 port 48624:11: Bye Bye [preauth] 2026-06-30T14:18:07.035621-05:00 claude-cloud sshd[609076]: Disconnected from invalid user docker 161.49.89.39 port 48624 [preauth] 2026-06-30T14:18:09.650914-05:00 claude-cloud sshd[609074]: Connection closed by authenticating user root 125.20.210.182 port 60024 [preauth] 2026-06-30T14:18:23.868218-05:00 claude-cloud sshd[609164]: Received disconnect from 195.116.145.127 port 39314:11: Bye Bye [preauth] 2026-06-30T14:18:23.868576-05:00 claude-cloud sshd[609164]: Disconnected from authenticating user root 195.116.145.127 port 39314 [preauth] 2026-06-30T14:18:35.066127-05:00 claude-cloud systemd-logind[853]: New session c5290 of user claude. 2026-06-30T14:18:35.373251-05:00 claude-cloud systemd-logind[853]: Session c5290 logged out. Waiting for processes to exit. 2026-06-30T14:18:35.375714-05:00 claude-cloud systemd-logind[853]: Removed session c5290. 2026-06-30T14:18:49.871991-05:00 claude-cloud sshd[609283]: Invalid user sol from 45.148.10.240 port 55890 2026-06-30T14:18:49.883168-05:00 claude-cloud sshd[609283]: Connection closed by invalid user sol 45.148.10.240 port 55890 [preauth] 2026-06-30T14:19:13.350972-05:00 claude-cloud sshd[609359]: Received disconnect from 222.107.156.227 port 62526:11: Bye Bye [preauth] 2026-06-30T14:19:13.351962-05:00 claude-cloud sshd[609359]: Disconnected from authenticating user root 222.107.156.227 port 62526 [preauth] 2026-06-30T14:19:31.276719-05:00 claude-cloud sshd[609439]: Received disconnect from 82.39.86.153 port 48136:11: Bye Bye [preauth] 2026-06-30T14:19:31.277178-05:00 claude-cloud sshd[609439]: Disconnected from authenticating user root 82.39.86.153 port 48136 [preauth] 2026-06-30T14:19:47.021873-05:00 claude-cloud sshd[609507]: Received disconnect from 61.72.55.130 port 41054:11: Bye Bye [preauth] 2026-06-30T14:19:47.022441-05:00 claude-cloud sshd[609507]: Disconnected from authenticating user root 61.72.55.130 port 41054 [preauth] 2026-06-30T14:19:56.602032-05:00 claude-cloud sshd[609549]: Received disconnect from 161.49.89.39 port 58404:11: Bye Bye [preauth] 2026-06-30T14:19:56.602488-05:00 claude-cloud sshd[609549]: Disconnected from authenticating user root 161.49.89.39 port 58404 [preauth] 2026-06-30T14:20:03.470626-05:00 claude-cloud sshd[609594]: Received disconnect from 195.116.145.127 port 43126:11: Bye Bye [preauth] 2026-06-30T14:20:03.470915-05:00 claude-cloud sshd[609594]: Disconnected from authenticating user root 195.116.145.127 port 43126 [preauth] 2026-06-30T14:20:23.380965-05:00 claude-cloud sshd[609666]: Invalid user sol from 45.148.10.240 port 59650 2026-06-30T14:20:23.393325-05:00 claude-cloud sshd[609666]: Connection closed by invalid user sol 45.148.10.240 port 59650 [preauth] 2026-06-30T14:20:37.087094-05:00 claude-cloud sshd[609724]: Connection closed by authenticating user root 152.32.174.171 port 45572 [preauth] 2026-06-30T14:21:34.914048-05:00 claude-cloud sshd[609963]: Invalid user docker from 61.72.55.130 port 35440 2026-06-30T14:21:35.213911-05:00 claude-cloud sshd[609963]: Received disconnect from 61.72.55.130 port 35440:11: Bye Bye [preauth] 2026-06-30T14:21:35.214199-05:00 claude-cloud sshd[609963]: Disconnected from invalid user docker 61.72.55.130 port 35440 [preauth] 2026-06-30T14:21:37.539228-05:00 claude-cloud sshd[609985]: Received disconnect from 222.107.156.227 port 24782:11: Bye Bye [preauth] 2026-06-30T14:21:37.539592-05:00 claude-cloud sshd[609985]: Disconnected from authenticating user root 222.107.156.227 port 24782 [preauth] 2026-06-30T14:21:43.694670-05:00 claude-cloud sshd[610008]: Received disconnect from 195.116.145.127 port 32908:11: Bye Bye [preauth] 2026-06-30T14:21:43.695893-05:00 claude-cloud sshd[610008]: Disconnected from authenticating user root 195.116.145.127 port 32908 [preauth] 2026-06-30T14:21:52.615261-05:00 claude-cloud sshd[610042]: Received disconnect from 161.49.89.39 port 39942:11: Bye Bye [preauth] 2026-06-30T14:21:52.615603-05:00 claude-cloud sshd[610042]: Disconnected from authenticating user root 161.49.89.39 port 39942 [preauth] 2026-06-30T14:22:03.510949-05:00 claude-cloud sshd[610074]: Invalid user sol from 45.148.10.240 port 49488 2026-06-30T14:22:03.524458-05:00 claude-cloud sshd[610074]: Connection closed by invalid user sol 45.148.10.240 port 49488 [preauth] 2026-06-30T14:22:14.751570-05:00 claude-cloud sshd[610104]: Invalid user dockeradmin from 82.39.86.153 port 39528 2026-06-30T14:22:14.769064-05:00 claude-cloud sshd[610104]: Received disconnect from 82.39.86.153 port 39528:11: Bye Bye [preauth] 2026-06-30T14:22:14.769339-05:00 claude-cloud sshd[610104]: Disconnected from invalid user dockeradmin 82.39.86.153 port 39528 [preauth] 2026-06-30T14:22:49.759054-05:00 claude-cloud sshd[610168]: Connection closed by authenticating user root 27.71.230.31 port 41198 [preauth] 2026-06-30T14:23:22.838511-05:00 claude-cloud sshd[610390]: Received disconnect from 61.72.55.130 port 43304:11: Bye Bye [preauth] 2026-06-30T14:23:22.839115-05:00 claude-cloud sshd[610390]: Disconnected from authenticating user root 61.72.55.130 port 43304 [preauth] 2026-06-30T14:23:26.478256-05:00 claude-cloud sshd[610412]: Received disconnect from 195.116.145.127 port 40450:11: Bye Bye [preauth] 2026-06-30T14:23:26.478887-05:00 claude-cloud sshd[610412]: Disconnected from authenticating user root 195.116.145.127 port 40450 [preauth] 2026-06-30T14:23:47.069996-05:00 claude-cloud sshd[610474]: Invalid user sol from 45.148.10.240 port 41766 2026-06-30T14:23:47.081971-05:00 claude-cloud sshd[610474]: Connection closed by invalid user sol 45.148.10.240 port 41766 [preauth] 2026-06-30T14:23:50.010103-05:00 claude-cloud sshd[610476]: Received disconnect from 161.49.89.39 port 49712:11: Bye Bye [preauth] 2026-06-30T14:23:50.010696-05:00 claude-cloud sshd[610476]: Disconnected from authenticating user root 161.49.89.39 port 49712 [preauth] 2026-06-30T14:24:09.197873-05:00 claude-cloud sshd[610630]: Received disconnect from 222.107.156.227 port 43535:11: Bye Bye [preauth] 2026-06-30T14:24:09.198220-05:00 claude-cloud sshd[610630]: Disconnected from authenticating user root 222.107.156.227 port 43535 [preauth] 2026-06-30T14:25:01.207098-05:00 claude-cloud CRON[610784]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T14:25:01.213829-05:00 claude-cloud CRON[610784]: pam_unix(cron:session): session closed for user root 2026-06-30T14:25:07.426493-05:00 claude-cloud sshd[610797]: Received disconnect from 61.72.55.130 port 37736:11: Bye Bye [preauth] 2026-06-30T14:25:07.426938-05:00 claude-cloud sshd[610797]: Disconnected from authenticating user root 61.72.55.130 port 37736 [preauth] 2026-06-30T14:25:08.140539-05:00 claude-cloud sshd[610806]: Received disconnect from 82.39.86.153 port 48260:11: Bye Bye [preauth] 2026-06-30T14:25:08.141129-05:00 claude-cloud sshd[610806]: Disconnected from authenticating user root 82.39.86.153 port 48260 [preauth] 2026-06-30T14:25:08.628107-05:00 claude-cloud sshd[610811]: Received disconnect from 195.116.145.127 port 41438:11: Bye Bye [preauth] 2026-06-30T14:25:08.628528-05:00 claude-cloud sshd[610811]: Disconnected from authenticating user root 195.116.145.127 port 41438 [preauth] 2026-06-30T14:25:25.124529-05:00 claude-cloud sshd[610856]: Invalid user solana from 45.148.10.240 port 35212 2026-06-30T14:25:25.138741-05:00 claude-cloud sshd[610856]: Connection closed by invalid user solana 45.148.10.240 port 35212 [preauth] 2026-06-30T14:25:35.019184-05:00 claude-cloud sshd[610896]: Connection closed by authenticating user root 45.198.224.46 port 43350 [preauth] 2026-06-30T14:25:41.373251-05:00 claude-cloud sshd[610919]: Received disconnect from 161.49.89.39 port 59476:11: Bye Bye [preauth] 2026-06-30T14:25:41.373668-05:00 claude-cloud sshd[610919]: Disconnected from authenticating user root 161.49.89.39 port 59476 [preauth] 2026-06-30T14:26:24.581505-05:00 claude-cloud sshd[611015]: Connection closed by authenticating user root 125.20.210.182 port 59624 [preauth] 2026-06-30T14:26:28.877866-05:00 claude-cloud sshd[611038]: Received disconnect from 222.107.156.227 port 62282:11: Bye Bye [preauth] 2026-06-30T14:26:28.881380-05:00 claude-cloud sshd[611038]: Disconnected from authenticating user root 222.107.156.227 port 62282 [preauth] 2026-06-30T14:26:47.546144-05:00 claude-cloud sshd[611123]: Received disconnect from 195.116.145.127 port 40998:11: Bye Bye [preauth] 2026-06-30T14:26:47.546446-05:00 claude-cloud sshd[611123]: Disconnected from authenticating user root 195.116.145.127 port 40998 [preauth] 2026-06-30T14:26:47.983543-05:00 claude-cloud sshd[611121]: Received disconnect from 61.72.55.130 port 49560:11: Bye Bye [preauth] 2026-06-30T14:26:47.983881-05:00 claude-cloud sshd[611121]: Disconnected from authenticating user root 61.72.55.130 port 49560 [preauth] 2026-06-30T14:26:59.531428-05:00 claude-cloud sshd[611164]: Invalid user solv from 45.148.10.240 port 57028 2026-06-30T14:26:59.546324-05:00 claude-cloud sshd[611164]: Connection closed by invalid user solv 45.148.10.240 port 57028 [preauth] 2026-06-30T14:27:28.428270-05:00 claude-cloud sshd[611227]: Received disconnect from 161.49.89.39 port 41000:11: Bye Bye [preauth] 2026-06-30T14:27:28.428950-05:00 claude-cloud sshd[611227]: Disconnected from authenticating user root 161.49.89.39 port 41000 [preauth] 2026-06-30T14:28:05.834917-05:00 claude-cloud sshd[611357]: Received disconnect from 82.39.86.153 port 51126:11: Bye Bye [preauth] 2026-06-30T14:28:05.835552-05:00 claude-cloud sshd[611357]: Disconnected from authenticating user root 82.39.86.153 port 51126 [preauth] 2026-06-30T14:28:28.802769-05:00 claude-cloud sshd[611422]: Received disconnect from 195.116.145.127 port 36116:11: Bye Bye [preauth] 2026-06-30T14:28:28.803710-05:00 claude-cloud sshd[611422]: Disconnected from authenticating user root 195.116.145.127 port 36116 [preauth] 2026-06-30T14:28:30.369508-05:00 claude-cloud sshd[611421]: Received disconnect from 61.72.55.130 port 33032:11: Bye Bye [preauth] 2026-06-30T14:28:30.369892-05:00 claude-cloud sshd[611421]: Disconnected from authenticating user root 61.72.55.130 port 33032 [preauth] 2026-06-30T14:28:31.586811-05:00 claude-cloud sshd[611404]: Connection closed by authenticating user root 27.71.230.31 port 49286 [preauth] 2026-06-30T14:28:44.118575-05:00 claude-cloud sshd[611475]: Invalid user solv from 45.148.10.240 port 49114 2026-06-30T14:28:44.130464-05:00 claude-cloud sshd[611475]: Connection closed by invalid user solv 45.148.10.240 port 49114 [preauth] 2026-06-30T14:28:58.049578-05:00 claude-cloud sshd[611508]: Received disconnect from 222.107.156.227 port 24539:11: Bye Bye [preauth] 2026-06-30T14:28:58.056537-05:00 claude-cloud sshd[611508]: Disconnected from authenticating user root 222.107.156.227 port 24539 [preauth] 2026-06-30T14:29:13.478935-05:00 claude-cloud systemd-logind[853]: Session c5255 logged out. Waiting for processes to exit. 2026-06-30T14:29:13.480797-05:00 claude-cloud systemd-logind[853]: Session c5258 logged out. Waiting for processes to exit. 2026-06-30T14:29:13.483594-05:00 claude-cloud systemd-logind[853]: Removed session c5255. 2026-06-30T14:29:13.485554-05:00 claude-cloud systemd-logind[853]: Removed session c5258. 2026-06-30T14:29:15.097151-05:00 claude-cloud systemd-logind[853]: New session c5291 of user claude. 2026-06-30T14:29:15.409786-05:00 claude-cloud systemd-logind[853]: Session c5291 logged out. Waiting for processes to exit. 2026-06-30T14:29:15.413361-05:00 claude-cloud systemd-logind[853]: Removed session c5291. 2026-06-30T14:29:18.750354-05:00 claude-cloud systemd-logind[853]: New session c5292 of user claude. 2026-06-30T14:29:18.777419-05:00 claude-cloud systemd-logind[853]: New session c5293 of user claude. 2026-06-30T14:29:18.825980-05:00 claude-cloud systemd-logind[853]: Session c5292 logged out. Waiting for processes to exit. 2026-06-30T14:29:18.827783-05:00 claude-cloud systemd-logind[853]: Removed session c5292. 2026-06-30T14:29:19.776721-05:00 claude-cloud systemd-logind[853]: New session c5294 of user claude. 2026-06-30T14:29:19.847554-05:00 claude-cloud systemd-logind[853]: Session c5294 logged out. Waiting for processes to exit. 2026-06-30T14:29:19.849424-05:00 claude-cloud systemd-logind[853]: Removed session c5294. 2026-06-30T14:29:20.708047-05:00 claude-cloud systemd-logind[853]: New session c5295 of user claude. 2026-06-30T14:29:27.753826-05:00 claude-cloud sshd[611753]: Received disconnect from 161.49.89.39 port 50774:11: Bye Bye [preauth] 2026-06-30T14:29:27.754579-05:00 claude-cloud sshd[611753]: Disconnected from authenticating user root 161.49.89.39 port 50774 [preauth] 2026-06-30T14:29:29.004850-05:00 claude-cloud sshd[611773]: Received disconnect from 68.235.61.155 port 27008:11: disconnected by user [preauth] 2026-06-30T14:29:29.005371-05:00 claude-cloud sshd[611773]: Disconnected from authenticating user root 68.235.61.155 port 27008 [preauth] 2026-06-30T14:30:13.614738-05:00 claude-cloud sshd[612139]: Invalid user milky from 61.72.55.130 port 49918 2026-06-30T14:30:13.911026-05:00 claude-cloud sshd[612139]: Received disconnect from 61.72.55.130 port 49918:11: Bye Bye [preauth] 2026-06-30T14:30:13.911268-05:00 claude-cloud sshd[612139]: Disconnected from invalid user milky 61.72.55.130 port 49918 [preauth] 2026-06-30T14:30:32.706723-05:00 claude-cloud sshd[612250]: Invalid user ubuntu from 45.148.10.240 port 53168 2026-06-30T14:30:32.721037-05:00 claude-cloud sshd[612250]: Connection closed by invalid user ubuntu 45.148.10.240 port 53168 [preauth] 2026-06-30T14:30:51.580037-05:00 claude-cloud sshd[612302]: Received disconnect from 82.39.86.153 port 56114:11: Bye Bye [preauth] 2026-06-30T14:30:51.580386-05:00 claude-cloud sshd[612302]: Disconnected from authenticating user root 82.39.86.153 port 56114 [preauth] 2026-06-30T14:31:20.295088-05:00 claude-cloud sshd[612377]: Received disconnect from 222.107.156.227 port 43288:11: Bye Bye [preauth] 2026-06-30T14:31:20.295894-05:00 claude-cloud sshd[612377]: Disconnected from authenticating user root 222.107.156.227 port 43288 [preauth] 2026-06-30T14:31:28.649583-05:00 claude-cloud sshd[612427]: Received disconnect from 161.49.89.39 port 60552:11: Bye Bye [preauth] 2026-06-30T14:31:28.653841-05:00 claude-cloud sshd[612427]: Disconnected from authenticating user root 161.49.89.39 port 60552 [preauth] 2026-06-30T14:32:01.260537-05:00 claude-cloud sshd[612541]: Received disconnect from 61.72.55.130 port 58470:11: Bye Bye [preauth] 2026-06-30T14:32:01.261013-05:00 claude-cloud sshd[612541]: Disconnected from authenticating user root 61.72.55.130 port 58470 [preauth] 2026-06-30T14:32:14.529437-05:00 claude-cloud sshd[612594]: Invalid user ubuntu from 45.148.10.240 port 36650 2026-06-30T14:32:14.541437-05:00 claude-cloud sshd[612594]: Connection closed by invalid user ubuntu 45.148.10.240 port 36650 [preauth] 2026-06-30T14:33:23.829136-05:00 claude-cloud sshd[612841]: Received disconnect from 161.49.89.39 port 42092:11: Bye Bye [preauth] 2026-06-30T14:33:23.829740-05:00 claude-cloud sshd[612841]: Disconnected from authenticating user root 161.49.89.39 port 42092 [preauth] 2026-06-30T14:33:39.330991-05:00 claude-cloud sshd[612907]: Received disconnect from 222.107.156.227 port 62031:11: Bye Bye [preauth] 2026-06-30T14:33:39.331826-05:00 claude-cloud sshd[612907]: Disconnected from authenticating user root 222.107.156.227 port 62031 [preauth] 2026-06-30T14:33:44.512851-05:00 claude-cloud sshd[612929]: Received disconnect from 82.39.86.153 port 56098:11: Bye Bye [preauth] 2026-06-30T14:33:44.513185-05:00 claude-cloud sshd[612929]: Disconnected from authenticating user root 82.39.86.153 port 56098 [preauth] 2026-06-30T14:33:47.314614-05:00 claude-cloud sshd[612934]: Invalid user ftpuser from 61.72.55.130 port 46446 2026-06-30T14:33:47.617976-05:00 claude-cloud sshd[612934]: Received disconnect from 61.72.55.130 port 46446:11: Bye Bye [preauth] 2026-06-30T14:33:47.618183-05:00 claude-cloud sshd[612934]: Disconnected from invalid user ftpuser 61.72.55.130 port 46446 [preauth] 2026-06-30T14:33:50.917793-05:00 claude-cloud sshd[612948]: Invalid user ubuntu from 45.148.10.240 port 50404 2026-06-30T14:33:50.930326-05:00 claude-cloud sshd[612948]: Connection closed by invalid user ubuntu 45.148.10.240 port 50404 [preauth] 2026-06-30T14:34:14.717721-05:00 claude-cloud sshd[612990]: Connection closed by authenticating user root 27.71.230.31 port 54524 [preauth] 2026-06-30T14:34:20.445176-05:00 claude-cloud systemd-logind[853]: New session c5296 of user claude. 2026-06-30T14:34:20.761979-05:00 claude-cloud systemd-logind[853]: Session c5296 logged out. Waiting for processes to exit. 2026-06-30T14:34:20.764060-05:00 claude-cloud systemd-logind[853]: Removed session c5296. 2026-06-30T14:34:59.365562-05:00 claude-cloud sshd[613071]: Invalid user admin from 125.20.210.182 port 56470 2026-06-30T14:35:00.358104-05:00 claude-cloud sshd[613071]: Connection closed by invalid user admin 125.20.210.182 port 56470 [preauth] 2026-06-30T14:35:01.227485-05:00 claude-cloud CRON[613222]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T14:35:01.241304-05:00 claude-cloud CRON[613222]: pam_unix(cron:session): session closed for user root 2026-06-30T14:35:15.400096-05:00 claude-cloud sshd[613250]: Connection closed by authenticating user root 45.198.224.46 port 45810 [preauth] 2026-06-30T14:35:21.571114-05:00 claude-cloud sshd[613272]: Received disconnect from 161.49.89.39 port 51866:11: Bye Bye [preauth] 2026-06-30T14:35:21.571555-05:00 claude-cloud sshd[613272]: Disconnected from authenticating user root 161.49.89.39 port 51866 [preauth] 2026-06-30T14:35:33.808833-05:00 claude-cloud sshd[613313]: Invalid user ubuntu from 45.148.10.240 port 51256 2026-06-30T14:35:33.821413-05:00 claude-cloud sshd[613313]: Connection closed by invalid user ubuntu 45.148.10.240 port 51256 [preauth] 2026-06-30T14:35:38.825958-05:00 claude-cloud sshd[613322]: Received disconnect from 61.72.55.130 port 45448:11: Bye Bye [preauth] 2026-06-30T14:35:38.826366-05:00 claude-cloud sshd[613322]: Disconnected from authenticating user root 61.72.55.130 port 45448 [preauth] 2026-06-30T14:35:59.907631-05:00 claude-cloud sshd[613375]: Received disconnect from 222.107.156.227 port 24276:11: Bye Bye [preauth] 2026-06-30T14:35:59.908252-05:00 claude-cloud sshd[613375]: Disconnected from authenticating user root 222.107.156.227 port 24276 [preauth] 2026-06-30T14:36:37.798693-05:00 claude-cloud sshd[613477]: Received disconnect from 82.39.86.153 port 57470:11: Bye Bye [preauth] 2026-06-30T14:36:37.799335-05:00 claude-cloud sshd[613477]: Disconnected from authenticating user root 82.39.86.153 port 57470 [preauth] 2026-06-30T14:37:14.503811-05:00 claude-cloud sshd[613588]: Invalid user ubuntu from 45.148.10.240 port 45906 2026-06-30T14:37:14.518573-05:00 claude-cloud sshd[613588]: Connection closed by invalid user ubuntu 45.148.10.240 port 45906 [preauth] 2026-06-30T14:37:19.946033-05:00 claude-cloud sshd[613600]: Invalid user ftpuser from 161.49.89.39 port 33412 2026-06-30T14:37:20.138499-05:00 claude-cloud sshd[613600]: Received disconnect from 161.49.89.39 port 33412:11: Bye Bye [preauth] 2026-06-30T14:37:20.138908-05:00 claude-cloud sshd[613600]: Disconnected from invalid user ftpuser 161.49.89.39 port 33412 [preauth] 2026-06-30T14:37:25.060960-05:00 claude-cloud sshd[613620]: Received disconnect from 61.72.55.130 port 54820:11: Bye Bye [preauth] 2026-06-30T14:37:25.061644-05:00 claude-cloud sshd[613620]: Disconnected from authenticating user root 61.72.55.130 port 54820 [preauth] 2026-06-30T14:38:19.562110-05:00 claude-cloud sshd[613761]: Received disconnect from 222.107.156.227 port 43014:11: Bye Bye [preauth] 2026-06-30T14:38:19.562480-05:00 claude-cloud sshd[613761]: Disconnected from authenticating user root 222.107.156.227 port 43014 [preauth] 2026-06-30T14:38:52.050198-05:00 claude-cloud sshd[613862]: Invalid user ubuntu from 45.148.10.240 port 34164 2026-06-30T14:38:52.062523-05:00 claude-cloud sshd[613862]: Connection closed by invalid user ubuntu 45.148.10.240 port 34164 [preauth] 2026-06-30T14:39:08.655805-05:00 claude-cloud sshd[613904]: Received disconnect from 161.49.89.39 port 43178:11: Bye Bye [preauth] 2026-06-30T14:39:08.656067-05:00 claude-cloud sshd[613904]: Disconnected from authenticating user root 161.49.89.39 port 43178 [preauth] 2026-06-30T14:39:26.050367-05:00 claude-cloud systemd-logind[853]: New session c5297 of user claude. 2026-06-30T14:39:26.356814-05:00 claude-cloud systemd-logind[853]: Session c5297 logged out. Waiting for processes to exit. 2026-06-30T14:39:26.360067-05:00 claude-cloud systemd-logind[853]: Removed session c5297. 2026-06-30T14:39:31.237228-05:00 claude-cloud sshd[613985]: Received disconnect from 82.39.86.153 port 36080:11: Bye Bye [preauth] 2026-06-30T14:39:31.237969-05:00 claude-cloud sshd[613985]: Disconnected from authenticating user root 82.39.86.153 port 36080 [preauth] 2026-06-30T14:40:01.230642-05:00 claude-cloud sshd[614072]: Connection closed by authenticating user root 27.71.230.31 port 37688 [preauth] 2026-06-30T14:40:29.745412-05:00 claude-cloud sshd[614228]: Invalid user ubuntu from 45.148.10.240 port 44680 2026-06-30T14:40:29.759073-05:00 claude-cloud sshd[614228]: Connection closed by invalid user ubuntu 45.148.10.240 port 44680 [preauth] 2026-06-30T14:40:37.298997-05:00 claude-cloud sshd[614328]: Received disconnect from 222.107.156.227 port 61748:11: Bye Bye [preauth] 2026-06-30T14:40:37.299510-05:00 claude-cloud sshd[614328]: Disconnected from authenticating user root 222.107.156.227 port 61748 [preauth] 2026-06-30T14:42:15.305878-05:00 claude-cloud sshd[614838]: Connection closed by authenticating user root 45.148.10.240 port 37664 [preauth] 2026-06-30T14:42:27.103476-05:00 claude-cloud sshd[614870]: Received disconnect from 82.39.86.153 port 46758:11: Bye Bye [preauth] 2026-06-30T14:42:27.104085-05:00 claude-cloud sshd[614870]: Disconnected from authenticating user root 82.39.86.153 port 46758 [preauth] 2026-06-30T14:42:40.760326-05:00 claude-cloud sshd[614884]: Connection closed by authenticating user root 125.20.210.182 port 40974 [preauth] 2026-06-30T14:42:58.976352-05:00 claude-cloud sshd[614967]: Received disconnect from 222.107.156.227 port 23993:11: Bye Bye [preauth] 2026-06-30T14:42:58.976961-05:00 claude-cloud sshd[614967]: Disconnected from authenticating user root 222.107.156.227 port 23993 [preauth] 2026-06-30T14:44:01.155440-05:00 claude-cloud sshd[615139]: Invalid user sol-docker from 45.148.10.240 port 45112 2026-06-30T14:44:01.167981-05:00 claude-cloud sshd[615139]: Connection closed by invalid user sol-docker 45.148.10.240 port 45112 [preauth] 2026-06-30T14:44:31.596319-05:00 claude-cloud systemd-logind[853]: New session c5298 of user claude. 2026-06-30T14:44:31.896073-05:00 claude-cloud systemd-logind[853]: Session c5298 logged out. Waiting for processes to exit. 2026-06-30T14:44:31.897477-05:00 claude-cloud systemd-logind[853]: Removed session c5298. 2026-06-30T14:45:00.104645-05:00 claude-cloud sshd[615581]: Connection closed by authenticating user root 45.198.224.46 port 42060 [preauth] 2026-06-30T14:45:01.253551-05:00 claude-cloud CRON[615625]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T14:45:01.259495-05:00 claude-cloud CRON[615625]: pam_unix(cron:session): session closed for user root 2026-06-30T14:45:02.160913-05:00 claude-cloud sshd[615628]: userauth_pubkey: signature algorithm ssh-dss not in PubkeyAcceptedAlgorithms [preauth] 2026-06-30T14:45:02.253696-05:00 claude-cloud sshd[615628]: Received disconnect from 91.208.197.64 port 58228:11: disconnected by user [preauth] 2026-06-30T14:45:02.253918-05:00 claude-cloud sshd[615628]: Disconnected from authenticating user root 91.208.197.64 port 58228 [preauth] 2026-06-30T14:45:12.155442-05:00 claude-cloud sshd[615670]: Invalid user ftpuser from 82.39.86.153 port 34406 2026-06-30T14:45:12.223393-05:00 claude-cloud sshd[615670]: Received disconnect from 82.39.86.153 port 34406:11: Bye Bye [preauth] 2026-06-30T14:45:12.223756-05:00 claude-cloud sshd[615670]: Disconnected from invalid user ftpuser 82.39.86.153 port 34406 [preauth] 2026-06-30T14:45:17.236132-05:00 claude-cloud sshd[615673]: Received disconnect from 222.107.156.227 port 42735:11: Bye Bye [preauth] 2026-06-30T14:45:17.236892-05:00 claude-cloud sshd[615673]: Disconnected from authenticating user root 222.107.156.227 port 42735 [preauth] 2026-06-30T14:45:40.566333-05:00 claude-cloud sshd[615808]: Invalid user soldocker from 45.148.10.240 port 45328 2026-06-30T14:45:40.579411-05:00 claude-cloud sshd[615808]: Connection closed by invalid user soldocker 45.148.10.240 port 45328 [preauth] 2026-06-30T14:45:58.218860-05:00 claude-cloud sshd[615878]: Connection closed by authenticating user root 27.71.230.31 port 37976 [preauth] 2026-06-30T14:47:01.441920-05:00 claude-cloud sshd[616277]: userauth_pubkey: signature algorithm ssh-dss not in PubkeyAcceptedAlgorithms [preauth] 2026-06-30T14:47:02.717802-05:00 claude-cloud sshd[616277]: Received disconnect from 45.252.188.23 port 49440:11: disconnected by user [preauth] 2026-06-30T14:47:02.718122-05:00 claude-cloud sshd[616277]: Disconnected from authenticating user root 45.252.188.23 port 49440 [preauth] 2026-06-30T14:47:23.100938-05:00 claude-cloud sshd[616356]: Invalid user solana from 45.148.10.240 port 54346 2026-06-30T14:47:23.113584-05:00 claude-cloud sshd[616356]: Connection closed by invalid user solana 45.148.10.240 port 54346 [preauth] 2026-06-30T14:47:36.493965-05:00 claude-cloud sshd[616389]: Received disconnect from 222.107.156.227 port 61480:11: Bye Bye [preauth] 2026-06-30T14:47:36.494398-05:00 claude-cloud sshd[616389]: Disconnected from authenticating user root 222.107.156.227 port 61480 [preauth] 2026-06-30T14:48:07.088814-05:00 claude-cloud sshd[616510]: Received disconnect from 82.39.86.153 port 38536:11: Bye Bye [preauth] 2026-06-30T14:48:07.089237-05:00 claude-cloud sshd[616510]: Disconnected from authenticating user root 82.39.86.153 port 38536 [preauth] 2026-06-30T14:49:06.994066-05:00 claude-cloud sshd[616816]: Invalid user postgres from 45.148.10.240 port 41488 2026-06-30T14:49:07.007153-05:00 claude-cloud sshd[616816]: Connection closed by invalid user postgres 45.148.10.240 port 41488 [preauth] 2026-06-30T14:49:36.364992-05:00 claude-cloud systemd-logind[853]: New session c5299 of user claude. 2026-06-30T14:49:36.696494-05:00 claude-cloud systemd-logind[853]: Session c5299 logged out. Waiting for processes to exit. 2026-06-30T14:49:36.697952-05:00 claude-cloud systemd-logind[853]: Removed session c5299. 2026-06-30T14:49:58.003749-05:00 claude-cloud sshd[617309]: Received disconnect from 222.107.156.227 port 23725:11: Bye Bye [preauth] 2026-06-30T14:49:58.004442-05:00 claude-cloud sshd[617309]: Disconnected from authenticating user root 222.107.156.227 port 23725 [preauth] 2026-06-30T14:50:19.031428-05:00 claude-cloud sshd[617502]: Connection closed by authenticating user root 193.46.255.86 port 33056 [preauth] 2026-06-30T14:50:31.770168-05:00 claude-cloud sshd[617587]: Connection closed by authenticating user root 125.20.210.182 port 34412 [preauth] 2026-06-30T14:50:45.788939-05:00 claude-cloud sshd[617697]: Connection closed by authenticating user root 45.148.10.240 port 60122 [preauth] 2026-06-30T14:50:59.945241-05:00 claude-cloud sshd[617862]: Invalid user admin from 82.39.86.153 port 45618 2026-06-30T14:50:59.966582-05:00 claude-cloud sshd[617862]: Received disconnect from 82.39.86.153 port 45618:11: Bye Bye [preauth] 2026-06-30T14:50:59.966886-05:00 claude-cloud sshd[617862]: Disconnected from invalid user admin 82.39.86.153 port 45618 [preauth] 2026-06-30T14:51:35.500438-05:00 claude-cloud sshd[618049]: Connection closed by authenticating user root 27.71.230.31 port 52022 [preauth] 2026-06-30T14:52:18.134974-05:00 claude-cloud sshd[619099]: Connection closed by 91.92.40.90 port 39222 2026-06-30T14:52:18.363194-05:00 claude-cloud sshd[619100]: Connection closed by authenticating user root 91.92.40.90 port 39224 [preauth] 2026-06-30T14:52:18.498181-05:00 claude-cloud sshd[619102]: Invalid user jellyfin from 91.92.40.90 port 39240 2026-06-30T14:52:18.517065-05:00 claude-cloud sshd[619102]: Connection closed by invalid user jellyfin 91.92.40.90 port 39240 [preauth] 2026-06-30T14:52:21.414587-05:00 claude-cloud sshd[619109]: Connection closed by authenticating user root 45.148.10.240 port 60796 [preauth] 2026-06-30T14:54:03.929924-05:00 claude-cloud sshd[620475]: Connection closed by authenticating user root 45.148.10.240 port 43106 [preauth] 2026-06-30T14:54:41.400732-05:00 claude-cloud systemd-logind[853]: New session c5300 of user claude. 2026-06-30T14:54:41.948850-05:00 claude-cloud systemd-logind[853]: Session c5300 logged out. Waiting for processes to exit. 2026-06-30T14:54:41.950894-05:00 claude-cloud systemd-logind[853]: Removed session c5300. 2026-06-30T14:54:49.694326-05:00 claude-cloud sshd[621083]: Invalid user test1 from 45.198.224.46 port 50104 2026-06-30T14:54:50.800633-05:00 claude-cloud sshd[621083]: Connection closed by invalid user test1 45.198.224.46 port 50104 [preauth] 2026-06-30T14:55:01.276886-05:00 claude-cloud CRON[621164]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T14:55:01.284103-05:00 claude-cloud CRON[621164]: pam_unix(cron:session): session closed for user root 2026-06-30T14:55:51.605912-05:00 claude-cloud sshd[621505]: Connection closed by authenticating user root 45.148.10.240 port 46286 [preauth] 2026-06-30T14:56:16.934732-05:00 claude-cloud systemd-logind[853]: Session c5293 logged out. Waiting for processes to exit. 2026-06-30T14:56:16.937262-05:00 claude-cloud systemd-logind[853]: Removed session c5293. 2026-06-30T14:56:16.938543-05:00 claude-cloud systemd-logind[853]: Session c5295 logged out. Waiting for processes to exit. 2026-06-30T14:56:16.940019-05:00 claude-cloud systemd-logind[853]: Removed session c5295. 2026-06-30T14:56:18.479846-05:00 claude-cloud systemd-logind[853]: New session c5301 of user claude. 2026-06-30T14:56:18.686528-05:00 claude-cloud systemd-logind[853]: Session c5301 logged out. Waiting for processes to exit. 2026-06-30T14:56:18.689488-05:00 claude-cloud systemd-logind[853]: Removed session c5301. 2026-06-30T14:56:36.727805-05:00 claude-cloud systemd-logind[853]: New session c5302 of user claude. 2026-06-30T14:56:36.753364-05:00 claude-cloud systemd-logind[853]: New session c5303 of user claude. 2026-06-30T14:56:36.798289-05:00 claude-cloud systemd-logind[853]: Session c5302 logged out. Waiting for processes to exit. 2026-06-30T14:56:36.800228-05:00 claude-cloud systemd-logind[853]: Removed session c5302. 2026-06-30T14:56:38.193819-05:00 claude-cloud systemd-logind[853]: New session c5304 of user claude. 2026-06-30T14:56:38.251131-05:00 claude-cloud systemd-logind[853]: Session c5304 logged out. Waiting for processes to exit. 2026-06-30T14:56:38.252708-05:00 claude-cloud systemd-logind[853]: Removed session c5304. 2026-06-30T14:56:40.328107-05:00 claude-cloud systemd-logind[853]: New session c5305 of user claude. 2026-06-30T14:56:40.369676-05:00 claude-cloud systemd-logind[853]: Session c5305 logged out. Waiting for processes to exit. 2026-06-30T14:56:40.372406-05:00 claude-cloud systemd-logind[853]: Removed session c5305. 2026-06-30T14:56:41.642338-05:00 claude-cloud systemd-logind[853]: New session c5306 of user claude. 2026-06-30T14:56:44.204421-05:00 claude-cloud systemd-logind[853]: Session c5306 logged out. Waiting for processes to exit. 2026-06-30T14:56:44.206550-05:00 claude-cloud systemd-logind[853]: Removed session c5306. 2026-06-30T14:56:46.849801-05:00 claude-cloud systemd-logind[853]: New session c5307 of user claude. 2026-06-30T14:56:46.948430-05:00 claude-cloud systemd-logind[853]: Session c5307 logged out. Waiting for processes to exit. 2026-06-30T14:56:46.958493-05:00 claude-cloud systemd-logind[853]: Removed session c5221. 2026-06-30T14:56:48.155714-05:00 claude-cloud systemd-logind[853]: New session c5308 of user claude. 2026-06-30T14:57:04.576607-05:00 claude-cloud sshd[622334]: Invalid user susie from 2.57.121.112 port 64912 2026-06-30T14:57:04.602602-05:00 claude-cloud sshd[622334]: Connection closed by invalid user susie 2.57.121.112 port 64912 [preauth] 2026-06-30T14:57:23.369621-05:00 claude-cloud sshd[622514]: Connection closed by authenticating user root 27.71.230.31 port 60998 [preauth] 2026-06-30T14:57:37.326554-05:00 claude-cloud sshd[622754]: Invalid user solana from 45.148.10.240 port 39228 2026-06-30T14:57:37.340514-05:00 claude-cloud sshd[622754]: Connection closed by invalid user solana 45.148.10.240 port 39228 [preauth] 2026-06-30T14:58:24.397802-05:00 claude-cloud sshd[623076]: Connection closed by authenticating user www-data 185.242.3.195 port 56202 [preauth] 2026-06-30T14:58:37.704909-05:00 claude-cloud sshd[623114]: Connection closed by authenticating user root 125.20.210.182 port 50850 [preauth] 2026-06-30T14:59:18.434888-05:00 claude-cloud sshd[623235]: Connection closed by 45.148.10.121 port 60004 [preauth] 2026-06-30T14:59:19.709946-05:00 claude-cloud sshd[623237]: Invalid user solana from 45.148.10.240 port 32974 2026-06-30T14:59:19.723680-05:00 claude-cloud sshd[623237]: Connection closed by invalid user solana 45.148.10.240 port 32974 [preauth] 2026-06-30T14:59:47.528553-05:00 claude-cloud systemd-logind[853]: New session c5309 of user claude. 2026-06-30T14:59:47.839583-05:00 claude-cloud systemd-logind[853]: Session c5309 logged out. Waiting for processes to exit. 2026-06-30T14:59:47.842581-05:00 claude-cloud systemd-logind[853]: Removed session c5309. 2026-06-30T15:01:06.579808-05:00 claude-cloud sshd[623548]: Invalid user defi from 45.148.10.240 port 41028 2026-06-30T15:01:06.592079-05:00 claude-cloud sshd[623548]: Connection closed by invalid user defi 45.148.10.240 port 41028 [preauth] 2026-06-30T15:02:48.672856-05:00 claude-cloud sshd[623827]: Invalid user geth from 45.148.10.240 port 56052 2026-06-30T15:02:48.686944-05:00 claude-cloud sshd[623827]: Connection closed by invalid user geth 45.148.10.240 port 56052 [preauth] 2026-06-30T15:04:13.274006-05:00 claude-cloud sshd[623879]: Connection closed by authenticating user root 27.71.230.31 port 38578 [preauth] 2026-06-30T15:04:21.272044-05:00 claude-cloud sshd[624081]: Invalid user ethereum from 45.148.10.240 port 58158 2026-06-30T15:04:21.286100-05:00 claude-cloud sshd[624081]: Connection closed by invalid user ethereum 45.148.10.240 port 58158 [preauth] 2026-06-30T15:04:28.899473-05:00 claude-cloud sshd[624086]: Connection closed by authenticating user root 45.198.224.46 port 48554 [preauth] 2026-06-30T15:04:52.629829-05:00 claude-cloud systemd-logind[853]: New session c5310 of user claude. 2026-06-30T15:04:52.957940-05:00 claude-cloud systemd-logind[853]: Session c5310 logged out. Waiting for processes to exit. 2026-06-30T15:04:52.961041-05:00 claude-cloud systemd-logind[853]: Removed session c5310. 2026-06-30T15:05:01.296588-05:00 claude-cloud CRON[624218]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T15:05:01.303727-05:00 claude-cloud CRON[624218]: pam_unix(cron:session): session closed for user root 2026-06-30T15:05:57.456764-05:00 claude-cloud sshd[624439]: Invalid user eth from 45.148.10.240 port 54236 2026-06-30T15:05:57.470167-05:00 claude-cloud sshd[624439]: Connection closed by invalid user eth 45.148.10.240 port 54236 [preauth] 2026-06-30T15:07:04.659902-05:00 claude-cloud sshd[624601]: Connection closed by authenticating user root 125.20.210.182 port 47818 [preauth] 2026-06-30T15:07:42.524235-05:00 claude-cloud sshd[624705]: Invalid user eth-docker from 45.148.10.240 port 45292 2026-06-30T15:07:42.537773-05:00 claude-cloud sshd[624705]: Connection closed by invalid user eth-docker 45.148.10.240 port 45292 [preauth] 2026-06-30T15:09:02.437754-05:00 claude-cloud sshd[624905]: Connection closed by authenticating user root 27.71.230.31 port 43310 [preauth] 2026-06-30T15:09:27.709110-05:00 claude-cloud sshd[625006]: Invalid user eth from 45.148.10.240 port 60320 2026-06-30T15:09:27.723635-05:00 claude-cloud sshd[625006]: Connection closed by invalid user eth 45.148.10.240 port 60320 [preauth] 2026-06-30T15:09:58.260863-05:00 claude-cloud systemd-logind[853]: New session c5311 of user claude. 2026-06-30T15:09:58.599672-05:00 claude-cloud systemd-logind[853]: Session c5311 logged out. Waiting for processes to exit. 2026-06-30T15:09:58.601872-05:00 claude-cloud systemd-logind[853]: Removed session c5311. 2026-06-30T15:10:53.460758-05:00 claude-cloud sshd[625248]: Invalid user postgres from 14.103.104.36 port 35380 2026-06-30T15:10:53.654921-05:00 claude-cloud sshd[625248]: Received disconnect from 14.103.104.36 port 35380:11: Bye Bye [preauth] 2026-06-30T15:10:53.655094-05:00 claude-cloud sshd[625248]: Disconnected from invalid user postgres 14.103.104.36 port 35380 [preauth] 2026-06-30T15:11:12.251881-05:00 claude-cloud sshd[625301]: Invalid user eth from 45.148.10.240 port 34630 2026-06-30T15:11:12.264839-05:00 claude-cloud sshd[625301]: Connection closed by invalid user eth 45.148.10.240 port 34630 [preauth] 2026-06-30T15:12:06.714023-05:00 claude-cloud sshd[625462]: Received disconnect from 117.62.22.127 port 51118:11: Bye Bye [preauth] 2026-06-30T15:12:06.714502-05:00 claude-cloud sshd[625462]: Disconnected from authenticating user root 117.62.22.127 port 51118 [preauth] 2026-06-30T15:12:59.265770-05:00 claude-cloud sshd[625609]: Invalid user sol from 45.148.10.240 port 34408 2026-06-30T15:12:59.278491-05:00 claude-cloud sshd[625609]: Connection closed by invalid user sol 45.148.10.240 port 34408 [preauth] 2026-06-30T15:14:04.926383-05:00 claude-cloud sshd[625783]: Invalid user testuser from 45.198.224.46 port 54412 2026-06-30T15:14:05.774939-05:00 claude-cloud sshd[625783]: Connection closed by invalid user testuser 45.198.224.46 port 54412 [preauth] 2026-06-30T15:14:30.257075-05:00 claude-cloud sshd[625879]: Invalid user ali from 117.62.22.127 port 43371 2026-06-30T15:14:30.464032-05:00 claude-cloud sshd[625879]: Received disconnect from 117.62.22.127 port 43371:11: Bye Bye [preauth] 2026-06-30T15:14:30.464380-05:00 claude-cloud sshd[625879]: Disconnected from invalid user ali 117.62.22.127 port 43371 [preauth] 2026-06-30T15:14:32.543352-05:00 claude-cloud sshd[625910]: Invalid user admin from 2.57.121.25 port 44594 2026-06-30T15:14:32.568759-05:00 claude-cloud sshd[625910]: Connection closed by invalid user admin 2.57.121.25 port 44594 [preauth] 2026-06-30T15:14:47.745788-05:00 claude-cloud sshd[625948]: Connection closed by authenticating user claude 45.148.10.240 port 58950 [preauth] 2026-06-30T15:14:52.418227-05:00 claude-cloud sshd[625922]: Connection closed by authenticating user root 27.71.230.31 port 49964 [preauth] 2026-06-30T15:15:01.320508-05:00 claude-cloud CRON[625997]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T15:15:01.328559-05:00 claude-cloud CRON[625997]: pam_unix(cron:session): session closed for user root 2026-06-30T15:15:03.357949-05:00 claude-cloud systemd-logind[853]: New session c5312 of user claude. 2026-06-30T15:15:03.727878-05:00 claude-cloud systemd-logind[853]: Session c5312 logged out. Waiting for processes to exit. 2026-06-30T15:15:03.729167-05:00 claude-cloud systemd-logind[853]: Removed session c5312. 2026-06-30T15:15:11.546999-05:00 claude-cloud sshd[626028]: Invalid user sammy from 14.103.104.36 port 46296 2026-06-30T15:15:11.740964-05:00 claude-cloud sshd[626028]: Received disconnect from 14.103.104.36 port 46296:11: Bye Bye [preauth] 2026-06-30T15:15:11.741213-05:00 claude-cloud sshd[626028]: Disconnected from invalid user sammy 14.103.104.36 port 46296 [preauth] 2026-06-30T15:15:11.870995-05:00 claude-cloud sshd[626030]: Invalid user ec2-user from 117.62.22.127 port 50419 2026-06-30T15:15:12.075933-05:00 claude-cloud sshd[626030]: Received disconnect from 117.62.22.127 port 50419:11: Bye Bye [preauth] 2026-06-30T15:15:12.076317-05:00 claude-cloud sshd[626030]: Disconnected from invalid user ec2-user 117.62.22.127 port 50419 [preauth] 2026-06-30T15:15:45.409049-05:00 claude-cloud sshd[626170]: Received disconnect from 50.6.250.47 port 41546:11: Bye Bye [preauth] 2026-06-30T15:15:45.409522-05:00 claude-cloud sshd[626170]: Disconnected from authenticating user root 50.6.250.47 port 41546 [preauth] 2026-06-30T15:16:06.149362-05:00 claude-cloud sshd[626215]: Invalid user admin from 125.20.210.182 port 50856 2026-06-30T15:16:06.467551-05:00 claude-cloud sshd[626215]: Connection closed by invalid user admin 125.20.210.182 port 50856 [preauth] 2026-06-30T15:16:26.191623-05:00 claude-cloud sshd[626309]: Invalid user validator from 45.148.10.240 port 46860 2026-06-30T15:16:26.203748-05:00 claude-cloud sshd[626309]: Connection closed by invalid user validator 45.148.10.240 port 46860 [preauth] 2026-06-30T15:16:27.030820-05:00 claude-cloud sshd[626298]: Invalid user student5 from 14.103.104.36 port 37302 2026-06-30T15:16:28.306162-05:00 claude-cloud sshd[626298]: Received disconnect from 14.103.104.36 port 37302:11: Bye Bye [preauth] 2026-06-30T15:16:28.306501-05:00 claude-cloud sshd[626298]: Disconnected from invalid user student5 14.103.104.36 port 37302 [preauth] 2026-06-30T15:17:01.339240-05:00 claude-cloud CRON[626417]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T15:17:01.348086-05:00 claude-cloud CRON[626417]: pam_unix(cron:session): session closed for user root 2026-06-30T15:17:43.080530-05:00 claude-cloud sshd[626504]: Received disconnect from 14.103.104.36 port 54854:11: Bye Bye [preauth] 2026-06-30T15:17:43.081873-05:00 claude-cloud sshd[626504]: Disconnected from authenticating user root 14.103.104.36 port 54854 [preauth] 2026-06-30T15:18:53.782731-05:00 claude-cloud sshd[626712]: Invalid user ali from 14.103.104.36 port 40652 2026-06-30T15:18:53.990516-05:00 claude-cloud sshd[626712]: Received disconnect from 14.103.104.36 port 40652:11: Bye Bye [preauth] 2026-06-30T15:18:53.990860-05:00 claude-cloud sshd[626712]: Disconnected from invalid user ali 14.103.104.36 port 40652 [preauth] 2026-06-30T15:19:17.619526-05:00 claude-cloud sshd[626783]: Invalid user ali from 123.58.198.35 port 44456 2026-06-30T15:19:17.810417-05:00 claude-cloud sshd[626783]: Received disconnect from 123.58.198.35 port 44456:11: Bye Bye [preauth] 2026-06-30T15:19:17.810854-05:00 claude-cloud sshd[626783]: Disconnected from invalid user ali 123.58.198.35 port 44456 [preauth] 2026-06-30T15:20:09.208810-05:00 claude-cloud systemd-logind[853]: New session c5313 of user claude. 2026-06-30T15:20:09.532747-05:00 claude-cloud sshd[626920]: Connection closed by 14.103.104.36 port 36066 [preauth] 2026-06-30T15:20:09.548136-05:00 claude-cloud systemd-logind[853]: Session c5313 logged out. Waiting for processes to exit. 2026-06-30T15:20:09.551500-05:00 claude-cloud systemd-logind[853]: Removed session c5313. 2026-06-30T15:20:31.625739-05:00 claude-cloud sshd[626986]: Connection closed by authenticating user root 27.71.230.31 port 60708 [preauth] 2026-06-30T15:21:17.821855-05:00 claude-cloud sshd[627172]: Received disconnect from 45.86.86.162 port 46260:11: disconnected by user [preauth] 2026-06-30T15:21:17.822372-05:00 claude-cloud sshd[627172]: Disconnected from authenticating user root 45.86.86.162 port 46260 [preauth] 2026-06-30T15:21:20.689154-05:00 claude-cloud sshd[627168]: Connection closed by 14.103.104.36 port 48742 [preauth] 2026-06-30T15:22:44.267998-05:00 claude-cloud sshd[627425]: Received disconnect from 50.6.250.47 port 55852:11: Bye Bye [preauth] 2026-06-30T15:22:44.268479-05:00 claude-cloud sshd[627425]: Disconnected from authenticating user root 50.6.250.47 port 55852 [preauth] 2026-06-30T15:23:48.094602-05:00 claude-cloud sshd[627601]: Connection closed by authenticating user root 45.198.224.46 port 54454 [preauth] 2026-06-30T15:23:57.585140-05:00 claude-cloud sshd[627635]: Invalid user sammy from 123.58.198.35 port 45734 2026-06-30T15:23:57.776880-05:00 claude-cloud sshd[627635]: Received disconnect from 123.58.198.35 port 45734:11: Bye Bye [preauth] 2026-06-30T15:23:57.777084-05:00 claude-cloud sshd[627635]: Disconnected from invalid user sammy 123.58.198.35 port 45734 [preauth] 2026-06-30T15:24:19.263863-05:00 claude-cloud sshd[627692]: Received disconnect from 50.6.250.47 port 37626:11: Bye Bye [preauth] 2026-06-30T15:24:19.264403-05:00 claude-cloud sshd[627692]: Disconnected from authenticating user root 50.6.250.47 port 37626 [preauth] 2026-06-30T15:24:33.332907-05:00 claude-cloud sshd[627724]: Invalid user user from 125.20.210.182 port 54588 2026-06-30T15:24:33.603882-05:00 claude-cloud sshd[627724]: Connection closed by invalid user user 125.20.210.182 port 54588 [preauth] 2026-06-30T15:24:59.817480-05:00 claude-cloud sshd[627773]: Connection closed by 14.103.104.36 port 53912 [preauth] 2026-06-30T15:25:01.357555-05:00 claude-cloud CRON[627822]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T15:25:01.363950-05:00 claude-cloud CRON[627822]: pam_unix(cron:session): session closed for user root 2026-06-30T15:25:13.973119-05:00 claude-cloud systemd-logind[853]: New session c5314 of user claude. 2026-06-30T15:25:14.345151-05:00 claude-cloud systemd-logind[853]: Session c5314 logged out. Waiting for processes to exit. 2026-06-30T15:25:14.349984-05:00 claude-cloud systemd-logind[853]: Removed session c5314. 2026-06-30T15:25:58.936892-05:00 claude-cloud sshd[627998]: Received disconnect from 50.6.250.47 port 54570:11: Bye Bye [preauth] 2026-06-30T15:25:58.937515-05:00 claude-cloud sshd[627998]: Disconnected from authenticating user root 50.6.250.47 port 54570 [preauth] 2026-06-30T15:26:02.676941-05:00 claude-cloud sshd[628006]: Received disconnect from 123.58.198.35 port 10242:11: Bye Bye [preauth] 2026-06-30T15:26:02.677461-05:00 claude-cloud sshd[628006]: Disconnected from authenticating user root 123.58.198.35 port 10242 [preauth] 2026-06-30T15:26:05.463873-05:00 claude-cloud sshd[628015]: Connection closed by 180.101.149.231 port 59144 2026-06-30T15:26:19.827583-05:00 claude-cloud sshd[628031]: Connection closed by authenticating user root 27.71.230.31 port 58896 [preauth] 2026-06-30T15:27:38.399249-05:00 claude-cloud sshd[628671]: Received disconnect from 50.6.250.47 port 56966:11: Bye Bye [preauth] 2026-06-30T15:27:38.399804-05:00 claude-cloud sshd[628671]: Disconnected from authenticating user root 50.6.250.47 port 56966 [preauth] 2026-06-30T15:27:59.963353-05:00 claude-cloud sshd[628800]: Invalid user student5 from 123.58.198.35 port 58782 2026-06-30T15:28:00.143602-05:00 claude-cloud sshd[628800]: Received disconnect from 123.58.198.35 port 58782:11: Bye Bye [preauth] 2026-06-30T15:28:00.143940-05:00 claude-cloud sshd[628800]: Disconnected from invalid user student5 123.58.198.35 port 58782 [preauth] 2026-06-30T15:28:33.832190-05:00 claude-cloud sshd[628559]: Connection closed by 14.103.104.36 port 33126 [preauth] 2026-06-30T15:29:14.362690-05:00 claude-cloud sshd[629277]: Received disconnect from 50.6.250.47 port 54826:11: Bye Bye [preauth] 2026-06-30T15:29:14.363100-05:00 claude-cloud sshd[629277]: Disconnected from authenticating user root 50.6.250.47 port 54826 [preauth] 2026-06-30T15:29:47.459141-05:00 claude-cloud sshd[629371]: Invalid user sftpuser from 123.58.198.35 port 56472 2026-06-30T15:29:47.656040-05:00 claude-cloud sshd[629371]: Received disconnect from 123.58.198.35 port 56472:11: Bye Bye [preauth] 2026-06-30T15:29:47.656346-05:00 claude-cloud sshd[629371]: Disconnected from invalid user sftpuser 123.58.198.35 port 56472 [preauth] 2026-06-30T15:29:48.725076-05:00 claude-cloud sshd[629370]: Connection closed by 14.103.104.36 port 54740 [preauth] 2026-06-30T15:30:18.878107-05:00 claude-cloud systemd-logind[853]: New session c5315 of user claude. 2026-06-30T15:30:19.228849-05:00 claude-cloud systemd-logind[853]: Session c5315 logged out. Waiting for processes to exit. 2026-06-30T15:30:19.230684-05:00 claude-cloud systemd-logind[853]: Removed session c5315. 2026-06-30T15:30:36.720953-05:00 claude-cloud systemd-logind[853]: New session c5316 of user claude. 2026-06-30T15:30:36.752723-05:00 claude-cloud systemd-logind[853]: Session c5316 logged out. Waiting for processes to exit. 2026-06-30T15:30:36.753867-05:00 claude-cloud systemd-logind[853]: Removed session c5316. 2026-06-30T15:30:44.230448-05:00 claude-cloud sshd[629564]: Invalid user debian from 50.6.250.47 port 40140 2026-06-30T15:30:44.336904-05:00 claude-cloud sshd[629564]: Received disconnect from 50.6.250.47 port 40140:11: Bye Bye [preauth] 2026-06-30T15:30:44.337068-05:00 claude-cloud sshd[629564]: Disconnected from invalid user debian 50.6.250.47 port 40140 [preauth] 2026-06-30T15:31:35.274997-05:00 claude-cloud sshd[629708]: Invalid user postgres from 123.58.198.35 port 35044 2026-06-30T15:31:35.462637-05:00 claude-cloud sshd[629708]: Received disconnect from 123.58.198.35 port 35044:11: Bye Bye [preauth] 2026-06-30T15:31:35.462911-05:00 claude-cloud sshd[629708]: Disconnected from invalid user postgres 123.58.198.35 port 35044 [preauth] 2026-06-30T15:32:14.519131-05:00 claude-cloud sshd[629817]: Received disconnect from 50.6.250.47 port 37072:11: Bye Bye [preauth] 2026-06-30T15:32:14.519952-05:00 claude-cloud sshd[629817]: Disconnected from authenticating user root 50.6.250.47 port 37072 [preauth] 2026-06-30T15:32:37.010805-05:00 claude-cloud sshd[629885]: Connection closed by authenticating user root 125.20.210.182 port 38962 [preauth] 2026-06-30T15:32:56.094220-05:00 claude-cloud sshd[629794]: Connection closed by authenticating user root 27.71.230.31 port 33180 [preauth] 2026-06-30T15:33:25.845136-05:00 claude-cloud sshd[630076]: Invalid user ec2-user from 123.58.198.35 port 32818 2026-06-30T15:33:26.036903-05:00 claude-cloud sshd[630076]: Received disconnect from 123.58.198.35 port 32818:11: Bye Bye [preauth] 2026-06-30T15:33:26.037157-05:00 claude-cloud sshd[630076]: Disconnected from invalid user ec2-user 123.58.198.35 port 32818 [preauth] 2026-06-30T15:33:43.389359-05:00 claude-cloud sshd[630114]: Invalid user butterfly from 45.198.224.46 port 52832 2026-06-30T15:33:44.258873-05:00 claude-cloud sshd[630114]: Connection closed by invalid user butterfly 45.198.224.46 port 52832 [preauth] 2026-06-30T15:33:46.036367-05:00 claude-cloud sshd[630127]: Received disconnect from 50.6.250.47 port 42258:11: Bye Bye [preauth] 2026-06-30T15:33:46.036743-05:00 claude-cloud sshd[630127]: Disconnected from authenticating user root 50.6.250.47 port 42258 [preauth] 2026-06-30T15:35:01.379516-05:00 claude-cloud CRON[630394]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T15:35:01.387500-05:00 claude-cloud CRON[630394]: pam_unix(cron:session): session closed for user root 2026-06-30T15:35:14.372139-05:00 claude-cloud sshd[630455]: Received disconnect from 123.58.198.35 port 41998:11: Bye Bye [preauth] 2026-06-30T15:35:14.372644-05:00 claude-cloud sshd[630455]: Disconnected from authenticating user root 123.58.198.35 port 41998 [preauth] 2026-06-30T15:35:16.193933-05:00 claude-cloud sshd[630464]: Received disconnect from 50.6.250.47 port 50604:11: Bye Bye [preauth] 2026-06-30T15:35:16.194432-05:00 claude-cloud sshd[630464]: Disconnected from authenticating user root 50.6.250.47 port 50604 [preauth] 2026-06-30T15:35:25.446536-05:00 claude-cloud systemd-logind[853]: New session c5317 of user claude. 2026-06-30T15:35:25.783750-05:00 claude-cloud systemd-logind[853]: Session c5317 logged out. Waiting for processes to exit. 2026-06-30T15:35:25.785015-05:00 claude-cloud systemd-logind[853]: Removed session c5317. 2026-06-30T15:36:44.471774-05:00 claude-cloud sshd[630755]: Received disconnect from 50.6.250.47 port 43016:11: Bye Bye [preauth] 2026-06-30T15:36:44.473035-05:00 claude-cloud sshd[630755]: Disconnected from authenticating user root 50.6.250.47 port 43016 [preauth] 2026-06-30T15:37:05.142638-05:00 claude-cloud sshd[630850]: Received disconnect from 123.58.198.35 port 54740:11: Bye Bye [preauth] 2026-06-30T15:37:05.143123-05:00 claude-cloud sshd[630850]: Disconnected from authenticating user root 123.58.198.35 port 54740 [preauth] 2026-06-30T15:37:47.049996-05:00 claude-cloud sshd[630981]: Invalid user admin from 45.148.10.121 port 39590 2026-06-30T15:37:47.064596-05:00 claude-cloud sshd[630981]: Connection closed by invalid user admin 45.148.10.121 port 39590 [preauth] 2026-06-30T15:38:00.404363-05:00 claude-cloud sshd[630983]: Connection closed by authenticating user root 27.71.230.31 port 55894 [preauth] 2026-06-30T15:38:14.754530-05:00 claude-cloud sshd[631055]: Invalid user guest from 50.6.250.47 port 52788 2026-06-30T15:38:14.861460-05:00 claude-cloud sshd[631055]: Received disconnect from 50.6.250.47 port 52788:11: Bye Bye [preauth] 2026-06-30T15:38:14.861803-05:00 claude-cloud sshd[631055]: Disconnected from invalid user guest 50.6.250.47 port 52788 [preauth] 2026-06-30T15:39:02.500672-05:00 claude-cloud sshd[631231]: Received disconnect from 123.58.198.35 port 31558:11: Bye Bye [preauth] 2026-06-30T15:39:02.501156-05:00 claude-cloud sshd[631231]: Disconnected from authenticating user root 123.58.198.35 port 31558 [preauth] 2026-06-30T15:39:51.250507-05:00 claude-cloud sshd[631992]: Received disconnect from 50.6.250.47 port 50526:11: Bye Bye [preauth] 2026-06-30T15:39:51.251802-05:00 claude-cloud sshd[631992]: Disconnected from authenticating user root 50.6.250.47 port 50526 [preauth] 2026-06-30T15:39:51.827062-05:00 claude-cloud sshd[631997]: error: maximum authentication attempts exceeded for root from 185.164.80.171 port 59888 ssh2 [preauth] 2026-06-30T15:39:51.827787-05:00 claude-cloud sshd[631997]: Disconnecting authenticating user root 185.164.80.171 port 59888: Too many authentication failures [preauth] 2026-06-30T15:39:53.683654-05:00 claude-cloud sshd[632008]: error: maximum authentication attempts exceeded for root from 185.164.80.171 port 59986 ssh2 [preauth] 2026-06-30T15:39:53.683993-05:00 claude-cloud sshd[632008]: Disconnecting authenticating user root 185.164.80.171 port 59986: Too many authentication failures [preauth] 2026-06-30T15:39:55.824086-05:00 claude-cloud sshd[632087]: error: maximum authentication attempts exceeded for root from 185.164.80.171 port 60104 ssh2 [preauth] 2026-06-30T15:39:55.824640-05:00 claude-cloud sshd[632087]: Disconnecting authenticating user root 185.164.80.171 port 60104: Too many authentication failures [preauth] 2026-06-30T15:39:57.703147-05:00 claude-cloud sshd[632089]: Received disconnect from 185.164.80.171 port 60242:11: disconnected by user [preauth] 2026-06-30T15:39:57.704948-05:00 claude-cloud sshd[632089]: Disconnected from authenticating user root 185.164.80.171 port 60242 [preauth] 2026-06-30T15:39:59.918440-05:00 claude-cloud sshd[632103]: Invalid user admin from 185.164.80.171 port 60348 2026-06-30T15:40:00.167049-05:00 claude-cloud sshd[632103]: error: maximum authentication attempts exceeded for invalid user admin from 185.164.80.171 port 60348 ssh2 [preauth] 2026-06-30T15:40:00.167367-05:00 claude-cloud sshd[632103]: Disconnecting invalid user admin 185.164.80.171 port 60348: Too many authentication failures [preauth] 2026-06-30T15:40:30.958084-05:00 claude-cloud systemd-logind[853]: New session c5318 of user claude. 2026-06-30T15:40:31.444686-05:00 claude-cloud systemd-logind[853]: Session c5318 logged out. Waiting for processes to exit. 2026-06-30T15:40:31.446363-05:00 claude-cloud systemd-logind[853]: Removed session c5318. 2026-06-30T15:40:45.457758-05:00 claude-cloud sshd[632452]: Invalid user ubnt from 193.46.255.86 port 49432 2026-06-30T15:40:45.483002-05:00 claude-cloud sshd[632452]: Connection closed by invalid user ubnt 193.46.255.86 port 49432 [preauth] 2026-06-30T15:40:59.959542-05:00 claude-cloud sshd[632510]: Invalid user ubuntu from 123.58.198.35 port 16316 2026-06-30T15:41:00.149887-05:00 claude-cloud sshd[632510]: Received disconnect from 123.58.198.35 port 16316:11: Bye Bye [preauth] 2026-06-30T15:41:00.150370-05:00 claude-cloud sshd[632510]: Disconnected from invalid user ubuntu 123.58.198.35 port 16316 [preauth] 2026-06-30T15:41:13.560714-05:00 claude-cloud sshd[632496]: Connection closed by authenticating user root 125.20.210.182 port 36434 [preauth] 2026-06-30T15:41:27.622588-05:00 claude-cloud sshd[632651]: Received disconnect from 50.6.250.47 port 55888:11: Bye Bye [preauth] 2026-06-30T15:41:27.623696-05:00 claude-cloud sshd[632651]: Disconnected from authenticating user root 50.6.250.47 port 55888 [preauth] 2026-06-30T15:42:52.606823-05:00 claude-cloud sshd[632932]: Received disconnect from 123.58.198.35 port 57860:11: Bye Bye [preauth] 2026-06-30T15:42:52.607716-05:00 claude-cloud sshd[632932]: Disconnected from authenticating user root 123.58.198.35 port 57860 [preauth] 2026-06-30T15:42:59.764714-05:00 claude-cloud sshd[632958]: Received disconnect from 50.6.250.47 port 55260:11: Bye Bye [preauth] 2026-06-30T15:42:59.765162-05:00 claude-cloud sshd[632958]: Disconnected from authenticating user root 50.6.250.47 port 55260 [preauth] 2026-06-30T15:43:34.239515-05:00 claude-cloud sshd[633082]: Invalid user oracle from 45.198.224.46 port 48252 2026-06-30T15:43:34.989536-05:00 claude-cloud sshd[633082]: Connection closed by invalid user oracle 45.198.224.46 port 48252 [preauth] 2026-06-30T15:43:52.522006-05:00 claude-cloud sshd[633094]: Connection closed by authenticating user root 27.71.230.31 port 49598 [preauth] 2026-06-30T15:44:10.905108-05:00 claude-cloud sshd[633211]: Received disconnect from 14.103.122.182 port 52686:11: Bye Bye [preauth] 2026-06-30T15:44:10.905801-05:00 claude-cloud sshd[633211]: Disconnected from authenticating user root 14.103.122.182 port 52686 [preauth] 2026-06-30T15:44:48.371864-05:00 claude-cloud sshd[633326]: Invalid user ansible from 123.58.198.35 port 40624 2026-06-30T15:44:48.558988-05:00 claude-cloud sshd[633326]: Received disconnect from 123.58.198.35 port 40624:11: Bye Bye [preauth] 2026-06-30T15:44:48.559522-05:00 claude-cloud sshd[633326]: Disconnected from invalid user ansible 123.58.198.35 port 40624 [preauth] 2026-06-30T15:45:01.404876-05:00 claude-cloud CRON[633371]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T15:45:01.413423-05:00 claude-cloud CRON[633371]: pam_unix(cron:session): session closed for user root 2026-06-30T15:45:36.025755-05:00 claude-cloud systemd-logind[853]: New session c5319 of user claude. 2026-06-30T15:45:36.315073-05:00 claude-cloud systemd-logind[853]: Session c5319 logged out. Waiting for processes to exit. 2026-06-30T15:45:36.317791-05:00 claude-cloud systemd-logind[853]: Removed session c5319. 2026-06-30T15:45:59.036590-05:00 claude-cloud sshd[633550]: Received disconnect from 103.210.21.178 port 43330:11: Bye Bye [preauth] 2026-06-30T15:45:59.036988-05:00 claude-cloud sshd[633550]: Disconnected from authenticating user root 103.210.21.178 port 43330 [preauth] 2026-06-30T15:46:02.489117-05:00 claude-cloud sshd[633293]: Connection closed by 182.44.26.211 port 36564 [preauth] 2026-06-30T15:46:02.841800-05:00 claude-cloud sshd[633565]: Received disconnect from 213.176.16.218 port 44904:11: Bye Bye [preauth] 2026-06-30T15:46:02.842105-05:00 claude-cloud sshd[633565]: Disconnected from authenticating user root 213.176.16.218 port 44904 [preauth] 2026-06-30T15:46:40.297881-05:00 claude-cloud sshd[633684]: Received disconnect from 123.58.198.35 port 30056:11: Bye Bye [preauth] 2026-06-30T15:46:40.298669-05:00 claude-cloud sshd[633684]: Disconnected from authenticating user root 123.58.198.35 port 30056 [preauth] 2026-06-30T15:48:28.177903-05:00 claude-cloud sshd[634986]: Received disconnect from 123.58.198.35 port 47516:11: Bye Bye [preauth] 2026-06-30T15:48:28.178805-05:00 claude-cloud sshd[634986]: Disconnected from authenticating user root 123.58.198.35 port 47516 [preauth] 2026-06-30T15:49:19.194127-05:00 claude-cloud sshd[635211]: Invalid user admin from 125.20.210.182 port 39244 2026-06-30T15:49:19.514092-05:00 claude-cloud sshd[635211]: Connection closed by invalid user admin 125.20.210.182 port 39244 [preauth] 2026-06-30T15:49:52.123020-05:00 claude-cloud sshd[635259]: Connection closed by authenticating user root 27.71.230.31 port 42462 [preauth] 2026-06-30T15:50:41.419431-05:00 claude-cloud systemd-logind[853]: New session c5320 of user claude. 2026-06-30T15:50:41.965982-05:00 claude-cloud systemd-logind[853]: Session c5320 logged out. Waiting for processes to exit. 2026-06-30T15:50:41.982627-05:00 claude-cloud systemd-logind[853]: Removed session c5320. 2026-06-30T15:53:28.760996-05:00 claude-cloud sshd[636092]: Invalid user confluence4 from 45.198.224.46 port 57324 2026-06-30T15:53:29.520063-05:00 claude-cloud sshd[636092]: Connection closed by invalid user confluence4 45.198.224.46 port 57324 [preauth] 2026-06-30T15:53:32.899999-05:00 claude-cloud sshd[636125]: Connection closed by 203.121.106.56 port 45576 [preauth] 2026-06-30T15:55:01.425525-05:00 claude-cloud CRON[636432]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T15:55:01.431207-05:00 claude-cloud CRON[636432]: pam_unix(cron:session): session closed for user root 2026-06-30T15:55:23.762821-05:00 claude-cloud sshd[636449]: Connection closed by authenticating user root 27.71.230.31 port 44150 [preauth] 2026-06-30T15:55:47.036490-05:00 claude-cloud systemd-logind[853]: New session c5321 of user claude. 2026-06-30T15:55:47.357614-05:00 claude-cloud systemd-logind[853]: Session c5321 logged out. Waiting for processes to exit. 2026-06-30T15:55:47.360350-05:00 claude-cloud systemd-logind[853]: Removed session c5321. 2026-06-30T15:57:17.273313-05:00 claude-cloud sshd[637499]: Connection closed by authenticating user root 125.20.210.182 port 41140 [preauth] 2026-06-30T15:58:27.918137-05:00 claude-cloud sshd[638283]: Received disconnect from 103.210.21.178 port 55530:11: Bye Bye [preauth] 2026-06-30T15:58:27.918812-05:00 claude-cloud sshd[638283]: Disconnected from authenticating user root 103.210.21.178 port 55530 [preauth] 2026-06-30T15:59:17.408849-05:00 claude-cloud sshd[638554]: Received disconnect from 213.176.16.218 port 39158:11: Bye Bye [preauth] 2026-06-30T15:59:17.409494-05:00 claude-cloud sshd[638554]: Disconnected from authenticating user root 213.176.16.218 port 39158 [preauth] 2026-06-30T16:00:15.645835-05:00 claude-cloud sshd[638746]: Received disconnect from 103.210.21.178 port 42546:11: Bye Bye [preauth] 2026-06-30T16:00:15.646133-05:00 claude-cloud sshd[638746]: Disconnected from authenticating user root 103.210.21.178 port 42546 [preauth] 2026-06-30T16:00:52.220415-05:00 claude-cloud systemd-logind[853]: New session c5322 of user claude. 2026-06-30T16:00:52.637207-05:00 claude-cloud systemd-logind[853]: Session c5322 logged out. Waiting for processes to exit. 2026-06-30T16:00:52.639388-05:00 claude-cloud systemd-logind[853]: Removed session c5322. 2026-06-30T16:01:10.209026-05:00 claude-cloud sshd[638934]: Connection closed by authenticating user root 27.71.230.31 port 59246 [preauth] 2026-06-30T16:01:37.250557-05:00 claude-cloud sshd[639124]: userauth_pubkey: signature algorithm ssh-dss not in PubkeyAcceptedAlgorithms [preauth] 2026-06-30T16:01:37.293223-05:00 claude-cloud sshd[639124]: Received disconnect from 176.65.131.147 port 8704:11: disconnected by user [preauth] 2026-06-30T16:01:37.293477-05:00 claude-cloud sshd[639124]: Disconnected from authenticating user root 176.65.131.147 port 8704 [preauth] 2026-06-30T16:01:50.817316-05:00 claude-cloud sshd[639178]: Received disconnect from 213.176.16.218 port 44632:11: Bye Bye [preauth] 2026-06-30T16:01:50.817622-05:00 claude-cloud sshd[639178]: Disconnected from authenticating user root 213.176.16.218 port 44632 [preauth] 2026-06-30T16:02:00.433266-05:00 claude-cloud sshd[639214]: Received disconnect from 103.210.21.178 port 47672:11: Bye Bye [preauth] 2026-06-30T16:02:00.433595-05:00 claude-cloud sshd[639214]: Disconnected from authenticating user root 103.210.21.178 port 47672 [preauth] 2026-06-30T16:03:25.288374-05:00 claude-cloud sshd[639777]: Connection closed by authenticating user root 45.198.224.46 port 47196 [preauth] 2026-06-30T16:03:56.445724-05:00 claude-cloud sshd[639929]: Received disconnect from 103.210.21.178 port 42632:11: Bye Bye [preauth] 2026-06-30T16:03:56.446066-05:00 claude-cloud sshd[639929]: Disconnected from authenticating user root 103.210.21.178 port 42632 [preauth] 2026-06-30T16:05:01.443366-05:00 claude-cloud CRON[640255]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T16:05:01.451492-05:00 claude-cloud CRON[640255]: pam_unix(cron:session): session closed for user root 2026-06-30T16:05:51.286058-05:00 claude-cloud sshd[640668]: Received disconnect from 103.210.21.178 port 57340:11: Bye Bye [preauth] 2026-06-30T16:05:51.286936-05:00 claude-cloud sshd[640668]: Disconnected from authenticating user root 103.210.21.178 port 57340 [preauth] 2026-06-30T16:05:57.520250-05:00 claude-cloud systemd-logind[853]: New session c5323 of user claude. 2026-06-30T16:05:57.893455-05:00 claude-cloud systemd-logind[853]: Session c5323 logged out. Waiting for processes to exit. 2026-06-30T16:05:57.894750-05:00 claude-cloud systemd-logind[853]: Removed session c5323. 2026-06-30T16:06:33.190822-05:00 claude-cloud sshd[641093]: Connection closed by authenticating user root 125.20.210.182 port 52114 [preauth] 2026-06-30T16:07:38.282090-05:00 claude-cloud sshd[641744]: Received disconnect from 103.210.21.178 port 59710:11: Bye Bye [preauth] 2026-06-30T16:07:38.283203-05:00 claude-cloud sshd[641744]: Disconnected from authenticating user root 103.210.21.178 port 59710 [preauth] 2026-06-30T16:07:39.425411-05:00 claude-cloud sshd[641774]: Received disconnect from 213.176.16.218 port 38216:11: Bye Bye [preauth] 2026-06-30T16:07:39.425877-05:00 claude-cloud sshd[641774]: Disconnected from authenticating user root 213.176.16.218 port 38216 [preauth] 2026-06-30T16:09:15.229067-05:00 claude-cloud systemd-logind[853]: New session c5324 of user claude. 2026-06-30T16:09:15.255597-05:00 claude-cloud systemd-logind[853]: Session c5324 logged out. Waiting for processes to exit. 2026-06-30T16:09:15.257850-05:00 claude-cloud systemd-logind[853]: Removed session c5324. 2026-06-30T16:09:16.381600-05:00 claude-cloud sshd[643012]: Received disconnect from 103.210.21.178 port 38362:11: Bye Bye [preauth] 2026-06-30T16:09:16.382138-05:00 claude-cloud sshd[643012]: Disconnected from authenticating user root 103.210.21.178 port 38362 [preauth] 2026-06-30T16:10:22.831989-05:00 claude-cloud sshd[644180]: Received disconnect from 213.176.16.218 port 50642:11: Bye Bye [preauth] 2026-06-30T16:10:22.832954-05:00 claude-cloud sshd[644180]: Disconnected from authenticating user root 213.176.16.218 port 50642 [preauth] 2026-06-30T16:11:01.411437-05:00 claude-cloud sshd[644432]: Received disconnect from 103.210.21.178 port 50216:11: Bye Bye [preauth] 2026-06-30T16:11:01.411873-05:00 claude-cloud sshd[644432]: Disconnected from authenticating user root 103.210.21.178 port 50216 [preauth] 2026-06-30T16:11:02.550300-05:00 claude-cloud systemd-logind[853]: New session c5325 of user claude. 2026-06-30T16:11:02.953619-05:00 claude-cloud systemd-logind[853]: Session c5325 logged out. Waiting for processes to exit. 2026-06-30T16:11:02.955486-05:00 claude-cloud systemd-logind[853]: Removed session c5325. 2026-06-30T16:11:25.981089-05:00 claude-cloud sshd[644516]: Invalid user admin from 2.57.121.25 port 38142 2026-06-30T16:11:26.006141-05:00 claude-cloud sshd[644516]: Connection closed by invalid user admin 2.57.121.25 port 38142 [preauth] 2026-06-30T16:12:43.024218-05:00 claude-cloud sshd[645449]: Received disconnect from 103.210.21.178 port 56190:11: Bye Bye [preauth] 2026-06-30T16:12:43.025050-05:00 claude-cloud sshd[645449]: Disconnected from authenticating user root 103.210.21.178 port 56190 [preauth] 2026-06-30T16:12:43.821743-05:00 claude-cloud sshd[645180]: Connection closed by authenticating user root 27.71.230.31 port 39340 [preauth] 2026-06-30T16:12:54.720325-05:00 claude-cloud sshd[645834]: Invalid user tamar from 2.57.121.112 port 47100 2026-06-30T16:12:54.746116-05:00 claude-cloud sshd[645834]: Connection closed by invalid user tamar 2.57.121.112 port 47100 [preauth] 2026-06-30T16:13:09.500899-05:00 claude-cloud sshd[646721]: Received disconnect from 213.176.16.218 port 41802:11: Bye Bye [preauth] 2026-06-30T16:13:09.504089-05:00 claude-cloud sshd[646721]: Disconnected from authenticating user root 213.176.16.218 port 41802 [preauth] 2026-06-30T16:13:12.508876-05:00 claude-cloud sshd[646577]: Connection closed by authenticating user root 45.198.224.46 port 54950 [preauth] 2026-06-30T16:14:21.237542-05:00 claude-cloud sshd[648662]: Received disconnect from 103.210.21.178 port 42042:11: Bye Bye [preauth] 2026-06-30T16:14:21.238137-05:00 claude-cloud sshd[648662]: Disconnected from authenticating user root 103.210.21.178 port 42042 [preauth] 2026-06-30T16:14:33.546142-05:00 claude-cloud sshd[648741]: Connection closed by 14.103.122.182 port 46750 [preauth] 2026-06-30T16:15:01.465648-05:00 claude-cloud CRON[649400]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T16:15:01.474105-05:00 claude-cloud CRON[649400]: pam_unix(cron:session): session closed for user root 2026-06-30T16:15:15.965107-05:00 claude-cloud sshd[649969]: Invalid user postgres from 125.20.210.182 port 39676 2026-06-30T16:15:17.890112-05:00 claude-cloud sshd[649969]: Connection closed by invalid user postgres 125.20.210.182 port 39676 [preauth] 2026-06-30T16:16:04.455796-05:00 claude-cloud sshd[651038]: Received disconnect from 103.210.21.178 port 46088:11: Bye Bye [preauth] 2026-06-30T16:16:04.456266-05:00 claude-cloud sshd[651038]: Disconnected from authenticating user root 103.210.21.178 port 46088 [preauth] 2026-06-30T16:16:08.249975-05:00 claude-cloud systemd-logind[853]: New session c5326 of user claude. 2026-06-30T16:16:08.701636-05:00 claude-cloud systemd-logind[853]: Session c5326 logged out. Waiting for processes to exit. 2026-06-30T16:16:08.703412-05:00 claude-cloud systemd-logind[853]: Removed session c5326. 2026-06-30T16:16:20.137922-05:00 claude-cloud sshd[651573]: Invalid user AdminGPON from 45.148.10.121 port 46644 2026-06-30T16:16:20.151780-05:00 claude-cloud sshd[651573]: Connection closed by invalid user AdminGPON 45.148.10.121 port 46644 [preauth] 2026-06-30T16:17:01.481800-05:00 claude-cloud CRON[652818]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T16:17:01.490730-05:00 claude-cloud CRON[652818]: pam_unix(cron:session): session closed for user root 2026-06-30T16:17:51.569816-05:00 claude-cloud sshd[653299]: Received disconnect from 103.210.21.178 port 46502:11: Bye Bye [preauth] 2026-06-30T16:17:51.570483-05:00 claude-cloud sshd[653299]: Disconnected from authenticating user root 103.210.21.178 port 46502 [preauth] 2026-06-30T16:18:31.633906-05:00 claude-cloud sshd[653508]: Connection closed by authenticating user root 27.71.230.31 port 48506 [preauth] 2026-06-30T16:18:54.704807-05:00 claude-cloud sshd[654112]: Received disconnect from 213.176.16.218 port 58232:11: Bye Bye [preauth] 2026-06-30T16:18:54.705383-05:00 claude-cloud sshd[654112]: Disconnected from authenticating user root 213.176.16.218 port 58232 [preauth] 2026-06-30T16:19:37.127680-05:00 claude-cloud sshd[655003]: Received disconnect from 103.210.21.178 port 60066:11: Bye Bye [preauth] 2026-06-30T16:19:37.128174-05:00 claude-cloud sshd[655003]: Disconnected from authenticating user root 103.210.21.178 port 60066 [preauth] 2026-06-30T16:19:54.555811-05:00 claude-cloud sshd[655083]: Connection closed by 14.103.122.182 port 47508 [preauth] 2026-06-30T16:21:13.163511-05:00 claude-cloud systemd-logind[853]: New session c5327 of user claude. 2026-06-30T16:21:13.684897-05:00 claude-cloud systemd-logind[853]: Session c5327 logged out. Waiting for processes to exit. 2026-06-30T16:21:13.686193-05:00 claude-cloud systemd-logind[853]: Removed session c5327. 2026-06-30T16:21:18.299924-05:00 claude-cloud sshd[656021]: Received disconnect from 103.210.21.178 port 37612:11: Bye Bye [preauth] 2026-06-30T16:21:18.300763-05:00 claude-cloud sshd[656021]: Disconnected from authenticating user root 103.210.21.178 port 37612 [preauth] 2026-06-30T16:22:35.321512-05:00 claude-cloud sshd[658077]: Connection closed by 14.103.122.182 port 38118 [preauth] 2026-06-30T16:23:04.873254-05:00 claude-cloud sshd[658946]: Invalid user test123 from 45.198.224.46 port 38614 2026-06-30T16:23:06.046339-05:00 claude-cloud sshd[658946]: Connection closed by invalid user test123 45.198.224.46 port 38614 [preauth] 2026-06-30T16:23:36.934431-05:00 claude-cloud sshd[659385]: Connection closed by authenticating user root 125.20.210.182 port 41180 [preauth] 2026-06-30T16:24:26.182064-05:00 claude-cloud sshd[659975]: Connection closed by authenticating user root 27.71.230.31 port 32870 [preauth] 2026-06-30T16:24:33.275950-05:00 claude-cloud sshd[660219]: Received disconnect from 213.176.16.218 port 49760:11: Bye Bye [preauth] 2026-06-30T16:24:33.276356-05:00 claude-cloud sshd[660219]: Disconnected from authenticating user root 213.176.16.218 port 49760 [preauth] 2026-06-30T16:25:01.502389-05:00 claude-cloud CRON[660701]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T16:25:01.509357-05:00 claude-cloud CRON[660701]: pam_unix(cron:session): session closed for user root 2026-06-30T16:26:25.297686-05:00 claude-cloud systemd-logind[853]: New session c5328 of user claude. 2026-06-30T16:26:33.171223-05:00 claude-cloud systemd-logind[853]: Session c5328 logged out. Waiting for processes to exit. 2026-06-30T16:26:33.306880-05:00 claude-cloud systemd-logind[853]: Removed session c5328. 2026-06-30T16:29:29.724179-05:00 claude-cloud sshd[663017]: Connection closed by authenticating user root 185.242.3.195 port 53024 [preauth] 2026-06-30T16:29:51.607692-05:00 claude-cloud systemd-logind[853]: Session c5303 logged out. Waiting for processes to exit. 2026-06-30T16:29:51.713653-05:00 claude-cloud systemd-logind[853]: Session c5308 logged out. Waiting for processes to exit. 2026-06-30T16:29:51.878084-05:00 claude-cloud systemd-logind[853]: Removed session c5308. 2026-06-30T16:29:52.012369-05:00 claude-cloud systemd-logind[853]: Removed session c5303. 2026-06-30T16:30:03.738543-05:00 claude-cloud systemd-logind[853]: New session c5329 of user claude. 2026-06-30T16:30:05.649733-05:00 claude-cloud systemd-logind[853]: New session c5330 of user claude. 2026-06-30T16:30:07.235353-05:00 claude-cloud systemd-logind[853]: Session c5330 logged out. Waiting for processes to exit. 2026-06-30T16:30:07.361118-05:00 claude-cloud systemd-logind[853]: Removed session c5330. 2026-06-30T16:30:10.388240-05:00 claude-cloud sshd[663171]: Connection closed by authenticating user root 27.71.230.31 port 60006 [preauth] 2026-06-30T16:30:11.386797-05:00 claude-cloud systemd-logind[853]: New session c5331 of user claude. 2026-06-30T16:30:11.688820-05:00 claude-cloud sshd[663282]: Received disconnect from 213.176.16.218 port 51780:11: Bye Bye [preauth] 2026-06-30T16:30:11.725106-05:00 claude-cloud sshd[663282]: Disconnected from authenticating user root 213.176.16.218 port 51780 [preauth] 2026-06-30T16:30:11.764066-05:00 claude-cloud systemd-logind[853]: Session c5331 logged out. Waiting for processes to exit. 2026-06-30T16:30:11.786573-05:00 claude-cloud systemd-logind[853]: Removed session c5331. 2026-06-30T16:30:14.579505-05:00 claude-cloud systemd-logind[853]: New session c5332 of user claude. 2026-06-30T16:31:32.880438-05:00 claude-cloud sshd[663857]: Invalid user admin from 193.46.255.86 port 7100 2026-06-30T16:31:34.668210-05:00 claude-cloud sshd[663857]: Connection closed by invalid user admin 193.46.255.86 port 7100 [preauth] 2026-06-30T16:31:36.236064-05:00 claude-cloud sshd[663853]: Connection closed by authenticating user root 125.20.210.182 port 41552 [preauth] 2026-06-30T16:32:38.869200-05:00 claude-cloud systemd-logind[853]: Session c5332 logged out. Waiting for processes to exit. 2026-06-30T16:32:38.888237-05:00 claude-cloud systemd-logind[853]: Session c5329 logged out. Waiting for processes to exit. 2026-06-30T16:32:38.891348-05:00 claude-cloud systemd-logind[853]: Removed session c5329. 2026-06-30T16:32:38.901795-05:00 claude-cloud systemd-logind[853]: Removed session c5332. 2026-06-30T16:32:42.636334-05:00 claude-cloud systemd-logind[853]: New session c5333 of user claude. 2026-06-30T16:32:42.700558-05:00 claude-cloud systemd-logind[853]: New session c5334 of user claude. 2026-06-30T16:32:42.885894-05:00 claude-cloud systemd-logind[853]: Session c5333 logged out. Waiting for processes to exit. 2026-06-30T16:32:42.889677-05:00 claude-cloud systemd-logind[853]: Removed session c5333. 2026-06-30T16:32:44.337996-05:00 claude-cloud systemd-logind[853]: New session c5335 of user claude. 2026-06-30T16:32:44.625794-05:00 claude-cloud systemd-logind[853]: Session c5335 logged out. Waiting for processes to exit. 2026-06-30T16:32:44.629435-05:00 claude-cloud systemd-logind[853]: Removed session c5335. 2026-06-30T16:32:46.480084-05:00 claude-cloud systemd-logind[853]: New session c5336 of user claude. 2026-06-30T16:32:54.040611-05:00 claude-cloud sshd[664171]: Invalid user ubuntu from 45.198.224.46 port 56442 2026-06-30T16:32:54.796777-05:00 claude-cloud sshd[664171]: Connection closed by invalid user ubuntu 45.198.224.46 port 56442 [preauth] 2026-06-30T16:33:06.395020-05:00 claude-cloud sshd[664215]: Received disconnect from 213.176.16.218 port 39140:11: Bye Bye [preauth] 2026-06-30T16:33:06.497212-05:00 claude-cloud sshd[664215]: Disconnected from authenticating user root 213.176.16.218 port 39140 [preauth] 2026-06-30T16:33:56.255609-05:00 claude-cloud systemd-logind[853]: Session c5336 logged out. Waiting for processes to exit. 2026-06-30T16:33:56.391950-05:00 claude-cloud systemd-logind[853]: Session c5334 logged out. Waiting for processes to exit. 2026-06-30T16:33:56.649756-05:00 claude-cloud systemd-logind[853]: Removed session c5336. 2026-06-30T16:33:57.260188-05:00 claude-cloud systemd-logind[853]: Removed session c5334. 2026-06-30T16:34:14.455982-05:00 claude-cloud systemd-logind[853]: New session c5337 of user claude. 2026-06-30T16:34:14.474519-05:00 claude-cloud systemd-logind[853]: New session c5338 of user claude. 2026-06-30T16:34:14.527398-05:00 claude-cloud systemd-logind[853]: Session c5337 logged out. Waiting for processes to exit. 2026-06-30T16:34:14.530143-05:00 claude-cloud systemd-logind[853]: Removed session c5337. 2026-06-30T16:34:15.437195-05:00 claude-cloud systemd-logind[853]: New session c5339 of user claude. 2026-06-30T16:34:15.511333-05:00 claude-cloud systemd-logind[853]: Session c5339 logged out. Waiting for processes to exit. 2026-06-30T16:34:15.513618-05:00 claude-cloud systemd-logind[853]: Removed session c5339. 2026-06-30T16:34:16.252910-05:00 claude-cloud systemd-logind[853]: New session c5340 of user claude. 2026-06-30T16:35:01.797288-05:00 claude-cloud CRON[665505]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T16:35:01.810652-05:00 claude-cloud CRON[665505]: pam_unix(cron:session): session closed for user root 2026-06-30T16:35:19.609595-05:00 claude-cloud sshd[665886]: Received disconnect from 62.210.199.83 port 34106:11: disconnected by user [preauth] 2026-06-30T16:35:19.610852-05:00 claude-cloud sshd[665886]: Disconnected from authenticating user root 62.210.199.83 port 34106 [preauth] 2026-06-30T16:35:43.236676-05:00 claude-cloud sshd[666652]: Connection closed by authenticating user root 27.71.230.31 port 58934 [preauth] 2026-06-30T16:36:51.803396-05:00 claude-cloud systemd-logind[853]: New session c5341 of user claude. 2026-06-30T16:36:52.243197-05:00 claude-cloud systemd-logind[853]: Session c5341 logged out. Waiting for processes to exit. 2026-06-30T16:36:52.245146-05:00 claude-cloud systemd-logind[853]: Removed session c5341. 2026-06-30T16:39:19.899194-05:00 claude-cloud sshd[671581]: Invalid user openhabian from 125.20.210.182 port 56044 2026-06-30T16:39:20.785242-05:00 claude-cloud sshd[671581]: Connection closed by invalid user openhabian 125.20.210.182 port 56044 [preauth] 2026-06-30T16:41:44.609324-05:00 claude-cloud sshd[673970]: Connection closed by authenticating user root 27.71.230.31 port 52396 [preauth] 2026-06-30T16:41:56.622570-05:00 claude-cloud systemd-logind[853]: New session c5342 of user claude. 2026-06-30T16:41:56.965645-05:00 claude-cloud systemd-logind[853]: Session c5342 logged out. Waiting for processes to exit. 2026-06-30T16:41:56.968619-05:00 claude-cloud systemd-logind[853]: Removed session c5342. 2026-06-30T16:42:45.297033-05:00 claude-cloud sshd[674998]: Connection closed by authenticating user root 45.198.224.46 port 39872 [preauth] 2026-06-30T16:45:01.821797-05:00 claude-cloud CRON[678143]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T16:45:01.827962-05:00 claude-cloud CRON[678143]: pam_unix(cron:session): session closed for user root 2026-06-30T16:47:01.777540-05:00 claude-cloud systemd-logind[853]: New session c5343 of user claude. 2026-06-30T16:47:02.178530-05:00 claude-cloud systemd-logind[853]: Session c5343 logged out. Waiting for processes to exit. 2026-06-30T16:47:02.180588-05:00 claude-cloud systemd-logind[853]: Removed session c5343. 2026-06-30T16:47:26.046939-05:00 claude-cloud sshd[681632]: Connection closed by authenticating user root 27.71.230.31 port 41352 [preauth] 2026-06-30T16:47:29.487083-05:00 claude-cloud sshd[681541]: Connection closed by authenticating user root 125.20.210.182 port 44086 [preauth] 2026-06-30T16:50:35.769218-05:00 claude-cloud sshd[686149]: Connection closed by authenticating user root 45.148.10.121 port 45386 [preauth] 2026-06-30T16:51:52.288822-05:00 claude-cloud sshd[687116]: Connection closed by 176.32.193.16 port 60023 2026-06-30T16:52:06.675983-05:00 claude-cloud systemd-logind[853]: New session c5344 of user claude. 2026-06-30T16:52:07.020941-05:00 claude-cloud systemd-logind[853]: Session c5344 logged out. Waiting for processes to exit. 2026-06-30T16:52:07.022766-05:00 claude-cloud systemd-logind[853]: Removed session c5344. 2026-06-30T16:52:10.647620-05:00 claude-cloud sshd[687354]: Connection closed by 176.32.193.16 port 57264 2026-06-30T16:52:10.793998-05:00 claude-cloud sshd[687355]: Unable to negotiate with 176.32.193.16 port 57280: no matching host key type found. Their offer: ssh-rsa,ssh-dss [preauth] 2026-06-30T16:52:32.738665-05:00 claude-cloud sshd[687546]: Connection closed by authenticating user root 45.198.224.46 port 44754 [preauth] 2026-06-30T16:53:11.746136-05:00 claude-cloud sshd[687957]: Connection closed by authenticating user root 27.71.230.31 port 41686 [preauth] 2026-06-30T16:55:01.842905-05:00 claude-cloud CRON[690244]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T16:55:01.849104-05:00 claude-cloud CRON[690244]: pam_unix(cron:session): session closed for user root 2026-06-30T16:56:13.302710-05:00 claude-cloud sshd[690773]: Invalid user sshadmin from 125.20.210.182 port 33446 2026-06-30T16:56:14.668529-05:00 claude-cloud sshd[690773]: Connection closed by invalid user sshadmin 125.20.210.182 port 33446 [preauth] 2026-06-30T16:57:11.616835-05:00 claude-cloud systemd-logind[853]: New session c5345 of user claude. 2026-06-30T16:57:11.928290-05:00 claude-cloud systemd-logind[853]: Session c5345 logged out. Waiting for processes to exit. 2026-06-30T16:57:11.931336-05:00 claude-cloud systemd-logind[853]: Removed session c5345. 2026-06-30T16:58:31.004776-05:00 claude-cloud sshd[691503]: userauth_pubkey: signature algorithm ssh-dss not in PubkeyAcceptedAlgorithms [preauth] 2026-06-30T16:58:31.330509-05:00 claude-cloud sshd[691503]: Received disconnect from 209.90.232.71 port 49456:11: disconnected by user [preauth] 2026-06-30T16:58:31.330750-05:00 claude-cloud sshd[691503]: Disconnected from authenticating user root 209.90.232.71 port 49456 [preauth] 2026-06-30T16:59:17.582959-05:00 claude-cloud sshd[691671]: Connection closed by authenticating user root 27.71.230.31 port 58794 [preauth] 2026-06-30T17:02:17.203671-05:00 claude-cloud systemd-logind[853]: New session c5346 of user claude. 2026-06-30T17:02:17.536601-05:00 claude-cloud systemd-logind[853]: Session c5346 logged out. Waiting for processes to exit. 2026-06-30T17:02:17.538787-05:00 claude-cloud systemd-logind[853]: Removed session c5346. 2026-06-30T17:02:17.683362-05:00 claude-cloud sshd[692238]: Connection closed by authenticating user root 45.198.224.46 port 36580 [preauth] 2026-06-30T17:04:23.448414-05:00 claude-cloud sshd[692629]: Connection closed by authenticating user root 125.20.210.182 port 38556 [preauth] 2026-06-30T17:04:42.613361-05:00 claude-cloud sshd[692673]: Connection closed by authenticating user root 27.71.230.31 port 40882 [preauth] 2026-06-30T17:05:01.861052-05:00 claude-cloud CRON[692761]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T17:05:01.868226-05:00 claude-cloud CRON[692761]: pam_unix(cron:session): session closed for user root 2026-06-30T17:07:23.107633-05:00 claude-cloud systemd-logind[853]: New session c5347 of user claude. 2026-06-30T17:07:23.454128-05:00 claude-cloud systemd-logind[853]: Session c5347 logged out. Waiting for processes to exit. 2026-06-30T17:07:23.457468-05:00 claude-cloud systemd-logind[853]: Removed session c5347. 2026-06-30T17:07:31.748658-05:00 claude-cloud sshd[693221]: Invalid user admin from 2.57.121.25 port 49186 2026-06-30T17:07:31.789988-05:00 claude-cloud sshd[693221]: Connection closed by invalid user admin 2.57.121.25 port 49186 [preauth] 2026-06-30T17:12:01.473207-05:00 claude-cloud sshd[694083]: Invalid user test from 45.198.224.46 port 46558 2026-06-30T17:12:02.716137-05:00 claude-cloud sshd[694083]: Connection closed by invalid user test 45.198.224.46 port 46558 [preauth] 2026-06-30T17:12:28.338179-05:00 claude-cloud systemd-logind[853]: New session c5348 of user claude. 2026-06-30T17:12:28.607891-05:00 claude-cloud systemd-logind[853]: Session c5348 logged out. Waiting for processes to exit. 2026-06-30T17:12:28.610397-05:00 claude-cloud systemd-logind[853]: Removed session c5348. 2026-06-30T17:12:44.369108-05:00 claude-cloud sshd[694198]: Invalid user frappe from 125.20.210.182 port 60070 2026-06-30T17:12:44.755753-05:00 claude-cloud sshd[694198]: Connection closed by invalid user frappe 125.20.210.182 port 60070 [preauth] 2026-06-30T17:15:01.879006-05:00 claude-cloud CRON[694642]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T17:15:01.885876-05:00 claude-cloud CRON[694642]: pam_unix(cron:session): session closed for user root 2026-06-30T17:17:01.897717-05:00 claude-cloud CRON[695004]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T17:17:01.905152-05:00 claude-cloud CRON[695004]: pam_unix(cron:session): session closed for user root 2026-06-30T17:17:33.291139-05:00 claude-cloud systemd-logind[853]: New session c5349 of user claude. 2026-06-30T17:17:33.685370-05:00 claude-cloud systemd-logind[853]: Session c5349 logged out. Waiting for processes to exit. 2026-06-30T17:17:33.687157-05:00 claude-cloud systemd-logind[853]: Removed session c5349. 2026-06-30T17:17:51.976027-05:00 claude-cloud sshd[694836]: Connection closed by authenticating user root 27.71.230.31 port 38056 [preauth] 2026-06-30T17:20:37.109090-05:00 claude-cloud sshd[695719]: Invalid user pi from 193.46.255.86 port 31450 2026-06-30T17:20:37.149840-05:00 claude-cloud sshd[695719]: Connection closed by invalid user pi 193.46.255.86 port 31450 [preauth] 2026-06-30T17:20:44.372809-05:00 claude-cloud sshd[695733]: Invalid user huawei from 125.20.210.182 port 55028 2026-06-30T17:20:45.192024-05:00 claude-cloud sshd[695733]: Connection closed by invalid user huawei 125.20.210.182 port 55028 [preauth] 2026-06-30T17:21:45.682745-05:00 claude-cloud sshd[695895]: Connection closed by authenticating user root 45.198.224.46 port 37968 [preauth] 2026-06-30T17:22:16.731665-05:00 claude-cloud sshd[695973]: Connection closed by authenticating user root 27.71.230.31 port 51830 [preauth] 2026-06-30T17:22:39.370132-05:00 claude-cloud systemd-logind[853]: New session c5350 of user claude. 2026-06-30T17:22:39.677008-05:00 claude-cloud systemd-logind[853]: Session c5350 logged out. Waiting for processes to exit. 2026-06-30T17:22:39.679018-05:00 claude-cloud systemd-logind[853]: Removed session c5350. 2026-06-30T17:23:53.588397-05:00 claude-cloud sshd[696324]: Invalid user user from 45.148.10.121 port 36644 2026-06-30T17:23:53.606170-05:00 claude-cloud sshd[696324]: Connection closed by invalid user user 45.148.10.121 port 36644 [preauth] 2026-06-30T17:25:01.916835-05:00 claude-cloud CRON[696526]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T17:25:01.923772-05:00 claude-cloud CRON[696526]: pam_unix(cron:session): session closed for user root 2026-06-30T17:27:01.302186-05:00 claude-cloud sshd[696869]: Invalid user valarie from 2.57.121.112 port 42880 2026-06-30T17:27:01.345570-05:00 claude-cloud sshd[696869]: Connection closed by invalid user valarie 2.57.121.112 port 42880 [preauth] 2026-06-30T17:27:44.867568-05:00 claude-cloud systemd-logind[853]: New session c5351 of user claude. 2026-06-30T17:27:45.168739-05:00 claude-cloud systemd-logind[853]: Session c5351 logged out. Waiting for processes to exit. 2026-06-30T17:27:45.170104-05:00 claude-cloud systemd-logind[853]: Removed session c5351. 2026-06-30T17:29:08.947987-05:00 claude-cloud sshd[697213]: Invalid user ubuntu from 125.20.210.182 port 57962 2026-06-30T17:29:09.805831-05:00 claude-cloud sshd[697213]: Connection closed by invalid user ubuntu 125.20.210.182 port 57962 [preauth] 2026-06-30T17:29:45.142556-05:00 claude-cloud sshd[697278]: Connection closed by authenticating user root 27.71.230.31 port 54642 [preauth] 2026-06-30T17:31:33.866043-05:00 claude-cloud sshd[697768]: Connection closed by authenticating user root 45.198.224.46 port 60876 [preauth] 2026-06-30T17:32:50.245656-05:00 claude-cloud systemd-logind[853]: New session c5352 of user claude. 2026-06-30T17:32:50.606042-05:00 claude-cloud systemd-logind[853]: Session c5352 logged out. Waiting for processes to exit. 2026-06-30T17:32:50.608920-05:00 claude-cloud systemd-logind[853]: Removed session c5352. 2026-06-30T17:35:01.936517-05:00 claude-cloud CRON[698430]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T17:35:01.943395-05:00 claude-cloud CRON[698430]: pam_unix(cron:session): session closed for user root 2026-06-30T17:35:16.994497-05:00 claude-cloud sshd[698406]: Connection closed by authenticating user root 27.71.230.31 port 43794 [preauth] 2026-06-30T17:36:47.366323-05:00 claude-cloud sshd[698707]: Invalid user vyos from 125.20.210.182 port 44158 2026-06-30T17:36:49.311928-05:00 claude-cloud sshd[698707]: Connection closed by invalid user vyos 125.20.210.182 port 44158 [preauth] 2026-06-30T17:37:55.515968-05:00 claude-cloud systemd-logind[853]: New session c5353 of user claude. 2026-06-30T17:37:55.759857-05:00 claude-cloud systemd-logind[853]: Session c5353 logged out. Waiting for processes to exit. 2026-06-30T17:37:55.761195-05:00 claude-cloud systemd-logind[853]: Removed session c5353. 2026-06-30T17:39:09.909484-05:00 claude-cloud sshd[699143]: Connection reset by 205.210.31.105 port 59152 [preauth] 2026-06-30T17:40:59.300864-05:00 claude-cloud sshd[699490]: Connection closed by authenticating user root 27.71.230.31 port 51510 [preauth] 2026-06-30T17:41:14.369179-05:00 claude-cloud sshd[699555]: Received disconnect from 106.37.72.234 port 38092:11: Bye Bye [preauth] 2026-06-30T17:41:14.369706-05:00 claude-cloud sshd[699555]: Disconnected from authenticating user root 106.37.72.234 port 38092 [preauth] 2026-06-30T17:41:26.900494-05:00 claude-cloud sshd[699598]: Connection closed by authenticating user root 45.198.224.46 port 53480 [preauth] 2026-06-30T17:41:33.534039-05:00 claude-cloud sshd[699622]: Received disconnect from 117.20.119.70 port 51026:11: Bye Bye [preauth] 2026-06-30T17:41:33.534905-05:00 claude-cloud sshd[699622]: Disconnected from authenticating user root 117.20.119.70 port 51026 [preauth] 2026-06-30T17:42:39.889626-05:00 claude-cloud sshd[699813]: Invalid user test from 110.53.68.28 port 40451 2026-06-30T17:42:40.084476-05:00 claude-cloud sshd[699813]: Received disconnect from 110.53.68.28 port 40451:11: Bye Bye [preauth] 2026-06-30T17:42:40.084930-05:00 claude-cloud sshd[699813]: Disconnected from invalid user test 110.53.68.28 port 40451 [preauth] 2026-06-30T17:43:00.797726-05:00 claude-cloud systemd-logind[853]: New session c5354 of user claude. 2026-06-30T17:43:01.167569-05:00 claude-cloud systemd-logind[853]: Session c5354 logged out. Waiting for processes to exit. 2026-06-30T17:43:01.170323-05:00 claude-cloud systemd-logind[853]: Removed session c5354. 2026-06-30T17:44:11.446320-05:00 claude-cloud sshd[700111]: Received disconnect from 106.37.72.234 port 43494:11: Bye Bye [preauth] 2026-06-30T17:44:11.447371-05:00 claude-cloud sshd[700111]: Disconnected from authenticating user root 106.37.72.234 port 43494 [preauth] 2026-06-30T17:44:38.636476-05:00 claude-cloud sshd[700194]: Received disconnect from 110.53.68.28 port 48443:11: Bye Bye [preauth] 2026-06-30T17:44:38.637400-05:00 claude-cloud sshd[700194]: Disconnected from authenticating user root 110.53.68.28 port 48443 [preauth] 2026-06-30T17:44:38.651202-05:00 claude-cloud sshd[700185]: Connection closed by authenticating user root 125.20.210.182 port 34274 [preauth] 2026-06-30T17:44:47.503581-05:00 claude-cloud sshd[700222]: Invalid user esuser from 117.34.85.168 port 60202 2026-06-30T17:44:47.686554-05:00 claude-cloud sshd[700222]: Received disconnect from 117.34.85.168 port 60202:11: Bye Bye [preauth] 2026-06-30T17:44:47.686842-05:00 claude-cloud sshd[700222]: Disconnected from invalid user esuser 117.34.85.168 port 60202 [preauth] 2026-06-30T17:45:01.958190-05:00 claude-cloud CRON[700271]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T17:45:01.964925-05:00 claude-cloud CRON[700271]: pam_unix(cron:session): session closed for user root 2026-06-30T17:45:04.870189-05:00 claude-cloud sshd[700281]: Received disconnect from 106.37.72.234 port 57148:11: Bye Bye [preauth] 2026-06-30T17:45:04.870602-05:00 claude-cloud sshd[700281]: Disconnected from authenticating user root 106.37.72.234 port 57148 [preauth] 2026-06-30T17:46:03.375970-05:00 claude-cloud sshd[700451]: Invalid user docker from 106.37.72.234 port 42570 2026-06-30T17:46:03.535212-05:00 claude-cloud sshd[700451]: Received disconnect from 106.37.72.234 port 42570:11: Bye Bye [preauth] 2026-06-30T17:46:03.535711-05:00 claude-cloud sshd[700451]: Disconnected from invalid user docker 106.37.72.234 port 42570 [preauth] 2026-06-30T17:46:16.784847-05:00 claude-cloud sshd[700488]: Received disconnect from 38.76.163.104 port 45280:11: Bye Bye [preauth] 2026-06-30T17:46:16.785461-05:00 claude-cloud sshd[700488]: Disconnected from authenticating user root 38.76.163.104 port 45280 [preauth] 2026-06-30T17:46:19.552192-05:00 claude-cloud sshd[700504]: Received disconnect from 67.71.55.209 port 50894:11: Bye Bye [preauth] 2026-06-30T17:46:19.552806-05:00 claude-cloud sshd[700504]: Disconnected from authenticating user root 67.71.55.209 port 50894 [preauth] 2026-06-30T17:46:35.364525-05:00 claude-cloud sshd[700549]: Received disconnect from 165.154.254.143 port 52252:11: Bye Bye [preauth] 2026-06-30T17:46:35.364809-05:00 claude-cloud sshd[700549]: Disconnected from authenticating user root 165.154.254.143 port 52252 [preauth] 2026-06-30T17:46:39.285266-05:00 claude-cloud sshd[700538]: Connection closed by authenticating user root 27.71.230.31 port 48634 [preauth] 2026-06-30T17:46:48.440093-05:00 claude-cloud sshd[700583]: Received disconnect from 110.53.68.28 port 53271:11: Bye Bye [preauth] 2026-06-30T17:46:48.443056-05:00 claude-cloud sshd[700583]: Disconnected from authenticating user root 110.53.68.28 port 53271 [preauth] 2026-06-30T17:46:56.650383-05:00 claude-cloud sshd[700618]: Received disconnect from 106.37.72.234 port 56224:11: Bye Bye [preauth] 2026-06-30T17:46:56.650920-05:00 claude-cloud sshd[700618]: Disconnected from authenticating user root 106.37.72.234 port 56224 [preauth] 2026-06-30T17:47:23.887496-05:00 claude-cloud sshd[700693]: Received disconnect from 110.53.68.28 port 57157:11: Bye Bye [preauth] 2026-06-30T17:47:23.888428-05:00 claude-cloud sshd[700693]: Disconnected from authenticating user root 110.53.68.28 port 57157 [preauth] 2026-06-30T17:47:46.524720-05:00 claude-cloud sshd[700766]: Received disconnect from 106.37.72.234 port 41646:11: Bye Bye [preauth] 2026-06-30T17:47:46.525136-05:00 claude-cloud sshd[700766]: Disconnected from authenticating user root 106.37.72.234 port 41646 [preauth] 2026-06-30T17:47:58.382343-05:00 claude-cloud sshd[700803]: Received disconnect from 110.53.68.28 port 61016:11: Bye Bye [preauth] 2026-06-30T17:47:58.382558-05:00 claude-cloud sshd[700803]: Disconnected from authenticating user root 110.53.68.28 port 61016 [preauth] 2026-06-30T17:48:05.985324-05:00 claude-cloud systemd-logind[853]: New session c5355 of user claude. 2026-06-30T17:48:06.294004-05:00 claude-cloud systemd-logind[853]: Session c5355 logged out. Waiting for processes to exit. 2026-06-30T17:48:06.296879-05:00 claude-cloud systemd-logind[853]: Removed session c5355. 2026-06-30T17:48:33.418130-05:00 claude-cloud sshd[700912]: Received disconnect from 110.53.68.28 port 65003:11: Bye Bye [preauth] 2026-06-30T17:48:33.418948-05:00 claude-cloud sshd[700912]: Disconnected from authenticating user root 110.53.68.28 port 65003 [preauth] 2026-06-30T17:48:36.249466-05:00 claude-cloud sshd[700921]: Received disconnect from 106.37.72.234 port 55300:11: Bye Bye [preauth] 2026-06-30T17:48:36.249949-05:00 claude-cloud sshd[700921]: Disconnected from authenticating user root 106.37.72.234 port 55300 [preauth] 2026-06-30T17:49:08.573032-05:00 claude-cloud sshd[701002]: Received disconnect from 110.53.68.28 port 4570:11: Bye Bye [preauth] 2026-06-30T17:49:08.573982-05:00 claude-cloud sshd[701002]: Disconnected from authenticating user root 110.53.68.28 port 4570 [preauth] 2026-06-30T17:49:25.304562-05:00 claude-cloud sshd[701059]: Invalid user debian from 106.37.72.234 port 40722 2026-06-30T17:49:25.460598-05:00 claude-cloud sshd[701059]: Received disconnect from 106.37.72.234 port 40722:11: Bye Bye [preauth] 2026-06-30T17:49:25.461034-05:00 claude-cloud sshd[701059]: Disconnected from invalid user debian 106.37.72.234 port 40722 [preauth] 2026-06-30T17:49:40.251393-05:00 claude-cloud sshd[701096]: Invalid user debian from 62.54.176.203 port 40450 2026-06-30T17:49:40.272707-05:00 claude-cloud sshd[701096]: Received disconnect from 62.54.176.203 port 40450:11: Bye Bye [preauth] 2026-06-30T17:49:40.273081-05:00 claude-cloud sshd[701096]: Disconnected from invalid user debian 62.54.176.203 port 40450 [preauth] 2026-06-30T17:49:40.873769-05:00 claude-cloud sshd[701094]: Received disconnect from 110.53.68.28 port 8422:11: Bye Bye [preauth] 2026-06-30T17:49:40.874213-05:00 claude-cloud sshd[701094]: Disconnected from authenticating user root 110.53.68.28 port 8422 [preauth] 2026-06-30T17:50:14.325124-05:00 claude-cloud sshd[701211]: Received disconnect from 106.37.72.234 port 54376:11: Bye Bye [preauth] 2026-06-30T17:50:14.326022-05:00 claude-cloud sshd[701211]: Disconnected from authenticating user root 106.37.72.234 port 54376 [preauth] 2026-06-30T17:50:15.535449-05:00 claude-cloud sshd[701213]: Received disconnect from 110.53.68.28 port 12381:11: Bye Bye [preauth] 2026-06-30T17:50:15.535940-05:00 claude-cloud sshd[701213]: Disconnected from authenticating user root 110.53.68.28 port 12381 [preauth] 2026-06-30T17:50:50.919347-05:00 claude-cloud sshd[701411]: Received disconnect from 110.53.68.28 port 16218:11: Bye Bye [preauth] 2026-06-30T17:50:50.919820-05:00 claude-cloud sshd[701411]: Disconnected from authenticating user root 110.53.68.28 port 16218 [preauth] 2026-06-30T17:51:02.730637-05:00 claude-cloud sshd[701451]: Received disconnect from 106.37.72.234 port 39798:11: Bye Bye [preauth] 2026-06-30T17:51:02.731174-05:00 claude-cloud sshd[701451]: Disconnected from authenticating user root 106.37.72.234 port 39798 [preauth] 2026-06-30T17:51:07.848320-05:00 claude-cloud sshd[701453]: Invalid user suliyilei1 from 45.198.224.46 port 40438 2026-06-30T17:51:08.567419-05:00 claude-cloud sshd[701453]: Connection closed by invalid user suliyilei1 45.198.224.46 port 40438 [preauth] 2026-06-30T17:51:24.799802-05:00 claude-cloud sshd[701515]: Invalid user docker from 110.53.68.28 port 20203 2026-06-30T17:51:24.999634-05:00 claude-cloud sshd[701515]: Received disconnect from 110.53.68.28 port 20203:11: Bye Bye [preauth] 2026-06-30T17:51:25.000011-05:00 claude-cloud sshd[701515]: Disconnected from invalid user docker 110.53.68.28 port 20203 [preauth] 2026-06-30T17:51:43.502968-05:00 claude-cloud sshd[701563]: Invalid user docker from 38.76.163.104 port 40748 2026-06-30T17:51:43.701550-05:00 claude-cloud sshd[701563]: Received disconnect from 38.76.163.104 port 40748:11: Bye Bye [preauth] 2026-06-30T17:51:43.701773-05:00 claude-cloud sshd[701563]: Disconnected from invalid user docker 38.76.163.104 port 40748 [preauth] 2026-06-30T17:51:53.665469-05:00 claude-cloud sshd[701603]: Received disconnect from 106.37.72.234 port 53452:11: Bye Bye [preauth] 2026-06-30T17:51:53.666112-05:00 claude-cloud sshd[701603]: Disconnected from authenticating user root 106.37.72.234 port 53452 [preauth] 2026-06-30T17:51:58.449667-05:00 claude-cloud sshd[701616]: Received disconnect from 110.53.68.28 port 24139:11: Bye Bye [preauth] 2026-06-30T17:51:58.450240-05:00 claude-cloud sshd[701616]: Disconnected from authenticating user root 110.53.68.28 port 24139 [preauth] 2026-06-30T17:52:15.745097-05:00 claude-cloud sshd[701658]: Received disconnect from 67.71.55.209 port 52828:11: Bye Bye [preauth] 2026-06-30T17:52:15.745621-05:00 claude-cloud sshd[701658]: Disconnected from authenticating user root 67.71.55.209 port 52828 [preauth] 2026-06-30T17:52:23.702215-05:00 claude-cloud sshd[701693]: Received disconnect from 165.154.254.143 port 38920:11: Bye Bye [preauth] 2026-06-30T17:52:23.702873-05:00 claude-cloud sshd[701693]: Disconnected from authenticating user root 165.154.254.143 port 38920 [preauth] 2026-06-30T17:52:33.294827-05:00 claude-cloud sshd[701715]: Invalid user debian from 110.53.68.28 port 28122 2026-06-30T17:52:33.541379-05:00 claude-cloud sshd[701715]: Received disconnect from 110.53.68.28 port 28122:11: Bye Bye [preauth] 2026-06-30T17:52:33.541526-05:00 claude-cloud sshd[701715]: Disconnected from invalid user debian 110.53.68.28 port 28122 [preauth] 2026-06-30T17:52:37.269730-05:00 claude-cloud sshd[701724]: Received disconnect from 62.54.176.203 port 55712:11: Bye Bye [preauth] 2026-06-30T17:52:37.270193-05:00 claude-cloud sshd[701724]: Disconnected from authenticating user root 62.54.176.203 port 55712 [preauth] 2026-06-30T17:52:43.838375-05:00 claude-cloud sshd[701698]: Connection closed by authenticating user root 27.71.230.31 port 35624 [preauth] 2026-06-30T17:52:49.629793-05:00 claude-cloud sshd[701779]: Received disconnect from 117.20.119.70 port 59334:11: Bye Bye [preauth] 2026-06-30T17:52:49.630448-05:00 claude-cloud sshd[701779]: Disconnected from authenticating user root 117.20.119.70 port 59334 [preauth] 2026-06-30T17:52:53.088144-05:00 claude-cloud sshd[701793]: Received disconnect from 106.37.72.234 port 38874:11: Bye Bye [preauth] 2026-06-30T17:52:53.088536-05:00 claude-cloud sshd[701793]: Disconnected from authenticating user root 106.37.72.234 port 38874 [preauth] 2026-06-30T17:53:04.627604-05:00 claude-cloud sshd[701805]: Connection closed by authenticating user root 125.20.210.182 port 37090 [preauth] 2026-06-30T17:53:07.003486-05:00 claude-cloud sshd[701826]: Received disconnect from 110.53.68.28 port 32053:11: Bye Bye [preauth] 2026-06-30T17:53:07.003995-05:00 claude-cloud sshd[701826]: Disconnected from authenticating user root 110.53.68.28 port 32053 [preauth] 2026-06-30T17:53:11.955768-05:00 claude-cloud systemd-logind[853]: New session c5356 of user claude. 2026-06-30T17:53:12.287737-05:00 claude-cloud systemd-logind[853]: Session c5356 logged out. Waiting for processes to exit. 2026-06-30T17:53:12.289767-05:00 claude-cloud systemd-logind[853]: Removed session c5356. 2026-06-30T17:53:51.378509-05:00 claude-cloud sshd[701968]: Received disconnect from 38.76.163.104 port 45324:11: Bye Bye [preauth] 2026-06-30T17:53:51.379306-05:00 claude-cloud sshd[701968]: Disconnected from authenticating user root 38.76.163.104 port 45324 [preauth] 2026-06-30T17:53:53.818546-05:00 claude-cloud sshd[701973]: Received disconnect from 110.53.68.28 port 35995:11: Bye Bye [preauth] 2026-06-30T17:53:53.819034-05:00 claude-cloud sshd[701973]: Disconnected from authenticating user root 110.53.68.28 port 35995 [preauth] 2026-06-30T17:54:03.414700-05:00 claude-cloud sshd[701998]: Invalid user docker from 165.154.254.143 port 35094 2026-06-30T17:54:03.601794-05:00 claude-cloud sshd[701998]: Received disconnect from 165.154.254.143 port 35094:11: Bye Bye [preauth] 2026-06-30T17:54:03.601977-05:00 claude-cloud sshd[701998]: Disconnected from invalid user docker 165.154.254.143 port 35094 [preauth] 2026-06-30T17:54:21.140014-05:00 claude-cloud sshd[702058]: Received disconnect from 62.54.176.203 port 46888:11: Bye Bye [preauth] 2026-06-30T17:54:21.140802-05:00 claude-cloud sshd[702058]: Disconnected from authenticating user root 62.54.176.203 port 46888 [preauth] 2026-06-30T17:54:24.561658-05:00 claude-cloud sshd[702063]: Received disconnect from 67.71.55.209 port 34310:11: Bye Bye [preauth] 2026-06-30T17:54:24.562222-05:00 claude-cloud sshd[702063]: Disconnected from authenticating user root 67.71.55.209 port 34310 [preauth] 2026-06-30T17:54:56.381063-05:00 claude-cloud sshd[702173]: Received disconnect from 117.20.119.70 port 54790:11: Bye Bye [preauth] 2026-06-30T17:54:56.381631-05:00 claude-cloud sshd[702173]: Disconnected from authenticating user root 117.20.119.70 port 54790 [preauth] 2026-06-30T17:55:01.978627-05:00 claude-cloud CRON[702189]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T17:55:01.990846-05:00 claude-cloud CRON[702189]: pam_unix(cron:session): session closed for user root 2026-06-30T17:55:38.605893-05:00 claude-cloud sshd[702282]: Received disconnect from 165.154.254.143 port 55380:11: Bye Bye [preauth] 2026-06-30T17:55:38.606363-05:00 claude-cloud sshd[702282]: Disconnected from authenticating user root 165.154.254.143 port 55380 [preauth] 2026-06-30T17:56:04.652960-05:00 claude-cloud sshd[702354]: Invalid user test from 62.54.176.203 port 39668 2026-06-30T17:56:04.713141-05:00 claude-cloud sshd[702354]: Received disconnect from 62.54.176.203 port 39668:11: Bye Bye [preauth] 2026-06-30T17:56:04.713648-05:00 claude-cloud sshd[702354]: Disconnected from invalid user test 62.54.176.203 port 39668 [preauth] 2026-06-30T17:56:27.430219-05:00 claude-cloud sshd[702426]: Received disconnect from 67.71.55.209 port 44034:11: Bye Bye [preauth] 2026-06-30T17:56:27.431064-05:00 claude-cloud sshd[702426]: Disconnected from authenticating user root 67.71.55.209 port 44034 [preauth] 2026-06-30T17:56:35.111103-05:00 claude-cloud sshd[702440]: Connection closed by authenticating user root 45.148.10.121 port 34554 [preauth] 2026-06-30T17:56:59.709770-05:00 claude-cloud sshd[702530]: Received disconnect from 117.20.119.70 port 58750:11: Bye Bye [preauth] 2026-06-30T17:56:59.710112-05:00 claude-cloud sshd[702530]: Disconnected from authenticating user root 117.20.119.70 port 58750 [preauth] 2026-06-30T17:57:09.440504-05:00 claude-cloud sshd[702554]: Received disconnect from 165.154.254.143 port 56192:11: Bye Bye [preauth] 2026-06-30T17:57:09.441074-05:00 claude-cloud sshd[702554]: Disconnected from authenticating user root 165.154.254.143 port 56192 [preauth] 2026-06-30T17:57:43.719558-05:00 claude-cloud sshd[702651]: Received disconnect from 62.54.176.203 port 40030:11: Bye Bye [preauth] 2026-06-30T17:57:43.720442-05:00 claude-cloud sshd[702651]: Disconnected from authenticating user root 62.54.176.203 port 40030 [preauth] 2026-06-30T17:58:32.030957-05:00 claude-cloud sshd[702791]: Received disconnect from 67.71.55.209 port 53766:11: Bye Bye [preauth] 2026-06-30T17:58:32.031532-05:00 claude-cloud sshd[702791]: Disconnected from authenticating user root 67.71.55.209 port 53766 [preauth] 2026-06-30T17:58:39.768054-05:00 claude-cloud sshd[702809]: Received disconnect from 165.154.254.143 port 59018:11: Bye Bye [preauth] 2026-06-30T17:58:39.768373-05:00 claude-cloud sshd[702809]: Disconnected from authenticating user root 165.154.254.143 port 59018 [preauth] 2026-06-30T17:58:53.430998-05:00 claude-cloud sshd[702735]: Connection closed by authenticating user root 27.71.230.31 port 49706 [preauth] 2026-06-30T17:59:09.860749-05:00 claude-cloud sshd[702905]: Received disconnect from 117.20.119.70 port 46840:11: Bye Bye [preauth] 2026-06-30T17:59:09.861165-05:00 claude-cloud sshd[702905]: Disconnected from authenticating user root 117.20.119.70 port 46840 [preauth] 2026-06-30T17:59:17.512348-05:00 claude-cloud systemd-logind[853]: Session c5338 logged out. Waiting for processes to exit. 2026-06-30T17:59:17.513576-05:00 claude-cloud systemd-logind[853]: Session c5340 logged out. Waiting for processes to exit. 2026-06-30T17:59:17.515040-05:00 claude-cloud systemd-logind[853]: Removed session c5338. 2026-06-30T17:59:17.516416-05:00 claude-cloud systemd-logind[853]: Removed session c5340. 2026-06-30T17:59:20.852560-05:00 claude-cloud sshd[702949]: Received disconnect from 62.54.176.203 port 53396:11: Bye Bye [preauth] 2026-06-30T17:59:20.852835-05:00 claude-cloud sshd[702949]: Disconnected from authenticating user root 62.54.176.203 port 53396 [preauth] 2026-06-30T17:59:43.774063-05:00 claude-cloud systemd-logind[853]: New session c5357 of user claude. 2026-06-30T17:59:45.999047-05:00 claude-cloud systemd-logind[853]: New session c5358 of user claude. 2026-06-30T17:59:46.052223-05:00 claude-cloud systemd-logind[853]: Session c5358 logged out. Waiting for processes to exit. 2026-06-30T17:59:46.055467-05:00 claude-cloud systemd-logind[853]: Removed session c5358. 2026-06-30T17:59:55.662105-05:00 claude-cloud systemd-logind[853]: New session c5359 of user claude. 2026-06-30T17:59:55.722449-05:00 claude-cloud systemd-logind[853]: Session c5359 logged out. Waiting for processes to exit. 2026-06-30T17:59:55.725017-05:00 claude-cloud systemd-logind[853]: Removed session c5359. 2026-06-30T18:00:02.442871-05:00 claude-cloud systemd-logind[853]: New session c5360 of user claude. 2026-06-30T18:00:03.886247-05:00 claude-cloud sshd[703130]: Connection closed by authenticating user root 185.242.3.195 port 55778 [preauth] 2026-06-30T18:00:13.073208-05:00 claude-cloud sshd[703144]: Received disconnect from 165.154.254.143 port 49692:11: Bye Bye [preauth] 2026-06-30T18:00:13.073625-05:00 claude-cloud sshd[703144]: Disconnected from authenticating user root 165.154.254.143 port 49692 [preauth] 2026-06-30T18:00:26.447884-05:00 claude-cloud systemd-logind[853]: Session c5360 logged out. Waiting for processes to exit. 2026-06-30T18:00:26.448878-05:00 claude-cloud systemd-logind[853]: Removed session c5360. 2026-06-30T18:00:27.105506-05:00 claude-cloud systemd-logind[853]: Session c5357 logged out. Waiting for processes to exit. 2026-06-30T18:00:27.108356-05:00 claude-cloud systemd-logind[853]: Removed session c5357. 2026-06-30T18:00:38.425738-05:00 claude-cloud sshd[703212]: Invalid user ubuntu from 45.198.224.46 port 57550 2026-06-30T18:00:39.122999-05:00 claude-cloud sshd[703212]: Connection closed by invalid user ubuntu 45.198.224.46 port 57550 [preauth] 2026-06-30T18:00:41.175602-05:00 claude-cloud sshd[703258]: Received disconnect from 67.71.55.209 port 35264:11: Bye Bye [preauth] 2026-06-30T18:00:41.176105-05:00 claude-cloud sshd[703258]: Disconnected from authenticating user root 67.71.55.209 port 35264 [preauth] 2026-06-30T18:00:50.330657-05:00 claude-cloud systemd-logind[853]: New session c5361 of user claude. 2026-06-30T18:00:50.349129-05:00 claude-cloud systemd-logind[853]: New session c5362 of user claude. 2026-06-30T18:00:50.378035-05:00 claude-cloud systemd-logind[853]: Session c5361 logged out. Waiting for processes to exit. 2026-06-30T18:00:50.380763-05:00 claude-cloud systemd-logind[853]: Removed session c5361. 2026-06-30T18:00:56.850125-05:00 claude-cloud systemd-logind[853]: New session c5363 of user claude. 2026-06-30T18:00:56.892538-05:00 claude-cloud systemd-logind[853]: Session c5363 logged out. Waiting for processes to exit. 2026-06-30T18:00:56.895043-05:00 claude-cloud systemd-logind[853]: Removed session c5363. 2026-06-30T18:00:57.796586-05:00 claude-cloud sshd[703428]: Received disconnect from 62.54.176.203 port 39988:11: Bye Bye [preauth] 2026-06-30T18:00:57.797212-05:00 claude-cloud sshd[703428]: Disconnected from authenticating user root 62.54.176.203 port 39988 [preauth] 2026-06-30T18:01:02.046685-05:00 claude-cloud systemd-logind[853]: New session c5364 of user claude. 2026-06-30T18:01:19.523898-05:00 claude-cloud sshd[703493]: Invalid user admin from 125.20.210.182 port 37078 2026-06-30T18:01:19.876764-05:00 claude-cloud sshd[703493]: Connection closed by invalid user admin 125.20.210.182 port 37078 [preauth] 2026-06-30T18:01:25.081973-05:00 claude-cloud systemd-logind[853]: Session c5364 logged out. Waiting for processes to exit. 2026-06-30T18:01:25.085066-05:00 claude-cloud systemd-logind[853]: Session c5362 logged out. Waiting for processes to exit. 2026-06-30T18:01:25.088171-05:00 claude-cloud systemd-logind[853]: Removed session c5364. 2026-06-30T18:01:25.089472-05:00 claude-cloud systemd-logind[853]: Removed session c5362. 2026-06-30T18:01:30.408555-05:00 claude-cloud sshd[703521]: Received disconnect from 117.20.119.70 port 44516:11: Bye Bye [preauth] 2026-06-30T18:01:30.408952-05:00 claude-cloud sshd[703521]: Disconnected from authenticating user root 117.20.119.70 port 44516 [preauth] 2026-06-30T18:01:44.125627-05:00 claude-cloud sshd[703818]: Invalid user test from 165.154.254.143 port 54088 2026-06-30T18:01:44.314661-05:00 claude-cloud sshd[703818]: Received disconnect from 165.154.254.143 port 54088:11: Bye Bye [preauth] 2026-06-30T18:01:44.314890-05:00 claude-cloud sshd[703818]: Disconnected from invalid user test 165.154.254.143 port 54088 [preauth] 2026-06-30T18:01:48.471572-05:00 claude-cloud systemd-logind[853]: New session c5365 of user claude. 2026-06-30T18:01:48.486368-05:00 claude-cloud systemd-logind[853]: New session c5366 of user claude. 2026-06-30T18:01:48.526787-05:00 claude-cloud systemd-logind[853]: Session c5365 logged out. Waiting for processes to exit. 2026-06-30T18:01:48.528701-05:00 claude-cloud systemd-logind[853]: Removed session c5365. 2026-06-30T18:01:49.244106-05:00 claude-cloud sshd[704045]: Invalid user admin from 2.57.121.25 port 61240 2026-06-30T18:01:49.285702-05:00 claude-cloud sshd[704045]: Connection closed by invalid user admin 2.57.121.25 port 61240 [preauth] 2026-06-30T18:02:00.858881-05:00 claude-cloud systemd-logind[853]: New session c5367 of user claude. 2026-06-30T18:02:00.906841-05:00 claude-cloud systemd-logind[853]: Session c5367 logged out. Waiting for processes to exit. 2026-06-30T18:02:00.908507-05:00 claude-cloud systemd-logind[853]: Removed session c5367. 2026-06-30T18:02:15.793721-05:00 claude-cloud systemd-logind[853]: New session c5368 of user claude. 2026-06-30T18:02:31.888866-05:00 claude-cloud sshd[705092]: Received disconnect from 62.54.176.203 port 50744:11: Bye Bye [preauth] 2026-06-30T18:02:31.889491-05:00 claude-cloud sshd[705092]: Disconnected from authenticating user root 62.54.176.203 port 50744 [preauth] 2026-06-30T18:02:41.754639-05:00 claude-cloud sshd[705349]: Received disconnect from 67.71.55.209 port 44984:11: Bye Bye [preauth] 2026-06-30T18:02:41.754957-05:00 claude-cloud sshd[705349]: Disconnected from authenticating user root 67.71.55.209 port 44984 [preauth] 2026-06-30T18:02:47.220081-05:00 claude-cloud systemd-logind[853]: Session c5368 logged out. Waiting for processes to exit. 2026-06-30T18:02:47.224488-05:00 claude-cloud systemd-logind[853]: Session c5366 logged out. Waiting for processes to exit. 2026-06-30T18:02:47.226483-05:00 claude-cloud systemd-logind[853]: Removed session c5368. 2026-06-30T18:02:47.227977-05:00 claude-cloud systemd-logind[853]: Removed session c5366. 2026-06-30T18:03:09.088773-05:00 claude-cloud systemd-logind[853]: New session c5369 of user claude. 2026-06-30T18:03:09.089592-05:00 claude-cloud systemd-logind[853]: New session c5370 of user claude. 2026-06-30T18:03:09.123186-05:00 claude-cloud systemd-logind[853]: Session c5369 logged out. Waiting for processes to exit. 2026-06-30T18:03:09.125071-05:00 claude-cloud systemd-logind[853]: Removed session c5369. 2026-06-30T18:03:10.456677-05:00 claude-cloud sshd[705708]: Received disconnect from 165.154.254.143 port 43862:11: Bye Bye [preauth] 2026-06-30T18:03:10.457078-05:00 claude-cloud sshd[705708]: Disconnected from authenticating user root 165.154.254.143 port 43862 [preauth] 2026-06-30T18:03:15.888417-05:00 claude-cloud systemd-logind[853]: New session c5371 of user claude. 2026-06-30T18:03:15.945045-05:00 claude-cloud systemd-logind[853]: Session c5371 logged out. Waiting for processes to exit. 2026-06-30T18:03:15.947214-05:00 claude-cloud systemd-logind[853]: Removed session c5371. 2026-06-30T18:03:20.391158-05:00 claude-cloud systemd-logind[853]: New session c5372 of user claude. 2026-06-30T18:03:40.414145-05:00 claude-cloud sshd[706316]: Invalid user debian from 117.20.119.70 port 55364 2026-06-30T18:03:40.654587-05:00 claude-cloud sshd[706316]: Received disconnect from 117.20.119.70 port 55364:11: Bye Bye [preauth] 2026-06-30T18:03:40.654976-05:00 claude-cloud sshd[706316]: Disconnected from invalid user debian 117.20.119.70 port 55364 [preauth] 2026-06-30T18:04:06.132054-05:00 claude-cloud sshd[707440]: Received disconnect from 62.54.176.203 port 38058:11: Bye Bye [preauth] 2026-06-30T18:04:06.132504-05:00 claude-cloud sshd[707440]: Disconnected from authenticating user root 62.54.176.203 port 38058 [preauth] 2026-06-30T18:04:24.774480-05:00 claude-cloud sshd[707439]: Connection closed by authenticating user root 27.71.230.31 port 57606 [preauth] 2026-06-30T18:04:39.659481-05:00 claude-cloud sshd[707944]: Received disconnect from 165.154.254.143 port 50218:11: Bye Bye [preauth] 2026-06-30T18:04:39.659964-05:00 claude-cloud sshd[707944]: Disconnected from authenticating user root 165.154.254.143 port 50218 [preauth] 2026-06-30T18:04:44.554126-05:00 claude-cloud sshd[708007]: Received disconnect from 67.71.55.209 port 54710:11: Bye Bye [preauth] 2026-06-30T18:04:44.554459-05:00 claude-cloud sshd[708007]: Disconnected from authenticating user root 67.71.55.209 port 54710 [preauth] 2026-06-30T18:05:02.004120-05:00 claude-cloud CRON[708222]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T18:05:02.012391-05:00 claude-cloud CRON[708222]: pam_unix(cron:session): session closed for user root 2026-06-30T18:05:40.705079-05:00 claude-cloud sshd[708537]: Received disconnect from 62.54.176.203 port 38080:11: Bye Bye [preauth] 2026-06-30T18:05:40.705939-05:00 claude-cloud sshd[708537]: Disconnected from authenticating user root 62.54.176.203 port 38080 [preauth] 2026-06-30T18:05:56.163725-05:00 claude-cloud sshd[708710]: Invalid user docker from 117.20.119.70 port 50624 2026-06-30T18:05:56.396650-05:00 claude-cloud sshd[708710]: Received disconnect from 117.20.119.70 port 50624:11: Bye Bye [preauth] 2026-06-30T18:05:56.396942-05:00 claude-cloud sshd[708710]: Disconnected from invalid user docker 117.20.119.70 port 50624 [preauth] 2026-06-30T18:06:13.032915-05:00 claude-cloud sshd[709183]: Received disconnect from 165.154.254.143 port 60640:11: Bye Bye [preauth] 2026-06-30T18:06:13.033596-05:00 claude-cloud sshd[709183]: Disconnected from authenticating user root 165.154.254.143 port 60640 [preauth] 2026-06-30T18:06:42.023331-05:00 claude-cloud sshd[709495]: Connection closed by 117.34.85.168 port 44728 [preauth] 2026-06-30T18:06:48.973532-05:00 claude-cloud sshd[710200]: Received disconnect from 67.71.55.209 port 36204:11: Bye Bye [preauth] 2026-06-30T18:06:48.973934-05:00 claude-cloud sshd[710200]: Disconnected from authenticating user root 67.71.55.209 port 36204 [preauth] 2026-06-30T18:07:17.645020-05:00 claude-cloud sshd[710778]: Invalid user docker from 62.54.176.203 port 50494 2026-06-30T18:07:17.665059-05:00 claude-cloud sshd[710778]: Received disconnect from 62.54.176.203 port 50494:11: Bye Bye [preauth] 2026-06-30T18:07:17.665615-05:00 claude-cloud sshd[710778]: Disconnected from invalid user docker 62.54.176.203 port 50494 [preauth] 2026-06-30T18:07:45.953612-05:00 claude-cloud sshd[711140]: Invalid user debian from 165.154.254.143 port 54792 2026-06-30T18:07:46.128137-05:00 claude-cloud sshd[711140]: Received disconnect from 165.154.254.143 port 54792:11: Bye Bye [preauth] 2026-06-30T18:07:46.128468-05:00 claude-cloud sshd[711140]: Disconnected from invalid user debian 165.154.254.143 port 54792 [preauth] 2026-06-30T18:07:57.976984-05:00 claude-cloud sshd[711306]: Invalid user admin from 193.46.255.86 port 16830 2026-06-30T18:07:58.016611-05:00 claude-cloud sshd[711306]: Connection closed by invalid user admin 193.46.255.86 port 16830 [preauth] 2026-06-30T18:08:12.301053-05:00 claude-cloud sshd[712000]: Received disconnect from 117.20.119.70 port 58812:11: Bye Bye [preauth] 2026-06-30T18:08:12.301739-05:00 claude-cloud sshd[712000]: Disconnected from authenticating user root 117.20.119.70 port 58812 [preauth] 2026-06-30T18:08:50.136732-05:00 claude-cloud sshd[712583]: Received disconnect from 67.71.55.209 port 45918:11: Bye Bye [preauth] 2026-06-30T18:08:50.137394-05:00 claude-cloud sshd[712583]: Disconnected from authenticating user root 67.71.55.209 port 45918 [preauth] 2026-06-30T18:08:56.176058-05:00 claude-cloud sshd[712644]: Received disconnect from 62.54.176.203 port 38882:11: Bye Bye [preauth] 2026-06-30T18:08:56.176753-05:00 claude-cloud sshd[712644]: Disconnected from authenticating user root 62.54.176.203 port 38882 [preauth] 2026-06-30T18:09:16.943215-05:00 claude-cloud sshd[712961]: Received disconnect from 165.154.254.143 port 57222:11: Bye Bye [preauth] 2026-06-30T18:09:16.943930-05:00 claude-cloud sshd[712961]: Disconnected from authenticating user root 165.154.254.143 port 57222 [preauth] 2026-06-30T18:10:00.437172-05:00 claude-cloud sshd[713544]: Connection closed by authenticating user root 27.71.230.31 port 37862 [preauth] 2026-06-30T18:10:07.820838-05:00 claude-cloud sshd[713997]: Invalid user p from 125.20.210.182 port 47466 2026-06-30T18:10:08.110529-05:00 claude-cloud sshd[713997]: Connection closed by invalid user p 125.20.210.182 port 47466 [preauth] 2026-06-30T18:10:11.187095-05:00 claude-cloud sshd[714042]: Invalid user ruili from 45.198.224.46 port 41460 2026-06-30T18:10:11.854094-05:00 claude-cloud sshd[714042]: Connection closed by invalid user ruili 45.198.224.46 port 41460 [preauth] 2026-06-30T18:10:27.634235-05:00 claude-cloud sshd[714497]: Received disconnect from 117.20.119.70 port 46052:11: Bye Bye [preauth] 2026-06-30T18:10:27.635169-05:00 claude-cloud sshd[714497]: Disconnected from authenticating user root 117.20.119.70 port 46052 [preauth] 2026-06-30T18:10:33.812637-05:00 claude-cloud sshd[714601]: Received disconnect from 62.54.176.203 port 46016:11: Bye Bye [preauth] 2026-06-30T18:10:33.813069-05:00 claude-cloud sshd[714601]: Disconnected from authenticating user root 62.54.176.203 port 46016 [preauth] 2026-06-30T18:10:48.458383-05:00 claude-cloud sshd[714838]: Received disconnect from 165.154.254.143 port 43952:11: Bye Bye [preauth] 2026-06-30T18:10:48.458776-05:00 claude-cloud sshd[714838]: Disconnected from authenticating user root 165.154.254.143 port 43952 [preauth] 2026-06-30T18:10:54.026137-05:00 claude-cloud sshd[714907]: Received disconnect from 67.71.55.209 port 55638:11: Bye Bye [preauth] 2026-06-30T18:10:54.026865-05:00 claude-cloud sshd[714907]: Disconnected from authenticating user root 67.71.55.209 port 55638 [preauth] 2026-06-30T18:12:17.985979-05:00 claude-cloud sshd[715683]: Received disconnect from 62.54.176.203 port 59880:11: Bye Bye [preauth] 2026-06-30T18:12:17.986625-05:00 claude-cloud sshd[715683]: Disconnected from authenticating user root 62.54.176.203 port 59880 [preauth] 2026-06-30T18:12:25.934232-05:00 claude-cloud sshd[715783]: Received disconnect from 165.154.254.143 port 60350:11: Bye Bye [preauth] 2026-06-30T18:12:25.934535-05:00 claude-cloud sshd[715783]: Disconnected from authenticating user root 165.154.254.143 port 60350 [preauth] 2026-06-30T18:12:47.318578-05:00 claude-cloud sshd[715975]: Received disconnect from 117.20.119.70 port 57218:11: Bye Bye [preauth] 2026-06-30T18:12:47.319025-05:00 claude-cloud sshd[715975]: Disconnected from authenticating user root 117.20.119.70 port 57218 [preauth] 2026-06-30T18:13:11.871732-05:00 claude-cloud sshd[716256]: Received disconnect from 67.71.55.209 port 37152:11: Bye Bye [preauth] 2026-06-30T18:13:11.872081-05:00 claude-cloud sshd[716256]: Disconnected from authenticating user root 67.71.55.209 port 37152 [preauth] 2026-06-30T18:13:57.310855-05:00 claude-cloud sshd[717638]: Received disconnect from 62.54.176.203 port 45946:11: Bye Bye [preauth] 2026-06-30T18:13:57.314699-05:00 claude-cloud sshd[717638]: Disconnected from authenticating user root 62.54.176.203 port 45946 [preauth] 2026-06-30T18:15:01.032623-05:00 claude-cloud CRON[718888]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T18:15:01.040621-05:00 claude-cloud CRON[718888]: pam_unix(cron:session): session closed for user root 2026-06-30T18:15:02.460461-05:00 claude-cloud sshd[718891]: Invalid user test from 117.20.119.70 port 47610 2026-06-30T18:15:02.694830-05:00 claude-cloud sshd[718891]: Received disconnect from 117.20.119.70 port 47610:11: Bye Bye [preauth] 2026-06-30T18:15:02.695019-05:00 claude-cloud sshd[718891]: Disconnected from invalid user test 117.20.119.70 port 47610 [preauth] 2026-06-30T18:15:11.246239-05:00 claude-cloud sshd[719208]: Connection closed by 45.148.10.183 port 48840 2026-06-30T18:15:15.074845-05:00 claude-cloud sshd[719228]: Received disconnect from 67.71.55.209 port 46880:11: Bye Bye [preauth] 2026-06-30T18:15:15.075254-05:00 claude-cloud sshd[719228]: Disconnected from authenticating user root 67.71.55.209 port 46880 [preauth] 2026-06-30T18:15:48.284623-05:00 claude-cloud sshd[719288]: Connection closed by authenticating user root 27.71.230.31 port 53544 [preauth] 2026-06-30T18:17:01.048727-05:00 claude-cloud CRON[720137]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T18:17:01.054268-05:00 claude-cloud CRON[720137]: pam_unix(cron:session): session closed for user root 2026-06-30T18:17:17.059085-05:00 claude-cloud sshd[720268]: Received disconnect from 117.20.119.70 port 38072:11: Bye Bye [preauth] 2026-06-30T18:17:17.059576-05:00 claude-cloud sshd[720268]: Disconnected from authenticating user root 117.20.119.70 port 38072 [preauth] 2026-06-30T18:17:19.947506-05:00 claude-cloud sshd[720352]: Invalid user test from 67.71.55.209 port 56600 2026-06-30T18:17:20.077549-05:00 claude-cloud sshd[720352]: Received disconnect from 67.71.55.209 port 56600:11: Bye Bye [preauth] 2026-06-30T18:17:20.077816-05:00 claude-cloud sshd[720352]: Disconnected from invalid user test 67.71.55.209 port 56600 [preauth] 2026-06-30T18:17:42.679136-05:00 claude-cloud sshd[720539]: Received disconnect from 38.76.163.104 port 49056:11: Bye Bye [preauth] 2026-06-30T18:17:42.679844-05:00 claude-cloud sshd[720539]: Disconnected from authenticating user root 38.76.163.104 port 49056 [preauth] 2026-06-30T18:18:19.096447-05:00 claude-cloud sshd[720942]: Invalid user sol from 45.148.10.183 port 36400 2026-06-30T18:18:19.190220-05:00 claude-cloud sshd[720942]: Connection closed by invalid user sol 45.148.10.183 port 36400 [preauth] 2026-06-30T18:18:22.330380-05:00 claude-cloud sshd[720966]: Connection closed by authenticating user root 125.20.210.182 port 38920 [preauth] 2026-06-30T18:18:26.116612-05:00 claude-cloud sshd[721115]: userauth_pubkey: signature algorithm ssh-dss not in PubkeyAcceptedAlgorithms [preauth] 2026-06-30T18:18:26.278667-05:00 claude-cloud sshd[721115]: Received disconnect from 31.42.184.158 port 39834:11: disconnected by user [preauth] 2026-06-30T18:18:26.279123-05:00 claude-cloud sshd[721115]: Disconnected from authenticating user root 31.42.184.158 port 39834 [preauth] 2026-06-30T18:19:25.557670-05:00 claude-cloud sshd[721883]: Received disconnect from 67.71.55.209 port 38100:11: Bye Bye [preauth] 2026-06-30T18:19:25.558264-05:00 claude-cloud sshd[721883]: Disconnected from authenticating user root 67.71.55.209 port 38100 [preauth] 2026-06-30T18:19:34.559158-05:00 claude-cloud sshd[722346]: Received disconnect from 117.20.119.70 port 54058:11: Bye Bye [preauth] 2026-06-30T18:19:34.559573-05:00 claude-cloud sshd[722346]: Disconnected from authenticating user root 117.20.119.70 port 54058 [preauth] 2026-06-30T18:19:55.582617-05:00 claude-cloud sshd[722553]: Connection closed by authenticating user root 45.198.224.46 port 58078 [preauth] 2026-06-30T18:21:19.579987-05:00 claude-cloud sshd[723628]: Connection closed by authenticating user root 27.71.230.31 port 52370 [preauth] 2026-06-30T18:21:29.291193-05:00 claude-cloud sshd[723748]: Received disconnect from 38.76.163.104 port 53624:11: Bye Bye [preauth] 2026-06-30T18:21:29.291502-05:00 claude-cloud sshd[723748]: Disconnected from 38.76.163.104 port 53624 [preauth] 2026-06-30T18:21:44.693548-05:00 claude-cloud sshd[724058]: Invalid user solana from 45.148.10.183 port 44108 2026-06-30T18:21:44.707552-05:00 claude-cloud sshd[724058]: Connection closed by invalid user solana 45.148.10.183 port 44108 [preauth] 2026-06-30T18:21:48.877014-05:00 claude-cloud sshd[724097]: Received disconnect from 117.20.119.70 port 37074:11: Bye Bye [preauth] 2026-06-30T18:21:48.877767-05:00 claude-cloud sshd[724097]: Disconnected from authenticating user root 117.20.119.70 port 37074 [preauth] 2026-06-30T18:24:48.793081-05:00 claude-cloud sshd[726791]: Invalid user solana from 45.148.10.183 port 56664 2026-06-30T18:24:48.806562-05:00 claude-cloud sshd[726791]: Connection closed by invalid user solana 45.148.10.183 port 56664 [preauth] 2026-06-30T18:24:54.889857-05:00 claude-cloud sshd[727082]: Received disconnect from 38.76.163.104 port 58190:11: Bye Bye [preauth] 2026-06-30T18:24:54.890089-05:00 claude-cloud sshd[727082]: Disconnected from authenticating user root 38.76.163.104 port 58190 [preauth] 2026-06-30T18:25:01.067062-05:00 claude-cloud CRON[727299]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T18:25:01.074469-05:00 claude-cloud CRON[727299]: pam_unix(cron:session): session closed for user root 2026-06-30T18:26:09.638677-05:00 claude-cloud sshd[728173]: Invalid user public from 125.20.210.182 port 50064 2026-06-30T18:26:12.046217-05:00 claude-cloud sshd[728173]: Connection closed by invalid user public 125.20.210.182 port 50064 [preauth] 2026-06-30T18:27:17.318186-05:00 claude-cloud sshd[729106]: Connection closed by authenticating user root 27.71.230.31 port 46016 [preauth] 2026-06-30T18:28:19.004615-05:00 claude-cloud sshd[730127]: Invalid user sol from 45.148.10.183 port 37752 2026-06-30T18:28:19.018912-05:00 claude-cloud sshd[730127]: Connection closed by invalid user sol 45.148.10.183 port 37752 [preauth] 2026-06-30T18:28:28.894360-05:00 claude-cloud sshd[730248]: Invalid user debian from 38.76.163.104 port 34526 2026-06-30T18:28:29.095113-05:00 claude-cloud sshd[730248]: Received disconnect from 38.76.163.104 port 34526:11: Bye Bye [preauth] 2026-06-30T18:28:29.095556-05:00 claude-cloud sshd[730248]: Disconnected from invalid user debian 38.76.163.104 port 34526 [preauth] 2026-06-30T18:28:46.754915-05:00 claude-cloud sshd[730350]: Invalid user ubnt from 45.148.10.121 port 60064 2026-06-30T18:28:46.768731-05:00 claude-cloud sshd[730350]: Connection closed by invalid user ubnt 45.148.10.121 port 60064 [preauth] 2026-06-30T18:29:21.036892-05:00 claude-cloud sshd[730602]: Connection closed by authenticating user root 45.198.224.46 port 53296 [preauth] 2026-06-30T18:31:17.050650-05:00 claude-cloud sshd[731835]: Invalid user sol from 45.148.10.183 port 41468 2026-06-30T18:31:17.063714-05:00 claude-cloud sshd[731835]: Connection closed by invalid user sol 45.148.10.183 port 41468 [preauth] 2026-06-30T18:32:18.681894-05:00 claude-cloud systemd-logind[853]: Session c5370 logged out. Waiting for processes to exit. 2026-06-30T18:32:18.682816-05:00 claude-cloud systemd-logind[853]: Session c5372 logged out. Waiting for processes to exit. 2026-06-30T18:32:18.685627-05:00 claude-cloud systemd-logind[853]: Removed session c5370. 2026-06-30T18:32:18.687989-05:00 claude-cloud systemd-logind[853]: Removed session c5372. 2026-06-30T18:33:06.810191-05:00 claude-cloud sshd[733239]: Connection closed by authenticating user root 27.71.230.31 port 60320 [preauth] 2026-06-30T18:34:24.558337-05:00 claude-cloud sshd[734175]: Invalid user sol from 45.148.10.183 port 51916 2026-06-30T18:34:24.572430-05:00 claude-cloud sshd[734175]: Connection closed by invalid user sol 45.148.10.183 port 51916 [preauth] 2026-06-30T18:34:25.624908-05:00 claude-cloud sshd[734163]: Invalid user debian from 125.20.210.182 port 45478 2026-06-30T18:34:26.871024-05:00 claude-cloud sshd[734163]: Connection closed by invalid user debian 125.20.210.182 port 45478 [preauth] 2026-06-30T18:35:01.094582-05:00 claude-cloud CRON[734293]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T18:35:01.101365-05:00 claude-cloud CRON[734293]: pam_unix(cron:session): session closed for user root 2026-06-30T18:37:12.606554-05:00 claude-cloud sshd[734643]: Invalid user solana from 45.148.10.183 port 34556 2026-06-30T18:37:12.620941-05:00 claude-cloud sshd[734643]: Connection closed by invalid user solana 45.148.10.183 port 34556 [preauth] 2026-06-30T18:38:45.065392-05:00 claude-cloud sshd[735710]: Connection closed by authenticating user root 27.71.230.31 port 60748 [preauth] 2026-06-30T18:38:54.669702-05:00 claude-cloud sshd[736114]: Invalid user zhangwei2 from 45.198.224.46 port 55970 2026-06-30T18:38:55.255576-05:00 claude-cloud sshd[736114]: Connection closed by invalid user zhangwei2 45.198.224.46 port 55970 [preauth] 2026-06-30T18:39:13.811719-05:00 claude-cloud sshd[736325]: Invalid user arian from 2.57.121.112 port 63010 2026-06-30T18:39:13.854124-05:00 claude-cloud sshd[736325]: Connection closed by invalid user arian 2.57.121.112 port 63010 [preauth] 2026-06-30T18:40:20.905882-05:00 claude-cloud sshd[737606]: Invalid user solana from 45.148.10.183 port 36418 2026-06-30T18:40:20.920188-05:00 claude-cloud sshd[737606]: Connection closed by invalid user solana 45.148.10.183 port 36418 [preauth] 2026-06-30T18:42:44.285842-05:00 claude-cloud sshd[738354]: Connection closed by authenticating user root 125.20.210.182 port 42764 [preauth] 2026-06-30T18:43:35.212559-05:00 claude-cloud sshd[738507]: Invalid user solana from 45.148.10.183 port 53602 2026-06-30T18:43:35.228012-05:00 claude-cloud sshd[738507]: Connection closed by invalid user solana 45.148.10.183 port 53602 [preauth] 2026-06-30T18:44:32.728993-05:00 claude-cloud sshd[738758]: Connection closed by authenticating user root 27.71.230.31 port 40556 [preauth] 2026-06-30T18:44:38.292873-05:00 claude-cloud sshd[738871]: userauth_pubkey: signature algorithm ssh-dss not in PubkeyAcceptedAlgorithms [preauth] 2026-06-30T18:44:38.387786-05:00 claude-cloud sshd[738871]: Received disconnect from 64.31.53.170 port 51720:11: disconnected by user [preauth] 2026-06-30T18:44:38.388058-05:00 claude-cloud sshd[738871]: Disconnected from authenticating user root 64.31.53.170 port 51720 [preauth] 2026-06-30T18:45:01.120525-05:00 claude-cloud CRON[738938]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T18:45:01.127532-05:00 claude-cloud CRON[738938]: pam_unix(cron:session): session closed for user root 2026-06-30T18:46:38.470190-05:00 claude-cloud sshd[739215]: Invalid user sol from 45.148.10.183 port 42586 2026-06-30T18:46:38.483630-05:00 claude-cloud sshd[739215]: Connection closed by invalid user sol 45.148.10.183 port 42586 [preauth] 2026-06-30T18:48:32.386594-05:00 claude-cloud sshd[739574]: Connection closed by authenticating user root 45.198.224.46 port 52048 [preauth] 2026-06-30T18:49:49.942804-05:00 claude-cloud sshd[739835]: Invalid user sol from 45.148.10.183 port 41360 2026-06-30T18:49:49.955892-05:00 claude-cloud sshd[739835]: Connection closed by invalid user sol 45.148.10.183 port 41360 [preauth] 2026-06-30T18:50:04.937368-05:00 claude-cloud systemd-logind[853]: New session c5373 of user claude. 2026-06-30T18:50:04.970937-05:00 claude-cloud systemd-logind[853]: Session c5373 logged out. Waiting for processes to exit. 2026-06-30T18:50:04.972798-05:00 claude-cloud systemd-logind[853]: Removed session c5373. 2026-06-30T18:50:06.146847-05:00 claude-cloud systemd-logind[853]: New session c5374 of user claude. 2026-06-30T18:50:06.172881-05:00 claude-cloud systemd-logind[853]: Session c5374 logged out. Waiting for processes to exit. 2026-06-30T18:50:06.174458-05:00 claude-cloud systemd-logind[853]: Removed session c5374. 2026-06-30T18:50:13.800339-05:00 claude-cloud sshd[739882]: Connection closed by authenticating user root 27.71.230.31 port 56956 [preauth] 2026-06-30T18:50:44.529195-05:00 claude-cloud sshd[740126]: Invalid user steam from 125.20.210.182 port 39792 2026-06-30T18:50:44.813684-05:00 claude-cloud sshd[740126]: Connection closed by invalid user steam 125.20.210.182 port 39792 [preauth] 2026-06-30T18:52:43.289753-05:00 claude-cloud systemd-logind[853]: New session c5375 of user claude. 2026-06-30T18:52:43.335777-05:00 claude-cloud systemd-logind[853]: Session c5375 logged out. Waiting for processes to exit. 2026-06-30T18:52:43.337901-05:00 claude-cloud systemd-logind[853]: Removed session c5375. 2026-06-30T18:52:44.845909-05:00 claude-cloud systemd-logind[853]: New session c5376 of user claude. 2026-06-30T18:52:44.882757-05:00 claude-cloud systemd-logind[853]: Session c5376 logged out. Waiting for processes to exit. 2026-06-30T18:52:44.884808-05:00 claude-cloud systemd-logind[853]: Removed session c5376. 2026-06-30T18:52:46.280819-05:00 claude-cloud sshd[740570]: Accepted publickey for claude from 104.189.115.46 port 64052 ssh2: ED25519 SHA256:zL06FyFNS5Fmvhoc+jYXcch3IeQts0ckk+VDgUYLY7Y 2026-06-30T18:52:46.287878-05:00 claude-cloud sshd[740570]: pam_unix(sshd:session): session opened for user claude(uid=1000) by claude(uid=0) 2026-06-30T18:52:46.297856-05:00 claude-cloud systemd-logind[853]: New session 2549 of user claude. 2026-06-30T18:52:47.858799-05:00 claude-cloud sshd[740657]: Invalid user sol from 45.148.10.183 port 52220 2026-06-30T18:52:47.871743-05:00 claude-cloud sshd[740657]: Connection closed by invalid user sol 45.148.10.183 port 52220 [preauth] 2026-06-30T18:52:48.029019-05:00 claude-cloud sshd[740656]: Received disconnect from 104.189.115.46 port 64052:11: disconnected by user 2026-06-30T18:52:48.030045-05:00 claude-cloud sshd[740656]: Disconnected from user claude 104.189.115.46 port 64052 2026-06-30T18:52:48.031510-05:00 claude-cloud sshd[740570]: pam_unix(sshd:session): session closed for user claude 2026-06-30T18:52:48.043568-05:00 claude-cloud systemd-logind[853]: Session 2549 logged out. Waiting for processes to exit. 2026-06-30T18:52:48.047129-05:00 claude-cloud systemd-logind[853]: Removed session 2549. 2026-06-30T18:52:49.012871-05:00 claude-cloud sshd[740678]: Invalid user agent from 104.189.115.46 port 64054 2026-06-30T18:52:49.307488-05:00 claude-cloud sshd[740678]: Connection closed by invalid user agent 104.189.115.46 port 64054 [preauth] 2026-06-30T18:52:50.269898-05:00 claude-cloud sshd[740680]: Invalid user exult from 104.189.115.46 port 64055 2026-06-30T18:52:50.562396-05:00 claude-cloud sshd[740680]: Connection closed by invalid user exult 104.189.115.46 port 64055 [preauth] 2026-06-30T18:54:25.594268-05:00 claude-cloud systemd-logind[853]: New session c5377 of user claude. 2026-06-30T18:54:25.636894-05:00 claude-cloud systemd-logind[853]: Session c5377 logged out. Waiting for processes to exit. 2026-06-30T18:54:25.639738-05:00 claude-cloud systemd-logind[853]: Removed session c5377. 2026-06-30T18:54:27.439109-05:00 claude-cloud sshd[741550]: Accepted publickey for claude from 104.189.115.46 port 64121 ssh2: ED25519 SHA256:zL06FyFNS5Fmvhoc+jYXcch3IeQts0ckk+VDgUYLY7Y 2026-06-30T18:54:27.443112-05:00 claude-cloud sshd[741550]: pam_unix(sshd:session): session opened for user claude(uid=1000) by claude(uid=0) 2026-06-30T18:54:27.454807-05:00 claude-cloud systemd-logind[853]: New session 2550 of user claude. 2026-06-30T18:54:28.838108-05:00 claude-cloud sshd[741604]: Received disconnect from 104.189.115.46 port 64121:11: disconnected by user 2026-06-30T18:54:28.839078-05:00 claude-cloud sshd[741604]: Disconnected from user claude 104.189.115.46 port 64121 2026-06-30T18:54:28.840272-05:00 claude-cloud sshd[741550]: pam_unix(sshd:session): session closed for user claude 2026-06-30T18:54:28.847345-05:00 claude-cloud systemd-logind[853]: Session 2550 logged out. Waiting for processes to exit. 2026-06-30T18:54:28.849070-05:00 claude-cloud systemd-logind[853]: Removed session 2550. 2026-06-30T18:55:01.139953-05:00 claude-cloud CRON[742570]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T18:55:01.148421-05:00 claude-cloud CRON[742570]: pam_unix(cron:session): session closed for user root 2026-06-30T18:55:06.168933-05:00 claude-cloud sshd[742614]: Connection closed by authenticating user root 193.46.255.86 port 37496 [preauth] 2026-06-30T18:55:18.115762-05:00 claude-cloud systemd-logind[853]: New session c5378 of user claude. 2026-06-30T18:55:30.164978-05:00 claude-cloud systemd-logind[853]: Session c5378 logged out. Waiting for processes to exit. 2026-06-30T18:55:30.166216-05:00 claude-cloud systemd-logind[853]: Removed session c5378. 2026-06-30T18:55:32.378267-05:00 claude-cloud sshd[743230]: Invalid user admin from 2.57.121.25 port 60790 2026-06-30T18:55:32.420168-05:00 claude-cloud sshd[743230]: Connection closed by invalid user admin 2.57.121.25 port 60790 [preauth] 2026-06-30T18:55:53.203079-05:00 claude-cloud sshd[743602]: Connection closed by authenticating user root 27.71.230.31 port 44246 [preauth] 2026-06-30T18:56:12.731309-05:00 claude-cloud sshd[744186]: Invalid user sol from 45.148.10.183 port 47882 2026-06-30T18:56:12.746484-05:00 claude-cloud sshd[744186]: Connection closed by invalid user sol 45.148.10.183 port 47882 [preauth] 2026-06-30T18:57:12.051758-05:00 claude-cloud sshd[745789]: Connection closed by authenticating user root 45.148.10.121 port 34794 [preauth] 2026-06-30T18:58:07.031659-05:00 claude-cloud sshd[746573]: Received disconnect from 14.116.189.74 port 35038:11: Bye Bye [preauth] 2026-06-30T18:58:07.031926-05:00 claude-cloud sshd[746573]: Disconnected from authenticating user root 14.116.189.74 port 35038 [preauth] 2026-06-30T18:58:07.432001-05:00 claude-cloud sshd[746552]: Invalid user ubuntu from 45.198.224.46 port 52534 2026-06-30T18:58:08.295391-05:00 claude-cloud sshd[746552]: Connection closed by invalid user ubuntu 45.198.224.46 port 52534 [preauth] 2026-06-30T18:58:12.649778-05:00 claude-cloud sshd[746679]: Connection closed by authenticating user root 125.20.210.182 port 59926 [preauth] 2026-06-30T18:58:59.889805-05:00 claude-cloud sshd[747542]: Connection closed by authenticating user root 45.148.10.183 port 41138 [preauth] 2026-06-30T19:00:06.351044-05:00 claude-cloud sshd[748514]: Invalid user guest from 14.116.189.74 port 58152 2026-06-30T19:00:06.559266-05:00 claude-cloud sshd[748514]: Received disconnect from 14.116.189.74 port 58152:11: Bye Bye [preauth] 2026-06-30T19:00:06.559463-05:00 claude-cloud sshd[748514]: Disconnected from invalid user guest 14.116.189.74 port 58152 [preauth] 2026-06-30T19:00:21.195357-05:00 claude-cloud sshd[748681]: Received disconnect from 103.180.212.135 port 49618:11: Bye Bye [preauth] 2026-06-30T19:00:21.195810-05:00 claude-cloud sshd[748681]: Disconnected from authenticating user root 103.180.212.135 port 49618 [preauth] 2026-06-30T19:00:50.849096-05:00 claude-cloud sshd[748823]: Received disconnect from 14.116.189.74 port 40430:11: Bye Bye [preauth] 2026-06-30T19:00:50.849696-05:00 claude-cloud sshd[748823]: Disconnected from authenticating user root 14.116.189.74 port 40430 [preauth] 2026-06-30T19:01:19.466194-05:00 claude-cloud sshd[748896]: Invalid user from 94.182.134.147 port 45612 2026-06-30T19:01:19.546812-05:00 claude-cloud sshd[748896]: Connection closed by invalid user 94.182.134.147 port 45612 [preauth] 2026-06-30T19:01:26.307337-05:00 claude-cloud sshd[748545]: Connection closed by 14.103.115.225 port 52030 [preauth] 2026-06-30T19:01:30.415079-05:00 claude-cloud sshd[748917]: Invalid user stefan from 14.116.189.74 port 50938 2026-06-30T19:01:30.612150-05:00 claude-cloud sshd[748917]: Received disconnect from 14.116.189.74 port 50938:11: Bye Bye [preauth] 2026-06-30T19:01:30.612649-05:00 claude-cloud sshd[748917]: Disconnected from invalid user stefan 14.116.189.74 port 50938 [preauth] 2026-06-30T19:01:41.118317-05:00 claude-cloud sshd[748919]: Connection closed by authenticating user root 27.71.230.31 port 52980 [preauth] 2026-06-30T19:02:09.606664-05:00 claude-cloud sshd[749047]: Received disconnect from 14.116.189.74 port 33216:11: Bye Bye [preauth] 2026-06-30T19:02:09.607405-05:00 claude-cloud sshd[749047]: Disconnected from authenticating user root 14.116.189.74 port 33216 [preauth] 2026-06-30T19:02:23.676712-05:00 claude-cloud sshd[749091]: Connection closed by authenticating user root 45.148.10.183 port 47784 [preauth] 2026-06-30T19:02:49.790441-05:00 claude-cloud sshd[749238]: Received disconnect from 14.116.189.74 port 43724:11: Bye Bye [preauth] 2026-06-30T19:02:49.790974-05:00 claude-cloud sshd[749238]: Disconnected from authenticating user root 14.116.189.74 port 43724 [preauth] 2026-06-30T19:03:23.416440-05:00 claude-cloud sshd[749331]: Received disconnect from 103.61.44.43 port 57222:11: Bye Bye [preauth] 2026-06-30T19:03:23.417121-05:00 claude-cloud sshd[749331]: Disconnected from authenticating user root 103.61.44.43 port 57222 [preauth] 2026-06-30T19:03:28.359351-05:00 claude-cloud sshd[749340]: Received disconnect from 14.116.189.74 port 54234:11: Bye Bye [preauth] 2026-06-30T19:03:28.359760-05:00 claude-cloud sshd[749340]: Disconnected from authenticating user root 14.116.189.74 port 54234 [preauth] 2026-06-30T19:03:44.393873-05:00 claude-cloud sshd[749387]: Received disconnect from 201.249.87.201 port 52480:11: Bye Bye [preauth] 2026-06-30T19:03:44.394333-05:00 claude-cloud sshd[749387]: Disconnected from authenticating user root 201.249.87.201 port 52480 [preauth] 2026-06-30T19:04:06.853412-05:00 claude-cloud sshd[749441]: Received disconnect from 14.116.189.74 port 36512:11: Bye Bye [preauth] 2026-06-30T19:04:06.854023-05:00 claude-cloud sshd[749441]: Disconnected from authenticating user root 14.116.189.74 port 36512 [preauth] 2026-06-30T19:04:44.766670-05:00 claude-cloud sshd[749567]: Received disconnect from 14.116.189.74 port 47022:11: Bye Bye [preauth] 2026-06-30T19:04:44.767133-05:00 claude-cloud sshd[749567]: Disconnected from authenticating user root 14.116.189.74 port 47022 [preauth] 2026-06-30T19:05:01.165997-05:00 claude-cloud CRON[749605]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T19:05:01.172355-05:00 claude-cloud CRON[749605]: pam_unix(cron:session): session closed for user root 2026-06-30T19:05:23.429445-05:00 claude-cloud sshd[749673]: Invalid user user2 from 14.116.189.74 port 57530 2026-06-30T19:05:23.627161-05:00 claude-cloud sshd[749673]: Received disconnect from 14.116.189.74 port 57530:11: Bye Bye [preauth] 2026-06-30T19:05:23.627465-05:00 claude-cloud sshd[749673]: Disconnected from invalid user user2 14.116.189.74 port 57530 [preauth] 2026-06-30T19:05:39.016828-05:00 claude-cloud sshd[749710]: Received disconnect from 86.111.176.100 port 43182:11: disconnected by user [preauth] 2026-06-30T19:05:39.017184-05:00 claude-cloud sshd[749710]: Disconnected from authenticating user root 86.111.176.100 port 43182 [preauth] 2026-06-30T19:05:43.896326-05:00 claude-cloud sshd[749725]: Connection closed by authenticating user root 125.20.210.182 port 40928 [preauth] 2026-06-30T19:05:48.467348-05:00 claude-cloud sshd[749754]: Invalid user solana from 45.148.10.183 port 36190 2026-06-30T19:05:48.481841-05:00 claude-cloud sshd[749754]: Connection closed by invalid user solana 45.148.10.183 port 36190 [preauth] 2026-06-30T19:07:46.302577-05:00 claude-cloud sshd[750062]: Connection closed by authenticating user root 45.198.224.46 port 43716 [preauth] 2026-06-30T19:08:31.093916-05:00 claude-cloud sshd[750017]: Connection closed by authenticating user root 27.71.230.31 port 33370 [preauth] 2026-06-30T19:08:45.495620-05:00 claude-cloud sshd[750258]: Invalid user solana from 45.148.10.183 port 33068 2026-06-30T19:08:45.510496-05:00 claude-cloud sshd[750258]: Connection closed by invalid user solana 45.148.10.183 port 33068 [preauth] 2026-06-30T19:09:25.052076-05:00 claude-cloud sshd[750369]: Connection closed by 147.185.132.13 port 50405 2026-06-30T19:09:25.847461-05:00 claude-cloud sshd[750367]: Received disconnect from 14.116.189.74 port 53608:11: Bye Bye [preauth] 2026-06-30T19:09:25.848069-05:00 claude-cloud sshd[750367]: Disconnected from authenticating user root 14.116.189.74 port 53608 [preauth] 2026-06-30T19:09:55.465030-05:00 claude-cloud sshd[750452]: Received disconnect from 201.249.87.201 port 52662:11: Bye Bye [preauth] 2026-06-30T19:09:55.465742-05:00 claude-cloud sshd[750452]: Disconnected from authenticating user root 201.249.87.201 port 52662 [preauth] 2026-06-30T19:10:04.459389-05:00 claude-cloud sshd[750473]: Received disconnect from 103.61.44.43 port 56314:11: Bye Bye [preauth] 2026-06-30T19:10:04.459763-05:00 claude-cloud sshd[750473]: Disconnected from authenticating user root 103.61.44.43 port 56314 [preauth] 2026-06-30T19:10:21.105867-05:00 claude-cloud sshd[750536]: Received disconnect from 115.151.72.155 port 35063:11: Bye Bye [preauth] 2026-06-30T19:10:21.106720-05:00 claude-cloud sshd[750536]: Disconnected from authenticating user root 115.151.72.155 port 35063 [preauth] 2026-06-30T19:11:22.355518-05:00 claude-cloud sshd[750711]: Received disconnect from 103.180.212.135 port 48122:11: Bye Bye [preauth] 2026-06-30T19:11:22.356008-05:00 claude-cloud sshd[750711]: Disconnected from authenticating user root 103.180.212.135 port 48122 [preauth] 2026-06-30T19:11:56.319352-05:00 claude-cloud sshd[750805]: Invalid user solana from 45.148.10.183 port 59694 2026-06-30T19:11:56.331824-05:00 claude-cloud sshd[750805]: Connection closed by invalid user solana 45.148.10.183 port 59694 [preauth] 2026-06-30T19:12:39.228034-05:00 claude-cloud sshd[750914]: Received disconnect from 101.47.155.9 port 39970:11: Bye Bye [preauth] 2026-06-30T19:12:39.228437-05:00 claude-cloud sshd[750914]: Disconnected from authenticating user root 101.47.155.9 port 39970 [preauth] 2026-06-30T19:12:42.920357-05:00 claude-cloud sshd[750926]: Received disconnect from 201.249.87.201 port 34808:11: Bye Bye [preauth] 2026-06-30T19:12:42.920661-05:00 claude-cloud sshd[750926]: Disconnected from authenticating user root 201.249.87.201 port 34808 [preauth] 2026-06-30T19:12:44.435236-05:00 claude-cloud sshd[750933]: Invalid user stefan from 115.151.72.155 port 56793 2026-06-30T19:12:44.676687-05:00 claude-cloud sshd[750933]: Received disconnect from 115.151.72.155 port 56793:11: Bye Bye [preauth] 2026-06-30T19:12:44.676962-05:00 claude-cloud sshd[750933]: Disconnected from invalid user stefan 115.151.72.155 port 56793 [preauth] 2026-06-30T19:12:51.851640-05:00 claude-cloud sshd[751040]: Received disconnect from 103.61.44.43 port 34044:11: Bye Bye [preauth] 2026-06-30T19:12:51.852066-05:00 claude-cloud sshd[751040]: Disconnected from authenticating user root 103.61.44.43 port 34044 [preauth] 2026-06-30T19:13:15.528673-05:00 claude-cloud sshd[751068]: Connection closed by authenticating user root 27.71.230.31 port 38106 [preauth] 2026-06-30T19:13:34.582028-05:00 claude-cloud sshd[751144]: Connection closed by authenticating user root 125.20.210.182 port 57022 [preauth] 2026-06-30T19:13:46.865493-05:00 claude-cloud sshd[751188]: Received disconnect from 115.151.72.155 port 38868:11: Bye Bye [preauth] 2026-06-30T19:13:46.865761-05:00 claude-cloud sshd[751188]: Disconnected from authenticating user root 115.151.72.155 port 38868 [preauth] 2026-06-30T19:13:48.875297-05:00 claude-cloud sshd[751193]: Invalid user guest from 103.180.212.135 port 45796 2026-06-30T19:13:49.140119-05:00 claude-cloud sshd[751193]: Received disconnect from 103.180.212.135 port 45796:11: Bye Bye [preauth] 2026-06-30T19:13:49.140605-05:00 claude-cloud sshd[751193]: Disconnected from invalid user guest 103.180.212.135 port 45796 [preauth] 2026-06-30T19:14:42.814793-05:00 claude-cloud sshd[751340]: Invalid user solana from 45.148.10.183 port 37086 2026-06-30T19:14:42.828638-05:00 claude-cloud sshd[751340]: Connection closed by invalid user solana 45.148.10.183 port 37086 [preauth] 2026-06-30T19:14:47.912599-05:00 claude-cloud sshd[751373]: Received disconnect from 115.151.72.155 port 53156:11: Bye Bye [preauth] 2026-06-30T19:14:47.913339-05:00 claude-cloud sshd[751373]: Disconnected from authenticating user root 115.151.72.155 port 53156 [preauth] 2026-06-30T19:15:01.185028-05:00 claude-cloud CRON[751415]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T19:15:01.190578-05:00 claude-cloud CRON[751415]: pam_unix(cron:session): session closed for user root 2026-06-30T19:15:40.756757-05:00 claude-cloud sshd[751513]: Invalid user stefan from 103.61.44.43 port 40002 2026-06-30T19:15:40.975453-05:00 claude-cloud sshd[751513]: Received disconnect from 103.61.44.43 port 40002:11: Bye Bye [preauth] 2026-06-30T19:15:40.975831-05:00 claude-cloud sshd[751513]: Disconnected from invalid user stefan 103.61.44.43 port 40002 [preauth] 2026-06-30T19:15:54.107975-05:00 claude-cloud sshd[751561]: Invalid user user2 from 115.151.72.155 port 35275 2026-06-30T19:15:54.325085-05:00 claude-cloud sshd[751561]: Received disconnect from 115.151.72.155 port 35275:11: Bye Bye [preauth] 2026-06-30T19:15:54.325388-05:00 claude-cloud sshd[751561]: Disconnected from invalid user user2 115.151.72.155 port 35275 [preauth] 2026-06-30T19:16:20.430892-05:00 claude-cloud sshd[751627]: Received disconnect from 103.180.212.135 port 52612:11: Bye Bye [preauth] 2026-06-30T19:16:20.431428-05:00 claude-cloud sshd[751627]: Disconnected from authenticating user root 103.180.212.135 port 52612 [preauth] 2026-06-30T19:16:59.558005-05:00 claude-cloud sshd[751753]: Received disconnect from 115.151.72.155 port 49609:11: Bye Bye [preauth] 2026-06-30T19:16:59.558463-05:00 claude-cloud sshd[751753]: Disconnected from authenticating user root 115.151.72.155 port 49609 [preauth] 2026-06-30T19:17:01.198473-05:00 claude-cloud CRON[751765]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T19:17:01.206768-05:00 claude-cloud CRON[751765]: pam_unix(cron:session): session closed for user root 2026-06-30T19:17:18.995676-05:00 claude-cloud sshd[751814]: Invalid user ubuntu from 45.198.224.46 port 33172 2026-06-30T19:17:19.537740-05:00 claude-cloud sshd[751814]: Connection closed by invalid user ubuntu 45.198.224.46 port 33172 [preauth] 2026-06-30T19:17:50.123014-05:00 claude-cloud sshd[751911]: Invalid user solana from 45.148.10.183 port 37326 2026-06-30T19:17:50.137314-05:00 claude-cloud sshd[751911]: Connection closed by invalid user solana 45.148.10.183 port 37326 [preauth] 2026-06-30T19:18:07.448178-05:00 claude-cloud sshd[751940]: Received disconnect from 115.151.72.155 port 63923:11: Bye Bye [preauth] 2026-06-30T19:18:07.448611-05:00 claude-cloud sshd[751940]: Disconnected from authenticating user root 115.151.72.155 port 63923 [preauth] 2026-06-30T19:18:45.047918-05:00 claude-cloud sshd[752045]: Received disconnect from 103.61.44.43 port 45966:11: Bye Bye [preauth] 2026-06-30T19:18:45.048708-05:00 claude-cloud sshd[752045]: Disconnected from authenticating user root 103.61.44.43 port 45966 [preauth] 2026-06-30T19:18:53.409375-05:00 claude-cloud sshd[752094]: Received disconnect from 103.180.212.135 port 47472:11: Bye Bye [preauth] 2026-06-30T19:18:53.409941-05:00 claude-cloud sshd[752094]: Disconnected from authenticating user root 103.180.212.135 port 47472 [preauth] 2026-06-30T19:19:10.885894-05:00 claude-cloud sshd[752137]: Received disconnect from 115.151.72.155 port 46016:11: Bye Bye [preauth] 2026-06-30T19:19:10.886296-05:00 claude-cloud sshd[752137]: Disconnected from authenticating user root 115.151.72.155 port 46016 [preauth] 2026-06-30T19:19:20.730075-05:00 claude-cloud sshd[752113]: Connection closed by authenticating user root 27.71.230.31 port 38220 [preauth] 2026-06-30T19:20:10.170923-05:00 claude-cloud sshd[752284]: Received disconnect from 201.249.87.201 port 55482:11: Bye Bye [preauth] 2026-06-30T19:20:10.171875-05:00 claude-cloud sshd[752284]: Disconnected from authenticating user root 201.249.87.201 port 55482 [preauth] 2026-06-30T19:20:14.084898-05:00 claude-cloud sshd[752301]: Received disconnect from 103.143.11.150 port 36200:11: Bye Bye [preauth] 2026-06-30T19:20:14.085235-05:00 claude-cloud sshd[752301]: Disconnected from authenticating user root 103.143.11.150 port 36200 [preauth] 2026-06-30T19:20:15.353005-05:00 claude-cloud sshd[752316]: Received disconnect from 115.151.72.155 port 60344:11: Bye Bye [preauth] 2026-06-30T19:20:15.353352-05:00 claude-cloud sshd[752316]: Disconnected from authenticating user root 115.151.72.155 port 60344 [preauth] 2026-06-30T19:20:54.940715-05:00 claude-cloud sshd[752428]: Invalid user sols from 45.148.10.183 port 57214 2026-06-30T19:20:54.953931-05:00 claude-cloud sshd[752428]: Connection closed by invalid user sols 45.148.10.183 port 57214 [preauth] 2026-06-30T19:21:19.234050-05:00 claude-cloud sshd[752483]: Received disconnect from 115.151.72.155 port 42419:11: Bye Bye [preauth] 2026-06-30T19:21:19.234612-05:00 claude-cloud sshd[752483]: Disconnected from authenticating user root 115.151.72.155 port 42419 [preauth] 2026-06-30T19:21:26.883262-05:00 claude-cloud sshd[752496]: Received disconnect from 103.61.44.43 port 51924:11: Bye Bye [preauth] 2026-06-30T19:21:26.883870-05:00 claude-cloud sshd[752496]: Disconnected from authenticating user root 103.61.44.43 port 51924 [preauth] 2026-06-30T19:21:27.491424-05:00 claude-cloud sshd[752502]: Received disconnect from 103.180.212.135 port 40666:11: Bye Bye [preauth] 2026-06-30T19:21:27.491858-05:00 claude-cloud sshd[752502]: Disconnected from authenticating user root 103.180.212.135 port 40666 [preauth] 2026-06-30T19:21:45.539904-05:00 claude-cloud sshd[752523]: Connection closed by authenticating user root 125.20.210.182 port 46646 [preauth] 2026-06-30T19:22:10.165615-05:00 claude-cloud sshd[752608]: Received disconnect from 62.210.209.225 port 36704:11: disconnected by user [preauth] 2026-06-30T19:22:10.166160-05:00 claude-cloud sshd[752608]: Disconnected from authenticating user root 62.210.209.225 port 36704 [preauth] 2026-06-30T19:22:28.090692-05:00 claude-cloud sshd[752674]: Received disconnect from 115.151.72.155 port 56749:11: Bye Bye [preauth] 2026-06-30T19:22:28.091579-05:00 claude-cloud sshd[752674]: Disconnected from authenticating user root 115.151.72.155 port 56749 [preauth] 2026-06-30T19:23:36.653553-05:00 claude-cloud sshd[752925]: Received disconnect from 115.151.72.155 port 38844:11: Bye Bye [preauth] 2026-06-30T19:23:36.653976-05:00 claude-cloud sshd[752925]: Disconnected from authenticating user root 115.151.72.155 port 38844 [preauth] 2026-06-30T19:24:03.849159-05:00 claude-cloud sshd[753004]: Received disconnect from 103.180.212.135 port 55958:11: Bye Bye [preauth] 2026-06-30T19:24:03.849546-05:00 claude-cloud sshd[753004]: Disconnected from authenticating user root 103.180.212.135 port 55958 [preauth] 2026-06-30T19:24:05.774689-05:00 claude-cloud sshd[753008]: Received disconnect from 103.61.44.43 port 57882:11: Bye Bye [preauth] 2026-06-30T19:24:05.774955-05:00 claude-cloud sshd[753008]: Disconnected from authenticating user root 103.61.44.43 port 57882 [preauth] 2026-06-30T19:24:11.204086-05:00 claude-cloud sshd[753025]: Invalid user jito from 45.148.10.183 port 51632 2026-06-30T19:24:11.217080-05:00 claude-cloud sshd[753025]: Connection closed by invalid user jito 45.148.10.183 port 51632 [preauth] 2026-06-30T19:24:43.625916-05:00 claude-cloud sshd[753117]: Invalid user guest from 115.151.72.155 port 53164 2026-06-30T19:24:43.837533-05:00 claude-cloud sshd[753117]: Received disconnect from 115.151.72.155 port 53164:11: Bye Bye [preauth] 2026-06-30T19:24:43.837707-05:00 claude-cloud sshd[753117]: Disconnected from invalid user guest 115.151.72.155 port 53164 [preauth] 2026-06-30T19:24:52.770758-05:00 claude-cloud sshd[753138]: Connection closed by authenticating user root 27.71.230.31 port 37844 [preauth] 2026-06-30T19:24:53.807108-05:00 claude-cloud sshd[753176]: Invalid user guest1 from 101.47.155.9 port 34176 2026-06-30T19:24:53.984774-05:00 claude-cloud sshd[753176]: Received disconnect from 101.47.155.9 port 34176:11: Bye Bye [preauth] 2026-06-30T19:24:53.985198-05:00 claude-cloud sshd[753176]: Disconnected from invalid user guest1 101.47.155.9 port 34176 [preauth] 2026-06-30T19:25:01.217325-05:00 claude-cloud CRON[753188]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T19:25:01.224631-05:00 claude-cloud CRON[753188]: pam_unix(cron:session): session closed for user root 2026-06-30T19:25:36.448791-05:00 claude-cloud sshd[753284]: Invalid user guest1 from 103.143.11.150 port 46428 2026-06-30T19:25:36.608686-05:00 claude-cloud sshd[753284]: Received disconnect from 103.143.11.150 port 46428:11: Bye Bye [preauth] 2026-06-30T19:25:36.608873-05:00 claude-cloud sshd[753284]: Disconnected from invalid user guest1 103.143.11.150 port 46428 [preauth] 2026-06-30T19:25:55.680154-05:00 claude-cloud sshd[753342]: Received disconnect from 115.151.72.155 port 35309:11: Bye Bye [preauth] 2026-06-30T19:25:55.680740-05:00 claude-cloud sshd[753342]: Disconnected from authenticating user root 115.151.72.155 port 35309 [preauth] 2026-06-30T19:26:34.556013-05:00 claude-cloud sshd[753437]: Invalid user user2 from 103.180.212.135 port 54232 2026-06-30T19:26:34.834147-05:00 claude-cloud sshd[753437]: Received disconnect from 103.180.212.135 port 54232:11: Bye Bye [preauth] 2026-06-30T19:26:34.834571-05:00 claude-cloud sshd[753437]: Disconnected from invalid user user2 103.180.212.135 port 54232 [preauth] 2026-06-30T19:26:44.035501-05:00 claude-cloud sshd[753487]: Received disconnect from 101.47.155.9 port 39150:11: Bye Bye [preauth] 2026-06-30T19:26:44.036023-05:00 claude-cloud sshd[753487]: Disconnected from authenticating user root 101.47.155.9 port 39150 [preauth] 2026-06-30T19:26:45.057360-05:00 claude-cloud sshd[753483]: Received disconnect from 103.61.44.43 port 35608:11: Bye Bye [preauth] 2026-06-30T19:26:45.057773-05:00 claude-cloud sshd[753483]: Disconnected from authenticating user root 103.61.44.43 port 35608 [preauth] 2026-06-30T19:26:54.536721-05:00 claude-cloud sshd[753524]: Connection closed by authenticating user root 45.198.224.46 port 36044 [preauth] 2026-06-30T19:27:02.871421-05:00 claude-cloud sshd[753543]: Received disconnect from 115.151.72.155 port 49651:11: Bye Bye [preauth] 2026-06-30T19:27:02.871634-05:00 claude-cloud sshd[753543]: Disconnected from authenticating user root 115.151.72.155 port 49651 [preauth] 2026-06-30T19:27:11.911737-05:00 claude-cloud sshd[753569]: Received disconnect from 103.143.11.150 port 54186:11: Bye Bye [preauth] 2026-06-30T19:27:11.912075-05:00 claude-cloud sshd[753569]: Disconnected from authenticating user root 103.143.11.150 port 54186 [preauth] 2026-06-30T19:27:17.462799-05:00 claude-cloud sshd[753587]: Invalid user soul from 45.148.10.183 port 50660 2026-06-30T19:27:17.477068-05:00 claude-cloud sshd[753587]: Connection closed by invalid user soul 45.148.10.183 port 50660 [preauth] 2026-06-30T19:27:30.148943-05:00 claude-cloud sshd[753617]: Invalid user test from 45.148.10.121 port 42016 2026-06-30T19:27:30.194714-05:00 claude-cloud sshd[753617]: Connection closed by invalid user test 45.148.10.121 port 42016 [preauth] 2026-06-30T19:27:41.340344-05:00 claude-cloud sshd[753628]: Invalid user guest from 201.249.87.201 port 47890 2026-06-30T19:27:41.519320-05:00 claude-cloud sshd[753628]: Received disconnect from 201.249.87.201 port 47890:11: Bye Bye [preauth] 2026-06-30T19:27:41.519718-05:00 claude-cloud sshd[753628]: Disconnected from invalid user guest 201.249.87.201 port 47890 [preauth] 2026-06-30T19:28:37.543038-05:00 claude-cloud sshd[753795]: Received disconnect from 101.47.155.9 port 38900:11: Bye Bye [preauth] 2026-06-30T19:28:37.543632-05:00 claude-cloud sshd[753795]: Disconnected from authenticating user root 101.47.155.9 port 38900 [preauth] 2026-06-30T19:28:48.391672-05:00 claude-cloud sshd[753854]: Received disconnect from 103.143.11.150 port 58138:11: Bye Bye [preauth] 2026-06-30T19:28:48.392357-05:00 claude-cloud sshd[753854]: Disconnected from authenticating user root 103.143.11.150 port 58138 [preauth] 2026-06-30T19:29:11.925681-05:00 claude-cloud sshd[753894]: Received disconnect from 103.180.212.135 port 45484:11: Bye Bye [preauth] 2026-06-30T19:29:11.926821-05:00 claude-cloud sshd[753894]: Disconnected from authenticating user root 103.180.212.135 port 45484 [preauth] 2026-06-30T19:29:29.818882-05:00 claude-cloud sshd[753957]: Invalid user guest from 103.61.44.43 port 41568 2026-06-30T19:29:30.022650-05:00 claude-cloud sshd[753957]: Received disconnect from 103.61.44.43 port 41568:11: Bye Bye [preauth] 2026-06-30T19:29:30.023046-05:00 claude-cloud sshd[753957]: Disconnected from invalid user guest 103.61.44.43 port 41568 [preauth] 2026-06-30T19:30:15.281200-05:00 claude-cloud sshd[754026]: Connection closed by authenticating user root 125.20.210.182 port 48042 [preauth] 2026-06-30T19:30:23.460605-05:00 claude-cloud sshd[754123]: Received disconnect from 103.143.11.150 port 40752:11: Bye Bye [preauth] 2026-06-30T19:30:23.461232-05:00 claude-cloud sshd[754123]: Disconnected from authenticating user root 103.143.11.150 port 40752 [preauth] 2026-06-30T19:30:25.372337-05:00 claude-cloud sshd[754125]: Received disconnect from 201.249.87.201 port 58278:11: Bye Bye [preauth] 2026-06-30T19:30:25.372757-05:00 claude-cloud sshd[754125]: Disconnected from authenticating user root 201.249.87.201 port 58278 [preauth] 2026-06-30T19:30:28.036139-05:00 claude-cloud sshd[754134]: Received disconnect from 101.47.155.9 port 44220:11: Bye Bye [preauth] 2026-06-30T19:30:28.036629-05:00 claude-cloud sshd[754134]: Disconnected from authenticating user root 101.47.155.9 port 44220 [preauth] 2026-06-30T19:30:44.260775-05:00 claude-cloud sshd[754204]: Connection closed by authenticating user root 185.242.3.195 port 44616 [preauth] 2026-06-30T19:30:51.702383-05:00 claude-cloud sshd[754149]: Connection closed by authenticating user root 27.71.230.31 port 57186 [preauth] 2026-06-30T19:31:42.962001-05:00 claude-cloud sshd[754356]: Received disconnect from 103.180.212.135 port 34496:11: Bye Bye [preauth] 2026-06-30T19:31:42.962576-05:00 claude-cloud sshd[754356]: Disconnected from authenticating user root 103.180.212.135 port 34496 [preauth] 2026-06-30T19:31:54.087794-05:00 claude-cloud sshd[754392]: Received disconnect from 103.143.11.150 port 57160:11: Bye Bye [preauth] 2026-06-30T19:31:54.088245-05:00 claude-cloud sshd[754392]: Disconnected from authenticating user root 103.143.11.150 port 57160 [preauth] 2026-06-30T19:32:10.977232-05:00 claude-cloud sshd[754425]: Received disconnect from 101.47.155.9 port 45210:11: Bye Bye [preauth] 2026-06-30T19:32:10.977644-05:00 claude-cloud sshd[754425]: Disconnected from authenticating user root 101.47.155.9 port 45210 [preauth] 2026-06-30T19:32:17.314931-05:00 claude-cloud sshd[754423]: Connection closed by 103.61.44.43 port 47526 [preauth] 2026-06-30T19:33:15.675773-05:00 claude-cloud sshd[754669]: Received disconnect from 201.249.87.201 port 40428:11: Bye Bye [preauth] 2026-06-30T19:33:15.676585-05:00 claude-cloud sshd[754669]: Disconnected from authenticating user root 201.249.87.201 port 40428 [preauth] 2026-06-30T19:33:24.998952-05:00 claude-cloud sshd[754716]: Received disconnect from 103.143.11.150 port 51810:11: Bye Bye [preauth] 2026-06-30T19:33:24.999421-05:00 claude-cloud sshd[754716]: Disconnected from authenticating user root 103.143.11.150 port 51810 [preauth] 2026-06-30T19:33:43.481793-05:00 claude-cloud sshd[754754]: Invalid user solana from 45.148.10.183 port 33820 2026-06-30T19:33:43.496528-05:00 claude-cloud sshd[754754]: Connection closed by invalid user solana 45.148.10.183 port 33820 [preauth] 2026-06-30T19:33:56.769760-05:00 claude-cloud sshd[754798]: Received disconnect from 101.47.155.9 port 59120:11: Bye Bye [preauth] 2026-06-30T19:33:56.770124-05:00 claude-cloud sshd[754798]: Disconnected from authenticating user root 101.47.155.9 port 59120 [preauth] 2026-06-30T19:34:15.787502-05:00 claude-cloud sshd[754851]: Received disconnect from 103.180.212.135 port 51840:11: Bye Bye [preauth] 2026-06-30T19:34:15.788230-05:00 claude-cloud sshd[754851]: Disconnected from authenticating user root 103.180.212.135 port 51840 [preauth] 2026-06-30T19:34:52.202938-05:00 claude-cloud sshd[754960]: Received disconnect from 103.61.44.43 port 53484:11: Bye Bye [preauth] 2026-06-30T19:34:52.203787-05:00 claude-cloud sshd[754960]: Disconnected from authenticating user root 103.61.44.43 port 53484 [preauth] 2026-06-30T19:34:58.192620-05:00 claude-cloud sshd[754984]: Received disconnect from 103.143.11.150 port 58890:11: Bye Bye [preauth] 2026-06-30T19:34:58.193034-05:00 claude-cloud sshd[754984]: Disconnected from authenticating user root 103.143.11.150 port 58890 [preauth] 2026-06-30T19:35:01.235051-05:00 claude-cloud CRON[754999]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T19:35:01.241296-05:00 claude-cloud CRON[754999]: pam_unix(cron:session): session closed for user root 2026-06-30T19:35:26.266367-05:00 claude-cloud sshd[755072]: Invalid user from 64.62.197.19 port 28509 2026-06-30T19:35:29.540322-05:00 claude-cloud sshd[755072]: Connection closed by invalid user 64.62.197.19 port 28509 [preauth] 2026-06-30T19:35:48.073033-05:00 claude-cloud sshd[755124]: Received disconnect from 101.47.155.9 port 43758:11: Bye Bye [preauth] 2026-06-30T19:35:48.073608-05:00 claude-cloud sshd[755124]: Disconnected from authenticating user root 101.47.155.9 port 43758 [preauth] 2026-06-30T19:36:02.839366-05:00 claude-cloud sshd[755166]: Invalid user user2 from 201.249.87.201 port 50818 2026-06-30T19:36:03.020591-05:00 claude-cloud sshd[755166]: Received disconnect from 201.249.87.201 port 50818:11: Bye Bye [preauth] 2026-06-30T19:36:03.020911-05:00 claude-cloud sshd[755166]: Disconnected from invalid user user2 201.249.87.201 port 50818 [preauth] 2026-06-30T19:36:24.660380-05:00 claude-cloud sshd[755218]: Connection closed by authenticating user root 45.198.224.46 port 57066 [preauth] 2026-06-30T19:36:30.861154-05:00 claude-cloud sshd[755247]: Received disconnect from 103.143.11.150 port 39350:11: Bye Bye [preauth] 2026-06-30T19:36:30.861725-05:00 claude-cloud sshd[755247]: Disconnected from authenticating user root 103.143.11.150 port 39350 [preauth] 2026-06-30T19:36:36.211812-05:00 claude-cloud sshd[755265]: Invalid user sole from 45.148.10.183 port 59202 2026-06-30T19:36:36.226397-05:00 claude-cloud sshd[755265]: Connection closed by invalid user sole 45.148.10.183 port 59202 [preauth] 2026-06-30T19:36:37.720202-05:00 claude-cloud sshd[755232]: Connection closed by authenticating user root 27.71.230.31 port 36818 [preauth] 2026-06-30T19:36:49.405919-05:00 claude-cloud sshd[755318]: Received disconnect from 103.180.212.135 port 39070:11: Bye Bye [preauth] 2026-06-30T19:36:49.406366-05:00 claude-cloud sshd[755318]: Disconnected from authenticating user root 103.180.212.135 port 39070 [preauth] 2026-06-30T19:37:31.823220-05:00 claude-cloud sshd[755436]: Received disconnect from 101.47.155.9 port 54836:11: Bye Bye [preauth] 2026-06-30T19:37:31.823740-05:00 claude-cloud sshd[755436]: Disconnected from authenticating user root 101.47.155.9 port 54836 [preauth] 2026-06-30T19:37:37.511926-05:00 claude-cloud sshd[755434]: Connection closed by 103.61.44.43 port 59442 [preauth] 2026-06-30T19:38:00.511988-05:00 claude-cloud sshd[755520]: Received disconnect from 103.143.11.150 port 55820:11: Bye Bye [preauth] 2026-06-30T19:38:00.512474-05:00 claude-cloud sshd[755520]: Disconnected from authenticating user root 103.143.11.150 port 55820 [preauth] 2026-06-30T19:38:14.480244-05:00 claude-cloud sshd[755559]: Received disconnect from 23.94.92.98 port 58534:11: disconnected by user [preauth] 2026-06-30T19:38:14.480863-05:00 claude-cloud sshd[755559]: Disconnected from authenticating user root 23.94.92.98 port 58534 [preauth] 2026-06-30T19:38:38.871785-05:00 claude-cloud sshd[755621]: Connection closed by authenticating user root 125.20.210.182 port 34400 [preauth] 2026-06-30T19:38:50.838380-05:00 claude-cloud sshd[755672]: Received disconnect from 201.249.87.201 port 32978:11: Bye Bye [preauth] 2026-06-30T19:38:50.838776-05:00 claude-cloud sshd[755672]: Disconnected from authenticating user root 201.249.87.201 port 32978 [preauth] 2026-06-30T19:39:12.506030-05:00 claude-cloud sshd[755730]: Received disconnect from 101.47.155.9 port 42746:11: Bye Bye [preauth] 2026-06-30T19:39:12.506602-05:00 claude-cloud sshd[755730]: Disconnected from authenticating user root 101.47.155.9 port 42746 [preauth] 2026-06-30T19:39:21.533344-05:00 claude-cloud sshd[755758]: Invalid user stefan from 103.180.212.135 port 53244 2026-06-30T19:39:21.802991-05:00 claude-cloud sshd[755758]: Received disconnect from 103.180.212.135 port 53244:11: Bye Bye [preauth] 2026-06-30T19:39:21.803400-05:00 claude-cloud sshd[755758]: Disconnected from invalid user stefan 103.180.212.135 port 53244 [preauth] 2026-06-30T19:39:31.204008-05:00 claude-cloud sshd[755792]: Received disconnect from 103.143.11.150 port 37026:11: Bye Bye [preauth] 2026-06-30T19:39:31.204890-05:00 claude-cloud sshd[755792]: Disconnected from authenticating user root 103.143.11.150 port 37026 [preauth] 2026-06-30T19:39:42.030409-05:00 claude-cloud sshd[755816]: Received disconnect from 104.243.46.222 port 21368:11: disconnected by user [preauth] 2026-06-30T19:39:42.031119-05:00 claude-cloud sshd[755816]: Disconnected from authenticating user root 104.243.46.222 port 21368 [preauth] 2026-06-30T19:39:45.724926-05:00 claude-cloud sshd[755838]: Invalid user solv from 45.148.10.183 port 41812 2026-06-30T19:39:45.738124-05:00 claude-cloud sshd[755838]: Connection closed by invalid user solv 45.148.10.183 port 41812 [preauth] 2026-06-30T19:40:16.478569-05:00 claude-cloud sshd[755923]: Received disconnect from 103.61.44.43 port 37168:11: Bye Bye [preauth] 2026-06-30T19:40:16.478993-05:00 claude-cloud sshd[755923]: Disconnected from authenticating user root 103.61.44.43 port 37168 [preauth] 2026-06-30T19:41:04.234631-05:00 claude-cloud sshd[756057]: Invalid user tester from 101.47.155.9 port 46250 2026-06-30T19:41:04.402801-05:00 claude-cloud sshd[756057]: Received disconnect from 101.47.155.9 port 46250:11: Bye Bye [preauth] 2026-06-30T19:41:04.403086-05:00 claude-cloud sshd[756057]: Disconnected from invalid user tester 101.47.155.9 port 46250 [preauth] 2026-06-30T19:41:10.400188-05:00 claude-cloud sshd[756075]: Received disconnect from 103.143.11.150 port 54602:11: Bye Bye [preauth] 2026-06-30T19:41:10.400824-05:00 claude-cloud sshd[756075]: Disconnected from authenticating user root 103.143.11.150 port 54602 [preauth] 2026-06-30T19:41:38.427464-05:00 claude-cloud sshd[756150]: Invalid user stefan from 201.249.87.201 port 43374 2026-06-30T19:41:38.597575-05:00 claude-cloud sshd[756150]: Received disconnect from 201.249.87.201 port 43374:11: Bye Bye [preauth] 2026-06-30T19:41:38.597851-05:00 claude-cloud sshd[756150]: Disconnected from invalid user stefan 201.249.87.201 port 43374 [preauth] 2026-06-30T19:41:58.456947-05:00 claude-cloud sshd[756214]: Received disconnect from 103.180.212.135 port 47860:11: Bye Bye [preauth] 2026-06-30T19:41:58.457550-05:00 claude-cloud sshd[756214]: Disconnected from authenticating user root 103.180.212.135 port 47860 [preauth] 2026-06-30T19:42:05.542904-05:00 claude-cloud sshd[756239]: Connection closed by authenticating user root 193.46.255.86 port 41414 [preauth] 2026-06-30T19:42:45.730304-05:00 claude-cloud sshd[756363]: Received disconnect from 103.143.11.150 port 39194:11: Bye Bye [preauth] 2026-06-30T19:42:45.730776-05:00 claude-cloud sshd[756363]: Disconnected from authenticating user root 103.143.11.150 port 39194 [preauth] 2026-06-30T19:42:50.741380-05:00 claude-cloud sshd[756304]: Connection closed by authenticating user root 27.71.230.31 port 32924 [preauth] 2026-06-30T19:42:52.895418-05:00 claude-cloud sshd[756382]: Received disconnect from 101.47.155.9 port 52988:11: Bye Bye [preauth] 2026-06-30T19:42:52.895645-05:00 claude-cloud sshd[756382]: Disconnected from authenticating user root 101.47.155.9 port 52988 [preauth] 2026-06-30T19:43:00.246667-05:00 claude-cloud sshd[756403]: Received disconnect from 103.61.44.43 port 43126:11: Bye Bye [preauth] 2026-06-30T19:43:00.247049-05:00 claude-cloud sshd[756403]: Disconnected from authenticating user root 103.61.44.43 port 43126 [preauth] 2026-06-30T19:43:05.911823-05:00 claude-cloud sshd[756427]: Invalid user solv from 45.148.10.183 port 52820 2026-06-30T19:43:05.926718-05:00 claude-cloud sshd[756427]: Connection closed by invalid user solv 45.148.10.183 port 52820 [preauth] 2026-06-30T19:44:19.396176-05:00 claude-cloud sshd[756696]: Invalid user tester from 103.143.11.150 port 59888 2026-06-30T19:44:19.559675-05:00 claude-cloud sshd[756696]: Received disconnect from 103.143.11.150 port 59888:11: Bye Bye [preauth] 2026-06-30T19:44:19.560190-05:00 claude-cloud sshd[756696]: Disconnected from invalid user tester 103.143.11.150 port 59888 [preauth] 2026-06-30T19:44:27.647005-05:00 claude-cloud sshd[756717]: Received disconnect from 201.249.87.201 port 53764:11: Bye Bye [preauth] 2026-06-30T19:44:27.647390-05:00 claude-cloud sshd[756717]: Disconnected from authenticating user root 201.249.87.201 port 53764 [preauth] 2026-06-30T19:44:33.779440-05:00 claude-cloud sshd[756739]: Received disconnect from 103.180.212.135 port 49966:11: Bye Bye [preauth] 2026-06-30T19:44:33.779984-05:00 claude-cloud sshd[756739]: Disconnected from authenticating user root 103.180.212.135 port 49966 [preauth] 2026-06-30T19:44:34.140424-05:00 claude-cloud sshd[756741]: Invalid user admin from 123.31.20.162 port 49216 2026-06-30T19:44:34.369098-05:00 claude-cloud sshd[756741]: Connection closed by invalid user admin 123.31.20.162 port 49216 [preauth] 2026-06-30T19:44:35.988127-05:00 claude-cloud sshd[756745]: Received disconnect from 101.47.155.9 port 52996:11: Bye Bye [preauth] 2026-06-30T19:44:35.988561-05:00 claude-cloud sshd[756745]: Disconnected from authenticating user root 101.47.155.9 port 52996 [preauth] 2026-06-30T19:45:01.253010-05:00 claude-cloud CRON[756820]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T19:45:01.258555-05:00 claude-cloud CRON[756820]: pam_unix(cron:session): session closed for user root 2026-06-30T19:45:41.180067-05:00 claude-cloud sshd[756923]: Invalid user user2 from 103.61.44.43 port 49084 2026-06-30T19:45:41.405099-05:00 claude-cloud sshd[756923]: Received disconnect from 103.61.44.43 port 49084:11: Bye Bye [preauth] 2026-06-30T19:45:41.405580-05:00 claude-cloud sshd[756923]: Disconnected from invalid user user2 103.61.44.43 port 49084 [preauth] 2026-06-30T19:45:51.960822-05:00 claude-cloud sshd[756968]: Received disconnect from 103.143.11.150 port 51672:11: Bye Bye [preauth] 2026-06-30T19:45:51.961127-05:00 claude-cloud sshd[756968]: Disconnected from authenticating user root 103.143.11.150 port 51672 [preauth] 2026-06-30T19:46:00.464507-05:00 claude-cloud sshd[756997]: Invalid user ubuntu from 45.198.224.46 port 41058 2026-06-30T19:46:01.511419-05:00 claude-cloud sshd[757005]: Invalid user solb from 45.148.10.183 port 39406 2026-06-30T19:46:01.525043-05:00 claude-cloud sshd[757005]: Connection closed by invalid user solb 45.148.10.183 port 39406 [preauth] 2026-06-30T19:46:01.592667-05:00 claude-cloud sshd[756997]: Connection closed by invalid user ubuntu 45.198.224.46 port 41058 [preauth] 2026-06-30T19:46:21.989137-05:00 claude-cloud sshd[757057]: Received disconnect from 101.47.155.9 port 53712:11: Bye Bye [preauth] 2026-06-30T19:46:21.989991-05:00 claude-cloud sshd[757057]: Disconnected from authenticating user root 101.47.155.9 port 53712 [preauth] 2026-06-30T19:47:12.390397-05:00 claude-cloud sshd[757178]: Connection closed by authenticating user root 125.20.210.182 port 38290 [preauth] 2026-06-30T19:47:20.171010-05:00 claude-cloud sshd[757221]: Received disconnect from 201.249.87.201 port 35910:11: Bye Bye [preauth] 2026-06-30T19:47:20.171353-05:00 claude-cloud sshd[757221]: Disconnected from authenticating user root 201.249.87.201 port 35910 [preauth] 2026-06-30T19:48:08.381340-05:00 claude-cloud sshd[757357]: Received disconnect from 101.47.155.9 port 38058:11: Bye Bye [preauth] 2026-06-30T19:48:08.381847-05:00 claude-cloud sshd[757357]: Disconnected from authenticating user root 101.47.155.9 port 38058 [preauth] 2026-06-30T19:49:09.917166-05:00 claude-cloud sshd[757526]: Invalid user admin from 2.57.121.25 port 40740 2026-06-30T19:49:09.942894-05:00 claude-cloud sshd[757526]: Connection closed by invalid user admin 2.57.121.25 port 40740 [preauth] 2026-06-30T19:49:13.637059-05:00 claude-cloud sshd[757501]: Connection closed by authenticating user root 27.71.230.31 port 50520 [preauth] 2026-06-30T19:50:15.810879-05:00 claude-cloud sshd[758352]: Received disconnect from 201.249.87.201 port 46300:11: Bye Bye [preauth] 2026-06-30T19:50:15.811507-05:00 claude-cloud sshd[758352]: Disconnected from authenticating user root 201.249.87.201 port 46300 [preauth] 2026-06-30T19:50:56.867419-05:00 claude-cloud sshd[758509]: Invalid user armon from 2.57.121.112 port 49434 2026-06-30T19:50:56.893681-05:00 claude-cloud sshd[758509]: Connection closed by invalid user armon 2.57.121.112 port 49434 [preauth] 2026-06-30T19:52:16.808735-05:00 claude-cloud sshd[759390]: Invalid user firedancer from 45.148.10.183 port 39464 2026-06-30T19:52:16.822064-05:00 claude-cloud sshd[759390]: Connection closed by invalid user firedancer 45.148.10.183 port 39464 [preauth] 2026-06-30T19:55:01.270135-05:00 claude-cloud CRON[762445]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T19:55:01.276494-05:00 claude-cloud CRON[762445]: pam_unix(cron:session): session closed for user root 2026-06-30T19:55:13.295050-05:00 claude-cloud sshd[762621]: Connection closed by authenticating user root 45.148.10.183 port 36004 [preauth] 2026-06-30T19:55:21.053885-05:00 claude-cloud sshd[762498]: Connection closed by authenticating user root 27.71.230.31 port 43140 [preauth] 2026-06-30T19:55:35.652497-05:00 claude-cloud sshd[763183]: Invalid user ubuntu from 45.198.224.46 port 47312 2026-06-30T19:55:36.688073-05:00 claude-cloud sshd[763183]: Connection closed by invalid user ubuntu 45.198.224.46 port 47312 [preauth] 2026-06-30T19:55:40.127779-05:00 claude-cloud sshd[763401]: Connection closed by authenticating user root 45.148.10.121 port 50830 [preauth] 2026-06-30T19:56:09.477098-05:00 claude-cloud sshd[763708]: Connection closed by authenticating user root 125.20.210.182 port 46130 [preauth] 2026-06-30T19:58:39.032061-05:00 claude-cloud sshd[766981]: Connection closed by authenticating user root 45.148.10.183 port 44160 [preauth] 2026-06-30T20:01:24.049454-05:00 claude-cloud sshd[768986]: Connection closed by authenticating user root 27.71.230.31 port 36088 [preauth] 2026-06-30T20:01:29.744487-05:00 claude-cloud sshd[769311]: Invalid user shred from 45.148.10.183 port 54864 2026-06-30T20:01:29.757553-05:00 claude-cloud sshd[769311]: Connection closed by invalid user shred 45.148.10.183 port 54864 [preauth] 2026-06-30T20:02:51.673734-05:00 claude-cloud sshd[770350]: userauth_pubkey: signature algorithm ssh-dss not in PubkeyAcceptedAlgorithms [preauth] 2026-06-30T20:02:51.876267-05:00 claude-cloud sshd[770350]: Received disconnect from 103.149.26.43 port 40196:11: disconnected by user [preauth] 2026-06-30T20:02:51.876706-05:00 claude-cloud sshd[770350]: Disconnected from authenticating user root 103.149.26.43 port 40196 [preauth] 2026-06-30T20:04:22.929069-05:00 claude-cloud sshd[770725]: Invalid user nvidia from 125.20.210.182 port 55868 2026-06-30T20:04:23.140770-05:00 claude-cloud sshd[770725]: Connection closed by invalid user nvidia 125.20.210.182 port 55868 [preauth] 2026-06-30T20:04:46.339478-05:00 claude-cloud sshd[770899]: Invalid user validator from 45.148.10.183 port 49602 2026-06-30T20:04:46.353195-05:00 claude-cloud sshd[770899]: Connection closed by invalid user validator 45.148.10.183 port 49602 [preauth] 2026-06-30T20:05:01.290614-05:00 claude-cloud CRON[770941]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T20:05:01.296720-05:00 claude-cloud CRON[770941]: pam_unix(cron:session): session closed for user root 2026-06-30T20:05:09.499203-05:00 claude-cloud sshd[770960]: Invalid user ubuntu from 45.198.224.46 port 36120 2026-06-30T20:05:10.142514-05:00 claude-cloud sshd[770960]: Connection closed by invalid user ubuntu 45.198.224.46 port 36120 [preauth] 2026-06-30T20:06:09.457914-05:00 claude-cloud sshd[771583]: Connection reset by authenticating user root 45.227.254.170 port 45696 [preauth] 2026-06-30T20:07:36.693631-05:00 claude-cloud sshd[772715]: Connection closed by authenticating user root 27.71.230.31 port 43994 [preauth] 2026-06-30T20:07:55.172984-05:00 claude-cloud sshd[772874]: Invalid user binance from 45.148.10.183 port 51820 2026-06-30T20:07:55.188388-05:00 claude-cloud sshd[772874]: Connection closed by invalid user binance 45.148.10.183 port 51820 [preauth] 2026-06-30T20:09:57.936713-05:00 claude-cloud sshd[774543]: Received disconnect from 61.76.112.4 port 58284:11: Bye Bye [preauth] 2026-06-30T20:09:57.937608-05:00 claude-cloud sshd[774543]: Disconnected from authenticating user root 61.76.112.4 port 58284 [preauth] 2026-06-30T20:11:03.289800-05:00 claude-cloud sshd[775374]: Invalid user trader from 45.148.10.183 port 45326 2026-06-30T20:11:03.302801-05:00 claude-cloud sshd[775374]: Connection closed by invalid user trader 45.148.10.183 port 45326 [preauth] 2026-06-30T20:12:30.262998-05:00 claude-cloud sshd[776541]: Connection reset by authenticating user root 45.148.10.152 port 65252 [preauth] 2026-06-30T20:12:33.854168-05:00 claude-cloud sshd[776507]: Connection closed by authenticating user root 125.20.210.182 port 58208 [preauth] 2026-06-30T20:13:24.717440-05:00 claude-cloud sshd[777450]: Connection closed by authenticating user root 27.71.230.31 port 37026 [preauth] 2026-06-30T20:13:59.764968-05:00 claude-cloud sshd[778193]: Invalid user trading from 45.148.10.183 port 48398 2026-06-30T20:13:59.778728-05:00 claude-cloud sshd[778193]: Connection closed by invalid user trading 45.148.10.183 port 48398 [preauth] 2026-06-30T20:14:47.837531-05:00 claude-cloud sshd[778634]: Connection closed by authenticating user root 45.198.224.46 port 41440 [preauth] 2026-06-30T20:15:01.308572-05:00 claude-cloud CRON[778799]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T20:15:01.314736-05:00 claude-cloud CRON[778799]: pam_unix(cron:session): session closed for user root 2026-06-30T20:17:00.631996-05:00 claude-cloud sshd[780377]: Invalid user ubuntu from 45.148.10.183 port 60338 2026-06-30T20:17:00.647298-05:00 claude-cloud sshd[780377]: Connection closed by invalid user ubuntu 45.148.10.183 port 60338 [preauth] 2026-06-30T20:17:01.325870-05:00 claude-cloud CRON[780385]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T20:17:01.333960-05:00 claude-cloud CRON[780385]: pam_unix(cron:session): session closed for user root 2026-06-30T20:18:08.665781-05:00 claude-cloud sshd[781398]: Connection reset by authenticating user root 62.60.130.219 port 59170 [preauth] 2026-06-30T20:19:32.697401-05:00 claude-cloud sshd[782316]: Connection closed by authenticating user root 27.71.230.31 port 53872 [preauth] 2026-06-30T20:20:19.271601-05:00 claude-cloud sshd[782892]: Invalid user bitcoin from 45.148.10.183 port 57398 2026-06-30T20:20:19.283976-05:00 claude-cloud sshd[782892]: Connection closed by invalid user bitcoin 45.148.10.183 port 57398 [preauth] 2026-06-30T20:20:39.805109-05:00 claude-cloud sshd[782937]: Invalid user admin from 125.20.210.182 port 48900 2026-06-30T20:20:57.372666-05:00 claude-cloud sshd[782937]: Connection closed by invalid user admin 125.20.210.182 port 48900 [preauth] 2026-06-30T20:23:24.305958-05:00 claude-cloud sshd[785177]: Invalid user ethereum from 45.148.10.183 port 58854 2026-06-30T20:23:24.321790-05:00 claude-cloud sshd[785177]: Connection closed by invalid user ethereum 45.148.10.183 port 58854 [preauth] 2026-06-30T20:23:44.524822-05:00 claude-cloud sshd[785369]: Connection reset by authenticating user root 62.60.130.219 port 32466 [preauth] 2026-06-30T20:24:27.148852-05:00 claude-cloud sshd[786852]: Connection closed by authenticating user root 45.198.224.46 port 42090 [preauth] 2026-06-30T20:25:01.346958-05:00 claude-cloud CRON[787696]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T20:25:01.352639-05:00 claude-cloud CRON[787696]: pam_unix(cron:session): session closed for user root 2026-06-30T20:25:31.529103-05:00 claude-cloud sshd[787810]: Connection closed by authenticating user root 27.71.230.31 port 33330 [preauth] 2026-06-30T20:25:59.833365-05:00 claude-cloud sshd[788656]: Connection closed by authenticating user root 45.148.10.121 port 54106 [preauth] 2026-06-30T20:26:37.285678-05:00 claude-cloud sshd[789498]: Connection closed by authenticating user root 45.148.10.183 port 42762 [preauth] 2026-06-30T20:28:44.251526-05:00 claude-cloud sshd[790902]: Invalid user admin from 193.46.255.86 port 12038 2026-06-30T20:28:44.276672-05:00 claude-cloud sshd[790902]: Connection closed by invalid user admin 193.46.255.86 port 12038 [preauth] 2026-06-30T20:29:22.284861-05:00 claude-cloud sshd[791148]: Connection closed by authenticating user root 125.20.210.182 port 59362 [preauth] 2026-06-30T20:29:23.099344-05:00 claude-cloud sshd[791319]: Connection reset by authenticating user root 45.148.10.151 port 31252 [preauth] 2026-06-30T20:29:41.833932-05:00 claude-cloud sshd[791603]: Invalid user trader from 45.148.10.183 port 35648 2026-06-30T20:29:41.850317-05:00 claude-cloud sshd[791603]: Connection closed by invalid user trader 45.148.10.183 port 35648 [preauth] 2026-06-30T20:31:17.660131-05:00 claude-cloud sshd[793596]: Received disconnect from 61.76.112.4 port 42498:11: Bye Bye [preauth] 2026-06-30T20:31:17.660838-05:00 claude-cloud sshd[793596]: Disconnected from authenticating user root 61.76.112.4 port 42498 [preauth] 2026-06-30T20:31:32.455678-05:00 claude-cloud sshd[793663]: Connection closed by authenticating user root 27.71.230.31 port 43140 [preauth] 2026-06-30T20:32:45.517900-05:00 claude-cloud sshd[794955]: Invalid user trader from 45.148.10.183 port 47386 2026-06-30T20:32:45.532495-05:00 claude-cloud sshd[794955]: Connection closed by invalid user trader 45.148.10.183 port 47386 [preauth] 2026-06-30T20:34:02.395098-05:00 claude-cloud sshd[795724]: Connection closed by authenticating user root 45.198.224.46 port 50484 [preauth] 2026-06-30T20:34:04.501875-05:00 claude-cloud sshd[795802]: Received disconnect from 61.76.112.4 port 48476:11: Bye Bye [preauth] 2026-06-30T20:34:04.502115-05:00 claude-cloud sshd[795802]: Disconnected from authenticating user root 61.76.112.4 port 48476 [preauth] 2026-06-30T20:34:59.557641-05:00 claude-cloud sshd[796336]: Connection reset by authenticating user root 45.148.10.152 port 39932 [preauth] 2026-06-30T20:35:01.363502-05:00 claude-cloud CRON[796407]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T20:35:01.369428-05:00 claude-cloud CRON[796407]: pam_unix(cron:session): session closed for user root 2026-06-30T20:35:48.115456-05:00 claude-cloud sshd[796866]: Invalid user trader from 45.148.10.183 port 50682 2026-06-30T20:35:48.128856-05:00 claude-cloud sshd[796866]: Connection closed by invalid user trader 45.148.10.183 port 50682 [preauth] 2026-06-30T20:36:49.056439-05:00 claude-cloud sshd[797260]: Received disconnect from 61.76.112.4 port 54428:11: Bye Bye [preauth] 2026-06-30T20:36:49.056942-05:00 claude-cloud sshd[797260]: Disconnected from authenticating user root 61.76.112.4 port 54428 [preauth] 2026-06-30T20:37:30.978637-05:00 claude-cloud sshd[797730]: Connection closed by authenticating user root 27.71.230.31 port 46544 [preauth] 2026-06-30T20:37:51.011215-05:00 claude-cloud sshd[798142]: Received disconnect from 45.181.45.238 port 25205:11: Bye Bye [preauth] 2026-06-30T20:37:51.011934-05:00 claude-cloud sshd[798142]: Disconnected from authenticating user root 45.181.45.238 port 25205 [preauth] 2026-06-30T20:38:56.002876-05:00 claude-cloud sshd[798385]: Connection closed by authenticating user root 45.148.10.183 port 57140 [preauth] 2026-06-30T20:39:38.991452-05:00 claude-cloud sshd[798495]: Received disconnect from 61.76.112.4 port 59841:11: Bye Bye [preauth] 2026-06-30T20:39:38.991769-05:00 claude-cloud sshd[798495]: Disconnected from authenticating user root 61.76.112.4 port 59841 [preauth] 2026-06-30T20:40:41.210540-05:00 claude-cloud sshd[798688]: Connection reset by authenticating user root 45.148.10.147 port 34630 [preauth] 2026-06-30T20:42:10.213863-05:00 claude-cloud sshd[798937]: Invalid user exchange from 45.148.10.183 port 35720 2026-06-30T20:42:10.227395-05:00 claude-cloud sshd[798937]: Connection closed by invalid user exchange 45.148.10.183 port 35720 [preauth] 2026-06-30T20:42:19.869582-05:00 claude-cloud sshd[798983]: Invalid user admin from 2.57.121.25 port 61106 2026-06-30T20:42:19.895763-05:00 claude-cloud sshd[798983]: Connection closed by invalid user admin 2.57.121.25 port 61106 [preauth] 2026-06-30T20:42:23.618584-05:00 claude-cloud sshd[798985]: Received disconnect from 61.76.112.4 port 59770:11: Bye Bye [preauth] 2026-06-30T20:42:23.618817-05:00 claude-cloud sshd[798985]: Disconnected from authenticating user root 61.76.112.4 port 59770 [preauth] 2026-06-30T20:43:24.493767-05:00 claude-cloud sshd[799154]: Invalid user user3 from 45.198.224.46 port 60326 2026-06-30T20:43:25.116966-05:00 claude-cloud sshd[799154]: Connection closed by invalid user user3 45.198.224.46 port 60326 [preauth] 2026-06-30T20:43:32.532033-05:00 claude-cloud sshd[799177]: Received disconnect from 43.137.44.200 port 33510:11: Bye Bye [preauth] 2026-06-30T20:43:32.532317-05:00 claude-cloud sshd[799177]: Disconnected from authenticating user root 43.137.44.200 port 33510 [preauth] 2026-06-30T20:43:47.801612-05:00 claude-cloud sshd[799145]: Connection closed by authenticating user root 27.71.230.31 port 50382 [preauth] 2026-06-30T20:44:59.229425-05:00 claude-cloud sshd[799421]: Invalid user david from 45.181.45.238 port 24453 2026-06-30T20:44:59.511057-05:00 claude-cloud sshd[799421]: Received disconnect from 45.181.45.238 port 24453:11: Bye Bye [preauth] 2026-06-30T20:44:59.511228-05:00 claude-cloud sshd[799421]: Disconnected from invalid user david 45.181.45.238 port 24453 [preauth] 2026-06-30T20:45:01.378471-05:00 claude-cloud CRON[799437]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T20:45:01.385031-05:00 claude-cloud CRON[799437]: pam_unix(cron:session): session closed for user root 2026-06-30T20:45:09.249613-05:00 claude-cloud sshd[799449]: Received disconnect from 61.76.112.4 port 54529:11: Bye Bye [preauth] 2026-06-30T20:45:09.250588-05:00 claude-cloud sshd[799449]: Disconnected from authenticating user root 61.76.112.4 port 54529 [preauth] 2026-06-30T20:45:17.610946-05:00 claude-cloud sshd[799498]: Invalid user solana from 45.148.10.183 port 56808 2026-06-30T20:45:17.624395-05:00 claude-cloud sshd[799498]: Connection closed by invalid user solana 45.148.10.183 port 56808 [preauth] 2026-06-30T20:46:13.635860-05:00 claude-cloud sshd[799642]: Connection reset by authenticating user root 45.148.10.147 port 48742 [preauth] 2026-06-30T20:47:43.058696-05:00 claude-cloud sshd[799880]: Received disconnect from 61.76.112.4 port 48950:11: Bye Bye [preauth] 2026-06-30T20:47:43.059187-05:00 claude-cloud sshd[799880]: Disconnected from authenticating user root 61.76.112.4 port 48950 [preauth] 2026-06-30T20:47:49.278346-05:00 claude-cloud sshd[799976]: Received disconnect from 45.181.45.238 port 23809:11: Bye Bye [preauth] 2026-06-30T20:47:49.279914-05:00 claude-cloud sshd[799976]: Disconnected from authenticating user root 45.181.45.238 port 23809 [preauth] 2026-06-30T20:47:52.998629-05:00 claude-cloud sshd[799992]: Invalid user admin from 185.65.202.199 port 58126 2026-06-30T20:47:53.023201-05:00 claude-cloud sshd[799992]: Connection closed by invalid user admin 185.65.202.199 port 58126 [preauth] 2026-06-30T20:48:21.493948-05:00 claude-cloud sshd[800069]: Invalid user sol from 45.148.10.183 port 41020 2026-06-30T20:48:21.506698-05:00 claude-cloud sshd[800069]: Connection closed by invalid user sol 45.148.10.183 port 41020 [preauth] 2026-06-30T20:48:23.729379-05:00 claude-cloud sshd[800078]: Invalid user orangepi from 185.65.202.199 port 50872 2026-06-30T20:48:23.753724-05:00 claude-cloud sshd[800078]: Connection closed by invalid user orangepi 185.65.202.199 port 50872 [preauth] 2026-06-30T20:48:53.931126-05:00 claude-cloud sshd[800156]: Connection closed by authenticating user root 185.65.202.199 port 40408 [preauth] 2026-06-30T20:49:21.109271-05:00 claude-cloud sshd[800236]: Connection closed by 203.121.106.56 port 27978 [preauth] 2026-06-30T20:49:26.068625-05:00 claude-cloud sshd[800213]: Connection closed by authenticating user root 27.71.230.31 port 35424 [preauth] 2026-06-30T20:49:29.207849-05:00 claude-cloud sshd[800255]: Connection closed by authenticating user root 185.65.202.199 port 52156 [preauth] 2026-06-30T20:50:00.431839-05:00 claude-cloud sshd[800354]: Connection closed by authenticating user root 185.65.202.199 port 35726 [preauth] 2026-06-30T20:50:08.898819-05:00 claude-cloud sshd[800370]: Received disconnect from 45.181.45.238 port 24792:11: Bye Bye [preauth] 2026-06-30T20:50:08.899180-05:00 claude-cloud sshd[800370]: Disconnected from authenticating user root 45.181.45.238 port 24792 [preauth] 2026-06-30T20:50:20.462482-05:00 claude-cloud sshd[800420]: Received disconnect from 61.76.112.4 port 43324:11: Bye Bye [preauth] 2026-06-30T20:50:20.462777-05:00 claude-cloud sshd[800420]: Disconnected from authenticating user root 61.76.112.4 port 43324 [preauth] 2026-06-30T20:50:32.637000-05:00 claude-cloud sshd[800449]: Connection closed by authenticating user root 185.65.202.199 port 33082 [preauth] 2026-06-30T20:50:55.218333-05:00 claude-cloud sshd[800538]: Received disconnect from 43.137.44.200 port 57390:11: Bye Bye [preauth] 2026-06-30T20:50:55.218849-05:00 claude-cloud sshd[800538]: Disconnected from authenticating user root 43.137.44.200 port 57390 [preauth] 2026-06-30T20:51:22.563533-05:00 claude-cloud sshd[800619]: Connection closed by authenticating user root 185.65.202.199 port 57268 [preauth] 2026-06-30T20:51:25.490817-05:00 claude-cloud sshd[800628]: Invalid user sol from 45.148.10.183 port 51424 2026-06-30T20:51:25.504490-05:00 claude-cloud sshd[800628]: Connection closed by invalid user sol 45.148.10.183 port 51424 [preauth] 2026-06-30T20:51:47.347166-05:00 claude-cloud sshd[800713]: Connection reset by authenticating user root 45.148.10.152 port 3100 [preauth] 2026-06-30T20:51:52.737743-05:00 claude-cloud sshd[800722]: Connection closed by authenticating user root 185.65.202.199 port 37228 [preauth] 2026-06-30T20:52:28.254454-05:00 claude-cloud sshd[800810]: Received disconnect from 45.181.45.238 port 24324:11: Bye Bye [preauth] 2026-06-30T20:52:28.255318-05:00 claude-cloud sshd[800810]: Disconnected from authenticating user root 45.181.45.238 port 24324 [preauth] 2026-06-30T20:52:30.070624-05:00 claude-cloud sshd[800818]: Invalid user test from 185.65.202.199 port 34042 2026-06-30T20:52:30.100635-05:00 claude-cloud sshd[800818]: Connection closed by invalid user test 185.65.202.199 port 34042 [preauth] 2026-06-30T20:52:38.025921-05:00 claude-cloud sshd[800830]: Received disconnect from 43.137.44.200 port 47904:11: Bye Bye [preauth] 2026-06-30T20:52:38.026596-05:00 claude-cloud sshd[800830]: Disconnected from authenticating user root 43.137.44.200 port 47904 [preauth] 2026-06-30T20:52:52.351885-05:00 claude-cloud sshd[800883]: Invalid user debian from 45.198.224.46 port 59794 2026-06-30T20:52:52.908602-05:00 claude-cloud sshd[800883]: Connection closed by invalid user debian 45.198.224.46 port 59794 [preauth] 2026-06-30T20:53:00.250100-05:00 claude-cloud sshd[800902]: Invalid user user from 185.65.202.199 port 46632 2026-06-30T20:53:00.276787-05:00 claude-cloud sshd[800902]: Connection closed by invalid user user 185.65.202.199 port 46632 [preauth] 2026-06-30T20:53:06.958486-05:00 claude-cloud sshd[800914]: Received disconnect from 61.76.112.4 port 37843:11: Bye Bye [preauth] 2026-06-30T20:53:06.958825-05:00 claude-cloud sshd[800914]: Disconnected from authenticating user root 61.76.112.4 port 37843 [preauth] 2026-06-30T20:53:30.459362-05:00 claude-cloud sshd[800993]: Connection closed by authenticating user root 185.65.202.199 port 37570 [preauth] 2026-06-30T20:54:20.249890-05:00 claude-cloud sshd[801128]: Received disconnect from 43.137.44.200 port 38392:11: Bye Bye [preauth] 2026-06-30T20:54:20.250559-05:00 claude-cloud sshd[801128]: Disconnected from authenticating user root 43.137.44.200 port 38392 [preauth] 2026-06-30T20:54:37.971237-05:00 claude-cloud sshd[801159]: Received disconnect from 45.181.45.238 port 24642:11: Bye Bye [preauth] 2026-06-30T20:54:37.971611-05:00 claude-cloud sshd[801159]: Disconnected from authenticating user root 45.181.45.238 port 24642 [preauth] 2026-06-30T20:55:01.402865-05:00 claude-cloud CRON[801230]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T20:55:01.410394-05:00 claude-cloud CRON[801230]: pam_unix(cron:session): session closed for user root 2026-06-30T20:55:45.936400-05:00 claude-cloud sshd[801376]: Received disconnect from 61.76.112.4 port 60182:11: Bye Bye [preauth] 2026-06-30T20:55:45.937317-05:00 claude-cloud sshd[801376]: Disconnected from authenticating user root 61.76.112.4 port 60182 [preauth] 2026-06-30T20:56:52.060232-05:00 claude-cloud sshd[801553]: Received disconnect from 45.181.45.238 port 24042:11: Bye Bye [preauth] 2026-06-30T20:56:52.060899-05:00 claude-cloud sshd[801553]: Disconnected from authenticating user root 45.181.45.238 port 24042 [preauth] 2026-06-30T20:57:17.080385-05:00 claude-cloud sshd[801628]: Connection reset by authenticating user root 45.148.10.157 port 52952 [preauth] 2026-06-30T20:57:26.058543-05:00 claude-cloud sshd[801644]: Invalid user admin from 45.148.10.121 port 46294 2026-06-30T20:57:26.108335-05:00 claude-cloud sshd[801644]: Connection closed by invalid user admin 45.148.10.121 port 46294 [preauth] 2026-06-30T20:57:33.824970-05:00 claude-cloud sshd[801659]: Invalid user ubuntu from 45.148.10.183 port 46908 2026-06-30T20:57:33.838989-05:00 claude-cloud sshd[801659]: Connection closed by invalid user ubuntu 45.148.10.183 port 46908 [preauth] 2026-06-30T20:58:32.161857-05:00 claude-cloud sshd[801887]: Received disconnect from 61.76.112.4 port 54600:11: Bye Bye [preauth] 2026-06-30T20:58:32.162341-05:00 claude-cloud sshd[801887]: Disconnected from authenticating user root 61.76.112.4 port 54600 [preauth] 2026-06-30T20:58:42.158656-05:00 claude-cloud sshd[801920]: Received disconnect from 43.137.44.200 port 57014:11: Bye Bye [preauth] 2026-06-30T20:58:42.159417-05:00 claude-cloud sshd[801920]: Disconnected from authenticating user root 43.137.44.200 port 57014 [preauth] 2026-06-30T20:59:08.517873-05:00 claude-cloud sshd[801985]: Received disconnect from 45.181.45.238 port 24629:11: Bye Bye [preauth] 2026-06-30T20:59:08.518452-05:00 claude-cloud sshd[801985]: Disconnected from authenticating user root 45.181.45.238 port 24629 [preauth] 2026-06-30T21:00:45.713751-05:00 claude-cloud sshd[802282]: Invalid user ubuntu from 45.148.10.183 port 59682 2026-06-30T21:00:45.728458-05:00 claude-cloud sshd[802282]: Connection closed by invalid user ubuntu 45.148.10.183 port 59682 [preauth] 2026-06-30T21:01:13.235902-05:00 claude-cloud sshd[802345]: Received disconnect from 61.76.112.4 port 48879:11: Bye Bye [preauth] 2026-06-30T21:01:13.236505-05:00 claude-cloud sshd[802345]: Disconnected from authenticating user root 61.76.112.4 port 48879 [preauth] 2026-06-30T21:01:21.548959-05:00 claude-cloud sshd[802376]: Received disconnect from 45.181.45.238 port 23519:11: Bye Bye [preauth] 2026-06-30T21:01:21.549406-05:00 claude-cloud sshd[802376]: Disconnected from authenticating user root 45.181.45.238 port 23519 [preauth] 2026-06-30T21:01:25.676618-05:00 claude-cloud sshd[802386]: Connection closed by authenticating user root 185.242.3.195 port 33822 [preauth] 2026-06-30T21:01:35.029690-05:00 claude-cloud sshd[802368]: Connection closed by authenticating user root 27.71.230.31 port 54614 [preauth] 2026-06-30T21:02:00.481443-05:00 claude-cloud sshd[802496]: Connection closed by authenticating user claude 2.57.121.112 port 27564 [preauth] 2026-06-30T21:02:18.152568-05:00 claude-cloud sshd[802548]: Connection closed by authenticating user root 45.198.224.46 port 42968 [preauth] 2026-06-30T21:02:44.599266-05:00 claude-cloud sshd[802622]: Connection reset by authenticating user root 45.148.10.152 port 64328 [preauth] 2026-06-30T21:03:38.631189-05:00 claude-cloud sshd[802754]: Received disconnect from 45.181.45.238 port 24677:11: Bye Bye [preauth] 2026-06-30T21:03:38.631977-05:00 claude-cloud sshd[802754]: Disconnected from authenticating user root 45.181.45.238 port 24677 [preauth] 2026-06-30T21:03:55.903146-05:00 claude-cloud sshd[802824]: Invalid user ubuntu from 45.148.10.183 port 39096 2026-06-30T21:03:55.916005-05:00 claude-cloud sshd[802824]: Connection closed by invalid user ubuntu 45.148.10.183 port 39096 [preauth] 2026-06-30T21:03:57.692632-05:00 claude-cloud sshd[802826]: Received disconnect from 61.76.112.4 port 42786:11: Bye Bye [preauth] 2026-06-30T21:03:57.693669-05:00 claude-cloud sshd[802826]: Disconnected from authenticating user root 61.76.112.4 port 42786 [preauth] 2026-06-30T21:05:01.422260-05:00 claude-cloud CRON[803004]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T21:05:01.427948-05:00 claude-cloud CRON[803004]: pam_unix(cron:session): session closed for user root 2026-06-30T21:05:58.072377-05:00 claude-cloud sshd[803167]: Received disconnect from 45.181.45.238 port 24199:11: Bye Bye [preauth] 2026-06-30T21:05:58.072693-05:00 claude-cloud sshd[803167]: Disconnected from authenticating user root 45.181.45.238 port 24199 [preauth] 2026-06-30T21:06:21.023595-05:00 claude-cloud sshd[803231]: Received disconnect from 50.7.127.99 port 31568:11: disconnected by user [preauth] 2026-06-30T21:06:21.024364-05:00 claude-cloud sshd[803231]: Disconnected from authenticating user root 50.7.127.99 port 31568 [preauth] 2026-06-30T21:06:40.476021-05:00 claude-cloud sshd[803281]: Received disconnect from 61.76.112.4 port 46321:11: Bye Bye [preauth] 2026-06-30T21:06:40.476636-05:00 claude-cloud sshd[803281]: Disconnected from authenticating user root 61.76.112.4 port 46321 [preauth] 2026-06-30T21:07:17.547399-05:00 claude-cloud sshd[803398]: Invalid user trading from 45.148.10.183 port 32918 2026-06-30T21:07:17.560506-05:00 claude-cloud sshd[803398]: Connection closed by invalid user trading 45.148.10.183 port 32918 [preauth] 2026-06-30T21:07:32.259595-05:00 claude-cloud sshd[803379]: Connection closed by authenticating user root 27.71.230.31 port 53632 [preauth] 2026-06-30T21:08:01.228161-05:00 claude-cloud sshd[803511]: Invalid user ftpuser2 from 49.75.185.71 port 41556 2026-06-30T21:08:01.448456-05:00 claude-cloud sshd[803511]: Received disconnect from 49.75.185.71 port 41556:11: Bye Bye [preauth] 2026-06-30T21:08:01.448675-05:00 claude-cloud sshd[803511]: Disconnected from invalid user ftpuser2 49.75.185.71 port 41556 [preauth] 2026-06-30T21:08:12.966046-05:00 claude-cloud sshd[803551]: Received disconnect from 45.181.45.238 port 23237:11: Bye Bye [preauth] 2026-06-30T21:08:12.966460-05:00 claude-cloud sshd[803551]: Disconnected from authenticating user root 45.181.45.238 port 23237 [preauth] 2026-06-30T21:08:14.694563-05:00 claude-cloud sshd[803567]: Connection reset by authenticating user root 62.60.130.219 port 58674 [preauth] 2026-06-30T21:09:33.186640-05:00 claude-cloud sshd[803834]: Received disconnect from 49.75.185.71 port 60732:11: Bye Bye [preauth] 2026-06-30T21:09:33.187428-05:00 claude-cloud sshd[803834]: Disconnected from authenticating user root 49.75.185.71 port 60732 [preauth] 2026-06-30T21:09:44.258934-05:00 claude-cloud sshd[803871]: Received disconnect from 196.43.115.198 port 46214:11: Bye Bye [preauth] 2026-06-30T21:09:44.259537-05:00 claude-cloud sshd[803871]: Disconnected from authenticating user root 196.43.115.198 port 46214 [preauth] 2026-06-30T21:10:05.847224-05:00 claude-cloud sshd[803924]: Invalid user trader from 45.148.10.183 port 42276 2026-06-30T21:10:05.860828-05:00 claude-cloud sshd[803924]: Connection closed by invalid user trader 45.148.10.183 port 42276 [preauth] 2026-06-30T21:10:29.173042-05:00 claude-cloud sshd[803992]: Received disconnect from 49.75.185.71 port 45584:11: Bye Bye [preauth] 2026-06-30T21:10:29.173596-05:00 claude-cloud sshd[803992]: Disconnected from authenticating user root 49.75.185.71 port 45584 [preauth] 2026-06-30T21:10:32.577839-05:00 claude-cloud sshd[804007]: Received disconnect from 45.181.45.238 port 24951:11: Bye Bye [preauth] 2026-06-30T21:10:32.578901-05:00 claude-cloud sshd[804007]: Disconnected from authenticating user root 45.181.45.238 port 24951 [preauth] 2026-06-30T21:11:07.073151-05:00 claude-cloud sshd[804104]: Received disconnect from 95.58.255.251 port 60032:11: Bye Bye [preauth] 2026-06-30T21:11:07.074053-05:00 claude-cloud sshd[804104]: Disconnected from authenticating user root 95.58.255.251 port 60032 [preauth] 2026-06-30T21:11:27.629170-05:00 claude-cloud sshd[804164]: Received disconnect from 49.75.185.71 port 58664:11: Bye Bye [preauth] 2026-06-30T21:11:27.629785-05:00 claude-cloud sshd[804164]: Disconnected from authenticating user root 49.75.185.71 port 58664 [preauth] 2026-06-30T21:11:47.402172-05:00 claude-cloud sshd[804219]: Connection closed by authenticating user root 45.198.224.46 port 52852 [preauth] 2026-06-30T21:12:34.985151-05:00 claude-cloud sshd[804323]: Received disconnect from 49.75.185.71 port 43512:11: Bye Bye [preauth] 2026-06-30T21:12:34.985476-05:00 claude-cloud sshd[804323]: Disconnected from 49.75.185.71 port 43512 [preauth] 2026-06-30T21:12:46.851412-05:00 claude-cloud sshd[804400]: Received disconnect from 45.181.45.238 port 25001:11: Bye Bye [preauth] 2026-06-30T21:12:46.851706-05:00 claude-cloud sshd[804400]: Disconnected from authenticating user root 45.181.45.238 port 25001 [preauth] 2026-06-30T21:13:06.844476-05:00 claude-cloud sshd[804457]: Invalid user pool from 45.148.10.183 port 33618 2026-06-30T21:13:06.857591-05:00 claude-cloud sshd[804457]: Connection closed by invalid user pool 45.148.10.183 port 33618 [preauth] 2026-06-30T21:13:25.373901-05:00 claude-cloud sshd[804471]: Connection closed by authenticating user root 27.71.230.31 port 57646 [preauth] 2026-06-30T21:13:40.969592-05:00 claude-cloud sshd[804556]: Connection reset by authenticating user root 45.148.10.141 port 47788 [preauth] 2026-06-30T21:14:27.478359-05:00 claude-cloud sshd[804676]: Invalid user adminuser from 106.13.37.197 port 48874 2026-06-30T21:14:27.662043-05:00 claude-cloud sshd[804676]: Received disconnect from 106.13.37.197 port 48874:11: Bye Bye [preauth] 2026-06-30T21:14:27.662396-05:00 claude-cloud sshd[804676]: Disconnected from invalid user adminuser 106.13.37.197 port 48874 [preauth] 2026-06-30T21:14:27.796073-05:00 claude-cloud sshd[804678]: Received disconnect from 74.115.172.118 port 43212:11: Bye Bye [preauth] 2026-06-30T21:14:27.796507-05:00 claude-cloud sshd[804678]: Disconnected from authenticating user root 74.115.172.118 port 43212 [preauth] 2026-06-30T21:14:52.900379-05:00 claude-cloud sshd[804771]: Received disconnect from 212.115.54.84 port 37758:11: Bye Bye [preauth] 2026-06-30T21:14:52.900677-05:00 claude-cloud sshd[804771]: Disconnected from authenticating user root 212.115.54.84 port 37758 [preauth] 2026-06-30T21:15:01.436879-05:00 claude-cloud CRON[804790]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T21:15:01.444446-05:00 claude-cloud CRON[804790]: pam_unix(cron:session): session closed for user root 2026-06-30T21:15:03.817234-05:00 claude-cloud sshd[804793]: Invalid user dennis from 45.181.45.238 port 24442 2026-06-30T21:15:04.093332-05:00 claude-cloud sshd[804793]: Received disconnect from 45.181.45.238 port 24442:11: Bye Bye [preauth] 2026-06-30T21:15:04.093684-05:00 claude-cloud sshd[804793]: Disconnected from invalid user dennis 45.181.45.238 port 24442 [preauth] 2026-06-30T21:15:13.963883-05:00 claude-cloud sshd[804844]: Connection closed by authenticating user root 193.46.255.86 port 17418 [preauth] 2026-06-30T21:17:01.452564-05:00 claude-cloud CRON[805189]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T21:17:01.458151-05:00 claude-cloud CRON[805189]: pam_unix(cron:session): session closed for user root 2026-06-30T21:18:11.841231-05:00 claude-cloud sshd[805378]: Connection closed by 45.148.10.183 port 48072 2026-06-30T21:18:16.892722-05:00 claude-cloud sshd[805410]: Invalid user user from 196.43.115.198 port 40508 2026-06-30T21:18:17.091798-05:00 claude-cloud sshd[805410]: Received disconnect from 196.43.115.198 port 40508:11: Bye Bye [preauth] 2026-06-30T21:18:17.092099-05:00 claude-cloud sshd[805410]: Disconnected from invalid user user 196.43.115.198 port 40508 [preauth] 2026-06-30T21:18:30.681879-05:00 claude-cloud sshd[805433]: Received disconnect from 74.115.172.118 port 42698:11: Bye Bye [preauth] 2026-06-30T21:18:30.682403-05:00 claude-cloud sshd[805433]: Disconnected from authenticating user root 74.115.172.118 port 42698 [preauth] 2026-06-30T21:18:36.843706-05:00 claude-cloud sshd[805452]: Invalid user sftptest from 95.58.255.251 port 32874 2026-06-30T21:18:36.958880-05:00 claude-cloud sshd[805452]: Received disconnect from 95.58.255.251 port 32874:11: Bye Bye [preauth] 2026-06-30T21:18:36.959185-05:00 claude-cloud sshd[805452]: Disconnected from invalid user sftptest 95.58.255.251 port 32874 [preauth] 2026-06-30T21:18:40.360130-05:00 claude-cloud sshd[805456]: Received disconnect from 128.0.104.44 port 44870:11: disconnected by user [preauth] 2026-06-30T21:18:40.360775-05:00 claude-cloud sshd[805456]: Disconnected from authenticating user root 128.0.104.44 port 44870 [preauth] 2026-06-30T21:19:14.718135-05:00 claude-cloud sshd[805638]: Connection reset by authenticating user root 45.148.10.157 port 24340 [preauth] 2026-06-30T21:19:14.824023-05:00 claude-cloud sshd[805619]: Invalid user dev from 212.115.54.84 port 56430 2026-06-30T21:19:15.074646-05:00 claude-cloud sshd[805619]: Received disconnect from 212.115.54.84 port 56430:11: Bye Bye [preauth] 2026-06-30T21:19:15.075022-05:00 claude-cloud sshd[805619]: Disconnected from invalid user dev 212.115.54.84 port 56430 [preauth] 2026-06-30T21:19:23.667862-05:00 claude-cloud sshd[805603]: Connection closed by authenticating user root 27.71.230.31 port 53340 [preauth] 2026-06-30T21:20:05.871086-05:00 claude-cloud sshd[805763]: Received disconnect from 74.115.172.118 port 50136:11: Bye Bye [preauth] 2026-06-30T21:20:05.872206-05:00 claude-cloud sshd[805763]: Disconnected from authenticating user root 74.115.172.118 port 50136 [preauth] 2026-06-30T21:20:22.242024-05:00 claude-cloud sshd[805828]: Received disconnect from 95.58.255.251 port 39204:11: Bye Bye [preauth] 2026-06-30T21:20:22.242733-05:00 claude-cloud sshd[805828]: Disconnected from authenticating user root 95.58.255.251 port 39204 [preauth] 2026-06-30T21:20:36.712997-05:00 claude-cloud sshd[805857]: Received disconnect from 196.43.115.198 port 60280:11: Bye Bye [preauth] 2026-06-30T21:20:36.713522-05:00 claude-cloud sshd[805857]: Disconnected from authenticating user root 196.43.115.198 port 60280 [preauth] 2026-06-30T21:21:12.330397-05:00 claude-cloud sshd[805958]: Received disconnect from 212.115.54.84 port 39170:11: Bye Bye [preauth] 2026-06-30T21:21:12.330956-05:00 claude-cloud sshd[805958]: Disconnected from authenticating user root 212.115.54.84 port 39170 [preauth] 2026-06-30T21:21:31.449767-05:00 claude-cloud sshd[806017]: Connection closed by authenticating user root 45.198.224.46 port 58574 [preauth] 2026-06-30T21:21:43.058988-05:00 claude-cloud sshd[806048]: Invalid user sftptest from 74.115.172.118 port 54140 2026-06-30T21:21:43.177906-05:00 claude-cloud sshd[806048]: Received disconnect from 74.115.172.118 port 54140:11: Bye Bye [preauth] 2026-06-30T21:21:43.178414-05:00 claude-cloud sshd[806048]: Disconnected from invalid user sftptest 74.115.172.118 port 54140 [preauth] 2026-06-30T21:21:57.078469-05:00 claude-cloud sshd[806100]: Invalid user sol from 45.148.10.183 port 35324 2026-06-30T21:21:57.092451-05:00 claude-cloud sshd[806100]: Connection closed by invalid user sol 45.148.10.183 port 35324 [preauth] 2026-06-30T21:22:09.804380-05:00 claude-cloud sshd[806128]: Invalid user test_user from 95.58.255.251 port 44608 2026-06-30T21:22:09.902966-05:00 claude-cloud sshd[806128]: Received disconnect from 95.58.255.251 port 44608:11: Bye Bye [preauth] 2026-06-30T21:22:09.903133-05:00 claude-cloud sshd[806128]: Disconnected from invalid user test_user 95.58.255.251 port 44608 [preauth] 2026-06-30T21:22:15.995138-05:00 claude-cloud sshd[806164]: Invalid user sftpuser from 106.13.37.197 port 41832 2026-06-30T21:22:16.809374-05:00 claude-cloud sshd[806164]: Received disconnect from 106.13.37.197 port 41832:11: Bye Bye [preauth] 2026-06-30T21:22:16.809738-05:00 claude-cloud sshd[806164]: Disconnected from invalid user sftpuser 106.13.37.197 port 41832 [preauth] 2026-06-30T21:23:00.182134-05:00 claude-cloud sshd[806283]: Received disconnect from 196.43.115.198 port 37646:11: Bye Bye [preauth] 2026-06-30T21:23:00.182603-05:00 claude-cloud sshd[806283]: Disconnected from authenticating user root 196.43.115.198 port 37646 [preauth] 2026-06-30T21:23:12.179570-05:00 claude-cloud sshd[806315]: Received disconnect from 212.115.54.84 port 53474:11: Bye Bye [preauth] 2026-06-30T21:23:12.179837-05:00 claude-cloud sshd[806315]: Disconnected from authenticating user root 212.115.54.84 port 53474 [preauth] 2026-06-30T21:23:19.881814-05:00 claude-cloud sshd[806356]: Invalid user test_user from 74.115.172.118 port 45348 2026-06-30T21:23:19.998369-05:00 claude-cloud sshd[806356]: Received disconnect from 74.115.172.118 port 45348:11: Bye Bye [preauth] 2026-06-30T21:23:19.998616-05:00 claude-cloud sshd[806356]: Disconnected from invalid user test_user 74.115.172.118 port 45348 [preauth] 2026-06-30T21:23:54.484992-05:00 claude-cloud sshd[806440]: Invalid user minecraft from 95.58.255.251 port 38032 2026-06-30T21:23:54.596185-05:00 claude-cloud sshd[806440]: Received disconnect from 95.58.255.251 port 38032:11: Bye Bye [preauth] 2026-06-30T21:23:54.596525-05:00 claude-cloud sshd[806440]: Disconnected from invalid user minecraft 95.58.255.251 port 38032 [preauth] 2026-06-30T21:24:43.088090-05:00 claude-cloud sshd[806567]: Connection reset by authenticating user root 45.227.254.170 port 23166 [preauth] 2026-06-30T21:24:45.011493-05:00 claude-cloud sshd[806562]: Invalid user test1 from 106.13.37.197 port 35184 2026-06-30T21:24:45.177625-05:00 claude-cloud sshd[806562]: Received disconnect from 106.13.37.197 port 35184:11: Bye Bye [preauth] 2026-06-30T21:24:45.178022-05:00 claude-cloud sshd[806562]: Disconnected from invalid user test1 106.13.37.197 port 35184 [preauth] 2026-06-30T21:24:52.783630-05:00 claude-cloud sshd[806625]: Received disconnect from 74.115.172.118 port 33316:11: Bye Bye [preauth] 2026-06-30T21:24:52.784326-05:00 claude-cloud sshd[806625]: Disconnected from authenticating user root 74.115.172.118 port 33316 [preauth] 2026-06-30T21:24:54.778475-05:00 claude-cloud sshd[806627]: Invalid user solana from 45.148.10.183 port 45174 2026-06-30T21:24:54.791124-05:00 claude-cloud sshd[806627]: Connection closed by invalid user solana 45.148.10.183 port 45174 [preauth] 2026-06-30T21:25:01.470981-05:00 claude-cloud CRON[806646]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T21:25:01.479498-05:00 claude-cloud CRON[806646]: pam_unix(cron:session): session closed for user root 2026-06-30T21:25:05.219566-05:00 claude-cloud sshd[806649]: Invalid user minecraft from 212.115.54.84 port 51496 2026-06-30T21:25:05.475006-05:00 claude-cloud sshd[806649]: Received disconnect from 212.115.54.84 port 51496:11: Bye Bye [preauth] 2026-06-30T21:25:05.475318-05:00 claude-cloud sshd[806649]: Disconnected from invalid user minecraft 212.115.54.84 port 51496 [preauth] 2026-06-30T21:25:19.866402-05:00 claude-cloud sshd[806707]: Received disconnect from 196.43.115.198 port 43196:11: Bye Bye [preauth] 2026-06-30T21:25:19.867160-05:00 claude-cloud sshd[806707]: Disconnected from authenticating user root 196.43.115.198 port 43196 [preauth] 2026-06-30T21:25:31.998618-05:00 claude-cloud sshd[806737]: Received disconnect from 95.58.255.251 port 34078:11: Bye Bye [preauth] 2026-06-30T21:25:31.999330-05:00 claude-cloud sshd[806737]: Disconnected from authenticating user root 95.58.255.251 port 34078 [preauth] 2026-06-30T21:25:34.255236-05:00 claude-cloud sshd[806704]: Connection closed by authenticating user root 27.71.230.31 port 51292 [preauth] 2026-06-30T21:26:25.974068-05:00 claude-cloud sshd[806879]: Invalid user dev from 74.115.172.118 port 60050 2026-06-30T21:26:26.091487-05:00 claude-cloud sshd[806879]: Received disconnect from 74.115.172.118 port 60050:11: Bye Bye [preauth] 2026-06-30T21:26:26.091817-05:00 claude-cloud sshd[806879]: Disconnected from invalid user dev 74.115.172.118 port 60050 [preauth] 2026-06-30T21:26:50.174443-05:00 claude-cloud sshd[806967]: Received disconnect from 212.115.54.84 port 43844:11: Bye Bye [preauth] 2026-06-30T21:26:50.174773-05:00 claude-cloud sshd[806967]: Disconnected from authenticating user root 212.115.54.84 port 43844 [preauth] 2026-06-30T21:27:08.596860-05:00 claude-cloud sshd[807004]: Received disconnect from 95.58.255.251 port 58100:11: Bye Bye [preauth] 2026-06-30T21:27:08.597389-05:00 claude-cloud sshd[807004]: Disconnected from authenticating user root 95.58.255.251 port 58100 [preauth] 2026-06-30T21:27:10.947897-05:00 claude-cloud sshd[807002]: Received disconnect from 106.13.37.197 port 42126:11: Bye Bye [preauth] 2026-06-30T21:27:10.948361-05:00 claude-cloud sshd[807002]: Disconnected from authenticating user root 106.13.37.197 port 42126 [preauth] 2026-06-30T21:27:36.884403-05:00 claude-cloud sshd[807080]: Invalid user sftptest from 196.43.115.198 port 60532 2026-06-30T21:27:37.084020-05:00 claude-cloud sshd[807080]: Received disconnect from 196.43.115.198 port 60532:11: Bye Bye [preauth] 2026-06-30T21:27:37.084632-05:00 claude-cloud sshd[807080]: Disconnected from invalid user sftptest 196.43.115.198 port 60532 [preauth] 2026-06-30T21:27:56.422937-05:00 claude-cloud sshd[807140]: Invalid user minecraft from 74.115.172.118 port 48808 2026-06-30T21:27:56.537081-05:00 claude-cloud sshd[807140]: Received disconnect from 74.115.172.118 port 48808:11: Bye Bye [preauth] 2026-06-30T21:27:56.537440-05:00 claude-cloud sshd[807140]: Disconnected from invalid user minecraft 74.115.172.118 port 48808 [preauth] 2026-06-30T21:28:27.913404-05:00 claude-cloud sshd[807226]: Invalid user solana from 45.148.10.183 port 56402 2026-06-30T21:28:27.928114-05:00 claude-cloud sshd[807226]: Connection closed by invalid user solana 45.148.10.183 port 56402 [preauth] 2026-06-30T21:28:42.006031-05:00 claude-cloud sshd[807257]: Invalid user oracle from 212.115.54.84 port 57870 2026-06-30T21:28:42.233586-05:00 claude-cloud sshd[807257]: Received disconnect from 212.115.54.84 port 57870:11: Bye Bye [preauth] 2026-06-30T21:28:42.234018-05:00 claude-cloud sshd[807257]: Disconnected from invalid user oracle 212.115.54.84 port 57870 [preauth] 2026-06-30T21:28:45.493458-05:00 claude-cloud sshd[807361]: Invalid user admin from 45.148.10.121 port 40736 2026-06-30T21:28:45.507831-05:00 claude-cloud sshd[807361]: Connection closed by invalid user admin 45.148.10.121 port 40736 [preauth] 2026-06-30T21:28:51.506449-05:00 claude-cloud sshd[807376]: Received disconnect from 95.58.255.251 port 34854:11: Bye Bye [preauth] 2026-06-30T21:28:51.507033-05:00 claude-cloud sshd[807376]: Disconnected from authenticating user root 95.58.255.251 port 34854 [preauth] 2026-06-30T21:29:34.198701-05:00 claude-cloud sshd[807480]: Invalid user user from 74.115.172.118 port 38572 2026-06-30T21:29:34.313420-05:00 claude-cloud sshd[807480]: Received disconnect from 74.115.172.118 port 38572:11: Bye Bye [preauth] 2026-06-30T21:29:34.313794-05:00 claude-cloud sshd[807480]: Disconnected from invalid user user 74.115.172.118 port 38572 [preauth] 2026-06-30T21:29:39.166205-05:00 claude-cloud sshd[807492]: Received disconnect from 106.13.37.197 port 60036:11: Bye Bye [preauth] 2026-06-30T21:29:39.166627-05:00 claude-cloud sshd[807492]: Disconnected from authenticating user root 106.13.37.197 port 60036 [preauth] 2026-06-30T21:29:53.476615-05:00 claude-cloud sshd[807545]: Invalid user oracle from 196.43.115.198 port 59774 2026-06-30T21:29:53.674360-05:00 claude-cloud sshd[807545]: Received disconnect from 196.43.115.198 port 59774:11: Bye Bye [preauth] 2026-06-30T21:29:53.674748-05:00 claude-cloud sshd[807545]: Disconnected from invalid user oracle 196.43.115.198 port 59774 [preauth] 2026-06-30T21:30:15.042093-05:00 claude-cloud sshd[807618]: Connection reset by authenticating user root 45.148.10.141 port 49182 [preauth] 2026-06-30T21:30:33.275794-05:00 claude-cloud sshd[807656]: Invalid user oracle from 95.58.255.251 port 55184 2026-06-30T21:30:33.387594-05:00 claude-cloud sshd[807656]: Received disconnect from 95.58.255.251 port 55184:11: Bye Bye [preauth] 2026-06-30T21:30:33.387796-05:00 claude-cloud sshd[807656]: Disconnected from invalid user oracle 95.58.255.251 port 55184 [preauth] 2026-06-30T21:30:34.916108-05:00 claude-cloud sshd[807658]: Invalid user sftptest from 212.115.54.84 port 46912 2026-06-30T21:30:35.178777-05:00 claude-cloud sshd[807658]: Received disconnect from 212.115.54.84 port 46912:11: Bye Bye [preauth] 2026-06-30T21:30:35.178991-05:00 claude-cloud sshd[807658]: Disconnected from invalid user sftptest 212.115.54.84 port 46912 [preauth] 2026-06-30T21:31:05.795694-05:00 claude-cloud sshd[807751]: Connection closed by authenticating user root 45.198.224.46 port 49576 [preauth] 2026-06-30T21:31:23.020402-05:00 claude-cloud sshd[807760]: Connection closed by authenticating user root 27.71.230.31 port 37356 [preauth] 2026-06-30T21:31:32.348142-05:00 claude-cloud sshd[807834]: Invalid user sol from 45.148.10.183 port 58086 2026-06-30T21:31:32.362741-05:00 claude-cloud sshd[807834]: Connection closed by invalid user sol 45.148.10.183 port 58086 [preauth] 2026-06-30T21:31:54.786249-05:00 claude-cloud sshd[807889]: Connection closed by authenticating user root 106.12.15.118 port 59450 [preauth] 2026-06-30T21:31:59.617568-05:00 claude-cloud sshd[807909]: Connection closed by authenticating user root 106.12.15.118 port 52686 [preauth] 2026-06-30T21:32:05.472799-05:00 claude-cloud sshd[807917]: Connection closed by authenticating user root 106.12.15.118 port 36780 [preauth] 2026-06-30T21:32:06.212031-05:00 claude-cloud sshd[807925]: Received disconnect from 106.13.37.197 port 37556:11: Bye Bye [preauth] 2026-06-30T21:32:06.212582-05:00 claude-cloud sshd[807925]: Disconnected from authenticating user root 106.13.37.197 port 37556 [preauth] 2026-06-30T21:32:08.356508-05:00 claude-cloud sshd[807935]: Received disconnect from 196.43.115.198 port 34242:11: Bye Bye [preauth] 2026-06-30T21:32:08.357087-05:00 claude-cloud sshd[807935]: Disconnected from authenticating user root 196.43.115.198 port 34242 [preauth] 2026-06-30T21:32:16.391575-05:00 claude-cloud sshd[807974]: Received disconnect from 95.58.255.251 port 45252:11: Bye Bye [preauth] 2026-06-30T21:32:16.392045-05:00 claude-cloud sshd[807974]: Disconnected from authenticating user root 95.58.255.251 port 45252 [preauth] 2026-06-30T21:32:21.379235-05:00 claude-cloud sshd[807986]: Received disconnect from 212.115.54.84 port 39484:11: Bye Bye [preauth] 2026-06-30T21:32:21.379504-05:00 claude-cloud sshd[807986]: Disconnected from authenticating user root 212.115.54.84 port 39484 [preauth] 2026-06-30T21:33:15.201218-05:00 claude-cloud sshd[808132]: Invalid user demoapp from 102.210.149.236 port 6659 2026-06-30T21:33:15.379591-05:00 claude-cloud sshd[808132]: Received disconnect from 102.210.149.236 port 6659:11: Bye Bye [preauth] 2026-06-30T21:33:15.379895-05:00 claude-cloud sshd[808132]: Disconnected from invalid user demoapp 102.210.149.236 port 6659 [preauth] 2026-06-30T21:34:04.071239-05:00 claude-cloud sshd[808275]: Invalid user dev from 95.58.255.251 port 49464 2026-06-30T21:34:04.192792-05:00 claude-cloud sshd[808275]: Received disconnect from 95.58.255.251 port 49464:11: Bye Bye [preauth] 2026-06-30T21:34:04.192988-05:00 claude-cloud sshd[808275]: Disconnected from invalid user dev 95.58.255.251 port 49464 [preauth] 2026-06-30T21:34:08.314172-05:00 claude-cloud sshd[808277]: Invalid user test_user from 212.115.54.84 port 45604 2026-06-30T21:34:08.575629-05:00 claude-cloud sshd[808277]: Received disconnect from 212.115.54.84 port 45604:11: Bye Bye [preauth] 2026-06-30T21:34:08.575847-05:00 claude-cloud sshd[808277]: Disconnected from invalid user test_user 212.115.54.84 port 45604 [preauth] 2026-06-30T21:34:17.541124-05:00 claude-cloud sshd[808322]: Invalid user test_user from 196.43.115.198 port 36720 2026-06-30T21:34:17.738599-05:00 claude-cloud sshd[808322]: Received disconnect from 196.43.115.198 port 36720:11: Bye Bye [preauth] 2026-06-30T21:34:17.739069-05:00 claude-cloud sshd[808322]: Disconnected from invalid user test_user 196.43.115.198 port 36720 [preauth] 2026-06-30T21:34:31.492093-05:00 claude-cloud sshd[808350]: Received disconnect from 106.13.37.197 port 58828:11: Bye Bye [preauth] 2026-06-30T21:34:31.492430-05:00 claude-cloud sshd[808350]: Disconnected from authenticating user root 106.13.37.197 port 58828 [preauth] 2026-06-30T21:34:56.939688-05:00 claude-cloud sshd[808439]: Invalid user sol from 45.148.10.183 port 38446 2026-06-30T21:34:56.953101-05:00 claude-cloud sshd[808439]: Connection closed by invalid user sol 45.148.10.183 port 38446 [preauth] 2026-06-30T21:35:01.497961-05:00 claude-cloud CRON[808454]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T21:35:01.506141-05:00 claude-cloud CRON[808454]: pam_unix(cron:session): session closed for user root 2026-06-30T21:35:25.841373-05:00 claude-cloud sshd[808529]: Invalid user admin from 2.57.121.25 port 30558 2026-06-30T21:35:25.867888-05:00 claude-cloud sshd[808529]: Connection closed by invalid user admin 2.57.121.25 port 30558 [preauth] 2026-06-30T21:35:46.456966-05:00 claude-cloud sshd[808588]: Connection reset by authenticating user root 45.148.10.147 port 32604 [preauth] 2026-06-30T21:35:50.422910-05:00 claude-cloud sshd[808599]: Invalid user user from 95.58.255.251 port 54716 2026-06-30T21:35:50.522365-05:00 claude-cloud sshd[808599]: Received disconnect from 95.58.255.251 port 54716:11: Bye Bye [preauth] 2026-06-30T21:35:50.523910-05:00 claude-cloud sshd[808599]: Disconnected from invalid user user 95.58.255.251 port 54716 [preauth] 2026-06-30T21:36:03.574227-05:00 claude-cloud sshd[808625]: Received disconnect from 212.115.54.84 port 57690:11: Bye Bye [preauth] 2026-06-30T21:36:03.574779-05:00 claude-cloud sshd[808625]: Disconnected from authenticating user root 212.115.54.84 port 57690 [preauth] 2026-06-30T21:36:34.808444-05:00 claude-cloud sshd[808706]: Received disconnect from 196.43.115.198 port 55846:11: Bye Bye [preauth] 2026-06-30T21:36:34.809553-05:00 claude-cloud sshd[808706]: Disconnected from authenticating user root 196.43.115.198 port 55846 [preauth] 2026-06-30T21:37:04.991201-05:00 claude-cloud sshd[808807]: Invalid user testsftp from 106.13.37.197 port 60668 2026-06-30T21:37:05.795802-05:00 claude-cloud sshd[808807]: Received disconnect from 106.13.37.197 port 60668:11: Bye Bye [preauth] 2026-06-30T21:37:05.796030-05:00 claude-cloud sshd[808807]: Disconnected from invalid user testsftp 106.13.37.197 port 60668 [preauth] 2026-06-30T21:37:17.512207-05:00 claude-cloud sshd[808862]: Invalid user deployer from 102.210.149.236 port 32039 2026-06-30T21:37:17.694475-05:00 claude-cloud sshd[808862]: Received disconnect from 102.210.149.236 port 32039:11: Bye Bye [preauth] 2026-06-30T21:37:17.694850-05:00 claude-cloud sshd[808862]: Disconnected from invalid user deployer 102.210.149.236 port 32039 [preauth] 2026-06-30T21:37:18.182818-05:00 claude-cloud sshd[808816]: Connection closed by authenticating user root 27.71.230.31 port 60908 [preauth] 2026-06-30T21:37:32.345915-05:00 claude-cloud sshd[808896]: Received disconnect from 95.58.255.251 port 41136:11: Bye Bye [preauth] 2026-06-30T21:37:32.346524-05:00 claude-cloud sshd[808896]: Disconnected from authenticating user root 95.58.255.251 port 41136 [preauth] 2026-06-30T21:37:37.829344-05:00 claude-cloud sshd[808907]: Invalid user sol from 45.148.10.183 port 54596 2026-06-30T21:37:37.843873-05:00 claude-cloud sshd[808907]: Connection closed by invalid user sol 45.148.10.183 port 54596 [preauth] 2026-06-30T21:37:56.202507-05:00 claude-cloud sshd[808960]: Invalid user user from 212.115.54.84 port 41232 2026-06-30T21:37:56.429737-05:00 claude-cloud sshd[808960]: Received disconnect from 212.115.54.84 port 41232:11: Bye Bye [preauth] 2026-06-30T21:37:56.430082-05:00 claude-cloud sshd[808960]: Disconnected from invalid user user 212.115.54.84 port 41232 [preauth] 2026-06-30T21:38:48.681769-05:00 claude-cloud sshd[809127]: Received disconnect from 196.43.115.198 port 39168:11: Bye Bye [preauth] 2026-06-30T21:38:48.682644-05:00 claude-cloud sshd[809127]: Disconnected from authenticating user root 196.43.115.198 port 39168 [preauth] 2026-06-30T21:39:08.459058-05:00 claude-cloud sshd[809168]: Received disconnect from 95.58.255.251 port 56502:11: Bye Bye [preauth] 2026-06-30T21:39:08.459361-05:00 claude-cloud sshd[809168]: Disconnected from authenticating user root 95.58.255.251 port 56502 [preauth] 2026-06-30T21:39:09.691247-05:00 claude-cloud sshd[809170]: Received disconnect from 102.210.149.236 port 18789:11: Bye Bye [preauth] 2026-06-30T21:39:09.691527-05:00 claude-cloud sshd[809170]: Disconnected from authenticating user root 102.210.149.236 port 18789 [preauth] 2026-06-30T21:39:28.052869-05:00 claude-cloud sshd[809229]: Received disconnect from 106.13.37.197 port 45330:11: Bye Bye [preauth] 2026-06-30T21:39:28.053467-05:00 claude-cloud sshd[809229]: Disconnected from authenticating user root 106.13.37.197 port 45330 [preauth] 2026-06-30T21:39:45.975469-05:00 claude-cloud sshd[809320]: Received disconnect from 212.115.54.84 port 50624:11: Bye Bye [preauth] 2026-06-30T21:39:45.975997-05:00 claude-cloud sshd[809320]: Disconnected from authenticating user root 212.115.54.84 port 50624 [preauth] 2026-06-30T21:40:35.309563-05:00 claude-cloud sshd[809484]: Invalid user Robert from 45.198.224.46 port 54248 2026-06-30T21:40:36.007174-05:00 claude-cloud sshd[809484]: Connection closed by invalid user Robert 45.198.224.46 port 54248 [preauth] 2026-06-30T21:40:49.702124-05:00 claude-cloud sshd[809531]: Received disconnect from 95.58.255.251 port 42324:11: Bye Bye [preauth] 2026-06-30T21:40:49.702803-05:00 claude-cloud sshd[809531]: Disconnected from authenticating user root 95.58.255.251 port 42324 [preauth] 2026-06-30T21:41:02.169319-05:00 claude-cloud sshd[809556]: Received disconnect from 102.210.149.236 port 3087:11: Bye Bye [preauth] 2026-06-30T21:41:02.169996-05:00 claude-cloud sshd[809556]: Disconnected from authenticating user root 102.210.149.236 port 3087 [preauth] 2026-06-30T21:41:09.359455-05:00 claude-cloud sshd[809575]: Received disconnect from 196.43.115.198 port 50652:11: Bye Bye [preauth] 2026-06-30T21:41:09.359915-05:00 claude-cloud sshd[809575]: Disconnected from authenticating user root 196.43.115.198 port 50652 [preauth] 2026-06-30T21:41:19.405222-05:00 claude-cloud sshd[809620]: Connection reset by authenticating user root 62.60.130.219 port 42168 [preauth] 2026-06-30T21:41:23.247103-05:00 claude-cloud sshd[809629]: Invalid user solana from 45.148.10.183 port 48702 2026-06-30T21:41:23.262126-05:00 claude-cloud sshd[809629]: Connection closed by invalid user solana 45.148.10.183 port 48702 [preauth] 2026-06-30T21:41:39.302263-05:00 claude-cloud sshd[809656]: Received disconnect from 212.115.54.84 port 35114:11: Bye Bye [preauth] 2026-06-30T21:41:39.302943-05:00 claude-cloud sshd[809656]: Disconnected from authenticating user root 212.115.54.84 port 35114 [preauth] 2026-06-30T21:41:59.121161-05:00 claude-cloud sshd[809731]: Invalid user user from 106.13.37.197 port 34894 2026-06-30T21:41:59.298048-05:00 claude-cloud sshd[809731]: Received disconnect from 106.13.37.197 port 34894:11: Bye Bye [preauth] 2026-06-30T21:41:59.298327-05:00 claude-cloud sshd[809731]: Disconnected from invalid user user 106.13.37.197 port 34894 [preauth] 2026-06-30T21:43:00.111369-05:00 claude-cloud sshd[809903]: Received disconnect from 102.210.149.236 port 48619:11: Bye Bye [preauth] 2026-06-30T21:43:00.111727-05:00 claude-cloud sshd[809903]: Disconnected from authenticating user root 102.210.149.236 port 48619 [preauth] 2026-06-30T21:43:12.990037-05:00 claude-cloud sshd[809911]: Connection closed by authenticating user root 27.71.230.31 port 34972 [preauth] 2026-06-30T21:43:29.161373-05:00 claude-cloud sshd[809980]: Invalid user dev from 196.43.115.198 port 47726 2026-06-30T21:43:29.356850-05:00 claude-cloud sshd[809980]: Received disconnect from 196.43.115.198 port 47726:11: Bye Bye [preauth] 2026-06-30T21:43:29.357262-05:00 claude-cloud sshd[809980]: Disconnected from invalid user dev 196.43.115.198 port 47726 [preauth] 2026-06-30T21:43:30.241628-05:00 claude-cloud sshd[809982]: Received disconnect from 212.115.54.84 port 35274:11: Bye Bye [preauth] 2026-06-30T21:43:30.241971-05:00 claude-cloud sshd[809982]: Disconnected from authenticating user root 212.115.54.84 port 35274 [preauth] 2026-06-30T21:43:48.375958-05:00 claude-cloud sshd[810063]: Invalid user solana from 45.148.10.183 port 52880 2026-06-30T21:43:48.389624-05:00 claude-cloud sshd[810063]: Connection closed by invalid user solana 45.148.10.183 port 52880 [preauth] 2026-06-30T21:44:28.425387-05:00 claude-cloud sshd[810158]: Received disconnect from 106.13.37.197 port 60036:11: Bye Bye [preauth] 2026-06-30T21:44:28.425791-05:00 claude-cloud sshd[810158]: Disconnected from authenticating user root 106.13.37.197 port 60036 [preauth] 2026-06-30T21:44:57.044036-05:00 claude-cloud sshd[810241]: Received disconnect from 102.210.149.236 port 55058:11: Bye Bye [preauth] 2026-06-30T21:44:57.044669-05:00 claude-cloud sshd[810241]: Disconnected from authenticating user root 102.210.149.236 port 55058 [preauth] 2026-06-30T21:45:01.518735-05:00 claude-cloud CRON[810256]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T21:45:01.525999-05:00 claude-cloud CRON[810256]: pam_unix(cron:session): session closed for user root 2026-06-30T21:45:49.113852-05:00 claude-cloud sshd[810401]: Invalid user minecraft from 196.43.115.198 port 47958 2026-06-30T21:45:49.315598-05:00 claude-cloud sshd[810401]: Received disconnect from 196.43.115.198 port 47958:11: Bye Bye [preauth] 2026-06-30T21:45:49.316225-05:00 claude-cloud sshd[810401]: Disconnected from invalid user minecraft 196.43.115.198 port 47958 [preauth] 2026-06-30T21:46:46.491189-05:00 claude-cloud sshd[810556]: Received disconnect from 102.210.149.236 port 10281:11: Bye Bye [preauth] 2026-06-30T21:46:46.491772-05:00 claude-cloud sshd[810556]: Disconnected from authenticating user root 102.210.149.236 port 10281 [preauth] 2026-06-30T21:46:51.546678-05:00 claude-cloud sshd[810571]: Connection reset by authenticating user root 45.227.254.170 port 4130 [preauth] 2026-06-30T21:46:54.746462-05:00 claude-cloud sshd[810580]: Received disconnect from 106.13.37.197 port 49802:11: Bye Bye [preauth] 2026-06-30T21:46:54.746878-05:00 claude-cloud sshd[810580]: Disconnected from authenticating user root 106.13.37.197 port 49802 [preauth] 2026-06-30T21:47:15.169139-05:00 claude-cloud sshd[810642]: Invalid user solana from 45.148.10.183 port 48124 2026-06-30T21:47:15.183503-05:00 claude-cloud sshd[810642]: Connection closed by invalid user solana 45.148.10.183 port 48124 [preauth] 2026-06-30T21:48:01.759598-05:00 claude-cloud sshd[810772]: Received disconnect from 196.43.115.198 port 36354:11: Bye Bye [preauth] 2026-06-30T21:48:01.759944-05:00 claude-cloud sshd[810772]: Disconnected from authenticating user root 196.43.115.198 port 36354 [preauth] 2026-06-30T21:48:38.397241-05:00 claude-cloud sshd[810864]: Received disconnect from 102.210.149.236 port 18789:11: Bye Bye [preauth] 2026-06-30T21:48:38.397996-05:00 claude-cloud sshd[810864]: Disconnected from authenticating user root 102.210.149.236 port 18789 [preauth] 2026-06-30T21:49:12.114830-05:00 claude-cloud sshd[810937]: Connection closed by authenticating user root 27.71.230.31 port 45658 [preauth] 2026-06-30T21:49:17.552901-05:00 claude-cloud sshd[810990]: Invalid user ubuntu from 106.13.37.197 port 41708 2026-06-30T21:49:17.727087-05:00 claude-cloud sshd[810990]: Received disconnect from 106.13.37.197 port 41708:11: Bye Bye [preauth] 2026-06-30T21:49:17.727436-05:00 claude-cloud sshd[810990]: Disconnected from invalid user ubuntu 106.13.37.197 port 41708 [preauth] 2026-06-30T21:50:08.225569-05:00 claude-cloud sshd[811184]: Invalid user sol from 45.148.10.183 port 56398 2026-06-30T21:50:08.239980-05:00 claude-cloud sshd[811184]: Connection closed by invalid user sol 45.148.10.183 port 56398 [preauth] 2026-06-30T21:50:14.451676-05:00 claude-cloud sshd[811199]: Invalid user Robert from 45.198.224.46 port 57800 2026-06-30T21:50:15.258647-05:00 claude-cloud sshd[811199]: Connection closed by invalid user Robert 45.198.224.46 port 57800 [preauth] 2026-06-30T21:50:29.738963-05:00 claude-cloud sshd[811249]: Received disconnect from 102.210.149.236 port 28695:11: Bye Bye [preauth] 2026-06-30T21:50:29.739201-05:00 claude-cloud sshd[811249]: Disconnected from authenticating user root 102.210.149.236 port 28695 [preauth] 2026-06-30T21:52:22.908192-05:00 claude-cloud sshd[811583]: Received disconnect from 102.210.149.236 port 55069:11: Bye Bye [preauth] 2026-06-30T21:52:22.909206-05:00 claude-cloud sshd[811583]: Disconnected from authenticating user root 102.210.149.236 port 55069 [preauth] 2026-06-30T21:52:24.792472-05:00 claude-cloud sshd[811585]: Connection reset by authenticating user root 45.227.254.170 port 13924 [preauth] 2026-06-30T21:53:28.253761-05:00 claude-cloud sshd[811751]: Invalid user sol from 45.148.10.183 port 38688 2026-06-30T21:53:28.268335-05:00 claude-cloud sshd[811751]: Connection closed by invalid user sol 45.148.10.183 port 38688 [preauth] 2026-06-30T21:54:21.116648-05:00 claude-cloud sshd[811912]: Received disconnect from 102.210.149.236 port 54703:11: Bye Bye [preauth] 2026-06-30T21:54:21.117536-05:00 claude-cloud sshd[811912]: Disconnected from authenticating user root 102.210.149.236 port 54703 [preauth] 2026-06-30T21:55:01.537955-05:00 claude-cloud CRON[812018]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T21:55:01.545252-05:00 claude-cloud CRON[812018]: pam_unix(cron:session): session closed for user root 2026-06-30T21:55:56.221569-05:00 claude-cloud sshd[811975]: Connection closed by authenticating user root 27.71.230.31 port 36582 [preauth] 2026-06-30T21:56:14.656893-05:00 claude-cloud sshd[812230]: Invalid user sol from 45.148.10.183 port 60960 2026-06-30T21:56:14.671506-05:00 claude-cloud sshd[812230]: Connection closed by invalid user sol 45.148.10.183 port 60960 [preauth] 2026-06-30T21:56:18.808589-05:00 claude-cloud sshd[812248]: Received disconnect from 102.210.149.236 port 23796:11: Bye Bye [preauth] 2026-06-30T21:56:18.809237-05:00 claude-cloud sshd[812248]: Disconnected from authenticating user root 102.210.149.236 port 23796 [preauth] 2026-06-30T21:56:30.335462-05:00 claude-cloud sshd[812278]: Connection closed by 200.126.105.149 port 7266 2026-06-30T21:57:58.304260-05:00 claude-cloud sshd[812528]: Connection reset by authenticating user root 45.148.10.141 port 10400 [preauth] 2026-06-30T21:58:11.898735-05:00 claude-cloud sshd[812559]: Received disconnect from 102.210.149.236 port 40468:11: Bye Bye [preauth] 2026-06-30T21:58:11.899203-05:00 claude-cloud sshd[812559]: Disconnected from authenticating user root 102.210.149.236 port 40468 [preauth] 2026-06-30T21:59:16.193579-05:00 claude-cloud sshd[812754]: Invalid user sol from 45.148.10.183 port 53478 2026-06-30T21:59:16.207887-05:00 claude-cloud sshd[812754]: Connection closed by invalid user sol 45.148.10.183 port 53478 [preauth] 2026-06-30T21:59:49.157102-05:00 claude-cloud sshd[812904]: Invalid user oracle from 45.198.224.46 port 52408 2026-06-30T21:59:49.832762-05:00 claude-cloud sshd[812904]: Connection closed by invalid user oracle 45.198.224.46 port 52408 [preauth] 2026-06-30T22:00:08.420915-05:00 claude-cloud sshd[812945]: Received disconnect from 102.210.149.236 port 5124:11: Bye Bye [preauth] 2026-06-30T22:00:08.421359-05:00 claude-cloud sshd[812945]: Disconnected from authenticating user root 102.210.149.236 port 5124 [preauth] 2026-06-30T22:01:00.372398-05:00 claude-cloud sshd[813068]: Connection closed by authenticating user root 27.71.230.31 port 56982 [preauth] 2026-06-30T22:01:41.779906-05:00 claude-cloud sshd[813192]: Invalid user ftpuser from 193.46.255.86 port 31496 2026-06-30T22:01:41.804734-05:00 claude-cloud sshd[813192]: Connection closed by invalid user ftpuser 193.46.255.86 port 31496 [preauth] 2026-06-30T22:02:03.380041-05:00 claude-cloud sshd[813273]: Invalid user admin from 102.210.149.236 port 44995 2026-06-30T22:02:03.568232-05:00 claude-cloud sshd[813273]: Received disconnect from 102.210.149.236 port 44995:11: Bye Bye [preauth] 2026-06-30T22:02:03.568456-05:00 claude-cloud sshd[813273]: Disconnected from invalid user admin 102.210.149.236 port 44995 [preauth] 2026-06-30T22:02:42.241875-05:00 claude-cloud sshd[813377]: Connection closed by authenticating user root 45.148.10.183 port 52850 [preauth] 2026-06-30T22:03:29.580551-05:00 claude-cloud sshd[813517]: Connection reset by authenticating user root 45.148.10.141 port 42236 [preauth] 2026-06-30T22:05:01.556785-05:00 claude-cloud CRON[813778]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T22:05:01.563338-05:00 claude-cloud CRON[813778]: pam_unix(cron:session): session closed for user root 2026-06-30T22:05:58.079893-05:00 claude-cloud sshd[813937]: Connection closed by authenticating user root 45.148.10.183 port 60448 [preauth] 2026-06-30T22:07:25.997761-05:00 claude-cloud sshd[814096]: Connection closed by authenticating user root 27.71.230.31 port 39620 [preauth] 2026-06-30T22:08:31.634701-05:00 claude-cloud sshd[814375]: Connection closed by 176.32.193.16 port 60023 2026-06-30T22:09:01.782173-05:00 claude-cloud sshd[814451]: Connection reset by authenticating user root 45.227.254.170 port 47786 [preauth] 2026-06-30T22:09:02.112381-05:00 claude-cloud sshd[814453]: Connection closed by 176.32.193.16 port 52784 2026-06-30T22:09:02.252615-05:00 claude-cloud sshd[814454]: Unable to negotiate with 176.32.193.16 port 52786: no matching host key type found. Their offer: ssh-rsa,ssh-dss [preauth] 2026-06-30T22:09:02.467257-05:00 claude-cloud sshd[814456]: Invalid user solana from 45.148.10.183 port 37668 2026-06-30T22:09:02.481306-05:00 claude-cloud sshd[814456]: Connection closed by invalid user solana 45.148.10.183 port 37668 [preauth] 2026-06-30T22:09:33.266980-05:00 claude-cloud sshd[814537]: Connection closed by authenticating user root 45.198.224.46 port 56790 [preauth] 2026-06-30T22:11:21.253682-05:00 claude-cloud sshd[814858]: Connection closed by 66.132.172.196 port 28030 [preauth] 2026-06-30T22:12:08.150894-05:00 claude-cloud sshd[815041]: Invalid user solana from 45.148.10.183 port 60060 2026-06-30T22:12:08.165493-05:00 claude-cloud sshd[815041]: Connection closed by invalid user solana 45.148.10.183 port 60060 [preauth] 2026-06-30T22:12:58.360670-05:00 claude-cloud sshd[815238]: Invalid user jacky from 2.57.121.112 port 63624 2026-06-30T22:12:58.386359-05:00 claude-cloud sshd[815238]: Connection closed by invalid user jacky 2.57.121.112 port 63624 [preauth] 2026-06-30T22:13:08.876621-05:00 claude-cloud sshd[815210]: Connection closed by authenticating user root 27.71.230.31 port 53172 [preauth] 2026-06-30T22:14:29.050531-05:00 claude-cloud sshd[815479]: Connection reset by authenticating user root 45.148.10.147 port 54344 [preauth] 2026-06-30T22:15:01.578653-05:00 claude-cloud CRON[815609]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T22:15:01.584395-05:00 claude-cloud CRON[815609]: pam_unix(cron:session): session closed for user root 2026-06-30T22:15:23.061224-05:00 claude-cloud sshd[815724]: Invalid user solana from 45.148.10.183 port 48904 2026-06-30T22:15:23.075073-05:00 claude-cloud sshd[815724]: Connection closed by invalid user solana 45.148.10.183 port 48904 [preauth] 2026-06-30T22:17:01.592866-05:00 claude-cloud CRON[816540]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T22:17:01.598517-05:00 claude-cloud CRON[816540]: pam_unix(cron:session): session closed for user root 2026-06-30T22:18:10.918571-05:00 claude-cloud sshd[817099]: Invalid user solana from 45.148.10.183 port 51554 2026-06-30T22:18:10.934725-05:00 claude-cloud sshd[817099]: Connection closed by invalid user solana 45.148.10.183 port 51554 [preauth] 2026-06-30T22:18:18.827027-05:00 claude-cloud sshd[817279]: Invalid user ubuntu from 138.197.204.198 port 37772 2026-06-30T22:18:18.989480-05:00 claude-cloud sshd[817279]: Received disconnect from 138.197.204.198 port 37772:11: Bye Bye [preauth] 2026-06-30T22:18:18.989845-05:00 claude-cloud sshd[817279]: Disconnected from invalid user ubuntu 138.197.204.198 port 37772 [preauth] 2026-06-30T22:19:09.345398-05:00 claude-cloud sshd[817462]: Invalid user Administrator from 195.178.191.5 port 41130 2026-06-30T22:19:09.381626-05:00 claude-cloud sshd[817462]: Received disconnect from 195.178.191.5 port 41130:11: Bye Bye [preauth] 2026-06-30T22:19:09.382061-05:00 claude-cloud sshd[817462]: Disconnected from invalid user Administrator 195.178.191.5 port 41130 [preauth] 2026-06-30T22:19:13.673809-05:00 claude-cloud sshd[817485]: Invalid user pxj-zhanrenyi from 45.198.224.46 port 54000 2026-06-30T22:19:15.023771-05:00 claude-cloud sshd[817485]: Connection closed by invalid user pxj-zhanrenyi 45.198.224.46 port 54000 [preauth] 2026-06-30T22:19:17.307878-05:00 claude-cloud sshd[817406]: Connection closed by authenticating user root 27.71.230.31 port 41540 [preauth] 2026-06-30T22:19:59.107962-05:00 claude-cloud sshd[817869]: Connection reset by authenticating user root 45.227.254.170 port 1486 [preauth] 2026-06-30T22:21:17.659904-05:00 claude-cloud sshd[818396]: Invalid user solana from 45.148.10.183 port 46222 2026-06-30T22:21:17.673178-05:00 claude-cloud sshd[818396]: Connection closed by invalid user solana 45.148.10.183 port 46222 [preauth] 2026-06-30T22:21:29.434318-05:00 claude-cloud sshd[818541]: Invalid user ubuntu from 43.153.189.212 port 57114 2026-06-30T22:21:29.700042-05:00 claude-cloud sshd[818541]: Received disconnect from 43.153.189.212 port 57114:11: Bye Bye [preauth] 2026-06-30T22:21:29.700332-05:00 claude-cloud sshd[818541]: Disconnected from invalid user ubuntu 43.153.189.212 port 57114 [preauth] 2026-06-30T22:24:12.989945-05:00 claude-cloud sshd[819677]: Received disconnect from 195.178.191.5 port 46056:11: Bye Bye [preauth] 2026-06-30T22:24:12.990869-05:00 claude-cloud sshd[819677]: Disconnected from authenticating user root 195.178.191.5 port 46056 [preauth] 2026-06-30T22:24:22.860159-05:00 claude-cloud sshd[819705]: Invalid user sols from 45.148.10.183 port 45744 2026-06-30T22:24:22.873076-05:00 claude-cloud sshd[819705]: Connection closed by invalid user sols 45.148.10.183 port 45744 [preauth] 2026-06-30T22:24:23.307102-05:00 claude-cloud sshd[819703]: Received disconnect from 138.197.204.198 port 38418:11: Bye Bye [preauth] 2026-06-30T22:24:23.307436-05:00 claude-cloud sshd[819703]: Disconnected from authenticating user root 138.197.204.198 port 38418 [preauth] 2026-06-30T22:25:01.609585-05:00 claude-cloud CRON[819841]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T22:25:01.617163-05:00 claude-cloud CRON[819841]: pam_unix(cron:session): session closed for user root 2026-06-30T22:25:04.139885-05:00 claude-cloud sshd[819844]: Received disconnect from 43.153.189.212 port 33690:11: Bye Bye [preauth] 2026-06-30T22:25:04.140550-05:00 claude-cloud sshd[819844]: Disconnected from authenticating user root 43.153.189.212 port 33690 [preauth] 2026-06-30T22:25:23.190682-05:00 claude-cloud sshd[819829]: Connection closed by authenticating user root 27.71.230.31 port 57500 [preauth] 2026-06-30T22:25:31.184126-05:00 claude-cloud sshd[819942]: Connection reset by authenticating user root 45.227.254.170 port 39768 [preauth] 2026-06-30T22:25:48.566911-05:00 claude-cloud sshd[820011]: Received disconnect from 195.178.191.5 port 38234:11: Bye Bye [preauth] 2026-06-30T22:25:48.567207-05:00 claude-cloud sshd[820011]: Disconnected from authenticating user root 195.178.191.5 port 38234 [preauth] 2026-06-30T22:26:01.253994-05:00 claude-cloud sshd[820042]: Received disconnect from 138.197.204.198 port 43964:11: Bye Bye [preauth] 2026-06-30T22:26:01.254396-05:00 claude-cloud sshd[820042]: Disconnected from authenticating user root 138.197.204.198 port 43964 [preauth] 2026-06-30T22:27:24.669474-05:00 claude-cloud sshd[820338]: Received disconnect from 195.178.191.5 port 50016:11: Bye Bye [preauth] 2026-06-30T22:27:24.670388-05:00 claude-cloud sshd[820338]: Disconnected from authenticating user root 195.178.191.5 port 50016 [preauth] 2026-06-30T22:27:25.428910-05:00 claude-cloud sshd[820336]: Invalid user admin from 43.153.189.212 port 40346 2026-06-30T22:27:25.680774-05:00 claude-cloud sshd[820336]: Received disconnect from 43.153.189.212 port 40346:11: Bye Bye [preauth] 2026-06-30T22:27:25.680916-05:00 claude-cloud sshd[820336]: Disconnected from invalid user admin 43.153.189.212 port 40346 [preauth] 2026-06-30T22:27:41.252495-05:00 claude-cloud sshd[820398]: Received disconnect from 138.197.204.198 port 50748:11: Bye Bye [preauth] 2026-06-30T22:27:41.253110-05:00 claude-cloud sshd[820398]: Disconnected from authenticating user root 138.197.204.198 port 50748 [preauth] 2026-06-30T22:28:30.147866-05:00 claude-cloud sshd[820579]: Invalid user admin from 2.57.121.25 port 37466 2026-06-30T22:28:30.173001-05:00 claude-cloud sshd[820579]: Connection closed by invalid user admin 2.57.121.25 port 37466 [preauth] 2026-06-30T22:28:53.913958-05:00 claude-cloud sshd[820665]: Invalid user ubuntu from 45.198.224.46 port 55424 2026-06-30T22:28:54.604164-05:00 claude-cloud sshd[820665]: Connection closed by invalid user ubuntu 45.198.224.46 port 55424 [preauth] 2026-06-30T22:28:59.925997-05:00 claude-cloud sshd[820698]: Invalid user postgresql from 195.178.191.5 port 56438 2026-06-30T22:28:59.957391-05:00 claude-cloud sshd[820698]: Received disconnect from 195.178.191.5 port 56438:11: Bye Bye [preauth] 2026-06-30T22:28:59.957792-05:00 claude-cloud sshd[820698]: Disconnected from invalid user postgresql 195.178.191.5 port 56438 [preauth] 2026-06-30T22:29:13.603306-05:00 claude-cloud sshd[820749]: Invalid user admin2 from 138.197.204.198 port 50168 2026-06-30T22:29:13.766518-05:00 claude-cloud sshd[820749]: Received disconnect from 138.197.204.198 port 50168:11: Bye Bye [preauth] 2026-06-30T22:29:13.766972-05:00 claude-cloud sshd[820749]: Disconnected from invalid user admin2 138.197.204.198 port 50168 [preauth] 2026-06-30T22:29:38.520567-05:00 claude-cloud sshd[820819]: Received disconnect from 43.153.189.212 port 33538:11: Bye Bye [preauth] 2026-06-30T22:29:38.521203-05:00 claude-cloud sshd[820819]: Disconnected from authenticating user root 43.153.189.212 port 33538 [preauth] 2026-06-30T22:30:24.784194-05:00 claude-cloud sshd[820959]: Received disconnect from 195.178.191.5 port 42262:11: Bye Bye [preauth] 2026-06-30T22:30:24.784632-05:00 claude-cloud sshd[820959]: Disconnected from authenticating user root 195.178.191.5 port 42262 [preauth] 2026-06-30T22:30:40.020975-05:00 claude-cloud sshd[820998]: Received disconnect from 138.197.204.198 port 44036:11: Bye Bye [preauth] 2026-06-30T22:30:40.021387-05:00 claude-cloud sshd[820998]: Disconnected from authenticating user root 138.197.204.198 port 44036 [preauth] 2026-06-30T22:30:43.671978-05:00 claude-cloud sshd[821034]: Invalid user soul from 45.148.10.183 port 43664 2026-06-30T22:30:43.684842-05:00 claude-cloud sshd[821034]: Connection closed by invalid user soul 45.148.10.183 port 43664 [preauth] 2026-06-30T22:31:01.189836-05:00 claude-cloud sshd[821125]: Connection reset by authenticating user root 45.148.10.147 port 48272 [preauth] 2026-06-30T22:31:07.696187-05:00 claude-cloud sshd[821109]: Connection closed by authenticating user root 27.71.230.31 port 37658 [preauth] 2026-06-30T22:31:46.493536-05:00 claude-cloud sshd[821252]: Received disconnect from 43.153.189.212 port 54126:11: Bye Bye [preauth] 2026-06-30T22:31:46.494156-05:00 claude-cloud sshd[821252]: Disconnected from authenticating user root 43.153.189.212 port 54126 [preauth] 2026-06-30T22:31:52.077258-05:00 claude-cloud sshd[821274]: Received disconnect from 195.178.191.5 port 44596:11: Bye Bye [preauth] 2026-06-30T22:31:52.077928-05:00 claude-cloud sshd[821274]: Disconnected from authenticating user root 195.178.191.5 port 44596 [preauth] 2026-06-30T22:32:08.639963-05:00 claude-cloud sshd[821316]: Invalid user guest from 138.197.204.198 port 44520 2026-06-30T22:32:08.809909-05:00 claude-cloud sshd[821316]: Received disconnect from 138.197.204.198 port 44520:11: Bye Bye [preauth] 2026-06-30T22:32:08.810147-05:00 claude-cloud sshd[821316]: Disconnected from invalid user guest 138.197.204.198 port 44520 [preauth] 2026-06-30T22:32:21.018447-05:00 claude-cloud sshd[821362]: Connection closed by authenticating user root 185.242.3.195 port 34544 [preauth] 2026-06-30T22:33:26.694057-05:00 claude-cloud sshd[821549]: Invalid user sftpuser from 195.178.191.5 port 38254 2026-06-30T22:33:26.723728-05:00 claude-cloud sshd[821549]: Received disconnect from 195.178.191.5 port 38254:11: Bye Bye [preauth] 2026-06-30T22:33:26.723937-05:00 claude-cloud sshd[821549]: Disconnected from invalid user sftpuser 195.178.191.5 port 38254 [preauth] 2026-06-30T22:33:42.658549-05:00 claude-cloud sshd[821596]: Invalid user admin from 138.197.204.198 port 51554 2026-06-30T22:33:42.820004-05:00 claude-cloud sshd[821596]: Received disconnect from 138.197.204.198 port 51554:11: Bye Bye [preauth] 2026-06-30T22:33:42.820206-05:00 claude-cloud sshd[821596]: Disconnected from invalid user admin 138.197.204.198 port 51554 [preauth] 2026-06-30T22:33:50.071135-05:00 claude-cloud sshd[821618]: Invalid user sol from 45.148.10.183 port 37442 2026-06-30T22:33:50.084596-05:00 claude-cloud sshd[821618]: Connection closed by invalid user sol 45.148.10.183 port 37442 [preauth] 2026-06-30T22:34:08.158508-05:00 claude-cloud sshd[821666]: Received disconnect from 43.153.189.212 port 35120:11: Bye Bye [preauth] 2026-06-30T22:34:08.158904-05:00 claude-cloud sshd[821666]: Disconnected from authenticating user root 43.153.189.212 port 35120 [preauth] 2026-06-30T22:34:56.565452-05:00 claude-cloud sshd[821808]: Received disconnect from 195.178.191.5 port 44122:11: Bye Bye [preauth] 2026-06-30T22:34:56.566116-05:00 claude-cloud sshd[821808]: Disconnected from authenticating user root 195.178.191.5 port 44122 [preauth] 2026-06-30T22:35:01.627085-05:00 claude-cloud CRON[821823]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T22:35:01.637377-05:00 claude-cloud CRON[821823]: pam_unix(cron:session): session closed for user root 2026-06-30T22:35:15.800579-05:00 claude-cloud sshd[821876]: Invalid user gpadmin from 138.197.204.198 port 54314 2026-06-30T22:35:15.961760-05:00 claude-cloud sshd[821876]: Received disconnect from 138.197.204.198 port 54314:11: Bye Bye [preauth] 2026-06-30T22:35:15.961964-05:00 claude-cloud sshd[821876]: Disconnected from invalid user gpadmin 138.197.204.198 port 54314 [preauth] 2026-06-30T22:36:16.141669-05:00 claude-cloud sshd[822027]: Received disconnect from 43.153.189.212 port 54464:11: Bye Bye [preauth] 2026-06-30T22:36:16.142872-05:00 claude-cloud sshd[822027]: Disconnected from authenticating user root 43.153.189.212 port 54464 [preauth] 2026-06-30T22:36:23.655791-05:00 claude-cloud sshd[822056]: Invalid user ftp-user from 195.178.191.5 port 39066 2026-06-30T22:36:23.688716-05:00 claude-cloud sshd[822056]: Received disconnect from 195.178.191.5 port 39066:11: Bye Bye [preauth] 2026-06-30T22:36:23.688983-05:00 claude-cloud sshd[822056]: Disconnected from invalid user ftp-user 195.178.191.5 port 39066 [preauth] 2026-06-30T22:36:34.835164-05:00 claude-cloud sshd[822090]: Connection reset by authenticating user root 45.148.10.152 port 2604 [preauth] 2026-06-30T22:36:44.121645-05:00 claude-cloud sshd[822109]: Received disconnect from 138.197.204.198 port 54682:11: Bye Bye [preauth] 2026-06-30T22:36:44.125197-05:00 claude-cloud sshd[822109]: Disconnected from authenticating user root 138.197.204.198 port 54682 [preauth] 2026-06-30T22:36:58.640752-05:00 claude-cloud sshd[822166]: Invalid user solana from 45.148.10.183 port 35604 2026-06-30T22:36:58.655143-05:00 claude-cloud sshd[822166]: Connection closed by invalid user solana 45.148.10.183 port 35604 [preauth] 2026-06-30T22:37:53.230077-05:00 claude-cloud sshd[822319]: Received disconnect from 195.178.191.5 port 58794:11: Bye Bye [preauth] 2026-06-30T22:37:53.230734-05:00 claude-cloud sshd[822319]: Disconnected from authenticating user root 195.178.191.5 port 58794 [preauth] 2026-06-30T22:38:14.883891-05:00 claude-cloud sshd[822376]: Received disconnect from 138.197.204.198 port 55516:11: Bye Bye [preauth] 2026-06-30T22:38:14.884192-05:00 claude-cloud sshd[822376]: Disconnected from authenticating user root 138.197.204.198 port 55516 [preauth] 2026-06-30T22:38:27.153892-05:00 claude-cloud sshd[822412]: Received disconnect from 43.153.189.212 port 33800:11: Bye Bye [preauth] 2026-06-30T22:38:27.154356-05:00 claude-cloud sshd[822412]: Disconnected from authenticating user root 43.153.189.212 port 33800 [preauth] 2026-06-30T22:38:42.672091-05:00 claude-cloud sshd[822446]: Connection closed by authenticating user root 45.198.224.46 port 56412 [preauth] 2026-06-30T22:39:29.781121-05:00 claude-cloud sshd[822598]: Received disconnect from 195.178.191.5 port 59848:11: Bye Bye [preauth] 2026-06-30T22:39:29.781670-05:00 claude-cloud sshd[822598]: Disconnected from authenticating user root 195.178.191.5 port 59848 [preauth] 2026-06-30T22:39:52.074437-05:00 claude-cloud sshd[822668]: Received disconnect from 138.197.204.198 port 32924:11: Bye Bye [preauth] 2026-06-30T22:39:52.075041-05:00 claude-cloud sshd[822668]: Disconnected from authenticating user root 138.197.204.198 port 32924 [preauth] 2026-06-30T22:40:02.233115-05:00 claude-cloud sshd[822690]: Invalid user sole from 45.148.10.183 port 38500 2026-06-30T22:40:02.246233-05:00 claude-cloud sshd[822690]: Connection closed by invalid user sole 45.148.10.183 port 38500 [preauth] 2026-06-30T22:40:43.919019-05:00 claude-cloud sshd[822813]: Received disconnect from 43.153.189.212 port 40128:11: Bye Bye [preauth] 2026-06-30T22:40:43.919720-05:00 claude-cloud sshd[822813]: Disconnected from authenticating user root 43.153.189.212 port 40128 [preauth] 2026-06-30T22:41:07.772451-05:00 claude-cloud sshd[822947]: Received disconnect from 195.178.191.5 port 43702:11: Bye Bye [preauth] 2026-06-30T22:41:07.773323-05:00 claude-cloud sshd[822947]: Disconnected from authenticating user root 195.178.191.5 port 43702 [preauth] 2026-06-30T22:41:26.903017-05:00 claude-cloud sshd[822992]: Received disconnect from 138.197.204.198 port 33884:11: Bye Bye [preauth] 2026-06-30T22:41:26.903431-05:00 claude-cloud sshd[822992]: Disconnected from authenticating user root 138.197.204.198 port 33884 [preauth] 2026-06-30T22:42:06.886100-05:00 claude-cloud sshd[823109]: Connection reset by authenticating user root 45.148.10.157 port 18940 [preauth] 2026-06-30T22:42:37.413982-05:00 claude-cloud sshd[823194]: Received disconnect from 195.178.191.5 port 39284:11: Bye Bye [preauth] 2026-06-30T22:42:37.414509-05:00 claude-cloud sshd[823194]: Disconnected from authenticating user root 195.178.191.5 port 39284 [preauth] 2026-06-30T22:42:57.507037-05:00 claude-cloud sshd[823263]: Received disconnect from 43.153.189.212 port 36016:11: Bye Bye [preauth] 2026-06-30T22:42:57.507815-05:00 claude-cloud sshd[823263]: Disconnected from authenticating user root 43.153.189.212 port 36016 [preauth] 2026-06-30T22:42:59.635211-05:00 claude-cloud sshd[823273]: Received disconnect from 138.197.204.198 port 52546:11: Bye Bye [preauth] 2026-06-30T22:42:59.635612-05:00 claude-cloud sshd[823273]: Disconnected from authenticating user root 138.197.204.198 port 52546 [preauth] 2026-06-30T22:42:59.876166-05:00 claude-cloud sshd[823243]: Connection closed by authenticating user root 27.71.230.31 port 34430 [preauth] 2026-06-30T22:43:16.983945-05:00 claude-cloud sshd[823334]: Invalid user solv from 45.148.10.183 port 42508 2026-06-30T22:43:16.999313-05:00 claude-cloud sshd[823334]: Connection closed by invalid user solv 45.148.10.183 port 42508 [preauth] 2026-06-30T22:44:14.392366-05:00 claude-cloud sshd[823485]: Received disconnect from 195.178.191.5 port 42274:11: Bye Bye [preauth] 2026-06-30T22:44:14.393427-05:00 claude-cloud sshd[823485]: Disconnected from authenticating user root 195.178.191.5 port 42274 [preauth] 2026-06-30T22:44:34.058957-05:00 claude-cloud sshd[823531]: Received disconnect from 138.197.204.198 port 35420:11: Bye Bye [preauth] 2026-06-30T22:44:34.059511-05:00 claude-cloud sshd[823531]: Disconnected from authenticating user root 138.197.204.198 port 35420 [preauth] 2026-06-30T22:44:56.506961-05:00 claude-cloud sshd[823613]: Invalid user ubuntu from 170.82.129.8 port 46430 2026-06-30T22:44:56.726451-05:00 claude-cloud sshd[823613]: Received disconnect from 170.82.129.8 port 46430:11: Bye Bye [preauth] 2026-06-30T22:44:56.726614-05:00 claude-cloud sshd[823613]: Disconnected from invalid user ubuntu 170.82.129.8 port 46430 [preauth] 2026-06-30T22:45:01.649809-05:00 claude-cloud CRON[823628]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T22:45:01.662241-05:00 claude-cloud CRON[823628]: pam_unix(cron:session): session closed for user root 2026-06-30T22:45:09.433374-05:00 claude-cloud sshd[823650]: Received disconnect from 43.153.189.212 port 54646:11: Bye Bye [preauth] 2026-06-30T22:45:09.434125-05:00 claude-cloud sshd[823650]: Disconnected from authenticating user root 43.153.189.212 port 54646 [preauth] 2026-06-30T22:46:58.242885-05:00 claude-cloud sshd[823953]: Invalid user solv from 45.148.10.183 port 50364 2026-06-30T22:46:58.256051-05:00 claude-cloud sshd[823953]: Connection closed by invalid user solv 45.148.10.183 port 50364 [preauth] 2026-06-30T22:47:08.904602-05:00 claude-cloud sshd[823984]: Received disconnect from 176.191.43.176 port 57182:11: Bye Bye [preauth] 2026-06-30T22:47:08.904971-05:00 claude-cloud sshd[823984]: Disconnected from authenticating user root 176.191.43.176 port 57182 [preauth] 2026-06-30T22:47:24.572159-05:00 claude-cloud sshd[824029]: Received disconnect from 43.153.189.212 port 54608:11: Bye Bye [preauth] 2026-06-30T22:47:24.572569-05:00 claude-cloud sshd[824029]: Disconnected from authenticating user root 43.153.189.212 port 54608 [preauth] 2026-06-30T22:47:35.731798-05:00 claude-cloud sshd[824061]: Received disconnect from 185.9.193.111 port 57982:11: Bye Bye [preauth] 2026-06-30T22:47:35.732462-05:00 claude-cloud sshd[824061]: Disconnected from authenticating user root 185.9.193.111 port 57982 [preauth] 2026-06-30T22:47:50.681096-05:00 claude-cloud sshd[824105]: Connection reset by authenticating user root 45.227.254.170 port 26320 [preauth] 2026-06-30T22:47:54.699563-05:00 claude-cloud sshd[824114]: Connection closed by authenticating user root 193.46.255.86 port 31522 [preauth] 2026-06-30T22:48:02.428233-05:00 claude-cloud sshd[824126]: Invalid user woody from 124.160.173.22 port 57836 2026-06-30T22:48:02.620321-05:00 claude-cloud sshd[824126]: Received disconnect from 124.160.173.22 port 57836:11: Bye Bye [preauth] 2026-06-30T22:48:02.620754-05:00 claude-cloud sshd[824126]: Disconnected from invalid user woody 124.160.173.22 port 57836 [preauth] 2026-06-30T22:48:04.419217-05:00 claude-cloud sshd[824147]: Received disconnect from 95.90.13.168 port 62175:11: Bye Bye [preauth] 2026-06-30T22:48:04.419552-05:00 claude-cloud sshd[824147]: Disconnected from authenticating user root 95.90.13.168 port 62175 [preauth] 2026-06-30T22:48:51.930633-05:00 claude-cloud sshd[824285]: Invalid user abc from 162.240.222.44 port 41298 2026-06-30T22:48:52.085329-05:00 claude-cloud sshd[824285]: Received disconnect from 162.240.222.44 port 41298:11: Bye Bye [preauth] 2026-06-30T22:48:52.085838-05:00 claude-cloud sshd[824285]: Disconnected from invalid user abc 162.240.222.44 port 41298 [preauth] 2026-06-30T22:48:54.799482-05:00 claude-cloud sshd[824248]: Connection closed by authenticating user root 27.71.230.31 port 35700 [preauth] 2026-06-30T22:49:08.333897-05:00 claude-cloud sshd[824327]: Connection closed by authenticating user root 45.198.224.46 port 57752 [preauth] 2026-06-30T22:49:31.593155-05:00 claude-cloud sshd[824386]: Invalid user guest from 43.153.189.212 port 42634 2026-06-30T22:49:31.860622-05:00 claude-cloud sshd[824386]: Received disconnect from 43.153.189.212 port 42634:11: Bye Bye [preauth] 2026-06-30T22:49:31.860837-05:00 claude-cloud sshd[824386]: Disconnected from invalid user guest 43.153.189.212 port 42634 [preauth] 2026-06-30T22:49:44.183661-05:00 claude-cloud sshd[824418]: Invalid user solb from 45.148.10.183 port 58736 2026-06-30T22:49:44.197182-05:00 claude-cloud sshd[824418]: Connection closed by invalid user solb 45.148.10.183 port 58736 [preauth] 2026-06-30T22:50:16.217515-05:00 claude-cloud sshd[824513]: Received disconnect from 171.25.158.80 port 54112:11: Bye Bye [preauth] 2026-06-30T22:50:16.217860-05:00 claude-cloud sshd[824513]: Disconnected from authenticating user root 171.25.158.80 port 54112 [preauth] 2026-06-30T22:50:17.524556-05:00 claude-cloud sshd[824515]: Invalid user abc from 136.248.242.166 port 45730 2026-06-30T22:50:17.735023-05:00 claude-cloud sshd[824515]: Received disconnect from 136.248.242.166 port 45730:11: Bye Bye [preauth] 2026-06-30T22:50:17.735296-05:00 claude-cloud sshd[824515]: Disconnected from invalid user abc 136.248.242.166 port 45730 [preauth] 2026-06-30T22:51:06.155494-05:00 claude-cloud sshd[824652]: Invalid user mimi from 91.211.95.158 port 37602 2026-06-30T22:51:06.231880-05:00 claude-cloud sshd[824652]: Received disconnect from 91.211.95.158 port 37602:11: Bye Bye [preauth] 2026-06-30T22:51:06.232111-05:00 claude-cloud sshd[824652]: Disconnected from invalid user mimi 91.211.95.158 port 37602 [preauth] 2026-06-30T22:51:37.318505-05:00 claude-cloud sshd[824733]: Invalid user ubuntu from 197.243.14.52 port 60524 2026-06-30T22:51:37.488442-05:00 claude-cloud sshd[824733]: Received disconnect from 197.243.14.52 port 60524:11: Bye Bye [preauth] 2026-06-30T22:51:37.488816-05:00 claude-cloud sshd[824733]: Disconnected from invalid user ubuntu 197.243.14.52 port 60524 [preauth] 2026-06-30T22:51:39.259741-05:00 claude-cloud sshd[824735]: Invalid user admin2 from 43.153.189.212 port 53848 2026-06-30T22:51:39.522657-05:00 claude-cloud sshd[824735]: Received disconnect from 43.153.189.212 port 53848:11: Bye Bye [preauth] 2026-06-30T22:51:39.523077-05:00 claude-cloud sshd[824735]: Disconnected from invalid user admin2 43.153.189.212 port 53848 [preauth] 2026-06-30T22:52:43.351593-05:00 claude-cloud sshd[824982]: Invalid user solz from 45.148.10.183 port 45948 2026-06-30T22:52:43.366716-05:00 claude-cloud sshd[824982]: Connection closed by invalid user solz 45.148.10.183 port 45948 [preauth] 2026-06-30T22:53:21.798718-05:00 claude-cloud sshd[825090]: Connection reset by authenticating user root 62.60.130.219 port 51916 [preauth] 2026-06-30T22:53:58.087519-05:00 claude-cloud sshd[825191]: Invalid user gpadmin from 43.153.189.212 port 45966 2026-06-30T22:53:58.354012-05:00 claude-cloud sshd[825191]: Received disconnect from 43.153.189.212 port 45966:11: Bye Bye [preauth] 2026-06-30T22:53:58.354213-05:00 claude-cloud sshd[825191]: Disconnected from invalid user gpadmin 43.153.189.212 port 45966 [preauth] 2026-06-30T22:54:21.428009-05:00 claude-cloud sshd[825265]: Connection closed by 2.57.122.238 port 57996 2026-06-30T22:54:49.671159-05:00 claude-cloud sshd[825302]: Connection closed by authenticating user root 27.71.230.31 port 41596 [preauth] 2026-06-30T22:55:01.674118-05:00 claude-cloud CRON[825364]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T22:55:01.680636-05:00 claude-cloud CRON[825364]: pam_unix(cron:session): session closed for user root 2026-06-30T22:55:47.077810-05:00 claude-cloud sshd[825501]: Invalid user firedancer from 45.148.10.183 port 52088 2026-06-30T22:55:47.091444-05:00 claude-cloud sshd[825501]: Connection closed by invalid user firedancer 45.148.10.183 port 52088 [preauth] 2026-06-30T22:56:13.975974-05:00 claude-cloud sshd[825571]: Invalid user claims from 177.38.71.226 port 52000 2026-06-30T22:56:14.163461-05:00 claude-cloud sshd[825571]: Received disconnect from 177.38.71.226 port 52000:11: Bye Bye [preauth] 2026-06-30T22:56:14.164010-05:00 claude-cloud sshd[825571]: Disconnected from invalid user claims 177.38.71.226 port 52000 [preauth] 2026-06-30T22:56:21.756602-05:00 claude-cloud sshd[825593]: Invalid user sol from 2.57.122.238 port 56172 2026-06-30T22:56:21.783459-05:00 claude-cloud sshd[825593]: Connection closed by invalid user sol 2.57.122.238 port 56172 [preauth] 2026-06-30T22:57:06.716317-05:00 claude-cloud sshd[825711]: Received disconnect from 176.191.43.176 port 58542:11: Bye Bye [preauth] 2026-06-30T22:57:06.716661-05:00 claude-cloud sshd[825711]: Disconnected from authenticating user root 176.191.43.176 port 58542 [preauth] 2026-06-30T22:57:15.709618-05:00 claude-cloud sshd[825746]: Received disconnect from 95.90.13.168 port 60237:11: Bye Bye [preauth] 2026-06-30T22:57:15.710167-05:00 claude-cloud sshd[825746]: Disconnected from authenticating user root 95.90.13.168 port 60237 [preauth] 2026-06-30T22:57:20.249828-05:00 claude-cloud sshd[825759]: Received disconnect from 162.240.222.44 port 55978:11: Bye Bye [preauth] 2026-06-30T22:57:20.250412-05:00 claude-cloud sshd[825759]: Disconnected from authenticating user root 162.240.222.44 port 55978 [preauth] 2026-06-30T22:57:39.769987-05:00 claude-cloud sshd[825804]: Invalid user oracle from 185.9.193.111 port 40798 2026-06-30T22:57:39.899460-05:00 claude-cloud sshd[825804]: Received disconnect from 185.9.193.111 port 40798:11: Bye Bye [preauth] 2026-06-30T22:57:39.899916-05:00 claude-cloud sshd[825804]: Disconnected from invalid user oracle 185.9.193.111 port 40798 [preauth] 2026-06-30T22:57:48.803667-05:00 claude-cloud sshd[825847]: Invalid user mysql from 170.82.129.8 port 37460 2026-06-30T22:57:49.027877-05:00 claude-cloud sshd[825847]: Received disconnect from 170.82.129.8 port 37460:11: Bye Bye [preauth] 2026-06-30T22:57:49.028080-05:00 claude-cloud sshd[825847]: Disconnected from invalid user mysql 170.82.129.8 port 37460 [preauth] 2026-06-30T22:57:57.932683-05:00 claude-cloud sshd[825865]: Received disconnect from 171.25.158.80 port 48226:11: Bye Bye [preauth] 2026-06-30T22:57:57.933238-05:00 claude-cloud sshd[825865]: Disconnected from authenticating user root 171.25.158.80 port 48226 [preauth] 2026-06-30T22:58:02.302939-05:00 claude-cloud sshd[825877]: Received disconnect from 136.248.242.166 port 51980:11: Bye Bye [preauth] 2026-06-30T22:58:02.303269-05:00 claude-cloud sshd[825877]: Disconnected from authenticating user root 136.248.242.166 port 51980 [preauth] 2026-06-30T22:58:06.538553-05:00 claude-cloud sshd[825898]: Invalid user actu from 91.211.95.158 port 43684 2026-06-30T22:58:06.615848-05:00 claude-cloud sshd[825898]: Received disconnect from 91.211.95.158 port 43684:11: Bye Bye [preauth] 2026-06-30T22:58:06.616025-05:00 claude-cloud sshd[825898]: Disconnected from invalid user actu 91.211.95.158 port 43684 [preauth] 2026-06-30T22:58:22.733804-05:00 claude-cloud sshd[825943]: Invalid user abc from 197.243.14.52 port 36060 2026-06-30T22:58:22.907260-05:00 claude-cloud sshd[825943]: Received disconnect from 197.243.14.52 port 36060:11: Bye Bye [preauth] 2026-06-30T22:58:22.907501-05:00 claude-cloud sshd[825943]: Disconnected from invalid user abc 197.243.14.52 port 36060 [preauth] 2026-06-30T22:58:24.447781-05:00 claude-cloud sshd[825954]: Invalid user solana from 2.57.122.238 port 40688 2026-06-30T22:58:24.475226-05:00 claude-cloud sshd[825954]: Connection closed by invalid user solana 2.57.122.238 port 40688 [preauth] 2026-06-30T22:58:24.596338-05:00 claude-cloud sshd[825945]: Invalid user muz from 177.38.71.226 port 40418 2026-06-30T22:58:24.780952-05:00 claude-cloud sshd[825945]: Received disconnect from 177.38.71.226 port 40418:11: Bye Bye [preauth] 2026-06-30T22:58:24.781178-05:00 claude-cloud sshd[825945]: Disconnected from invalid user muz 177.38.71.226 port 40418 [preauth] 2026-06-30T22:58:40.171036-05:00 claude-cloud sshd[825994]: Received disconnect from 176.191.43.176 port 33122:11: Bye Bye [preauth] 2026-06-30T22:58:40.171490-05:00 claude-cloud sshd[825994]: Disconnected from authenticating user root 176.191.43.176 port 33122 [preauth] 2026-06-30T22:58:47.203503-05:00 claude-cloud sshd[826016]: Connection reset by authenticating user root 45.148.10.147 port 50544 [preauth] 2026-06-30T22:58:49.704107-05:00 claude-cloud sshd[826028]: Received disconnect from 95.90.13.168 port 59410:11: Bye Bye [preauth] 2026-06-30T22:58:49.704628-05:00 claude-cloud sshd[826028]: Disconnected from authenticating user root 95.90.13.168 port 59410 [preauth] 2026-06-30T22:58:49.710023-05:00 claude-cloud sshd[826030]: Connection closed by authenticating user root 45.148.10.183 port 41240 [preauth] 2026-06-30T22:59:19.988612-05:00 claude-cloud sshd[826103]: Received disconnect from 162.240.222.44 port 36642:11: Bye Bye [preauth] 2026-06-30T22:59:19.989178-05:00 claude-cloud sshd[826103]: Disconnected from authenticating user root 162.240.222.44 port 36642 [preauth] 2026-06-30T22:59:35.157955-05:00 claude-cloud sshd[826131]: Connection closed by authenticating user root 45.198.224.46 port 47432 [preauth] 2026-06-30T22:59:36.850533-05:00 claude-cloud sshd[826153]: Received disconnect from 185.9.193.111 port 11916:11: Bye Bye [preauth] 2026-06-30T22:59:36.851472-05:00 claude-cloud sshd[826153]: Disconnected from authenticating user root 185.9.193.111 port 11916 [preauth] 2026-06-30T22:59:43.617074-05:00 claude-cloud sshd[826170]: Received disconnect from 171.25.158.80 port 38192:11: Bye Bye [preauth] 2026-06-30T22:59:43.617545-05:00 claude-cloud sshd[826170]: Disconnected from authenticating user root 171.25.158.80 port 38192 [preauth] 2026-06-30T22:59:49.440645-05:00 claude-cloud sshd[826205]: Received disconnect from 170.82.129.8 port 52862:11: Bye Bye [preauth] 2026-06-30T22:59:49.441370-05:00 claude-cloud sshd[826205]: Disconnected from authenticating user root 170.82.129.8 port 52862 [preauth] 2026-06-30T22:59:58.658633-05:00 claude-cloud sshd[826223]: Invalid user blogs from 91.211.95.158 port 38360 2026-06-30T22:59:58.746555-05:00 claude-cloud sshd[826223]: Received disconnect from 91.211.95.158 port 38360:11: Bye Bye [preauth] 2026-06-30T22:59:58.746900-05:00 claude-cloud sshd[826223]: Disconnected from invalid user blogs 91.211.95.158 port 38360 [preauth] 2026-06-30T23:00:12.442940-05:00 claude-cloud sshd[826269]: Received disconnect from 176.191.43.176 port 55548:11: Bye Bye [preauth] 2026-06-30T23:00:12.443341-05:00 claude-cloud sshd[826269]: Disconnected from authenticating user root 176.191.43.176 port 55548 [preauth] 2026-06-30T23:00:13.840692-05:00 claude-cloud sshd[826276]: Invalid user alexander from 124.160.173.22 port 44382 2026-06-30T23:00:14.031160-05:00 claude-cloud sshd[826276]: Received disconnect from 124.160.173.22 port 44382:11: Bye Bye [preauth] 2026-06-30T23:00:14.031494-05:00 claude-cloud sshd[826276]: Disconnected from invalid user alexander 124.160.173.22 port 44382 [preauth] 2026-06-30T23:00:17.805026-05:00 claude-cloud sshd[826294]: Invalid user melon from 177.38.71.226 port 53234 2026-06-30T23:00:17.993357-05:00 claude-cloud sshd[826294]: Received disconnect from 177.38.71.226 port 53234:11: Bye Bye [preauth] 2026-06-30T23:00:17.993612-05:00 claude-cloud sshd[826294]: Disconnected from invalid user melon 177.38.71.226 port 53234 [preauth] 2026-06-30T23:00:23.822533-05:00 claude-cloud sshd[826307]: Received disconnect from 95.90.13.168 port 59441:11: Bye Bye [preauth] 2026-06-30T23:00:23.822812-05:00 claude-cloud sshd[826307]: Disconnected from authenticating user root 95.90.13.168 port 59441 [preauth] 2026-06-30T23:00:27.200501-05:00 claude-cloud sshd[826316]: Invalid user ethdocker from 2.57.122.238 port 60384 2026-06-30T23:00:27.226930-05:00 claude-cloud sshd[826316]: Connection closed by invalid user ethdocker 2.57.122.238 port 60384 [preauth] 2026-06-30T23:00:33.024265-05:00 claude-cloud sshd[826328]: Invalid user mysql from 136.248.242.166 port 58094 2026-06-30T23:00:33.236645-05:00 claude-cloud sshd[826328]: Received disconnect from 136.248.242.166 port 58094:11: Bye Bye [preauth] 2026-06-30T23:00:33.236983-05:00 claude-cloud sshd[826328]: Disconnected from invalid user mysql 136.248.242.166 port 58094 [preauth] 2026-06-30T23:00:40.731730-05:00 claude-cloud sshd[826330]: Connection closed by authenticating user root 27.71.230.31 port 51734 [preauth] 2026-06-30T23:00:44.283357-05:00 claude-cloud sshd[826366]: Received disconnect from 197.243.14.52 port 44816:11: Bye Bye [preauth] 2026-06-30T23:00:44.283976-05:00 claude-cloud sshd[826366]: Disconnected from authenticating user root 197.243.14.52 port 44816 [preauth] 2026-06-30T23:01:16.494874-05:00 claude-cloud sshd[826444]: Received disconnect from 162.240.222.44 port 45564:11: Bye Bye [preauth] 2026-06-30T23:01:16.495210-05:00 claude-cloud sshd[826444]: Disconnected from authenticating user root 162.240.222.44 port 45564 [preauth] 2026-06-30T23:01:29.514738-05:00 claude-cloud sshd[826478]: Received disconnect from 185.9.193.111 port 46177:11: Bye Bye [preauth] 2026-06-30T23:01:29.515037-05:00 claude-cloud sshd[826478]: Disconnected from authenticating user root 185.9.193.111 port 46177 [preauth] 2026-06-30T23:01:38.437592-05:00 claude-cloud sshd[826509]: Received disconnect from 171.25.158.80 port 46728:11: Bye Bye [preauth] 2026-06-30T23:01:38.438049-05:00 claude-cloud sshd[826509]: Disconnected from authenticating user root 171.25.158.80 port 46728 [preauth] 2026-06-30T23:01:38.782706-05:00 claude-cloud sshd[826511]: Invalid user wwp from 124.160.173.22 port 44652 2026-06-30T23:01:38.851596-05:00 claude-cloud sshd[826513]: Received disconnect from 176.191.43.176 port 43998:11: Bye Bye [preauth] 2026-06-30T23:01:38.852024-05:00 claude-cloud sshd[826513]: Disconnected from authenticating user root 176.191.43.176 port 43998 [preauth] 2026-06-30T23:01:38.978252-05:00 claude-cloud sshd[826511]: Received disconnect from 124.160.173.22 port 44652:11: Bye Bye [preauth] 2026-06-30T23:01:38.978571-05:00 claude-cloud sshd[826511]: Disconnected from invalid user wwp 124.160.173.22 port 44652 [preauth] 2026-06-30T23:01:45.353366-05:00 claude-cloud sshd[826572]: Invalid user abc from 170.82.129.8 port 58714 2026-06-30T23:01:45.571595-05:00 claude-cloud sshd[826572]: Received disconnect from 170.82.129.8 port 58714:11: Bye Bye [preauth] 2026-06-30T23:01:45.571883-05:00 claude-cloud sshd[826572]: Disconnected from invalid user abc 170.82.129.8 port 58714 [preauth] 2026-06-30T23:01:50.382132-05:00 claude-cloud sshd[826627]: Invalid user webadmin from 91.211.95.158 port 46462 2026-06-30T23:01:50.454463-05:00 claude-cloud sshd[826627]: Received disconnect from 91.211.95.158 port 46462:11: Bye Bye [preauth] 2026-06-30T23:01:50.454917-05:00 claude-cloud sshd[826627]: Disconnected from invalid user webadmin 91.211.95.158 port 46462 [preauth] 2026-06-30T23:01:52.805377-05:00 claude-cloud sshd[826636]: Received disconnect from 95.90.13.168 port 64788:11: Bye Bye [preauth] 2026-06-30T23:01:52.805871-05:00 claude-cloud sshd[826636]: Disconnected from authenticating user root 95.90.13.168 port 64788 [preauth] 2026-06-30T23:02:01.786123-05:00 claude-cloud sshd[826649]: Invalid user brazil from 177.38.71.226 port 60986 2026-06-30T23:02:01.971557-05:00 claude-cloud sshd[826649]: Received disconnect from 177.38.71.226 port 60986:11: Bye Bye [preauth] 2026-06-30T23:02:01.971822-05:00 claude-cloud sshd[826649]: Disconnected from invalid user brazil 177.38.71.226 port 60986 [preauth] 2026-06-30T23:02:08.060343-05:00 claude-cloud sshd[826677]: Connection closed by authenticating user root 45.148.10.183 port 39812 [preauth] 2026-06-30T23:02:21.447839-05:00 claude-cloud sshd[826715]: Invalid user eth-docker from 2.57.122.238 port 48066 2026-06-30T23:02:21.473840-05:00 claude-cloud sshd[826715]: Connection closed by invalid user eth-docker 2.57.122.238 port 48066 [preauth] 2026-06-30T23:02:45.371106-05:00 claude-cloud sshd[826775]: Invalid user ubuntu from 136.248.242.166 port 58556 2026-06-30T23:02:45.590004-05:00 claude-cloud sshd[826775]: Received disconnect from 136.248.242.166 port 58556:11: Bye Bye [preauth] 2026-06-30T23:02:45.590205-05:00 claude-cloud sshd[826775]: Disconnected from invalid user ubuntu 136.248.242.166 port 58556 [preauth] 2026-06-30T23:03:00.625797-05:00 claude-cloud sshd[826814]: Received disconnect from 197.243.14.52 port 53572:11: Bye Bye [preauth] 2026-06-30T23:03:00.626304-05:00 claude-cloud sshd[826814]: Disconnected from authenticating user root 197.243.14.52 port 53572 [preauth] 2026-06-30T23:03:00.909597-05:00 claude-cloud sshd[826816]: Invalid user apollo from 124.160.173.22 port 35630 2026-06-30T23:03:01.074227-05:00 claude-cloud sshd[826816]: Received disconnect from 124.160.173.22 port 35630:11: Bye Bye [preauth] 2026-06-30T23:03:01.074621-05:00 claude-cloud sshd[826816]: Disconnected from invalid user apollo 124.160.173.22 port 35630 [preauth] 2026-06-30T23:03:06.319348-05:00 claude-cloud sshd[826837]: Received disconnect from 176.191.43.176 port 52578:11: Bye Bye [preauth] 2026-06-30T23:03:06.319812-05:00 claude-cloud sshd[826837]: Disconnected from authenticating user root 176.191.43.176 port 52578 [preauth] 2026-06-30T23:03:13.208997-05:00 claude-cloud sshd[826855]: Received disconnect from 162.240.222.44 port 54460:11: Bye Bye [preauth] 2026-06-30T23:03:13.209458-05:00 claude-cloud sshd[826855]: Disconnected from authenticating user root 162.240.222.44 port 54460 [preauth] 2026-06-30T23:03:24.329973-05:00 claude-cloud sshd[826893]: Received disconnect from 95.90.13.168 port 62708:11: Bye Bye [preauth] 2026-06-30T23:03:24.330671-05:00 claude-cloud sshd[826893]: Disconnected from authenticating user root 95.90.13.168 port 62708 [preauth] 2026-06-30T23:03:26.045902-05:00 claude-cloud sshd[826895]: Received disconnect from 171.25.158.80 port 57136:11: Bye Bye [preauth] 2026-06-30T23:03:26.046166-05:00 claude-cloud sshd[826895]: Disconnected from authenticating user root 171.25.158.80 port 57136 [preauth] 2026-06-30T23:03:34.867376-05:00 claude-cloud sshd[826926]: Received disconnect from 185.9.193.111 port 19319:11: Bye Bye [preauth] 2026-06-30T23:03:34.867759-05:00 claude-cloud sshd[826926]: Disconnected from authenticating user root 185.9.193.111 port 19319 [preauth] 2026-06-30T23:03:36.296103-05:00 claude-cloud sshd[826928]: Invalid user cdp from 91.211.95.158 port 51876 2026-06-30T23:03:36.366764-05:00 claude-cloud sshd[826928]: Received disconnect from 91.211.95.158 port 51876:11: Bye Bye [preauth] 2026-06-30T23:03:36.367165-05:00 claude-cloud sshd[826928]: Disconnected from invalid user cdp 91.211.95.158 port 51876 [preauth] 2026-06-30T23:03:41.207382-05:00 claude-cloud sshd[826937]: Received disconnect from 170.82.129.8 port 43120:11: Bye Bye [preauth] 2026-06-30T23:03:41.208023-05:00 claude-cloud sshd[826937]: Disconnected from authenticating user root 170.82.129.8 port 43120 [preauth] 2026-06-30T23:03:44.409218-05:00 claude-cloud sshd[826952]: Invalid user hestia from 177.38.71.226 port 59310 2026-06-30T23:03:44.593832-05:00 claude-cloud sshd[826952]: Received disconnect from 177.38.71.226 port 59310:11: Bye Bye [preauth] 2026-06-30T23:03:44.594326-05:00 claude-cloud sshd[826952]: Disconnected from invalid user hestia 177.38.71.226 port 59310 [preauth] 2026-06-30T23:04:16.772938-05:00 claude-cloud sshd[827058]: Invalid user eth_docker from 2.57.122.238 port 37064 2026-06-30T23:04:16.798231-05:00 claude-cloud sshd[827058]: Connection closed by invalid user eth_docker 2.57.122.238 port 37064 [preauth] 2026-06-30T23:04:27.739786-05:00 claude-cloud sshd[827080]: Invalid user blast from 124.160.173.22 port 59018 2026-06-30T23:04:27.935989-05:00 claude-cloud sshd[827080]: Received disconnect from 124.160.173.22 port 59018:11: Bye Bye [preauth] 2026-06-30T23:04:27.936692-05:00 claude-cloud sshd[827080]: Disconnected from invalid user blast 124.160.173.22 port 59018 [preauth] 2026-06-30T23:04:33.647599-05:00 claude-cloud sshd[827105]: Received disconnect from 176.191.43.176 port 37452:11: Bye Bye [preauth] 2026-06-30T23:04:33.648417-05:00 claude-cloud sshd[827105]: Disconnected from authenticating user root 176.191.43.176 port 37452 [preauth] 2026-06-30T23:04:54.890657-05:00 claude-cloud sshd[827164]: Received disconnect from 95.90.13.168 port 61435:11: Bye Bye [preauth] 2026-06-30T23:04:54.891070-05:00 claude-cloud sshd[827164]: Disconnected from authenticating user root 95.90.13.168 port 61435 [preauth] 2026-06-30T23:05:01.695070-05:00 claude-cloud CRON[827176]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T23:05:01.701471-05:00 claude-cloud CRON[827176]: pam_unix(cron:session): session closed for user root 2026-06-30T23:05:09.922754-05:00 claude-cloud sshd[827198]: Received disconnect from 162.240.222.44 port 35136:11: Bye Bye [preauth] 2026-06-30T23:05:09.923785-05:00 claude-cloud sshd[827198]: Disconnected from authenticating user root 162.240.222.44 port 35136 [preauth] 2026-06-30T23:05:13.319416-05:00 claude-cloud sshd[827216]: Received disconnect from 171.25.158.80 port 56998:11: Bye Bye [preauth] 2026-06-30T23:05:13.319900-05:00 claude-cloud sshd[827216]: Disconnected from authenticating user root 171.25.158.80 port 56998 [preauth] 2026-06-30T23:05:14.067973-05:00 claude-cloud sshd[827218]: Invalid user shred from 45.148.10.183 port 46730 2026-06-30T23:05:14.082166-05:00 claude-cloud sshd[827218]: Connection closed by invalid user shred 45.148.10.183 port 46730 [preauth] 2026-06-30T23:05:19.631861-05:00 claude-cloud sshd[827238]: Received disconnect from 197.243.14.52 port 34094:11: Bye Bye [preauth] 2026-06-30T23:05:19.632057-05:00 claude-cloud sshd[827238]: Disconnected from authenticating user root 197.243.14.52 port 34094 [preauth] 2026-06-30T23:05:25.521591-05:00 claude-cloud sshd[827258]: Invalid user fuji from 91.211.95.158 port 48588 2026-06-30T23:05:25.597142-05:00 claude-cloud sshd[827258]: Received disconnect from 91.211.95.158 port 48588:11: Bye Bye [preauth] 2026-06-30T23:05:25.597530-05:00 claude-cloud sshd[827258]: Disconnected from invalid user fuji 91.211.95.158 port 48588 [preauth] 2026-06-30T23:05:25.837756-05:00 claude-cloud sshd[827256]: Received disconnect from 185.9.193.111 port 30867:11: Bye Bye [preauth] 2026-06-30T23:05:25.838008-05:00 claude-cloud sshd[827256]: Disconnected from authenticating user root 185.9.193.111 port 30867 [preauth] 2026-06-30T23:05:44.742451-05:00 claude-cloud sshd[827319]: Invalid user xx from 124.160.173.22 port 47282 2026-06-30T23:05:44.928502-05:00 claude-cloud sshd[827319]: Received disconnect from 124.160.173.22 port 47282:11: Bye Bye [preauth] 2026-06-30T23:05:44.928937-05:00 claude-cloud sshd[827319]: Disconnected from invalid user xx 124.160.173.22 port 47282 [preauth] 2026-06-30T23:05:52.339797-05:00 claude-cloud sshd[827345]: Received disconnect from 170.82.129.8 port 57934:11: Bye Bye [preauth] 2026-06-30T23:05:52.340726-05:00 claude-cloud sshd[827345]: Disconnected from authenticating user root 170.82.129.8 port 57934 [preauth] 2026-06-30T23:06:01.523109-05:00 claude-cloud sshd[827363]: Received disconnect from 96.8.116.34 port 51114:11: disconnected by user [preauth] 2026-06-30T23:06:01.523532-05:00 claude-cloud sshd[827363]: Disconnected from authenticating user root 96.8.116.34 port 51114 [preauth] 2026-06-30T23:06:04.105755-05:00 claude-cloud sshd[827378]: Received disconnect from 176.191.43.176 port 40156:11: Bye Bye [preauth] 2026-06-30T23:06:04.106162-05:00 claude-cloud sshd[827378]: Disconnected from authenticating user root 176.191.43.176 port 40156 [preauth] 2026-06-30T23:06:23.713866-05:00 claude-cloud sshd[827430]: Received disconnect from 95.90.13.168 port 59570:11: Bye Bye [preauth] 2026-06-30T23:06:23.714462-05:00 claude-cloud sshd[827430]: Disconnected from authenticating user root 95.90.13.168 port 59570 [preauth] 2026-06-30T23:06:47.021863-05:00 claude-cloud sshd[827442]: Connection closed by authenticating user root 27.71.230.31 port 46592 [preauth] 2026-06-30T23:06:56.240464-05:00 claude-cloud sshd[827514]: Received disconnect from 171.25.158.80 port 37628:11: Bye Bye [preauth] 2026-06-30T23:06:56.240965-05:00 claude-cloud sshd[827514]: Disconnected from authenticating user root 171.25.158.80 port 37628 [preauth] 2026-06-30T23:07:03.701399-05:00 claude-cloud sshd[827545]: Received disconnect from 162.240.222.44 port 44034:11: Bye Bye [preauth] 2026-06-30T23:07:03.701750-05:00 claude-cloud sshd[827545]: Disconnected from authenticating user root 162.240.222.44 port 44034 [preauth] 2026-06-30T23:07:09.970105-05:00 claude-cloud sshd[827555]: Invalid user ar from 91.211.95.158 port 56388 2026-06-30T23:07:10.049517-05:00 claude-cloud sshd[827555]: Received disconnect from 91.211.95.158 port 56388:11: Bye Bye [preauth] 2026-06-30T23:07:10.049975-05:00 claude-cloud sshd[827555]: Disconnected from invalid user ar 91.211.95.158 port 56388 [preauth] 2026-06-30T23:07:11.682661-05:00 claude-cloud sshd[827569]: Received disconnect from 185.9.193.111 port 2455:11: Bye Bye [preauth] 2026-06-30T23:07:11.683151-05:00 claude-cloud sshd[827569]: Disconnected from authenticating user root 185.9.193.111 port 2455 [preauth] 2026-06-30T23:07:30.738939-05:00 claude-cloud sshd[827612]: Invalid user mysql from 197.243.14.52 port 42828 2026-06-30T23:07:30.808529-05:00 claude-cloud sshd[827614]: Received disconnect from 176.191.43.176 port 54200:11: Bye Bye [preauth] 2026-06-30T23:07:30.809117-05:00 claude-cloud sshd[827614]: Disconnected from authenticating user root 176.191.43.176 port 54200 [preauth] 2026-06-30T23:07:30.907411-05:00 claude-cloud sshd[827612]: Received disconnect from 197.243.14.52 port 42828:11: Bye Bye [preauth] 2026-06-30T23:07:30.907579-05:00 claude-cloud sshd[827612]: Disconnected from invalid user mysql 197.243.14.52 port 42828 [preauth] 2026-06-30T23:07:43.038636-05:00 claude-cloud sshd[827657]: Received disconnect from 170.82.129.8 port 48554:11: Bye Bye [preauth] 2026-06-30T23:07:43.038947-05:00 claude-cloud sshd[827657]: Disconnected from authenticating user root 170.82.129.8 port 48554 [preauth] 2026-06-30T23:07:49.808575-05:00 claude-cloud sshd[827694]: Invalid user oracle from 95.90.13.168 port 63257 2026-06-30T23:07:49.833842-05:00 claude-cloud sshd[827694]: Received disconnect from 95.90.13.168 port 63257:11: Bye Bye [preauth] 2026-06-30T23:07:49.834239-05:00 claude-cloud sshd[827694]: Disconnected from invalid user oracle 95.90.13.168 port 63257 [preauth] 2026-06-30T23:08:23.836916-05:00 claude-cloud sshd[827783]: Invalid user validator from 45.148.10.183 port 36144 2026-06-30T23:08:23.849924-05:00 claude-cloud sshd[827783]: Connection closed by invalid user validator 45.148.10.183 port 36144 [preauth] 2026-06-30T23:08:33.542085-05:00 claude-cloud sshd[827804]: Received disconnect from 171.25.158.80 port 47640:11: Bye Bye [preauth] 2026-06-30T23:08:33.542607-05:00 claude-cloud sshd[827804]: Disconnected from authenticating user root 171.25.158.80 port 47640 [preauth] 2026-06-30T23:08:49.881584-05:00 claude-cloud sshd[827855]: Invalid user luxembourg from 91.211.95.158 port 42450 2026-06-30T23:08:49.962710-05:00 claude-cloud sshd[827855]: Received disconnect from 91.211.95.158 port 42450:11: Bye Bye [preauth] 2026-06-30T23:08:49.963127-05:00 claude-cloud sshd[827855]: Disconnected from invalid user luxembourg 91.211.95.158 port 42450 [preauth] 2026-06-30T23:08:52.284706-05:00 claude-cloud sshd[827859]: Received disconnect from 176.191.43.176 port 40704:11: Bye Bye [preauth] 2026-06-30T23:08:52.285234-05:00 claude-cloud sshd[827859]: Disconnected from authenticating user root 176.191.43.176 port 40704 [preauth] 2026-06-30T23:08:54.971933-05:00 claude-cloud sshd[827868]: Received disconnect from 162.240.222.44 port 52946:11: Bye Bye [preauth] 2026-06-30T23:08:54.972267-05:00 claude-cloud sshd[827868]: Disconnected from authenticating user root 162.240.222.44 port 52946 [preauth] 2026-06-30T23:08:56.243767-05:00 claude-cloud sshd[827870]: Received disconnect from 185.9.193.111 port 56687:11: Bye Bye [preauth] 2026-06-30T23:08:56.244357-05:00 claude-cloud sshd[827870]: Disconnected from authenticating user root 185.9.193.111 port 56687 [preauth] 2026-06-30T23:09:13.499873-05:00 claude-cloud sshd[827924]: Received disconnect from 95.90.13.168 port 62573:11: Bye Bye [preauth] 2026-06-30T23:09:13.500206-05:00 claude-cloud sshd[827924]: Disconnected from authenticating user root 95.90.13.168 port 62573 [preauth] 2026-06-30T23:09:27.635737-05:00 claude-cloud sshd[827953]: Received disconnect from 170.82.129.8 port 49826:11: Bye Bye [preauth] 2026-06-30T23:09:27.636208-05:00 claude-cloud sshd[827953]: Disconnected from authenticating user root 170.82.129.8 port 49826 [preauth] 2026-06-30T23:09:41.337488-05:00 claude-cloud sshd[827993]: Invalid user ubuntu from 197.243.14.52 port 51566 2026-06-30T23:09:41.509433-05:00 claude-cloud sshd[827993]: Received disconnect from 197.243.14.52 port 51566:11: Bye Bye [preauth] 2026-06-30T23:09:41.509938-05:00 claude-cloud sshd[827993]: Disconnected from invalid user ubuntu 197.243.14.52 port 51566 [preauth] 2026-06-30T23:10:00.847911-05:00 claude-cloud sshd[828051]: Connection closed by authenticating user root 45.198.224.46 port 60730 [preauth] 2026-06-30T23:10:15.028099-05:00 claude-cloud sshd[828114]: Received disconnect from 171.25.158.80 port 56104:11: Bye Bye [preauth] 2026-06-30T23:10:15.028446-05:00 claude-cloud sshd[828114]: Disconnected from authenticating user root 171.25.158.80 port 56104 [preauth] 2026-06-30T23:10:16.810157-05:00 claude-cloud sshd[828119]: Received disconnect from 176.191.43.176 port 54350:11: Bye Bye [preauth] 2026-06-30T23:10:16.810891-05:00 claude-cloud sshd[828119]: Disconnected from authenticating user root 176.191.43.176 port 54350 [preauth] 2026-06-30T23:10:33.943659-05:00 claude-cloud sshd[828168]: Invalid user tourism from 91.211.95.158 port 56174 2026-06-30T23:10:34.017850-05:00 claude-cloud sshd[828168]: Received disconnect from 91.211.95.158 port 56174:11: Bye Bye [preauth] 2026-06-30T23:10:34.018214-05:00 claude-cloud sshd[828168]: Disconnected from invalid user tourism 91.211.95.158 port 56174 [preauth] 2026-06-30T23:10:39.617430-05:00 claude-cloud sshd[828177]: Received disconnect from 95.90.13.168 port 59246:11: Bye Bye [preauth] 2026-06-30T23:10:39.617811-05:00 claude-cloud sshd[828177]: Disconnected from authenticating user root 95.90.13.168 port 59246 [preauth] 2026-06-30T23:10:45.987854-05:00 claude-cloud sshd[828194]: Received disconnect from 185.9.193.111 port 33484:11: Bye Bye [preauth] 2026-06-30T23:10:45.988561-05:00 claude-cloud sshd[828194]: Disconnected from authenticating user root 185.9.193.111 port 33484 [preauth] 2026-06-30T23:10:49.088424-05:00 claude-cloud sshd[828201]: Received disconnect from 162.240.222.44 port 33608:11: Bye Bye [preauth] 2026-06-30T23:10:49.088879-05:00 claude-cloud sshd[828201]: Disconnected from authenticating user root 162.240.222.44 port 33608 [preauth] 2026-06-30T23:11:20.890462-05:00 claude-cloud sshd[828291]: Invalid user ubuntu from 170.82.129.8 port 42174 2026-06-30T23:11:21.104162-05:00 claude-cloud sshd[828291]: Received disconnect from 170.82.129.8 port 42174:11: Bye Bye [preauth] 2026-06-30T23:11:21.104686-05:00 claude-cloud sshd[828291]: Disconnected from invalid user ubuntu 170.82.129.8 port 42174 [preauth] 2026-06-30T23:11:31.551252-05:00 claude-cloud sshd[828310]: Invalid user binance from 45.148.10.183 port 33898 2026-06-30T23:11:31.564766-05:00 claude-cloud sshd[828310]: Connection closed by invalid user binance 45.148.10.183 port 33898 [preauth] 2026-06-30T23:11:48.030653-05:00 claude-cloud sshd[828381]: Received disconnect from 176.191.43.176 port 46514:11: Bye Bye [preauth] 2026-06-30T23:11:48.031210-05:00 claude-cloud sshd[828381]: Disconnected from authenticating user root 176.191.43.176 port 46514 [preauth] 2026-06-30T23:11:56.041915-05:00 claude-cloud sshd[828399]: Received disconnect from 197.243.14.52 port 60314:11: Bye Bye [preauth] 2026-06-30T23:11:56.042690-05:00 claude-cloud sshd[828399]: Disconnected from authenticating user root 197.243.14.52 port 60314 [preauth] 2026-06-30T23:12:03.062144-05:00 claude-cloud sshd[828411]: Received disconnect from 171.25.158.80 port 55654:11: Bye Bye [preauth] 2026-06-30T23:12:03.062724-05:00 claude-cloud sshd[828411]: Disconnected from authenticating user root 171.25.158.80 port 55654 [preauth] 2026-06-30T23:12:07.748086-05:00 claude-cloud sshd[828432]: Received disconnect from 95.90.13.168 port 62151:11: Bye Bye [preauth] 2026-06-30T23:12:07.748542-05:00 claude-cloud sshd[828432]: Disconnected from authenticating user root 95.90.13.168 port 62151 [preauth] 2026-06-30T23:12:24.490690-05:00 claude-cloud sshd[828477]: Invalid user chicago from 91.211.95.158 port 49756 2026-06-30T23:12:24.565785-05:00 claude-cloud sshd[828477]: Received disconnect from 91.211.95.158 port 49756:11: Bye Bye [preauth] 2026-06-30T23:12:24.566090-05:00 claude-cloud sshd[828477]: Disconnected from invalid user chicago 91.211.95.158 port 49756 [preauth] 2026-06-30T23:12:37.273196-05:00 claude-cloud sshd[828517]: Received disconnect from 185.9.193.111 port 59926:11: Bye Bye [preauth] 2026-06-30T23:12:37.273793-05:00 claude-cloud sshd[828517]: Disconnected from authenticating user root 185.9.193.111 port 59926 [preauth] 2026-06-30T23:12:44.699417-05:00 claude-cloud sshd[828566]: Invalid user ubuntu from 162.240.222.44 port 42502 2026-06-30T23:12:44.849807-05:00 claude-cloud sshd[828566]: Received disconnect from 162.240.222.44 port 42502:11: Bye Bye [preauth] 2026-06-30T23:12:44.850042-05:00 claude-cloud sshd[828566]: Disconnected from invalid user ubuntu 162.240.222.44 port 42502 [preauth] 2026-06-30T23:12:45.720599-05:00 claude-cloud sshd[828486]: Connection closed by authenticating user root 27.71.230.31 port 53326 [preauth] 2026-06-30T23:13:17.066459-05:00 claude-cloud sshd[828700]: Received disconnect from 170.82.129.8 port 51564:11: Bye Bye [preauth] 2026-06-30T23:13:17.066839-05:00 claude-cloud sshd[828700]: Disconnected from authenticating user root 170.82.129.8 port 51564 [preauth] 2026-06-30T23:13:20.226403-05:00 claude-cloud sshd[828709]: Received disconnect from 176.191.43.176 port 41000:11: Bye Bye [preauth] 2026-06-30T23:13:20.226825-05:00 claude-cloud sshd[828709]: Disconnected from authenticating user root 176.191.43.176 port 41000 [preauth] 2026-06-30T23:13:35.543246-05:00 claude-cloud sshd[828748]: Received disconnect from 95.90.13.168 port 62808:11: Bye Bye [preauth] 2026-06-30T23:13:35.543640-05:00 claude-cloud sshd[828748]: Disconnected from authenticating user root 95.90.13.168 port 62808 [preauth] 2026-06-30T23:13:44.657566-05:00 claude-cloud sshd[828769]: Received disconnect from 171.25.158.80 port 35436:11: Bye Bye [preauth] 2026-06-30T23:13:44.657976-05:00 claude-cloud sshd[828769]: Disconnected from authenticating user root 171.25.158.80 port 35436 [preauth] 2026-06-30T23:14:10.609899-05:00 claude-cloud sshd[828836]: Received disconnect from 197.243.14.52 port 40830:11: Bye Bye [preauth] 2026-06-30T23:14:10.610722-05:00 claude-cloud sshd[828836]: Disconnected from authenticating user root 197.243.14.52 port 40830 [preauth] 2026-06-30T23:14:12.348188-05:00 claude-cloud sshd[828853]: Invalid user john from 91.211.95.158 port 49506 2026-06-30T23:14:12.419195-05:00 claude-cloud sshd[828853]: Received disconnect from 91.211.95.158 port 49506:11: Bye Bye [preauth] 2026-06-30T23:14:12.419686-05:00 claude-cloud sshd[828853]: Disconnected from invalid user john 91.211.95.158 port 49506 [preauth] 2026-06-30T23:14:27.486829-05:00 claude-cloud sshd[828893]: Invalid user ksiegarnia from 177.38.71.226 port 35136 2026-06-30T23:14:27.673427-05:00 claude-cloud sshd[828893]: Received disconnect from 177.38.71.226 port 35136:11: Bye Bye [preauth] 2026-06-30T23:14:27.673770-05:00 claude-cloud sshd[828893]: Disconnected from invalid user ksiegarnia 177.38.71.226 port 35136 [preauth] 2026-06-30T23:14:29.018527-05:00 claude-cloud sshd[828895]: Received disconnect from 185.9.193.111 port 57694:11: Bye Bye [preauth] 2026-06-30T23:14:29.018879-05:00 claude-cloud sshd[828895]: Disconnected from authenticating user root 185.9.193.111 port 57694 [preauth] 2026-06-30T23:14:33.525043-05:00 claude-cloud sshd[828919]: Invalid user trader from 45.148.10.183 port 54220 2026-06-30T23:14:33.538464-05:00 claude-cloud sshd[828919]: Connection closed by invalid user trader 45.148.10.183 port 54220 [preauth] 2026-06-30T23:14:35.183010-05:00 claude-cloud sshd[828921]: Invalid user alex from 162.240.222.44 port 51406 2026-06-30T23:14:35.340119-05:00 claude-cloud sshd[828921]: Received disconnect from 162.240.222.44 port 51406:11: Bye Bye [preauth] 2026-06-30T23:14:35.340489-05:00 claude-cloud sshd[828921]: Disconnected from invalid user alex 162.240.222.44 port 51406 [preauth] 2026-06-30T23:14:46.568596-05:00 claude-cloud sshd[828970]: Received disconnect from 176.191.43.176 port 35836:11: Bye Bye [preauth] 2026-06-30T23:14:46.568938-05:00 claude-cloud sshd[828970]: Disconnected from authenticating user root 176.191.43.176 port 35836 [preauth] 2026-06-30T23:15:01.715223-05:00 claude-cloud CRON[829007]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T23:15:01.723315-05:00 claude-cloud CRON[829007]: pam_unix(cron:session): session closed for user root 2026-06-30T23:15:03.889739-05:00 claude-cloud sshd[829022]: Received disconnect from 95.90.13.168 port 60116:11: Bye Bye [preauth] 2026-06-30T23:15:03.889987-05:00 claude-cloud sshd[829022]: Disconnected from authenticating user root 95.90.13.168 port 60116 [preauth] 2026-06-30T23:15:09.161414-05:00 claude-cloud sshd[829031]: Received disconnect from 170.82.129.8 port 49966:11: Bye Bye [preauth] 2026-06-30T23:15:09.162065-05:00 claude-cloud sshd[829031]: Disconnected from authenticating user root 170.82.129.8 port 49966 [preauth] 2026-06-30T23:15:27.611338-05:00 claude-cloud sshd[829086]: Invalid user ethereum from 2.57.122.238 port 41566 2026-06-30T23:15:27.637265-05:00 claude-cloud sshd[829086]: Connection closed by invalid user ethereum 2.57.122.238 port 41566 [preauth] 2026-06-30T23:15:28.252597-05:00 claude-cloud sshd[829076]: Received disconnect from 171.25.158.80 port 46516:11: Bye Bye [preauth] 2026-06-30T23:15:28.253064-05:00 claude-cloud sshd[829076]: Disconnected from authenticating user root 171.25.158.80 port 46516 [preauth] 2026-06-30T23:15:58.382141-05:00 claude-cloud sshd[829162]: Invalid user openvpn from 91.211.95.158 port 45110 2026-06-30T23:15:58.460830-05:00 claude-cloud sshd[829162]: Received disconnect from 91.211.95.158 port 45110:11: Bye Bye [preauth] 2026-06-30T23:15:58.461337-05:00 claude-cloud sshd[829162]: Disconnected from invalid user openvpn 91.211.95.158 port 45110 [preauth] 2026-06-30T23:16:11.373135-05:00 claude-cloud sshd[829193]: Invalid user detroit from 177.38.71.226 port 60610 2026-06-30T23:16:11.564945-05:00 claude-cloud sshd[829193]: Received disconnect from 177.38.71.226 port 60610:11: Bye Bye [preauth] 2026-06-30T23:16:11.565186-05:00 claude-cloud sshd[829193]: Disconnected from invalid user detroit 177.38.71.226 port 60610 [preauth] 2026-06-30T23:16:14.982881-05:00 claude-cloud sshd[829211]: Invalid user oracle from 176.191.43.176 port 39508 2026-06-30T23:16:15.015690-05:00 claude-cloud sshd[829211]: Received disconnect from 176.191.43.176 port 39508:11: Bye Bye [preauth] 2026-06-30T23:16:15.016031-05:00 claude-cloud sshd[829211]: Disconnected from invalid user oracle 176.191.43.176 port 39508 [preauth] 2026-06-30T23:16:22.689552-05:00 claude-cloud sshd[829233]: Invalid user seminars from 124.160.173.22 port 40692 2026-06-30T23:16:22.933300-05:00 claude-cloud sshd[829233]: Received disconnect from 124.160.173.22 port 40692:11: Bye Bye [preauth] 2026-06-30T23:16:22.933517-05:00 claude-cloud sshd[829233]: Disconnected from invalid user seminars 124.160.173.22 port 40692 [preauth] 2026-06-30T23:16:27.053926-05:00 claude-cloud sshd[829242]: Invalid user ubuntu from 162.240.222.44 port 60310 2026-06-30T23:16:27.204643-05:00 claude-cloud sshd[829242]: Received disconnect from 162.240.222.44 port 60310:11: Bye Bye [preauth] 2026-06-30T23:16:27.204941-05:00 claude-cloud sshd[829242]: Disconnected from invalid user ubuntu 162.240.222.44 port 60310 [preauth] 2026-06-30T23:16:27.320081-05:00 claude-cloud sshd[829243]: Received disconnect from 197.243.14.52 port 49570:11: Bye Bye [preauth] 2026-06-30T23:16:27.320342-05:00 claude-cloud sshd[829243]: Disconnected from authenticating user root 197.243.14.52 port 49570 [preauth] 2026-06-30T23:16:31.531802-05:00 claude-cloud sshd[829256]: Received disconnect from 185.9.193.111 port 57231:11: Bye Bye [preauth] 2026-06-30T23:16:31.532525-05:00 claude-cloud sshd[829256]: Disconnected from authenticating user root 185.9.193.111 port 57231 [preauth] 2026-06-30T23:16:34.128162-05:00 claude-cloud sshd[829278]: Received disconnect from 95.90.13.168 port 60938:11: Bye Bye [preauth] 2026-06-30T23:16:34.128431-05:00 claude-cloud sshd[829278]: Disconnected from authenticating user root 95.90.13.168 port 60938 [preauth] 2026-06-30T23:17:01.732495-05:00 claude-cloud CRON[829358]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T23:17:01.741474-05:00 claude-cloud CRON[829358]: pam_unix(cron:session): session closed for user root 2026-06-30T23:17:04.237584-05:00 claude-cloud sshd[829373]: Received disconnect from 170.82.129.8 port 59718:11: Bye Bye [preauth] 2026-06-30T23:17:04.237879-05:00 claude-cloud sshd[829373]: Disconnected from authenticating user root 170.82.129.8 port 59718 [preauth] 2026-06-30T23:17:12.032538-05:00 claude-cloud sshd[829397]: Received disconnect from 171.25.158.80 port 57228:11: Bye Bye [preauth] 2026-06-30T23:17:12.032851-05:00 claude-cloud sshd[829397]: Disconnected from authenticating user root 171.25.158.80 port 57228 [preauth] 2026-06-30T23:17:21.085033-05:00 claude-cloud sshd[829427]: Invalid user eth from 2.57.122.238 port 33322 2026-06-30T23:17:21.111036-05:00 claude-cloud sshd[829427]: Connection closed by invalid user eth 2.57.122.238 port 33322 [preauth] 2026-06-30T23:17:38.137724-05:00 claude-cloud sshd[829465]: Invalid user trading from 45.148.10.183 port 44270 2026-06-30T23:17:38.150910-05:00 claude-cloud sshd[829465]: Connection closed by invalid user trading 45.148.10.183 port 44270 [preauth] 2026-06-30T23:17:42.682630-05:00 claude-cloud sshd[829482]: Invalid user aic from 124.160.173.22 port 34746 2026-06-30T23:17:42.865183-05:00 claude-cloud sshd[829482]: Received disconnect from 124.160.173.22 port 34746:11: Bye Bye [preauth] 2026-06-30T23:17:42.865496-05:00 claude-cloud sshd[829482]: Disconnected from invalid user aic 124.160.173.22 port 34746 [preauth] 2026-06-30T23:17:49.138952-05:00 claude-cloud sshd[829509]: Invalid user vega from 91.211.95.158 port 43714 2026-06-30T23:17:49.211934-05:00 claude-cloud sshd[829509]: Received disconnect from 91.211.95.158 port 43714:11: Bye Bye [preauth] 2026-06-30T23:17:49.212449-05:00 claude-cloud sshd[829509]: Disconnected from invalid user vega 91.211.95.158 port 43714 [preauth] 2026-06-30T23:17:58.647016-05:00 claude-cloud sshd[829520]: Invalid user account from 177.38.71.226 port 59438 2026-06-30T23:17:58.832004-05:00 claude-cloud sshd[829520]: Received disconnect from 177.38.71.226 port 59438:11: Bye Bye [preauth] 2026-06-30T23:17:58.832411-05:00 claude-cloud sshd[829520]: Disconnected from invalid user account 177.38.71.226 port 59438 [preauth] 2026-06-30T23:18:22.512569-05:00 claude-cloud sshd[829597]: Received disconnect from 162.240.222.44 port 40972:11: Bye Bye [preauth] 2026-06-30T23:18:22.513159-05:00 claude-cloud sshd[829597]: Disconnected from authenticating user root 162.240.222.44 port 40972 [preauth] 2026-06-30T23:18:29.648003-05:00 claude-cloud sshd[829595]: Connection closed by authenticating user root 27.71.230.31 port 37322 [preauth] 2026-06-30T23:18:32.235906-05:00 claude-cloud sshd[829616]: Received disconnect from 185.9.193.111 port 26983:11: Bye Bye [preauth] 2026-06-30T23:18:32.236191-05:00 claude-cloud sshd[829616]: Disconnected from authenticating user root 185.9.193.111 port 26983 [preauth] 2026-06-30T23:18:46.225487-05:00 claude-cloud sshd[829671]: Received disconnect from 197.243.14.52 port 58322:11: Bye Bye [preauth] 2026-06-30T23:18:46.226208-05:00 claude-cloud sshd[829671]: Disconnected from authenticating user root 197.243.14.52 port 58322 [preauth] 2026-06-30T23:18:56.555350-05:00 claude-cloud sshd[829700]: Received disconnect from 171.25.158.80 port 45792:11: Bye Bye [preauth] 2026-06-30T23:18:56.555794-05:00 claude-cloud sshd[829700]: Disconnected from authenticating user root 171.25.158.80 port 45792 [preauth] 2026-06-30T23:19:03.391990-05:00 claude-cloud sshd[829712]: Invalid user manga from 124.160.173.22 port 56896 2026-06-30T23:19:03.596386-05:00 claude-cloud sshd[829712]: Received disconnect from 124.160.173.22 port 56896:11: Bye Bye [preauth] 2026-06-30T23:19:03.596626-05:00 claude-cloud sshd[829712]: Disconnected from invalid user manga 124.160.173.22 port 56896 [preauth] 2026-06-30T23:19:12.905159-05:00 claude-cloud sshd[829749]: Invalid user polygon from 2.57.122.238 port 50870 2026-06-30T23:19:12.930045-05:00 claude-cloud sshd[829749]: Connection closed by invalid user polygon 2.57.122.238 port 50870 [preauth] 2026-06-30T23:19:20.464015-05:00 claude-cloud sshd[829771]: Received disconnect from 170.82.129.8 port 40050:11: Bye Bye [preauth] 2026-06-30T23:19:20.464624-05:00 claude-cloud sshd[829771]: Disconnected from authenticating user root 170.82.129.8 port 40050 [preauth] 2026-06-30T23:19:32.964959-05:00 claude-cloud sshd[829789]: Connection reset by 205.210.31.243 port 65522 [preauth] 2026-06-30T23:19:36.014942-05:00 claude-cloud sshd[829820]: Invalid user sls from 91.211.95.158 port 37704 2026-06-30T23:19:36.109384-05:00 claude-cloud sshd[829820]: Received disconnect from 91.211.95.158 port 37704:11: Bye Bye [preauth] 2026-06-30T23:19:36.109768-05:00 claude-cloud sshd[829820]: Disconnected from invalid user sls 91.211.95.158 port 37704 [preauth] 2026-06-30T23:19:41.324467-05:00 claude-cloud sshd[829829]: Invalid user nyc from 177.38.71.226 port 54412 2026-06-30T23:19:41.510832-05:00 claude-cloud sshd[829829]: Received disconnect from 177.38.71.226 port 54412:11: Bye Bye [preauth] 2026-06-30T23:19:41.511139-05:00 claude-cloud sshd[829829]: Disconnected from invalid user nyc 177.38.71.226 port 54412 [preauth] 2026-06-30T23:20:15.887315-05:00 claude-cloud sshd[829924]: Received disconnect from 162.240.222.44 port 49882:11: Bye Bye [preauth] 2026-06-30T23:20:15.887580-05:00 claude-cloud sshd[829924]: Disconnected from authenticating user root 162.240.222.44 port 49882 [preauth] 2026-06-30T23:20:21.592814-05:00 claude-cloud sshd[829951]: Invalid user oregon from 124.160.173.22 port 44612 2026-06-30T23:20:21.791998-05:00 claude-cloud sshd[829951]: Received disconnect from 124.160.173.22 port 44612:11: Bye Bye [preauth] 2026-06-30T23:20:21.792538-05:00 claude-cloud sshd[829951]: Disconnected from invalid user oregon 124.160.173.22 port 44612 [preauth] 2026-06-30T23:20:22.857521-05:00 claude-cloud sshd[829955]: Received disconnect from 185.9.193.111 port 26011:11: Bye Bye [preauth] 2026-06-30T23:20:22.857752-05:00 claude-cloud sshd[829955]: Disconnected from authenticating user root 185.9.193.111 port 26011 [preauth] 2026-06-30T23:20:23.156507-05:00 claude-cloud sshd[829942]: Invalid user jira1 from 45.198.224.46 port 51894 2026-06-30T23:20:24.465733-05:00 claude-cloud sshd[829942]: Connection closed by invalid user jira1 45.198.224.46 port 51894 [preauth] 2026-06-30T23:20:37.754871-05:00 claude-cloud sshd[829995]: Invalid user oracle from 171.25.158.80 port 55620 2026-06-30T23:20:37.834561-05:00 claude-cloud sshd[829995]: Received disconnect from 171.25.158.80 port 55620:11: Bye Bye [preauth] 2026-06-30T23:20:37.834924-05:00 claude-cloud sshd[829995]: Disconnected from invalid user oracle 171.25.158.80 port 55620 [preauth] 2026-06-30T23:20:41.142985-05:00 claude-cloud sshd[830009]: Invalid user ubuntu from 45.148.10.183 port 54264 2026-06-30T23:20:41.158235-05:00 claude-cloud sshd[830009]: Connection closed by invalid user ubuntu 45.148.10.183 port 54264 [preauth] 2026-06-30T23:21:01.044011-05:00 claude-cloud sshd[830060]: Invalid user tron from 2.57.122.238 port 38776 2026-06-30T23:21:01.069077-05:00 claude-cloud sshd[830060]: Connection closed by invalid user tron 2.57.122.238 port 38776 [preauth] 2026-06-30T23:21:04.086053-05:00 claude-cloud sshd[830081]: Received disconnect from 197.243.14.52 port 38838:11: Bye Bye [preauth] 2026-06-30T23:21:04.086451-05:00 claude-cloud sshd[830081]: Disconnected from authenticating user root 197.243.14.52 port 38838 [preauth] 2026-06-30T23:21:10.490879-05:00 claude-cloud sshd[830090]: Received disconnect from 170.82.129.8 port 54510:11: Bye Bye [preauth] 2026-06-30T23:21:10.491328-05:00 claude-cloud sshd[830090]: Disconnected from authenticating user root 170.82.129.8 port 54510 [preauth] 2026-06-30T23:21:17.686776-05:00 claude-cloud sshd[830124]: Invalid user isi from 91.211.95.158 port 34366 2026-06-30T23:21:17.763656-05:00 claude-cloud sshd[830124]: Received disconnect from 91.211.95.158 port 34366:11: Bye Bye [preauth] 2026-06-30T23:21:17.764055-05:00 claude-cloud sshd[830124]: Disconnected from invalid user isi 91.211.95.158 port 34366 [preauth] 2026-06-30T23:21:21.933608-05:00 claude-cloud sshd[830130]: Invalid user tj from 177.38.71.226 port 35830 2026-06-30T23:21:22.117797-05:00 claude-cloud sshd[830130]: Received disconnect from 177.38.71.226 port 35830:11: Bye Bye [preauth] 2026-06-30T23:21:22.118319-05:00 claude-cloud sshd[830130]: Disconnected from invalid user tj 177.38.71.226 port 35830 [preauth] 2026-06-30T23:21:27.923006-05:00 claude-cloud sshd[830148]: Invalid user admin from 2.57.121.25 port 17874 2026-06-30T23:21:27.949202-05:00 claude-cloud sshd[830148]: Connection closed by invalid user admin 2.57.121.25 port 17874 [preauth] 2026-06-30T23:21:43.312574-05:00 claude-cloud sshd[830194]: Invalid user dev8 from 124.160.173.22 port 58534 2026-06-30T23:21:43.539395-05:00 claude-cloud sshd[830194]: Received disconnect from 124.160.173.22 port 58534:11: Bye Bye [preauth] 2026-06-30T23:21:43.539613-05:00 claude-cloud sshd[830194]: Disconnected from invalid user dev8 124.160.173.22 port 58534 [preauth] 2026-06-30T23:22:00.715250-05:00 claude-cloud sshd[830238]: error: kex_exchange_identification: read: Connection reset by peer 2026-06-30T23:22:00.715976-05:00 claude-cloud sshd[830238]: Connection reset by 103.115.104.53 port 54126 2026-06-30T23:22:05.183660-05:00 claude-cloud sshd[830258]: Invalid user mysql from 162.240.222.44 port 58772 2026-06-30T23:22:05.335783-05:00 claude-cloud sshd[830258]: Received disconnect from 162.240.222.44 port 58772:11: Bye Bye [preauth] 2026-06-30T23:22:05.335996-05:00 claude-cloud sshd[830258]: Disconnected from invalid user mysql 162.240.222.44 port 58772 [preauth] 2026-06-30T23:22:13.528054-05:00 claude-cloud sshd[830283]: Received disconnect from 185.9.193.111 port 6860:11: Bye Bye [preauth] 2026-06-30T23:22:13.528398-05:00 claude-cloud sshd[830283]: Disconnected from authenticating user root 185.9.193.111 port 6860 [preauth] 2026-06-30T23:22:50.842766-05:00 claude-cloud sshd[830454]: Invalid user trx from 2.57.122.238 port 47568 2026-06-30T23:22:50.869049-05:00 claude-cloud sshd[830454]: Connection closed by invalid user trx 2.57.122.238 port 47568 [preauth] 2026-06-30T23:23:01.921372-05:00 claude-cloud sshd[830475]: Invalid user alex from 170.82.129.8 port 36248 2026-06-30T23:23:02.133898-05:00 claude-cloud sshd[830475]: Received disconnect from 170.82.129.8 port 36248:11: Bye Bye [preauth] 2026-06-30T23:23:02.134147-05:00 claude-cloud sshd[830475]: Disconnected from invalid user alex 170.82.129.8 port 36248 [preauth] 2026-06-30T23:23:02.284373-05:00 claude-cloud sshd[830477]: Invalid user bohr from 91.211.95.158 port 39986 2026-06-30T23:23:02.360460-05:00 claude-cloud sshd[830477]: Received disconnect from 91.211.95.158 port 39986:11: Bye Bye [preauth] 2026-06-30T23:23:02.360684-05:00 claude-cloud sshd[830477]: Disconnected from invalid user bohr 91.211.95.158 port 39986 [preauth] 2026-06-30T23:23:22.391462-05:00 claude-cloud sshd[830542]: Received disconnect from 197.243.14.52 port 47600:11: Bye Bye [preauth] 2026-06-30T23:23:22.391749-05:00 claude-cloud sshd[830542]: Disconnected from authenticating user root 197.243.14.52 port 47600 [preauth] 2026-06-30T23:23:39.550588-05:00 claude-cloud sshd[830587]: Invalid user malique from 2.57.121.112 port 57320 2026-06-30T23:23:39.576958-05:00 claude-cloud sshd[830587]: Connection closed by invalid user malique 2.57.121.112 port 57320 [preauth] 2026-06-30T23:23:50.771055-05:00 claude-cloud sshd[830621]: Invalid user bitcoin from 45.148.10.183 port 53008 2026-06-30T23:23:50.783887-05:00 claude-cloud sshd[830621]: Connection closed by invalid user bitcoin 45.148.10.183 port 53008 [preauth] 2026-06-30T23:24:30.816611-05:00 claude-cloud sshd[830691]: Connection closed by authenticating user root 27.71.230.31 port 44496 [preauth] 2026-06-30T23:24:46.485611-05:00 claude-cloud sshd[830787]: Invalid user office from 91.211.95.158 port 38968 2026-06-30T23:24:46.560155-05:00 claude-cloud sshd[830787]: Received disconnect from 91.211.95.158 port 38968:11: Bye Bye [preauth] 2026-06-30T23:24:46.560509-05:00 claude-cloud sshd[830787]: Disconnected from invalid user office 91.211.95.158 port 38968 [preauth] 2026-06-30T23:25:01.750168-05:00 claude-cloud CRON[830817]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T23:25:01.755964-05:00 claude-cloud CRON[830817]: pam_unix(cron:session): session closed for user root 2026-06-30T23:25:41.283448-05:00 claude-cloud sshd[830925]: Received disconnect from 197.243.14.52 port 56346:11: Bye Bye [preauth] 2026-06-30T23:25:41.283832-05:00 claude-cloud sshd[830925]: Disconnected from authenticating user root 197.243.14.52 port 56346 [preauth] 2026-06-30T23:26:32.893463-05:00 claude-cloud sshd[831055]: Invalid user sra from 91.211.95.158 port 36648 2026-06-30T23:26:32.964655-05:00 claude-cloud sshd[831055]: Received disconnect from 91.211.95.158 port 36648:11: Bye Bye [preauth] 2026-06-30T23:26:32.965189-05:00 claude-cloud sshd[831055]: Disconnected from invalid user sra 91.211.95.158 port 36648 [preauth] 2026-06-30T23:26:56.630589-05:00 claude-cloud sshd[831142]: Invalid user ethereum from 45.148.10.183 port 33546 2026-06-30T23:26:56.645821-05:00 claude-cloud sshd[831142]: Connection closed by invalid user ethereum 45.148.10.183 port 33546 [preauth] 2026-06-30T23:27:54.307491-05:00 claude-cloud sshd[831295]: Invalid user alex from 197.243.14.52 port 36856 2026-06-30T23:27:54.476477-05:00 claude-cloud sshd[831295]: Received disconnect from 197.243.14.52 port 36856:11: Bye Bye [preauth] 2026-06-30T23:27:54.476719-05:00 claude-cloud sshd[831295]: Disconnected from invalid user alex 197.243.14.52 port 36856 [preauth] 2026-06-30T23:28:19.428945-05:00 claude-cloud sshd[831367]: Invalid user douglas from 91.211.95.158 port 42308 2026-06-30T23:28:19.508437-05:00 claude-cloud sshd[831367]: Received disconnect from 91.211.95.158 port 42308:11: Bye Bye [preauth] 2026-06-30T23:28:19.508664-05:00 claude-cloud sshd[831367]: Disconnected from invalid user douglas 91.211.95.158 port 42308 [preauth] 2026-06-30T23:30:07.471196-05:00 claude-cloud sshd[831657]: Connection closed by authenticating user root 45.148.10.183 port 38442 [preauth] 2026-06-30T23:30:08.176214-05:00 claude-cloud sshd[831669]: Invalid user jpkc from 91.211.95.158 port 59142 2026-06-30T23:30:08.254618-05:00 claude-cloud sshd[831669]: Received disconnect from 91.211.95.158 port 59142:11: Bye Bye [preauth] 2026-06-30T23:30:08.254829-05:00 claude-cloud sshd[831669]: Disconnected from invalid user jpkc 91.211.95.158 port 59142 [preauth] 2026-06-30T23:30:31.615874-05:00 claude-cloud sshd[831698]: Connection closed by authenticating user root 27.71.230.31 port 33600 [preauth] 2026-06-30T23:30:40.133566-05:00 claude-cloud sshd[831747]: Connection closed by authenticating user root 45.198.224.46 port 53972 [preauth] 2026-06-30T23:33:10.702601-05:00 claude-cloud sshd[832243]: Invalid user trader from 45.148.10.183 port 52234 2026-06-30T23:33:10.715655-05:00 claude-cloud sshd[832243]: Connection closed by invalid user trader 45.148.10.183 port 52234 [preauth] 2026-06-30T23:33:12.360814-05:00 claude-cloud sshd[832247]: Invalid user solv from 2.57.122.238 port 58296 2026-06-30T23:33:12.387125-05:00 claude-cloud sshd[832247]: Connection closed by invalid user solv 2.57.122.238 port 58296 [preauth] 2026-06-30T23:34:17.680003-05:00 claude-cloud sshd[832421]: Invalid user admin from 193.46.255.86 port 26858 2026-06-30T23:34:17.707073-05:00 claude-cloud sshd[832421]: Connection closed by invalid user admin 193.46.255.86 port 26858 [preauth] 2026-06-30T23:34:44.144829-05:00 claude-cloud sshd[832500]: Invalid user solv from 2.57.122.238 port 35190 2026-06-30T23:34:44.171987-05:00 claude-cloud sshd[832500]: Connection closed by invalid user solv 2.57.122.238 port 35190 [preauth] 2026-06-30T23:35:01.768871-05:00 claude-cloud CRON[832546]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T23:35:01.780807-05:00 claude-cloud CRON[832546]: pam_unix(cron:session): session closed for user root 2026-06-30T23:36:14.071248-05:00 claude-cloud sshd[832737]: Invalid user trader from 45.148.10.183 port 38382 2026-06-30T23:36:14.086007-05:00 claude-cloud sshd[832737]: Connection closed by invalid user trader 45.148.10.183 port 38382 [preauth] 2026-06-30T23:36:19.827720-05:00 claude-cloud sshd[832759]: Connection closed by 91.92.40.31 port 36242 2026-06-30T23:36:19.835267-05:00 claude-cloud sshd[832757]: Invalid user ethereum from 2.57.122.238 port 46168 2026-06-30T23:36:19.862123-05:00 claude-cloud sshd[832757]: Connection closed by invalid user ethereum 2.57.122.238 port 46168 [preauth] 2026-06-30T23:36:45.274212-05:00 claude-cloud sshd[832839]: Connection closed by authenticating user root 91.92.40.31 port 43580 [preauth] 2026-06-30T23:37:56.265832-05:00 claude-cloud sshd[833025]: Invalid user node from 2.57.122.238 port 36436 2026-06-30T23:37:56.291067-05:00 claude-cloud sshd[833025]: Connection closed by invalid user node 2.57.122.238 port 36436 [preauth] 2026-06-30T23:39:23.056091-05:00 claude-cloud sshd[833271]: Invalid user trader from 45.148.10.183 port 33552 2026-06-30T23:39:23.070419-05:00 claude-cloud sshd[833271]: Connection closed by invalid user trader 45.148.10.183 port 33552 [preauth] 2026-06-30T23:39:30.549700-05:00 claude-cloud sshd[833290]: Invalid user ubuntu from 2.57.122.238 port 33440 2026-06-30T23:39:30.574422-05:00 claude-cloud sshd[833290]: Connection closed by invalid user ubuntu 2.57.122.238 port 33440 [preauth] 2026-06-30T23:41:00.353084-05:00 claude-cloud sshd[833533]: Invalid user oracle from 45.198.224.46 port 54308 2026-06-30T23:41:00.435220-05:00 claude-cloud sshd[833533]: Connection closed by invalid user oracle 45.198.224.46 port 54308 [preauth] 2026-06-30T23:41:25.867976-05:00 claude-cloud sshd[833607]: Received disconnect from 172.110.219.251 port 37068:11: disconnected by user [preauth] 2026-06-30T23:41:25.868429-05:00 claude-cloud sshd[833607]: Disconnected from authenticating user root 172.110.219.251 port 37068 [preauth] 2026-06-30T23:42:34.431987-05:00 claude-cloud sshd[833800]: Connection closed by authenticating user root 45.148.10.183 port 36238 [preauth] 2026-06-30T23:42:36.846839-05:00 claude-cloud sshd[833769]: Connection closed by authenticating user root 27.71.230.31 port 54382 [preauth] 2026-06-30T23:44:19.030879-05:00 claude-cloud sshd[834163]: banner exchange: Connection from 172.202.118.41 port 37618: invalid format 2026-06-30T23:44:28.494397-05:00 claude-cloud sshd[834159]: Connection closed by 172.202.118.41 port 37606 [preauth] 2026-06-30T23:45:01.793911-05:00 claude-cloud CRON[834262]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T23:45:01.800095-05:00 claude-cloud CRON[834262]: pam_unix(cron:session): session closed for user root 2026-06-30T23:45:05.008966-05:00 claude-cloud systemd-logind[853]: New session c5379 of user claude. 2026-06-30T23:45:05.123724-05:00 claude-cloud systemd-logind[853]: Session c5379 logged out. Waiting for processes to exit. 2026-06-30T23:45:05.126144-05:00 claude-cloud systemd-logind[853]: Removed session c5379. 2026-06-30T23:45:06.934842-05:00 claude-cloud systemd-logind[853]: New session c5380 of user claude. 2026-06-30T23:45:07.210060-05:00 claude-cloud systemd-logind[853]: Session c5380 logged out. Waiting for processes to exit. 2026-06-30T23:45:07.212000-05:00 claude-cloud systemd-logind[853]: Removed session c5380. 2026-06-30T23:45:23.499168-05:00 claude-cloud login[834379]: PAM unable to dlopen(pam_lastlog.so): /usr/lib/security/pam_lastlog.so: cannot open shared object file: No such file or directory 2026-06-30T23:45:23.499667-05:00 claude-cloud login[834379]: PAM adding faulty module: pam_lastlog.so 2026-06-30T23:45:24.705248-05:00 claude-cloud login[834379]: pam_unix(login:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T23:45:24.746934-05:00 claude-cloud systemd-logind[853]: New session 2586 of user root. 2026-06-30T23:45:24.826617-05:00 claude-cloud (systemd): pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T23:45:25.206977-05:00 claude-cloud login[834498]: ROOT LOGIN on '/dev/pts/11' from '100.100.183.111' 2026-06-30T23:46:05.047719-05:00 claude-cloud systemd-logind[853]: New session c5381 of user claude. 2026-06-30T23:46:05.449139-05:00 claude-cloud systemd-logind[853]: Session c5381 logged out. Waiting for processes to exit. 2026-06-30T23:46:05.451325-05:00 claude-cloud systemd-logind[853]: Removed session c5381. 2026-06-30T23:46:17.146611-05:00 claude-cloud sshd[834652]: Invalid user exchange from 45.148.10.183 port 32934 2026-06-30T23:46:17.160954-05:00 claude-cloud sshd[834652]: Connection closed by invalid user exchange 45.148.10.183 port 32934 [preauth] 2026-06-30T23:48:31.912476-05:00 claude-cloud sshd[834991]: Connection closed by authenticating user root 27.71.230.31 port 57892 [preauth] 2026-06-30T23:49:15.318350-05:00 claude-cloud sshd[835145]: Invalid user solana from 45.148.10.183 port 47036 2026-06-30T23:49:15.332228-05:00 claude-cloud sshd[835145]: Connection closed by invalid user solana 45.148.10.183 port 47036 [preauth] 2026-06-30T23:49:55.569318-05:00 claude-cloud sshd[835255]: error: kex_exchange_identification: read: Connection reset by peer 2026-06-30T23:49:55.569612-05:00 claude-cloud sshd[835255]: Connection reset by 188.240.59.34 port 47204 2026-06-30T23:50:09.451878-05:00 claude-cloud sshd[835292]: Connection reset by 69.5.169.91 port 11968 [preauth] 2026-06-30T23:50:55.819815-05:00 claude-cloud sshd[835428]: Invalid user tradingbot from 2.57.122.238 port 56734 2026-06-30T23:50:55.847336-05:00 claude-cloud sshd[835428]: Connection closed by invalid user tradingbot 2.57.122.238 port 56734 [preauth] 2026-06-30T23:51:03.744882-05:00 claude-cloud sshd[835440]: Invalid user jack from 45.198.224.46 port 37624 2026-06-30T23:51:04.547267-05:00 claude-cloud sshd[835440]: Connection closed by invalid user jack 45.198.224.46 port 37624 [preauth] 2026-06-30T23:51:08.819447-05:00 claude-cloud systemd-logind[853]: New session c5382 of user claude. 2026-06-30T23:51:09.134065-05:00 claude-cloud systemd-logind[853]: Session c5382 logged out. Waiting for processes to exit. 2026-06-30T23:51:09.135988-05:00 claude-cloud systemd-logind[853]: Removed session c5382. 2026-06-30T23:52:06.748701-05:00 claude-cloud sshd[835632]: Invalid user sol from 45.148.10.183 port 57586 2026-06-30T23:52:06.762677-05:00 claude-cloud sshd[835632]: Connection closed by invalid user sol 45.148.10.183 port 57586 [preauth] 2026-06-30T23:52:30.201088-05:00 claude-cloud sshd[835692]: Invalid user bot from 2.57.122.238 port 37486 2026-06-30T23:52:30.226651-05:00 claude-cloud sshd[835692]: Connection closed by invalid user bot 2.57.122.238 port 37486 [preauth] 2026-06-30T23:54:05.536433-05:00 claude-cloud sshd[835956]: Invalid user bot from 2.57.122.238 port 45006 2026-06-30T23:54:05.562122-05:00 claude-cloud sshd[835956]: Connection closed by invalid user bot 2.57.122.238 port 45006 [preauth] 2026-06-30T23:54:34.265209-05:00 claude-cloud sshd[836008]: Connection closed by authenticating user root 27.71.230.31 port 41996 [preauth] 2026-06-30T23:54:44.781077-05:00 claude-cloud systemd-logind[853]: New session c5383 of user claude. 2026-06-30T23:55:01.811676-05:00 claude-cloud CRON[836184]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T23:55:01.818820-05:00 claude-cloud CRON[836184]: pam_unix(cron:session): session closed for user root 2026-06-30T23:55:08.014812-05:00 claude-cloud sshd[836206]: Invalid user sol from 45.148.10.183 port 40296 2026-06-30T23:55:08.029484-05:00 claude-cloud sshd[836206]: Connection closed by invalid user sol 45.148.10.183 port 40296 [preauth] 2026-06-30T23:55:17.242622-05:00 claude-cloud systemd-logind[853]: New session c5384 of user claude. 2026-06-30T23:55:49.101368-05:00 claude-cloud sshd[836322]: Invalid user bot from 2.57.122.238 port 55260 2026-06-30T23:55:49.126568-05:00 claude-cloud sshd[836322]: Connection closed by invalid user bot 2.57.122.238 port 55260 [preauth] 2026-06-30T23:55:51.535930-05:00 claude-cloud systemd-logind[853]: New session c5385 of user claude. 2026-06-30T23:56:12.437652-05:00 claude-cloud systemd-logind[853]: New session c5386 of user claude. 2026-06-30T23:56:12.780919-05:00 claude-cloud systemd-logind[853]: Session c5386 logged out. Waiting for processes to exit. 2026-06-30T23:56:12.782854-05:00 claude-cloud systemd-logind[853]: Removed session c5386. 2026-06-30T23:56:24.134604-05:00 claude-cloud systemd-logind[853]: New session c5387 of user claude. 2026-06-30T23:56:57.810956-05:00 claude-cloud sshd[836537]: Received disconnect from 210.210.155.71 port 36084:11: disconnected by user [preauth] 2026-06-30T23:56:57.811224-05:00 claude-cloud sshd[836537]: Disconnected from authenticating user root 210.210.155.71 port 36084 [preauth] 2026-06-30T23:58:06.722561-05:00 claude-cloud systemd-logind[853]: New session c5388 of user claude. 2026-06-30T23:58:06.851549-05:00 claude-cloud systemd-logind[853]: Session c5388 logged out. Waiting for processes to exit. 2026-06-30T23:58:06.853876-05:00 claude-cloud systemd-logind[853]: Removed session c5388. 2026-06-30T23:58:08.627120-05:00 claude-cloud systemd-logind[853]: New session c5389 of user claude. 2026-06-30T23:58:08.902894-05:00 claude-cloud systemd-logind[853]: Session c5389 logged out. Waiting for processes to exit. 2026-06-30T23:58:08.904532-05:00 claude-cloud systemd-logind[853]: Removed session c5389. 2026-06-30T23:59:01.831332-05:00 claude-cloud CRON[836929]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-06-30T23:59:01.838839-05:00 claude-cloud CRON[836929]: pam_unix(cron:session): session closed for user root 2026-07-01T00:00:56.940193-05:00 claude-cloud sshd[837150]: Connection closed by authenticating user root 27.71.230.31 port 52814 [preauth] 2026-07-01T00:01:11.239567-05:00 claude-cloud sshd[837300]: Invalid user yangliusha5 from 45.198.224.46 port 35088 2026-07-01T00:01:12.533333-05:00 claude-cloud sshd[837300]: Connection closed by invalid user yangliusha5 45.198.224.46 port 35088 [preauth] 2026-07-01T00:01:15.884419-05:00 claude-cloud systemd-logind[853]: New session c5390 of user claude. 2026-07-01T00:01:16.256846-05:00 claude-cloud systemd-logind[853]: Session c5390 logged out. Waiting for processes to exit. 2026-07-01T00:01:16.258490-05:00 claude-cloud systemd-logind[853]: Removed session c5390. 2026-07-01T00:01:26.866817-05:00 claude-cloud sshd[837364]: Invalid user ubuntu from 45.148.10.183 port 52674 2026-07-01T00:01:26.881088-05:00 claude-cloud sshd[837364]: Connection closed by invalid user ubuntu 45.148.10.183 port 52674 [preauth] 2026-07-01T00:03:01.432908-05:00 claude-cloud sshd[837622]: Invalid user postmaster from 185.242.3.195 port 34582 2026-07-01T00:03:01.438945-05:00 claude-cloud sshd[837622]: Connection closed by invalid user postmaster 185.242.3.195 port 34582 [preauth] 2026-07-01T00:04:38.649448-05:00 claude-cloud sshd[837885]: Invalid user ubuntu from 45.148.10.183 port 59168 2026-07-01T00:04:38.662458-05:00 claude-cloud sshd[837885]: Connection closed by invalid user ubuntu 45.148.10.183 port 59168 [preauth] 2026-07-01T00:05:01.849856-05:00 claude-cloud CRON[838009]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T00:05:01.855690-05:00 claude-cloud CRON[838009]: pam_unix(cron:session): session closed for user root 2026-07-01T00:06:19.844509-05:00 claude-cloud systemd-logind[853]: New session c5391 of user claude. 2026-07-01T00:06:20.176843-05:00 claude-cloud systemd-logind[853]: Session c5391 logged out. Waiting for processes to exit. 2026-07-01T00:06:20.178366-05:00 claude-cloud systemd-logind[853]: Removed session c5391. 2026-07-01T00:06:33.322714-05:00 claude-cloud sshd[838235]: Connection closed by authenticating user root 27.71.230.31 port 51572 [preauth] 2026-07-01T00:07:47.377848-05:00 claude-cloud sshd[838492]: Invalid user ubuntu from 45.148.10.183 port 44738 2026-07-01T00:07:47.391450-05:00 claude-cloud sshd[838492]: Connection closed by invalid user ubuntu 45.148.10.183 port 44738 [preauth] 2026-07-01T00:10:51.972169-05:00 claude-cloud sshd[838996]: Invalid user trading from 45.148.10.183 port 40788 2026-07-01T00:10:51.985113-05:00 claude-cloud sshd[838996]: Connection closed by invalid user trading 45.148.10.183 port 40788 [preauth] 2026-07-01T00:11:22.934910-05:00 claude-cloud sshd[839073]: Connection closed by authenticating user root 45.198.224.46 port 49540 [preauth] 2026-07-01T00:11:23.471836-05:00 claude-cloud systemd-logind[853]: New session c5392 of user claude. 2026-07-01T00:11:23.826874-05:00 claude-cloud systemd-logind[853]: Session c5392 logged out. Waiting for processes to exit. 2026-07-01T00:11:23.828957-05:00 claude-cloud systemd-logind[853]: Removed session c5392. 2026-07-01T00:13:55.549701-05:00 claude-cloud sshd[839511]: Invalid user trader from 45.148.10.183 port 38096 2026-07-01T00:13:55.563436-05:00 claude-cloud sshd[839511]: Connection closed by invalid user trader 45.148.10.183 port 38096 [preauth] 2026-07-01T00:14:26.915937-05:00 claude-cloud sshd[839594]: Invalid user admin from 2.57.121.25 port 45010 2026-07-01T00:14:26.940806-05:00 claude-cloud sshd[839594]: Connection closed by invalid user admin 2.57.121.25 port 45010 [preauth] 2026-07-01T00:15:01.869057-05:00 claude-cloud CRON[839762]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T00:15:01.876041-05:00 claude-cloud CRON[839762]: pam_unix(cron:session): session closed for user root 2026-07-01T00:16:27.269838-05:00 claude-cloud systemd-logind[853]: New session c5393 of user claude. 2026-07-01T00:16:27.576877-05:00 claude-cloud systemd-logind[853]: Session c5393 logged out. Waiting for processes to exit. 2026-07-01T00:16:27.578835-05:00 claude-cloud systemd-logind[853]: Removed session c5393. 2026-07-01T00:17:00.061826-05:00 claude-cloud sshd[840095]: Invalid user pool from 45.148.10.183 port 49362 2026-07-01T00:17:00.075257-05:00 claude-cloud sshd[840095]: Connection closed by invalid user pool 45.148.10.183 port 49362 [preauth] 2026-07-01T00:17:01.885388-05:00 claude-cloud CRON[840097]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T00:17:01.891795-05:00 claude-cloud CRON[840097]: pam_unix(cron:session): session closed for user root 2026-07-01T00:18:40.701844-05:00 claude-cloud sshd[840305]: Connection closed by authenticating user root 27.71.230.31 port 48448 [preauth] 2026-07-01T00:20:12.383295-05:00 claude-cloud sshd[840616]: Connection closed by 45.148.10.183 port 48588 2026-07-01T00:20:36.628820-05:00 claude-cloud sshd[840689]: Invalid user zahra from 193.46.255.86 port 50616 2026-07-01T00:20:36.656094-05:00 claude-cloud sshd[840689]: Connection closed by invalid user zahra 193.46.255.86 port 50616 [preauth] 2026-07-01T00:21:31.103123-05:00 claude-cloud sshd[840829]: Invalid user webmaster from 45.198.224.46 port 59394 2026-07-01T00:21:31.438935-05:00 claude-cloud systemd-logind[853]: New session c5394 of user claude. 2026-07-01T00:21:31.748383-05:00 claude-cloud sshd[840829]: Connection closed by invalid user webmaster 45.198.224.46 port 59394 [preauth] 2026-07-01T00:21:31.759148-05:00 claude-cloud systemd-logind[853]: Session c5394 logged out. Waiting for processes to exit. 2026-07-01T00:21:31.760483-05:00 claude-cloud systemd-logind[853]: Removed session c5394. 2026-07-01T00:23:54.973898-05:00 claude-cloud sshd[841244]: Invalid user sol from 45.148.10.183 port 57898 2026-07-01T00:23:54.987879-05:00 claude-cloud sshd[841244]: Connection closed by invalid user sol 45.148.10.183 port 57898 [preauth] 2026-07-01T00:24:20.744378-05:00 claude-cloud sshd[841282]: Connection closed by authenticating user root 27.71.230.31 port 55808 [preauth] 2026-07-01T00:25:01.902534-05:00 claude-cloud CRON[841430]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T00:25:01.909371-05:00 claude-cloud CRON[841430]: pam_unix(cron:session): session closed for user root 2026-07-01T00:26:34.931188-05:00 claude-cloud systemd-logind[853]: New session c5395 of user claude. 2026-07-01T00:26:35.251904-05:00 claude-cloud systemd-logind[853]: Session c5395 logged out. Waiting for processes to exit. 2026-07-01T00:26:35.254111-05:00 claude-cloud systemd-logind[853]: Removed session c5395. 2026-07-01T00:26:56.564715-05:00 claude-cloud sshd[841816]: Invalid user solana from 45.148.10.183 port 32916 2026-07-01T00:26:56.578120-05:00 claude-cloud sshd[841816]: Connection closed by invalid user solana 45.148.10.183 port 32916 [preauth] 2026-07-01T00:30:23.262903-05:00 claude-cloud sshd[842349]: Connection closed by authenticating user root 27.71.230.31 port 39796 [preauth] 2026-07-01T00:30:30.704975-05:00 claude-cloud sshd[842407]: Invalid user solana from 45.148.10.183 port 55370 2026-07-01T00:30:30.718448-05:00 claude-cloud sshd[842407]: Connection closed by invalid user solana 45.148.10.183 port 55370 [preauth] 2026-07-01T00:31:38.448580-05:00 claude-cloud systemd-logind[853]: New session c5396 of user claude. 2026-07-01T00:31:38.742731-05:00 claude-cloud systemd-logind[853]: Session c5396 logged out. Waiting for processes to exit. 2026-07-01T00:31:38.744853-05:00 claude-cloud systemd-logind[853]: Removed session c5396. 2026-07-01T00:31:44.970205-05:00 claude-cloud sshd[842596]: Connection closed by authenticating user root 45.198.224.46 port 60858 [preauth] 2026-07-01T00:33:30.670059-05:00 claude-cloud sshd[842907]: Invalid user sol from 45.148.10.183 port 34262 2026-07-01T00:33:30.684247-05:00 claude-cloud sshd[842907]: Connection closed by invalid user sol 45.148.10.183 port 34262 [preauth] 2026-07-01T00:34:21.332459-05:00 claude-cloud sshd[843056]: Invalid user marcelino from 2.57.121.112 port 41786 2026-07-01T00:34:21.369453-05:00 claude-cloud sshd[843056]: Connection closed by invalid user marcelino 2.57.121.112 port 41786 [preauth] 2026-07-01T00:35:01.921019-05:00 claude-cloud CRON[843159]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T00:35:01.927217-05:00 claude-cloud CRON[843159]: pam_unix(cron:session): session closed for user root 2026-07-01T00:36:41.938065-05:00 claude-cloud systemd-logind[853]: New session c5397 of user claude. 2026-07-01T00:36:42.241596-05:00 claude-cloud systemd-logind[853]: Session c5397 logged out. Waiting for processes to exit. 2026-07-01T00:36:42.246114-05:00 claude-cloud systemd-logind[853]: Removed session c5397. 2026-07-01T00:36:48.605406-05:00 claude-cloud sshd[843525]: Invalid user sol from 45.148.10.183 port 51020 2026-07-01T00:36:48.621593-05:00 claude-cloud sshd[843525]: Connection closed by invalid user sol 45.148.10.183 port 51020 [preauth] 2026-07-01T00:36:52.282894-05:00 claude-cloud sshd[843432]: Connection closed by authenticating user root 27.71.230.31 port 39224 [preauth] 2026-07-01T00:39:31.718589-05:00 claude-cloud sshd[843958]: Invalid user sol from 45.148.10.183 port 42778 2026-07-01T00:39:31.732317-05:00 claude-cloud sshd[843958]: Connection closed by invalid user sol 45.148.10.183 port 42778 [preauth] 2026-07-01T00:41:45.456847-05:00 claude-cloud systemd-logind[853]: New session c5398 of user claude. 2026-07-01T00:41:45.746482-05:00 claude-cloud systemd-logind[853]: Session c5398 logged out. Waiting for processes to exit. 2026-07-01T00:41:45.749089-05:00 claude-cloud systemd-logind[853]: Removed session c5398. 2026-07-01T00:42:02.202346-05:00 claude-cloud sshd[844387]: Connection closed by authenticating user root 45.198.224.46 port 53674 [preauth] 2026-07-01T00:42:04.201778-05:00 claude-cloud systemd-logind[853]: New session c5399 of user claude. 2026-07-01T00:42:04.244248-05:00 claude-cloud systemd-logind[853]: New session c5400 of user claude. 2026-07-01T00:42:04.276951-05:00 claude-cloud systemd-logind[853]: Session c5399 logged out. Waiting for processes to exit. 2026-07-01T00:42:04.279122-05:00 claude-cloud systemd-logind[853]: Removed session c5399. 2026-07-01T00:42:04.958170-05:00 claude-cloud systemd-logind[853]: New session c5401 of user claude. 2026-07-01T00:42:05.025394-05:00 claude-cloud systemd-logind[853]: Session c5401 logged out. Waiting for processes to exit. 2026-07-01T00:42:05.029941-05:00 claude-cloud systemd-logind[853]: Removed session c5401. 2026-07-01T00:42:05.560042-05:00 claude-cloud systemd-logind[853]: New session c5402 of user claude. 2026-07-01T00:42:06.455009-05:00 claude-cloud systemd-logind[853]: Session c5402 logged out. Waiting for processes to exit. 2026-07-01T00:42:06.455994-05:00 claude-cloud systemd-logind[853]: Removed session c5402. 2026-07-01T00:42:08.165821-05:00 claude-cloud systemd-logind[853]: New session c5403 of user claude. 2026-07-01T00:42:08.262111-05:00 claude-cloud systemd-logind[853]: Removed session c5307. 2026-07-01T00:42:08.278269-05:00 claude-cloud systemd-logind[853]: Session c5403 logged out. Waiting for processes to exit. 2026-07-01T00:42:08.843056-05:00 claude-cloud systemd-logind[853]: New session c5404 of user claude. 2026-07-01T00:42:18.331990-05:00 claude-cloud sshd[844474]: Connection closed by authenticating user root 27.71.230.31 port 36502 [preauth] 2026-07-01T00:42:38.361797-05:00 claude-cloud sshd[844982]: Invalid user solana from 45.148.10.183 port 38442 2026-07-01T00:42:38.375386-05:00 claude-cloud sshd[844982]: Connection closed by invalid user solana 45.148.10.183 port 38442 [preauth] 2026-07-01T00:44:23.535012-05:00 claude-cloud systemd-logind[853]: New session c5405 of user claude. 2026-07-01T00:44:24.474522-05:00 claude-cloud systemd-logind[853]: Session c5405 logged out. Waiting for processes to exit. 2026-07-01T00:44:24.477406-05:00 claude-cloud systemd-logind[853]: Removed session c5405. 2026-07-01T00:44:54.494186-05:00 claude-cloud sshd[845666]: banner exchange: Connection from 91.238.181.94 port 65080: invalid format 2026-07-01T00:45:01.939365-05:00 claude-cloud CRON[845730]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T00:45:01.946327-05:00 claude-cloud CRON[845730]: pam_unix(cron:session): session closed for user root 2026-07-01T00:45:24.178603-05:00 claude-cloud systemd-logind[853]: Session 2586 logged out. Waiting for processes to exit. 2026-07-01T00:45:24.183421-05:00 claude-cloud systemd-logind[853]: Removed session 2586. 2026-07-01T00:45:26.487262-05:00 claude-cloud sshd[845815]: error: kex_protocol_error: type 20 seq 2 [preauth] 2026-07-01T00:45:26.487997-05:00 claude-cloud sshd[845815]: error: kex_protocol_error: type 30 seq 3 [preauth] 2026-07-01T00:45:28.805115-05:00 claude-cloud sshd[845815]: error: kex_protocol_error: type 20 seq 4 [preauth] 2026-07-01T00:45:28.805604-05:00 claude-cloud sshd[845815]: error: kex_protocol_error: type 30 seq 5 [preauth] 2026-07-01T00:45:30.801697-05:00 claude-cloud sshd[845815]: error: kex_protocol_error: type 20 seq 6 [preauth] 2026-07-01T00:45:30.802043-05:00 claude-cloud sshd[845815]: error: kex_protocol_error: type 30 seq 7 [preauth] 2026-07-01T00:45:49.857958-05:00 claude-cloud sshd[845910]: Invalid user solana from 45.148.10.183 port 54122 2026-07-01T00:45:49.872199-05:00 claude-cloud sshd[845910]: Connection closed by invalid user solana 45.148.10.183 port 54122 [preauth] 2026-07-01T00:45:54.812188-05:00 claude-cloud sshd[845815]: Connection reset by 170.64.167.72 port 6102 [preauth] 2026-07-01T00:46:49.127518-05:00 claude-cloud systemd-logind[853]: New session c5406 of user claude. 2026-07-01T00:46:49.240111-05:00 claude-cloud sshd[846255]: Received disconnect from 209.90.232.249 port 44092:11: disconnected by user [preauth] 2026-07-01T00:46:49.240678-05:00 claude-cloud sshd[846255]: Disconnected from authenticating user root 209.90.232.249 port 44092 [preauth] 2026-07-01T00:46:49.539332-05:00 claude-cloud systemd-logind[853]: Session c5406 logged out. Waiting for processes to exit. 2026-07-01T00:46:49.541142-05:00 claude-cloud systemd-logind[853]: Removed session c5406. 2026-07-01T00:48:14.813034-05:00 claude-cloud sshd[846712]: Connection closed by authenticating user root 27.71.230.31 port 56338 [preauth] 2026-07-01T00:48:59.560610-05:00 claude-cloud sshd[847150]: Invalid user solana from 45.148.10.183 port 37518 2026-07-01T00:48:59.573900-05:00 claude-cloud sshd[847150]: Connection closed by invalid user solana 45.148.10.183 port 37518 [preauth] 2026-07-01T00:51:21.610387-05:00 claude-cloud systemd-logind[853]: New session c5407 of user claude. 2026-07-01T00:51:22.417128-05:00 claude-cloud systemd-logind[853]: Session c5407 logged out. Waiting for processes to exit. 2026-07-01T00:51:22.419093-05:00 claude-cloud systemd-logind[853]: Removed session c5407. 2026-07-01T00:51:52.842871-05:00 claude-cloud systemd-logind[853]: New session c5408 of user claude. 2026-07-01T00:51:53.115390-05:00 claude-cloud systemd-logind[853]: Session c5408 logged out. Waiting for processes to exit. 2026-07-01T00:51:53.117591-05:00 claude-cloud systemd-logind[853]: Removed session c5408. 2026-07-01T00:51:59.418262-05:00 claude-cloud sshd[848653]: Connection closed by authenticating user root 45.198.224.46 port 50680 [preauth] 2026-07-01T00:52:42.799400-05:00 claude-cloud sshd[849018]: Invalid user sol from 45.148.10.183 port 57554 2026-07-01T00:52:42.812867-05:00 claude-cloud sshd[849018]: Connection closed by invalid user sol 45.148.10.183 port 57554 [preauth] 2026-07-01T00:54:23.821426-05:00 claude-cloud systemd-logind[853]: Session c5385 logged out. Waiting for processes to exit. 2026-07-01T00:54:23.823490-05:00 claude-cloud systemd-logind[853]: Session c5384 logged out. Waiting for processes to exit. 2026-07-01T00:54:23.826480-05:00 claude-cloud systemd-logind[853]: Session c5387 logged out. Waiting for processes to exit. 2026-07-01T00:54:23.829812-05:00 claude-cloud systemd-logind[853]: Session c5383 logged out. Waiting for processes to exit. 2026-07-01T00:54:23.832990-05:00 claude-cloud systemd-logind[853]: Removed session c5384. 2026-07-01T00:54:23.835735-05:00 claude-cloud systemd-logind[853]: Removed session c5383. 2026-07-01T00:54:23.837628-05:00 claude-cloud systemd-logind[853]: Removed session c5387. 2026-07-01T00:54:23.839858-05:00 claude-cloud systemd-logind[853]: Removed session c5385. 2026-07-01T00:54:29.387257-05:00 claude-cloud sshd[849373]: Connection closed by authenticating user root 27.71.230.31 port 40048 [preauth] 2026-07-01T00:55:01.963473-05:00 claude-cloud CRON[849566]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T00:55:01.970080-05:00 claude-cloud CRON[849566]: pam_unix(cron:session): session closed for user root 2026-07-01T00:55:12.897382-05:00 claude-cloud sshd[849600]: Invalid user sol from 45.148.10.183 port 46262 2026-07-01T00:55:12.911829-05:00 claude-cloud sshd[849600]: Connection closed by invalid user sol 45.148.10.183 port 46262 [preauth] 2026-07-01T00:56:56.735460-05:00 claude-cloud systemd-logind[853]: New session c5409 of user claude. 2026-07-01T00:56:57.059345-05:00 claude-cloud systemd-logind[853]: Session c5409 logged out. Waiting for processes to exit. 2026-07-01T00:56:57.061829-05:00 claude-cloud systemd-logind[853]: Removed session c5409. 2026-07-01T00:58:25.289932-05:00 claude-cloud sshd[851112]: Invalid user sol from 45.148.10.183 port 52470 2026-07-01T00:58:25.303989-05:00 claude-cloud sshd[851112]: Connection closed by invalid user sol 45.148.10.183 port 52470 [preauth] 2026-07-01T01:00:21.651504-05:00 claude-cloud sshd[851608]: Connection closed by authenticating user root 27.71.230.31 port 35392 [preauth] 2026-07-01T01:01:21.830874-05:00 claude-cloud sshd[851976]: Invalid user sol from 45.148.10.183 port 37316 2026-07-01T01:01:21.843641-05:00 claude-cloud sshd[851976]: Connection closed by invalid user sol 45.148.10.183 port 37316 [preauth] 2026-07-01T01:01:52.232454-05:00 claude-cloud sshd[852078]: Connection closed by authenticating user root 45.198.224.46 port 59506 [preauth] 2026-07-01T01:02:00.515605-05:00 claude-cloud systemd-logind[853]: New session c5410 of user claude. 2026-07-01T01:02:00.825599-05:00 claude-cloud systemd-logind[853]: Session c5410 logged out. Waiting for processes to exit. 2026-07-01T01:02:00.827256-05:00 claude-cloud systemd-logind[853]: Removed session c5410. 2026-07-01T01:04:45.730057-05:00 claude-cloud sshd[852804]: Connection closed by authenticating user root 45.148.10.183 port 59156 [preauth] 2026-07-01T01:05:01.981687-05:00 claude-cloud CRON[853001]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T01:05:01.989800-05:00 claude-cloud CRON[853001]: pam_unix(cron:session): session closed for user root 2026-07-01T01:06:19.559579-05:00 claude-cloud sshd[853398]: Connection closed by authenticating user root 27.71.230.31 port 47400 [preauth] 2026-07-01T01:06:39.028055-05:00 claude-cloud sshd[853544]: Connection closed by 2.57.122.238 port 44162 2026-07-01T01:06:41.656648-05:00 claude-cloud sshd[853562]: Invalid user jenkins from 193.46.255.86 port 61862 2026-07-01T01:06:41.681382-05:00 claude-cloud sshd[853562]: Connection closed by invalid user jenkins 193.46.255.86 port 61862 [preauth] 2026-07-01T01:06:48.592132-05:00 claude-cloud sshd[853589]: Received disconnect from 104.194.9.81 port 40058:11: disconnected by user [preauth] 2026-07-01T01:06:48.595552-05:00 claude-cloud sshd[853589]: Disconnected from authenticating user root 104.194.9.81 port 40058 [preauth] 2026-07-01T01:07:04.001227-05:00 claude-cloud systemd-logind[853]: New session c5411 of user claude. 2026-07-01T01:07:04.342930-05:00 claude-cloud systemd-logind[853]: Session c5411 logged out. Waiting for processes to exit. 2026-07-01T01:07:04.344795-05:00 claude-cloud systemd-logind[853]: Removed session c5411. 2026-07-01T01:07:23.898337-05:00 claude-cloud sshd[853721]: Invalid user admin from 2.57.121.25 port 55028 2026-07-01T01:07:23.924569-05:00 claude-cloud sshd[853721]: Connection closed by invalid user admin 2.57.121.25 port 55028 [preauth] 2026-07-01T01:07:50.840904-05:00 claude-cloud sshd[853936]: Connection closed by authenticating user root 45.148.10.183 port 56094 [preauth] 2026-07-01T01:11:12.919111-05:00 claude-cloud sshd[855537]: Invalid user solana from 45.148.10.183 port 35798 2026-07-01T01:11:12.934189-05:00 claude-cloud sshd[855537]: Connection closed by invalid user solana 45.148.10.183 port 35798 [preauth] 2026-07-01T01:11:32.896844-05:00 claude-cloud sshd[855680]: Invalid user nagios from 45.198.224.46 port 40058 2026-07-01T01:11:33.644758-05:00 claude-cloud sshd[855680]: Connection closed by invalid user nagios 45.198.224.46 port 40058 [preauth] 2026-07-01T01:12:07.951228-05:00 claude-cloud systemd-logind[853]: New session c5412 of user claude. 2026-07-01T01:12:08.517083-05:00 claude-cloud systemd-logind[853]: Session c5412 logged out. Waiting for processes to exit. 2026-07-01T01:12:08.518661-05:00 claude-cloud systemd-logind[853]: Removed session c5412. 2026-07-01T01:12:17.250815-05:00 claude-cloud sshd[856374]: Connection closed by authenticating user root 27.71.230.31 port 45730 [preauth] 2026-07-01T01:12:19.742493-05:00 claude-cloud sshd[856489]: Invalid user admin from 34.156.125.244 port 64790 2026-07-01T01:12:19.757483-05:00 claude-cloud sshd[856489]: Connection closed by invalid user admin 34.156.125.244 port 64790 [preauth] 2026-07-01T01:12:20.761491-05:00 claude-cloud sshd[856487]: Connection closed by 34.156.125.244 port 64776 [preauth] 2026-07-01T01:13:54.702226-05:00 claude-cloud sshd[856831]: Connection closed by 34.140.209.143 port 56588 2026-07-01T01:14:29.931935-05:00 claude-cloud sshd[857033]: Invalid user solana from 45.148.10.183 port 39396 2026-07-01T01:14:29.945938-05:00 claude-cloud sshd[857033]: Connection closed by invalid user solana 45.148.10.183 port 39396 [preauth] 2026-07-01T01:15:02.006693-05:00 claude-cloud CRON[857116]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T01:15:02.015208-05:00 claude-cloud CRON[857116]: pam_unix(cron:session): session closed for user root 2026-07-01T01:15:31.484755-05:00 claude-cloud sshd[857195]: Connection closed by 2.57.122.238 port 58776 2026-07-01T01:16:20.024877-05:00 claude-cloud sshd[857448]: error: kex_exchange_identification: read: Connection reset by peer 2026-07-01T01:16:20.028419-05:00 claude-cloud sshd[857448]: Connection reset by 172.182.209.54 port 51264 2026-07-01T01:17:01.029167-05:00 claude-cloud CRON[857575]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T01:17:01.037033-05:00 claude-cloud CRON[857575]: pam_unix(cron:session): session closed for user root 2026-07-01T01:17:11.806216-05:00 claude-cloud systemd-logind[853]: New session c5413 of user claude. 2026-07-01T01:17:12.128593-05:00 claude-cloud systemd-logind[853]: Session c5413 logged out. Waiting for processes to exit. 2026-07-01T01:17:12.130002-05:00 claude-cloud systemd-logind[853]: Removed session c5413. 2026-07-01T01:17:23.506092-05:00 claude-cloud sshd[857653]: Invalid user solana from 45.148.10.183 port 50328 2026-07-01T01:17:23.520610-05:00 claude-cloud sshd[857653]: Connection closed by invalid user solana 45.148.10.183 port 50328 [preauth] 2026-07-01T01:19:45.701499-05:00 claude-cloud sshd[857772]: Connection closed by authenticating user root 27.71.230.31 port 33242 [preauth] 2026-07-01T01:20:20.866052-05:00 claude-cloud sshd[858546]: Invalid user solana from 45.148.10.183 port 36448 2026-07-01T01:20:20.879106-05:00 claude-cloud sshd[858546]: Connection closed by invalid user solana 45.148.10.183 port 36448 [preauth] 2026-07-01T01:21:13.615397-05:00 claude-cloud sshd[858777]: Connection closed by authenticating user root 45.198.224.46 port 49492 [preauth] 2026-07-01T01:22:15.354944-05:00 claude-cloud systemd-logind[853]: New session c5414 of user claude. 2026-07-01T01:22:15.727056-05:00 claude-cloud systemd-logind[853]: Session c5414 logged out. Waiting for processes to exit. 2026-07-01T01:22:15.729265-05:00 claude-cloud systemd-logind[853]: Removed session c5414. 2026-07-01T01:23:26.320932-05:00 claude-cloud sshd[859170]: Invalid user solana from 45.148.10.183 port 59748 2026-07-01T01:23:26.335058-05:00 claude-cloud sshd[859170]: Connection closed by invalid user solana 45.148.10.183 port 59748 [preauth] 2026-07-01T01:24:18.375847-05:00 claude-cloud sshd[859337]: error: maximum authentication attempts exceeded for root from 180.119.209.61 port 4115 ssh2 [preauth] 2026-07-01T01:24:18.376562-05:00 claude-cloud sshd[859337]: Disconnecting authenticating user root 180.119.209.61 port 4115: Too many authentication failures [preauth] 2026-07-01T01:24:26.654696-05:00 claude-cloud sshd[859410]: error: maximum authentication attempts exceeded for root from 180.119.209.61 port 4193 ssh2 [preauth] 2026-07-01T01:24:26.655298-05:00 claude-cloud sshd[859410]: Disconnecting authenticating user root 180.119.209.61 port 4193: Too many authentication failures [preauth] 2026-07-01T01:24:34.519367-05:00 claude-cloud sshd[859426]: error: maximum authentication attempts exceeded for root from 180.119.209.61 port 4263 ssh2 [preauth] 2026-07-01T01:24:34.519886-05:00 claude-cloud sshd[859426]: Disconnecting authenticating user root 180.119.209.61 port 4263: Too many authentication failures [preauth] 2026-07-01T01:24:38.977393-05:00 claude-cloud sshd[859381]: Connection closed by authenticating user root 27.71.230.31 port 37654 [preauth] 2026-07-01T01:24:41.356954-05:00 claude-cloud sshd[859488]: Received disconnect from 180.119.209.61 port 4324:11: disconnected by user [preauth] 2026-07-01T01:24:41.358523-05:00 claude-cloud sshd[859488]: Disconnected from authenticating user root 180.119.209.61 port 4324 [preauth] 2026-07-01T01:24:47.481121-05:00 claude-cloud sshd[859550]: Invalid user admin from 180.119.209.61 port 4383 2026-07-01T01:24:49.765414-05:00 claude-cloud sshd[859550]: error: maximum authentication attempts exceeded for invalid user admin from 180.119.209.61 port 4383 ssh2 [preauth] 2026-07-01T01:24:49.765776-05:00 claude-cloud sshd[859550]: Disconnecting invalid user admin 180.119.209.61 port 4383: Too many authentication failures [preauth] 2026-07-01T01:25:01.053998-05:00 claude-cloud CRON[859644]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T01:25:01.062020-05:00 claude-cloud CRON[859644]: pam_unix(cron:session): session closed for user root 2026-07-01T01:26:35.434693-05:00 claude-cloud sshd[860289]: Invalid user sols from 45.148.10.183 port 51030 2026-07-01T01:26:35.448205-05:00 claude-cloud sshd[860289]: Connection closed by invalid user sols 45.148.10.183 port 51030 [preauth] 2026-07-01T01:27:19.117580-05:00 claude-cloud systemd-logind[853]: New session c5415 of user claude. 2026-07-01T01:27:19.444455-05:00 claude-cloud systemd-logind[853]: Session c5415 logged out. Waiting for processes to exit. 2026-07-01T01:27:19.447137-05:00 claude-cloud systemd-logind[853]: Removed session c5415. 2026-07-01T01:29:45.483608-05:00 claude-cloud sshd[862254]: Invalid user jito from 45.148.10.183 port 59450 2026-07-01T01:29:45.498640-05:00 claude-cloud sshd[862254]: Connection closed by invalid user jito 45.148.10.183 port 59450 [preauth] 2026-07-01T01:30:07.305987-05:00 claude-cloud sshd[862316]: Received disconnect from 93.77.187.140 port 54410:11: Bye Bye [preauth] 2026-07-01T01:30:07.306457-05:00 claude-cloud sshd[862316]: Disconnected from authenticating user root 93.77.187.140 port 54410 [preauth] 2026-07-01T01:30:11.913047-05:00 claude-cloud sshd[862328]: Invalid user user2 from 103.189.208.13 port 56758 2026-07-01T01:30:12.139236-05:00 claude-cloud sshd[862328]: Received disconnect from 103.189.208.13 port 56758:11: Bye Bye [preauth] 2026-07-01T01:30:12.139743-05:00 claude-cloud sshd[862328]: Disconnected from invalid user user2 103.189.208.13 port 56758 [preauth] 2026-07-01T01:30:15.221139-05:00 claude-cloud sshd[862338]: Received disconnect from 119.96.173.169 port 56544:11: Bye Bye [preauth] 2026-07-01T01:30:15.221827-05:00 claude-cloud sshd[862338]: Disconnected from authenticating user root 119.96.173.169 port 56544 [preauth] 2026-07-01T01:30:21.107720-05:00 claude-cloud sshd[862301]: Connection closed by authenticating user root 27.71.230.31 port 40984 [preauth] 2026-07-01T01:31:01.201323-05:00 claude-cloud sshd[862512]: Connection closed by authenticating user root 45.198.224.46 port 44338 [preauth] 2026-07-01T01:31:16.068787-05:00 claude-cloud sshd[862564]: Received disconnect from 172.172.196.177 port 44542:11: Bye Bye [preauth] 2026-07-01T01:31:16.069187-05:00 claude-cloud sshd[862564]: Disconnected from authenticating user root 172.172.196.177 port 44542 [preauth] 2026-07-01T01:32:22.714936-05:00 claude-cloud systemd-logind[853]: New session c5416 of user claude. 2026-07-01T01:32:23.314327-05:00 claude-cloud systemd-logind[853]: Session c5416 logged out. Waiting for processes to exit. 2026-07-01T01:32:23.316458-05:00 claude-cloud systemd-logind[853]: Removed session c5416. 2026-07-01T01:33:04.662870-05:00 claude-cloud sshd[863112]: Invalid user soul from 45.148.10.183 port 43456 2026-07-01T01:33:04.678056-05:00 claude-cloud sshd[863112]: Connection closed by invalid user soul 45.148.10.183 port 43456 [preauth] 2026-07-01T01:33:51.991424-05:00 claude-cloud sshd[864042]: Invalid user cookie from 185.242.3.195 port 43450 2026-07-01T01:33:51.999390-05:00 claude-cloud sshd[864042]: Connection closed by invalid user cookie 185.242.3.195 port 43450 [preauth] 2026-07-01T01:34:59.433571-05:00 claude-cloud sshd[864280]: Connection closed by 66.132.172.206 port 35400 [preauth] 2026-07-01T01:35:01.079135-05:00 claude-cloud CRON[864376]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T01:35:01.085909-05:00 claude-cloud CRON[864376]: pam_unix(cron:session): session closed for user root 2026-07-01T01:36:07.213468-05:00 claude-cloud sshd[864596]: Connection closed by authenticating user root 27.71.230.31 port 41560 [preauth] 2026-07-01T01:36:14.567650-05:00 claude-cloud sshd[864639]: Received disconnect from 142.44.247.134 port 48766:11: disconnected by user [preauth] 2026-07-01T01:36:14.568093-05:00 claude-cloud sshd[864639]: Disconnected from authenticating user root 142.44.247.134 port 48766 [preauth] 2026-07-01T01:36:26.545411-05:00 claude-cloud sshd[864677]: Invalid user sol from 45.148.10.183 port 50026 2026-07-01T01:36:26.560252-05:00 claude-cloud sshd[864677]: Connection closed by invalid user sol 45.148.10.183 port 50026 [preauth] 2026-07-01T01:37:08.053783-05:00 claude-cloud sshd[865140]: Received disconnect from 139.59.36.109 port 41160:11: Bye Bye [preauth] 2026-07-01T01:37:08.054789-05:00 claude-cloud sshd[865140]: Disconnected from authenticating user root 139.59.36.109 port 41160 [preauth] 2026-07-01T01:37:26.655733-05:00 claude-cloud systemd-logind[853]: New session c5417 of user claude. 2026-07-01T01:37:27.231022-05:00 claude-cloud systemd-logind[853]: Session c5417 logged out. Waiting for processes to exit. 2026-07-01T01:37:27.232674-05:00 claude-cloud systemd-logind[853]: Removed session c5417. 2026-07-01T01:39:00.781136-05:00 claude-cloud sshd[866150]: Received disconnect from 172.245.187.186 port 58414:11: disconnected by user [preauth] 2026-07-01T01:39:00.781802-05:00 claude-cloud sshd[866150]: Disconnected from authenticating user root 172.245.187.186 port 58414 [preauth] 2026-07-01T01:39:22.462452-05:00 claude-cloud sshd[866431]: Invalid user solana from 45.148.10.183 port 43892 2026-07-01T01:39:22.475947-05:00 claude-cloud sshd[866431]: Connection closed by invalid user solana 45.148.10.183 port 43892 [preauth] 2026-07-01T01:40:38.194918-05:00 claude-cloud sshd[867804]: Invalid user pruebas from 45.198.224.46 port 43546 2026-07-01T01:40:39.060119-05:00 claude-cloud sshd[867804]: Connection closed by invalid user pruebas 45.198.224.46 port 43546 [preauth] 2026-07-01T01:41:59.592515-05:00 claude-cloud sshd[868316]: Connection closed by authenticating user root 27.71.230.31 port 41632 [preauth] 2026-07-01T01:42:26.956937-05:00 claude-cloud sshd[868569]: Invalid user sole from 45.148.10.183 port 33940 2026-07-01T01:42:26.970709-05:00 claude-cloud sshd[868569]: Connection closed by invalid user sole 45.148.10.183 port 33940 [preauth] 2026-07-01T01:42:30.782535-05:00 claude-cloud systemd-logind[853]: New session c5418 of user claude. 2026-07-01T01:42:31.411229-05:00 claude-cloud systemd-logind[853]: Session c5418 logged out. Waiting for processes to exit. 2026-07-01T01:42:31.414012-05:00 claude-cloud systemd-logind[853]: Removed session c5418. 2026-07-01T01:42:44.415767-05:00 claude-cloud sshd[868636]: Received disconnect from 172.172.196.177 port 33734:11: Bye Bye [preauth] 2026-07-01T01:42:44.416674-05:00 claude-cloud sshd[868636]: Disconnected from authenticating user root 172.172.196.177 port 33734 [preauth] 2026-07-01T01:43:08.636850-05:00 claude-cloud sshd[868741]: Received disconnect from 93.77.187.140 port 33106:11: Bye Bye [preauth] 2026-07-01T01:43:08.639409-05:00 claude-cloud sshd[868741]: Disconnected from authenticating user root 93.77.187.140 port 33106 [preauth] 2026-07-01T01:43:11.207634-05:00 claude-cloud sshd[868743]: Invalid user ubuntu from 119.96.173.169 port 50180 2026-07-01T01:43:11.988979-05:00 claude-cloud sshd[868743]: Received disconnect from 119.96.173.169 port 50180:11: Bye Bye [preauth] 2026-07-01T01:43:11.989203-05:00 claude-cloud sshd[868743]: Disconnected from invalid user ubuntu 119.96.173.169 port 50180 [preauth] 2026-07-01T01:43:29.699559-05:00 claude-cloud sshd[868835]: Invalid user gitlab-runner from 103.189.208.13 port 47448 2026-07-01T01:43:29.933483-05:00 claude-cloud sshd[868835]: Received disconnect from 103.189.208.13 port 47448:11: Bye Bye [preauth] 2026-07-01T01:43:29.934010-05:00 claude-cloud sshd[868835]: Disconnected from invalid user gitlab-runner 103.189.208.13 port 47448 [preauth] 2026-07-01T01:43:44.059834-05:00 claude-cloud sshd[868858]: Connection closed by 46.101.90.47 port 39702 [preauth] 2026-07-01T01:44:13.832817-05:00 claude-cloud sshd[869087]: Received disconnect from 139.59.36.109 port 51498:11: Bye Bye [preauth] 2026-07-01T01:44:13.833371-05:00 claude-cloud sshd[869087]: Disconnected from authenticating user root 139.59.36.109 port 51498 [preauth] 2026-07-01T01:44:27.332145-05:00 claude-cloud sshd[869182]: Received disconnect from 172.172.196.177 port 55922:11: Bye Bye [preauth] 2026-07-01T01:44:27.334100-05:00 claude-cloud sshd[869182]: Disconnected from authenticating user root 172.172.196.177 port 55922 [preauth] 2026-07-01T01:44:45.929830-05:00 claude-cloud sshd[869276]: Invalid user mohamad from 2.57.121.112 port 65384 2026-07-01T01:44:45.957125-05:00 claude-cloud sshd[869276]: Connection closed by invalid user mohamad 2.57.121.112 port 65384 [preauth] 2026-07-01T01:44:52.615488-05:00 claude-cloud sshd[869297]: Invalid user deploy from 93.77.187.140 port 45288 2026-07-01T01:44:52.663666-05:00 claude-cloud sshd[869297]: Received disconnect from 93.77.187.140 port 45288:11: Bye Bye [preauth] 2026-07-01T01:44:52.664030-05:00 claude-cloud sshd[869297]: Disconnected from invalid user deploy 93.77.187.140 port 45288 [preauth] 2026-07-01T01:45:01.103336-05:00 claude-cloud CRON[869330]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T01:45:01.113184-05:00 claude-cloud CRON[869330]: pam_unix(cron:session): session closed for user root 2026-07-01T01:45:32.410602-05:00 claude-cloud sshd[869510]: Received disconnect from 103.189.208.13 port 60720:11: Bye Bye [preauth] 2026-07-01T01:45:32.411037-05:00 claude-cloud sshd[869510]: Disconnected from authenticating user root 103.189.208.13 port 60720 [preauth] 2026-07-01T01:45:45.057386-05:00 claude-cloud sshd[869626]: Invalid user solv from 45.148.10.183 port 39280 2026-07-01T01:45:45.070216-05:00 claude-cloud sshd[869626]: Connection closed by invalid user solv 45.148.10.183 port 39280 [preauth] 2026-07-01T01:46:05.236822-05:00 claude-cloud sshd[869780]: Received disconnect from 172.172.196.177 port 57260:11: Bye Bye [preauth] 2026-07-01T01:46:05.237296-05:00 claude-cloud sshd[869780]: Disconnected from authenticating user root 172.172.196.177 port 57260 [preauth] 2026-07-01T01:46:05.595236-05:00 claude-cloud sshd[869778]: Received disconnect from 139.59.36.109 port 35376:11: Bye Bye [preauth] 2026-07-01T01:46:05.595445-05:00 claude-cloud sshd[869778]: Disconnected from authenticating user root 139.59.36.109 port 35376 [preauth] 2026-07-01T01:46:12.090423-05:00 claude-cloud sshd[869248]: Connection closed by 119.96.173.169 port 38196 [preauth] 2026-07-01T01:46:31.169376-05:00 claude-cloud sshd[869930]: Received disconnect from 93.77.187.140 port 49490:11: Bye Bye [preauth] 2026-07-01T01:46:31.170975-05:00 claude-cloud sshd[869930]: Disconnected from authenticating user root 93.77.187.140 port 49490 [preauth] 2026-07-01T01:46:55.870733-05:00 claude-cloud sshd[870265]: Connection closed by 203.121.106.56 port 11576 [preauth] 2026-07-01T01:47:29.732221-05:00 claude-cloud sshd[871135]: Received disconnect from 103.189.208.13 port 34768:11: Bye Bye [preauth] 2026-07-01T01:47:29.732993-05:00 claude-cloud sshd[871135]: Disconnected from authenticating user root 103.189.208.13 port 34768 [preauth] 2026-07-01T01:47:35.890795-05:00 claude-cloud systemd-logind[853]: New session c5419 of user claude. 2026-07-01T01:47:36.369625-05:00 claude-cloud systemd-logind[853]: Session c5419 logged out. Waiting for processes to exit. 2026-07-01T01:47:36.371175-05:00 claude-cloud systemd-logind[853]: Removed session c5419. 2026-07-01T01:47:45.952524-05:00 claude-cloud sshd[871596]: Invalid user admin from 119.96.173.169 port 42860 2026-07-01T01:47:46.176171-05:00 claude-cloud sshd[871596]: Received disconnect from 119.96.173.169 port 42860:11: Bye Bye [preauth] 2026-07-01T01:47:46.176490-05:00 claude-cloud sshd[871596]: Disconnected from invalid user admin 119.96.173.169 port 42860 [preauth] 2026-07-01T01:47:46.308990-05:00 claude-cloud sshd[871641]: Received disconnect from 172.172.196.177 port 51102:11: Bye Bye [preauth] 2026-07-01T01:47:46.311374-05:00 claude-cloud sshd[871641]: Disconnected from authenticating user root 172.172.196.177 port 51102 [preauth] 2026-07-01T01:47:54.481346-05:00 claude-cloud sshd[871898]: Received disconnect from 139.59.36.109 port 44936:11: Bye Bye [preauth] 2026-07-01T01:47:54.482098-05:00 claude-cloud sshd[871898]: Disconnected from authenticating user root 139.59.36.109 port 44936 [preauth] 2026-07-01T01:48:06.733347-05:00 claude-cloud sshd[871978]: Invalid user postgres from 93.77.187.140 port 40696 2026-07-01T01:48:06.785506-05:00 claude-cloud sshd[871978]: Received disconnect from 93.77.187.140 port 40696:11: Bye Bye [preauth] 2026-07-01T01:48:06.786174-05:00 claude-cloud sshd[871978]: Disconnected from invalid user postgres 93.77.187.140 port 40696 [preauth] 2026-07-01T01:48:07.611427-05:00 claude-cloud sshd[871734]: Connection closed by authenticating user root 27.71.230.31 port 57994 [preauth] 2026-07-01T01:48:55.811829-05:00 claude-cloud sshd[872801]: Invalid user solv from 45.148.10.183 port 38522 2026-07-01T01:48:55.825211-05:00 claude-cloud sshd[872801]: Connection closed by invalid user solv 45.148.10.183 port 38522 [preauth] 2026-07-01T01:49:27.768322-05:00 claude-cloud sshd[873091]: Received disconnect from 103.189.208.13 port 42136:11: Bye Bye [preauth] 2026-07-01T01:49:27.770594-05:00 claude-cloud sshd[873091]: Disconnected from authenticating user root 103.189.208.13 port 42136 [preauth] 2026-07-01T01:49:34.304687-05:00 claude-cloud sshd[873187]: Invalid user gitlab-runner from 172.172.196.177 port 36520 2026-07-01T01:49:34.404442-05:00 claude-cloud sshd[873187]: Received disconnect from 172.172.196.177 port 36520:11: Bye Bye [preauth] 2026-07-01T01:49:34.404692-05:00 claude-cloud sshd[873187]: Disconnected from invalid user gitlab-runner 172.172.196.177 port 36520 [preauth] 2026-07-01T01:49:46.016536-05:00 claude-cloud sshd[873249]: Received disconnect from 93.77.187.140 port 49778:11: Bye Bye [preauth] 2026-07-01T01:49:46.016875-05:00 claude-cloud sshd[873249]: Disconnected from authenticating user root 93.77.187.140 port 49778 [preauth] 2026-07-01T01:49:48.445680-05:00 claude-cloud sshd[873258]: Received disconnect from 139.59.36.109 port 34840:11: Bye Bye [preauth] 2026-07-01T01:49:48.446339-05:00 claude-cloud sshd[873258]: Disconnected from authenticating user root 139.59.36.109 port 34840 [preauth] 2026-07-01T01:50:10.648071-05:00 claude-cloud sshd[873316]: Connection closed by authenticating user root 45.198.224.46 port 58420 [preauth] 2026-07-01T01:51:25.935547-05:00 claude-cloud sshd[873735]: Received disconnect from 93.77.187.140 port 39306:11: Bye Bye [preauth] 2026-07-01T01:51:25.936461-05:00 claude-cloud sshd[873735]: Disconnected from authenticating user root 93.77.187.140 port 39306 [preauth] 2026-07-01T01:51:26.861417-05:00 claude-cloud sshd[873739]: Received disconnect from 172.172.196.177 port 55190:11: Bye Bye [preauth] 2026-07-01T01:51:26.862992-05:00 claude-cloud sshd[873739]: Disconnected from authenticating user root 172.172.196.177 port 55190 [preauth] 2026-07-01T01:51:27.326478-05:00 claude-cloud sshd[873738]: Invalid user ftpuser from 103.189.208.13 port 59326 2026-07-01T01:51:27.549374-05:00 claude-cloud sshd[873738]: Received disconnect from 103.189.208.13 port 59326:11: Bye Bye [preauth] 2026-07-01T01:51:27.549610-05:00 claude-cloud sshd[873738]: Disconnected from invalid user ftpuser 103.189.208.13 port 59326 [preauth] 2026-07-01T01:51:54.206529-05:00 claude-cloud sshd[873819]: Received disconnect from 191.101.33.115 port 54880:11: disconnected by user [preauth] 2026-07-01T01:51:54.206894-05:00 claude-cloud sshd[873819]: Disconnected from authenticating user root 191.101.33.115 port 54880 [preauth] 2026-07-01T01:52:02.276006-05:00 claude-cloud sshd[873799]: Connection closed by 139.59.36.109 port 34770 [preauth] 2026-07-01T01:52:07.095390-05:00 claude-cloud sshd[873860]: Invalid user solb from 45.148.10.183 port 46158 2026-07-01T01:52:07.107673-05:00 claude-cloud sshd[873860]: Connection closed by invalid user solb 45.148.10.183 port 46158 [preauth] 2026-07-01T01:52:39.776374-05:00 claude-cloud systemd-logind[853]: New session c5420 of user claude. 2026-07-01T01:52:40.492600-05:00 claude-cloud systemd-logind[853]: Session c5420 logged out. Waiting for processes to exit. 2026-07-01T01:52:40.494160-05:00 claude-cloud systemd-logind[853]: Removed session c5420. 2026-07-01T01:52:46.944993-05:00 claude-cloud sshd[874070]: Connection closed by authenticating user root 193.46.255.86 port 61980 [preauth] 2026-07-01T01:52:58.771970-05:00 claude-cloud sshd[874096]: Received disconnect from 93.77.187.140 port 33166:11: Bye Bye [preauth] 2026-07-01T01:52:58.772900-05:00 claude-cloud sshd[874096]: Disconnected from authenticating user root 93.77.187.140 port 33166 [preauth] 2026-07-01T01:53:18.578714-05:00 claude-cloud sshd[874212]: Invalid user postgres from 103.189.208.13 port 35514 2026-07-01T01:53:18.634265-05:00 claude-cloud sshd[874214]: Invalid user user from 172.172.196.177 port 43078 2026-07-01T01:53:18.737971-05:00 claude-cloud sshd[874214]: Received disconnect from 172.172.196.177 port 43078:11: Bye Bye [preauth] 2026-07-01T01:53:18.738186-05:00 claude-cloud sshd[874214]: Disconnected from invalid user user 172.172.196.177 port 43078 [preauth] 2026-07-01T01:53:18.771425-05:00 claude-cloud sshd[874212]: Received disconnect from 103.189.208.13 port 35514:11: Bye Bye [preauth] 2026-07-01T01:53:18.771734-05:00 claude-cloud sshd[874212]: Disconnected from invalid user postgres 103.189.208.13 port 35514 [preauth] 2026-07-01T01:53:30.599312-05:00 claude-cloud sshd[874269]: Invalid user ftpuser from 139.59.36.109 port 42010 2026-07-01T01:53:30.790987-05:00 claude-cloud sshd[874269]: Received disconnect from 139.59.36.109 port 42010:11: Bye Bye [preauth] 2026-07-01T01:53:30.791322-05:00 claude-cloud sshd[874269]: Disconnected from invalid user ftpuser 139.59.36.109 port 42010 [preauth] 2026-07-01T01:53:52.167370-05:00 claude-cloud sshd[874305]: Connection closed by authenticating user root 27.71.230.31 port 41258 [preauth] 2026-07-01T01:53:56.961705-05:00 claude-cloud sshd[874397]: Connection closed by authenticating user root 206.189.148.149 port 51518 [preauth] 2026-07-01T01:54:26.322800-05:00 claude-cloud sshd[874579]: Invalid user ftpuser from 93.77.187.140 port 43400 2026-07-01T01:54:26.376559-05:00 claude-cloud sshd[874579]: Received disconnect from 93.77.187.140 port 43400:11: Bye Bye [preauth] 2026-07-01T01:54:26.376735-05:00 claude-cloud sshd[874579]: Disconnected from invalid user ftpuser 93.77.187.140 port 43400 [preauth] 2026-07-01T01:55:01.125808-05:00 claude-cloud CRON[874730]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T01:55:01.131909-05:00 claude-cloud CRON[874730]: pam_unix(cron:session): session closed for user root 2026-07-01T01:55:04.333750-05:00 claude-cloud sshd[874743]: Invalid user user from 103.189.208.13 port 41696 2026-07-01T01:55:04.528547-05:00 claude-cloud sshd[874743]: Received disconnect from 103.189.208.13 port 41696:11: Bye Bye [preauth] 2026-07-01T01:55:04.529136-05:00 claude-cloud sshd[874743]: Disconnected from invalid user user 103.189.208.13 port 41696 [preauth] 2026-07-01T01:55:09.469431-05:00 claude-cloud sshd[874761]: Invalid user admin1 from 172.172.196.177 port 58170 2026-07-01T01:55:09.569499-05:00 claude-cloud sshd[874761]: Received disconnect from 172.172.196.177 port 58170:11: Bye Bye [preauth] 2026-07-01T01:55:09.569784-05:00 claude-cloud sshd[874761]: Disconnected from invalid user admin1 172.172.196.177 port 58170 [preauth] 2026-07-01T01:55:11.753810-05:00 claude-cloud sshd[874775]: Invalid user solz from 45.148.10.183 port 60022 2026-07-01T01:55:11.766507-05:00 claude-cloud sshd[874775]: Connection closed by invalid user solz 45.148.10.183 port 60022 [preauth] 2026-07-01T01:55:15.789740-05:00 claude-cloud sshd[874808]: Invalid user ubuntu from 139.59.36.109 port 39150 2026-07-01T01:55:15.983395-05:00 claude-cloud sshd[874808]: Received disconnect from 139.59.36.109 port 39150:11: Bye Bye [preauth] 2026-07-01T01:55:15.983873-05:00 claude-cloud sshd[874808]: Disconnected from invalid user ubuntu 139.59.36.109 port 39150 [preauth] 2026-07-01T01:55:57.830094-05:00 claude-cloud sshd[875616]: Invalid user gitlab-runner from 93.77.187.140 port 58430 2026-07-01T01:55:57.882610-05:00 claude-cloud sshd[875616]: Received disconnect from 93.77.187.140 port 58430:11: Bye Bye [preauth] 2026-07-01T01:55:57.882781-05:00 claude-cloud sshd[875616]: Disconnected from invalid user gitlab-runner 93.77.187.140 port 58430 [preauth] 2026-07-01T01:56:55.859907-05:00 claude-cloud sshd[876778]: Received disconnect from 103.189.208.13 port 47536:11: Bye Bye [preauth] 2026-07-01T01:56:55.860927-05:00 claude-cloud sshd[876778]: Disconnected from authenticating user root 103.189.208.13 port 47536 [preauth] 2026-07-01T01:57:02.178544-05:00 claude-cloud sshd[876898]: Received disconnect from 139.59.36.109 port 58420:11: Bye Bye [preauth] 2026-07-01T01:57:02.178847-05:00 claude-cloud sshd[876898]: Disconnected from authenticating user root 139.59.36.109 port 58420 [preauth] 2026-07-01T01:57:07.170625-05:00 claude-cloud sshd[876999]: Invalid user steam from 172.172.196.177 port 50220 2026-07-01T01:57:07.272157-05:00 claude-cloud sshd[876999]: Received disconnect from 172.172.196.177 port 50220:11: Bye Bye [preauth] 2026-07-01T01:57:07.272728-05:00 claude-cloud sshd[876999]: Disconnected from invalid user steam 172.172.196.177 port 50220 [preauth] 2026-07-01T01:57:32.646502-05:00 claude-cloud sshd[877177]: Invalid user admin1 from 93.77.187.140 port 54684 2026-07-01T01:57:32.696637-05:00 claude-cloud sshd[877177]: Received disconnect from 93.77.187.140 port 54684:11: Bye Bye [preauth] 2026-07-01T01:57:32.696953-05:00 claude-cloud sshd[877177]: Disconnected from invalid user admin1 93.77.187.140 port 54684 [preauth] 2026-07-01T01:57:43.818989-05:00 claude-cloud systemd-logind[853]: New session c5421 of user claude. 2026-07-01T01:57:44.234035-05:00 claude-cloud systemd-logind[853]: Session c5421 logged out. Waiting for processes to exit. 2026-07-01T01:57:44.237436-05:00 claude-cloud systemd-logind[853]: Removed session c5421. 2026-07-01T01:58:16.653169-05:00 claude-cloud sshd[877573]: Invalid user firedancer from 45.148.10.183 port 52048 2026-07-01T01:58:16.666137-05:00 claude-cloud sshd[877573]: Connection closed by invalid user firedancer 45.148.10.183 port 52048 [preauth] 2026-07-01T01:58:45.329513-05:00 claude-cloud sshd[877749]: Invalid user username from 139.59.36.109 port 33694 2026-07-01T01:58:45.542672-05:00 claude-cloud sshd[877749]: Received disconnect from 139.59.36.109 port 33694:11: Bye Bye [preauth] 2026-07-01T01:58:45.542870-05:00 claude-cloud sshd[877749]: Disconnected from invalid user username 139.59.36.109 port 33694 [preauth] 2026-07-01T01:58:53.849071-05:00 claude-cloud sshd[877843]: Received disconnect from 103.189.208.13 port 34056:11: Bye Bye [preauth] 2026-07-01T01:58:53.849915-05:00 claude-cloud sshd[877843]: Disconnected from authenticating user root 103.189.208.13 port 34056 [preauth] 2026-07-01T01:58:59.922789-05:00 claude-cloud sshd[877932]: Invalid user ftpuser from 172.172.196.177 port 50340 2026-07-01T01:59:00.030323-05:00 claude-cloud sshd[877932]: Received disconnect from 172.172.196.177 port 50340:11: Bye Bye [preauth] 2026-07-01T01:59:00.031339-05:00 claude-cloud sshd[877932]: Disconnected from invalid user ftpuser 172.172.196.177 port 50340 [preauth] 2026-07-01T01:59:03.134430-05:00 claude-cloud sshd[877965]: Invalid user steam from 93.77.187.140 port 56298 2026-07-01T01:59:03.188104-05:00 claude-cloud sshd[877965]: Received disconnect from 93.77.187.140 port 56298:11: Bye Bye [preauth] 2026-07-01T01:59:03.188473-05:00 claude-cloud sshd[877965]: Disconnected from invalid user steam 93.77.187.140 port 56298 [preauth] 2026-07-01T01:59:46.044654-05:00 claude-cloud sshd[878309]: Connection closed by authenticating user root 45.198.224.46 port 43244 [preauth] 2026-07-01T02:00:02.613555-05:00 claude-cloud sshd[878278]: Connection closed by authenticating user root 27.71.230.31 port 56186 [preauth] 2026-07-01T02:00:07.636383-05:00 claude-cloud sshd[879210]: Invalid user admin from 2.57.121.25 port 65342 2026-07-01T02:00:07.663404-05:00 claude-cloud sshd[879210]: Connection closed by invalid user admin 2.57.121.25 port 65342 [preauth] 2026-07-01T02:00:25.904208-05:00 claude-cloud sshd[879303]: Received disconnect from 139.59.36.109 port 40678:11: Bye Bye [preauth] 2026-07-01T02:00:25.904757-05:00 claude-cloud sshd[879303]: Disconnected from authenticating user root 139.59.36.109 port 40678 [preauth] 2026-07-01T02:00:37.954210-05:00 claude-cloud sshd[879402]: Invalid user user from 93.77.187.140 port 49694 2026-07-01T02:00:38.021966-05:00 claude-cloud sshd[879402]: Received disconnect from 93.77.187.140 port 49694:11: Bye Bye [preauth] 2026-07-01T02:00:38.022421-05:00 claude-cloud sshd[879402]: Disconnected from invalid user user 93.77.187.140 port 49694 [preauth] 2026-07-01T02:00:47.519616-05:00 claude-cloud sshd[879430]: Received disconnect from 103.189.208.13 port 58280:11: Bye Bye [preauth] 2026-07-01T02:00:47.520509-05:00 claude-cloud sshd[879430]: Disconnected from authenticating user root 103.189.208.13 port 58280 [preauth] 2026-07-01T02:01:19.292379-05:00 claude-cloud sshd[879602]: Connection closed by authenticating user root 45.148.10.183 port 53038 [preauth] 2026-07-01T02:02:16.620073-05:00 claude-cloud sshd[880474]: Received disconnect from 139.59.36.109 port 55222:11: Bye Bye [preauth] 2026-07-01T02:02:16.622193-05:00 claude-cloud sshd[880474]: Disconnected from authenticating user root 139.59.36.109 port 55222 [preauth] 2026-07-01T02:02:17.544208-05:00 claude-cloud sshd[880487]: Received disconnect from 93.77.187.140 port 54064:11: Bye Bye [preauth] 2026-07-01T02:02:17.544977-05:00 claude-cloud sshd[880487]: Disconnected from authenticating user root 93.77.187.140 port 54064 [preauth] 2026-07-01T02:02:47.569666-05:00 claude-cloud systemd-logind[853]: New session c5422 of user claude. 2026-07-01T02:02:48.115219-05:00 claude-cloud systemd-logind[853]: Session c5422 logged out. Waiting for processes to exit. 2026-07-01T02:02:48.117843-05:00 claude-cloud systemd-logind[853]: Removed session c5422. 2026-07-01T02:02:49.618627-05:00 claude-cloud sshd[880658]: Invalid user admin1 from 103.189.208.13 port 56210 2026-07-01T02:02:49.848151-05:00 claude-cloud sshd[880658]: Received disconnect from 103.189.208.13 port 56210:11: Bye Bye [preauth] 2026-07-01T02:02:49.848490-05:00 claude-cloud sshd[880658]: Disconnected from invalid user admin1 103.189.208.13 port 56210 [preauth] 2026-07-01T02:03:54.833966-05:00 claude-cloud sshd[881115]: Invalid user user2 from 93.77.187.140 port 49112 2026-07-01T02:03:54.886619-05:00 claude-cloud sshd[881115]: Received disconnect from 93.77.187.140 port 49112:11: Bye Bye [preauth] 2026-07-01T02:03:54.887035-05:00 claude-cloud sshd[881115]: Disconnected from invalid user user2 93.77.187.140 port 49112 [preauth] 2026-07-01T02:04:10.130631-05:00 claude-cloud sshd[881207]: Invalid user test from 139.59.36.109 port 34570 2026-07-01T02:04:10.335602-05:00 claude-cloud sshd[881207]: Received disconnect from 139.59.36.109 port 34570:11: Bye Bye [preauth] 2026-07-01T02:04:10.336027-05:00 claude-cloud sshd[881207]: Disconnected from invalid user test 139.59.36.109 port 34570 [preauth] 2026-07-01T02:04:28.461930-05:00 claude-cloud sshd[881334]: Connection closed by authenticating user root 45.148.10.183 port 49252 [preauth] 2026-07-01T02:04:50.156904-05:00 claude-cloud sshd[881572]: Invalid user steam from 103.189.208.13 port 45656 2026-07-01T02:04:50.389520-05:00 claude-cloud sshd[881572]: Received disconnect from 103.189.208.13 port 45656:11: Bye Bye [preauth] 2026-07-01T02:04:50.389899-05:00 claude-cloud sshd[881572]: Disconnected from invalid user steam 103.189.208.13 port 45656 [preauth] 2026-07-01T02:05:01.146241-05:00 claude-cloud CRON[881671]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T02:05:01.151175-05:00 claude-cloud CRON[881671]: pam_unix(cron:session): session closed for user root 2026-07-01T02:05:32.157509-05:00 claude-cloud sshd[881910]: Connection closed by authenticating user root 27.71.230.31 port 45478 [preauth] 2026-07-01T02:06:00.027941-05:00 claude-cloud sshd[882154]: Received disconnect from 139.59.36.109 port 39984:11: Bye Bye [preauth] 2026-07-01T02:06:00.028436-05:00 claude-cloud sshd[882154]: Disconnected from authenticating user root 139.59.36.109 port 39984 [preauth] 2026-07-01T02:06:39.269460-05:00 claude-cloud sshd[882360]: Invalid user deploy from 103.189.208.13 port 53256 2026-07-01T02:06:39.466570-05:00 claude-cloud sshd[882360]: Received disconnect from 103.189.208.13 port 53256:11: Bye Bye [preauth] 2026-07-01T02:06:39.466965-05:00 claude-cloud sshd[882360]: Disconnected from invalid user deploy 103.189.208.13 port 53256 [preauth] 2026-07-01T02:07:35.986790-05:00 claude-cloud sshd[882631]: Invalid user shred from 45.148.10.183 port 35832 2026-07-01T02:07:36.000109-05:00 claude-cloud sshd[882631]: Connection closed by invalid user shred 45.148.10.183 port 35832 [preauth] 2026-07-01T02:07:49.130558-05:00 claude-cloud sshd[882669]: Invalid user ec2-user from 139.59.36.109 port 38826 2026-07-01T02:07:49.326175-05:00 claude-cloud sshd[882669]: Received disconnect from 139.59.36.109 port 38826:11: Bye Bye [preauth] 2026-07-01T02:07:49.326742-05:00 claude-cloud sshd[882669]: Disconnected from invalid user ec2-user 139.59.36.109 port 38826 [preauth] 2026-07-01T02:07:51.634668-05:00 claude-cloud systemd-logind[853]: New session c5423 of user claude. 2026-07-01T02:07:51.953375-05:00 claude-cloud systemd-logind[853]: Session c5423 logged out. Waiting for processes to exit. 2026-07-01T02:07:51.954880-05:00 claude-cloud systemd-logind[853]: Removed session c5423. 2026-07-01T02:08:34.913172-05:00 claude-cloud sshd[882797]: Received disconnect from 103.189.208.13 port 49160:11: Bye Bye [preauth] 2026-07-01T02:08:34.914044-05:00 claude-cloud sshd[882797]: Disconnected from authenticating user root 103.189.208.13 port 49160 [preauth] 2026-07-01T02:09:27.808433-05:00 claude-cloud sshd[883029]: Invalid user ubuntu from 45.198.224.46 port 55986 2026-07-01T02:09:28.533401-05:00 claude-cloud sshd[883029]: Connection closed by invalid user ubuntu 45.198.224.46 port 55986 [preauth] 2026-07-01T02:10:50.493046-05:00 claude-cloud sshd[884149]: Invalid user validator from 45.148.10.183 port 54674 2026-07-01T02:10:50.506137-05:00 claude-cloud sshd[884149]: Connection closed by invalid user validator 45.148.10.183 port 54674 [preauth] 2026-07-01T02:11:29.203687-05:00 claude-cloud sshd[884285]: Connection closed by authenticating user root 27.71.230.31 port 39144 [preauth] 2026-07-01T02:11:50.715252-05:00 claude-cloud sshd[884512]: Connection closed by 58.51.132.251 port 36817 2026-07-01T02:11:52.628729-05:00 claude-cloud sshd[884513]: Connection closed by authenticating user root 58.51.132.251 port 36818 [preauth] 2026-07-01T02:12:55.303474-05:00 claude-cloud systemd-logind[853]: New session c5424 of user claude. 2026-07-01T02:12:55.777017-05:00 claude-cloud systemd-logind[853]: Session c5424 logged out. Waiting for processes to exit. 2026-07-01T02:12:55.778606-05:00 claude-cloud systemd-logind[853]: Removed session c5424. 2026-07-01T02:14:01.333191-05:00 claude-cloud sshd[885320]: Invalid user binance from 45.148.10.183 port 50338 2026-07-01T02:14:01.346428-05:00 claude-cloud sshd[885320]: Connection closed by invalid user binance 45.148.10.183 port 50338 [preauth] 2026-07-01T02:15:01.168092-05:00 claude-cloud CRON[885537]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T02:15:01.174721-05:00 claude-cloud CRON[885537]: pam_unix(cron:session): session closed for user root 2026-07-01T02:16:43.499915-05:00 claude-cloud sshd[886263]: Received disconnect from 23.153.216.49 port 28832:11: disconnected by user [preauth] 2026-07-01T02:16:43.503536-05:00 claude-cloud sshd[886263]: Disconnected from authenticating user root 23.153.216.49 port 28832 [preauth] 2026-07-01T02:17:01.189505-05:00 claude-cloud CRON[886439]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T02:17:01.195458-05:00 claude-cloud CRON[886439]: pam_unix(cron:session): session closed for user root 2026-07-01T02:17:20.002774-05:00 claude-cloud sshd[886509]: Connection closed by authenticating user root 27.71.230.31 port 45776 [preauth] 2026-07-01T02:17:38.986846-05:00 claude-cloud sshd[887208]: Invalid user trader from 45.148.10.183 port 40066 2026-07-01T02:17:39.001266-05:00 claude-cloud sshd[887208]: Connection closed by invalid user trader 45.148.10.183 port 40066 [preauth] 2026-07-01T02:17:58.981086-05:00 claude-cloud systemd-logind[853]: New session c5425 of user claude. 2026-07-01T02:17:59.439923-05:00 claude-cloud systemd-logind[853]: Session c5425 logged out. Waiting for processes to exit. 2026-07-01T02:17:59.441096-05:00 claude-cloud systemd-logind[853]: Removed session c5425. 2026-07-01T02:19:08.897149-05:00 claude-cloud sshd[888023]: Connection closed by authenticating user root 45.198.224.46 port 40178 [preauth] 2026-07-01T02:20:43.834939-05:00 claude-cloud sshd[889413]: Invalid user trading from 45.148.10.183 port 37616 2026-07-01T02:20:43.851732-05:00 claude-cloud sshd[889413]: Connection closed by invalid user trading 45.148.10.183 port 37616 [preauth] 2026-07-01T02:23:03.002726-05:00 claude-cloud systemd-logind[853]: New session c5426 of user claude. 2026-07-01T02:23:03.520984-05:00 claude-cloud systemd-logind[853]: Session c5426 logged out. Waiting for processes to exit. 2026-07-01T02:23:03.523533-05:00 claude-cloud systemd-logind[853]: Removed session c5426. 2026-07-01T02:23:15.658360-05:00 claude-cloud sshd[890441]: Connection closed by 120.76.158.232 port 39718 2026-07-01T02:23:35.115591-05:00 claude-cloud sshd[890323]: Connection closed by authenticating user root 27.71.230.31 port 59116 [preauth] 2026-07-01T02:23:47.644886-05:00 claude-cloud sshd[890631]: Invalid user ubuntu from 45.148.10.183 port 39026 2026-07-01T02:23:47.656043-05:00 claude-cloud sshd[890631]: Connection closed by invalid user ubuntu 45.148.10.183 port 39026 [preauth] 2026-07-01T02:25:01.213585-05:00 claude-cloud CRON[891696]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T02:25:01.219760-05:00 claude-cloud CRON[891696]: pam_unix(cron:session): session closed for user root 2026-07-01T02:26:31.261832-05:00 claude-cloud sshd[892225]: Invalid user bitcoin from 45.148.10.183 port 55162 2026-07-01T02:26:31.275743-05:00 claude-cloud sshd[892225]: Connection closed by invalid user bitcoin 45.148.10.183 port 55162 [preauth] 2026-07-01T02:28:06.840052-05:00 claude-cloud systemd-logind[853]: New session c5427 of user claude. 2026-07-01T02:28:07.279927-05:00 claude-cloud systemd-logind[853]: Session c5427 logged out. Waiting for processes to exit. 2026-07-01T02:28:07.282434-05:00 claude-cloud systemd-logind[853]: Removed session c5427. 2026-07-01T02:28:41.760915-05:00 claude-cloud sshd[893672]: Connection closed by authenticating user root 45.198.224.46 port 45342 [preauth] 2026-07-01T02:29:18.377694-05:00 claude-cloud sshd[893863]: Connection closed by authenticating user root 27.71.230.31 port 53418 [preauth] 2026-07-01T02:29:46.002488-05:00 claude-cloud sshd[894120]: Connection closed by 45.148.10.121 port 53942 [preauth] 2026-07-01T02:29:59.336038-05:00 claude-cloud sshd[894164]: Invalid user ethereum from 45.148.10.183 port 38720 2026-07-01T02:29:59.350504-05:00 claude-cloud sshd[894164]: Connection closed by invalid user ethereum 45.148.10.183 port 38720 [preauth] 2026-07-01T02:33:00.018875-05:00 claude-cloud sshd[895312]: Connection closed by authenticating user root 45.148.10.183 port 41222 [preauth] 2026-07-01T02:33:10.606644-05:00 claude-cloud systemd-logind[853]: New session c5428 of user claude. 2026-07-01T02:33:10.967019-05:00 claude-cloud systemd-logind[853]: Session c5428 logged out. Waiting for processes to exit. 2026-07-01T02:33:10.969679-05:00 claude-cloud systemd-logind[853]: Removed session c5428. 2026-07-01T02:35:01.230513-05:00 claude-cloud CRON[896766]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T02:35:01.236871-05:00 claude-cloud CRON[896766]: pam_unix(cron:session): session closed for user root 2026-07-01T02:35:40.128021-05:00 claude-cloud sshd[896901]: Connection closed by authenticating user root 27.71.230.31 port 55192 [preauth] 2026-07-01T02:36:05.266499-05:00 claude-cloud sshd[897232]: Invalid user trader from 45.148.10.183 port 46416 2026-07-01T02:36:05.279857-05:00 claude-cloud sshd[897232]: Connection closed by invalid user trader 45.148.10.183 port 46416 [preauth] 2026-07-01T02:38:13.976887-05:00 claude-cloud systemd-logind[853]: New session c5429 of user claude. 2026-07-01T02:38:14.499398-05:00 claude-cloud systemd-logind[853]: Session c5429 logged out. Waiting for processes to exit. 2026-07-01T02:38:14.502349-05:00 claude-cloud systemd-logind[853]: Removed session c5429. 2026-07-01T02:38:18.529827-05:00 claude-cloud sshd[898194]: Connection closed by authenticating user root 45.198.224.46 port 45100 [preauth] 2026-07-01T02:38:58.941222-05:00 claude-cloud sshd[898892]: Invalid user admin from 193.46.255.86 port 23094 2026-07-01T02:38:58.966025-05:00 claude-cloud sshd[898892]: Connection closed by invalid user admin 193.46.255.86 port 23094 [preauth] 2026-07-01T02:39:09.500704-05:00 claude-cloud sshd[899011]: Invalid user trader from 45.148.10.183 port 52614 2026-07-01T02:39:09.513391-05:00 claude-cloud sshd[899011]: Connection closed by invalid user trader 45.148.10.183 port 52614 [preauth] 2026-07-01T02:42:03.868198-05:00 claude-cloud sshd[900167]: Connection closed by authenticating user root 27.71.230.31 port 57116 [preauth] 2026-07-01T02:42:14.296224-05:00 claude-cloud sshd[900288]: Invalid user trader from 45.148.10.183 port 51362 2026-07-01T02:42:14.309566-05:00 claude-cloud sshd[900288]: Connection closed by invalid user trader 45.148.10.183 port 51362 [preauth] 2026-07-01T02:43:19.657198-05:00 claude-cloud systemd-logind[853]: New session c5430 of user claude. 2026-07-01T02:43:19.986086-05:00 claude-cloud systemd-logind[853]: Session c5430 logged out. Waiting for processes to exit. 2026-07-01T02:43:19.987897-05:00 claude-cloud systemd-logind[853]: Removed session c5430. 2026-07-01T02:45:01.249225-05:00 claude-cloud CRON[900832]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T02:45:01.259504-05:00 claude-cloud CRON[900832]: pam_unix(cron:session): session closed for user root 2026-07-01T02:45:22.988240-05:00 claude-cloud sshd[900890]: Connection closed by authenticating user root 45.148.10.183 port 38302 [preauth] 2026-07-01T02:47:54.848179-05:00 claude-cloud sshd[901310]: Connection closed by authenticating user root 45.198.224.46 port 51022 [preauth] 2026-07-01T02:48:06.300363-05:00 claude-cloud sshd[901308]: Connection closed by authenticating user root 27.71.230.31 port 52566 [preauth] 2026-07-01T02:48:25.737202-05:00 claude-cloud systemd-logind[853]: New session c5431 of user claude. 2026-07-01T02:48:26.032265-05:00 claude-cloud systemd-logind[853]: Session c5431 logged out. Waiting for processes to exit. 2026-07-01T02:48:26.035337-05:00 claude-cloud systemd-logind[853]: Removed session c5431. 2026-07-01T02:48:33.924700-05:00 claude-cloud sshd[901441]: Invalid user exchange from 45.148.10.183 port 36446 2026-07-01T02:48:33.938523-05:00 claude-cloud sshd[901441]: Connection closed by invalid user exchange 45.148.10.183 port 36446 [preauth] 2026-07-01T02:52:20.022608-05:00 claude-cloud sshd[902219]: Invalid user solana from 45.148.10.183 port 40544 2026-07-01T02:52:20.036026-05:00 claude-cloud sshd[902219]: Connection closed by invalid user solana 45.148.10.183 port 40544 [preauth] 2026-07-01T02:52:52.118631-05:00 claude-cloud sshd[902372]: Invalid user admin from 2.57.121.25 port 24308 2026-07-01T02:52:52.143906-05:00 claude-cloud sshd[902372]: Connection closed by invalid user admin 2.57.121.25 port 24308 [preauth] 2026-07-01T02:53:31.539653-05:00 claude-cloud systemd-logind[853]: New session c5432 of user claude. 2026-07-01T02:53:31.828732-05:00 claude-cloud systemd-logind[853]: Session c5432 logged out. Waiting for processes to exit. 2026-07-01T02:53:31.831773-05:00 claude-cloud systemd-logind[853]: Removed session c5432. 2026-07-01T02:54:13.913068-05:00 claude-cloud sshd[902544]: Connection closed by authenticating user root 27.71.230.31 port 33760 [preauth] 2026-07-01T02:55:01.273316-05:00 claude-cloud CRON[902736]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T02:55:01.280207-05:00 claude-cloud CRON[902736]: pam_unix(cron:session): session closed for user root 2026-07-01T02:55:09.142884-05:00 claude-cloud sshd[902756]: Invalid user naseem from 2.57.121.112 port 50044 2026-07-01T02:55:09.169868-05:00 claude-cloud sshd[902756]: Connection closed by invalid user naseem 2.57.121.112 port 50044 [preauth] 2026-07-01T02:55:27.914211-05:00 claude-cloud sshd[902815]: Invalid user sol from 45.148.10.183 port 47016 2026-07-01T02:55:27.927190-05:00 claude-cloud sshd[902815]: Connection closed by invalid user sol 45.148.10.183 port 47016 [preauth] 2026-07-01T02:57:42.265478-05:00 claude-cloud sshd[903203]: Invalid user vmsec from 45.198.224.46 port 57372 2026-07-01T02:57:42.934860-05:00 claude-cloud sshd[903203]: Connection closed by invalid user vmsec 45.198.224.46 port 57372 [preauth] 2026-07-01T02:58:02.715329-05:00 claude-cloud sshd[903330]: Invalid user sol from 45.148.10.183 port 46822 2026-07-01T02:58:02.728665-05:00 claude-cloud sshd[903330]: Connection closed by invalid user sol 45.148.10.183 port 46822 [preauth] 2026-07-01T02:58:36.876400-05:00 claude-cloud systemd-logind[853]: New session c5433 of user claude. 2026-07-01T02:58:37.258179-05:00 claude-cloud systemd-logind[853]: Session c5433 logged out. Waiting for processes to exit. 2026-07-01T02:58:37.259886-05:00 claude-cloud systemd-logind[853]: Removed session c5433. 2026-07-01T03:00:24.425424-05:00 claude-cloud sshd[905784]: Connection closed by authenticating user root 27.71.230.31 port 43418 [preauth] 2026-07-01T03:01:08.397925-05:00 claude-cloud sshd[907391]: Invalid user sol from 45.148.10.183 port 60052 2026-07-01T03:01:08.411855-05:00 claude-cloud sshd[907391]: Connection closed by invalid user sol 45.148.10.183 port 60052 [preauth] 2026-07-01T03:02:10.320160-05:00 claude-cloud sshd[909049]: Invalid user admin from 45.148.10.121 port 60640 2026-07-01T03:02:10.334437-05:00 claude-cloud sshd[909049]: Connection closed by invalid user admin 45.148.10.121 port 60640 [preauth] 2026-07-01T03:02:14.526815-05:00 claude-cloud sshd[909162]: Connection closed by 141.11.88.8 port 46610 2026-07-01T03:02:37.366917-05:00 claude-cloud sshd[909701]: Connection closed by authenticating user root 141.11.88.8 port 27756 [preauth] 2026-07-01T03:03:40.888180-05:00 claude-cloud systemd-logind[853]: New session c5434 of user claude. 2026-07-01T03:03:41.194949-05:00 claude-cloud systemd-logind[853]: Session c5434 logged out. Waiting for processes to exit. 2026-07-01T03:03:41.198189-05:00 claude-cloud systemd-logind[853]: Removed session c5434. 2026-07-01T03:04:19.616462-05:00 claude-cloud sshd[911711]: Invalid user ubuntu from 45.148.10.183 port 51680 2026-07-01T03:04:19.630382-05:00 claude-cloud sshd[911711]: Connection closed by invalid user ubuntu 45.148.10.183 port 51680 [preauth] 2026-07-01T03:05:01.297196-05:00 claude-cloud CRON[912535]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T03:05:01.302121-05:00 claude-cloud CRON[912535]: pam_unix(cron:session): session closed for user root 2026-07-01T03:05:28.970886-05:00 claude-cloud sshd[913003]: Invalid user git from 185.242.3.195 port 56308 2026-07-01T03:05:28.977486-05:00 claude-cloud sshd[913003]: Connection closed by invalid user git 185.242.3.195 port 56308 [preauth] 2026-07-01T03:06:08.871793-05:00 claude-cloud sshd[913180]: Connection closed by authenticating user root 27.71.230.31 port 54948 [preauth] 2026-07-01T03:07:25.546533-05:00 claude-cloud sshd[913760]: Connection closed by authenticating user root 45.198.224.46 port 40040 [preauth] 2026-07-01T03:07:34.005140-05:00 claude-cloud sshd[913803]: Invalid user ubuntu from 45.148.10.183 port 36280 2026-07-01T03:07:34.018690-05:00 claude-cloud sshd[913803]: Connection closed by invalid user ubuntu 45.148.10.183 port 36280 [preauth] 2026-07-01T03:08:44.573866-05:00 claude-cloud systemd-logind[853]: New session c5435 of user claude. 2026-07-01T03:08:44.838682-05:00 claude-cloud systemd-logind[853]: Session c5435 logged out. Waiting for processes to exit. 2026-07-01T03:08:44.840268-05:00 claude-cloud systemd-logind[853]: Removed session c5435. 2026-07-01T03:10:01.310725-05:00 claude-cloud CRON[915335]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T03:10:01.314049-05:00 claude-cloud CRON[915335]: pam_unix(cron:session): session closed for user root 2026-07-01T03:10:50.205816-05:00 claude-cloud sshd[915875]: Invalid user ubuntu from 45.148.10.183 port 45274 2026-07-01T03:10:50.219426-05:00 claude-cloud sshd[915875]: Connection closed by invalid user ubuntu 45.148.10.183 port 45274 [preauth] 2026-07-01T03:11:31.027782-05:00 claude-cloud sshd[916309]: banner exchange: Connection from 65.49.1.152 port 20998: invalid format 2026-07-01T03:12:57.847167-05:00 claude-cloud sshd[916620]: Connection closed by authenticating user root 27.71.230.31 port 34010 [preauth] 2026-07-01T03:13:48.086183-05:00 claude-cloud systemd-logind[853]: New session c5436 of user claude. 2026-07-01T03:13:48.355870-05:00 claude-cloud systemd-logind[853]: Session c5436 logged out. Waiting for processes to exit. 2026-07-01T03:13:48.358106-05:00 claude-cloud systemd-logind[853]: Removed session c5436. 2026-07-01T03:13:58.317685-05:00 claude-cloud sshd[917754]: Invalid user trading from 45.148.10.183 port 44622 2026-07-01T03:13:58.332607-05:00 claude-cloud sshd[917754]: Connection closed by invalid user trading 45.148.10.183 port 44622 [preauth] 2026-07-01T03:14:03.749879-05:00 claude-cloud sshd[917766]: Received disconnect from 212.192.240.126 port 17240:11: disconnected by user [preauth] 2026-07-01T03:14:03.750628-05:00 claude-cloud sshd[917766]: Disconnected from authenticating user root 212.192.240.126 port 17240 [preauth] 2026-07-01T03:15:01.322098-05:00 claude-cloud CRON[918118]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T03:15:01.327010-05:00 claude-cloud CRON[918118]: pam_unix(cron:session): session closed for user root 2026-07-01T03:17:01.340353-05:00 claude-cloud CRON[918464]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T03:17:01.351473-05:00 claude-cloud CRON[918464]: pam_unix(cron:session): session closed for user root 2026-07-01T03:17:02.018757-05:00 claude-cloud sshd[918467]: Invalid user trader from 45.148.10.183 port 46376 2026-07-01T03:17:02.032369-05:00 claude-cloud sshd[918467]: Connection closed by invalid user trader 45.148.10.183 port 46376 [preauth] 2026-07-01T03:17:18.643706-05:00 claude-cloud sshd[918494]: Connection closed by authenticating user root 45.198.224.46 port 46722 [preauth] 2026-07-01T03:18:30.269816-05:00 claude-cloud sshd[918648]: Connection closed by authenticating user root 27.71.230.31 port 43330 [preauth] 2026-07-01T03:18:51.540783-05:00 claude-cloud systemd-logind[853]: New session c5437 of user claude. 2026-07-01T03:18:51.792667-05:00 claude-cloud systemd-logind[853]: Session c5437 logged out. Waiting for processes to exit. 2026-07-01T03:18:51.794535-05:00 claude-cloud systemd-logind[853]: Removed session c5437. 2026-07-01T03:20:06.252328-05:00 claude-cloud sshd[918972]: Invalid user pool from 45.148.10.183 port 46894 2026-07-01T03:20:06.265095-05:00 claude-cloud sshd[918972]: Connection closed by invalid user pool 45.148.10.183 port 46894 [preauth] 2026-07-01T03:20:28.092235-05:00 claude-cloud sshd[919038]: Received disconnect from 198.98.50.7 port 36128:11: disconnected by user [preauth] 2026-07-01T03:20:28.092706-05:00 claude-cloud sshd[919038]: Disconnected from authenticating user root 198.98.50.7 port 36128 [preauth] 2026-07-01T03:21:36.266503-05:00 claude-cloud sshd[919232]: Received disconnect from 198.199.106.159 port 39546:11: disconnected by user [preauth] 2026-07-01T03:21:36.266856-05:00 claude-cloud sshd[919232]: Disconnected from authenticating user root 198.199.106.159 port 39546 [preauth] 2026-07-01T03:23:55.173272-05:00 claude-cloud systemd-logind[853]: New session c5438 of user claude. 2026-07-01T03:23:55.451158-05:00 claude-cloud systemd-logind[853]: Session c5438 logged out. Waiting for processes to exit. 2026-07-01T03:23:55.453756-05:00 claude-cloud systemd-logind[853]: Removed session c5438. 2026-07-01T03:24:42.867116-05:00 claude-cloud sshd[919692]: Connection closed by authenticating user root 27.71.230.31 port 47156 [preauth] 2026-07-01T03:25:01.362513-05:00 claude-cloud CRON[919881]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T03:25:01.370031-05:00 claude-cloud CRON[919881]: pam_unix(cron:session): session closed for user root 2026-07-01T03:25:03.629071-05:00 claude-cloud sshd[919884]: Connection closed by 101.89.148.7 port 44416 2026-07-01T03:25:05.520140-05:00 claude-cloud sshd[919888]: Connection closed by authenticating user root 101.89.148.7 port 44824 [preauth] 2026-07-01T03:25:10.974193-05:00 claude-cloud sshd[919904]: Invalid user admin from 193.46.255.86 port 55806 2026-07-01T03:25:11.000396-05:00 claude-cloud sshd[919904]: Connection closed by invalid user admin 193.46.255.86 port 55806 [preauth] 2026-07-01T03:25:31.276886-05:00 claude-cloud sshd[919971]: Connection closed by 45.148.10.240 port 51786 2026-07-01T03:26:38.800513-05:00 claude-cloud sshd[920148]: banner exchange: Connection from 3.129.187.38 port 24744: invalid format 2026-07-01T03:26:58.250350-05:00 claude-cloud sshd[920213]: Connection closed by authenticating user news 45.198.224.46 port 38118 [preauth] 2026-07-01T03:27:24.346417-05:00 claude-cloud sshd[920298]: Invalid user eth-docker from 45.148.10.240 port 45420 2026-07-01T03:27:24.360540-05:00 claude-cloud sshd[920298]: Connection closed by invalid user eth-docker 45.148.10.240 port 45420 [preauth] 2026-07-01T03:27:29.489897-05:00 claude-cloud sshd[920314]: Connection closed by 3.129.187.38 port 29034 [preauth] 2026-07-01T03:28:58.635198-05:00 claude-cloud systemd-logind[853]: New session c5439 of user claude. 2026-07-01T03:28:58.970449-05:00 claude-cloud systemd-logind[853]: Session c5439 logged out. Waiting for processes to exit. 2026-07-01T03:28:58.972122-05:00 claude-cloud systemd-logind[853]: Removed session c5439. 2026-07-01T03:29:07.085793-05:00 claude-cloud sshd[920595]: Invalid user ethdocker from 45.148.10.240 port 42282 2026-07-01T03:29:07.097745-05:00 claude-cloud sshd[920595]: Connection closed by invalid user ethdocker 45.148.10.240 port 42282 [preauth] 2026-07-01T03:30:41.107254-05:00 claude-cloud sshd[920791]: Connection closed by authenticating user root 27.71.230.31 port 33564 [preauth] 2026-07-01T03:30:54.317979-05:00 claude-cloud sshd[920909]: Invalid user sol from 45.148.10.240 port 34194 2026-07-01T03:30:54.330727-05:00 claude-cloud sshd[920909]: Connection closed by invalid user sol 45.148.10.240 port 34194 [preauth] 2026-07-01T03:32:40.568261-05:00 claude-cloud sshd[921189]: Invalid user sol from 45.148.10.240 port 57780 2026-07-01T03:32:40.580051-05:00 claude-cloud sshd[921189]: Connection closed by invalid user sol 45.148.10.240 port 57780 [preauth] 2026-07-01T03:34:02.075939-05:00 claude-cloud systemd-logind[853]: New session c5440 of user claude. 2026-07-01T03:34:02.393982-05:00 claude-cloud systemd-logind[853]: Session c5440 logged out. Waiting for processes to exit. 2026-07-01T03:34:02.395363-05:00 claude-cloud systemd-logind[853]: Removed session c5440. 2026-07-01T03:34:21.110823-05:00 claude-cloud sshd[921484]: Invalid user sol from 45.148.10.240 port 50784 2026-07-01T03:34:21.123015-05:00 claude-cloud sshd[921484]: Connection closed by invalid user sol 45.148.10.240 port 50784 [preauth] 2026-07-01T03:35:01.382871-05:00 claude-cloud CRON[921673]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T03:35:01.387490-05:00 claude-cloud CRON[921673]: pam_unix(cron:session): session closed for user root 2026-07-01T03:36:30.526488-05:00 claude-cloud sshd[921904]: Connection closed by authenticating user root 45.198.224.46 port 49208 [preauth] 2026-07-01T03:36:40.304227-05:00 claude-cloud sshd[921874]: Connection closed by authenticating user root 27.71.230.31 port 47712 [preauth] 2026-07-01T03:37:41.781271-05:00 claude-cloud sshd[922110]: Connection closed by 195.178.110.232 port 59418 2026-07-01T03:39:05.529379-05:00 claude-cloud systemd-logind[853]: New session c5441 of user claude. 2026-07-01T03:39:05.834449-05:00 claude-cloud systemd-logind[853]: Session c5441 logged out. Waiting for processes to exit. 2026-07-01T03:39:05.836706-05:00 claude-cloud systemd-logind[853]: Removed session c5441. 2026-07-01T03:42:06.943000-05:00 claude-cloud sshd[922870]: Connection closed by authenticating user root 195.178.110.232 port 35224 [preauth] 2026-07-01T03:43:00.787625-05:00 claude-cloud sshd[923039]: Invalid user AdminGPON from 45.148.10.121 port 46714 2026-07-01T03:43:00.800253-05:00 claude-cloud sshd[923039]: Connection closed by invalid user AdminGPON 45.148.10.121 port 46714 [preauth] 2026-07-01T03:43:45.970963-05:00 claude-cloud sshd[923145]: Connection closed by authenticating user root 195.178.110.232 port 38424 [preauth] 2026-07-01T03:44:05.491947-05:00 claude-cloud sshd[922912]: Connection closed by authenticating user root 27.71.230.31 port 49732 [preauth] 2026-07-01T03:44:08.935659-05:00 claude-cloud systemd-logind[853]: New session c5442 of user claude. 2026-07-01T03:44:09.231246-05:00 claude-cloud systemd-logind[853]: Session c5442 logged out. Waiting for processes to exit. 2026-07-01T03:44:09.232801-05:00 claude-cloud systemd-logind[853]: Removed session c5442. 2026-07-01T03:44:34.053330-05:00 claude-cloud sshd[923300]: Invalid user ubuntu from 45.148.10.240 port 47018 2026-07-01T03:44:34.067844-05:00 claude-cloud sshd[923300]: Connection closed by invalid user ubuntu 45.148.10.240 port 47018 [preauth] 2026-07-01T03:45:00.919677-05:00 claude-cloud sshd[923449]: userauth_pubkey: signature algorithm ssh-dss not in PubkeyAcceptedAlgorithms [preauth] 2026-07-01T03:45:01.399067-05:00 claude-cloud CRON[923451]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T03:45:01.406024-05:00 claude-cloud CRON[923451]: pam_unix(cron:session): session closed for user root 2026-07-01T03:45:01.418882-05:00 claude-cloud sshd[923449]: Received disconnect from 107.173.146.37 port 54502:11: disconnected by user [preauth] 2026-07-01T03:45:01.419223-05:00 claude-cloud sshd[923449]: Disconnected from authenticating user root 107.173.146.37 port 54502 [preauth] 2026-07-01T03:45:29.562814-05:00 claude-cloud sshd[923530]: Connection closed by authenticating user root 195.178.110.232 port 41560 [preauth] 2026-07-01T03:45:36.325158-05:00 claude-cloud sshd[923548]: Invalid user admin from 2.57.121.25 port 7278 2026-07-01T03:45:36.351479-05:00 claude-cloud sshd[923548]: Connection closed by invalid user admin 2.57.121.25 port 7278 [preauth] 2026-07-01T03:46:13.084373-05:00 claude-cloud sshd[923635]: Invalid user dell from 45.198.224.46 port 42048 2026-07-01T03:46:13.862037-05:00 claude-cloud sshd[923635]: Connection closed by invalid user dell 45.198.224.46 port 42048 [preauth] 2026-07-01T03:46:18.593312-05:00 claude-cloud sshd[923657]: Invalid user ubuntu from 45.148.10.240 port 58946 2026-07-01T03:46:18.607255-05:00 claude-cloud sshd[923657]: Connection closed by invalid user ubuntu 45.148.10.240 port 58946 [preauth] 2026-07-01T03:47:15.113385-05:00 claude-cloud sshd[923821]: Connection closed by authenticating user root 195.178.110.232 port 44686 [preauth] 2026-07-01T03:47:55.502579-05:00 claude-cloud sshd[923948]: Invalid user ubuntu from 45.148.10.240 port 33082 2026-07-01T03:47:55.516415-05:00 claude-cloud sshd[923948]: Connection closed by invalid user ubuntu 45.148.10.240 port 33082 [preauth] 2026-07-01T03:49:05.896103-05:00 claude-cloud sshd[924378]: Connection closed by authenticating user root 195.178.110.232 port 47798 [preauth] 2026-07-01T03:49:12.875523-05:00 claude-cloud systemd-logind[853]: New session c5443 of user claude. 2026-07-01T03:49:13.159149-05:00 claude-cloud systemd-logind[853]: Session c5443 logged out. Waiting for processes to exit. 2026-07-01T03:49:13.161098-05:00 claude-cloud systemd-logind[853]: Removed session c5443. 2026-07-01T03:49:15.690896-05:00 claude-cloud sshd[924376]: Connection closed by authenticating user root 27.71.230.31 port 58314 [preauth] 2026-07-01T03:49:34.538896-05:00 claude-cloud sshd[925111]: Invalid user ubuntu from 45.148.10.240 port 54870 2026-07-01T03:49:34.551037-05:00 claude-cloud sshd[925111]: Connection closed by invalid user ubuntu 45.148.10.240 port 54870 [preauth] 2026-07-01T03:50:30.399213-05:00 claude-cloud sshd[925512]: Received disconnect from 172.185.24.228 port 43118:11: Bye Bye [preauth] 2026-07-01T03:50:30.399860-05:00 claude-cloud sshd[925512]: Disconnected from authenticating user root 172.185.24.228 port 43118 [preauth] 2026-07-01T03:51:18.367399-05:00 claude-cloud sshd[925788]: Invalid user ubuntu from 45.148.10.240 port 54126 2026-07-01T03:51:18.380609-05:00 claude-cloud sshd[925788]: Connection closed by invalid user ubuntu 45.148.10.240 port 54126 [preauth] 2026-07-01T03:54:16.805120-05:00 claude-cloud systemd-logind[853]: New session c5444 of user claude. 2026-07-01T03:54:17.108819-05:00 claude-cloud systemd-logind[853]: Session c5444 logged out. Waiting for processes to exit. 2026-07-01T03:54:17.110562-05:00 claude-cloud systemd-logind[853]: Removed session c5444. 2026-07-01T03:55:01.418099-05:00 claude-cloud CRON[926662]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T03:55:01.425458-05:00 claude-cloud CRON[926662]: pam_unix(cron:session): session closed for user root 2026-07-01T03:55:43.291962-05:00 claude-cloud sshd[926767]: Invalid user ubuntu from 45.198.224.46 port 56976 2026-07-01T03:55:44.130116-05:00 claude-cloud sshd[926767]: Connection closed by invalid user ubuntu 45.198.224.46 port 56976 [preauth] 2026-07-01T03:56:16.577406-05:00 claude-cloud sshd[926668]: Connection closed by authenticating user root 27.71.230.31 port 37482 [preauth] 2026-07-01T03:59:20.305327-05:00 claude-cloud systemd-logind[853]: New session c5445 of user claude. 2026-07-01T03:59:20.550587-05:00 claude-cloud systemd-logind[853]: Session c5445 logged out. Waiting for processes to exit. 2026-07-01T03:59:20.552513-05:00 claude-cloud systemd-logind[853]: Removed session c5445. 2026-07-01T04:01:22.304519-05:00 claude-cloud sshd[927768]: Connection closed by authenticating user root 27.71.230.31 port 39426 [preauth] 2026-07-01T04:01:35.778319-05:00 claude-cloud sshd[927840]: Invalid user solana from 45.148.10.240 port 37726 2026-07-01T04:01:35.790432-05:00 claude-cloud sshd[927840]: Connection closed by invalid user solana 45.148.10.240 port 37726 [preauth] 2026-07-01T04:03:20.352388-05:00 claude-cloud sshd[928133]: Invalid user postgres from 45.148.10.240 port 59012 2026-07-01T04:03:20.365907-05:00 claude-cloud sshd[928133]: Connection closed by invalid user postgres 45.148.10.240 port 59012 [preauth] 2026-07-01T04:03:31.284921-05:00 claude-cloud sshd[928168]: Received disconnect from 172.185.24.228 port 42934:11: Bye Bye [preauth] 2026-07-01T04:03:31.285781-05:00 claude-cloud sshd[928168]: Disconnected from authenticating user root 172.185.24.228 port 42934 [preauth] 2026-07-01T04:04:08.101634-05:00 claude-cloud sshd[928288]: Received disconnect from 176.65.131.147 port 49752:11: disconnected by user [preauth] 2026-07-01T04:04:08.102165-05:00 claude-cloud sshd[928288]: Disconnected from authenticating user root 176.65.131.147 port 49752 [preauth] 2026-07-01T04:04:24.018649-05:00 claude-cloud systemd-logind[853]: New session c5446 of user claude. 2026-07-01T04:04:24.286905-05:00 claude-cloud systemd-logind[853]: Session c5446 logged out. Waiting for processes to exit. 2026-07-01T04:04:24.288379-05:00 claude-cloud systemd-logind[853]: Removed session c5446. 2026-07-01T04:05:01.436995-05:00 claude-cloud CRON[928441]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T04:05:01.443900-05:00 claude-cloud CRON[928441]: pam_unix(cron:session): session closed for user root 2026-07-01T04:05:06.063447-05:00 claude-cloud sshd[928457]: Connection closed by authenticating user root 45.148.10.240 port 52980 [preauth] 2026-07-01T04:05:20.195033-05:00 claude-cloud sshd[928498]: Invalid user pete from 2.57.121.112 port 22810 2026-07-01T04:05:20.220410-05:00 claude-cloud sshd[928498]: Connection closed by invalid user pete 2.57.121.112 port 22810 [preauth] 2026-07-01T04:05:22.150881-05:00 claude-cloud sshd[928500]: Received disconnect from 172.185.24.228 port 38378:11: Bye Bye [preauth] 2026-07-01T04:05:22.151255-05:00 claude-cloud sshd[928500]: Disconnected from authenticating user root 172.185.24.228 port 38378 [preauth] 2026-07-01T04:05:22.217061-05:00 claude-cloud sshd[928487]: Connection closed by authenticating user root 45.198.224.46 port 59818 [preauth] 2026-07-01T04:06:47.797959-05:00 claude-cloud sshd[928810]: Connection closed by authenticating user root 45.148.10.240 port 45274 [preauth] 2026-07-01T04:07:09.420774-05:00 claude-cloud sshd[928869]: Received disconnect from 172.185.24.228 port 39214:11: Bye Bye [preauth] 2026-07-01T04:07:09.421498-05:00 claude-cloud sshd[928869]: Disconnected from authenticating user root 172.185.24.228 port 39214 [preauth] 2026-07-01T04:07:19.709752-05:00 claude-cloud sshd[928867]: Connection closed by authenticating user root 27.71.230.31 port 34880 [preauth] 2026-07-01T04:08:09.685651-05:00 claude-cloud sshd[929043]: userauth_pubkey: signature algorithm ssh-dss not in PubkeyAcceptedAlgorithms [preauth] 2026-07-01T04:08:10.214016-05:00 claude-cloud sshd[929043]: Received disconnect from 51.79.99.235 port 45296:11: disconnected by user [preauth] 2026-07-01T04:08:10.214549-05:00 claude-cloud sshd[929043]: Disconnected from authenticating user root 51.79.99.235 port 45296 [preauth] 2026-07-01T04:08:31.501025-05:00 claude-cloud sshd[929115]: Connection closed by authenticating user root 45.148.10.240 port 43428 [preauth] 2026-07-01T04:08:57.733047-05:00 claude-cloud sshd[929186]: Received disconnect from 172.185.24.228 port 37776:11: Bye Bye [preauth] 2026-07-01T04:08:57.733459-05:00 claude-cloud sshd[929186]: Disconnected from authenticating user root 172.185.24.228 port 37776 [preauth] 2026-07-01T04:09:27.530897-05:00 claude-cloud systemd-logind[853]: New session c5447 of user claude. 2026-07-01T04:09:27.797712-05:00 claude-cloud systemd-logind[853]: Session c5447 logged out. Waiting for processes to exit. 2026-07-01T04:09:27.799772-05:00 claude-cloud systemd-logind[853]: Removed session c5447. 2026-07-01T04:10:22.874447-05:00 claude-cloud sshd[929441]: Connection closed by authenticating user root 45.148.10.240 port 42804 [preauth] 2026-07-01T04:10:50.762545-05:00 claude-cloud sshd[929520]: Received disconnect from 172.185.24.228 port 45954:11: Bye Bye [preauth] 2026-07-01T04:10:50.763122-05:00 claude-cloud sshd[929520]: Disconnected from authenticating user root 172.185.24.228 port 45954 [preauth] 2026-07-01T04:11:19.860428-05:00 claude-cloud sshd[929599]: Connection closed by authenticating user root 193.46.255.86 port 13136 [preauth] 2026-07-01T04:12:12.890143-05:00 claude-cloud sshd[929760]: Invalid user solana from 45.148.10.240 port 39812 2026-07-01T04:12:12.903245-05:00 claude-cloud sshd[929760]: Connection closed by invalid user solana 45.148.10.240 port 39812 [preauth] 2026-07-01T04:12:46.397266-05:00 claude-cloud sshd[929847]: Received disconnect from 172.185.24.228 port 47222:11: Bye Bye [preauth] 2026-07-01T04:12:46.398089-05:00 claude-cloud sshd[929847]: Disconnected from authenticating user root 172.185.24.228 port 47222 [preauth] 2026-07-01T04:13:15.010000-05:00 claude-cloud sshd[929897]: Connection closed by authenticating user root 27.71.230.31 port 40530 [preauth] 2026-07-01T04:13:55.101792-05:00 claude-cloud sshd[930064]: Invalid user solana from 45.148.10.240 port 40912 2026-07-01T04:13:55.114744-05:00 claude-cloud sshd[930064]: Connection closed by invalid user solana 45.148.10.240 port 40912 [preauth] 2026-07-01T04:14:31.104714-05:00 claude-cloud systemd-logind[853]: New session c5448 of user claude. 2026-07-01T04:14:31.386235-05:00 claude-cloud systemd-logind[853]: Session c5448 logged out. Waiting for processes to exit. 2026-07-01T04:14:31.389121-05:00 claude-cloud systemd-logind[853]: Removed session c5448. 2026-07-01T04:14:46.669527-05:00 claude-cloud sshd[930211]: Received disconnect from 172.185.24.228 port 37046:11: Bye Bye [preauth] 2026-07-01T04:14:46.670177-05:00 claude-cloud sshd[930211]: Disconnected from authenticating user root 172.185.24.228 port 37046 [preauth] 2026-07-01T04:15:01.455196-05:00 claude-cloud CRON[930266]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T04:15:01.460755-05:00 claude-cloud CRON[930266]: pam_unix(cron:session): session closed for user root 2026-07-01T04:15:02.133127-05:00 claude-cloud sshd[930251]: Invalid user ubuntu from 45.198.224.46 port 56444 2026-07-01T04:15:02.785507-05:00 claude-cloud sshd[930251]: Connection closed by invalid user ubuntu 45.198.224.46 port 56444 [preauth] 2026-07-01T04:15:38.802919-05:00 claude-cloud sshd[930373]: Invalid user defi from 45.148.10.240 port 33896 2026-07-01T04:15:38.815755-05:00 claude-cloud sshd[930373]: Connection closed by invalid user defi 45.148.10.240 port 33896 [preauth] 2026-07-01T04:16:48.029605-05:00 claude-cloud sshd[930637]: Received disconnect from 172.185.24.228 port 43426:11: Bye Bye [preauth] 2026-07-01T04:16:48.030400-05:00 claude-cloud sshd[930637]: Disconnected from authenticating user root 172.185.24.228 port 43426 [preauth] 2026-07-01T04:17:01.468659-05:00 claude-cloud CRON[930684]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T04:17:01.474598-05:00 claude-cloud CRON[930684]: pam_unix(cron:session): session closed for user root 2026-07-01T04:17:26.616091-05:00 claude-cloud sshd[930748]: Invalid user geth from 45.148.10.240 port 47812 2026-07-01T04:17:26.628104-05:00 claude-cloud sshd[930748]: Connection closed by invalid user geth 45.148.10.240 port 47812 [preauth] 2026-07-01T04:17:46.681673-05:00 claude-cloud systemd-logind[853]: Session c5400 logged out. Waiting for processes to exit. 2026-07-01T04:17:46.682525-05:00 claude-cloud systemd-logind[853]: Session c5404 logged out. Waiting for processes to exit. 2026-07-01T04:17:46.683805-05:00 claude-cloud systemd-logind[853]: Removed session c5400. 2026-07-01T04:17:46.685470-05:00 claude-cloud systemd-logind[853]: Removed session c5404. 2026-07-01T04:18:01.387559-05:00 claude-cloud systemd-logind[853]: New session c5449 of user claude. 2026-07-01T04:18:01.405172-05:00 claude-cloud systemd-logind[853]: New session c5450 of user claude. 2026-07-01T04:18:01.434364-05:00 claude-cloud systemd-logind[853]: Session c5449 logged out. Waiting for processes to exit. 2026-07-01T04:18:01.435902-05:00 claude-cloud systemd-logind[853]: Removed session c5449. 2026-07-01T04:18:02.382335-05:00 claude-cloud systemd-logind[853]: New session c5451 of user claude. 2026-07-01T04:18:02.436479-05:00 claude-cloud systemd-logind[853]: Session c5451 logged out. Waiting for processes to exit. 2026-07-01T04:18:02.438638-05:00 claude-cloud systemd-logind[853]: Removed session c5451. 2026-07-01T04:18:03.104626-05:00 claude-cloud systemd-logind[853]: New session c5452 of user claude. 2026-07-01T04:18:04.143972-05:00 claude-cloud systemd-logind[853]: Session c5452 logged out. Waiting for processes to exit. 2026-07-01T04:18:04.145439-05:00 claude-cloud systemd-logind[853]: Removed session c5452. 2026-07-01T04:18:06.249297-05:00 claude-cloud systemd-logind[853]: New session c5453 of user claude. 2026-07-01T04:18:06.293652-05:00 claude-cloud systemd-logind[853]: Removed session c5403. 2026-07-01T04:18:06.352025-05:00 claude-cloud systemd-logind[853]: Session c5453 logged out. Waiting for processes to exit. 2026-07-01T04:18:07.077098-05:00 claude-cloud systemd-logind[853]: New session c5454 of user claude. 2026-07-01T04:18:16.861109-05:00 claude-cloud sshd[931235]: Connection closed by authenticating user root 45.148.10.121 port 40860 [preauth] 2026-07-01T04:18:48.248125-05:00 claude-cloud sshd[931327]: Received disconnect from 172.185.24.228 port 41152:11: Bye Bye [preauth] 2026-07-01T04:18:48.248597-05:00 claude-cloud sshd[931327]: Disconnected from authenticating user root 172.185.24.228 port 41152 [preauth] 2026-07-01T04:19:06.231756-05:00 claude-cloud sshd[931392]: Invalid user ethereum from 45.148.10.240 port 41918 2026-07-01T04:19:06.244889-05:00 claude-cloud sshd[931392]: Connection closed by invalid user ethereum 45.148.10.240 port 41918 [preauth] 2026-07-01T04:19:15.280266-05:00 claude-cloud sshd[931371]: Connection closed by authenticating user root 27.71.230.31 port 37154 [preauth] 2026-07-01T04:19:34.747758-05:00 claude-cloud systemd-logind[853]: New session c5455 of user claude. 2026-07-01T04:19:35.096852-05:00 claude-cloud systemd-logind[853]: Session c5455 logged out. Waiting for processes to exit. 2026-07-01T04:19:35.099135-05:00 claude-cloud systemd-logind[853]: Removed session c5455. 2026-07-01T04:20:42.624956-05:00 claude-cloud sshd[931694]: Invalid user eth from 45.148.10.240 port 38116 2026-07-01T04:20:42.637391-05:00 claude-cloud sshd[931694]: Connection closed by invalid user eth 45.148.10.240 port 38116 [preauth] 2026-07-01T04:20:42.833900-05:00 claude-cloud sshd[931692]: Received disconnect from 172.185.24.228 port 53856:11: Bye Bye [preauth] 2026-07-01T04:20:42.834225-05:00 claude-cloud sshd[931692]: Disconnected from authenticating user root 172.185.24.228 port 53856 [preauth] 2026-07-01T04:21:36.449544-05:00 claude-cloud sshd[931854]: Received disconnect from 118.33.113.91 port 36336:11: Bye Bye [preauth] 2026-07-01T04:21:36.450336-05:00 claude-cloud sshd[931854]: Disconnected from authenticating user root 118.33.113.91 port 36336 [preauth] 2026-07-01T04:21:45.285267-05:00 claude-cloud sshd[931877]: Received disconnect from 177.85.247.230 port 45590:11: Bye Bye [preauth] 2026-07-01T04:21:45.288636-05:00 claude-cloud sshd[931877]: Disconnected from authenticating user root 177.85.247.230 port 45590 [preauth] 2026-07-01T04:22:07.252630-05:00 claude-cloud sshd[931944]: Received disconnect from 115.190.154.102 port 58522:11: Bye Bye [preauth] 2026-07-01T04:22:07.253067-05:00 claude-cloud sshd[931944]: Disconnected from authenticating user root 115.190.154.102 port 58522 [preauth] 2026-07-01T04:22:27.648364-05:00 claude-cloud sshd[932004]: Invalid user eth-docker from 45.148.10.240 port 56740 2026-07-01T04:22:27.660490-05:00 claude-cloud sshd[932004]: Connection closed by invalid user eth-docker 45.148.10.240 port 56740 [preauth] 2026-07-01T04:22:42.892563-05:00 claude-cloud sshd[932044]: Received disconnect from 172.185.24.228 port 39598:11: Bye Bye [preauth] 2026-07-01T04:22:42.893128-05:00 claude-cloud sshd[932044]: Disconnected from authenticating user root 172.185.24.228 port 39598 [preauth] 2026-07-01T04:24:17.804781-05:00 claude-cloud sshd[932316]: Invalid user eth from 45.148.10.240 port 49726 2026-07-01T04:24:17.817436-05:00 claude-cloud sshd[932316]: Connection closed by invalid user eth 45.148.10.240 port 49726 [preauth] 2026-07-01T04:24:38.362399-05:00 claude-cloud sshd[932378]: Received disconnect from 172.185.24.228 port 42188:11: Bye Bye [preauth] 2026-07-01T04:24:38.362889-05:00 claude-cloud sshd[932378]: Disconnected from authenticating user root 172.185.24.228 port 42188 [preauth] 2026-07-01T04:24:38.396582-05:00 claude-cloud systemd-logind[853]: New session c5456 of user claude. 2026-07-01T04:24:38.770173-05:00 claude-cloud systemd-logind[853]: Session c5456 logged out. Waiting for processes to exit. 2026-07-01T04:24:38.771637-05:00 claude-cloud systemd-logind[853]: Removed session c5456. 2026-07-01T04:24:39.804236-05:00 claude-cloud sshd[932369]: Invalid user ubuntu from 45.198.224.46 port 33562 2026-07-01T04:24:40.494584-05:00 claude-cloud sshd[932369]: Connection closed by invalid user ubuntu 45.198.224.46 port 33562 [preauth] 2026-07-01T04:25:01.487036-05:00 claude-cloud CRON[932462]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T04:25:01.494395-05:00 claude-cloud CRON[932462]: pam_unix(cron:session): session closed for user root 2026-07-01T04:25:27.748682-05:00 claude-cloud sshd[932460]: Connection closed by authenticating user root 27.71.230.31 port 32922 [preauth] 2026-07-01T04:26:04.619150-05:00 claude-cloud sshd[932649]: Invalid user eth from 45.148.10.240 port 55046 2026-07-01T04:26:04.632099-05:00 claude-cloud sshd[932649]: Connection closed by invalid user eth 45.148.10.240 port 55046 [preauth] 2026-07-01T04:26:31.638213-05:00 claude-cloud sshd[932715]: Received disconnect from 172.185.24.228 port 37852:11: Bye Bye [preauth] 2026-07-01T04:26:31.638728-05:00 claude-cloud sshd[932715]: Disconnected from authenticating user root 172.185.24.228 port 37852 [preauth] 2026-07-01T04:27:48.809590-05:00 claude-cloud sshd[932997]: Invalid user sol from 45.148.10.240 port 41872 2026-07-01T04:27:48.823027-05:00 claude-cloud sshd[932997]: Connection closed by invalid user sol 45.148.10.240 port 41872 [preauth] 2026-07-01T04:28:09.206974-05:00 claude-cloud sshd[933057]: Received disconnect from 203.21.120.126 port 55226:11: Bye Bye [preauth] 2026-07-01T04:28:09.207496-05:00 claude-cloud sshd[933057]: Disconnected from authenticating user root 203.21.120.126 port 55226 [preauth] 2026-07-01T04:28:29.885827-05:00 claude-cloud sshd[933117]: Received disconnect from 172.185.24.228 port 45616:11: Bye Bye [preauth] 2026-07-01T04:28:29.886230-05:00 claude-cloud sshd[933117]: Disconnected from authenticating user root 172.185.24.228 port 45616 [preauth] 2026-07-01T04:29:36.488878-05:00 claude-cloud sshd[933329]: Connection closed by authenticating user claude 45.148.10.240 port 36914 [preauth] 2026-07-01T04:29:42.068354-05:00 claude-cloud systemd-logind[853]: New session c5457 of user claude. 2026-07-01T04:29:42.357265-05:00 claude-cloud systemd-logind[853]: Session c5457 logged out. Waiting for processes to exit. 2026-07-01T04:29:42.359743-05:00 claude-cloud systemd-logind[853]: Removed session c5457. 2026-07-01T04:31:09.756445-05:00 claude-cloud sshd[933576]: Connection closed by authenticating user root 27.71.230.31 port 49162 [preauth] 2026-07-01T04:31:19.605607-05:00 claude-cloud sshd[933623]: Invalid user validator from 45.148.10.240 port 46662 2026-07-01T04:31:19.618899-05:00 claude-cloud sshd[933623]: Connection closed by invalid user validator 45.148.10.240 port 46662 [preauth] 2026-07-01T04:32:36.664447-05:00 claude-cloud sshd[933683]: Connection closed by authenticating user root 117.176.220.76 port 33636 [preauth] 2026-07-01T04:32:38.208249-05:00 claude-cloud sshd[933838]: Connection closed by authenticating user root 117.176.220.76 port 34348 [preauth] 2026-07-01T04:32:39.949099-05:00 claude-cloud sshd[933847]: Connection closed by authenticating user root 117.176.220.76 port 35506 [preauth] 2026-07-01T04:32:41.627997-05:00 claude-cloud sshd[933849]: Connection closed by authenticating user root 117.176.220.76 port 36724 [preauth] 2026-07-01T04:32:43.399092-05:00 claude-cloud sshd[933857]: Connection closed by authenticating user root 117.176.220.76 port 38038 [preauth] 2026-07-01T04:32:45.112591-05:00 claude-cloud sshd[933881]: Connection closed by authenticating user root 117.176.220.76 port 39454 [preauth] 2026-07-01T04:32:46.776413-05:00 claude-cloud sshd[933886]: Connection closed by authenticating user root 117.176.220.76 port 40778 [preauth] 2026-07-01T04:32:48.342100-05:00 claude-cloud sshd[933888]: Connection closed by authenticating user root 117.176.220.76 port 42188 [preauth] 2026-07-01T04:32:49.842099-05:00 claude-cloud sshd[933900]: Connection closed by authenticating user root 117.176.220.76 port 43472 [preauth] 2026-07-01T04:32:51.494916-05:00 claude-cloud sshd[933904]: Connection closed by authenticating user root 117.176.220.76 port 44594 [preauth] 2026-07-01T04:32:53.162533-05:00 claude-cloud sshd[933906]: Connection closed by authenticating user root 117.176.220.76 port 45914 [preauth] 2026-07-01T04:32:54.654183-05:00 claude-cloud sshd[933918]: Connection closed by authenticating user root 117.176.220.76 port 47528 [preauth] 2026-07-01T04:32:56.179218-05:00 claude-cloud sshd[933931]: Invalid user node from 45.148.10.240 port 54434 2026-07-01T04:32:56.192322-05:00 claude-cloud sshd[933931]: Connection closed by invalid user node 45.148.10.240 port 54434 [preauth] 2026-07-01T04:32:56.202931-05:00 claude-cloud sshd[933929]: Connection closed by authenticating user root 117.176.220.76 port 48832 [preauth] 2026-07-01T04:32:57.914430-05:00 claude-cloud sshd[933933]: Connection closed by authenticating user root 117.176.220.76 port 50118 [preauth] 2026-07-01T04:32:59.448521-05:00 claude-cloud sshd[933944]: Connection closed by authenticating user root 117.176.220.76 port 51624 [preauth] 2026-07-01T04:33:01.316233-05:00 claude-cloud sshd[933948]: Connection closed by authenticating user root 117.176.220.76 port 53022 [preauth] 2026-07-01T04:33:03.820728-05:00 claude-cloud sshd[933957]: Connection closed by authenticating user root 117.176.220.76 port 54370 [preauth] 2026-07-01T04:33:05.640205-05:00 claude-cloud sshd[933959]: Connection closed by authenticating user root 117.176.220.76 port 56586 [preauth] 2026-07-01T04:33:07.228757-05:00 claude-cloud sshd[933967]: Connection closed by authenticating user root 117.176.220.76 port 58136 [preauth] 2026-07-01T04:33:08.914380-05:00 claude-cloud sshd[933972]: Connection closed by authenticating user root 117.176.220.76 port 59518 [preauth] 2026-07-01T04:33:10.659893-05:00 claude-cloud sshd[933981]: Connection closed by authenticating user root 117.176.220.76 port 60886 [preauth] 2026-07-01T04:33:13.383520-05:00 claude-cloud sshd[933989]: Connection closed by authenticating user root 117.176.220.76 port 34136 [preauth] 2026-07-01T04:33:14.969686-05:00 claude-cloud sshd[933999]: Connection closed by authenticating user root 117.176.220.76 port 36452 [preauth] 2026-07-01T04:33:16.643945-05:00 claude-cloud sshd[934001]: Connection closed by authenticating user root 117.176.220.76 port 37776 [preauth] 2026-07-01T04:33:18.196211-05:00 claude-cloud sshd[934006]: Connection closed by authenticating user root 117.176.220.76 port 39216 [preauth] 2026-07-01T04:33:22.942764-05:00 claude-cloud sshd[934021]: Connection closed by authenticating user root 117.176.220.76 port 40642 [preauth] 2026-07-01T04:33:24.669123-05:00 claude-cloud sshd[934033]: Connection closed by authenticating user root 117.176.220.76 port 44478 [preauth] 2026-07-01T04:34:04.048345-05:00 claude-cloud sshd[934137]: Received disconnect from 177.85.247.230 port 44542:11: Bye Bye [preauth] 2026-07-01T04:34:04.048890-05:00 claude-cloud sshd[934137]: Disconnected from authenticating user root 177.85.247.230 port 44542 [preauth] 2026-07-01T04:34:19.295253-05:00 claude-cloud sshd[934176]: Connection closed by authenticating user root 45.198.224.46 port 42764 [preauth] 2026-07-01T04:34:37.668207-05:00 claude-cloud sshd[934240]: Invalid user operator from 45.148.10.240 port 56690 2026-07-01T04:34:37.681592-05:00 claude-cloud sshd[934240]: Connection closed by invalid user operator 45.148.10.240 port 56690 [preauth] 2026-07-01T04:34:45.634987-05:00 claude-cloud systemd-logind[853]: New session c5458 of user claude. 2026-07-01T04:34:45.907315-05:00 claude-cloud systemd-logind[853]: Session c5458 logged out. Waiting for processes to exit. 2026-07-01T04:34:45.909740-05:00 claude-cloud systemd-logind[853]: Removed session c5458. 2026-07-01T04:35:01.505869-05:00 claude-cloud CRON[934332]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T04:35:01.513326-05:00 claude-cloud CRON[934332]: pam_unix(cron:session): session closed for user root 2026-07-01T04:35:07.206188-05:00 claude-cloud sshd[934345]: Received disconnect from 118.33.113.91 port 43148:11: Bye Bye [preauth] 2026-07-01T04:35:07.206667-05:00 claude-cloud sshd[934345]: Disconnected from authenticating user root 118.33.113.91 port 43148 [preauth] 2026-07-01T04:35:08.794683-05:00 claude-cloud sshd[934353]: Received disconnect from 203.21.120.126 port 42328:11: Bye Bye [preauth] 2026-07-01T04:35:08.795165-05:00 claude-cloud sshd[934353]: Disconnected from authenticating user root 203.21.120.126 port 42328 [preauth] 2026-07-01T04:36:27.094442-05:00 claude-cloud sshd[934572]: Invalid user trader from 45.148.10.240 port 55906 2026-07-01T04:36:27.106349-05:00 claude-cloud sshd[934572]: Connection closed by invalid user trader 45.148.10.240 port 55906 [preauth] 2026-07-01T04:36:29.888215-05:00 claude-cloud sshd[934576]: Received disconnect from 177.85.247.230 port 11430:11: Bye Bye [preauth] 2026-07-01T04:36:29.888578-05:00 claude-cloud sshd[934576]: Disconnected from authenticating user root 177.85.247.230 port 11430 [preauth] 2026-07-01T04:36:54.264986-05:00 claude-cloud sshd[934701]: banner exchange: Connection from 8.134.157.132 port 34786: invalid format 2026-07-01T04:36:58.929200-05:00 claude-cloud sshd[934732]: Received disconnect from 203.21.120.126 port 45742:11: Bye Bye [preauth] 2026-07-01T04:36:58.929803-05:00 claude-cloud sshd[934732]: Disconnected from authenticating user root 203.21.120.126 port 45742 [preauth] 2026-07-01T04:37:06.842314-05:00 claude-cloud sshd[934746]: Received disconnect from 118.33.113.91 port 59882:11: Bye Bye [preauth] 2026-07-01T04:37:06.842778-05:00 claude-cloud sshd[934746]: Disconnected from authenticating user root 118.33.113.91 port 59882 [preauth] 2026-07-01T04:37:36.966379-05:00 claude-cloud sshd[934845]: Connection closed by authenticating user root 185.242.3.195 port 59862 [preauth] 2026-07-01T04:37:37.576760-05:00 claude-cloud sshd[934769]: Connection closed by authenticating user root 27.71.230.31 port 54622 [preauth] 2026-07-01T04:38:14.526705-05:00 claude-cloud sshd[934944]: Invalid user trading from 45.148.10.240 port 56162 2026-07-01T04:38:14.538644-05:00 claude-cloud sshd[934944]: Connection closed by invalid user trading 45.148.10.240 port 56162 [preauth] 2026-07-01T04:38:14.585073-05:00 claude-cloud sshd[934945]: Invalid user admin from 2.57.121.25 port 35880 2026-07-01T04:38:14.609968-05:00 claude-cloud sshd[934945]: Connection closed by invalid user admin 2.57.121.25 port 35880 [preauth] 2026-07-01T04:38:45.112489-05:00 claude-cloud sshd[935048]: Received disconnect from 203.21.120.126 port 54240:11: Bye Bye [preauth] 2026-07-01T04:38:45.112971-05:00 claude-cloud sshd[935048]: Disconnected from authenticating user root 203.21.120.126 port 54240 [preauth] 2026-07-01T04:38:53.099255-05:00 claude-cloud sshd[935072]: Received disconnect from 177.85.247.230 port 29096:11: Bye Bye [preauth] 2026-07-01T04:38:53.100003-05:00 claude-cloud sshd[935072]: Disconnected from authenticating user root 177.85.247.230 port 29096 [preauth] 2026-07-01T04:39:05.303181-05:00 claude-cloud sshd[935104]: Received disconnect from 118.33.113.91 port 58004:11: Bye Bye [preauth] 2026-07-01T04:39:05.304072-05:00 claude-cloud sshd[935104]: Disconnected from authenticating user root 118.33.113.91 port 58004 [preauth] 2026-07-01T04:39:49.029317-05:00 claude-cloud systemd-logind[853]: New session c5459 of user claude. 2026-07-01T04:39:49.367597-05:00 claude-cloud systemd-logind[853]: Session c5459 logged out. Waiting for processes to exit. 2026-07-01T04:39:49.369156-05:00 claude-cloud systemd-logind[853]: Removed session c5459. 2026-07-01T04:39:56.084818-05:00 claude-cloud sshd[935255]: Received disconnect from 115.190.154.102 port 57658:11: Bye Bye [preauth] 2026-07-01T04:39:56.085209-05:00 claude-cloud sshd[935255]: Disconnected from authenticating user root 115.190.154.102 port 57658 [preauth] 2026-07-01T04:40:00.206578-05:00 claude-cloud sshd[935277]: Invalid user trader from 45.148.10.240 port 43784 2026-07-01T04:40:00.219542-05:00 claude-cloud sshd[935277]: Connection closed by invalid user trader 45.148.10.240 port 43784 [preauth] 2026-07-01T04:40:31.046569-05:00 claude-cloud sshd[935365]: Received disconnect from 203.21.120.126 port 57750:11: Bye Bye [preauth] 2026-07-01T04:40:31.046878-05:00 claude-cloud sshd[935365]: Disconnected from authenticating user root 203.21.120.126 port 57750 [preauth] 2026-07-01T04:41:01.879362-05:00 claude-cloud sshd[935436]: Received disconnect from 115.190.154.102 port 54758:11: Bye Bye [preauth] 2026-07-01T04:41:01.879707-05:00 claude-cloud sshd[935436]: Disconnected from authenticating user root 115.190.154.102 port 54758 [preauth] 2026-07-01T04:41:05.089382-05:00 claude-cloud sshd[935476]: Received disconnect from 118.33.113.91 port 35274:11: Bye Bye [preauth] 2026-07-01T04:41:05.089607-05:00 claude-cloud sshd[935476]: Disconnected from authenticating user root 118.33.113.91 port 35274 [preauth] 2026-07-01T04:41:11.863084-05:00 claude-cloud sshd[935494]: Received disconnect from 177.85.247.230 port 27628:11: Bye Bye [preauth] 2026-07-01T04:41:11.863500-05:00 claude-cloud sshd[935494]: Disconnected from authenticating user root 177.85.247.230 port 27628 [preauth] 2026-07-01T04:41:49.443255-05:00 claude-cloud sshd[935603]: Invalid user trader from 45.148.10.240 port 58936 2026-07-01T04:41:49.456345-05:00 claude-cloud sshd[935603]: Connection closed by invalid user trader 45.148.10.240 port 58936 [preauth] 2026-07-01T04:42:21.134142-05:00 claude-cloud sshd[935691]: Received disconnect from 203.21.120.126 port 56096:11: Bye Bye [preauth] 2026-07-01T04:42:21.134572-05:00 claude-cloud sshd[935691]: Disconnected from authenticating user root 203.21.120.126 port 56096 [preauth] 2026-07-01T04:43:09.725941-05:00 claude-cloud sshd[935835]: Received disconnect from 118.33.113.91 port 60870:11: Bye Bye [preauth] 2026-07-01T04:43:09.726501-05:00 claude-cloud sshd[935835]: Disconnected from authenticating user root 118.33.113.91 port 60870 [preauth] 2026-07-01T04:43:27.529684-05:00 claude-cloud sshd[935843]: Connection closed by authenticating user root 27.71.230.31 port 35562 [preauth] 2026-07-01T04:43:33.326724-05:00 claude-cloud sshd[935905]: Received disconnect from 177.85.247.230 port 40310:11: Bye Bye [preauth] 2026-07-01T04:43:33.327004-05:00 claude-cloud sshd[935905]: Disconnected from authenticating user root 177.85.247.230 port 40310 [preauth] 2026-07-01T04:43:35.127187-05:00 claude-cloud sshd[935918]: Invalid user trader from 45.148.10.240 port 58734 2026-07-01T04:43:35.143912-05:00 claude-cloud sshd[935918]: Connection closed by invalid user trader 45.148.10.240 port 58734 [preauth] 2026-07-01T04:44:04.597416-05:00 claude-cloud sshd[935994]: Received disconnect from 203.21.120.126 port 37430:11: Bye Bye [preauth] 2026-07-01T04:44:04.597904-05:00 claude-cloud sshd[935994]: Disconnected from authenticating user root 203.21.120.126 port 37430 [preauth] 2026-07-01T04:44:05.271408-05:00 claude-cloud sshd[935992]: Invalid user ubuntu from 45.198.224.46 port 33468 2026-07-01T04:44:06.132900-05:00 claude-cloud sshd[935992]: Connection closed by invalid user ubuntu 45.198.224.46 port 33468 [preauth] 2026-07-01T04:44:52.719860-05:00 claude-cloud systemd-logind[853]: New session c5460 of user claude. 2026-07-01T04:44:52.988833-05:00 claude-cloud systemd-logind[853]: Session c5460 logged out. Waiting for processes to exit. 2026-07-01T04:44:52.991712-05:00 claude-cloud systemd-logind[853]: Removed session c5460. 2026-07-01T04:45:01.528066-05:00 claude-cloud CRON[936186]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T04:45:01.535764-05:00 claude-cloud CRON[936186]: pam_unix(cron:session): session closed for user root 2026-07-01T04:45:11.460532-05:00 claude-cloud sshd[936211]: Received disconnect from 118.33.113.91 port 34946:11: Bye Bye [preauth] 2026-07-01T04:45:11.461037-05:00 claude-cloud sshd[936211]: Disconnected from authenticating user root 118.33.113.91 port 34946 [preauth] 2026-07-01T04:45:11.529520-05:00 claude-cloud sshd[936220]: Invalid user trading from 45.148.10.240 port 47848 2026-07-01T04:45:11.541997-05:00 claude-cloud sshd[936220]: Connection closed by invalid user trading 45.148.10.240 port 47848 [preauth] 2026-07-01T04:45:46.149630-05:00 claude-cloud sshd[936306]: Received disconnect from 203.21.120.126 port 54614:11: Bye Bye [preauth] 2026-07-01T04:45:46.150149-05:00 claude-cloud sshd[936306]: Disconnected from authenticating user root 203.21.120.126 port 54614 [preauth] 2026-07-01T04:45:47.898899-05:00 claude-cloud sshd[936318]: Received disconnect from 177.85.247.230 port 64176:11: Bye Bye [preauth] 2026-07-01T04:45:47.899568-05:00 claude-cloud sshd[936318]: Disconnected from authenticating user root 177.85.247.230 port 64176 [preauth] 2026-07-01T04:46:04.906937-05:00 claude-cloud sshd[936365]: userauth_pubkey: signature algorithm ssh-dss not in PubkeyAcceptedAlgorithms [preauth] 2026-07-01T04:46:04.984733-05:00 claude-cloud sshd[936365]: Received disconnect from 45.148.146.52 port 40992:11: disconnected by user [preauth] 2026-07-01T04:46:04.984907-05:00 claude-cloud sshd[936365]: Disconnected from authenticating user root 45.148.146.52 port 40992 [preauth] 2026-07-01T04:46:28.539641-05:00 claude-cloud sshd[936284]: Connection closed by 115.190.154.102 port 53314 [preauth] 2026-07-01T04:46:50.376607-05:00 claude-cloud sshd[936558]: Connection closed by authenticating user root 45.148.10.240 port 40004 [preauth] 2026-07-01T04:47:15.215124-05:00 claude-cloud sshd[936629]: Received disconnect from 118.33.113.91 port 37830:11: Bye Bye [preauth] 2026-07-01T04:47:15.215722-05:00 claude-cloud sshd[936629]: Disconnected from authenticating user root 118.33.113.91 port 37830 [preauth] 2026-07-01T04:47:28.386468-05:00 claude-cloud sshd[936671]: Received disconnect from 203.21.120.126 port 58602:11: Bye Bye [preauth] 2026-07-01T04:47:28.387098-05:00 claude-cloud sshd[936671]: Disconnected from authenticating user root 203.21.120.126 port 58602 [preauth] 2026-07-01T04:48:03.091844-05:00 claude-cloud sshd[936769]: Received disconnect from 177.85.247.230 port 26554:11: Bye Bye [preauth] 2026-07-01T04:48:03.092397-05:00 claude-cloud sshd[936769]: Disconnected from authenticating user root 177.85.247.230 port 26554 [preauth] 2026-07-01T04:48:36.062172-05:00 claude-cloud sshd[936867]: Invalid user shardeum from 45.148.10.240 port 38018 2026-07-01T04:48:36.075872-05:00 claude-cloud sshd[936867]: Connection closed by invalid user shardeum 45.148.10.240 port 38018 [preauth] 2026-07-01T04:49:13.397414-05:00 claude-cloud sshd[936988]: Received disconnect from 203.21.120.126 port 48180:11: Bye Bye [preauth] 2026-07-01T04:49:13.397937-05:00 claude-cloud sshd[936988]: Disconnected from authenticating user root 203.21.120.126 port 48180 [preauth] 2026-07-01T04:49:22.137854-05:00 claude-cloud sshd[937008]: Received disconnect from 118.33.113.91 port 43930:11: Bye Bye [preauth] 2026-07-01T04:49:22.138090-05:00 claude-cloud sshd[937008]: Disconnected from authenticating user root 118.33.113.91 port 43930 [preauth] 2026-07-01T04:49:32.586718-05:00 claude-cloud sshd[936983]: Connection closed by authenticating user root 27.71.230.31 port 58192 [preauth] 2026-07-01T04:49:56.068209-05:00 claude-cloud systemd-logind[853]: New session c5461 of user claude. 2026-07-01T04:49:56.341041-05:00 claude-cloud systemd-logind[853]: Session c5461 logged out. Waiting for processes to exit. 2026-07-01T04:49:56.343162-05:00 claude-cloud systemd-logind[853]: Removed session c5461. 2026-07-01T04:50:21.919781-05:00 claude-cloud sshd[937195]: Connection closed by authenticating user root 45.148.10.240 port 56048 [preauth] 2026-07-01T04:50:22.185717-05:00 claude-cloud sshd[937193]: Received disconnect from 177.85.247.230 port 31942:11: Bye Bye [preauth] 2026-07-01T04:50:22.186133-05:00 claude-cloud sshd[937193]: Disconnected from authenticating user root 177.85.247.230 port 31942 [preauth] 2026-07-01T04:50:55.536163-05:00 claude-cloud sshd[937312]: Received disconnect from 203.21.120.126 port 58734:11: Bye Bye [preauth] 2026-07-01T04:50:55.537364-05:00 claude-cloud sshd[937312]: Disconnected from authenticating user root 203.21.120.126 port 58734 [preauth] 2026-07-01T04:51:24.905150-05:00 claude-cloud sshd[937382]: Received disconnect from 118.33.113.91 port 37084:11: Bye Bye [preauth] 2026-07-01T04:51:24.905908-05:00 claude-cloud sshd[937382]: Disconnected from authenticating user root 118.33.113.91 port 37084 [preauth] 2026-07-01T04:52:04.262457-05:00 claude-cloud sshd[937496]: Invalid user user from 45.148.10.121 port 33390 2026-07-01T04:52:04.275783-05:00 claude-cloud sshd[937496]: Connection closed by invalid user user 45.148.10.121 port 33390 [preauth] 2026-07-01T04:52:08.112797-05:00 claude-cloud sshd[937488]: error: kex_exchange_identification: read: Connection reset by peer 2026-07-01T04:52:08.113183-05:00 claude-cloud sshd[937488]: Connection reset by 2.26.54.134 port 53534 2026-07-01T04:52:09.958404-05:00 claude-cloud sshd[937520]: Connection closed by authenticating user root 45.148.10.240 port 50390 [preauth] 2026-07-01T04:52:39.495668-05:00 claude-cloud sshd[937596]: Received disconnect from 177.85.247.230 port 57224:11: Bye Bye [preauth] 2026-07-01T04:52:39.496044-05:00 claude-cloud sshd[937596]: Disconnected from authenticating user root 177.85.247.230 port 57224 [preauth] 2026-07-01T04:52:40.936171-05:00 claude-cloud sshd[937604]: Received disconnect from 203.21.120.126 port 44572:11: Bye Bye [preauth] 2026-07-01T04:52:40.936728-05:00 claude-cloud sshd[937604]: Disconnected from authenticating user root 203.21.120.126 port 44572 [preauth] 2026-07-01T04:53:12.004700-05:00 claude-cloud sshd[937543]: Connection closed by 115.190.154.102 port 54714 [preauth] 2026-07-01T04:53:29.200268-05:00 claude-cloud sshd[937753]: Received disconnect from 118.33.113.91 port 39798:11: Bye Bye [preauth] 2026-07-01T04:53:29.200680-05:00 claude-cloud sshd[937753]: Disconnected from authenticating user root 118.33.113.91 port 39798 [preauth] 2026-07-01T04:53:36.651837-05:00 claude-cloud sshd[937766]: Connection closed by authenticating user root 45.198.224.46 port 45240 [preauth] 2026-07-01T04:54:04.317573-05:00 claude-cloud sshd[937849]: Connection closed by authenticating user root 45.148.10.240 port 59982 [preauth] 2026-07-01T04:54:29.413931-05:00 claude-cloud sshd[937926]: Received disconnect from 203.21.120.126 port 56054:11: Bye Bye [preauth] 2026-07-01T04:54:29.414772-05:00 claude-cloud sshd[937926]: Disconnected from authenticating user root 203.21.120.126 port 56054 [preauth] 2026-07-01T04:54:59.202997-05:00 claude-cloud sshd[938024]: Received disconnect from 177.85.247.230 port 62362:11: Bye Bye [preauth] 2026-07-01T04:54:59.203411-05:00 claude-cloud sshd[938024]: Disconnected from authenticating user root 177.85.247.230 port 62362 [preauth] 2026-07-01T04:54:59.606788-05:00 claude-cloud systemd-logind[853]: New session c5462 of user claude. 2026-07-01T04:54:59.866207-05:00 claude-cloud systemd-logind[853]: Session c5462 logged out. Waiting for processes to exit. 2026-07-01T04:54:59.867823-05:00 claude-cloud systemd-logind[853]: Removed session c5462. 2026-07-01T04:55:01.549598-05:00 claude-cloud CRON[938038]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T04:55:01.557089-05:00 claude-cloud CRON[938038]: pam_unix(cron:session): session closed for user root 2026-07-01T04:55:22.831670-05:00 claude-cloud sshd[938070]: Connection closed by authenticating user root 27.71.230.31 port 45276 [preauth] 2026-07-01T04:55:23.838675-05:00 claude-cloud sshd[938105]: Connection closed by 2.57.122.238 port 33152 2026-07-01T04:55:35.863329-05:00 claude-cloud sshd[938142]: Received disconnect from 118.33.113.91 port 60890:11: Bye Bye [preauth] 2026-07-01T04:55:35.863528-05:00 claude-cloud sshd[938142]: Disconnected from authenticating user root 118.33.113.91 port 60890 [preauth] 2026-07-01T04:55:59.734182-05:00 claude-cloud sshd[938214]: Invalid user firedancer from 45.148.10.240 port 46482 2026-07-01T04:55:59.747019-05:00 claude-cloud sshd[938214]: Connection closed by invalid user firedancer 45.148.10.240 port 46482 [preauth] 2026-07-01T04:56:18.052630-05:00 claude-cloud sshd[938261]: Received disconnect from 203.21.120.126 port 47788:11: Bye Bye [preauth] 2026-07-01T04:56:18.053481-05:00 claude-cloud sshd[938261]: Disconnected from authenticating user root 203.21.120.126 port 47788 [preauth] 2026-07-01T04:57:17.448496-05:00 claude-cloud sshd[938444]: Received disconnect from 177.85.247.230 port 54008:11: Bye Bye [preauth] 2026-07-01T04:57:17.449069-05:00 claude-cloud sshd[938444]: Disconnected from authenticating user root 177.85.247.230 port 54008 [preauth] 2026-07-01T04:57:20.323198-05:00 claude-cloud sshd[938453]: Invalid user user from 193.46.255.86 port 4678 2026-07-01T04:57:20.350026-05:00 claude-cloud sshd[938453]: Connection closed by invalid user user 193.46.255.86 port 4678 [preauth] 2026-07-01T04:57:25.162802-05:00 claude-cloud sshd[938470]: Connection closed by 101.96.225.252 port 48496 2026-07-01T04:57:39.366418-05:00 claude-cloud sshd[938502]: Received disconnect from 118.33.113.91 port 47556:11: Bye Bye [preauth] 2026-07-01T04:57:39.367162-05:00 claude-cloud sshd[938502]: Disconnected from authenticating user root 118.33.113.91 port 47556 [preauth] 2026-07-01T04:57:43.108813-05:00 claude-cloud sshd[938517]: Invalid user blockchain from 45.148.10.240 port 55926 2026-07-01T04:57:43.121482-05:00 claude-cloud sshd[938517]: Connection closed by invalid user blockchain 45.148.10.240 port 55926 [preauth] 2026-07-01T04:58:01.411318-05:00 claude-cloud sshd[938641]: Received disconnect from 203.21.120.126 port 32830:11: Bye Bye [preauth] 2026-07-01T04:58:01.411787-05:00 claude-cloud sshd[938641]: Disconnected from authenticating user root 203.21.120.126 port 32830 [preauth] 2026-07-01T04:59:21.847409-05:00 claude-cloud sshd[938856]: Connection closed by authenticating user www-data 45.148.10.240 port 44646 [preauth] 2026-07-01T04:59:38.896440-05:00 claude-cloud sshd[938907]: Received disconnect from 177.85.247.230 port 22768:11: Bye Bye [preauth] 2026-07-01T04:59:38.896775-05:00 claude-cloud sshd[938907]: Disconnected from authenticating user root 177.85.247.230 port 22768 [preauth] 2026-07-01T04:59:39.351688-05:00 claude-cloud sshd[938905]: Received disconnect from 118.33.113.91 port 44612:11: Bye Bye [preauth] 2026-07-01T04:59:39.351992-05:00 claude-cloud sshd[938905]: Disconnected from authenticating user root 118.33.113.91 port 44612 [preauth] 2026-07-01T05:00:03.338010-05:00 claude-cloud systemd-logind[853]: New session c5463 of user claude. 2026-07-01T05:00:03.742189-05:00 claude-cloud systemd-logind[853]: Session c5463 logged out. Waiting for processes to exit. 2026-07-01T05:00:03.743963-05:00 claude-cloud systemd-logind[853]: Removed session c5463. 2026-07-01T05:01:06.155191-05:00 claude-cloud sshd[939172]: Invalid user user from 45.148.10.240 port 34788 2026-07-01T05:01:06.167409-05:00 claude-cloud sshd[939172]: Connection closed by invalid user user 45.148.10.240 port 34788 [preauth] 2026-07-01T05:01:31.562904-05:00 claude-cloud sshd[939204]: Connection closed by authenticating user root 27.71.230.31 port 43976 [preauth] 2026-07-01T05:01:44.384879-05:00 claude-cloud sshd[939271]: Received disconnect from 118.33.113.91 port 57180:11: Bye Bye [preauth] 2026-07-01T05:01:44.388087-05:00 claude-cloud sshd[939271]: Disconnected from authenticating user root 118.33.113.91 port 57180 [preauth] 2026-07-01T05:02:00.836519-05:00 claude-cloud sshd[939340]: Received disconnect from 177.85.247.230 port 4240:11: Bye Bye [preauth] 2026-07-01T05:02:00.836931-05:00 claude-cloud sshd[939340]: Disconnected from authenticating user root 177.85.247.230 port 4240 [preauth] 2026-07-01T05:02:49.047532-05:00 claude-cloud sshd[939472]: Invalid user user from 45.148.10.240 port 55220 2026-07-01T05:02:49.060762-05:00 claude-cloud sshd[939472]: Connection closed by invalid user user 45.148.10.240 port 55220 [preauth] 2026-07-01T05:03:09.781738-05:00 claude-cloud sshd[939522]: Connection closed by authenticating user root 45.198.224.46 port 35764 [preauth] 2026-07-01T05:04:17.516481-05:00 claude-cloud sshd[939735]: Received disconnect from 177.85.247.230 port 59408:11: Bye Bye [preauth] 2026-07-01T05:04:17.517225-05:00 claude-cloud sshd[939735]: Disconnected from authenticating user root 177.85.247.230 port 59408 [preauth] 2026-07-01T05:04:28.965513-05:00 claude-cloud sshd[939767]: Connection closed by authenticating user root 45.148.10.240 port 60074 [preauth] 2026-07-01T05:05:01.566065-05:00 claude-cloud CRON[939865]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T05:05:01.572707-05:00 claude-cloud CRON[939865]: pam_unix(cron:session): session closed for user root 2026-07-01T05:05:07.280516-05:00 claude-cloud systemd-logind[853]: New session c5464 of user claude. 2026-07-01T05:05:07.549909-05:00 claude-cloud systemd-logind[853]: Session c5464 logged out. Waiting for processes to exit. 2026-07-01T05:05:07.551870-05:00 claude-cloud systemd-logind[853]: Removed session c5464. 2026-07-01T05:05:41.920236-05:00 claude-cloud sshd[939992]: Received disconnect from 213.152.185.117 port 39470:11: disconnected by user [preauth] 2026-07-01T05:05:41.920891-05:00 claude-cloud sshd[939992]: Disconnected from authenticating user root 213.152.185.117 port 39470 [preauth] 2026-07-01T05:05:58.346761-05:00 claude-cloud sshd[940050]: Connection reset by authenticating user root 45.148.10.147 port 57630 [preauth] 2026-07-01T05:06:16.399408-05:00 claude-cloud sshd[940097]: Invalid user elround from 45.148.10.240 port 57930 2026-07-01T05:06:16.413270-05:00 claude-cloud sshd[940097]: Connection closed by invalid user elround 45.148.10.240 port 57930 [preauth] 2026-07-01T05:07:36.752993-05:00 claude-cloud sshd[940270]: Connection closed by authenticating user root 27.71.230.31 port 48240 [preauth] 2026-07-01T05:08:01.251314-05:00 claude-cloud sshd[940456]: Received disconnect from 91.219.62.94 port 39090:11: disconnected by user [preauth] 2026-07-01T05:08:01.251954-05:00 claude-cloud sshd[940456]: Disconnected from authenticating user root 91.219.62.94 port 39090 [preauth] 2026-07-01T05:08:12.946766-05:00 claude-cloud sshd[940492]: Invalid user elrond from 45.148.10.240 port 58652 2026-07-01T05:08:12.959558-05:00 claude-cloud sshd[940492]: Connection closed by invalid user elrond 45.148.10.240 port 58652 [preauth] 2026-07-01T05:08:45.877957-05:00 claude-cloud sshd[940578]: Invalid user from 83.168.107.99 port 57412 2026-07-01T05:08:45.916622-05:00 claude-cloud sshd[940578]: Connection closed by invalid user 83.168.107.99 port 57412 [preauth] 2026-07-01T05:10:02.989453-05:00 claude-cloud sshd[940799]: Invalid user admin from 45.148.10.240 port 52456 2026-07-01T05:10:03.001985-05:00 claude-cloud sshd[940799]: Connection closed by invalid user admin 45.148.10.240 port 52456 [preauth] 2026-07-01T05:10:10.798596-05:00 claude-cloud systemd-logind[853]: New session c5465 of user claude. 2026-07-01T05:10:11.085865-05:00 claude-cloud systemd-logind[853]: Session c5465 logged out. Waiting for processes to exit. 2026-07-01T05:10:11.087525-05:00 claude-cloud systemd-logind[853]: Removed session c5465. 2026-07-01T05:11:46.737995-05:00 claude-cloud sshd[941114]: Connection closed by authenticating user root 45.148.10.240 port 40516 [preauth] 2026-07-01T05:12:15.598598-05:00 claude-cloud sshd[941198]: Connection reset by authenticating user root 45.148.10.141 port 32622 [preauth] 2026-07-01T05:12:46.799141-05:00 claude-cloud sshd[941265]: Connection closed by authenticating user root 45.198.224.46 port 39750 [preauth] 2026-07-01T05:13:31.860794-05:00 claude-cloud sshd[941409]: Invalid user user from 45.148.10.240 port 47880 2026-07-01T05:13:31.874573-05:00 claude-cloud sshd[941409]: Connection closed by invalid user user 45.148.10.240 port 47880 [preauth] 2026-07-01T05:13:33.546841-05:00 claude-cloud sshd[941377]: Connection closed by authenticating user root 27.71.230.31 port 50452 [preauth] 2026-07-01T05:15:01.584539-05:00 claude-cloud CRON[941664]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T05:15:01.590837-05:00 claude-cloud CRON[941664]: pam_unix(cron:session): session closed for user root 2026-07-01T05:15:16.511178-05:00 claude-cloud sshd[941708]: Invalid user user from 45.148.10.240 port 56720 2026-07-01T05:15:16.524156-05:00 claude-cloud sshd[941708]: Connection closed by invalid user user 45.148.10.240 port 56720 [preauth] 2026-07-01T05:15:18.152389-05:00 claude-cloud systemd-logind[853]: New session c5466 of user claude. 2026-07-01T05:15:18.408772-05:00 claude-cloud systemd-logind[853]: Session c5466 logged out. Waiting for processes to exit. 2026-07-01T05:15:18.410269-05:00 claude-cloud systemd-logind[853]: Removed session c5466. 2026-07-01T05:15:20.314948-05:00 claude-cloud sshd[941730]: Invalid user sameer from 2.57.121.112 port 50476 2026-07-01T05:15:20.341393-05:00 claude-cloud sshd[941730]: Connection closed by invalid user sameer 2.57.121.112 port 50476 [preauth] 2026-07-01T05:16:53.947665-05:00 claude-cloud sshd[942002]: Invalid user miner from 45.148.10.240 port 59768 2026-07-01T05:16:53.960539-05:00 claude-cloud sshd[942002]: Connection closed by invalid user miner 45.148.10.240 port 59768 [preauth] 2026-07-01T05:17:01.599749-05:00 claude-cloud CRON[942024]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T05:17:01.607613-05:00 claude-cloud CRON[942024]: pam_unix(cron:session): session closed for user root 2026-07-01T05:17:21.230763-05:00 claude-cloud sshd[942077]: Received disconnect from 175.110.112.8 port 57226:11: disconnected by user [preauth] 2026-07-01T05:17:21.231614-05:00 claude-cloud sshd[942077]: Disconnected from authenticating user root 175.110.112.8 port 57226 [preauth] 2026-07-01T05:17:56.958427-05:00 claude-cloud sshd[942255]: Connection reset by authenticating user root 45.148.10.141 port 19826 [preauth] 2026-07-01T05:18:37.691758-05:00 claude-cloud sshd[942363]: Connection closed by authenticating user root 45.148.10.240 port 49782 [preauth] 2026-07-01T05:19:39.011061-05:00 claude-cloud sshd[942505]: Connection closed by authenticating user root 27.71.230.31 port 32776 [preauth] 2026-07-01T05:20:21.950112-05:00 claude-cloud systemd-logind[853]: New session c5467 of user claude. 2026-07-01T05:20:22.249693-05:00 claude-cloud systemd-logind[853]: Session c5467 logged out. Waiting for processes to exit. 2026-07-01T05:20:22.252420-05:00 claude-cloud systemd-logind[853]: Removed session c5467. 2026-07-01T05:20:31.283154-05:00 claude-cloud sshd[942718]: Invalid user git from 45.148.10.240 port 56866 2026-07-01T05:20:31.295649-05:00 claude-cloud sshd[942718]: Connection closed by invalid user git 45.148.10.240 port 56866 [preauth] 2026-07-01T05:22:22.514602-05:00 claude-cloud sshd[943030]: Connection closed by authenticating user root 45.148.10.240 port 42868 [preauth] 2026-07-01T05:22:34.817182-05:00 claude-cloud sshd[943062]: Connection closed by authenticating user root 45.198.224.46 port 37334 [preauth] 2026-07-01T05:23:43.981803-05:00 claude-cloud sshd[943273]: Connection reset by authenticating user root 45.148.10.152 port 38138 [preauth] 2026-07-01T05:24:09.034138-05:00 claude-cloud sshd[943339]: Invalid user admin from 45.148.10.240 port 50500 2026-07-01T05:24:09.046172-05:00 claude-cloud sshd[943339]: Connection closed by invalid user admin 45.148.10.240 port 50500 [preauth] 2026-07-01T05:25:01.617144-05:00 claude-cloud CRON[943490]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T05:25:01.623683-05:00 claude-cloud CRON[943490]: pam_unix(cron:session): session closed for user root 2026-07-01T05:25:25.490671-05:00 claude-cloud systemd-logind[853]: New session c5468 of user claude. 2026-07-01T05:25:25.880768-05:00 claude-cloud systemd-logind[853]: Session c5468 logged out. Waiting for processes to exit. 2026-07-01T05:25:25.882674-05:00 claude-cloud systemd-logind[853]: Removed session c5468. 2026-07-01T05:25:28.851085-05:00 claude-cloud sshd[943577]: Connection closed by authenticating user root 45.148.10.121 port 42378 [preauth] 2026-07-01T05:25:47.793475-05:00 claude-cloud sshd[943575]: Connection closed by authenticating user root 27.71.230.31 port 53544 [preauth] 2026-07-01T05:25:57.492645-05:00 claude-cloud sshd[943675]: Invalid user ubuntu from 45.148.10.240 port 53484 2026-07-01T05:25:57.506863-05:00 claude-cloud sshd[943675]: Connection closed by invalid user ubuntu 45.148.10.240 port 53484 [preauth] 2026-07-01T05:27:45.401536-05:00 claude-cloud sshd[943977]: Invalid user ari from 45.148.10.240 port 35030 2026-07-01T05:27:45.413783-05:00 claude-cloud sshd[943977]: Connection closed by invalid user ari 45.148.10.240 port 35030 [preauth] 2026-07-01T05:29:23.265644-05:00 claude-cloud sshd[944322]: Invalid user sedu from 45.148.10.240 port 44064 2026-07-01T05:29:23.278899-05:00 claude-cloud sshd[944322]: Connection closed by invalid user sedu 45.148.10.240 port 44064 [preauth] 2026-07-01T05:29:26.766764-05:00 claude-cloud sshd[944333]: Connection reset by authenticating user root 45.148.10.151 port 56954 [preauth] 2026-07-01T05:30:29.933903-05:00 claude-cloud systemd-logind[853]: New session c5469 of user claude. 2026-07-01T05:30:30.249190-05:00 claude-cloud systemd-logind[853]: Session c5469 logged out. Waiting for processes to exit. 2026-07-01T05:30:30.251180-05:00 claude-cloud systemd-logind[853]: Removed session c5469. 2026-07-01T05:30:44.841618-05:00 claude-cloud sshd[944586]: Invalid user admin from 2.57.121.25 port 31838 2026-07-01T05:30:44.868105-05:00 claude-cloud sshd[944586]: Connection closed by invalid user admin 2.57.121.25 port 31838 [preauth] 2026-07-01T05:31:03.995456-05:00 claude-cloud sshd[944637]: Invalid user solana123 from 45.148.10.240 port 37052 2026-07-01T05:31:04.007720-05:00 claude-cloud sshd[944637]: Connection closed by invalid user solana123 45.148.10.240 port 37052 [preauth] 2026-07-01T05:31:53.830400-05:00 claude-cloud sshd[944771]: Invalid user ubuntu from 45.198.224.46 port 53766 2026-07-01T05:31:54.300717-05:00 claude-cloud sshd[944728]: Connection closed by authenticating user root 27.71.230.31 port 44106 [preauth] 2026-07-01T05:31:54.523231-05:00 claude-cloud sshd[944771]: Connection closed by invalid user ubuntu 45.198.224.46 port 53766 [preauth] 2026-07-01T05:32:52.421009-05:00 claude-cloud sshd[944953]: Invalid user sol123 from 45.148.10.240 port 40148 2026-07-01T05:32:52.434577-05:00 claude-cloud sshd[944953]: Connection closed by invalid user sol123 45.148.10.240 port 40148 [preauth] 2026-07-01T05:34:43.273883-05:00 claude-cloud sshd[945262]: Invalid user sol from 45.148.10.240 port 57684 2026-07-01T05:34:43.287531-05:00 claude-cloud sshd[945262]: Connection closed by invalid user sol 45.148.10.240 port 57684 [preauth] 2026-07-01T05:35:01.634608-05:00 claude-cloud CRON[945327]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T05:35:01.641052-05:00 claude-cloud CRON[945327]: pam_unix(cron:session): session closed for user root 2026-07-01T05:35:10.376916-05:00 claude-cloud sshd[945350]: Connection reset by authenticating user root 45.148.10.152 port 23816 [preauth] 2026-07-01T05:35:33.814494-05:00 claude-cloud systemd-logind[853]: New session c5470 of user claude. 2026-07-01T05:35:34.151954-05:00 claude-cloud systemd-logind[853]: Session c5470 logged out. Waiting for processes to exit. 2026-07-01T05:35:34.153438-05:00 claude-cloud systemd-logind[853]: Removed session c5470. 2026-07-01T05:36:29.673407-05:00 claude-cloud sshd[945589]: Invalid user sol from 45.148.10.240 port 59198 2026-07-01T05:36:29.685495-05:00 claude-cloud sshd[945589]: Connection closed by invalid user sol 45.148.10.240 port 59198 [preauth] 2026-07-01T05:37:55.994877-05:00 claude-cloud sshd[945782]: Connection closed by authenticating user root 27.71.230.31 port 57550 [preauth] 2026-07-01T05:38:20.852909-05:00 claude-cloud sshd[945906]: Invalid user binance from 45.148.10.240 port 38052 2026-07-01T05:38:20.865961-05:00 claude-cloud sshd[945906]: Connection closed by invalid user binance 45.148.10.240 port 38052 [preauth] 2026-07-01T05:40:14.212842-05:00 claude-cloud sshd[946288]: Invalid user okx from 45.148.10.240 port 48218 2026-07-01T05:40:14.225146-05:00 claude-cloud sshd[946288]: Connection closed by invalid user okx 45.148.10.240 port 48218 [preauth] 2026-07-01T05:40:37.357635-05:00 claude-cloud systemd-logind[853]: New session c5471 of user claude. 2026-07-01T05:40:37.636629-05:00 claude-cloud systemd-logind[853]: Session c5471 logged out. Waiting for processes to exit. 2026-07-01T05:40:37.638915-05:00 claude-cloud systemd-logind[853]: Removed session c5471. 2026-07-01T05:40:49.080889-05:00 claude-cloud sshd[946413]: Connection reset by authenticating user root 45.148.10.147 port 31132 [preauth] 2026-07-01T05:41:20.092576-05:00 claude-cloud sshd[946489]: Connection closed by authenticating user root 45.198.224.46 port 53724 [preauth] 2026-07-01T05:41:55.284520-05:00 claude-cloud sshd[946602]: Invalid user bot from 45.148.10.240 port 51838 2026-07-01T05:41:55.296397-05:00 claude-cloud sshd[946602]: Connection closed by invalid user bot 45.148.10.240 port 51838 [preauth] 2026-07-01T05:43:12.016066-05:00 claude-cloud sshd[946818]: Invalid user admin from 193.46.255.86 port 64928 2026-07-01T05:43:12.042617-05:00 claude-cloud sshd[946818]: Connection closed by invalid user admin 193.46.255.86 port 64928 [preauth] 2026-07-01T05:43:35.962001-05:00 claude-cloud sshd[946886]: Invalid user telegram from 45.148.10.240 port 49672 2026-07-01T05:43:35.973943-05:00 claude-cloud sshd[946886]: Connection closed by invalid user telegram 45.148.10.240 port 49672 [preauth] 2026-07-01T05:45:01.543603-05:00 claude-cloud sshd[946901]: Connection closed by authenticating user root 27.71.230.31 port 54508 [preauth] 2026-07-01T05:45:01.656717-05:00 claude-cloud CRON[947143]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T05:45:01.666172-05:00 claude-cloud CRON[947143]: pam_unix(cron:session): session closed for user root 2026-07-01T05:45:24.842427-05:00 claude-cloud sshd[947218]: Invalid user jito from 45.148.10.240 port 37884 2026-07-01T05:45:24.855234-05:00 claude-cloud sshd[947218]: Connection closed by invalid user jito 45.148.10.240 port 37884 [preauth] 2026-07-01T05:45:41.071642-05:00 claude-cloud systemd-logind[853]: New session c5472 of user claude. 2026-07-01T05:45:41.431075-05:00 claude-cloud systemd-logind[853]: Session c5472 logged out. Waiting for processes to exit. 2026-07-01T05:45:41.433467-05:00 claude-cloud systemd-logind[853]: Removed session c5472. 2026-07-01T05:46:26.935390-05:00 claude-cloud sshd[947392]: Connection reset by authenticating user root 62.60.130.219 port 34208 [preauth] 2026-07-01T05:47:13.291509-05:00 claude-cloud sshd[947532]: Invalid user firedancer from 45.148.10.240 port 33344 2026-07-01T05:47:13.304907-05:00 claude-cloud sshd[947532]: Connection closed by invalid user firedancer 45.148.10.240 port 33344 [preauth] 2026-07-01T05:47:34.640866-05:00 claude-cloud sshd[947578]: Connection reset by 198.235.24.211 port 62252 [preauth] 2026-07-01T05:48:56.992103-05:00 claude-cloud sshd[947837]: Connection closed by authenticating user root 45.148.10.240 port 39638 [preauth] 2026-07-01T05:49:47.464139-05:00 claude-cloud sshd[947939]: Connection closed by authenticating user root 27.71.230.31 port 42336 [preauth] 2026-07-01T05:49:52.769396-05:00 claude-cloud sshd[948054]: Received disconnect from 172.93.103.2 port 41652:11: disconnected by user [preauth] 2026-07-01T05:49:52.769797-05:00 claude-cloud sshd[948054]: Disconnected from authenticating user root 172.93.103.2 port 41652 [preauth] 2026-07-01T05:50:24.747962-05:00 claude-cloud sshd[948139]: Invalid user claudia from 45.198.224.46 port 48578 2026-07-01T05:50:25.362455-05:00 claude-cloud sshd[948139]: Connection closed by invalid user claudia 45.198.224.46 port 48578 [preauth] 2026-07-01T05:50:44.964696-05:00 claude-cloud systemd-logind[853]: New session c5473 of user claude. 2026-07-01T05:50:45.302392-05:00 claude-cloud systemd-logind[853]: Session c5473 logged out. Waiting for processes to exit. 2026-07-01T05:50:45.303890-05:00 claude-cloud systemd-logind[853]: Removed session c5473. 2026-07-01T05:50:45.330929-05:00 claude-cloud sshd[948226]: Invalid user bitcoin from 45.148.10.240 port 33938 2026-07-01T05:50:45.344722-05:00 claude-cloud sshd[948226]: Connection closed by invalid user bitcoin 45.148.10.240 port 33938 [preauth] 2026-07-01T05:52:00.415771-05:00 claude-cloud sshd[948446]: Connection reset by authenticating user root 45.148.10.147 port 61446 [preauth] 2026-07-01T05:52:40.762149-05:00 claude-cloud sshd[948552]: Invalid user pool from 45.148.10.240 port 43206 2026-07-01T05:52:40.793238-05:00 claude-cloud sshd[948552]: Connection closed by invalid user pool 45.148.10.240 port 43206 [preauth] 2026-07-01T05:54:27.417193-05:00 claude-cloud sshd[948860]: Invalid user miner from 45.148.10.240 port 58546 2026-07-01T05:54:27.430149-05:00 claude-cloud sshd[948860]: Connection closed by invalid user miner 45.148.10.240 port 58546 [preauth] 2026-07-01T05:55:01.679894-05:00 claude-cloud CRON[948956]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T05:55:01.686178-05:00 claude-cloud CRON[948956]: pam_unix(cron:session): session closed for user root 2026-07-01T05:55:48.430096-05:00 claude-cloud systemd-logind[853]: New session c5474 of user claude. 2026-07-01T05:55:48.764744-05:00 claude-cloud systemd-logind[853]: Session c5474 logged out. Waiting for processes to exit. 2026-07-01T05:55:48.766741-05:00 claude-cloud systemd-logind[853]: Removed session c5474. 2026-07-01T05:55:55.352025-05:00 claude-cloud sshd[949088]: Connection closed by authenticating user root 27.71.230.31 port 49386 [preauth] 2026-07-01T05:56:06.851922-05:00 claude-cloud sshd[949162]: Invalid user ibkr from 45.148.10.240 port 53406 2026-07-01T05:56:06.863957-05:00 claude-cloud sshd[949162]: Connection closed by invalid user ibkr 45.148.10.240 port 53406 [preauth] 2026-07-01T05:57:31.744430-05:00 claude-cloud sshd[949387]: Connection reset by authenticating user root 45.227.254.170 port 10750 [preauth] 2026-07-01T05:57:55.441109-05:00 claude-cloud sshd[949473]: Invalid user ibkrpro from 45.148.10.240 port 56206 2026-07-01T05:57:55.454507-05:00 claude-cloud sshd[949473]: Connection closed by invalid user ibkrpro 45.148.10.240 port 56206 [preauth] 2026-07-01T05:58:33.707765-05:00 claude-cloud sshd[949575]: Invalid user ubnt from 45.148.10.121 port 37110 2026-07-01T05:58:33.740504-05:00 claude-cloud sshd[949575]: Connection closed by invalid user ubnt 45.148.10.121 port 37110 [preauth] 2026-07-01T05:59:35.443029-05:00 claude-cloud sshd[950048]: Connection closed by authenticating user root 45.198.224.46 port 60062 [preauth] 2026-07-01T05:59:46.025254-05:00 claude-cloud sshd[950229]: Connection closed by authenticating user root 45.148.10.240 port 58994 [preauth] 2026-07-01T06:00:51.877794-05:00 claude-cloud systemd-logind[853]: New session c5475 of user claude. 2026-07-01T06:00:52.171969-05:00 claude-cloud systemd-logind[853]: Session c5475 logged out. Waiting for processes to exit. 2026-07-01T06:00:52.173619-05:00 claude-cloud systemd-logind[853]: Removed session c5475. 2026-07-01T06:01:29.067853-05:00 claude-cloud sshd[950762]: Connection closed by authenticating user root 45.148.10.240 port 35140 [preauth] 2026-07-01T06:01:59.696666-05:00 claude-cloud sshd[950794]: Connection closed by authenticating user root 27.71.230.31 port 45748 [preauth] 2026-07-01T06:03:08.764442-05:00 claude-cloud sshd[951080]: Connection reset by authenticating user root 62.60.130.219 port 33192 [preauth] 2026-07-01T06:03:14.015692-05:00 claude-cloud sshd[951096]: Invalid user broker from 45.148.10.240 port 46040 2026-07-01T06:03:14.028718-05:00 claude-cloud sshd[951096]: Connection closed by invalid user broker 45.148.10.240 port 46040 [preauth] 2026-07-01T06:05:01.698349-05:00 claude-cloud CRON[951408]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T06:05:01.706922-05:00 claude-cloud CRON[951408]: pam_unix(cron:session): session closed for user root 2026-07-01T06:05:08.663919-05:00 claude-cloud sshd[951430]: Invalid user recorder from 45.148.10.240 port 45380 2026-07-01T06:05:08.678038-05:00 claude-cloud sshd[951430]: Connection closed by invalid user recorder 45.148.10.240 port 45380 [preauth] 2026-07-01T06:05:55.525124-05:00 claude-cloud systemd-logind[853]: New session c5476 of user claude. 2026-07-01T06:05:55.793225-05:00 claude-cloud systemd-logind[853]: Session c5476 logged out. Waiting for processes to exit. 2026-07-01T06:05:55.796060-05:00 claude-cloud systemd-logind[853]: Removed session c5476. 2026-07-01T06:06:57.577977-05:00 claude-cloud sshd[951837]: Invalid user dvr from 45.148.10.240 port 51662 2026-07-01T06:06:57.590742-05:00 claude-cloud sshd[951837]: Connection closed by invalid user dvr 45.148.10.240 port 51662 [preauth] 2026-07-01T06:07:43.797075-05:00 claude-cloud sshd[951959]: error: maximum authentication attempts exceeded for root from 79.72.57.232 port 33698 ssh2 [preauth] 2026-07-01T06:07:43.798040-05:00 claude-cloud sshd[951959]: Disconnecting authenticating user root 79.72.57.232 port 33698: Too many authentication failures [preauth] 2026-07-01T06:07:44.608628-05:00 claude-cloud sshd[951976]: error: maximum authentication attempts exceeded for root from 79.72.57.232 port 33702 ssh2 [preauth] 2026-07-01T06:07:44.609149-05:00 claude-cloud sshd[951976]: Disconnecting authenticating user root 79.72.57.232 port 33702: Too many authentication failures [preauth] 2026-07-01T06:07:45.357970-05:00 claude-cloud sshd[951982]: error: maximum authentication attempts exceeded for root from 79.72.57.232 port 33710 ssh2 [preauth] 2026-07-01T06:07:45.358551-05:00 claude-cloud sshd[951982]: Disconnecting authenticating user root 79.72.57.232 port 33710: Too many authentication failures [preauth] 2026-07-01T06:07:45.964733-05:00 claude-cloud sshd[951994]: Received disconnect from 79.72.57.232 port 33712:11: disconnected by user [preauth] 2026-07-01T06:07:45.965100-05:00 claude-cloud sshd[951994]: Disconnected from authenticating user root 79.72.57.232 port 33712 [preauth] 2026-07-01T06:07:46.441663-05:00 claude-cloud sshd[951997]: Invalid user admin from 79.72.57.232 port 33722 2026-07-01T06:07:46.699740-05:00 claude-cloud sshd[951997]: error: maximum authentication attempts exceeded for invalid user admin from 79.72.57.232 port 33722 ssh2 [preauth] 2026-07-01T06:07:46.700140-05:00 claude-cloud sshd[951997]: Disconnecting invalid user admin 79.72.57.232 port 33722: Too many authentication failures [preauth] 2026-07-01T06:07:55.464588-05:00 claude-cloud sshd[951981]: Connection closed by authenticating user root 27.71.230.31 port 58310 [preauth] 2026-07-01T06:08:33.571175-05:00 claude-cloud sshd[952127]: Connection reset by authenticating user root 45.148.10.147 port 14280 [preauth] 2026-07-01T06:08:37.998735-05:00 claude-cloud sshd[952133]: Connection closed by authenticating user root 45.198.224.46 port 54956 [preauth] 2026-07-01T06:08:38.812565-05:00 claude-cloud sshd[952145]: Invalid user cadami from 45.148.10.240 port 33198 2026-07-01T06:08:38.826051-05:00 claude-cloud sshd[952145]: Connection closed by invalid user cadami 45.148.10.240 port 33198 [preauth] 2026-07-01T06:09:02.511881-05:00 claude-cloud sshd[952216]: Invalid user server from 185.242.3.195 port 60138 2026-07-01T06:09:02.521161-05:00 claude-cloud sshd[952216]: Connection closed by invalid user server 185.242.3.195 port 60138 [preauth] 2026-07-01T06:09:08.016796-05:00 claude-cloud sshd[952231]: banner exchange: Connection from 69.5.169.39 port 8658: invalid format 2026-07-01T06:10:25.509370-05:00 claude-cloud sshd[952520]: Invalid user radar from 45.148.10.240 port 46820 2026-07-01T06:10:25.522789-05:00 claude-cloud sshd[952520]: Connection closed by invalid user radar 45.148.10.240 port 46820 [preauth] 2026-07-01T06:10:58.951479-05:00 claude-cloud systemd-logind[853]: New session c5477 of user claude. 2026-07-01T06:10:59.238782-05:00 claude-cloud systemd-logind[853]: Session c5477 logged out. Waiting for processes to exit. 2026-07-01T06:10:59.240042-05:00 claude-cloud systemd-logind[853]: Removed session c5477. 2026-07-01T06:11:55.987832-05:00 claude-cloud systemd-logind[853]: New session c5478 of user claude. 2026-07-01T06:11:56.934487-05:00 claude-cloud systemd-logind[853]: Session c5478 logged out. Waiting for processes to exit. 2026-07-01T06:11:56.936742-05:00 claude-cloud systemd-logind[853]: Removed session c5478. 2026-07-01T06:12:15.910838-05:00 claude-cloud sshd[952868]: Invalid user was from 45.148.10.240 port 39208 2026-07-01T06:12:15.924446-05:00 claude-cloud sshd[952868]: Connection closed by invalid user was 45.148.10.240 port 39208 [preauth] 2026-07-01T06:12:42.537192-05:00 claude-cloud login[953262]: PAM unable to dlopen(pam_lastlog.so): /usr/lib/security/pam_lastlog.so: cannot open shared object file: No such file or directory 2026-07-01T06:12:42.537901-05:00 claude-cloud login[953262]: PAM adding faulty module: pam_lastlog.so 2026-07-01T06:12:43.801926-05:00 claude-cloud login[953262]: pam_unix(login:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T06:12:43.843949-05:00 claude-cloud systemd-logind[853]: New session 2634 of user root. 2026-07-01T06:12:43.904851-05:00 claude-cloud (systemd): pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T06:12:44.325631-05:00 claude-cloud login[953404]: ROOT LOGIN on '/dev/pts/22' from '100.100.183.111' 2026-07-01T06:13:58.192375-05:00 claude-cloud sshd[953730]: Invalid user wadmin from 45.148.10.240 port 48540 2026-07-01T06:13:58.205256-05:00 claude-cloud sshd[953730]: Connection closed by invalid user wadmin 45.148.10.240 port 48540 [preauth] 2026-07-01T06:13:59.301374-05:00 claude-cloud sshd[953693]: Connection closed by authenticating user root 27.71.230.31 port 53300 [preauth] 2026-07-01T06:14:13.755845-05:00 claude-cloud sshd[953770]: Connection reset by authenticating user root 45.148.10.152 port 65062 [preauth] 2026-07-01T06:15:01.716994-05:00 claude-cloud CRON[954086]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T06:15:01.723160-05:00 claude-cloud CRON[954086]: pam_unix(cron:session): session closed for user root 2026-07-01T06:15:40.054471-05:00 claude-cloud sshd[954188]: Invalid user ladmin from 45.148.10.240 port 50092 2026-07-01T06:15:40.068133-05:00 claude-cloud sshd[954188]: Connection closed by invalid user ladmin 45.148.10.240 port 50092 [preauth] 2026-07-01T06:16:02.760772-05:00 claude-cloud systemd-logind[853]: New session c5479 of user claude. 2026-07-01T06:16:03.205417-05:00 claude-cloud systemd-logind[853]: Session c5479 logged out. Waiting for processes to exit. 2026-07-01T06:16:03.207197-05:00 claude-cloud systemd-logind[853]: Removed session c5479. 2026-07-01T06:16:52.181574-05:00 claude-cloud sshd[954422]: Connection reset by 31.14.254.24 port 9418 [preauth] 2026-07-01T06:17:01.735545-05:00 claude-cloud CRON[954445]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T06:17:01.741490-05:00 claude-cloud CRON[954445]: pam_unix(cron:session): session closed for user root 2026-07-01T06:17:31.562787-05:00 claude-cloud sshd[954575]: Invalid user bob from 45.148.10.240 port 48796 2026-07-01T06:17:31.576717-05:00 claude-cloud sshd[954575]: Connection closed by invalid user bob 45.148.10.240 port 48796 [preauth] 2026-07-01T06:17:52.965064-05:00 claude-cloud sshd[954627]: Connection closed by authenticating user root 45.198.224.46 port 41562 [preauth] 2026-07-01T06:18:08.906254-05:00 claude-cloud sshd[954678]: banner exchange: Connection from 65.49.1.132 port 5440: invalid format 2026-07-01T06:19:23.916100-05:00 claude-cloud sshd[954888]: Invalid user grid from 45.148.10.240 port 47998 2026-07-01T06:19:23.928481-05:00 claude-cloud sshd[954888]: Connection closed by invalid user grid 45.148.10.240 port 47998 [preauth] 2026-07-01T06:19:47.395768-05:00 claude-cloud sshd[954957]: Connection reset by authenticating user root 45.148.10.141 port 22854 [preauth] 2026-07-01T06:19:53.521611-05:00 claude-cloud sshd[954942]: Connection closed by authenticating user root 27.71.230.31 port 54860 [preauth] 2026-07-01T06:21:06.551511-05:00 claude-cloud systemd-logind[853]: New session c5480 of user claude. 2026-07-01T06:21:06.814803-05:00 claude-cloud systemd-logind[853]: Session c5480 logged out. Waiting for processes to exit. 2026-07-01T06:21:06.816075-05:00 claude-cloud systemd-logind[853]: Removed session c5480. 2026-07-01T06:21:07.607452-05:00 claude-cloud sshd[955471]: Invalid user bank from 45.148.10.240 port 36864 2026-07-01T06:21:07.620421-05:00 claude-cloud sshd[955471]: Connection closed by invalid user bank 45.148.10.240 port 36864 [preauth] 2026-07-01T06:22:18.488547-05:00 claude-cloud systemd-logind[853]: New session c5481 of user claude. 2026-07-01T06:22:18.525082-05:00 claude-cloud systemd-logind[853]: Session c5481 logged out. Waiting for processes to exit. 2026-07-01T06:22:18.527472-05:00 claude-cloud systemd-logind[853]: Removed session c5481. 2026-07-01T06:22:47.387745-05:00 claude-cloud systemd-logind[853]: New session c5482 of user claude. 2026-07-01T06:22:47.426797-05:00 claude-cloud systemd-logind[853]: Session c5482 logged out. Waiting for processes to exit. 2026-07-01T06:22:47.429824-05:00 claude-cloud systemd-logind[853]: Removed session c5482. 2026-07-01T06:22:55.815066-05:00 claude-cloud sshd[955768]: Invalid user banking from 45.148.10.240 port 60724 2026-07-01T06:22:55.828514-05:00 claude-cloud sshd[955768]: Connection closed by invalid user banking 45.148.10.240 port 60724 [preauth] 2026-07-01T06:23:04.447120-05:00 claude-cloud systemd-logind[853]: New session c5483 of user claude. 2026-07-01T06:23:04.503845-05:00 claude-cloud systemd-logind[853]: Session c5483 logged out. Waiting for processes to exit. 2026-07-01T06:23:04.505494-05:00 claude-cloud systemd-logind[853]: Removed session c5483. 2026-07-01T06:23:10.424693-05:00 claude-cloud sshd[955839]: Invalid user admin from 2.57.121.25 port 45980 2026-07-01T06:23:10.450965-05:00 claude-cloud sshd[955839]: Connection closed by invalid user admin 2.57.121.25 port 45980 [preauth] 2026-07-01T06:23:25.019135-05:00 claude-cloud systemd-logind[853]: New session c5484 of user claude. 2026-07-01T06:23:25.065682-05:00 claude-cloud systemd-logind[853]: Session c5484 logged out. Waiting for processes to exit. 2026-07-01T06:23:25.069065-05:00 claude-cloud systemd-logind[853]: Removed session c5484. 2026-07-01T06:23:41.752378-05:00 claude-cloud systemd-logind[853]: New session c5485 of user claude. 2026-07-01T06:23:42.860668-05:00 claude-cloud systemd-logind[853]: Session c5485 logged out. Waiting for processes to exit. 2026-07-01T06:23:42.863347-05:00 claude-cloud systemd-logind[853]: Removed session c5485. 2026-07-01T06:24:02.794096-05:00 claude-cloud systemd-logind[853]: New session c5486 of user claude. 2026-07-01T06:24:02.839599-05:00 claude-cloud systemd-logind[853]: New session c5487 of user claude. 2026-07-01T06:24:02.857096-05:00 claude-cloud systemd-logind[853]: New session c5488 of user claude. 2026-07-01T06:24:02.861501-05:00 claude-cloud systemd-logind[853]: Session c5486 logged out. Waiting for processes to exit. 2026-07-01T06:24:02.877153-05:00 claude-cloud systemd-logind[853]: Removed session c5486. 2026-07-01T06:24:02.909781-05:00 claude-cloud systemd-logind[853]: Session c5487 logged out. Waiting for processes to exit. 2026-07-01T06:24:02.912171-05:00 claude-cloud systemd-logind[853]: Removed session c5487. 2026-07-01T06:24:03.888475-05:00 claude-cloud systemd-logind[853]: Session c5488 logged out. Waiting for processes to exit. 2026-07-01T06:24:03.889814-05:00 claude-cloud systemd-logind[853]: Removed session c5488. 2026-07-01T06:24:18.522406-05:00 claude-cloud systemd-logind[853]: New session c5489 of user claude. 2026-07-01T06:24:18.548499-05:00 claude-cloud systemd-logind[853]: Session c5489 logged out. Waiting for processes to exit. 2026-07-01T06:24:18.549849-05:00 claude-cloud systemd-logind[853]: Removed session c5489. 2026-07-01T06:24:18.666994-05:00 claude-cloud systemd-logind[853]: New session c5490 of user claude. 2026-07-01T06:24:18.684432-05:00 claude-cloud systemd-logind[853]: New session c5491 of user claude. 2026-07-01T06:24:18.696113-05:00 claude-cloud systemd-logind[853]: Session c5490 logged out. Waiting for processes to exit. 2026-07-01T06:24:18.699534-05:00 claude-cloud systemd-logind[853]: Removed session c5490. 2026-07-01T06:24:18.707809-05:00 claude-cloud systemd-logind[853]: Session c5491 logged out. Waiting for processes to exit. 2026-07-01T06:24:18.709468-05:00 claude-cloud systemd-logind[853]: Removed session c5491. 2026-07-01T06:24:46.689692-05:00 claude-cloud sshd[956276]: Invalid user broker from 45.148.10.240 port 51678 2026-07-01T06:24:46.702168-05:00 claude-cloud sshd[956276]: Connection closed by invalid user broker 45.148.10.240 port 51678 [preauth] 2026-07-01T06:25:01.753020-05:00 claude-cloud CRON[956318]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T06:25:01.754221-05:00 claude-cloud CRON[956319]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T06:25:01.758159-05:00 claude-cloud CRON[956319]: pam_unix(cron:session): session closed for user root 2026-07-01T06:25:01.857073-05:00 claude-cloud CRON[956318]: pam_unix(cron:session): session closed for user root 2026-07-01T06:25:06.080259-05:00 claude-cloud systemd-logind[853]: New session c5492 of user claude. 2026-07-01T06:25:07.045981-05:00 claude-cloud systemd-logind[853]: Session c5492 logged out. Waiting for processes to exit. 2026-07-01T06:25:07.047574-05:00 claude-cloud systemd-logind[853]: Removed session c5492. 2026-07-01T06:25:08.478759-05:00 claude-cloud sshd[956466]: Invalid user teagan from 2.57.121.112 port 10818 2026-07-01T06:25:08.504674-05:00 claude-cloud sshd[956466]: Connection closed by invalid user teagan 2.57.121.112 port 10818 [preauth] 2026-07-01T06:25:28.893845-05:00 claude-cloud sshd[956980]: Connection reset by authenticating user root 45.227.254.170 port 20410 [preauth] 2026-07-01T06:25:43.191123-05:00 claude-cloud systemd-logind[853]: New session c5493 of user claude. 2026-07-01T06:25:43.224905-05:00 claude-cloud systemd-logind[853]: Session c5493 logged out. Waiting for processes to exit. 2026-07-01T06:25:43.226018-05:00 claude-cloud systemd-logind[853]: Removed session c5493. 2026-07-01T06:25:44.412691-05:00 claude-cloud systemd-logind[853]: New session c5494 of user claude. 2026-07-01T06:25:45.258266-05:00 claude-cloud systemd-logind[853]: Session c5494 logged out. Waiting for processes to exit. 2026-07-01T06:25:45.260868-05:00 claude-cloud systemd-logind[853]: Removed session c5494. 2026-07-01T06:25:46.427594-05:00 claude-cloud systemd-logind[853]: New session c5495 of user claude. 2026-07-01T06:25:47.806815-05:00 claude-cloud systemd-logind[853]: Session c5495 logged out. Waiting for processes to exit. 2026-07-01T06:25:47.808320-05:00 claude-cloud systemd-logind[853]: Removed session c5495. 2026-07-01T06:25:50.147378-05:00 claude-cloud sshd[957049]: Connection closed by authenticating user root 27.71.230.31 port 33382 [preauth] 2026-07-01T06:26:10.074210-05:00 claude-cloud systemd-logind[853]: New session c5496 of user claude. 2026-07-01T06:26:10.467566-05:00 claude-cloud systemd-logind[853]: Session c5496 logged out. Waiting for processes to exit. 2026-07-01T06:26:10.469550-05:00 claude-cloud systemd-logind[853]: Removed session c5496. 2026-07-01T06:26:14.055878-05:00 claude-cloud systemd-logind[853]: New session c5497 of user claude. 2026-07-01T06:26:14.258876-05:00 claude-cloud systemd-logind[853]: Session c5497 logged out. Waiting for processes to exit. 2026-07-01T06:26:14.260681-05:00 claude-cloud systemd-logind[853]: Removed session c5497. 2026-07-01T06:26:28.586635-05:00 claude-cloud systemd-logind[853]: New session c5498 of user claude. 2026-07-01T06:26:28.641349-05:00 claude-cloud systemd-logind[853]: New session c5499 of user claude. 2026-07-01T06:26:28.751805-05:00 claude-cloud systemd-logind[853]: Session c5499 logged out. Waiting for processes to exit. 2026-07-01T06:26:28.753477-05:00 claude-cloud systemd-logind[853]: Removed session c5499. 2026-07-01T06:26:28.810070-05:00 claude-cloud systemd-logind[853]: Session c5498 logged out. Waiting for processes to exit. 2026-07-01T06:26:28.811733-05:00 claude-cloud systemd-logind[853]: Removed session c5498. 2026-07-01T06:26:30.520564-05:00 claude-cloud sshd[958482]: Invalid user broker from 45.148.10.240 port 49288 2026-07-01T06:26:30.533494-05:00 claude-cloud sshd[958482]: Connection closed by invalid user broker 45.148.10.240 port 49288 [preauth] 2026-07-01T06:26:41.783186-05:00 claude-cloud systemd-logind[853]: New session c5500 of user claude. 2026-07-01T06:26:46.954121-05:00 claude-cloud systemd-logind[853]: Session c5500 logged out. Waiting for processes to exit. 2026-07-01T06:26:46.954504-05:00 claude-cloud systemd-logind[853]: Removed session c5500. 2026-07-01T06:27:00.044635-05:00 claude-cloud systemd-logind[853]: New session c5501 of user claude. 2026-07-01T06:27:08.104908-05:00 claude-cloud systemd-logind[853]: Session c5501 logged out. Waiting for processes to exit. 2026-07-01T06:27:08.105911-05:00 claude-cloud systemd-logind[853]: Removed session c5501. 2026-07-01T06:27:11.471918-05:00 claude-cloud sshd[958759]: Invalid user ubuntu from 45.198.224.46 port 52092 2026-07-01T06:27:12.211231-05:00 claude-cloud sshd[958759]: Connection closed by invalid user ubuntu 45.198.224.46 port 52092 [preauth] 2026-07-01T06:27:31.121463-05:00 claude-cloud systemd-logind[853]: New session c5502 of user claude. 2026-07-01T06:27:31.177812-05:00 claude-cloud systemd-logind[853]: Session c5502 logged out. Waiting for processes to exit. 2026-07-01T06:27:31.180184-05:00 claude-cloud systemd-logind[853]: Removed session c5502. 2026-07-01T06:27:51.200221-05:00 claude-cloud systemd-logind[853]: New session c5503 of user claude. 2026-07-01T06:27:51.236397-05:00 claude-cloud systemd-logind[853]: Session c5503 logged out. Waiting for processes to exit. 2026-07-01T06:27:51.239164-05:00 claude-cloud systemd-logind[853]: Removed session c5503. 2026-07-01T06:27:52.344666-05:00 claude-cloud systemd-logind[853]: New session c5504 of user claude. 2026-07-01T06:27:55.604614-05:00 claude-cloud systemd-logind[853]: Session c5504 logged out. Waiting for processes to exit. 2026-07-01T06:27:55.606111-05:00 claude-cloud systemd-logind[853]: Removed session c5504. 2026-07-01T06:28:11.068504-05:00 claude-cloud sshd[959043]: Invalid user trader from 45.148.10.240 port 46584 2026-07-01T06:28:11.080803-05:00 claude-cloud sshd[959043]: Connection closed by invalid user trader 45.148.10.240 port 46584 [preauth] 2026-07-01T06:28:33.514869-05:00 claude-cloud sshd[959152]: Connection closed by authenticating user root 45.148.10.121 port 38282 [preauth] 2026-07-01T06:29:00.780531-05:00 claude-cloud sshd[959242]: Invalid user ubnt from 193.46.255.86 port 49270 2026-07-01T06:29:00.805819-05:00 claude-cloud sshd[959242]: Connection closed by invalid user ubnt 193.46.255.86 port 49270 [preauth] 2026-07-01T06:31:03.467877-05:00 claude-cloud sshd[959653]: Connection reset by authenticating user root 45.148.10.151 port 21476 [preauth] 2026-07-01T06:31:13.794367-05:00 claude-cloud systemd-logind[853]: New session c5505 of user claude. 2026-07-01T06:31:14.120514-05:00 claude-cloud systemd-logind[853]: Session c5505 logged out. Waiting for processes to exit. 2026-07-01T06:31:14.122231-05:00 claude-cloud systemd-logind[853]: Removed session c5505. 2026-07-01T06:31:53.706701-05:00 claude-cloud sshd[959755]: Connection closed by authenticating user root 27.71.230.31 port 45340 [preauth] 2026-07-01T06:35:01.869953-05:00 claude-cloud CRON[960298]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T06:35:01.880789-05:00 claude-cloud CRON[960298]: pam_unix(cron:session): session closed for user root 2026-07-01T06:36:17.409148-05:00 claude-cloud systemd-logind[853]: New session c5506 of user claude. 2026-07-01T06:36:17.706109-05:00 claude-cloud systemd-logind[853]: Session c5506 logged out. Waiting for processes to exit. 2026-07-01T06:36:17.707576-05:00 claude-cloud systemd-logind[853]: Removed session c5506. 2026-07-01T06:36:32.030382-05:00 claude-cloud sshd[960578]: Connection reset by authenticating user root 45.148.10.151 port 46386 [preauth] 2026-07-01T06:36:45.696551-05:00 claude-cloud systemd-logind[853]: New session c5507 of user claude. 2026-07-01T06:36:45.801063-05:00 claude-cloud systemd-logind[853]: Session c5507 logged out. Waiting for processes to exit. 2026-07-01T06:36:45.803867-05:00 claude-cloud systemd-logind[853]: Removed session c5507. 2026-07-01T06:36:51.651608-05:00 claude-cloud sshd[960672]: Connection closed by authenticating user root 45.198.224.46 port 59968 [preauth] 2026-07-01T06:37:50.757965-05:00 claude-cloud sshd[960788]: Connection closed by authenticating user root 27.71.230.31 port 59216 [preauth] 2026-07-01T06:38:09.638520-05:00 claude-cloud systemd-logind[853]: New session c5508 of user claude. 2026-07-01T06:38:09.911596-05:00 claude-cloud systemd-logind[853]: Session c5508 logged out. Waiting for processes to exit. 2026-07-01T06:38:09.914887-05:00 claude-cloud systemd-logind[853]: Removed session c5508. 2026-07-01T06:39:06.540915-05:00 claude-cloud systemd-logind[853]: New session c5509 of user claude. 2026-07-01T06:39:06.595683-05:00 claude-cloud systemd-logind[853]: Session c5509 logged out. Waiting for processes to exit. 2026-07-01T06:39:06.597516-05:00 claude-cloud systemd-logind[853]: Removed session c5509. 2026-07-01T06:39:07.927791-05:00 claude-cloud systemd-logind[853]: New session c5510 of user claude. 2026-07-01T06:39:08.912080-05:00 claude-cloud systemd-logind[853]: Session c5510 logged out. Waiting for processes to exit. 2026-07-01T06:39:08.913197-05:00 claude-cloud systemd-logind[853]: Removed session c5510. 2026-07-01T06:39:10.195368-05:00 claude-cloud systemd-logind[853]: New session c5511 of user claude. 2026-07-01T06:39:11.475438-05:00 claude-cloud systemd-logind[853]: Session c5511 logged out. Waiting for processes to exit. 2026-07-01T06:39:11.477440-05:00 claude-cloud systemd-logind[853]: Removed session c5511. 2026-07-01T06:39:12.761449-05:00 claude-cloud systemd-logind[853]: New session c5512 of user claude. 2026-07-01T06:39:13.741931-05:00 claude-cloud systemd-logind[853]: Session c5512 logged out. Waiting for processes to exit. 2026-07-01T06:39:13.745057-05:00 claude-cloud systemd-logind[853]: Removed session c5512. 2026-07-01T06:39:37.876980-05:00 claude-cloud sshd[961186]: Received disconnect from 210.210.155.71 port 48190:11: disconnected by user [preauth] 2026-07-01T06:39:37.877514-05:00 claude-cloud sshd[961186]: Disconnected from authenticating user root 210.210.155.71 port 48190 [preauth] 2026-07-01T06:40:31.284750-05:00 claude-cloud systemd-logind[853]: New session c5513 of user claude. 2026-07-01T06:40:31.386183-05:00 claude-cloud systemd-logind[853]: Session c5513 logged out. Waiting for processes to exit. 2026-07-01T06:40:31.388338-05:00 claude-cloud systemd-logind[853]: Removed session c5513. 2026-07-01T06:41:20.929313-05:00 claude-cloud systemd-logind[853]: New session c5514 of user claude. 2026-07-01T06:41:21.330822-05:00 claude-cloud systemd-logind[853]: Session c5514 logged out. Waiting for processes to exit. 2026-07-01T06:41:21.332514-05:00 claude-cloud systemd-logind[853]: Removed session c5514. 2026-07-01T06:42:02.900059-05:00 claude-cloud sshd[961693]: Connection reset by authenticating user root 45.227.254.170 port 26032 [preauth] 2026-07-01T06:42:31.171261-05:00 claude-cloud systemd-logind[853]: New session c5515 of user claude. 2026-07-01T06:42:31.199644-05:00 claude-cloud systemd-logind[853]: Session c5515 logged out. Waiting for processes to exit. 2026-07-01T06:42:31.201336-05:00 claude-cloud systemd-logind[853]: Removed session c5515. 2026-07-01T06:42:32.465700-05:00 claude-cloud systemd-logind[853]: New session c5516 of user claude. 2026-07-01T06:42:32.491373-05:00 claude-cloud systemd-logind[853]: Session c5516 logged out. Waiting for processes to exit. 2026-07-01T06:42:32.494193-05:00 claude-cloud systemd-logind[853]: Removed session c5516. 2026-07-01T06:43:09.975225-05:00 claude-cloud systemd-logind[853]: New session c5517 of user claude. 2026-07-01T06:43:10.000144-05:00 claude-cloud systemd-logind[853]: Session c5517 logged out. Waiting for processes to exit. 2026-07-01T06:43:10.001598-05:00 claude-cloud systemd-logind[853]: Removed session c5517. 2026-07-01T06:43:56.490678-05:00 claude-cloud sshd[961965]: Connection closed by authenticating user root 27.71.230.31 port 52960 [preauth] 2026-07-01T06:44:21.706007-05:00 claude-cloud systemd-logind[853]: New session c5518 of user claude. 2026-07-01T06:44:21.745334-05:00 claude-cloud systemd-logind[853]: Session c5518 logged out. Waiting for processes to exit. 2026-07-01T06:44:21.746735-05:00 claude-cloud systemd-logind[853]: Removed session c5518. 2026-07-01T06:45:01.891108-05:00 claude-cloud CRON[962236]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T06:45:01.897538-05:00 claude-cloud CRON[962236]: pam_unix(cron:session): session closed for user root 2026-07-01T06:46:03.497809-05:00 claude-cloud systemd-logind[853]: New session c5519 of user claude. 2026-07-01T06:46:04.635309-05:00 claude-cloud systemd-logind[853]: Session c5519 logged out. Waiting for processes to exit. 2026-07-01T06:46:04.637243-05:00 claude-cloud systemd-logind[853]: Removed session c5519. 2026-07-01T06:46:05.931862-05:00 claude-cloud systemd-logind[853]: New session c5520 of user claude. 2026-07-01T06:46:08.234953-05:00 claude-cloud systemd-logind[853]: Session c5520 logged out. Waiting for processes to exit. 2026-07-01T06:46:08.235355-05:00 claude-cloud systemd-logind[853]: Removed session c5520. 2026-07-01T06:46:09.436715-05:00 claude-cloud systemd-logind[853]: New session c5521 of user claude. 2026-07-01T06:46:09.491523-05:00 claude-cloud systemd-logind[853]: Session c5521 logged out. Waiting for processes to exit. 2026-07-01T06:46:09.493098-05:00 claude-cloud systemd-logind[853]: Removed session c5521. 2026-07-01T06:46:24.632346-05:00 claude-cloud systemd-logind[853]: New session c5522 of user claude. 2026-07-01T06:46:24.970878-05:00 claude-cloud systemd-logind[853]: Session c5522 logged out. Waiting for processes to exit. 2026-07-01T06:46:24.973353-05:00 claude-cloud systemd-logind[853]: Removed session c5522. 2026-07-01T06:46:33.375947-05:00 claude-cloud sshd[962508]: Invalid user ubuntu from 45.198.224.46 port 54472 2026-07-01T06:46:34.664518-05:00 claude-cloud sshd[962508]: Connection closed by invalid user ubuntu 45.198.224.46 port 54472 [preauth] 2026-07-01T06:46:52.810743-05:00 claude-cloud systemd-logind[853]: New session c5523 of user claude. 2026-07-01T06:46:52.924759-05:00 claude-cloud systemd-logind[853]: Session c5523 logged out. Waiting for processes to exit. 2026-07-01T06:46:52.927192-05:00 claude-cloud systemd-logind[853]: Removed session c5523. 2026-07-01T06:47:18.867874-05:00 claude-cloud systemd-logind[853]: New session c5524 of user claude. 2026-07-01T06:47:19.209462-05:00 claude-cloud systemd-logind[853]: Session c5524 logged out. Waiting for processes to exit. 2026-07-01T06:47:19.210972-05:00 claude-cloud systemd-logind[853]: Removed session c5524. 2026-07-01T06:47:24.769007-05:00 claude-cloud sshd[962727]: Connection reset by authenticating user root 62.60.130.219 port 41748 [preauth] 2026-07-01T06:48:01.372902-05:00 claude-cloud systemd-logind[853]: New session c5525 of user claude. 2026-07-01T06:48:01.461331-05:00 claude-cloud systemd-logind[853]: Session c5525 logged out. Waiting for processes to exit. 2026-07-01T06:48:01.462988-05:00 claude-cloud systemd-logind[853]: Removed session c5525. 2026-07-01T06:48:07.400939-05:00 claude-cloud sshd[962866]: Connection closed by 203.121.106.56 port 50942 [preauth] 2026-07-01T06:48:22.971926-05:00 claude-cloud systemd-logind[853]: New session c5526 of user claude. 2026-07-01T06:48:23.002755-05:00 claude-cloud systemd-logind[853]: Session c5526 logged out. Waiting for processes to exit. 2026-07-01T06:48:23.004469-05:00 claude-cloud systemd-logind[853]: Removed session c5526. 2026-07-01T06:48:44.895425-05:00 claude-cloud systemd-logind[853]: New session c5527 of user claude. 2026-07-01T06:48:50.198145-05:00 claude-cloud systemd-logind[853]: Session c5527 logged out. Waiting for processes to exit. 2026-07-01T06:48:50.199017-05:00 claude-cloud systemd-logind[853]: Removed session c5527. 2026-07-01T06:49:21.809034-05:00 claude-cloud systemd-logind[853]: New session c5528 of user claude. 2026-07-01T06:49:21.866597-05:00 claude-cloud systemd-logind[853]: Session c5528 logged out. Waiting for processes to exit. 2026-07-01T06:49:21.868541-05:00 claude-cloud systemd-logind[853]: Removed session c5528. 2026-07-01T06:49:47.549379-05:00 claude-cloud systemd-logind[853]: New session c5529 of user claude. 2026-07-01T06:49:47.665043-05:00 claude-cloud systemd-logind[853]: Session c5529 logged out. Waiting for processes to exit. 2026-07-01T06:49:47.668142-05:00 claude-cloud systemd-logind[853]: Removed session c5529. 2026-07-01T06:50:18.096873-05:00 claude-cloud systemd-logind[853]: New session c5530 of user claude. 2026-07-01T06:50:18.150947-05:00 claude-cloud systemd-logind[853]: Session c5530 logged out. Waiting for processes to exit. 2026-07-01T06:50:18.153065-05:00 claude-cloud systemd-logind[853]: Removed session c5530. 2026-07-01T06:51:18.374827-05:00 claude-cloud systemd-logind[853]: New session c5531 of user claude. 2026-07-01T06:51:19.079341-05:00 claude-cloud systemd-logind[853]: Session c5531 logged out. Waiting for processes to exit. 2026-07-01T06:51:19.079660-05:00 claude-cloud systemd-logind[853]: Removed session c5531. 2026-07-01T06:51:28.353021-05:00 claude-cloud systemd-logind[853]: New session c5532 of user claude. 2026-07-01T06:51:28.678231-05:00 claude-cloud systemd-logind[853]: Session c5532 logged out. Waiting for processes to exit. 2026-07-01T06:51:28.680198-05:00 claude-cloud systemd-logind[853]: Removed session c5532. 2026-07-01T06:52:01.908846-05:00 claude-cloud CRON[963718]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T06:52:01.918029-05:00 claude-cloud CRON[963718]: pam_unix(cron:session): session closed for user root 2026-07-01T06:52:57.805086-05:00 claude-cloud sshd[963862]: Connection reset by authenticating user root 45.148.10.152 port 9290 [preauth] 2026-07-01T06:55:01.931053-05:00 claude-cloud CRON[964228]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T06:55:01.938647-05:00 claude-cloud CRON[964228]: pam_unix(cron:session): session closed for user root 2026-07-01T06:55:51.525578-05:00 claude-cloud sshd[964307]: Connection closed by authenticating user root 27.71.230.31 port 45292 [preauth] 2026-07-01T06:56:19.974740-05:00 claude-cloud sshd[964413]: Connection closed by authenticating user root 45.198.224.46 port 34332 [preauth] 2026-07-01T06:56:32.403032-05:00 claude-cloud systemd-logind[853]: New session c5533 of user claude. 2026-07-01T06:56:32.699673-05:00 claude-cloud systemd-logind[853]: Session c5533 logged out. Waiting for processes to exit. 2026-07-01T06:56:32.700738-05:00 claude-cloud systemd-logind[853]: Removed session c5533. 2026-07-01T06:58:22.525795-05:00 claude-cloud sshd[964783]: Connection reset by authenticating user root 45.227.254.170 port 6988 [preauth] 2026-07-01T06:58:50.319190-05:00 claude-cloud sshd[964851]: Invalid user test from 45.148.10.121 port 55894 2026-07-01T06:58:50.339909-05:00 claude-cloud sshd[964851]: Connection closed by invalid user test 45.148.10.121 port 55894 [preauth] 2026-07-01T07:01:35.902330-05:00 claude-cloud systemd-logind[853]: New session c5534 of user claude. 2026-07-01T07:01:36.155995-05:00 claude-cloud systemd-logind[853]: Session c5534 logged out. Waiting for processes to exit. 2026-07-01T07:01:36.157139-05:00 claude-cloud systemd-logind[853]: Removed session c5534. 2026-07-01T07:01:38.791310-05:00 claude-cloud sshd[965292]: Connection closed by authenticating user root 27.71.230.31 port 60760 [preauth] 2026-07-01T07:03:05.088926-05:00 claude-cloud sshd[965622]: Invalid user wms from 103.172.236.15 port 52508 2026-07-01T07:03:05.287260-05:00 claude-cloud sshd[965622]: Received disconnect from 103.172.236.15 port 52508:11: Bye Bye [preauth] 2026-07-01T07:03:05.287580-05:00 claude-cloud sshd[965622]: Disconnected from invalid user wms 103.172.236.15 port 52508 [preauth] 2026-07-01T07:03:55.808722-05:00 claude-cloud sshd[965774]: Connection reset by authenticating user root 45.148.10.152 port 40956 [preauth] 2026-07-01T07:05:01.955815-05:00 claude-cloud CRON[965947]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T07:05:01.963094-05:00 claude-cloud CRON[965947]: pam_unix(cron:session): session closed for user root 2026-07-01T07:05:58.429457-05:00 claude-cloud sshd[966142]: Connection closed by 2.57.122.168 port 34848 2026-07-01T07:05:59.976942-05:00 claude-cloud sshd[966141]: Invalid user test1 from 45.198.224.46 port 45136 2026-07-01T07:06:00.764521-05:00 claude-cloud sshd[966141]: Connection closed by invalid user test1 45.198.224.46 port 45136 [preauth] 2026-07-01T07:06:09.643114-05:00 claude-cloud sshd[966180]: Invalid user irm from 103.172.236.15 port 58092 2026-07-01T07:06:09.840855-05:00 claude-cloud sshd[966180]: Received disconnect from 103.172.236.15 port 58092:11: Bye Bye [preauth] 2026-07-01T07:06:09.841099-05:00 claude-cloud sshd[966180]: Disconnected from invalid user irm 103.172.236.15 port 58092 [preauth] 2026-07-01T07:06:39.531407-05:00 claude-cloud systemd-logind[853]: New session c5535 of user claude. 2026-07-01T07:06:39.826492-05:00 claude-cloud systemd-logind[853]: Session c5535 logged out. Waiting for processes to exit. 2026-07-01T07:06:39.828057-05:00 claude-cloud systemd-logind[853]: Removed session c5535. 2026-07-01T07:08:35.876151-05:00 claude-cloud sshd[966602]: Invalid user betty from 103.172.236.15 port 50912 2026-07-01T07:08:36.076116-05:00 claude-cloud sshd[966602]: Received disconnect from 103.172.236.15 port 50912:11: Bye Bye [preauth] 2026-07-01T07:08:36.076472-05:00 claude-cloud sshd[966602]: Disconnected from invalid user betty 103.172.236.15 port 50912 [preauth] 2026-07-01T07:09:30.639921-05:00 claude-cloud sshd[966734]: Connection reset by authenticating user root 45.148.10.152 port 32492 [preauth] 2026-07-01T07:10:57.363198-05:00 claude-cloud sshd[966987]: Invalid user balancer from 103.172.236.15 port 59806 2026-07-01T07:10:57.564448-05:00 claude-cloud sshd[966987]: Received disconnect from 103.172.236.15 port 59806:11: Bye Bye [preauth] 2026-07-01T07:10:57.564769-05:00 claude-cloud sshd[966987]: Disconnected from invalid user balancer 103.172.236.15 port 59806 [preauth] 2026-07-01T07:11:43.064220-05:00 claude-cloud systemd-logind[853]: New session c5536 of user claude. 2026-07-01T07:11:43.358066-05:00 claude-cloud systemd-logind[853]: Session c5536 logged out. Waiting for processes to exit. 2026-07-01T07:11:43.359454-05:00 claude-cloud systemd-logind[853]: Removed session c5536. 2026-07-01T07:12:43.967191-05:00 claude-cloud systemd-logind[853]: New session c5537 of user claude. 2026-07-01T07:12:45.982508-05:00 claude-cloud systemd-logind[853]: Session c5537 logged out. Waiting for processes to exit. 2026-07-01T07:12:45.984046-05:00 claude-cloud systemd-logind[853]: Removed session c5537. 2026-07-01T07:13:09.197118-05:00 claude-cloud sshd[967478]: Invalid user booking from 103.172.236.15 port 50188 2026-07-01T07:13:09.398180-05:00 claude-cloud sshd[967478]: Received disconnect from 103.172.236.15 port 50188:11: Bye Bye [preauth] 2026-07-01T07:13:09.398534-05:00 claude-cloud sshd[967478]: Disconnected from invalid user booking 103.172.236.15 port 50188 [preauth] 2026-07-01T07:13:27.343335-05:00 claude-cloud systemd-logind[853]: New session c5538 of user claude. 2026-07-01T07:13:29.401636-05:00 claude-cloud systemd-logind[853]: Session c5538 logged out. Waiting for processes to exit. 2026-07-01T07:13:29.403186-05:00 claude-cloud systemd-logind[853]: Removed session c5538. 2026-07-01T07:13:57.617704-05:00 claude-cloud sshd[967532]: Connection closed by authenticating user root 27.71.230.31 port 45768 [preauth] 2026-07-01T07:14:00.218628-05:00 claude-cloud systemd-logind[853]: New session c5539 of user claude. 2026-07-01T07:14:02.217102-05:00 claude-cloud systemd-logind[853]: Session c5539 logged out. Waiting for processes to exit. 2026-07-01T07:14:02.218229-05:00 claude-cloud systemd-logind[853]: Removed session c5539. 2026-07-01T07:14:29.412930-05:00 claude-cloud systemd-logind[853]: New session c5540 of user claude. 2026-07-01T07:14:31.440217-05:00 claude-cloud systemd-logind[853]: Session c5540 logged out. Waiting for processes to exit. 2026-07-01T07:14:31.442399-05:00 claude-cloud systemd-logind[853]: Removed session c5540. 2026-07-01T07:14:45.804457-05:00 claude-cloud sshd[967944]: Invalid user admin from 193.46.255.86 port 14776 2026-07-01T07:14:45.829934-05:00 claude-cloud sshd[967944]: Connection closed by invalid user admin 193.46.255.86 port 14776 [preauth] 2026-07-01T07:14:50.800919-05:00 claude-cloud systemd-logind[853]: New session c5541 of user claude. 2026-07-01T07:14:51.789744-05:00 claude-cloud systemd-logind[853]: Session c5541 logged out. Waiting for processes to exit. 2026-07-01T07:14:51.791455-05:00 claude-cloud systemd-logind[853]: Removed session c5541. 2026-07-01T07:14:58.270119-05:00 claude-cloud sshd[968013]: Connection reset by authenticating user root 45.227.254.170 port 12674 [preauth] 2026-07-01T07:15:01.975385-05:00 claude-cloud CRON[968025]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T07:15:01.985590-05:00 claude-cloud CRON[968025]: pam_unix(cron:session): session closed for user root 2026-07-01T07:15:22.836063-05:00 claude-cloud systemd-logind[853]: New session c5542 of user claude. 2026-07-01T07:15:25.302152-05:00 claude-cloud systemd-logind[853]: Session c5542 logged out. Waiting for processes to exit. 2026-07-01T07:15:25.305040-05:00 claude-cloud systemd-logind[853]: Removed session c5542. 2026-07-01T07:15:38.351745-05:00 claude-cloud sshd[968235]: Connection closed by authenticating user root 45.198.224.46 port 57446 [preauth] 2026-07-01T07:15:40.273025-05:00 claude-cloud sshd[968262]: Invalid user admin from 2.57.121.25 port 33364 2026-07-01T07:15:40.298029-05:00 claude-cloud sshd[968262]: Connection closed by invalid user admin 2.57.121.25 port 33364 [preauth] 2026-07-01T07:16:46.436734-05:00 claude-cloud systemd-logind[853]: New session c5543 of user claude. 2026-07-01T07:16:46.742135-05:00 claude-cloud systemd-logind[853]: Session c5543 logged out. Waiting for processes to exit. 2026-07-01T07:16:46.744401-05:00 claude-cloud systemd-logind[853]: Removed session c5543. 2026-07-01T07:17:01.988459-05:00 claude-cloud CRON[968492]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T07:17:01.992765-05:00 claude-cloud CRON[968492]: pam_unix(cron:session): session closed for user root 2026-07-01T07:17:10.657259-05:00 claude-cloud systemd-logind[853]: New session c5544 of user claude. 2026-07-01T07:17:11.299691-05:00 claude-cloud systemd-logind[853]: Session c5544 logged out. Waiting for processes to exit. 2026-07-01T07:17:11.301616-05:00 claude-cloud systemd-logind[853]: Removed session c5544. 2026-07-01T07:17:16.657376-05:00 claude-cloud sshd[968545]: Received disconnect from 45.148.146.52 port 49518:11: disconnected by user [preauth] 2026-07-01T07:17:16.657642-05:00 claude-cloud sshd[968545]: Disconnected from authenticating user root 45.148.146.52 port 49518 [preauth] 2026-07-01T07:17:29.101079-05:00 claude-cloud systemd-logind[853]: New session c5545 of user claude. 2026-07-01T07:17:29.690805-05:00 claude-cloud systemd-logind[853]: Session c5545 logged out. Waiting for processes to exit. 2026-07-01T07:17:29.692977-05:00 claude-cloud systemd-logind[853]: Removed session c5545. 2026-07-01T07:18:16.121946-05:00 claude-cloud systemd-logind[853]: New session c5546 of user claude. 2026-07-01T07:18:16.768927-05:00 claude-cloud systemd-logind[853]: Session c5546 logged out. Waiting for processes to exit. 2026-07-01T07:18:16.770882-05:00 claude-cloud systemd-logind[853]: Removed session c5546. 2026-07-01T07:19:03.188588-05:00 claude-cloud systemd-logind[853]: New session c5547 of user claude. 2026-07-01T07:19:03.848088-05:00 claude-cloud systemd-logind[853]: Session c5547 logged out. Waiting for processes to exit. 2026-07-01T07:19:03.849956-05:00 claude-cloud systemd-logind[853]: Removed session c5547. 2026-07-01T07:19:40.755454-05:00 claude-cloud sshd[968970]: Connection closed by authenticating user root 27.71.230.31 port 36462 [preauth] 2026-07-01T07:19:50.315288-05:00 claude-cloud systemd-logind[853]: New session c5548 of user claude. 2026-07-01T07:19:50.895711-05:00 claude-cloud systemd-logind[853]: Session c5548 logged out. Waiting for processes to exit. 2026-07-01T07:19:50.897796-05:00 claude-cloud systemd-logind[853]: Removed session c5548. 2026-07-01T07:20:23.898207-05:00 claude-cloud sshd[969143]: Connection reset by authenticating user root 45.148.10.141 port 7900 [preauth] 2026-07-01T07:20:37.307743-05:00 claude-cloud systemd-logind[853]: New session c5549 of user claude. 2026-07-01T07:20:37.879872-05:00 claude-cloud systemd-logind[853]: Session c5549 logged out. Waiting for processes to exit. 2026-07-01T07:20:37.882040-05:00 claude-cloud systemd-logind[853]: Removed session c5549. 2026-07-01T07:21:24.323399-05:00 claude-cloud systemd-logind[853]: New session c5550 of user claude. 2026-07-01T07:21:24.919849-05:00 claude-cloud systemd-logind[853]: Session c5550 logged out. Waiting for processes to exit. 2026-07-01T07:21:24.921893-05:00 claude-cloud systemd-logind[853]: Removed session c5550. 2026-07-01T07:21:49.993819-05:00 claude-cloud systemd-logind[853]: New session c5551 of user claude. 2026-07-01T07:21:50.260795-05:00 claude-cloud systemd-logind[853]: Session c5551 logged out. Waiting for processes to exit. 2026-07-01T07:21:50.263554-05:00 claude-cloud systemd-logind[853]: Removed session c5551. 2026-07-01T07:22:12.233314-05:00 claude-cloud systemd-logind[853]: New session c5552 of user claude. 2026-07-01T07:22:12.777957-05:00 claude-cloud systemd-logind[853]: Session c5552 logged out. Waiting for processes to exit. 2026-07-01T07:22:12.779745-05:00 claude-cloud systemd-logind[853]: Removed session c5552. 2026-07-01T07:22:59.211061-05:00 claude-cloud systemd-logind[853]: New session c5553 of user claude. 2026-07-01T07:22:59.888005-05:00 claude-cloud systemd-logind[853]: Session c5553 logged out. Waiting for processes to exit. 2026-07-01T07:22:59.889609-05:00 claude-cloud systemd-logind[853]: Removed session c5553. 2026-07-01T07:23:46.741356-05:00 claude-cloud systemd-logind[853]: New session c5554 of user claude. 2026-07-01T07:23:47.415992-05:00 claude-cloud systemd-logind[853]: Session c5554 logged out. Waiting for processes to exit. 2026-07-01T07:23:47.416828-05:00 claude-cloud systemd-logind[853]: Removed session c5554. 2026-07-01T07:24:33.733617-05:00 claude-cloud systemd-logind[853]: New session c5555 of user claude. 2026-07-01T07:24:34.335491-05:00 claude-cloud systemd-logind[853]: Session c5555 logged out. Waiting for processes to exit. 2026-07-01T07:24:34.336930-05:00 claude-cloud systemd-logind[853]: Removed session c5555. 2026-07-01T07:24:58.503709-05:00 claude-cloud sshd[970128]: Invalid user scheduler from 103.172.236.15 port 45332 2026-07-01T07:24:58.704067-05:00 claude-cloud sshd[970128]: Received disconnect from 103.172.236.15 port 45332:11: Bye Bye [preauth] 2026-07-01T07:24:58.704416-05:00 claude-cloud sshd[970128]: Disconnected from invalid user scheduler 103.172.236.15 port 45332 [preauth] 2026-07-01T07:25:02.003150-05:00 claude-cloud CRON[970130]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T07:25:02.010000-05:00 claude-cloud CRON[970130]: pam_unix(cron:session): session closed for user root 2026-07-01T07:25:20.733059-05:00 claude-cloud systemd-logind[853]: New session c5556 of user claude. 2026-07-01T07:25:21.332133-05:00 claude-cloud systemd-logind[853]: Session c5556 logged out. Waiting for processes to exit. 2026-07-01T07:25:21.334483-05:00 claude-cloud systemd-logind[853]: Removed session c5556. 2026-07-01T07:25:22.259517-05:00 claude-cloud sshd[970180]: Invalid user ubuntu from 45.198.224.46 port 36544 2026-07-01T07:25:22.941208-05:00 claude-cloud sshd[970180]: Connection closed by invalid user ubuntu 45.198.224.46 port 36544 [preauth] 2026-07-01T07:25:48.343374-05:00 claude-cloud sshd[970269]: Connection reset by authenticating user root 45.227.254.170 port 53202 [preauth] 2026-07-01T07:26:07.766065-05:00 claude-cloud systemd-logind[853]: New session c5557 of user claude. 2026-07-01T07:26:08.425827-05:00 claude-cloud systemd-logind[853]: Session c5557 logged out. Waiting for processes to exit. 2026-07-01T07:26:08.427775-05:00 claude-cloud systemd-logind[853]: Removed session c5557. 2026-07-01T07:26:17.053320-05:00 claude-cloud sshd[970345]: Received disconnect from 45.252.188.23 port 53226:11: disconnected by user [preauth] 2026-07-01T07:26:17.053924-05:00 claude-cloud sshd[970345]: Disconnected from authenticating user root 45.252.188.23 port 53226 [preauth] 2026-07-01T07:26:53.360649-05:00 claude-cloud systemd-logind[853]: New session c5558 of user claude. 2026-07-01T07:26:53.877593-05:00 claude-cloud systemd-logind[853]: Session c5558 logged out. Waiting for processes to exit. 2026-07-01T07:26:53.878308-05:00 claude-cloud systemd-logind[853]: Removed session c5558. 2026-07-01T07:26:54.772540-05:00 claude-cloud systemd-logind[853]: New session c5559 of user claude. 2026-07-01T07:26:55.368572-05:00 claude-cloud systemd-logind[853]: Session c5559 logged out. Waiting for processes to exit. 2026-07-01T07:26:55.372204-05:00 claude-cloud systemd-logind[853]: Removed session c5559. 2026-07-01T07:27:16.229911-05:00 claude-cloud sshd[970606]: Invalid user sf from 103.172.236.15 port 38088 2026-07-01T07:27:16.429592-05:00 claude-cloud sshd[970606]: Received disconnect from 103.172.236.15 port 38088:11: Bye Bye [preauth] 2026-07-01T07:27:16.429976-05:00 claude-cloud sshd[970606]: Disconnected from invalid user sf 103.172.236.15 port 38088 [preauth] 2026-07-01T07:27:41.795658-05:00 claude-cloud systemd-logind[853]: New session c5560 of user claude. 2026-07-01T07:27:42.421699-05:00 claude-cloud systemd-logind[853]: Session c5560 logged out. Waiting for processes to exit. 2026-07-01T07:27:42.424403-05:00 claude-cloud systemd-logind[853]: Removed session c5560. 2026-07-01T07:28:28.731128-05:00 claude-cloud systemd-logind[853]: New session c5561 of user claude. 2026-07-01T07:28:29.369371-05:00 claude-cloud systemd-logind[853]: Session c5561 logged out. Waiting for processes to exit. 2026-07-01T07:28:29.371005-05:00 claude-cloud systemd-logind[853]: Removed session c5561. 2026-07-01T07:28:51.183859-05:00 claude-cloud sshd[970904]: Connection closed by authenticating user root 45.148.10.121 port 43130 [preauth] 2026-07-01T07:29:16.370268-05:00 claude-cloud systemd-logind[853]: New session c5562 of user claude. 2026-07-01T07:29:17.009089-05:00 claude-cloud systemd-logind[853]: Session c5562 logged out. Waiting for processes to exit. 2026-07-01T07:29:17.011800-05:00 claude-cloud systemd-logind[853]: Removed session c5562. 2026-07-01T07:29:35.206493-05:00 claude-cloud sshd[971037]: Invalid user anal from 103.172.236.15 port 34016 2026-07-01T07:29:35.410409-05:00 claude-cloud sshd[971037]: Received disconnect from 103.172.236.15 port 34016:11: Bye Bye [preauth] 2026-07-01T07:29:35.410784-05:00 claude-cloud sshd[971037]: Disconnected from invalid user anal 103.172.236.15 port 34016 [preauth] 2026-07-01T07:30:04.071606-05:00 claude-cloud systemd-logind[853]: New session c5563 of user claude. 2026-07-01T07:30:04.664581-05:00 claude-cloud systemd-logind[853]: Session c5563 logged out. Waiting for processes to exit. 2026-07-01T07:30:04.665757-05:00 claude-cloud systemd-logind[853]: Removed session c5563. 2026-07-01T07:30:50.970613-05:00 claude-cloud systemd-logind[853]: New session c5564 of user claude. 2026-07-01T07:30:51.557776-05:00 claude-cloud systemd-logind[853]: Session c5564 logged out. Waiting for processes to exit. 2026-07-01T07:30:51.559518-05:00 claude-cloud systemd-logind[853]: Removed session c5564. 2026-07-01T07:31:11.357018-05:00 claude-cloud sshd[971348]: Connection reset by authenticating user root 45.148.10.141 port 19334 [preauth] 2026-07-01T07:31:31.481372-05:00 claude-cloud sshd[971357]: Connection closed by authenticating user root 27.71.230.31 port 39376 [preauth] 2026-07-01T07:31:37.996854-05:00 claude-cloud systemd-logind[853]: New session c5565 of user claude. 2026-07-01T07:31:38.619884-05:00 claude-cloud systemd-logind[853]: Session c5565 logged out. Waiting for processes to exit. 2026-07-01T07:31:38.621339-05:00 claude-cloud systemd-logind[853]: Removed session c5565. 2026-07-01T07:31:49.232667-05:00 claude-cloud sshd[971498]: Invalid user bubbles from 103.172.236.15 port 45978 2026-07-01T07:31:49.430371-05:00 claude-cloud sshd[971498]: Received disconnect from 103.172.236.15 port 45978:11: Bye Bye [preauth] 2026-07-01T07:31:49.430683-05:00 claude-cloud sshd[971498]: Disconnected from invalid user bubbles 103.172.236.15 port 45978 [preauth] 2026-07-01T07:31:57.188020-05:00 claude-cloud systemd-logind[853]: New session c5566 of user claude. 2026-07-01T07:31:57.694590-05:00 claude-cloud systemd-logind[853]: Session c5566 logged out. Waiting for processes to exit. 2026-07-01T07:31:57.696626-05:00 claude-cloud systemd-logind[853]: Removed session c5566. 2026-07-01T07:32:25.188261-05:00 claude-cloud systemd-logind[853]: New session c5567 of user claude. 2026-07-01T07:32:25.838516-05:00 claude-cloud systemd-logind[853]: Session c5567 logged out. Waiting for processes to exit. 2026-07-01T07:32:25.840233-05:00 claude-cloud systemd-logind[853]: Removed session c5567. 2026-07-01T07:32:42.082156-05:00 claude-cloud systemd-logind[853]: New session c5568 of user claude. 2026-07-01T07:32:44.656509-05:00 claude-cloud systemd-logind[853]: Session c5568 logged out. Waiting for processes to exit. 2026-07-01T07:32:44.658179-05:00 claude-cloud systemd-logind[853]: Removed session c5568. 2026-07-01T07:33:13.663724-05:00 claude-cloud systemd-logind[853]: New session c5569 of user claude. 2026-07-01T07:33:14.752745-05:00 claude-cloud systemd-logind[853]: Session c5569 logged out. Waiting for processes to exit. 2026-07-01T07:33:14.753525-05:00 claude-cloud systemd-logind[853]: Removed session c5569. 2026-07-01T07:34:06.727053-05:00 claude-cloud sshd[972038]: Invalid user enter from 103.172.236.15 port 48192 2026-07-01T07:34:06.926133-05:00 claude-cloud sshd[972038]: Received disconnect from 103.172.236.15 port 48192:11: Bye Bye [preauth] 2026-07-01T07:34:06.926422-05:00 claude-cloud sshd[972038]: Disconnected from invalid user enter 103.172.236.15 port 48192 [preauth] 2026-07-01T07:34:51.018908-05:00 claude-cloud sshd[972170]: Invalid user tom from 2.57.121.112 port 55650 2026-07-01T07:34:51.044480-05:00 claude-cloud sshd[972170]: Connection closed by invalid user tom 2.57.121.112 port 55650 [preauth] 2026-07-01T07:35:01.023532-05:00 claude-cloud CRON[972192]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T07:35:01.030317-05:00 claude-cloud CRON[972192]: pam_unix(cron:session): session closed for user root 2026-07-01T07:35:02.115021-05:00 claude-cloud systemd-logind[853]: New session c5570 of user claude. 2026-07-01T07:35:03.649816-05:00 claude-cloud systemd-logind[853]: Session c5570 logged out. Waiting for processes to exit. 2026-07-01T07:35:03.650131-05:00 claude-cloud systemd-logind[853]: Removed session c5570. 2026-07-01T07:35:03.790322-05:00 claude-cloud sshd[972195]: Invalid user web1 from 45.198.224.46 port 48262 2026-07-01T07:35:04.423949-05:00 claude-cloud sshd[972195]: Connection closed by invalid user web1 45.198.224.46 port 48262 [preauth] 2026-07-01T07:36:02.075334-05:00 claude-cloud sshd[972390]: Connection closed by authenticating user root 2.57.122.168 port 39410 [preauth] 2026-07-01T07:36:42.035202-05:00 claude-cloud sshd[972513]: Connection reset by authenticating user root 62.60.130.219 port 25352 [preauth] 2026-07-01T07:36:58.620396-05:00 claude-cloud systemd-logind[853]: New session c5571 of user claude. 2026-07-01T07:36:59.747777-05:00 claude-cloud systemd-logind[853]: Session c5571 logged out. Waiting for processes to exit. 2026-07-01T07:36:59.751062-05:00 claude-cloud systemd-logind[853]: Removed session c5571. 2026-07-01T07:37:00.903620-05:00 claude-cloud systemd-logind[853]: New session c5572 of user claude. 2026-07-01T07:37:01.000392-05:00 claude-cloud systemd-logind[853]: New session c5573 of user claude. 2026-07-01T07:37:01.222849-05:00 claude-cloud systemd-logind[853]: Session c5572 logged out. Waiting for processes to exit. 2026-07-01T07:37:01.224176-05:00 claude-cloud systemd-logind[853]: Removed session c5572. 2026-07-01T07:37:01.414694-05:00 claude-cloud systemd-logind[853]: Session c5573 logged out. Waiting for processes to exit. 2026-07-01T07:37:01.416510-05:00 claude-cloud systemd-logind[853]: Removed session c5573. 2026-07-01T07:37:21.760629-05:00 claude-cloud sshd[972664]: Connection closed by authenticating user root 27.71.230.31 port 60584 [preauth] 2026-07-01T07:37:21.841776-05:00 claude-cloud systemd-logind[853]: New session c5574 of user claude. 2026-07-01T07:37:23.694214-05:00 claude-cloud systemd-logind[853]: Session c5574 logged out. Waiting for processes to exit. 2026-07-01T07:37:23.695378-05:00 claude-cloud systemd-logind[853]: Removed session c5574. 2026-07-01T07:38:36.662181-05:00 claude-cloud sshd[973017]: Connection closed by authenticating user root 2.57.122.168 port 42564 [preauth] 2026-07-01T07:39:33.583046-05:00 claude-cloud systemd-logind[853]: New session c5575 of user claude. 2026-07-01T07:39:34.421235-05:00 claude-cloud systemd-logind[853]: Session c5575 logged out. Waiting for processes to exit. 2026-07-01T07:39:34.422355-05:00 claude-cloud systemd-logind[853]: Removed session c5575. 2026-07-01T07:39:35.720569-05:00 claude-cloud systemd-logind[853]: New session c5576 of user claude. 2026-07-01T07:39:36.562987-05:00 claude-cloud systemd-logind[853]: Session c5576 logged out. Waiting for processes to exit. 2026-07-01T07:39:36.565654-05:00 claude-cloud systemd-logind[853]: Removed session c5576. 2026-07-01T07:39:37.829375-05:00 claude-cloud systemd-logind[853]: New session c5577 of user claude. 2026-07-01T07:39:40.081497-05:00 claude-cloud systemd-logind[853]: Session c5577 logged out. Waiting for processes to exit. 2026-07-01T07:39:40.082592-05:00 claude-cloud systemd-logind[853]: Removed session c5577. 2026-07-01T07:39:58.499473-05:00 claude-cloud systemd-logind[853]: New session c5578 of user claude. 2026-07-01T07:39:59.145546-05:00 claude-cloud systemd-logind[853]: Session c5578 logged out. Waiting for processes to exit. 2026-07-01T07:39:59.147377-05:00 claude-cloud systemd-logind[853]: Removed session c5578. 2026-07-01T07:40:42.630911-05:00 claude-cloud sshd[973523]: Invalid user ubuntu from 185.242.3.195 port 44924 2026-07-01T07:40:42.639325-05:00 claude-cloud sshd[973523]: Connection closed by invalid user ubuntu 185.242.3.195 port 44924 [preauth] 2026-07-01T07:40:45.540133-05:00 claude-cloud systemd-logind[853]: New session c5579 of user claude. 2026-07-01T07:40:46.217574-05:00 claude-cloud systemd-logind[853]: Session c5579 logged out. Waiting for processes to exit. 2026-07-01T07:40:46.219909-05:00 claude-cloud systemd-logind[853]: Removed session c5579. 2026-07-01T07:41:22.811399-05:00 claude-cloud sshd[973650]: Connection closed by authenticating user root 2.57.122.168 port 45706 [preauth] 2026-07-01T07:41:32.642944-05:00 claude-cloud systemd-logind[853]: New session c5580 of user claude. 2026-07-01T07:41:33.306360-05:00 claude-cloud systemd-logind[853]: Session c5580 logged out. Waiting for processes to exit. 2026-07-01T07:41:33.308404-05:00 claude-cloud systemd-logind[853]: Removed session c5580. 2026-07-01T07:42:04.481599-05:00 claude-cloud systemd-logind[853]: New session c5581 of user claude. 2026-07-01T07:42:04.948858-05:00 claude-cloud systemd-logind[853]: Session c5581 logged out. Waiting for processes to exit. 2026-07-01T07:42:04.950387-05:00 claude-cloud systemd-logind[853]: Removed session c5581. 2026-07-01T07:42:08.971857-05:00 claude-cloud sshd[973799]: Connection reset by authenticating user root 45.148.10.147 port 20362 [preauth] 2026-07-01T07:42:19.740242-05:00 claude-cloud systemd-logind[853]: New session c5582 of user claude. 2026-07-01T07:42:20.372312-05:00 claude-cloud systemd-logind[853]: Session c5582 logged out. Waiting for processes to exit. 2026-07-01T07:42:20.374535-05:00 claude-cloud systemd-logind[853]: Removed session c5582. 2026-07-01T07:43:06.797646-05:00 claude-cloud systemd-logind[853]: New session c5583 of user claude. 2026-07-01T07:43:07.485562-05:00 claude-cloud systemd-logind[853]: Session c5583 logged out. Waiting for processes to exit. 2026-07-01T07:43:07.487093-05:00 claude-cloud systemd-logind[853]: Removed session c5583. 2026-07-01T07:43:53.903242-05:00 claude-cloud systemd-logind[853]: New session c5584 of user claude. 2026-07-01T07:43:54.576812-05:00 claude-cloud systemd-logind[853]: Session c5584 logged out. Waiting for processes to exit. 2026-07-01T07:43:54.579230-05:00 claude-cloud systemd-logind[853]: Removed session c5584. 2026-07-01T07:44:11.729901-05:00 claude-cloud sshd[974271]: Connection closed by authenticating user root 2.57.122.168 port 48798 [preauth] 2026-07-01T07:44:41.057652-05:00 claude-cloud systemd-logind[853]: New session c5585 of user claude. 2026-07-01T07:44:41.812795-05:00 claude-cloud systemd-logind[853]: Session c5585 logged out. Waiting for processes to exit. 2026-07-01T07:44:41.814600-05:00 claude-cloud systemd-logind[853]: Removed session c5585. 2026-07-01T07:44:43.425103-05:00 claude-cloud sshd[974355]: Connection closed by authenticating user root 45.198.224.46 port 54646 [preauth] 2026-07-01T07:45:01.040935-05:00 claude-cloud CRON[974403]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T07:45:01.048123-05:00 claude-cloud CRON[974403]: pam_unix(cron:session): session closed for user root 2026-07-01T07:45:28.255783-05:00 claude-cloud systemd-logind[853]: New session c5586 of user claude. 2026-07-01T07:45:28.970817-05:00 claude-cloud systemd-logind[853]: Session c5586 logged out. Waiting for processes to exit. 2026-07-01T07:45:28.973065-05:00 claude-cloud systemd-logind[853]: Removed session c5586. 2026-07-01T07:45:50.701537-05:00 claude-cloud sshd[974587]: Invalid user external from 103.172.236.15 port 45118 2026-07-01T07:45:50.903107-05:00 claude-cloud sshd[974587]: Received disconnect from 103.172.236.15 port 45118:11: Bye Bye [preauth] 2026-07-01T07:45:50.903596-05:00 claude-cloud sshd[974587]: Disconnected from invalid user external 103.172.236.15 port 45118 [preauth] 2026-07-01T07:46:15.394395-05:00 claude-cloud systemd-logind[853]: New session c5587 of user claude. 2026-07-01T07:46:15.985078-05:00 claude-cloud systemd-logind[853]: Session c5587 logged out. Waiting for processes to exit. 2026-07-01T07:46:15.986771-05:00 claude-cloud systemd-logind[853]: Removed session c5587. 2026-07-01T07:46:59.843103-05:00 claude-cloud sshd[974797]: Connection closed by authenticating user root 2.57.122.168 port 51890 [preauth] 2026-07-01T07:47:02.385518-05:00 claude-cloud systemd-logind[853]: New session c5588 of user claude. 2026-07-01T07:47:02.949052-05:00 claude-cloud systemd-logind[853]: Session c5588 logged out. Waiting for processes to exit. 2026-07-01T07:47:02.953703-05:00 claude-cloud systemd-logind[853]: Removed session c5588. 2026-07-01T07:47:08.301567-05:00 claude-cloud systemd-logind[853]: New session c5589 of user claude. 2026-07-01T07:47:08.597692-05:00 claude-cloud systemd-logind[853]: Session c5589 logged out. Waiting for processes to exit. 2026-07-01T07:47:08.600551-05:00 claude-cloud systemd-logind[853]: Removed session c5589. 2026-07-01T07:47:33.987394-05:00 claude-cloud sshd[974938]: Connection reset by authenticating user root 62.60.130.219 port 49662 [preauth] 2026-07-01T07:47:49.279700-05:00 claude-cloud systemd-logind[853]: New session c5590 of user claude. 2026-07-01T07:47:49.912844-05:00 claude-cloud systemd-logind[853]: Session c5590 logged out. Waiting for processes to exit. 2026-07-01T07:47:49.914886-05:00 claude-cloud systemd-logind[853]: Removed session c5590. 2026-07-01T07:48:10.568991-05:00 claude-cloud sshd[975054]: Invalid user cna from 103.172.236.15 port 41176 2026-07-01T07:48:10.769644-05:00 claude-cloud sshd[975054]: Received disconnect from 103.172.236.15 port 41176:11: Bye Bye [preauth] 2026-07-01T07:48:10.769998-05:00 claude-cloud sshd[975054]: Disconnected from invalid user cna 103.172.236.15 port 41176 [preauth] 2026-07-01T07:48:36.381839-05:00 claude-cloud systemd-logind[853]: New session c5591 of user claude. 2026-07-01T07:48:36.993908-05:00 claude-cloud systemd-logind[853]: Session c5591 logged out. Waiting for processes to exit. 2026-07-01T07:48:36.995175-05:00 claude-cloud systemd-logind[853]: Removed session c5591. 2026-07-01T07:49:23.406959-05:00 claude-cloud systemd-logind[853]: New session c5592 of user claude. 2026-07-01T07:49:24.123923-05:00 claude-cloud systemd-logind[853]: Session c5592 logged out. Waiting for processes to exit. 2026-07-01T07:49:24.127325-05:00 claude-cloud systemd-logind[853]: Removed session c5592. 2026-07-01T07:49:44.850766-05:00 claude-cloud sshd[975332]: Connection closed by authenticating user root 2.57.122.168 port 54980 [preauth] 2026-07-01T07:50:10.547128-05:00 claude-cloud systemd-logind[853]: New session c5593 of user claude. 2026-07-01T07:50:11.165060-05:00 claude-cloud systemd-logind[853]: Session c5593 logged out. Waiting for processes to exit. 2026-07-01T07:50:11.166947-05:00 claude-cloud systemd-logind[853]: Removed session c5593. 2026-07-01T07:50:57.613852-05:00 claude-cloud systemd-logind[853]: New session c5594 of user claude. 2026-07-01T07:50:58.297393-05:00 claude-cloud systemd-logind[853]: Session c5594 logged out. Waiting for processes to exit. 2026-07-01T07:50:58.300041-05:00 claude-cloud systemd-logind[853]: Removed session c5594. 2026-07-01T07:51:44.794474-05:00 claude-cloud systemd-logind[853]: New session c5595 of user claude. 2026-07-01T07:51:45.455083-05:00 claude-cloud systemd-logind[853]: Session c5595 logged out. Waiting for processes to exit. 2026-07-01T07:51:45.457574-05:00 claude-cloud systemd-logind[853]: Removed session c5595. 2026-07-01T07:52:11.816008-05:00 claude-cloud systemd-logind[853]: New session c5596 of user claude. 2026-07-01T07:52:12.110349-05:00 claude-cloud systemd-logind[853]: Session c5596 logged out. Waiting for processes to exit. 2026-07-01T07:52:12.112472-05:00 claude-cloud systemd-logind[853]: Removed session c5596. 2026-07-01T07:52:20.486663-05:00 claude-cloud sshd[975861]: Connection closed by authenticating user root 2.57.122.168 port 58030 [preauth] 2026-07-01T07:52:31.769350-05:00 claude-cloud systemd-logind[853]: New session c5597 of user claude. 2026-07-01T07:52:32.383527-05:00 claude-cloud systemd-logind[853]: Session c5597 logged out. Waiting for processes to exit. 2026-07-01T07:52:32.386229-05:00 claude-cloud systemd-logind[853]: Removed session c5597. 2026-07-01T07:52:54.849747-05:00 claude-cloud sshd[975984]: Connection reset by authenticating user root 45.148.10.151 port 41334 [preauth] 2026-07-01T07:53:18.891781-05:00 claude-cloud systemd-logind[853]: New session c5598 of user claude. 2026-07-01T07:53:19.517677-05:00 claude-cloud systemd-logind[853]: Session c5598 logged out. Waiting for processes to exit. 2026-07-01T07:53:19.519862-05:00 claude-cloud systemd-logind[853]: Removed session c5598. 2026-07-01T07:54:07.584512-05:00 claude-cloud systemd-logind[853]: New session c5599 of user claude. 2026-07-01T07:54:08.267408-05:00 claude-cloud systemd-logind[853]: Session c5599 logged out. Waiting for processes to exit. 2026-07-01T07:54:08.271412-05:00 claude-cloud systemd-logind[853]: Removed session c5599. 2026-07-01T07:54:30.284034-05:00 claude-cloud sshd[976315]: Invalid user events from 45.198.224.46 port 49654 2026-07-01T07:54:30.816009-05:00 claude-cloud sshd[976315]: Connection closed by invalid user events 45.198.224.46 port 49654 [preauth] 2026-07-01T07:54:54.628456-05:00 claude-cloud systemd-logind[853]: New session c5600 of user claude. 2026-07-01T07:54:55.283162-05:00 claude-cloud systemd-logind[853]: Session c5600 logged out. Waiting for processes to exit. 2026-07-01T07:54:55.287020-05:00 claude-cloud systemd-logind[853]: Removed session c5600. 2026-07-01T07:54:59.689160-05:00 claude-cloud sshd[976428]: Connection closed by authenticating user root 2.57.122.168 port 32822 [preauth] 2026-07-01T07:55:01.063236-05:00 claude-cloud CRON[976440]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T07:55:01.070143-05:00 claude-cloud CRON[976440]: pam_unix(cron:session): session closed for user root 2026-07-01T07:55:07.741435-05:00 claude-cloud sshd[976443]: Connection closed by authenticating user root 27.71.230.31 port 53990 [preauth] 2026-07-01T07:55:41.633042-05:00 claude-cloud systemd-logind[853]: New session c5601 of user claude. 2026-07-01T07:55:42.193992-05:00 claude-cloud systemd-logind[853]: Session c5601 logged out. Waiting for processes to exit. 2026-07-01T07:55:42.612553-05:00 claude-cloud systemd-logind[853]: Removed session c5601. 2026-07-01T07:56:28.522143-05:00 claude-cloud systemd-logind[853]: New session c5602 of user claude. 2026-07-01T07:56:29.097827-05:00 claude-cloud systemd-logind[853]: Session c5602 logged out. Waiting for processes to exit. 2026-07-01T07:56:29.099813-05:00 claude-cloud systemd-logind[853]: Removed session c5602. 2026-07-01T07:57:15.453410-05:00 claude-cloud systemd-logind[853]: New session c5603 of user claude. 2026-07-01T07:57:15.684992-05:00 claude-cloud systemd-logind[853]: New session c5604 of user claude. 2026-07-01T07:57:15.993005-05:00 claude-cloud systemd-logind[853]: Session c5603 logged out. Waiting for processes to exit. 2026-07-01T07:57:15.994314-05:00 claude-cloud systemd-logind[853]: Removed session c5603. 2026-07-01T07:57:16.008010-05:00 claude-cloud systemd-logind[853]: Session c5604 logged out. Waiting for processes to exit. 2026-07-01T07:57:16.010079-05:00 claude-cloud systemd-logind[853]: Removed session c5604. 2026-07-01T07:57:30.043148-05:00 claude-cloud sshd[976911]: Connection closed by authenticating user root 2.57.122.168 port 35816 [preauth] 2026-07-01T07:58:02.323477-05:00 claude-cloud systemd-logind[853]: New session c5605 of user claude. 2026-07-01T07:58:02.957346-05:00 claude-cloud systemd-logind[853]: Session c5605 logged out. Waiting for processes to exit. 2026-07-01T07:58:02.958779-05:00 claude-cloud systemd-logind[853]: Removed session c5605. 2026-07-01T07:58:25.173121-05:00 claude-cloud sshd[977093]: Connection reset by authenticating user root 45.148.10.152 port 13236 [preauth] 2026-07-01T07:58:49.254097-05:00 claude-cloud systemd-logind[853]: New session c5606 of user claude. 2026-07-01T07:58:49.817369-05:00 claude-cloud systemd-logind[853]: Session c5606 logged out. Waiting for processes to exit. 2026-07-01T07:58:49.820202-05:00 claude-cloud systemd-logind[853]: Removed session c5606. 2026-07-01T07:59:11.753005-05:00 claude-cloud sshd[977249]: Connection closed by authenticating user root 45.148.10.121 port 42158 [preauth] 2026-07-01T07:59:36.223187-05:00 claude-cloud systemd-logind[853]: New session c5607 of user claude. 2026-07-01T07:59:36.841751-05:00 claude-cloud systemd-logind[853]: Session c5607 logged out. Waiting for processes to exit. 2026-07-01T07:59:36.843466-05:00 claude-cloud systemd-logind[853]: Removed session c5607. 2026-07-01T07:59:37.763932-05:00 claude-cloud sshd[977346]: Received disconnect from 185.65.107.14 port 37584:11: disconnected by user [preauth] 2026-07-01T07:59:37.764315-05:00 claude-cloud sshd[977346]: Disconnected from authenticating user root 185.65.107.14 port 37584 [preauth] 2026-07-01T08:00:04.738216-05:00 claude-cloud sshd[977415]: Connection closed by authenticating user root 2.57.122.168 port 38826 [preauth] 2026-07-01T08:00:24.751015-05:00 claude-cloud systemd-logind[853]: New session c5608 of user claude. 2026-07-01T08:00:25.383062-05:00 claude-cloud systemd-logind[853]: Session c5608 logged out. Waiting for processes to exit. 2026-07-01T08:00:25.385679-05:00 claude-cloud systemd-logind[853]: Removed session c5608. 2026-07-01T08:00:37.891543-05:00 claude-cloud sshd[977526]: Connection closed by authenticating user root 193.46.255.86 port 23106 [preauth] 2026-07-01T08:01:08.643687-05:00 claude-cloud sshd[977770]: Connection closed by authenticating user root 27.71.230.31 port 38638 [preauth] 2026-07-01T08:01:11.687548-05:00 claude-cloud systemd-logind[853]: New session c5609 of user claude. 2026-07-01T08:01:12.333523-05:00 claude-cloud systemd-logind[853]: Session c5609 logged out. Waiting for processes to exit. 2026-07-01T08:01:12.335591-05:00 claude-cloud systemd-logind[853]: Removed session c5609. 2026-07-01T08:01:58.654891-05:00 claude-cloud systemd-logind[853]: New session c5610 of user claude. 2026-07-01T08:01:59.492510-05:00 claude-cloud systemd-logind[853]: Session c5610 logged out. Waiting for processes to exit. 2026-07-01T08:01:59.494769-05:00 claude-cloud systemd-logind[853]: Removed session c5610. 2026-07-01T08:02:19.970962-05:00 claude-cloud systemd-logind[853]: New session c5611 of user claude. 2026-07-01T08:02:20.243952-05:00 claude-cloud systemd-logind[853]: Session c5611 logged out. Waiting for processes to exit. 2026-07-01T08:02:20.245245-05:00 claude-cloud systemd-logind[853]: Removed session c5611. 2026-07-01T08:02:45.836957-05:00 claude-cloud systemd-logind[853]: New session c5612 of user claude. 2026-07-01T08:02:46.452736-05:00 claude-cloud systemd-logind[853]: Session c5612 logged out. Waiting for processes to exit. 2026-07-01T08:02:46.455206-05:00 claude-cloud systemd-logind[853]: Removed session c5612. 2026-07-01T08:02:46.704024-05:00 claude-cloud sshd[978120]: Connection closed by authenticating user root 2.57.122.168 port 41828 [preauth] 2026-07-01T08:03:32.791873-05:00 claude-cloud systemd-logind[853]: New session c5613 of user claude. 2026-07-01T08:03:33.482686-05:00 claude-cloud systemd-logind[853]: Session c5613 logged out. Waiting for processes to exit. 2026-07-01T08:03:33.484611-05:00 claude-cloud systemd-logind[853]: Removed session c5613. 2026-07-01T08:04:12.742513-05:00 claude-cloud sshd[978971]: Connection closed by authenticating user root 45.198.224.46 port 41004 [preauth] 2026-07-01T08:04:19.727401-05:00 claude-cloud systemd-logind[853]: New session c5614 of user claude. 2026-07-01T08:04:20.357119-05:00 claude-cloud systemd-logind[853]: Session c5614 logged out. Waiting for processes to exit. 2026-07-01T08:04:20.359053-05:00 claude-cloud systemd-logind[853]: Removed session c5614. 2026-07-01T08:05:01.080395-05:00 claude-cloud CRON[979210]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T08:05:01.088889-05:00 claude-cloud CRON[979210]: pam_unix(cron:session): session closed for user root 2026-07-01T08:05:06.677177-05:00 claude-cloud systemd-logind[853]: New session c5615 of user claude. 2026-07-01T08:05:07.294856-05:00 claude-cloud systemd-logind[853]: Session c5615 logged out. Waiting for processes to exit. 2026-07-01T08:05:07.296553-05:00 claude-cloud systemd-logind[853]: Removed session c5615. 2026-07-01T08:05:35.665589-05:00 claude-cloud sshd[979317]: Connection closed by authenticating user root 2.57.122.168 port 44858 [preauth] 2026-07-01T08:05:53.625038-05:00 claude-cloud systemd-logind[853]: New session c5616 of user claude. 2026-07-01T08:05:54.385691-05:00 claude-cloud systemd-logind[853]: Session c5616 logged out. Waiting for processes to exit. 2026-07-01T08:05:54.388013-05:00 claude-cloud systemd-logind[853]: Removed session c5616. 2026-07-01T08:06:40.615687-05:00 claude-cloud systemd-logind[853]: New session c5617 of user claude. 2026-07-01T08:06:41.239178-05:00 claude-cloud systemd-logind[853]: Session c5617 logged out. Waiting for processes to exit. 2026-07-01T08:06:41.241802-05:00 claude-cloud systemd-logind[853]: Removed session c5617. 2026-07-01T08:06:54.707212-05:00 claude-cloud systemd-logind[853]: New session c5618 of user claude. 2026-07-01T08:06:54.751340-05:00 claude-cloud systemd-logind[853]: Session c5618 logged out. Waiting for processes to exit. 2026-07-01T08:06:54.752744-05:00 claude-cloud systemd-logind[853]: Removed session c5618. 2026-07-01T08:07:10.347902-05:00 claude-cloud sshd[979636]: Connection closed by authenticating user root 27.71.230.31 port 42514 [preauth] 2026-07-01T08:07:23.500023-05:00 claude-cloud systemd-logind[853]: New session c5619 of user claude. 2026-07-01T08:07:23.759921-05:00 claude-cloud systemd-logind[853]: New session c5620 of user claude. 2026-07-01T08:07:23.807862-05:00 claude-cloud systemd-logind[853]: Session c5620 logged out. Waiting for processes to exit. 2026-07-01T08:07:23.809453-05:00 claude-cloud systemd-logind[853]: Removed session c5620. 2026-07-01T08:07:24.007694-05:00 claude-cloud systemd-logind[853]: Session c5619 logged out. Waiting for processes to exit. 2026-07-01T08:07:24.009239-05:00 claude-cloud systemd-logind[853]: Removed session c5619. 2026-07-01T08:07:40.958939-05:00 claude-cloud systemd-logind[853]: New session c5621 of user claude. 2026-07-01T08:07:42.681614-05:00 claude-cloud systemd-logind[853]: Session c5621 logged out. Waiting for processes to exit. 2026-07-01T08:07:42.682926-05:00 claude-cloud systemd-logind[853]: Removed session c5621. 2026-07-01T08:08:02.261132-05:00 claude-cloud sshd[979834]: Invalid user admin from 2.57.121.25 port 24618 2026-07-01T08:08:02.325626-05:00 claude-cloud sshd[979834]: Connection closed by invalid user admin 2.57.121.25 port 24618 [preauth] 2026-07-01T08:08:10.828812-05:00 claude-cloud sshd[979864]: Connection closed by authenticating user root 2.57.122.168 port 47886 [preauth] 2026-07-01T08:08:41.801900-05:00 claude-cloud systemd-logind[853]: New session c5622 of user claude. 2026-07-01T08:08:42.651363-05:00 claude-cloud systemd-logind[853]: Session c5622 logged out. Waiting for processes to exit. 2026-07-01T08:08:42.653949-05:00 claude-cloud systemd-logind[853]: Removed session c5622. 2026-07-01T08:08:43.831720-05:00 claude-cloud systemd-logind[853]: New session c5623 of user claude. 2026-07-01T08:08:44.925855-05:00 claude-cloud systemd-logind[853]: Session c5623 logged out. Waiting for processes to exit. 2026-07-01T08:08:44.926463-05:00 claude-cloud systemd-logind[853]: Removed session c5623. 2026-07-01T08:10:48.778071-05:00 claude-cloud sshd[980434]: Connection closed by authenticating user root 2.57.122.168 port 50906 [preauth] 2026-07-01T08:10:58.172063-05:00 claude-cloud systemd-logind[853]: New session c5624 of user claude. 2026-07-01T08:10:58.195387-05:00 claude-cloud systemd-logind[853]: New session c5625 of user claude. 2026-07-01T08:10:58.234835-05:00 claude-cloud systemd-logind[853]: Session c5624 logged out. Waiting for processes to exit. 2026-07-01T08:10:58.237693-05:00 claude-cloud systemd-logind[853]: Removed session c5624. 2026-07-01T08:10:58.241340-05:00 claude-cloud systemd-logind[853]: Session c5625 logged out. Waiting for processes to exit. 2026-07-01T08:10:58.242420-05:00 claude-cloud systemd-logind[853]: Removed session c5625. 2026-07-01T08:11:00.454057-05:00 claude-cloud systemd-logind[853]: New session c5626 of user claude. 2026-07-01T08:11:02.060072-05:00 claude-cloud systemd-logind[853]: Session c5626 logged out. Waiting for processes to exit. 2026-07-01T08:11:02.061537-05:00 claude-cloud systemd-logind[853]: Removed session c5626. 2026-07-01T08:11:19.769057-05:00 claude-cloud systemd-logind[853]: New session c5627 of user claude. 2026-07-01T08:11:20.394061-05:00 claude-cloud systemd-logind[853]: Session c5627 logged out. Waiting for processes to exit. 2026-07-01T08:11:20.396614-05:00 claude-cloud systemd-logind[853]: Removed session c5627. 2026-07-01T08:11:33.928113-05:00 claude-cloud systemd-logind[853]: New session c5628 of user claude. 2026-07-01T08:11:34.609115-05:00 claude-cloud systemd-logind[853]: Session c5628 logged out. Waiting for processes to exit. 2026-07-01T08:11:34.611652-05:00 claude-cloud systemd-logind[853]: Removed session c5628. 2026-07-01T08:11:55.307277-05:00 claude-cloud systemd-logind[853]: New session c5629 of user claude. 2026-07-01T08:11:55.353735-05:00 claude-cloud systemd-logind[853]: Session c5629 logged out. Waiting for processes to exit. 2026-07-01T08:11:55.356602-05:00 claude-cloud systemd-logind[853]: Removed session c5629. 2026-07-01T08:11:57.044318-05:00 claude-cloud systemd-logind[853]: New session c5630 of user claude. 2026-07-01T08:11:57.420938-05:00 claude-cloud systemd-logind[853]: Session c5630 logged out. Waiting for processes to exit. 2026-07-01T08:11:57.422866-05:00 claude-cloud systemd-logind[853]: Removed session c5630. 2026-07-01T08:12:27.335868-05:00 claude-cloud systemd-logind[853]: New session c5631 of user claude. 2026-07-01T08:12:27.858141-05:00 claude-cloud systemd-logind[853]: Session c5631 logged out. Waiting for processes to exit. 2026-07-01T08:12:27.860753-05:00 claude-cloud systemd-logind[853]: Removed session c5631. 2026-07-01T08:12:35.323814-05:00 claude-cloud systemd-logind[853]: New session c5632 of user claude. 2026-07-01T08:12:36.483348-05:00 claude-cloud systemd-logind[853]: Session c5632 logged out. Waiting for processes to exit. 2026-07-01T08:12:36.485245-05:00 claude-cloud systemd-logind[853]: Removed session c5632. 2026-07-01T08:12:37.771416-05:00 claude-cloud systemd-logind[853]: New session c5633 of user claude. 2026-07-01T08:12:38.172133-05:00 claude-cloud systemd-logind[853]: Session c5633 logged out. Waiting for processes to exit. 2026-07-01T08:12:38.173654-05:00 claude-cloud systemd-logind[853]: Removed session c5633. 2026-07-01T08:13:02.317101-05:00 claude-cloud sshd[981218]: Connection closed by authenticating user root 27.71.230.31 port 53008 [preauth] 2026-07-01T08:13:09.722225-05:00 claude-cloud systemd-logind[853]: New session c5634 of user claude. 2026-07-01T08:13:11.556583-05:00 claude-cloud systemd-logind[853]: Session c5634 logged out. Waiting for processes to exit. 2026-07-01T08:13:11.559201-05:00 claude-cloud systemd-logind[853]: Removed session c5634. 2026-07-01T08:13:47.953649-05:00 claude-cloud sshd[981513]: Connection closed by authenticating user root 45.198.224.46 port 60598 [preauth] 2026-07-01T08:13:49.232216-05:00 claude-cloud systemd-logind[853]: New session c5635 of user claude. 2026-07-01T08:13:50.076823-05:00 claude-cloud systemd-logind[853]: Session c5635 logged out. Waiting for processes to exit. 2026-07-01T08:13:50.079807-05:00 claude-cloud systemd-logind[853]: Removed session c5635. 2026-07-01T08:13:51.352548-05:00 claude-cloud systemd-logind[853]: New session c5636 of user claude. 2026-07-01T08:13:54.938845-05:00 claude-cloud sshd[981590]: Connection closed by authenticating user root 2.57.122.168 port 53924 [preauth] 2026-07-01T08:13:58.625909-05:00 claude-cloud systemd-logind[853]: Session c5636 logged out. Waiting for processes to exit. 2026-07-01T08:13:58.629139-05:00 claude-cloud systemd-logind[853]: Removed session c5636. 2026-07-01T08:14:42.876733-05:00 claude-cloud systemd-logind[853]: New session c5637 of user claude. 2026-07-01T08:14:43.703886-05:00 claude-cloud systemd-logind[853]: Session c5637 logged out. Waiting for processes to exit. 2026-07-01T08:14:43.705909-05:00 claude-cloud systemd-logind[853]: Removed session c5637. 2026-07-01T08:14:44.982955-05:00 claude-cloud systemd-logind[853]: New session c5638 of user claude. 2026-07-01T08:14:45.619924-05:00 claude-cloud systemd-logind[853]: Session c5638 logged out. Waiting for processes to exit. 2026-07-01T08:14:45.621923-05:00 claude-cloud systemd-logind[853]: Removed session c5638. 2026-07-01T08:14:57.837164-05:00 claude-cloud systemd-logind[853]: New session c5639 of user claude. 2026-07-01T08:14:58.572987-05:00 claude-cloud systemd-logind[853]: Session c5639 logged out. Waiting for processes to exit. 2026-07-01T08:14:58.574139-05:00 claude-cloud systemd-logind[853]: Removed session c5639. 2026-07-01T08:15:01.101906-05:00 claude-cloud CRON[982008]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T08:15:01.108645-05:00 claude-cloud CRON[982008]: pam_unix(cron:session): session closed for user root 2026-07-01T08:15:44.919003-05:00 claude-cloud systemd-logind[853]: New session c5640 of user claude. 2026-07-01T08:15:45.571685-05:00 claude-cloud systemd-logind[853]: Session c5640 logged out. Waiting for processes to exit. 2026-07-01T08:15:45.573098-05:00 claude-cloud systemd-logind[853]: Removed session c5640. 2026-07-01T08:16:13.510682-05:00 claude-cloud systemd-logind[853]: New session c5641 of user claude. 2026-07-01T08:16:14.761609-05:00 claude-cloud systemd-logind[853]: Session c5641 logged out. Waiting for processes to exit. 2026-07-01T08:16:14.763364-05:00 claude-cloud systemd-logind[853]: Removed session c5641. 2026-07-01T08:16:51.466482-05:00 claude-cloud systemd-logind[853]: New session c5642 of user claude. 2026-07-01T08:16:52.580896-05:00 claude-cloud systemd-logind[853]: Session c5642 logged out. Waiting for processes to exit. 2026-07-01T08:16:52.582551-05:00 claude-cloud systemd-logind[853]: Removed session c5642. 2026-07-01T08:17:01.115736-05:00 claude-cloud CRON[982398]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T08:17:01.121249-05:00 claude-cloud CRON[982398]: pam_unix(cron:session): session closed for user root 2026-07-01T08:17:06.567928-05:00 claude-cloud sshd[982421]: Connection closed by authenticating user root 2.57.122.168 port 56914 [preauth] 2026-07-01T08:17:33.276506-05:00 claude-cloud systemd-logind[853]: New session c5643 of user claude. 2026-07-01T08:17:33.826475-05:00 claude-cloud systemd-logind[853]: Session c5643 logged out. Waiting for processes to exit. 2026-07-01T08:17:33.828050-05:00 claude-cloud systemd-logind[853]: Removed session c5643. 2026-07-01T08:17:47.571768-05:00 claude-cloud systemd-logind[853]: New session c5644 of user claude. 2026-07-01T08:17:48.770437-05:00 claude-cloud systemd-logind[853]: Session c5644 logged out. Waiting for processes to exit. 2026-07-01T08:17:48.772073-05:00 claude-cloud systemd-logind[853]: Removed session c5644. 2026-07-01T08:18:52.716393-05:00 claude-cloud systemd-logind[853]: New session c5645 of user claude. 2026-07-01T08:18:53.555421-05:00 claude-cloud systemd-logind[853]: Session c5645 logged out. Waiting for processes to exit. 2026-07-01T08:18:53.558240-05:00 claude-cloud systemd-logind[853]: Removed session c5645. 2026-07-01T08:18:54.841253-05:00 claude-cloud systemd-logind[853]: New session c5646 of user claude. 2026-07-01T08:18:58.199391-05:00 claude-cloud systemd-logind[853]: Session c5646 logged out. Waiting for processes to exit. 2026-07-01T08:18:58.201349-05:00 claude-cloud systemd-logind[853]: Removed session c5646. 2026-07-01T08:18:59.486768-05:00 claude-cloud sshd[982746]: Connection closed by authenticating user root 27.71.230.31 port 52060 [preauth] 2026-07-01T08:19:12.309647-05:00 claude-cloud systemd-logind[853]: New session c5647 of user claude. 2026-07-01T08:19:12.982913-05:00 claude-cloud systemd-logind[853]: Session c5647 logged out. Waiting for processes to exit. 2026-07-01T08:19:12.984511-05:00 claude-cloud systemd-logind[853]: Removed session c5647. 2026-07-01T08:19:45.235639-05:00 claude-cloud sshd[983048]: Connection closed by authenticating user root 2.57.122.168 port 59878 [preauth] 2026-07-01T08:19:59.776134-05:00 claude-cloud systemd-logind[853]: New session c5648 of user claude. 2026-07-01T08:20:00.444839-05:00 claude-cloud systemd-logind[853]: Session c5648 logged out. Waiting for processes to exit. 2026-07-01T08:20:00.461646-05:00 claude-cloud systemd-logind[853]: Removed session c5648. 2026-07-01T08:20:46.869632-05:00 claude-cloud systemd-logind[853]: New session c5649 of user claude. 2026-07-01T08:20:47.599609-05:00 claude-cloud systemd-logind[853]: Session c5649 logged out. Waiting for processes to exit. 2026-07-01T08:20:47.600515-05:00 claude-cloud systemd-logind[853]: Removed session c5649. 2026-07-01T08:21:19.341889-05:00 claude-cloud systemd-logind[853]: Session 2634 logged out. Waiting for processes to exit. 2026-07-01T08:21:19.344849-05:00 claude-cloud systemd-logind[853]: Removed session 2634. 2026-07-01T08:21:29.468322-05:00 claude-cloud (sd-pam): pam_unix(systemd-user:session): session closed for user root 2026-07-01T08:21:33.982223-05:00 claude-cloud systemd-logind[853]: New session c5650 of user claude. 2026-07-01T08:21:34.763812-05:00 claude-cloud systemd-logind[853]: Session c5650 logged out. Waiting for processes to exit. 2026-07-01T08:21:34.765072-05:00 claude-cloud systemd-logind[853]: Removed session c5650. 2026-07-01T08:22:20.764519-05:00 claude-cloud sshd[983561]: Connection closed by authenticating user root 2.57.122.168 port 34626 [preauth] 2026-07-01T08:22:21.110089-05:00 claude-cloud systemd-logind[853]: New session c5651 of user claude. 2026-07-01T08:22:21.787616-05:00 claude-cloud systemd-logind[853]: Session c5651 logged out. Waiting for processes to exit. 2026-07-01T08:22:21.788026-05:00 claude-cloud systemd-logind[853]: Removed session c5651. 2026-07-01T08:22:37.207385-05:00 claude-cloud systemd-logind[853]: New session c5652 of user claude. 2026-07-01T08:22:37.524208-05:00 claude-cloud systemd-logind[853]: Session c5652 logged out. Waiting for processes to exit. 2026-07-01T08:22:37.525475-05:00 claude-cloud systemd-logind[853]: Removed session c5652. 2026-07-01T08:23:08.128990-05:00 claude-cloud systemd-logind[853]: New session c5653 of user claude. 2026-07-01T08:23:08.749863-05:00 claude-cloud systemd-logind[853]: Session c5653 logged out. Waiting for processes to exit. 2026-07-01T08:23:08.751882-05:00 claude-cloud systemd-logind[853]: Removed session c5653. 2026-07-01T08:23:29.226658-05:00 claude-cloud sshd[983797]: Invalid user postgres from 45.198.224.46 port 48064 2026-07-01T08:23:29.850683-05:00 claude-cloud sshd[983797]: Connection closed by invalid user postgres 45.198.224.46 port 48064 [preauth] 2026-07-01T08:24:07.607732-05:00 claude-cloud systemd-logind[853]: New session c5654 of user claude. 2026-07-01T08:24:08.255511-05:00 claude-cloud systemd-logind[853]: Session c5654 logged out. Waiting for processes to exit. 2026-07-01T08:24:08.257184-05:00 claude-cloud systemd-logind[853]: Removed session c5654. 2026-07-01T08:24:08.856784-05:00 claude-cloud login[983923]: PAM unable to dlopen(pam_lastlog.so): /usr/lib/security/pam_lastlog.so: cannot open shared object file: No such file or directory 2026-07-01T08:24:08.857025-05:00 claude-cloud login[983923]: PAM adding faulty module: pam_lastlog.so 2026-07-01T08:24:09.955970-05:00 claude-cloud login[983923]: pam_unix(login:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T08:24:09.973000-05:00 claude-cloud systemd-logind[853]: New session 2654 of user root. 2026-07-01T08:24:10.025251-05:00 claude-cloud (systemd): pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T08:24:10.370242-05:00 claude-cloud login[984042]: ROOT LOGIN on '/dev/pts/22' from '100.100.183.111' 2026-07-01T08:24:50.058046-05:00 claude-cloud sshd[984135]: Connection closed by authenticating user root 2.57.122.168 port 37608 [preauth] 2026-07-01T08:25:01.130547-05:00 claude-cloud CRON[984175]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T08:25:01.136031-05:00 claude-cloud CRON[984175]: pam_unix(cron:session): session closed for user root 2026-07-01T08:25:01.931790-05:00 claude-cloud systemd-logind[853]: New session c5655 of user claude. 2026-07-01T08:25:02.618213-05:00 claude-cloud systemd-logind[853]: Session c5655 logged out. Waiting for processes to exit. 2026-07-01T08:25:02.619449-05:00 claude-cloud systemd-logind[853]: Removed session c5655. 2026-07-01T08:25:12.528969-05:00 claude-cloud sshd[984127]: Connection closed by authenticating user root 27.71.230.31 port 42704 [preauth] 2026-07-01T08:25:48.939427-05:00 claude-cloud systemd-logind[853]: New session c5656 of user claude. 2026-07-01T08:25:49.644884-05:00 claude-cloud systemd-logind[853]: Session c5656 logged out. Waiting for processes to exit. 2026-07-01T08:25:49.648094-05:00 claude-cloud systemd-logind[853]: Removed session c5656. 2026-07-01T08:26:35.989864-05:00 claude-cloud systemd-logind[853]: New session c5657 of user claude. 2026-07-01T08:26:36.606743-05:00 claude-cloud systemd-logind[853]: Session c5657 logged out. Waiting for processes to exit. 2026-07-01T08:26:36.607921-05:00 claude-cloud systemd-logind[853]: Removed session c5657. 2026-07-01T08:27:18.217639-05:00 claude-cloud sshd[984659]: Connection closed by authenticating user root 2.57.122.168 port 40590 [preauth] 2026-07-01T08:27:22.930850-05:00 claude-cloud systemd-logind[853]: New session c5658 of user claude. 2026-07-01T08:27:23.609734-05:00 claude-cloud systemd-logind[853]: Session c5658 logged out. Waiting for processes to exit. 2026-07-01T08:27:23.611713-05:00 claude-cloud systemd-logind[853]: Removed session c5658. 2026-07-01T08:27:40.773392-05:00 claude-cloud systemd-logind[853]: New session c5659 of user claude. 2026-07-01T08:27:41.052510-05:00 claude-cloud systemd-logind[853]: Session c5659 logged out. Waiting for processes to exit. 2026-07-01T08:27:41.054616-05:00 claude-cloud systemd-logind[853]: Removed session c5659. 2026-07-01T08:28:57.743409-05:00 claude-cloud systemd-logind[853]: New session c5660 of user claude. 2026-07-01T08:28:59.418230-05:00 claude-cloud systemd-logind[853]: Session c5660 logged out. Waiting for processes to exit. 2026-07-01T08:28:59.419913-05:00 claude-cloud systemd-logind[853]: Removed session c5660. 2026-07-01T08:29:52.357659-05:00 claude-cloud sshd[985131]: Connection closed by authenticating user root 2.57.122.168 port 43566 [preauth] 2026-07-01T08:31:34.398479-05:00 claude-cloud sshd[985766]: Invalid user admin from 45.148.10.121 port 58024 2026-07-01T08:31:34.412054-05:00 claude-cloud sshd[985766]: Connection closed by invalid user admin 45.148.10.121 port 58024 [preauth] 2026-07-01T08:31:44.401214-05:00 claude-cloud sshd[985572]: Connection closed by authenticating user root 27.71.230.31 port 53232 [preauth] 2026-07-01T08:31:59.212220-05:00 claude-cloud systemd-logind[853]: New session c5661 of user claude. 2026-07-01T08:32:05.978077-05:00 claude-cloud systemd-logind[853]: Session c5661 logged out. Waiting for processes to exit. 2026-07-01T08:32:05.978921-05:00 claude-cloud systemd-logind[853]: Removed session c5661. 2026-07-01T08:32:21.279445-05:00 claude-cloud sshd[985953]: Connection closed by authenticating user root 2.57.122.168 port 46580 [preauth] 2026-07-01T08:32:45.048737-05:00 claude-cloud systemd-logind[853]: New session c5662 of user claude. 2026-07-01T08:32:45.394811-05:00 claude-cloud systemd-logind[853]: Session c5662 logged out. Waiting for processes to exit. 2026-07-01T08:32:45.396128-05:00 claude-cloud systemd-logind[853]: Removed session c5662. 2026-07-01T08:33:05.352394-05:00 claude-cloud sshd[986061]: Connection closed by authenticating user root 45.198.224.46 port 36346 [preauth] 2026-07-01T08:34:43.055892-05:00 claude-cloud systemd-logind[853]: New session c5663 of user claude. 2026-07-01T08:34:48.181223-05:00 claude-cloud systemd-logind[853]: Session c5663 logged out. Waiting for processes to exit. 2026-07-01T08:34:48.183112-05:00 claude-cloud systemd-logind[853]: Removed session c5663. 2026-07-01T08:34:58.709821-05:00 claude-cloud sshd[986399]: Connection closed by authenticating user root 2.57.122.168 port 49588 [preauth] 2026-07-01T08:35:01.148012-05:00 claude-cloud CRON[986410]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T08:35:01.159072-05:00 claude-cloud CRON[986410]: pam_unix(cron:session): session closed for user root 2026-07-01T08:35:12.799705-05:00 claude-cloud systemd-logind[853]: New session c5664 of user claude. 2026-07-01T08:35:12.847882-05:00 claude-cloud systemd-logind[853]: Session c5664 logged out. Waiting for processes to exit. 2026-07-01T08:35:12.849911-05:00 claude-cloud systemd-logind[853]: Removed session c5664. 2026-07-01T08:36:52.804957-05:00 claude-cloud sshd[986750]: Connection closed by authenticating user root 27.71.230.31 port 39984 [preauth] 2026-07-01T08:37:26.908401-05:00 claude-cloud sshd[986859]: Connection closed by authenticating user root 2.57.122.168 port 52570 [preauth] 2026-07-01T08:37:50.929814-05:00 claude-cloud sshd[986912]: Accepted publickey for claude from 104.189.115.46 port 59536 ssh2: ED25519 SHA256:zL06FyFNS5Fmvhoc+jYXcch3IeQts0ckk+VDgUYLY7Y 2026-07-01T08:37:50.935252-05:00 claude-cloud sshd[986912]: pam_unix(sshd:session): session opened for user claude(uid=1000) by claude(uid=0) 2026-07-01T08:37:50.949913-05:00 claude-cloud systemd-logind[853]: New session 2658 of user claude. 2026-07-01T08:37:52.345967-05:00 claude-cloud sshd[986973]: Received disconnect from 104.189.115.46 port 59536:11: disconnected by user 2026-07-01T08:37:52.347048-05:00 claude-cloud sshd[986973]: Disconnected from user claude 104.189.115.46 port 59536 2026-07-01T08:37:52.348799-05:00 claude-cloud sshd[986912]: pam_unix(sshd:session): session closed for user claude 2026-07-01T08:37:52.358822-05:00 claude-cloud systemd-logind[853]: Session 2658 logged out. Waiting for processes to exit. 2026-07-01T08:37:52.360146-05:00 claude-cloud systemd-logind[853]: Removed session 2658. 2026-07-01T08:37:54.058623-05:00 claude-cloud sshd[986984]: Accepted publickey for claude from 104.189.115.46 port 59573 ssh2: ED25519 SHA256:zL06FyFNS5Fmvhoc+jYXcch3IeQts0ckk+VDgUYLY7Y 2026-07-01T08:37:54.065592-05:00 claude-cloud sshd[986984]: pam_unix(sshd:session): session opened for user claude(uid=1000) by claude(uid=0) 2026-07-01T08:37:54.082193-05:00 claude-cloud systemd-logind[853]: New session 2659 of user claude. 2026-07-01T08:37:54.974631-05:00 claude-cloud sshd[987029]: Received disconnect from 104.189.115.46 port 59573:11: disconnected by user 2026-07-01T08:37:54.975108-05:00 claude-cloud sshd[987029]: Disconnected from user claude 104.189.115.46 port 59573 2026-07-01T08:37:54.976037-05:00 claude-cloud sshd[986984]: pam_unix(sshd:session): session closed for user claude 2026-07-01T08:37:54.983841-05:00 claude-cloud systemd-logind[853]: Session 2659 logged out. Waiting for processes to exit. 2026-07-01T08:37:54.987075-05:00 claude-cloud systemd-logind[853]: Removed session 2659. 2026-07-01T08:38:11.172575-05:00 claude-cloud systemd-logind[853]: New session c5665 of user claude. 2026-07-01T08:38:11.275882-05:00 claude-cloud systemd-logind[853]: Session c5665 logged out. Waiting for processes to exit. 2026-07-01T08:38:11.277268-05:00 claude-cloud systemd-logind[853]: Removed session c5665. 2026-07-01T08:38:16.670540-05:00 claude-cloud systemd-logind[853]: New session c5666 of user claude. 2026-07-01T08:38:16.909417-05:00 claude-cloud systemd-logind[853]: Session c5666 logged out. Waiting for processes to exit. 2026-07-01T08:38:16.913057-05:00 claude-cloud systemd-logind[853]: Removed session c5666. 2026-07-01T08:38:19.123611-05:00 claude-cloud systemd-logind[853]: New session c5667 of user claude. 2026-07-01T08:38:19.426827-05:00 claude-cloud systemd-logind[853]: Session c5667 logged out. Waiting for processes to exit. 2026-07-01T08:38:19.429115-05:00 claude-cloud systemd-logind[853]: Removed session c5667. 2026-07-01T08:40:01.582390-05:00 claude-cloud sshd[987435]: Connection closed by authenticating user root 2.57.122.168 port 55562 [preauth] 2026-07-01T08:42:33.033565-05:00 claude-cloud sshd[987818]: Connection closed by authenticating user root 45.198.224.46 port 57460 [preauth] 2026-07-01T08:42:46.697605-05:00 claude-cloud sshd[987843]: Connection closed by authenticating user root 27.71.230.31 port 53022 [preauth] 2026-07-01T08:42:49.770462-05:00 claude-cloud sshd[987879]: Connection closed by authenticating user root 2.57.122.168 port 58538 [preauth] 2026-07-01T08:43:23.490856-05:00 claude-cloud systemd-logind[853]: New session c5668 of user claude. 2026-07-01T08:43:23.771135-05:00 claude-cloud systemd-logind[853]: Session c5668 logged out. Waiting for processes to exit. 2026-07-01T08:43:23.772330-05:00 claude-cloud systemd-logind[853]: Removed session c5668. 2026-07-01T08:44:16.954499-05:00 claude-cloud sshd[988107]: Invalid user treveon from 2.57.121.112 port 9472 2026-07-01T08:44:16.979614-05:00 claude-cloud sshd[988107]: Connection closed by invalid user treveon 2.57.121.112 port 9472 [preauth] 2026-07-01T08:45:01.174834-05:00 claude-cloud CRON[988226]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T08:45:01.179794-05:00 claude-cloud CRON[988226]: pam_unix(cron:session): session closed for user root 2026-07-01T08:45:27.426667-05:00 claude-cloud sshd[988296]: Connection closed by authenticating user root 2.57.122.168 port 33278 [preauth] 2026-07-01T08:46:22.989944-05:00 claude-cloud sshd[988422]: Invalid user admin from 193.46.255.86 port 8068 2026-07-01T08:46:23.015405-05:00 claude-cloud sshd[988422]: Connection closed by invalid user admin 193.46.255.86 port 8068 [preauth] 2026-07-01T08:48:05.400574-05:00 claude-cloud sshd[988755]: Connection closed by authenticating user root 2.57.122.168 port 36266 [preauth] 2026-07-01T08:48:28.879477-05:00 claude-cloud systemd-logind[853]: New session c5669 of user claude. 2026-07-01T08:48:29.177401-05:00 claude-cloud systemd-logind[853]: Session c5669 logged out. Waiting for processes to exit. 2026-07-01T08:48:29.179220-05:00 claude-cloud systemd-logind[853]: Removed session c5669. 2026-07-01T08:48:43.683796-05:00 claude-cloud sshd[988830]: Connection closed by authenticating user root 27.71.230.31 port 42334 [preauth] 2026-07-01T08:50:42.175338-05:00 claude-cloud sshd[989196]: Connection closed by authenticating user root 2.57.122.168 port 39258 [preauth] 2026-07-01T08:51:56.094858-05:00 claude-cloud sshd[989469]: Connection closed by authenticating user root 45.198.224.46 port 55928 [preauth] 2026-07-01T08:53:15.931769-05:00 claude-cloud sshd[989665]: Connection closed by authenticating user root 2.57.122.168 port 42230 [preauth] 2026-07-01T08:53:33.014064-05:00 claude-cloud systemd-logind[853]: New session c5670 of user claude. 2026-07-01T08:53:33.302132-05:00 claude-cloud systemd-logind[853]: Session c5670 logged out. Waiting for processes to exit. 2026-07-01T08:53:33.304522-05:00 claude-cloud systemd-logind[853]: Removed session c5670. 2026-07-01T08:54:42.239370-05:00 claude-cloud sshd[990036]: Connection closed by authenticating user root 27.71.230.31 port 45720 [preauth] 2026-07-01T08:55:01.192158-05:00 claude-cloud CRON[990173]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T08:55:01.200109-05:00 claude-cloud CRON[990173]: pam_unix(cron:session): session closed for user root 2026-07-01T08:55:46.626938-05:00 claude-cloud sshd[990275]: Connection closed by authenticating user root 2.57.122.168 port 45184 [preauth] 2026-07-01T08:58:19.111720-05:00 claude-cloud sshd[991030]: Connection closed by authenticating user root 2.57.122.168 port 48218 [preauth] 2026-07-01T08:58:36.720980-05:00 claude-cloud systemd-logind[853]: New session c5671 of user claude. 2026-07-01T08:58:37.046469-05:00 claude-cloud systemd-logind[853]: Session c5671 logged out. Waiting for processes to exit. 2026-07-01T08:58:37.047911-05:00 claude-cloud systemd-logind[853]: Removed session c5671. 2026-07-01T09:00:19.153836-05:00 claude-cloud sshd[991687]: Invalid user admin from 2.57.121.25 port 37282 2026-07-01T09:00:19.179093-05:00 claude-cloud sshd[991687]: Connection closed by invalid user admin 2.57.121.25 port 37282 [preauth] 2026-07-01T09:00:22.718144-05:00 claude-cloud sshd[991696]: Received disconnect from 172.245.89.104 port 34440:11: disconnected by user [preauth] 2026-07-01T09:00:22.718660-05:00 claude-cloud sshd[991696]: Disconnected from authenticating user root 172.245.89.104 port 34440 [preauth] 2026-07-01T09:00:31.799136-05:00 claude-cloud sshd[991705]: Connection closed by authenticating user root 27.71.230.31 port 34298 [preauth] 2026-07-01T09:00:55.301676-05:00 claude-cloud sshd[991892]: Connection closed by authenticating user root 2.57.122.168 port 51180 [preauth] 2026-07-01T09:01:27.976832-05:00 claude-cloud sshd[992021]: Connection closed by authenticating user root 45.198.224.46 port 43520 [preauth] 2026-07-01T09:03:32.783845-05:00 claude-cloud sshd[992437]: Connection closed by authenticating user root 2.57.122.168 port 54148 [preauth] 2026-07-01T09:03:40.265775-05:00 claude-cloud systemd-logind[853]: New session c5672 of user claude. 2026-07-01T09:03:40.571489-05:00 claude-cloud systemd-logind[853]: Session c5672 logged out. Waiting for processes to exit. 2026-07-01T09:03:40.573854-05:00 claude-cloud systemd-logind[853]: Removed session c5672. 2026-07-01T09:03:45.022949-05:00 claude-cloud sshd[992481]: Invalid user admin from 45.148.10.121 port 38922 2026-07-01T09:03:45.036602-05:00 claude-cloud sshd[992481]: Connection closed by invalid user admin 45.148.10.121 port 38922 [preauth] 2026-07-01T09:05:01.215042-05:00 claude-cloud CRON[992707]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T09:05:01.224758-05:00 claude-cloud CRON[992707]: pam_unix(cron:session): session closed for user root 2026-07-01T09:06:10.748074-05:00 claude-cloud sshd[993137]: Connection closed by authenticating user root 2.57.122.168 port 57144 [preauth] 2026-07-01T09:08:43.696453-05:00 claude-cloud systemd-logind[853]: New session c5673 of user claude. 2026-07-01T09:08:43.951803-05:00 claude-cloud systemd-logind[853]: Session c5673 logged out. Waiting for processes to exit. 2026-07-01T09:08:43.954242-05:00 claude-cloud systemd-logind[853]: Removed session c5673. 2026-07-01T09:08:48.985537-05:00 claude-cloud sshd[993808]: Connection closed by authenticating user root 2.57.122.168 port 60132 [preauth] 2026-07-01T09:11:09.363843-05:00 claude-cloud sshd[994228]: Connection closed by authenticating user root 45.198.224.46 port 58398 [preauth] 2026-07-01T09:11:30.133168-05:00 claude-cloud sshd[994285]: Connection closed by authenticating user root 2.57.122.168 port 34850 [preauth] 2026-07-01T09:12:29.986484-05:00 claude-cloud sshd[994438]: Connection closed by authenticating user root 27.71.230.31 port 35356 [preauth] 2026-07-01T09:12:52.523431-05:00 claude-cloud systemd-logind[853]: New session c5674 of user claude. 2026-07-01T09:12:55.429942-05:00 claude-cloud sshd[994535]: Connection closed by authenticating user root 185.242.3.195 port 59716 [preauth] 2026-07-01T09:13:24.616394-05:00 claude-cloud systemd-logind[853]: New session c5675 of user claude. 2026-07-01T09:13:47.149025-05:00 claude-cloud systemd-logind[853]: New session c5676 of user claude. 2026-07-01T09:13:47.446186-05:00 claude-cloud systemd-logind[853]: Session c5676 logged out. Waiting for processes to exit. 2026-07-01T09:13:47.448534-05:00 claude-cloud systemd-logind[853]: Removed session c5676. 2026-07-01T09:13:56.902671-05:00 claude-cloud systemd-logind[853]: New session c5677 of user claude. 2026-07-01T09:14:08.486701-05:00 claude-cloud sshd[994752]: Connection closed by authenticating user root 2.57.122.168 port 37800 [preauth] 2026-07-01T09:14:29.161864-05:00 claude-cloud systemd-logind[853]: New session c5678 of user claude. 2026-07-01T09:15:01.236305-05:00 claude-cloud CRON[994901]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T09:15:01.241668-05:00 claude-cloud CRON[994901]: pam_unix(cron:session): session closed for user root 2026-07-01T09:16:46.704130-05:00 claude-cloud sshd[995211]: Connection closed by authenticating user root 2.57.122.168 port 40744 [preauth] 2026-07-01T09:17:01.255802-05:00 claude-cloud CRON[995254]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T09:17:01.266091-05:00 claude-cloud CRON[995254]: pam_unix(cron:session): session closed for user root 2026-07-01T09:18:07.962426-05:00 claude-cloud sshd[995476]: Connection closed by authenticating user root 36.140.29.110 port 35208 [preauth] 2026-07-01T09:18:10.160792-05:00 claude-cloud sshd[995480]: Connection closed by authenticating user root 36.140.29.110 port 37498 [preauth] 2026-07-01T09:18:12.068481-05:00 claude-cloud sshd[995492]: Connection closed by authenticating user root 36.140.29.110 port 40984 [preauth] 2026-07-01T09:18:18.769446-05:00 claude-cloud sshd[995501]: Connection closed by authenticating user root 36.140.29.110 port 43936 [preauth] 2026-07-01T09:18:20.228780-05:00 claude-cloud sshd[995497]: Connection closed by authenticating user root 27.71.230.31 port 45394 [preauth] 2026-07-01T09:18:50.727585-05:00 claude-cloud systemd-logind[853]: New session c5679 of user claude. 2026-07-01T09:18:51.054213-05:00 claude-cloud systemd-logind[853]: Session c5679 logged out. Waiting for processes to exit. 2026-07-01T09:18:51.056690-05:00 claude-cloud systemd-logind[853]: Removed session c5679. 2026-07-01T09:19:21.648757-05:00 claude-cloud sshd[995692]: Connection closed by authenticating user root 2.57.122.168 port 43716 [preauth] 2026-07-01T09:21:16.191129-05:00 claude-cloud sshd[996019]: Connection closed by authenticating user root 45.198.224.46 port 36144 [preauth] 2026-07-01T09:22:01.070593-05:00 claude-cloud sshd[996150]: Connection closed by authenticating user root 2.57.122.168 port 46692 [preauth] 2026-07-01T09:23:54.323799-05:00 claude-cloud systemd-logind[853]: New session c5680 of user claude. 2026-07-01T09:23:54.610694-05:00 claude-cloud systemd-logind[853]: Session c5680 logged out. Waiting for processes to exit. 2026-07-01T09:23:54.612337-05:00 claude-cloud systemd-logind[853]: Removed session c5680. 2026-07-01T09:24:22.817574-05:00 claude-cloud sshd[996523]: Connection closed by authenticating user root 27.71.230.31 port 60768 [preauth] 2026-07-01T09:25:01.276612-05:00 claude-cloud CRON[996686]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T09:25:01.281954-05:00 claude-cloud CRON[996686]: pam_unix(cron:session): session closed for user root 2026-07-01T09:26:09.105168-05:00 claude-cloud systemd-logind[853]: Session 2654 logged out. Waiting for processes to exit. 2026-07-01T09:26:09.106878-05:00 claude-cloud systemd-logind[853]: Removed session 2654. 2026-07-01T09:26:19.240685-05:00 claude-cloud (sd-pam): pam_unix(systemd-user:session): session closed for user root 2026-07-01T09:27:12.500269-05:00 claude-cloud sshd[996943]: Connection closed by authenticating user root 36.140.29.110 port 33432 [preauth] 2026-07-01T09:27:16.041380-05:00 claude-cloud sshd[997064]: Connection closed by authenticating user root 36.140.29.110 port 54550 [preauth] 2026-07-01T09:27:18.623616-05:00 claude-cloud sshd[997090]: Connection closed by authenticating user root 36.140.29.110 port 58940 [preauth] 2026-07-01T09:27:20.797730-05:00 claude-cloud sshd[997095]: Connection closed by authenticating user root 36.140.29.110 port 33732 [preauth] 2026-07-01T09:27:22.985690-05:00 claude-cloud sshd[997100]: Connection closed by authenticating user root 36.140.29.110 port 36226 [preauth] 2026-07-01T09:27:25.016086-05:00 claude-cloud sshd[997109]: Connection closed by authenticating user root 36.140.29.110 port 38720 [preauth] 2026-07-01T09:27:27.185379-05:00 claude-cloud sshd[997111]: Connection closed by authenticating user root 36.140.29.110 port 41234 [preauth] 2026-07-01T09:27:28.625384-05:00 claude-cloud sshd[997120]: Connection closed by authenticating user root 36.140.29.110 port 43972 [preauth] 2026-07-01T09:27:38.039813-05:00 claude-cloud sshd[997124]: Connection closed by authenticating user root 36.140.29.110 port 45660 [preauth] 2026-07-01T09:28:57.885518-05:00 claude-cloud systemd-logind[853]: New session c5681 of user claude. 2026-07-01T09:28:58.267483-05:00 claude-cloud systemd-logind[853]: Session c5681 logged out. Waiting for processes to exit. 2026-07-01T09:28:58.272032-05:00 claude-cloud systemd-logind[853]: Removed session c5681. 2026-07-01T09:30:15.393072-05:00 claude-cloud sshd[997646]: Connection closed by authenticating user root 27.71.230.31 port 43584 [preauth] 2026-07-01T09:31:04.682520-05:00 claude-cloud sshd[997809]: Connection closed by authenticating user root 45.198.224.46 port 53360 [preauth] 2026-07-01T09:31:59.829079-05:00 claude-cloud sshd[997969]: Received disconnect from 198.46.134.148 port 34372:11: disconnected by user [preauth] 2026-07-01T09:31:59.830024-05:00 claude-cloud sshd[997969]: Disconnected from authenticating user root 198.46.134.148 port 34372 [preauth] 2026-07-01T09:32:02.088772-05:00 claude-cloud sshd[997988]: Invalid user admin from 193.46.255.86 port 24782 2026-07-01T09:32:02.114245-05:00 claude-cloud sshd[997988]: Connection closed by invalid user admin 193.46.255.86 port 24782 [preauth] 2026-07-01T09:32:04.262122-05:00 claude-cloud sshd[997990]: Received disconnect from 148.113.201.25 port 47198:11: disconnected by user [preauth] 2026-07-01T09:32:04.262435-05:00 claude-cloud sshd[997990]: Disconnected from authenticating user root 148.113.201.25 port 47198 [preauth] 2026-07-01T09:33:11.944182-05:00 claude-cloud sshd[998171]: Received disconnect from 103.189.234.85 port 56022:11: Bye Bye [preauth] 2026-07-01T09:33:11.944914-05:00 claude-cloud sshd[998171]: Disconnected from authenticating user root 103.189.234.85 port 56022 [preauth] 2026-07-01T09:34:01.670097-05:00 claude-cloud systemd-logind[853]: New session c5682 of user claude. 2026-07-01T09:34:02.143444-05:00 claude-cloud systemd-logind[853]: Session c5682 logged out. Waiting for processes to exit. 2026-07-01T09:34:02.145808-05:00 claude-cloud systemd-logind[853]: Removed session c5682. 2026-07-01T09:34:12.670025-05:00 claude-cloud sshd[998362]: Received disconnect from 125.39.93.73 port 48740:11: Bye Bye [preauth] 2026-07-01T09:34:12.670479-05:00 claude-cloud sshd[998362]: Disconnected from authenticating user root 125.39.93.73 port 48740 [preauth] 2026-07-01T09:34:47.317698-05:00 claude-cloud sshd[998446]: Invalid user ubuntu from 39.115.195.164 port 27950 2026-07-01T09:34:47.548804-05:00 claude-cloud sshd[998446]: Received disconnect from 39.115.195.164 port 27950:11: Bye Bye [preauth] 2026-07-01T09:34:47.548966-05:00 claude-cloud sshd[998446]: Disconnected from invalid user ubuntu 39.115.195.164 port 27950 [preauth] 2026-07-01T09:35:01.295979-05:00 claude-cloud CRON[998512]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T09:35:01.306089-05:00 claude-cloud CRON[998512]: pam_unix(cron:session): session closed for user root 2026-07-01T09:35:27.026090-05:00 claude-cloud sshd[998570]: Connection closed by 45.148.10.240 port 60022 2026-07-01T09:35:48.567099-05:00 claude-cloud sshd[998636]: Received disconnect from 125.39.93.73 port 39596:11: Bye Bye [preauth] 2026-07-01T09:35:48.567786-05:00 claude-cloud sshd[998636]: Disconnected from authenticating user root 125.39.93.73 port 39596 [preauth] 2026-07-01T09:36:15.293228-05:00 claude-cloud sshd[998604]: Connection closed by authenticating user root 36.140.29.110 port 39740 [preauth] 2026-07-01T09:36:17.335141-05:00 claude-cloud sshd[998721]: Connection closed by authenticating user root 36.140.29.110 port 40272 [preauth] 2026-07-01T09:36:18.777037-05:00 claude-cloud sshd[998726]: Connection closed by authenticating user root 36.140.29.110 port 42456 [preauth] 2026-07-01T09:36:20.186894-05:00 claude-cloud sshd[998735]: Connection closed by authenticating user root 36.140.29.110 port 46258 [preauth] 2026-07-01T09:36:23.618691-05:00 claude-cloud sshd[998740]: Connection closed by authenticating user root 36.140.29.110 port 48776 [preauth] 2026-07-01T09:36:28.298883-05:00 claude-cloud sshd[998749]: Connection closed by authenticating user root 36.140.29.110 port 52914 [preauth] 2026-07-01T09:36:30.530939-05:00 claude-cloud sshd[998761]: Connection closed by authenticating user root 36.140.29.110 port 58432 [preauth] 2026-07-01T09:36:39.104890-05:00 claude-cloud sshd[998768]: Connection closed by authenticating user root 36.140.29.110 port 32788 [preauth] 2026-07-01T09:36:42.653229-05:00 claude-cloud sshd[998800]: Connection closed by authenticating user root 36.140.29.110 port 43134 [preauth] 2026-07-01T09:36:45.075376-05:00 claude-cloud sshd[998808]: Connection closed by authenticating user root 36.140.29.110 port 47434 [preauth] 2026-07-01T09:36:48.097558-05:00 claude-cloud sshd[998670]: Connection closed by authenticating user root 27.71.230.31 port 58832 [preauth] 2026-07-01T09:36:51.355368-05:00 claude-cloud sshd[998835]: Received disconnect from 125.39.93.73 port 54256:11: Bye Bye [preauth] 2026-07-01T09:36:51.355788-05:00 claude-cloud sshd[998835]: Disconnected from authenticating user root 125.39.93.73 port 54256 [preauth] 2026-07-01T09:36:51.418541-05:00 claude-cloud sshd[998820]: Connection closed by authenticating user root 36.140.29.110 port 50414 [preauth] 2026-07-01T09:37:02.495811-05:00 claude-cloud sshd[998837]: Connection closed by authenticating user root 36.140.29.110 port 58076 [preauth] 2026-07-01T09:37:06.179425-05:00 claude-cloud sshd[998868]: Connection closed by authenticating user root 36.140.29.110 port 42568 [preauth] 2026-07-01T09:37:06.674699-05:00 claude-cloud sshd[998879]: Invalid user eth-docker from 45.148.10.240 port 60056 2026-07-01T09:37:06.688034-05:00 claude-cloud sshd[998879]: Connection closed by invalid user eth-docker 45.148.10.240 port 60056 [preauth] 2026-07-01T09:37:11.381932-05:00 claude-cloud sshd[998881]: Connection closed by authenticating user root 36.140.29.110 port 46970 [preauth] 2026-07-01T09:37:15.392531-05:00 claude-cloud sshd[998901]: Connection closed by authenticating user root 36.140.29.110 port 53108 [preauth] 2026-07-01T09:37:45.108883-05:00 claude-cloud sshd[998940]: Connection closed by authenticating user root 36.140.29.110 port 58486 [preauth] 2026-07-01T09:37:49.262027-05:00 claude-cloud sshd[999088]: Connection closed by authenticating user root 36.140.29.110 port 37760 [preauth] 2026-07-01T09:37:54.229498-05:00 claude-cloud sshd[999105]: Received disconnect from 125.39.93.73 port 40682:11: Bye Bye [preauth] 2026-07-01T09:37:54.229730-05:00 claude-cloud sshd[999105]: Disconnected from authenticating user root 125.39.93.73 port 40682 [preauth] 2026-07-01T09:38:04.278222-05:00 claude-cloud sshd[999104]: Connection closed by authenticating user root 36.140.29.110 port 42492 [preauth] 2026-07-01T09:38:07.823349-05:00 claude-cloud sshd[999137]: Connection closed by authenticating user root 36.140.29.110 port 60214 [preauth] 2026-07-01T09:38:13.095748-05:00 claude-cloud sshd[999143]: Connection closed by authenticating user root 36.140.29.110 port 36406 [preauth] 2026-07-01T09:38:17.375020-05:00 claude-cloud sshd[999158]: Connection closed by authenticating user root 36.140.29.110 port 42280 [preauth] 2026-07-01T09:38:48.375262-05:00 claude-cloud sshd[999244]: Invalid user ethdocker from 45.148.10.240 port 34056 2026-07-01T09:38:48.389310-05:00 claude-cloud sshd[999244]: Connection closed by invalid user ethdocker 45.148.10.240 port 34056 [preauth] 2026-07-01T09:38:59.104915-05:00 claude-cloud sshd[999266]: Received disconnect from 125.39.93.73 port 55342:11: Bye Bye [preauth] 2026-07-01T09:38:59.105348-05:00 claude-cloud sshd[999266]: Disconnected from authenticating user root 125.39.93.73 port 55342 [preauth] 2026-07-01T09:39:05.544525-05:00 claude-cloud systemd-logind[853]: New session c5683 of user claude. 2026-07-01T09:39:05.900918-05:00 claude-cloud systemd-logind[853]: Session c5683 logged out. Waiting for processes to exit. 2026-07-01T09:39:05.903314-05:00 claude-cloud systemd-logind[853]: Removed session c5683. 2026-07-01T09:40:00.103643-05:00 claude-cloud sshd[999479]: Invalid user milan from 125.39.93.73 port 41772 2026-07-01T09:40:00.341008-05:00 claude-cloud sshd[999479]: Received disconnect from 125.39.93.73 port 41772:11: Bye Bye [preauth] 2026-07-01T09:40:00.341226-05:00 claude-cloud sshd[999479]: Disconnected from invalid user milan 125.39.93.73 port 41772 [preauth] 2026-07-01T09:40:09.240199-05:00 claude-cloud sshd[999520]: Invalid user lighthouse from 45.89.63.39 port 33332 2026-07-01T09:40:09.272498-05:00 claude-cloud sshd[999520]: Received disconnect from 45.89.63.39 port 33332:11: Bye Bye [preauth] 2026-07-01T09:40:09.272796-05:00 claude-cloud sshd[999520]: Disconnected from invalid user lighthouse 45.89.63.39 port 33332 [preauth] 2026-07-01T09:40:16.456911-05:00 claude-cloud sshd[999538]: Invalid user debian from 171.61.22.56 port 18396 2026-07-01T09:40:16.654383-05:00 claude-cloud sshd[999538]: Received disconnect from 171.61.22.56 port 18396:11: Bye Bye [preauth] 2026-07-01T09:40:16.654584-05:00 claude-cloud sshd[999538]: Disconnected from invalid user debian 171.61.22.56 port 18396 [preauth] 2026-07-01T09:40:20.529072-05:00 claude-cloud sshd[999554]: Received disconnect from 185.104.71.22 port 55864:11: disconnected by user [preauth] 2026-07-01T09:40:20.529337-05:00 claude-cloud sshd[999554]: Disconnected from authenticating user root 185.104.71.22 port 55864 [preauth] 2026-07-01T09:40:37.196973-05:00 claude-cloud sshd[999603]: Invalid user sol from 45.148.10.240 port 53652 2026-07-01T09:40:37.209118-05:00 claude-cloud sshd[999603]: Connection closed by invalid user sol 45.148.10.240 port 53652 [preauth] 2026-07-01T09:41:01.371555-05:00 claude-cloud sshd[999654]: Connection closed by authenticating user www-data 45.198.224.46 port 52524 [preauth] 2026-07-01T09:41:02.679696-05:00 claude-cloud sshd[999668]: Invalid user ubuntu from 125.39.93.73 port 56440 2026-07-01T09:41:02.958438-05:00 claude-cloud sshd[999668]: Received disconnect from 125.39.93.73 port 56440:11: Bye Bye [preauth] 2026-07-01T09:41:02.958661-05:00 claude-cloud sshd[999668]: Disconnected from invalid user ubuntu 125.39.93.73 port 56440 [preauth] 2026-07-01T09:42:01.447903-05:00 claude-cloud sshd[999806]: Connection closed by authenticating user root 27.71.230.31 port 40360 [preauth] 2026-07-01T09:42:01.753481-05:00 claude-cloud sshd[999835]: Received disconnect from 125.39.93.73 port 42868:11: Bye Bye [preauth] 2026-07-01T09:42:01.753743-05:00 claude-cloud sshd[999835]: Disconnected from authenticating user root 125.39.93.73 port 42868 [preauth] 2026-07-01T09:42:08.674979-05:00 claude-cloud sshd[999815]: Connection closed by 202.51.214.98 port 38830 [preauth] 2026-07-01T09:42:23.501604-05:00 claude-cloud sshd[999913]: Invalid user sol from 45.148.10.240 port 47794 2026-07-01T09:42:23.513850-05:00 claude-cloud sshd[999913]: Connection closed by invalid user sol 45.148.10.240 port 47794 [preauth] 2026-07-01T09:42:28.472741-05:00 claude-cloud sshd[999926]: Connection closed by 157.122.246.251 port 51602 2026-07-01T09:42:30.509772-05:00 claude-cloud sshd[999927]: Connection closed by authenticating user root 157.122.246.251 port 51608 [preauth] 2026-07-01T09:42:51.637213-05:00 claude-cloud sshd[999988]: Received disconnect from 39.115.195.164 port 8399:11: Bye Bye [preauth] 2026-07-01T09:42:51.638238-05:00 claude-cloud sshd[999988]: Disconnected from authenticating user root 39.115.195.164 port 8399 [preauth] 2026-07-01T09:43:04.529786-05:00 claude-cloud sshd[1000019]: Received disconnect from 125.39.93.73 port 57528:11: Bye Bye [preauth] 2026-07-01T09:43:04.530976-05:00 claude-cloud sshd[1000019]: Disconnected from authenticating user root 125.39.93.73 port 57528 [preauth] 2026-07-01T09:43:49.002485-05:00 claude-cloud sshd[1000159]: Invalid user ec2-user from 14.103.117.75 port 51190 2026-07-01T09:43:49.172165-05:00 claude-cloud sshd[1000159]: Received disconnect from 14.103.117.75 port 51190:11: Bye Bye [preauth] 2026-07-01T09:43:49.172430-05:00 claude-cloud sshd[1000159]: Disconnected from invalid user ec2-user 14.103.117.75 port 51190 [preauth] 2026-07-01T09:43:53.137766-05:00 claude-cloud sshd[1000171]: Received disconnect from 103.189.234.85 port 57700:11: Bye Bye [preauth] 2026-07-01T09:43:53.138250-05:00 claude-cloud sshd[1000171]: Disconnected from authenticating user root 103.189.234.85 port 57700 [preauth] 2026-07-01T09:43:57.348353-05:00 claude-cloud sshd[1000183]: Invalid user sol from 45.148.10.240 port 49046 2026-07-01T09:43:57.362270-05:00 claude-cloud sshd[1000183]: Connection closed by invalid user sol 45.148.10.240 port 49046 [preauth] 2026-07-01T09:44:04.271170-05:00 claude-cloud sshd[1000196]: Received disconnect from 125.39.93.73 port 43958:11: Bye Bye [preauth] 2026-07-01T09:44:04.271480-05:00 claude-cloud sshd[1000196]: Disconnected from authenticating user root 125.39.93.73 port 43958 [preauth] 2026-07-01T09:44:09.070462-05:00 claude-cloud systemd-logind[853]: New session c5684 of user claude. 2026-07-01T09:44:09.329787-05:00 claude-cloud systemd-logind[853]: Session c5684 logged out. Waiting for processes to exit. 2026-07-01T09:44:09.331727-05:00 claude-cloud systemd-logind[853]: Removed session c5684. 2026-07-01T09:44:39.196645-05:00 claude-cloud sshd[1000323]: Invalid user user from 45.89.63.39 port 39534 2026-07-01T09:44:39.227134-05:00 claude-cloud sshd[1000323]: Received disconnect from 45.89.63.39 port 39534:11: Bye Bye [preauth] 2026-07-01T09:44:39.227328-05:00 claude-cloud sshd[1000323]: Disconnected from invalid user user 45.89.63.39 port 39534 [preauth] 2026-07-01T09:44:42.116611-05:00 claude-cloud sshd[1000328]: Received disconnect from 171.61.22.56 port 32619:11: Bye Bye [preauth] 2026-07-01T09:44:42.117027-05:00 claude-cloud sshd[1000328]: Disconnected from authenticating user root 171.61.22.56 port 32619 [preauth] 2026-07-01T09:44:47.118520-05:00 claude-cloud sshd[1000347]: Received disconnect from 39.115.195.164 port 57484:11: Bye Bye [preauth] 2026-07-01T09:44:47.118940-05:00 claude-cloud sshd[1000347]: Disconnected from authenticating user root 39.115.195.164 port 57484 [preauth] 2026-07-01T09:45:01.326379-05:00 claude-cloud CRON[1000378]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T09:45:01.332236-05:00 claude-cloud CRON[1000378]: pam_unix(cron:session): session closed for user root 2026-07-01T09:45:04.447001-05:00 claude-cloud sshd[1000381]: Invalid user alex from 125.39.93.73 port 58620 2026-07-01T09:45:04.690176-05:00 claude-cloud sshd[1000381]: Received disconnect from 125.39.93.73 port 58620:11: Bye Bye [preauth] 2026-07-01T09:45:04.690717-05:00 claude-cloud sshd[1000381]: Disconnected from invalid user alex 125.39.93.73 port 58620 [preauth] 2026-07-01T09:45:50.581615-05:00 claude-cloud sshd[1000521]: Received disconnect from 103.189.234.85 port 59334:11: Bye Bye [preauth] 2026-07-01T09:45:50.582431-05:00 claude-cloud sshd[1000521]: Disconnected from authenticating user root 103.189.234.85 port 59334 [preauth] 2026-07-01T09:46:01.415590-05:00 claude-cloud sshd[1000549]: Invalid user elastic from 125.39.93.73 port 45050 2026-07-01T09:46:01.634341-05:00 claude-cloud sshd[1000549]: Received disconnect from 125.39.93.73 port 45050:11: Bye Bye [preauth] 2026-07-01T09:46:01.634609-05:00 claude-cloud sshd[1000549]: Disconnected from invalid user elastic 125.39.93.73 port 45050 [preauth] 2026-07-01T09:46:44.482878-05:00 claude-cloud sshd[1000667]: Received disconnect from 39.115.195.164 port 37362:11: Bye Bye [preauth] 2026-07-01T09:46:44.483728-05:00 claude-cloud sshd[1000667]: Disconnected from authenticating user root 39.115.195.164 port 37362 [preauth] 2026-07-01T09:46:58.383744-05:00 claude-cloud sshd[1000726]: Invalid user user6 from 125.39.93.73 port 59708 2026-07-01T09:46:58.600513-05:00 claude-cloud sshd[1000726]: Received disconnect from 125.39.93.73 port 59708:11: Bye Bye [preauth] 2026-07-01T09:46:58.600905-05:00 claude-cloud sshd[1000726]: Disconnected from invalid user user6 125.39.93.73 port 59708 [preauth] 2026-07-01T09:47:22.910009-05:00 claude-cloud sshd[1000610]: Connection closed by authenticating user root 36.140.29.110 port 54998 [preauth] 2026-07-01T09:47:22.966987-05:00 claude-cloud sshd[1000810]: Received disconnect from 171.61.22.56 port 7918:11: Bye Bye [preauth] 2026-07-01T09:47:22.967518-05:00 claude-cloud sshd[1000810]: Disconnected from authenticating user root 171.61.22.56 port 7918 [preauth] 2026-07-01T09:47:29.946369-05:00 claude-cloud sshd[1000812]: Connection closed by authenticating user root 36.140.29.110 port 59168 [preauth] 2026-07-01T09:47:51.295191-05:00 claude-cloud sshd[1000890]: Invalid user nextcloud from 103.189.234.85 port 32910 2026-07-01T09:47:51.466913-05:00 claude-cloud sshd[1000890]: Received disconnect from 103.189.234.85 port 32910:11: Bye Bye [preauth] 2026-07-01T09:47:51.467726-05:00 claude-cloud sshd[1000890]: Disconnected from invalid user nextcloud 103.189.234.85 port 32910 [preauth] 2026-07-01T09:48:14.650563-05:00 claude-cloud sshd[1000903]: Connection closed by authenticating user root 27.71.230.31 port 41616 [preauth] 2026-07-01T09:48:25.615590-05:00 claude-cloud sshd[1000974]: Received disconnect from 209.90.232.251 port 34398:11: disconnected by user [preauth] 2026-07-01T09:48:25.617252-05:00 claude-cloud sshd[1000974]: Disconnected from authenticating user root 209.90.232.251 port 34398 [preauth] 2026-07-01T09:48:43.287151-05:00 claude-cloud sshd[1001019]: Received disconnect from 39.115.195.164 port 51097:11: Bye Bye [preauth] 2026-07-01T09:48:43.287768-05:00 claude-cloud sshd[1001019]: Disconnected from authenticating user root 39.115.195.164 port 51097 [preauth] 2026-07-01T09:49:12.440269-05:00 claude-cloud systemd-logind[853]: New session c5685 of user claude. 2026-07-01T09:49:12.715259-05:00 claude-cloud systemd-logind[853]: Session c5685 logged out. Waiting for processes to exit. 2026-07-01T09:49:12.717040-05:00 claude-cloud systemd-logind[853]: Removed session c5685. 2026-07-01T09:49:42.494914-05:00 claude-cloud sshd[1001279]: Received disconnect from 103.189.234.85 port 41140:11: Bye Bye [preauth] 2026-07-01T09:49:42.496026-05:00 claude-cloud sshd[1001279]: Disconnected from authenticating user root 103.189.234.85 port 41140 [preauth] 2026-07-01T09:49:51.919138-05:00 claude-cloud sshd[1001323]: Invalid user postgres from 171.61.22.56 port 29713 2026-07-01T09:49:52.112198-05:00 claude-cloud sshd[1001323]: Received disconnect from 171.61.22.56 port 29713:11: Bye Bye [preauth] 2026-07-01T09:49:52.112630-05:00 claude-cloud sshd[1001323]: Disconnected from invalid user postgres 171.61.22.56 port 29713 [preauth] 2026-07-01T09:50:35.049023-05:00 claude-cloud sshd[1001431]: Received disconnect from 39.115.195.164 port 63429:11: Bye Bye [preauth] 2026-07-01T09:50:35.050119-05:00 claude-cloud sshd[1001431]: Disconnected from authenticating user root 39.115.195.164 port 63429 [preauth] 2026-07-01T09:50:58.450456-05:00 claude-cloud sshd[1001504]: Connection closed by authenticating user root 45.198.224.46 port 53844 [preauth] 2026-07-01T09:51:25.321908-05:00 claude-cloud sshd[1001577]: Received disconnect from 103.189.234.85 port 52404:11: Bye Bye [preauth] 2026-07-01T09:51:25.322433-05:00 claude-cloud sshd[1001577]: Disconnected from authenticating user root 103.189.234.85 port 52404 [preauth] 2026-07-01T09:52:18.920349-05:00 claude-cloud sshd[1001746]: Received disconnect from 171.61.22.56 port 29108:11: Bye Bye [preauth] 2026-07-01T09:52:18.921567-05:00 claude-cloud sshd[1001746]: Disconnected from authenticating user root 171.61.22.56 port 29108 [preauth] 2026-07-01T09:52:26.225337-05:00 claude-cloud sshd[1001768]: Received disconnect from 39.115.195.164 port 8337:11: Bye Bye [preauth] 2026-07-01T09:52:26.225804-05:00 claude-cloud sshd[1001768]: Disconnected from authenticating user root 39.115.195.164 port 8337 [preauth] 2026-07-01T09:52:30.294206-05:00 claude-cloud sshd[1001781]: Invalid user admin from 2.57.121.25 port 7048 2026-07-01T09:52:30.319228-05:00 claude-cloud sshd[1001781]: Connection closed by invalid user admin 2.57.121.25 port 7048 [preauth] 2026-07-01T09:53:11.780117-05:00 claude-cloud sshd[1001901]: Invalid user debian from 103.189.234.85 port 50162 2026-07-01T09:53:11.953552-05:00 claude-cloud sshd[1001901]: Received disconnect from 103.189.234.85 port 50162:11: Bye Bye [preauth] 2026-07-01T09:53:11.953826-05:00 claude-cloud sshd[1001901]: Disconnected from invalid user debian 103.189.234.85 port 50162 [preauth] 2026-07-01T09:53:33.924837-05:00 claude-cloud sshd[1001960]: Received disconnect from 14.103.117.75 port 56008:11: Bye Bye [preauth] 2026-07-01T09:53:33.925622-05:00 claude-cloud sshd[1001960]: Disconnected from authenticating user root 14.103.117.75 port 56008 [preauth] 2026-07-01T09:53:34.513047-05:00 claude-cloud sshd[1001962]: Invalid user test111 from 45.89.63.39 port 49128 2026-07-01T09:53:34.575148-05:00 claude-cloud sshd[1001962]: Received disconnect from 45.89.63.39 port 49128:11: Bye Bye [preauth] 2026-07-01T09:53:34.575579-05:00 claude-cloud sshd[1001962]: Disconnected from invalid user test111 45.89.63.39 port 49128 [preauth] 2026-07-01T09:53:35.458869-05:00 claude-cloud sshd[1001970]: Invalid user wendell from 2.57.121.112 port 51122 2026-07-01T09:53:35.484552-05:00 claude-cloud sshd[1001970]: Connection closed by invalid user wendell 2.57.121.112 port 51122 [preauth] 2026-07-01T09:54:07.063175-05:00 claude-cloud sshd[1002010]: Connection closed by authenticating user root 27.71.230.31 port 33376 [preauth] 2026-07-01T09:54:15.895841-05:00 claude-cloud systemd-logind[853]: New session c5686 of user claude. 2026-07-01T09:54:16.321012-05:00 claude-cloud systemd-logind[853]: Session c5686 logged out. Waiting for processes to exit. 2026-07-01T09:54:16.323267-05:00 claude-cloud systemd-logind[853]: Removed session c5686. 2026-07-01T09:54:21.674169-05:00 claude-cloud sshd[1002114]: Received disconnect from 39.115.195.164 port 21833:11: Bye Bye [preauth] 2026-07-01T09:54:21.675118-05:00 claude-cloud sshd[1002114]: Disconnected from authenticating user root 39.115.195.164 port 21833 [preauth] 2026-07-01T09:54:44.360968-05:00 claude-cloud sshd[1002183]: Invalid user ftp from 171.61.22.56 port 20668 2026-07-01T09:54:44.558056-05:00 claude-cloud sshd[1002183]: Received disconnect from 171.61.22.56 port 20668:11: Bye Bye [preauth] 2026-07-01T09:54:44.558409-05:00 claude-cloud sshd[1002183]: Disconnected from invalid user ftp 171.61.22.56 port 20668 [preauth] 2026-07-01T09:55:01.346897-05:00 claude-cloud CRON[1002243]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T09:55:01.352817-05:00 claude-cloud CRON[1002243]: pam_unix(cron:session): session closed for user root 2026-07-01T09:55:02.665691-05:00 claude-cloud sshd[1002247]: Invalid user postgres from 103.189.234.85 port 60830 2026-07-01T09:55:02.839028-05:00 claude-cloud sshd[1002247]: Received disconnect from 103.189.234.85 port 60830:11: Bye Bye [preauth] 2026-07-01T09:55:02.839251-05:00 claude-cloud sshd[1002247]: Disconnected from invalid user postgres 103.189.234.85 port 60830 [preauth] 2026-07-01T09:55:30.730000-05:00 claude-cloud sshd[1002322]: Invalid user ubuntu from 45.148.10.240 port 41224 2026-07-01T09:55:30.742085-05:00 claude-cloud sshd[1002322]: Connection closed by invalid user ubuntu 45.148.10.240 port 41224 [preauth] 2026-07-01T09:55:42.085358-05:00 claude-cloud sshd[1002349]: Received disconnect from 14.103.117.75 port 55364:11: Bye Bye [preauth] 2026-07-01T09:55:42.086222-05:00 claude-cloud sshd[1002349]: Disconnected from authenticating user root 14.103.117.75 port 55364 [preauth] 2026-07-01T09:56:27.419837-05:00 claude-cloud sshd[1002502]: Received disconnect from 45.89.63.39 port 40520:11: Bye Bye [preauth] 2026-07-01T09:56:27.420691-05:00 claude-cloud sshd[1002502]: Disconnected from authenticating user root 45.89.63.39 port 40520 [preauth] 2026-07-01T09:56:46.362639-05:00 claude-cloud sshd[1002568]: Received disconnect from 39.115.195.164 port 33631:11: Bye Bye [preauth] 2026-07-01T09:56:46.363022-05:00 claude-cloud sshd[1002568]: Disconnected from authenticating user root 39.115.195.164 port 33631 [preauth] 2026-07-01T09:56:48.890966-05:00 claude-cloud sshd[1002584]: Invalid user ec2-user from 103.189.234.85 port 39502 2026-07-01T09:56:49.074641-05:00 claude-cloud sshd[1002584]: Received disconnect from 103.189.234.85 port 39502:11: Bye Bye [preauth] 2026-07-01T09:56:49.074925-05:00 claude-cloud sshd[1002584]: Disconnected from invalid user ec2-user 103.189.234.85 port 39502 [preauth] 2026-07-01T09:56:54.222728-05:00 claude-cloud sshd[1002570]: Connection closed by 14.103.117.75 port 42884 [preauth] 2026-07-01T09:57:04.733761-05:00 claude-cloud sshd[1002619]: Received disconnect from 171.61.22.56 port 2239:11: Bye Bye [preauth] 2026-07-01T09:57:04.734544-05:00 claude-cloud sshd[1002619]: Disconnected from authenticating user root 171.61.22.56 port 2239 [preauth] 2026-07-01T09:57:07.002475-05:00 claude-cloud sshd[1002627]: Invalid user ubuntu from 45.148.10.240 port 33002 2026-07-01T09:57:07.018842-05:00 claude-cloud sshd[1002627]: Connection closed by invalid user ubuntu 45.148.10.240 port 33002 [preauth] 2026-07-01T09:57:45.198181-05:00 claude-cloud sshd[1002696]: Connection closed by authenticating user root 36.140.29.110 port 35158 [preauth] 2026-07-01T09:57:53.020975-05:00 claude-cloud sshd[1002738]: Received disconnect from 14.103.117.75 port 55900:11: Bye Bye [preauth] 2026-07-01T09:57:53.021467-05:00 claude-cloud sshd[1002738]: Disconnected from authenticating user root 14.103.117.75 port 55900 [preauth] 2026-07-01T09:58:05.031461-05:00 claude-cloud sshd[1002723]: Connection closed by authenticating user root 36.140.29.110 port 45062 [preauth] 2026-07-01T09:58:11.253991-05:00 claude-cloud sshd[1002775]: Connection closed by authenticating user root 36.140.29.110 port 39480 [preauth] 2026-07-01T09:58:16.644200-05:00 claude-cloud sshd[1002794]: Connection closed by authenticating user root 36.140.29.110 port 46840 [preauth] 2026-07-01T09:58:17.742040-05:00 claude-cloud sshd[1002812]: Connection closed by authenticating user root 36.140.29.110 port 51240 [preauth] 2026-07-01T09:58:23.792310-05:00 claude-cloud sshd[1002817]: Connection closed by authenticating user root 36.140.29.110 port 54494 [preauth] 2026-07-01T09:58:27.410758-05:00 claude-cloud sshd[1002836]: Connection closed by authenticating user root 36.140.29.110 port 33420 [preauth] 2026-07-01T09:58:31.128083-05:00 claude-cloud sshd[1002849]: Received disconnect from 103.189.234.85 port 40994:11: Bye Bye [preauth] 2026-07-01T09:58:31.128470-05:00 claude-cloud sshd[1002849]: Disconnected from authenticating user root 103.189.234.85 port 40994 [preauth] 2026-07-01T09:58:31.503051-05:00 claude-cloud sshd[1002838]: Connection closed by authenticating user root 36.140.29.110 port 37546 [preauth] 2026-07-01T09:58:36.591397-05:00 claude-cloud sshd[1002872]: Received disconnect from 39.115.195.164 port 49544:11: Bye Bye [preauth] 2026-07-01T09:58:36.593222-05:00 claude-cloud sshd[1002872]: Disconnected from authenticating user root 39.115.195.164 port 49544 [preauth] 2026-07-01T09:58:37.312831-05:00 claude-cloud sshd[1002861]: Connection closed by authenticating user root 36.140.29.110 port 41878 [preauth] 2026-07-01T09:58:41.180410-05:00 claude-cloud sshd[1002891]: Invalid user ubuntu from 45.148.10.240 port 43416 2026-07-01T09:58:41.195391-05:00 claude-cloud sshd[1002891]: Connection closed by invalid user ubuntu 45.148.10.240 port 43416 [preauth] 2026-07-01T09:58:46.814813-05:00 claude-cloud sshd[1002945]: Connection closed by authenticating user root 36.140.29.110 port 48840 [preauth] 2026-07-01T09:59:19.461348-05:00 claude-cloud systemd-logind[853]: New session c5687 of user claude. 2026-07-01T09:59:19.780484-05:00 claude-cloud systemd-logind[853]: Session c5687 logged out. Waiting for processes to exit. 2026-07-01T09:59:19.782111-05:00 claude-cloud systemd-logind[853]: Removed session c5687. 2026-07-01T09:59:28.312819-05:00 claude-cloud sshd[1003118]: Received disconnect from 171.61.22.56 port 23698:11: Bye Bye [preauth] 2026-07-01T09:59:28.313160-05:00 claude-cloud sshd[1003118]: Disconnected from authenticating user root 171.61.22.56 port 23698 [preauth] 2026-07-01T09:59:31.886326-05:00 claude-cloud sshd[1003129]: Received disconnect from 45.89.63.39 port 34242:11: Bye Bye [preauth] 2026-07-01T09:59:31.886961-05:00 claude-cloud sshd[1003129]: Disconnected from authenticating user root 45.89.63.39 port 34242 [preauth] 2026-07-01T09:59:41.497387-05:00 claude-cloud sshd[1003016]: Connection closed by authenticating user root 36.140.29.110 port 60380 [preauth] 2026-07-01T09:59:45.646734-05:00 claude-cloud sshd[1003167]: Connection closed by authenticating user root 36.140.29.110 port 37440 [preauth] 2026-07-01T09:59:49.003305-05:00 claude-cloud sshd[1003191]: Connection closed by authenticating user root 36.140.29.110 port 45284 [preauth] 2026-07-01T09:59:51.845314-05:00 claude-cloud sshd[1003175]: Connection closed by authenticating user root 27.71.230.31 port 34362 [preauth] 2026-07-01T09:59:55.483792-05:00 claude-cloud sshd[1003196]: Connection closed by authenticating user root 36.140.29.110 port 49474 [preauth] 2026-07-01T10:00:01.128536-05:00 claude-cloud sshd[1003212]: Connection closed by authenticating user root 36.140.29.110 port 55822 [preauth] 2026-07-01T10:00:11.774922-05:00 claude-cloud sshd[1003225]: Connection closed by authenticating user root 36.140.29.110 port 35008 [preauth] 2026-07-01T10:00:17.970345-05:00 claude-cloud sshd[1003252]: Connection closed by authenticating user root 36.140.29.110 port 48328 [preauth] 2026-07-01T10:00:21.089708-05:00 claude-cloud sshd[1003270]: Connection closed by authenticating user root 36.140.29.110 port 55720 [preauth] 2026-07-01T10:00:21.619644-05:00 claude-cloud sshd[1003284]: Invalid user ubuntu from 45.148.10.240 port 52908 2026-07-01T10:00:21.632253-05:00 claude-cloud sshd[1003284]: Connection closed by invalid user ubuntu 45.148.10.240 port 52908 [preauth] 2026-07-01T10:00:23.995943-05:00 claude-cloud sshd[1003286]: Invalid user ubuntu from 103.189.234.85 port 53892 2026-07-01T10:00:24.164548-05:00 claude-cloud sshd[1003286]: Received disconnect from 103.189.234.85 port 53892:11: Bye Bye [preauth] 2026-07-01T10:00:24.164866-05:00 claude-cloud sshd[1003286]: Disconnected from invalid user ubuntu 103.189.234.85 port 53892 [preauth] 2026-07-01T10:00:25.811767-05:00 claude-cloud sshd[1003282]: Connection closed by authenticating user root 36.140.29.110 port 59460 [preauth] 2026-07-01T10:00:32.445791-05:00 claude-cloud sshd[1003295]: Connection closed by authenticating user root 36.140.29.110 port 36422 [preauth] 2026-07-01T10:00:35.003661-05:00 claude-cloud sshd[1003308]: Connection closed by authenticating user root 36.140.29.110 port 43562 [preauth] 2026-07-01T10:00:38.076628-05:00 claude-cloud sshd[1003318]: Connection closed by authenticating user root 36.140.29.110 port 47996 [preauth] 2026-07-01T10:00:49.061862-05:00 claude-cloud sshd[1003377]: Invalid user password from 45.198.224.46 port 41902 2026-07-01T10:00:50.468128-05:00 claude-cloud sshd[1003377]: Connection closed by invalid user password 45.198.224.46 port 41902 [preauth] 2026-07-01T10:01:01.611556-05:00 claude-cloud sshd[1003395]: Received disconnect from 39.115.195.164 port 63719:11: Bye Bye [preauth] 2026-07-01T10:01:01.612471-05:00 claude-cloud sshd[1003395]: Disconnected from authenticating user root 39.115.195.164 port 63719 [preauth] 2026-07-01T10:01:23.283749-05:00 claude-cloud sshd[1003341]: Connection closed by authenticating user root 36.140.29.110 port 51822 [preauth] 2026-07-01T10:01:57.486551-05:00 claude-cloud sshd[1003573]: Received disconnect from 171.61.22.56 port 33217:11: Bye Bye [preauth] 2026-07-01T10:01:57.488843-05:00 claude-cloud sshd[1003573]: Disconnected from authenticating user root 171.61.22.56 port 33217 [preauth] 2026-07-01T10:01:59.214757-05:00 claude-cloud sshd[1003582]: Invalid user ubuntu from 45.148.10.240 port 34836 2026-07-01T10:01:59.227002-05:00 claude-cloud sshd[1003582]: Connection closed by invalid user ubuntu 45.148.10.240 port 34836 [preauth] 2026-07-01T10:02:06.879749-05:00 claude-cloud sshd[1003496]: Connection closed by authenticating user root 36.140.29.110 port 51792 [preauth] 2026-07-01T10:02:13.552216-05:00 claude-cloud sshd[1003626]: Invalid user ftp from 103.189.234.85 port 50872 2026-07-01T10:02:13.721086-05:00 claude-cloud sshd[1003626]: Received disconnect from 103.189.234.85 port 50872:11: Bye Bye [preauth] 2026-07-01T10:02:13.721450-05:00 claude-cloud sshd[1003626]: Disconnected from invalid user ftp 103.189.234.85 port 50872 [preauth] 2026-07-01T10:02:24.878429-05:00 claude-cloud sshd[1003666]: Received disconnect from 45.89.63.39 port 55458:11: Bye Bye [preauth] 2026-07-01T10:02:24.879091-05:00 claude-cloud sshd[1003666]: Disconnected from authenticating user root 45.89.63.39 port 55458 [preauth] 2026-07-01T10:02:58.148547-05:00 claude-cloud sshd[1003758]: Received disconnect from 39.115.195.164 port 4640:11: Bye Bye [preauth] 2026-07-01T10:02:58.148920-05:00 claude-cloud sshd[1003758]: Disconnected from authenticating user root 39.115.195.164 port 4640 [preauth] 2026-07-01T10:03:55.387723-05:00 claude-cloud sshd[1003618]: Connection closed by 14.103.117.75 port 44324 [preauth] 2026-07-01T10:04:04.166775-05:00 claude-cloud sshd[1003944]: Received disconnect from 103.189.234.85 port 58032:11: Bye Bye [preauth] 2026-07-01T10:04:04.167378-05:00 claude-cloud sshd[1003944]: Disconnected from authenticating user root 103.189.234.85 port 58032 [preauth] 2026-07-01T10:04:22.624527-05:00 claude-cloud sshd[1003993]: Invalid user ec2-user from 171.61.22.56 port 4672 2026-07-01T10:04:22.795198-05:00 claude-cloud sshd[1003993]: Received disconnect from 171.61.22.56 port 4672:11: Bye Bye [preauth] 2026-07-01T10:04:22.795652-05:00 claude-cloud sshd[1003993]: Disconnected from invalid user ec2-user 171.61.22.56 port 4672 [preauth] 2026-07-01T10:04:24.081357-05:00 claude-cloud systemd-logind[853]: New session c5688 of user claude. 2026-07-01T10:04:24.410534-05:00 claude-cloud systemd-logind[853]: Session c5688 logged out. Waiting for processes to exit. 2026-07-01T10:04:24.412532-05:00 claude-cloud systemd-logind[853]: Removed session c5688. 2026-07-01T10:04:51.216849-05:00 claude-cloud sshd[1004098]: Received disconnect from 39.115.195.164 port 27228:11: Bye Bye [preauth] 2026-07-01T10:04:51.217868-05:00 claude-cloud sshd[1004098]: Disconnected from authenticating user root 39.115.195.164 port 27228 [preauth] 2026-07-01T10:05:01.366879-05:00 claude-cloud CRON[1004119]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T10:05:01.373753-05:00 claude-cloud CRON[1004119]: pam_unix(cron:session): session closed for user root 2026-07-01T10:05:34.610528-05:00 claude-cloud sshd[1004209]: Invalid user ubuntu from 45.89.63.39 port 56446 2026-07-01T10:05:34.639232-05:00 claude-cloud sshd[1004209]: Received disconnect from 45.89.63.39 port 56446:11: Bye Bye [preauth] 2026-07-01T10:05:34.639757-05:00 claude-cloud sshd[1004209]: Disconnected from invalid user ubuntu 45.89.63.39 port 56446 [preauth] 2026-07-01T10:05:52.734850-05:00 claude-cloud sshd[1004218]: Connection closed by authenticating user root 27.71.230.31 port 45226 [preauth] 2026-07-01T10:05:53.830374-05:00 claude-cloud sshd[1004289]: Received disconnect from 103.189.234.85 port 38764:11: Bye Bye [preauth] 2026-07-01T10:05:53.831417-05:00 claude-cloud sshd[1004289]: Disconnected from authenticating user root 103.189.234.85 port 38764 [preauth] 2026-07-01T10:06:11.759700-05:00 claude-cloud sshd[1004337]: userauth_pubkey: signature algorithm ssh-dss not in PubkeyAcceptedAlgorithms [preauth] 2026-07-01T10:06:11.793334-05:00 claude-cloud sshd[1004337]: Received disconnect from 89.163.145.38 port 36996:11: disconnected by user [preauth] 2026-07-01T10:06:11.793672-05:00 claude-cloud sshd[1004337]: Disconnected from authenticating user root 89.163.145.38 port 36996 [preauth] 2026-07-01T10:06:51.638473-05:00 claude-cloud sshd[1004465]: Received disconnect from 39.115.195.164 port 30067:11: Bye Bye [preauth] 2026-07-01T10:06:51.639133-05:00 claude-cloud sshd[1004465]: Disconnected from authenticating user root 39.115.195.164 port 30067 [preauth] 2026-07-01T10:06:56.991662-05:00 claude-cloud sshd[1004475]: Received disconnect from 171.61.22.56 port 15740:11: Bye Bye [preauth] 2026-07-01T10:06:56.992712-05:00 claude-cloud sshd[1004475]: Disconnected from authenticating user root 171.61.22.56 port 15740 [preauth] 2026-07-01T10:07:47.366747-05:00 claude-cloud sshd[1004594]: Received disconnect from 103.189.234.85 port 32892:11: Bye Bye [preauth] 2026-07-01T10:07:47.367671-05:00 claude-cloud sshd[1004594]: Disconnected from authenticating user root 103.189.234.85 port 32892 [preauth] 2026-07-01T10:08:19.047269-05:00 claude-cloud sshd[1004701]: error: maximum authentication attempts exceeded for root from 79.72.57.232 port 33144 ssh2 [preauth] 2026-07-01T10:08:19.048152-05:00 claude-cloud sshd[1004701]: Disconnecting authenticating user root 79.72.57.232 port 33144: Too many authentication failures [preauth] 2026-07-01T10:08:19.934196-05:00 claude-cloud sshd[1004703]: error: maximum authentication attempts exceeded for root from 79.72.57.232 port 33148 ssh2 [preauth] 2026-07-01T10:08:19.934479-05:00 claude-cloud sshd[1004703]: Disconnecting authenticating user root 79.72.57.232 port 33148: Too many authentication failures [preauth] 2026-07-01T10:08:20.585636-05:00 claude-cloud sshd[1004709]: error: maximum authentication attempts exceeded for root from 79.72.57.232 port 33152 ssh2 [preauth] 2026-07-01T10:08:20.586191-05:00 claude-cloud sshd[1004709]: Disconnecting authenticating user root 79.72.57.232 port 33152: Too many authentication failures [preauth] 2026-07-01T10:08:21.226842-05:00 claude-cloud sshd[1004711]: Received disconnect from 79.72.57.232 port 33166:11: disconnected by user [preauth] 2026-07-01T10:08:21.227197-05:00 claude-cloud sshd[1004711]: Disconnected from authenticating user root 79.72.57.232 port 33166 [preauth] 2026-07-01T10:08:22.017375-05:00 claude-cloud sshd[1004720]: Invalid user admin from 79.72.57.232 port 39048 2026-07-01T10:08:22.276416-05:00 claude-cloud sshd[1004720]: error: maximum authentication attempts exceeded for invalid user admin from 79.72.57.232 port 39048 ssh2 [preauth] 2026-07-01T10:08:22.276720-05:00 claude-cloud sshd[1004720]: Disconnecting invalid user admin 79.72.57.232 port 39048: Too many authentication failures [preauth] 2026-07-01T10:08:49.240017-05:00 claude-cloud sshd[1004813]: Received disconnect from 39.115.195.164 port 56301:11: Bye Bye [preauth] 2026-07-01T10:08:49.241986-05:00 claude-cloud sshd[1004813]: Disconnected from authenticating user root 39.115.195.164 port 56301 [preauth] 2026-07-01T10:09:28.659307-05:00 claude-cloud systemd-logind[853]: New session c5689 of user claude. 2026-07-01T10:09:28.964720-05:00 claude-cloud systemd-logind[853]: Session c5689 logged out. Waiting for processes to exit. 2026-07-01T10:09:28.967574-05:00 claude-cloud systemd-logind[853]: Removed session c5689. 2026-07-01T10:09:31.832387-05:00 claude-cloud sshd[1004925]: Received disconnect from 171.61.22.56 port 17312:11: Bye Bye [preauth] 2026-07-01T10:09:31.832915-05:00 claude-cloud sshd[1004925]: Disconnected from authenticating user root 171.61.22.56 port 17312 [preauth] 2026-07-01T10:10:25.743019-05:00 claude-cloud sshd[1005105]: Connection closed by authenticating user root 36.140.29.110 port 34164 [preauth] 2026-07-01T10:10:28.441142-05:00 claude-cloud sshd[1005143]: Invalid user user from 36.140.29.110 port 46562 2026-07-01T10:10:28.692410-05:00 claude-cloud sshd[1005143]: Connection closed by invalid user user 36.140.29.110 port 46562 [preauth] 2026-07-01T10:10:33.889453-05:00 claude-cloud sshd[1005152]: Invalid user user from 36.140.29.110 port 49208 2026-07-01T10:10:34.138039-05:00 claude-cloud sshd[1005152]: Connection closed by invalid user user 36.140.29.110 port 49208 [preauth] 2026-07-01T10:10:38.032003-05:00 claude-cloud sshd[1005165]: Invalid user user from 36.140.29.110 port 55246 2026-07-01T10:10:38.862640-05:00 claude-cloud sshd[1005165]: Connection closed by invalid user user 36.140.29.110 port 55246 [preauth] 2026-07-01T10:10:42.890095-05:00 claude-cloud sshd[1005197]: Invalid user user from 36.140.29.110 port 33296 2026-07-01T10:10:43.125069-05:00 claude-cloud sshd[1005197]: Connection closed by invalid user user 36.140.29.110 port 33296 [preauth] 2026-07-01T10:10:54.378593-05:00 claude-cloud sshd[1005232]: Invalid user mythtv from 45.198.224.46 port 58406 2026-07-01T10:10:55.174381-05:00 claude-cloud sshd[1005232]: Connection closed by invalid user mythtv 45.198.224.46 port 58406 [preauth] 2026-07-01T10:11:31.955599-05:00 claude-cloud sshd[1005335]: Received disconnect from 45.89.63.39 port 47812:11: Bye Bye [preauth] 2026-07-01T10:11:31.957335-05:00 claude-cloud sshd[1005335]: Disconnected from authenticating user root 45.89.63.39 port 47812 [preauth] 2026-07-01T10:11:42.002841-05:00 claude-cloud sshd[1005344]: Connection closed by authenticating user root 27.71.230.31 port 49976 [preauth] 2026-07-01T10:11:59.306566-05:00 claude-cloud sshd[1005426]: Invalid user ubuntu from 171.61.22.56 port 11560 2026-07-01T10:11:59.508031-05:00 claude-cloud sshd[1005426]: Received disconnect from 171.61.22.56 port 11560:11: Bye Bye [preauth] 2026-07-01T10:11:59.508218-05:00 claude-cloud sshd[1005426]: Disconnected from invalid user ubuntu 171.61.22.56 port 11560 [preauth] 2026-07-01T10:13:10.154109-05:00 claude-cloud systemd-logind[853]: Session c5675 logged out. Waiting for processes to exit. 2026-07-01T10:13:10.158533-05:00 claude-cloud systemd-logind[853]: Session c5678 logged out. Waiting for processes to exit. 2026-07-01T10:13:10.160580-05:00 claude-cloud systemd-logind[853]: Session c5674 logged out. Waiting for processes to exit. 2026-07-01T10:13:10.162233-05:00 claude-cloud systemd-logind[853]: Session c5677 logged out. Waiting for processes to exit. 2026-07-01T10:13:10.164990-05:00 claude-cloud systemd-logind[853]: Removed session c5675. 2026-07-01T10:13:10.167783-05:00 claude-cloud systemd-logind[853]: Removed session c5677. 2026-07-01T10:13:10.169103-05:00 claude-cloud systemd-logind[853]: Removed session c5678. 2026-07-01T10:13:10.170816-05:00 claude-cloud systemd-logind[853]: Removed session c5674. 2026-07-01T10:13:40.240221-05:00 claude-cloud sshd[1005717]: Connection closed by authenticating user root 45.148.10.240 port 57242 [preauth] 2026-07-01T10:14:26.631601-05:00 claude-cloud sshd[1005851]: Received disconnect from 171.61.22.56 port 14161:11: Bye Bye [preauth] 2026-07-01T10:14:26.632609-05:00 claude-cloud sshd[1005851]: Disconnected from authenticating user root 171.61.22.56 port 14161 [preauth] 2026-07-01T10:14:32.461661-05:00 claude-cloud systemd-logind[853]: New session c5690 of user claude. 2026-07-01T10:14:32.768511-05:00 claude-cloud systemd-logind[853]: Session c5690 logged out. Waiting for processes to exit. 2026-07-01T10:14:32.770006-05:00 claude-cloud systemd-logind[853]: Removed session c5690. 2026-07-01T10:14:37.428604-05:00 claude-cloud sshd[1005883]: Received disconnect from 45.89.63.39 port 33132:11: Bye Bye [preauth] 2026-07-01T10:14:37.429321-05:00 claude-cloud sshd[1005883]: Disconnected from authenticating user root 45.89.63.39 port 33132 [preauth] 2026-07-01T10:15:01.386226-05:00 claude-cloud CRON[1005962]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T10:15:01.393914-05:00 claude-cloud CRON[1005962]: pam_unix(cron:session): session closed for user root 2026-07-01T10:15:12.150079-05:00 claude-cloud sshd[1005986]: Received disconnect from 104.129.17.38 port 35616:11: Bye Bye [preauth] 2026-07-01T10:15:12.150503-05:00 claude-cloud sshd[1005986]: Disconnected from authenticating user root 104.129.17.38 port 35616 [preauth] 2026-07-01T10:15:16.254915-05:00 claude-cloud sshd[1006019]: Connection closed by authenticating user root 45.148.10.240 port 51538 [preauth] 2026-07-01T10:16:45.779913-05:00 claude-cloud sshd[1006272]: Invalid user nextcloud from 171.61.22.56 port 31873 2026-07-01T10:16:45.978152-05:00 claude-cloud sshd[1006272]: Received disconnect from 171.61.22.56 port 31873:11: Bye Bye [preauth] 2026-07-01T10:16:45.978424-05:00 claude-cloud sshd[1006272]: Disconnected from invalid user nextcloud 171.61.22.56 port 31873 [preauth] 2026-07-01T10:16:49.401976-05:00 claude-cloud sshd[1006287]: Connection closed by authenticating user root 45.148.10.240 port 44050 [preauth] 2026-07-01T10:17:01.407828-05:00 claude-cloud CRON[1006314]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T10:17:01.414422-05:00 claude-cloud CRON[1006314]: pam_unix(cron:session): session closed for user root 2026-07-01T10:17:37.459580-05:00 claude-cloud sshd[1006408]: Invalid user admin from 193.46.255.86 port 10182 2026-07-01T10:17:37.487823-05:00 claude-cloud sshd[1006408]: Connection closed by invalid user admin 193.46.255.86 port 10182 [preauth] 2026-07-01T10:18:02.330807-05:00 claude-cloud sshd[1006503]: Received disconnect from 124.40.252.3 port 49786:11: Bye Bye [preauth] 2026-07-01T10:18:02.331325-05:00 claude-cloud sshd[1006503]: Disconnected from authenticating user root 124.40.252.3 port 49786 [preauth] 2026-07-01T10:18:13.043212-05:00 claude-cloud sshd[1006378]: Connection closed by authenticating user root 27.71.230.31 port 42146 [preauth] 2026-07-01T10:18:31.353112-05:00 claude-cloud sshd[1006594]: Connection closed by authenticating user root 45.148.10.240 port 55994 [preauth] 2026-07-01T10:19:37.285603-05:00 claude-cloud systemd-logind[853]: New session c5691 of user claude. 2026-07-01T10:19:37.561987-05:00 claude-cloud systemd-logind[853]: Session c5691 logged out. Waiting for processes to exit. 2026-07-01T10:19:37.564904-05:00 claude-cloud systemd-logind[853]: Removed session c5691. 2026-07-01T10:20:17.158637-05:00 claude-cloud sshd[1006959]: Invalid user solana from 45.148.10.240 port 43164 2026-07-01T10:20:17.172214-05:00 claude-cloud sshd[1006959]: Connection closed by invalid user solana 45.148.10.240 port 43164 [preauth] 2026-07-01T10:20:33.408265-05:00 claude-cloud sshd[1006978]: Connection closed by authenticating user root 45.198.224.46 port 40970 [preauth] 2026-07-01T10:20:37.758450-05:00 claude-cloud sshd[1007010]: Received disconnect from 45.89.63.39 port 54750:11: Bye Bye [preauth] 2026-07-01T10:20:37.758879-05:00 claude-cloud sshd[1007010]: Disconnected from authenticating user root 45.89.63.39 port 54750 [preauth] 2026-07-01T10:20:40.485665-05:00 claude-cloud sshd[1007024]: Received disconnect from 217.253.125.123 port 41996:11: Bye Bye [preauth] 2026-07-01T10:20:40.486010-05:00 claude-cloud sshd[1007024]: Disconnected from authenticating user root 217.253.125.123 port 41996 [preauth] 2026-07-01T10:21:56.816152-05:00 claude-cloud sshd[1007247]: Invalid user solana from 45.148.10.240 port 47056 2026-07-01T10:21:56.842597-05:00 claude-cloud sshd[1007247]: Connection closed by invalid user solana 45.148.10.240 port 47056 [preauth] 2026-07-01T10:22:02.274702-05:00 claude-cloud sshd[1007272]: Invalid user ubuntu from 101.36.124.127 port 49986 2026-07-01T10:22:02.473072-05:00 claude-cloud sshd[1007272]: Received disconnect from 101.36.124.127 port 49986:11: Bye Bye [preauth] 2026-07-01T10:22:02.473392-05:00 claude-cloud sshd[1007272]: Disconnected from invalid user ubuntu 101.36.124.127 port 49986 [preauth] 2026-07-01T10:23:24.460104-05:00 claude-cloud sshd[1007464]: Connection closed by authenticating user root 27.71.230.31 port 48370 [preauth] 2026-07-01T10:23:36.862066-05:00 claude-cloud sshd[1007505]: Received disconnect from 45.89.63.39 port 59578:11: Bye Bye [preauth] 2026-07-01T10:23:36.863244-05:00 claude-cloud sshd[1007505]: Disconnected from authenticating user root 45.89.63.39 port 59578 [preauth] 2026-07-01T10:23:37.950937-05:00 claude-cloud sshd[1007516]: Invalid user defi from 45.148.10.240 port 40372 2026-07-01T10:23:37.963886-05:00 claude-cloud sshd[1007516]: Connection closed by invalid user defi 45.148.10.240 port 40372 [preauth] 2026-07-01T10:24:40.785191-05:00 claude-cloud systemd-logind[853]: New session c5692 of user claude. 2026-07-01T10:24:41.099020-05:00 claude-cloud systemd-logind[853]: Session c5692 logged out. Waiting for processes to exit. 2026-07-01T10:24:41.100556-05:00 claude-cloud systemd-logind[853]: Removed session c5692. 2026-07-01T10:25:01.425570-05:00 claude-cloud CRON[1007793]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T10:25:01.431351-05:00 claude-cloud CRON[1007793]: pam_unix(cron:session): session closed for user root 2026-07-01T10:25:25.046880-05:00 claude-cloud sshd[1007867]: Invalid user geth from 45.148.10.240 port 44326 2026-07-01T10:25:25.059351-05:00 claude-cloud sshd[1007867]: Connection closed by invalid user geth 45.148.10.240 port 44326 [preauth] 2026-07-01T10:26:40.158150-05:00 claude-cloud sshd[1008063]: Received disconnect from 222.71.205.34 port 60174:11: Bye Bye [preauth] 2026-07-01T10:26:40.158874-05:00 claude-cloud sshd[1008063]: Disconnected from authenticating user root 222.71.205.34 port 60174 [preauth] 2026-07-01T10:27:08.311477-05:00 claude-cloud sshd[1008152]: Invalid user ethereum from 45.148.10.240 port 52790 2026-07-01T10:27:08.324551-05:00 claude-cloud sshd[1008152]: Connection closed by invalid user ethereum 45.148.10.240 port 52790 [preauth] 2026-07-01T10:27:14.320811-05:00 claude-cloud sshd[1008171]: Received disconnect from 104.129.17.38 port 41384:11: Bye Bye [preauth] 2026-07-01T10:27:14.321264-05:00 claude-cloud sshd[1008171]: Disconnected from authenticating user root 104.129.17.38 port 41384 [preauth] 2026-07-01T10:27:58.701836-05:00 claude-cloud sshd[1008317]: Received disconnect from 124.40.252.3 port 39096:11: Bye Bye [preauth] 2026-07-01T10:27:58.702246-05:00 claude-cloud sshd[1008317]: Disconnected from authenticating user root 124.40.252.3 port 39096 [preauth] 2026-07-01T10:28:22.862786-05:00 claude-cloud sshd[1008397]: Received disconnect from 103.207.9.246 port 33136:11: Bye Bye [preauth] 2026-07-01T10:28:22.863402-05:00 claude-cloud sshd[1008397]: Disconnected from authenticating user root 103.207.9.246 port 33136 [preauth] 2026-07-01T10:29:10.793270-05:00 claude-cloud sshd[1008504]: Invalid user gitadmin from 104.129.17.38 port 40218 2026-07-01T10:29:10.970688-05:00 claude-cloud sshd[1008504]: Received disconnect from 104.129.17.38 port 40218:11: Bye Bye [preauth] 2026-07-01T10:29:10.971187-05:00 claude-cloud sshd[1008504]: Disconnected from invalid user gitadmin 104.129.17.38 port 40218 [preauth] 2026-07-01T10:29:14.542741-05:00 claude-cloud sshd[1008516]: Connection closed by authenticating user root 27.71.230.31 port 46374 [preauth] 2026-07-01T10:29:42.306131-05:00 claude-cloud sshd[1008617]: Received disconnect from 165.154.227.8 port 38926:11: Bye Bye [preauth] 2026-07-01T10:29:42.308028-05:00 claude-cloud sshd[1008617]: Disconnected from authenticating user root 165.154.227.8 port 38926 [preauth] 2026-07-01T10:29:44.507112-05:00 claude-cloud systemd-logind[853]: New session c5693 of user claude. 2026-07-01T10:29:44.780289-05:00 claude-cloud systemd-logind[853]: Session c5693 logged out. Waiting for processes to exit. 2026-07-01T10:29:44.782156-05:00 claude-cloud systemd-logind[853]: Removed session c5693. 2026-07-01T10:30:22.564746-05:00 claude-cloud sshd[1008750]: Received disconnect from 124.40.252.3 port 32854:11: Bye Bye [preauth] 2026-07-01T10:30:22.565697-05:00 claude-cloud sshd[1008750]: Disconnected from authenticating user root 124.40.252.3 port 32854 [preauth] 2026-07-01T10:30:23.051768-05:00 claude-cloud sshd[1008749]: Invalid user ubuntu from 45.198.224.46 port 50208 2026-07-01T10:30:23.703108-05:00 claude-cloud sshd[1008749]: Connection closed by invalid user ubuntu 45.198.224.46 port 50208 [preauth] 2026-07-01T10:30:41.961788-05:00 claude-cloud sshd[1008802]: Received disconnect from 217.253.125.123 port 37514:11: Bye Bye [preauth] 2026-07-01T10:30:41.962548-05:00 claude-cloud sshd[1008802]: Disconnected from authenticating user root 217.253.125.123 port 37514 [preauth] 2026-07-01T10:31:12.341931-05:00 claude-cloud sshd[1008971]: Received disconnect from 104.129.17.38 port 47442:11: Bye Bye [preauth] 2026-07-01T10:31:12.345546-05:00 claude-cloud sshd[1008971]: Disconnected from authenticating user root 104.129.17.38 port 47442 [preauth] 2026-07-01T10:31:18.115222-05:00 claude-cloud sshd[1008990]: Received disconnect from 101.36.124.127 port 36588:11: Bye Bye [preauth] 2026-07-01T10:31:18.116426-05:00 claude-cloud sshd[1008990]: Disconnected from authenticating user root 101.36.124.127 port 36588 [preauth] 2026-07-01T10:31:58.064243-05:00 claude-cloud sshd[1009105]: Received disconnect from 103.207.9.246 port 34924:11: Bye Bye [preauth] 2026-07-01T10:31:58.066370-05:00 claude-cloud sshd[1009105]: Disconnected from authenticating user root 103.207.9.246 port 34924 [preauth] 2026-07-01T10:32:34.185363-05:00 claude-cloud sshd[1009194]: Invalid user es from 217.253.125.123 port 43882 2026-07-01T10:32:34.223431-05:00 claude-cloud sshd[1009194]: Received disconnect from 217.253.125.123 port 43882:11: Bye Bye [preauth] 2026-07-01T10:32:34.223625-05:00 claude-cloud sshd[1009194]: Disconnected from invalid user es 217.253.125.123 port 43882 [preauth] 2026-07-01T10:32:52.142850-05:00 claude-cloud sshd[1009261]: Received disconnect from 124.40.252.3 port 40898:11: Bye Bye [preauth] 2026-07-01T10:32:52.143319-05:00 claude-cloud sshd[1009261]: Disconnected from authenticating user root 124.40.252.3 port 40898 [preauth] 2026-07-01T10:33:07.080258-05:00 claude-cloud sshd[1009293]: Invalid user test01 from 101.36.124.127 port 42282 2026-07-01T10:33:07.288717-05:00 claude-cloud sshd[1009293]: Received disconnect from 101.36.124.127 port 42282:11: Bye Bye [preauth] 2026-07-01T10:33:07.288920-05:00 claude-cloud sshd[1009293]: Disconnected from invalid user test01 101.36.124.127 port 42282 [preauth] 2026-07-01T10:33:17.158527-05:00 claude-cloud sshd[1009337]: Received disconnect from 104.129.17.38 port 40356:11: Bye Bye [preauth] 2026-07-01T10:33:17.159010-05:00 claude-cloud sshd[1009337]: Disconnected from authenticating user root 104.129.17.38 port 40356 [preauth] 2026-07-01T10:33:22.307250-05:00 claude-cloud sshd[1009350]: Received disconnect from 165.154.227.8 port 56834:11: Bye Bye [preauth] 2026-07-01T10:33:22.307732-05:00 claude-cloud sshd[1009350]: Disconnected from authenticating user root 165.154.227.8 port 56834 [preauth] 2026-07-01T10:33:49.932198-05:00 claude-cloud sshd[1009447]: Received disconnect from 191.101.33.114 port 55188:11: disconnected by user [preauth] 2026-07-01T10:33:49.932725-05:00 claude-cloud sshd[1009447]: Disconnected from authenticating user root 191.101.33.114 port 55188 [preauth] 2026-07-01T10:34:19.528611-05:00 claude-cloud sshd[1009530]: Received disconnect from 103.207.9.246 port 57624:11: Bye Bye [preauth] 2026-07-01T10:34:19.530323-05:00 claude-cloud sshd[1009530]: Disconnected from authenticating user root 103.207.9.246 port 57624 [preauth] 2026-07-01T10:34:21.585941-05:00 claude-cloud sshd[1009539]: Received disconnect from 217.253.125.123 port 50242:11: Bye Bye [preauth] 2026-07-01T10:34:21.586441-05:00 claude-cloud sshd[1009539]: Disconnected from authenticating user root 217.253.125.123 port 50242 [preauth] 2026-07-01T10:34:48.175697-05:00 claude-cloud systemd-logind[853]: New session c5694 of user claude. 2026-07-01T10:34:48.479023-05:00 claude-cloud systemd-logind[853]: Session c5694 logged out. Waiting for processes to exit. 2026-07-01T10:34:48.480711-05:00 claude-cloud systemd-logind[853]: Removed session c5694. 2026-07-01T10:34:50.271130-05:00 claude-cloud sshd[1009628]: Received disconnect from 101.36.124.127 port 42382:11: Bye Bye [preauth] 2026-07-01T10:34:50.273053-05:00 claude-cloud sshd[1009628]: Disconnected from authenticating user root 101.36.124.127 port 42382 [preauth] 2026-07-01T10:35:01.440918-05:00 claude-cloud CRON[1009658]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T10:35:01.446611-05:00 claude-cloud CRON[1009658]: pam_unix(cron:session): session closed for user root 2026-07-01T10:35:14.092373-05:00 claude-cloud sshd[1009699]: Invalid user minecraft from 104.129.17.38 port 43148 2026-07-01T10:35:14.256625-05:00 claude-cloud sshd[1009699]: Received disconnect from 104.129.17.38 port 43148:11: Bye Bye [preauth] 2026-07-01T10:35:14.257022-05:00 claude-cloud sshd[1009699]: Disconnected from invalid user minecraft 104.129.17.38 port 43148 [preauth] 2026-07-01T10:35:18.387542-05:00 claude-cloud sshd[1009717]: Invalid user sysadm from 124.40.252.3 port 59840 2026-07-01T10:35:18.573093-05:00 claude-cloud sshd[1009717]: Received disconnect from 124.40.252.3 port 59840:11: Bye Bye [preauth] 2026-07-01T10:35:18.574017-05:00 claude-cloud sshd[1009717]: Disconnected from invalid user sysadm 124.40.252.3 port 59840 [preauth] 2026-07-01T10:35:21.491633-05:00 claude-cloud sshd[1009694]: Connection closed by authenticating user root 27.71.230.31 port 34904 [preauth] 2026-07-01T10:35:42.183605-05:00 claude-cloud sshd[1009772]: Received disconnect from 222.71.205.34 port 34940:11: Bye Bye [preauth] 2026-07-01T10:35:42.184109-05:00 claude-cloud sshd[1009772]: Disconnected from authenticating user root 222.71.205.34 port 34940 [preauth] 2026-07-01T10:36:11.998608-05:00 claude-cloud sshd[1009886]: Invalid user user1 from 217.253.125.123 port 56584 2026-07-01T10:36:12.087401-05:00 claude-cloud sshd[1009886]: Received disconnect from 217.253.125.123 port 56584:11: Bye Bye [preauth] 2026-07-01T10:36:12.087686-05:00 claude-cloud sshd[1009886]: Disconnected from invalid user user1 217.253.125.123 port 56584 [preauth] 2026-07-01T10:36:29.573676-05:00 claude-cloud sshd[1009921]: Received disconnect from 101.36.124.127 port 52060:11: Bye Bye [preauth] 2026-07-01T10:36:29.574524-05:00 claude-cloud sshd[1009921]: Disconnected from authenticating user root 101.36.124.127 port 52060 [preauth] 2026-07-01T10:36:34.372243-05:00 claude-cloud sshd[1009932]: Received disconnect from 103.207.9.246 port 45140:11: Bye Bye [preauth] 2026-07-01T10:36:34.373867-05:00 claude-cloud sshd[1009932]: Disconnected from authenticating user root 103.207.9.246 port 45140 [preauth] 2026-07-01T10:37:14.474338-05:00 claude-cloud sshd[1010062]: Received disconnect from 104.129.17.38 port 35378:11: Bye Bye [preauth] 2026-07-01T10:37:14.475397-05:00 claude-cloud sshd[1010062]: Disconnected from authenticating user root 104.129.17.38 port 35378 [preauth] 2026-07-01T10:37:39.833609-05:00 claude-cloud sshd[1010130]: Received disconnect from 124.40.252.3 port 41434:11: Bye Bye [preauth] 2026-07-01T10:37:39.834365-05:00 claude-cloud sshd[1010130]: Disconnected from authenticating user root 124.40.252.3 port 41434 [preauth] 2026-07-01T10:37:52.569165-05:00 claude-cloud sshd[1010164]: Received disconnect from 217.253.125.123 port 34706:11: Bye Bye [preauth] 2026-07-01T10:37:52.570454-05:00 claude-cloud sshd[1010164]: Disconnected from authenticating user root 217.253.125.123 port 34706 [preauth] 2026-07-01T10:37:58.945416-05:00 claude-cloud sshd[1010169]: Invalid user user from 36.140.29.110 port 41052 2026-07-01T10:37:59.179852-05:00 claude-cloud sshd[1010169]: Connection closed by invalid user user 36.140.29.110 port 41052 [preauth] 2026-07-01T10:38:00.416543-05:00 claude-cloud sshd[1010178]: Invalid user user from 36.140.29.110 port 46336 2026-07-01T10:38:00.648860-05:00 claude-cloud sshd[1010178]: Connection closed by invalid user user 36.140.29.110 port 46336 [preauth] 2026-07-01T10:38:03.051116-05:00 claude-cloud sshd[1010180]: Invalid user user from 36.140.29.110 port 48166 2026-07-01T10:38:03.282473-05:00 claude-cloud sshd[1010180]: Connection closed by invalid user user 36.140.29.110 port 48166 [preauth] 2026-07-01T10:38:15.136333-05:00 claude-cloud sshd[1010194]: Invalid user user from 36.140.29.110 port 51622 2026-07-01T10:38:15.382826-05:00 claude-cloud sshd[1010194]: Connection closed by invalid user user 36.140.29.110 port 51622 [preauth] 2026-07-01T10:38:19.185682-05:00 claude-cloud sshd[1010273]: Invalid user ubuntu from 101.36.124.127 port 46890 2026-07-01T10:38:19.288954-05:00 claude-cloud sshd[1010262]: Invalid user user from 36.140.29.110 port 37394 2026-07-01T10:38:19.386854-05:00 claude-cloud sshd[1010273]: Received disconnect from 101.36.124.127 port 46890:11: Bye Bye [preauth] 2026-07-01T10:38:19.387187-05:00 claude-cloud sshd[1010273]: Disconnected from invalid user ubuntu 101.36.124.127 port 46890 [preauth] 2026-07-01T10:38:45.788424-05:00 claude-cloud sshd[1010360]: Invalid user validator from 45.148.10.240 port 52564 2026-07-01T10:38:45.802397-05:00 claude-cloud sshd[1010360]: Connection closed by invalid user validator 45.148.10.240 port 52564 [preauth] 2026-07-01T10:38:51.788634-05:00 claude-cloud sshd[1010375]: Invalid user ubuntu from 103.207.9.246 port 49578 2026-07-01T10:38:51.981983-05:00 claude-cloud sshd[1010375]: Received disconnect from 103.207.9.246 port 49578:11: Bye Bye [preauth] 2026-07-01T10:38:51.982241-05:00 claude-cloud sshd[1010375]: Disconnected from invalid user ubuntu 103.207.9.246 port 49578 [preauth] 2026-07-01T10:39:10.697665-05:00 claude-cloud sshd[1010435]: Invalid user sysadm from 104.129.17.38 port 33334 2026-07-01T10:39:10.865556-05:00 claude-cloud sshd[1010435]: Received disconnect from 104.129.17.38 port 33334:11: Bye Bye [preauth] 2026-07-01T10:39:10.865862-05:00 claude-cloud sshd[1010435]: Disconnected from invalid user sysadm 104.129.17.38 port 33334 [preauth] 2026-07-01T10:39:37.732932-05:00 claude-cloud sshd[1010492]: Received disconnect from 165.154.227.8 port 35646:11: Bye Bye [preauth] 2026-07-01T10:39:37.733420-05:00 claude-cloud sshd[1010492]: Disconnected from authenticating user root 165.154.227.8 port 35646 [preauth] 2026-07-01T10:39:51.671418-05:00 claude-cloud systemd-logind[853]: New session c5695 of user claude. 2026-07-01T10:39:51.955918-05:00 claude-cloud systemd-logind[853]: Session c5695 logged out. Waiting for processes to exit. 2026-07-01T10:39:51.958792-05:00 claude-cloud systemd-logind[853]: Removed session c5695. 2026-07-01T10:39:57.389385-05:00 claude-cloud sshd[1010555]: Received disconnect from 101.36.124.127 port 43498:11: Bye Bye [preauth] 2026-07-01T10:39:57.390118-05:00 claude-cloud sshd[1010555]: Disconnected from authenticating user root 101.36.124.127 port 43498 [preauth] 2026-07-01T10:39:58.973817-05:00 claude-cloud sshd[1010557]: Invalid user user from 124.40.252.3 port 50910 2026-07-01T10:39:59.163686-05:00 claude-cloud sshd[1010557]: Received disconnect from 124.40.252.3 port 50910:11: Bye Bye [preauth] 2026-07-01T10:39:59.163979-05:00 claude-cloud sshd[1010557]: Disconnected from invalid user user 124.40.252.3 port 50910 [preauth] 2026-07-01T10:40:07.709099-05:00 claude-cloud sshd[1010578]: Invalid user ubuntu from 45.198.224.46 port 34456 2026-07-01T10:40:08.458335-05:00 claude-cloud sshd[1010578]: Connection closed by invalid user ubuntu 45.198.224.46 port 34456 [preauth] 2026-07-01T10:40:29.686617-05:00 claude-cloud sshd[1010650]: Invalid user node from 45.148.10.240 port 51364 2026-07-01T10:40:29.698024-05:00 claude-cloud sshd[1010650]: Connection closed by invalid user node 45.148.10.240 port 51364 [preauth] 2026-07-01T10:41:02.687198-05:00 claude-cloud sshd[1010827]: Received disconnect from 104.129.17.38 port 36130:11: Bye Bye [preauth] 2026-07-01T10:41:02.687593-05:00 claude-cloud sshd[1010827]: Disconnected from authenticating user root 104.129.17.38 port 36130 [preauth] 2026-07-01T10:41:06.374448-05:00 claude-cloud sshd[1010844]: Received disconnect from 103.207.9.246 port 49908:11: Bye Bye [preauth] 2026-07-01T10:41:06.375054-05:00 claude-cloud sshd[1010844]: Disconnected from authenticating user root 103.207.9.246 port 49908 [preauth] 2026-07-01T10:41:09.866847-05:00 claude-cloud sshd[1010839]: Connection closed by authenticating user root 27.71.230.31 port 54378 [preauth] 2026-07-01T10:41:42.414030-05:00 claude-cloud sshd[1010957]: Received disconnect from 101.36.124.127 port 53312:11: Bye Bye [preauth] 2026-07-01T10:41:42.414860-05:00 claude-cloud sshd[1010957]: Disconnected from authenticating user root 101.36.124.127 port 53312 [preauth] 2026-07-01T10:42:05.278095-05:00 claude-cloud sshd[1011022]: Invalid user operator from 45.148.10.240 port 50796 2026-07-01T10:42:05.290645-05:00 claude-cloud sshd[1011022]: Connection closed by invalid user operator 45.148.10.240 port 50796 [preauth] 2026-07-01T10:42:12.684249-05:00 claude-cloud sshd[1011035]: Received disconnect from 124.40.252.3 port 34440:11: Bye Bye [preauth] 2026-07-01T10:42:12.685219-05:00 claude-cloud sshd[1011035]: Disconnected from authenticating user root 124.40.252.3 port 34440 [preauth] 2026-07-01T10:42:37.305688-05:00 claude-cloud sshd[1011092]: Received disconnect from 165.154.227.8 port 35908:11: Bye Bye [preauth] 2026-07-01T10:42:37.306153-05:00 claude-cloud sshd[1011092]: Disconnected from authenticating user root 165.154.227.8 port 35908 [preauth] 2026-07-01T10:42:55.710222-05:00 claude-cloud sshd[1011146]: Received disconnect from 104.129.17.38 port 43850:11: Bye Bye [preauth] 2026-07-01T10:42:55.710586-05:00 claude-cloud sshd[1011146]: Disconnected from authenticating user root 104.129.17.38 port 43850 [preauth] 2026-07-01T10:43:18.801731-05:00 claude-cloud sshd[1011239]: Received disconnect from 103.207.9.246 port 59402:11: Bye Bye [preauth] 2026-07-01T10:43:18.802569-05:00 claude-cloud sshd[1011239]: Disconnected from authenticating user root 103.207.9.246 port 59402 [preauth] 2026-07-01T10:43:19.247709-05:00 claude-cloud sshd[1011241]: Invalid user admin from 101.36.124.127 port 36284 2026-07-01T10:43:19.447400-05:00 claude-cloud sshd[1011241]: Received disconnect from 101.36.124.127 port 36284:11: Bye Bye [preauth] 2026-07-01T10:43:19.447674-05:00 claude-cloud sshd[1011241]: Disconnected from invalid user admin 101.36.124.127 port 36284 [preauth] 2026-07-01T10:43:43.997465-05:00 claude-cloud sshd[1011309]: Invalid user trader from 45.148.10.240 port 48604 2026-07-01T10:43:44.010761-05:00 claude-cloud sshd[1011309]: Connection closed by invalid user trader 45.148.10.240 port 48604 [preauth] 2026-07-01T10:43:59.575707-05:00 claude-cloud sshd[1011340]: Connection reset by 170.130.187.22 port 63676 [preauth] 2026-07-01T10:44:11.144502-05:00 claude-cloud sshd[1011370]: Received disconnect from 222.71.205.34 port 56834:11: Bye Bye [preauth] 2026-07-01T10:44:11.145158-05:00 claude-cloud sshd[1011370]: Disconnected from authenticating user root 222.71.205.34 port 56834 [preauth] 2026-07-01T10:44:27.265698-05:00 claude-cloud sshd[1011432]: Invalid user suliyilei1 from 185.242.3.195 port 53722 2026-07-01T10:44:27.272380-05:00 claude-cloud sshd[1011432]: Connection closed by invalid user suliyilei1 185.242.3.195 port 53722 [preauth] 2026-07-01T10:44:28.839770-05:00 claude-cloud sshd[1011434]: Received disconnect from 124.40.252.3 port 54536:11: Bye Bye [preauth] 2026-07-01T10:44:28.840411-05:00 claude-cloud sshd[1011434]: Disconnected from authenticating user root 124.40.252.3 port 54536 [preauth] 2026-07-01T10:44:34.434805-05:00 claude-cloud sshd[1011454]: Invalid user admin from 2.57.121.25 port 41792 2026-07-01T10:44:34.462178-05:00 claude-cloud sshd[1011454]: Connection closed by invalid user admin 2.57.121.25 port 41792 [preauth] 2026-07-01T10:44:55.189452-05:00 claude-cloud systemd-logind[853]: New session c5696 of user claude. 2026-07-01T10:44:55.460690-05:00 claude-cloud systemd-logind[853]: Session c5696 logged out. Waiting for processes to exit. 2026-07-01T10:44:55.463402-05:00 claude-cloud systemd-logind[853]: Removed session c5696. 2026-07-01T10:44:56.841265-05:00 claude-cloud sshd[1011540]: Received disconnect from 104.129.17.38 port 38204:11: Bye Bye [preauth] 2026-07-01T10:44:56.842054-05:00 claude-cloud sshd[1011540]: Disconnected from authenticating user root 104.129.17.38 port 38204 [preauth] 2026-07-01T10:45:01.457506-05:00 claude-cloud CRON[1011553]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T10:45:01.463452-05:00 claude-cloud CRON[1011553]: pam_unix(cron:session): session closed for user root 2026-07-01T10:45:03.868127-05:00 claude-cloud sshd[1011563]: Received disconnect from 101.36.124.127 port 58894:11: Bye Bye [preauth] 2026-07-01T10:45:03.868412-05:00 claude-cloud sshd[1011563]: Disconnected from authenticating user root 101.36.124.127 port 58894 [preauth] 2026-07-01T10:45:29.090743-05:00 claude-cloud sshd[1011643]: Invalid user trading from 45.148.10.240 port 43902 2026-07-01T10:45:29.103917-05:00 claude-cloud sshd[1011643]: Connection closed by invalid user trading 45.148.10.240 port 43902 [preauth] 2026-07-01T10:45:31.954243-05:00 claude-cloud sshd[1011647]: Invalid user admin from 103.207.9.246 port 43114 2026-07-01T10:45:32.140774-05:00 claude-cloud sshd[1011647]: Received disconnect from 103.207.9.246 port 43114:11: Bye Bye [preauth] 2026-07-01T10:45:32.141178-05:00 claude-cloud sshd[1011647]: Disconnected from invalid user admin 103.207.9.246 port 43114 [preauth] 2026-07-01T10:45:50.413872-05:00 claude-cloud sshd[1011702]: Received disconnect from 165.154.227.8 port 34574:11: Bye Bye [preauth] 2026-07-01T10:45:50.415956-05:00 claude-cloud sshd[1011702]: Disconnected from authenticating user root 165.154.227.8 port 34574 [preauth] 2026-07-01T10:46:46.534354-05:00 claude-cloud sshd[1011873]: Invalid user gitadmin from 124.40.252.3 port 36306 2026-07-01T10:46:46.727447-05:00 claude-cloud sshd[1011873]: Received disconnect from 124.40.252.3 port 36306:11: Bye Bye [preauth] 2026-07-01T10:46:46.727843-05:00 claude-cloud sshd[1011873]: Disconnected from invalid user gitadmin 124.40.252.3 port 36306 [preauth] 2026-07-01T10:46:46.774213-05:00 claude-cloud sshd[1011871]: Received disconnect from 101.36.124.127 port 43882:11: Bye Bye [preauth] 2026-07-01T10:46:46.774484-05:00 claude-cloud sshd[1011871]: Disconnected from authenticating user root 101.36.124.127 port 43882 [preauth] 2026-07-01T10:47:02.256692-05:00 claude-cloud sshd[1011919]: Received disconnect from 104.129.17.38 port 42990:11: Bye Bye [preauth] 2026-07-01T10:47:02.257191-05:00 claude-cloud sshd[1011919]: Disconnected from authenticating user root 104.129.17.38 port 42990 [preauth] 2026-07-01T10:47:16.678736-05:00 claude-cloud sshd[1011917]: Connection closed by authenticating user root 27.71.230.31 port 32824 [preauth] 2026-07-01T10:47:37.563488-05:00 claude-cloud sshd[1012021]: Received disconnect from 103.207.9.246 port 50678:11: Bye Bye [preauth] 2026-07-01T10:47:37.564044-05:00 claude-cloud sshd[1012021]: Disconnected from authenticating user root 103.207.9.246 port 50678 [preauth] 2026-07-01T10:48:27.036472-05:00 claude-cloud sshd[1012162]: Received disconnect from 101.36.124.127 port 34634:11: Bye Bye [preauth] 2026-07-01T10:48:27.036898-05:00 claude-cloud sshd[1012162]: Disconnected from authenticating user root 101.36.124.127 port 34634 [preauth] 2026-07-01T10:48:50.295614-05:00 claude-cloud sshd[1012243]: Received disconnect from 165.154.227.8 port 52916:11: Bye Bye [preauth] 2026-07-01T10:48:50.296245-05:00 claude-cloud sshd[1012243]: Disconnected from authenticating user root 165.154.227.8 port 52916 [preauth] 2026-07-01T10:49:03.789781-05:00 claude-cloud sshd[1012271]: Received disconnect from 124.40.252.3 port 49034:11: Bye Bye [preauth] 2026-07-01T10:49:03.791031-05:00 claude-cloud sshd[1012271]: Disconnected from authenticating user root 124.40.252.3 port 49034 [preauth] 2026-07-01T10:49:10.080671-05:00 claude-cloud sshd[1012289]: Received disconnect from 104.129.17.38 port 45208:11: Bye Bye [preauth] 2026-07-01T10:49:10.081571-05:00 claude-cloud sshd[1012289]: Disconnected from authenticating user root 104.129.17.38 port 45208 [preauth] 2026-07-01T10:49:44.728656-05:00 claude-cloud sshd[1012384]: Invalid user test01 from 103.207.9.246 port 39922 2026-07-01T10:49:44.914727-05:00 claude-cloud sshd[1012384]: Received disconnect from 103.207.9.246 port 39922:11: Bye Bye [preauth] 2026-07-01T10:49:44.915097-05:00 claude-cloud sshd[1012384]: Disconnected from invalid user test01 103.207.9.246 port 39922 [preauth] 2026-07-01T10:49:48.072403-05:00 claude-cloud sshd[1012411]: Invalid user test from 45.198.224.46 port 51082 2026-07-01T10:49:48.796541-05:00 claude-cloud sshd[1012411]: Connection closed by invalid user test 45.198.224.46 port 51082 [preauth] 2026-07-01T10:49:58.716127-05:00 claude-cloud systemd-logind[853]: New session c5697 of user claude. 2026-07-01T10:49:58.998766-05:00 claude-cloud systemd-logind[853]: Session c5697 logged out. Waiting for processes to exit. 2026-07-01T10:49:59.000989-05:00 claude-cloud systemd-logind[853]: Removed session c5697. 2026-07-01T10:50:09.017947-05:00 claude-cloud sshd[1012468]: Received disconnect from 101.36.124.127 port 51416:11: Bye Bye [preauth] 2026-07-01T10:50:09.018728-05:00 claude-cloud sshd[1012468]: Disconnected from authenticating user root 101.36.124.127 port 51416 [preauth] 2026-07-01T10:50:19.167610-05:00 claude-cloud sshd[1012508]: Received disconnect from 222.71.205.34 port 52634:11: Bye Bye [preauth] 2026-07-01T10:50:19.168610-05:00 claude-cloud sshd[1012508]: Disconnected from authenticating user root 222.71.205.34 port 52634 [preauth] 2026-07-01T10:51:11.538243-05:00 claude-cloud sshd[1012679]: Invalid user user from 104.129.17.38 port 44172 2026-07-01T10:51:11.704561-05:00 claude-cloud sshd[1012679]: Received disconnect from 104.129.17.38 port 44172:11: Bye Bye [preauth] 2026-07-01T10:51:11.704910-05:00 claude-cloud sshd[1012679]: Disconnected from invalid user user 104.129.17.38 port 44172 [preauth] 2026-07-01T10:51:24.734528-05:00 claude-cloud sshd[1012714]: Received disconnect from 124.40.252.3 port 45248:11: Bye Bye [preauth] 2026-07-01T10:51:24.736995-05:00 claude-cloud sshd[1012714]: Disconnected from authenticating user root 124.40.252.3 port 45248 [preauth] 2026-07-01T10:51:55.791385-05:00 claude-cloud sshd[1013005]: Invalid user ubuntu from 165.154.227.8 port 55960 2026-07-01T10:51:56.020673-05:00 claude-cloud sshd[1013005]: Received disconnect from 165.154.227.8 port 55960:11: Bye Bye [preauth] 2026-07-01T10:51:56.021032-05:00 claude-cloud sshd[1013005]: Disconnected from invalid user ubuntu 165.154.227.8 port 55960 [preauth] 2026-07-01T10:51:57.558784-05:00 claude-cloud sshd[1013007]: Received disconnect from 101.36.124.127 port 51124:11: Bye Bye [preauth] 2026-07-01T10:51:57.559542-05:00 claude-cloud sshd[1013007]: Disconnected from authenticating user root 101.36.124.127 port 51124 [preauth] 2026-07-01T10:52:03.290335-05:00 claude-cloud sshd[1013025]: Received disconnect from 103.207.9.246 port 59836:11: Bye Bye [preauth] 2026-07-01T10:52:03.291213-05:00 claude-cloud sshd[1013025]: Disconnected from authenticating user root 103.207.9.246 port 59836 [preauth] 2026-07-01T10:53:00.916571-05:00 claude-cloud sshd[1013305]: Connection closed by authenticating user root 27.71.230.31 port 36172 [preauth] 2026-07-01T10:53:12.823835-05:00 claude-cloud sshd[1013345]: Received disconnect from 104.129.17.38 port 40264:11: Bye Bye [preauth] 2026-07-01T10:53:12.824684-05:00 claude-cloud sshd[1013345]: Disconnected from authenticating user root 104.129.17.38 port 40264 [preauth] 2026-07-01T10:53:17.189110-05:00 claude-cloud sshd[1013346]: Invalid user dspace from 222.71.205.34 port 50530 2026-07-01T10:53:17.416891-05:00 claude-cloud sshd[1013346]: Received disconnect from 222.71.205.34 port 50530:11: Bye Bye [preauth] 2026-07-01T10:53:17.417861-05:00 claude-cloud sshd[1013346]: Disconnected from invalid user dspace 222.71.205.34 port 50530 [preauth] 2026-07-01T10:53:45.712424-05:00 claude-cloud sshd[1013599]: Received disconnect from 124.40.252.3 port 54210:11: Bye Bye [preauth] 2026-07-01T10:53:45.714021-05:00 claude-cloud sshd[1013599]: Disconnected from authenticating user root 124.40.252.3 port 54210 [preauth] 2026-07-01T10:53:46.730782-05:00 claude-cloud sshd[1013601]: Received disconnect from 101.36.124.127 port 33640:11: Bye Bye [preauth] 2026-07-01T10:53:46.731226-05:00 claude-cloud sshd[1013601]: Disconnected from authenticating user root 101.36.124.127 port 33640 [preauth] 2026-07-01T10:54:13.899610-05:00 claude-cloud sshd[1013657]: Received disconnect from 103.207.9.246 port 53862:11: Bye Bye [preauth] 2026-07-01T10:54:13.900327-05:00 claude-cloud sshd[1013657]: Disconnected from authenticating user root 103.207.9.246 port 53862 [preauth] 2026-07-01T10:55:01.474455-05:00 claude-cloud CRON[1013817]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T10:55:01.479078-05:00 claude-cloud CRON[1013817]: pam_unix(cron:session): session closed for user root 2026-07-01T10:55:02.410039-05:00 claude-cloud systemd-logind[853]: New session c5698 of user claude. 2026-07-01T10:55:02.776972-05:00 claude-cloud systemd-logind[853]: Session c5698 logged out. Waiting for processes to exit. 2026-07-01T10:55:02.778557-05:00 claude-cloud systemd-logind[853]: Removed session c5698. 2026-07-01T10:55:02.978376-05:00 claude-cloud sshd[1013822]: Invalid user test01 from 165.154.227.8 port 47616 2026-07-01T10:55:03.221159-05:00 claude-cloud sshd[1013822]: Received disconnect from 165.154.227.8 port 47616:11: Bye Bye [preauth] 2026-07-01T10:55:03.221566-05:00 claude-cloud sshd[1013822]: Disconnected from invalid user test01 165.154.227.8 port 47616 [preauth] 2026-07-01T10:55:30.209109-05:00 claude-cloud sshd[1013912]: Invalid user shardeum from 45.148.10.240 port 41550 2026-07-01T10:55:30.222488-05:00 claude-cloud sshd[1013912]: Connection closed by invalid user shardeum 45.148.10.240 port 41550 [preauth] 2026-07-01T10:56:04.252645-05:00 claude-cloud sshd[1013998]: Received disconnect from 124.40.252.3 port 58982:11: Bye Bye [preauth] 2026-07-01T10:56:04.253745-05:00 claude-cloud sshd[1013998]: Disconnected from authenticating user root 124.40.252.3 port 58982 [preauth] 2026-07-01T10:56:26.992624-05:00 claude-cloud sshd[1014062]: Received disconnect from 103.207.9.246 port 43418:11: Bye Bye [preauth] 2026-07-01T10:56:26.992962-05:00 claude-cloud sshd[1014062]: Disconnected from authenticating user root 103.207.9.246 port 43418 [preauth] 2026-07-01T10:57:17.045886-05:00 claude-cloud sshd[1014211]: Connection closed by authenticating user root 45.148.10.240 port 48766 [preauth] 2026-07-01T10:58:25.531190-05:00 claude-cloud sshd[1014404]: Invalid user minecraft from 124.40.252.3 port 51796 2026-07-01T10:58:25.726824-05:00 claude-cloud sshd[1014404]: Received disconnect from 124.40.252.3 port 51796:11: Bye Bye [preauth] 2026-07-01T10:58:25.727393-05:00 claude-cloud sshd[1014404]: Disconnected from invalid user minecraft 124.40.252.3 port 51796 [preauth] 2026-07-01T10:58:44.167851-05:00 claude-cloud sshd[1014452]: Received disconnect from 103.207.9.246 port 40778:11: Bye Bye [preauth] 2026-07-01T10:58:44.168765-05:00 claude-cloud sshd[1014452]: Disconnected from authenticating user root 103.207.9.246 port 40778 [preauth] 2026-07-01T10:58:57.766775-05:00 claude-cloud sshd[1014498]: Connection closed by authenticating user root 27.71.230.31 port 52066 [preauth] 2026-07-01T10:59:01.204749-05:00 claude-cloud sshd[1014514]: Connection closed by authenticating user root 45.148.10.240 port 40998 [preauth] 2026-07-01T10:59:28.993102-05:00 claude-cloud sshd[1014602]: Received disconnect from 188.44.20.32 port 37240:11: disconnected by user [preauth] 2026-07-01T10:59:28.994261-05:00 claude-cloud sshd[1014602]: Disconnected from authenticating user root 188.44.20.32 port 37240 [preauth] 2026-07-01T10:59:31.393830-05:00 claude-cloud sshd[1014601]: Invalid user ubuntu from 45.198.224.46 port 57564 2026-07-01T10:59:32.164256-05:00 claude-cloud sshd[1014601]: Connection closed by invalid user ubuntu 45.198.224.46 port 57564 [preauth] 2026-07-01T11:00:06.324575-05:00 claude-cloud systemd-logind[853]: New session c5699 of user claude. 2026-07-01T11:00:06.635761-05:00 claude-cloud systemd-logind[853]: Session c5699 logged out. Waiting for processes to exit. 2026-07-01T11:00:06.637055-05:00 claude-cloud systemd-logind[853]: Removed session c5699. 2026-07-01T11:00:38.789498-05:00 claude-cloud sshd[1014841]: Connection closed by authenticating user root 45.148.10.240 port 57488 [preauth] 2026-07-01T11:00:59.253634-05:00 claude-cloud sshd[1014920]: Invalid user ubuntu from 103.207.9.246 port 40310 2026-07-01T11:00:59.441909-05:00 claude-cloud sshd[1014920]: Received disconnect from 103.207.9.246 port 40310:11: Bye Bye [preauth] 2026-07-01T11:00:59.442079-05:00 claude-cloud sshd[1014920]: Disconnected from invalid user ubuntu 103.207.9.246 port 40310 [preauth] 2026-07-01T11:01:18.998051-05:00 claude-cloud sshd[1014970]: Invalid user ddd from 165.154.227.158 port 60724 2026-07-01T11:01:19.217891-05:00 claude-cloud sshd[1014970]: Received disconnect from 165.154.227.158 port 60724:11: Bye Bye [preauth] 2026-07-01T11:01:19.218128-05:00 claude-cloud sshd[1014970]: Disconnected from invalid user ddd 165.154.227.158 port 60724 [preauth] 2026-07-01T11:02:16.882717-05:00 claude-cloud sshd[1015231]: Invalid user firedancer from 45.148.10.240 port 46214 2026-07-01T11:02:16.896490-05:00 claude-cloud sshd[1015231]: Connection closed by invalid user firedancer 45.148.10.240 port 46214 [preauth] 2026-07-01T11:02:32.912597-05:00 claude-cloud sshd[1015259]: Invalid user abbigale from 2.57.121.112 port 14738 2026-07-01T11:02:32.937170-05:00 claude-cloud sshd[1015259]: Connection closed by invalid user abbigale 2.57.121.112 port 14738 [preauth] 2026-07-01T11:03:00.334819-05:00 claude-cloud sshd[1015325]: Invalid user ftp from 193.46.255.86 port 31204 2026-07-01T11:03:00.359679-05:00 claude-cloud sshd[1015325]: Connection closed by invalid user ftp 193.46.255.86 port 31204 [preauth] 2026-07-01T11:03:59.573429-05:00 claude-cloud sshd[1015498]: Invalid user blockchain from 45.148.10.240 port 58788 2026-07-01T11:03:59.585853-05:00 claude-cloud sshd[1015498]: Connection closed by invalid user blockchain 45.148.10.240 port 58788 [preauth] 2026-07-01T11:04:10.404650-05:00 claude-cloud sshd[1015530]: Received disconnect from 165.154.227.8 port 41962:11: Bye Bye [preauth] 2026-07-01T11:04:10.405249-05:00 claude-cloud sshd[1015530]: Disconnected from authenticating user root 165.154.227.8 port 41962 [preauth] 2026-07-01T11:04:56.072432-05:00 claude-cloud sshd[1015666]: Connection closed by authenticating user root 27.71.230.31 port 51178 [preauth] 2026-07-01T11:05:01.394393-05:00 claude-cloud sshd[1015690]: Received disconnect from 222.71.205.34 port 42146:11: Bye Bye [preauth] 2026-07-01T11:05:01.394980-05:00 claude-cloud sshd[1015690]: Disconnected from authenticating user root 222.71.205.34 port 42146 [preauth] 2026-07-01T11:05:01.490550-05:00 claude-cloud CRON[1015699]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T11:05:01.499838-05:00 claude-cloud CRON[1015699]: pam_unix(cron:session): session closed for user root 2026-07-01T11:05:09.953202-05:00 claude-cloud systemd-logind[853]: New session c5700 of user claude. 2026-07-01T11:05:10.227208-05:00 claude-cloud systemd-logind[853]: Session c5700 logged out. Waiting for processes to exit. 2026-07-01T11:05:10.230295-05:00 claude-cloud systemd-logind[853]: Removed session c5700. 2026-07-01T11:05:41.919684-05:00 claude-cloud sshd[1015807]: Connection closed by authenticating user www-data 45.148.10.240 port 60124 [preauth] 2026-07-01T11:07:20.247988-05:00 claude-cloud sshd[1016124]: Invalid user user from 45.148.10.240 port 40610 2026-07-01T11:07:20.260630-05:00 claude-cloud sshd[1016124]: Connection closed by invalid user user 45.148.10.240 port 40610 [preauth] 2026-07-01T11:09:03.204524-05:00 claude-cloud sshd[1016388]: Invalid user user from 45.148.10.240 port 59876 2026-07-01T11:09:03.216470-05:00 claude-cloud sshd[1016388]: Connection closed by invalid user user 45.148.10.240 port 59876 [preauth] 2026-07-01T11:09:24.627207-05:00 claude-cloud sshd[1016464]: Connection closed by authenticating user root 45.198.224.46 port 33682 [preauth] 2026-07-01T11:10:13.519163-05:00 claude-cloud systemd-logind[853]: New session c5701 of user claude. 2026-07-01T11:10:13.834089-05:00 claude-cloud systemd-logind[853]: Session c5701 logged out. Waiting for processes to exit. 2026-07-01T11:10:13.835798-05:00 claude-cloud systemd-logind[853]: Removed session c5701. 2026-07-01T11:10:13.843271-05:00 claude-cloud sshd[1016624]: Received disconnect from 165.154.227.8 port 34588:11: Bye Bye [preauth] 2026-07-01T11:10:13.843554-05:00 claude-cloud sshd[1016624]: Disconnected from authenticating user root 165.154.227.8 port 34588 [preauth] 2026-07-01T11:10:44.430335-05:00 claude-cloud sshd[1016708]: Received disconnect from 157.173.100.92 port 36560:11: disconnected by user [preauth] 2026-07-01T11:10:44.434313-05:00 claude-cloud sshd[1016708]: Disconnected from authenticating user root 157.173.100.92 port 36560 [preauth] 2026-07-01T11:10:53.857793-05:00 claude-cloud sshd[1016735]: Connection closed by authenticating user root 45.148.10.240 port 34232 [preauth] 2026-07-01T11:10:54.695459-05:00 claude-cloud sshd[1016703]: Connection closed by authenticating user root 27.71.230.31 port 56490 [preauth] 2026-07-01T11:12:34.988918-05:00 claude-cloud sshd[1017098]: Invalid user elround from 45.148.10.240 port 48724 2026-07-01T11:12:35.008401-05:00 claude-cloud sshd[1017098]: Connection closed by invalid user elround 45.148.10.240 port 48724 [preauth] 2026-07-01T11:13:05.287017-05:00 claude-cloud sshd[1017168]: Invalid user exclusive from 165.154.227.158 port 20414 2026-07-01T11:13:05.501404-05:00 claude-cloud sshd[1017168]: Received disconnect from 165.154.227.158 port 20414:11: Bye Bye [preauth] 2026-07-01T11:13:05.501623-05:00 claude-cloud sshd[1017168]: Disconnected from invalid user exclusive 165.154.227.158 port 20414 [preauth] 2026-07-01T11:13:50.455025-05:00 claude-cloud sshd[1017298]: Connection reset by 147.185.132.85 port 63446 [preauth] 2026-07-01T11:14:11.420457-05:00 claude-cloud sshd[1017356]: Invalid user elrond from 45.148.10.240 port 33894 2026-07-01T11:14:11.432453-05:00 claude-cloud sshd[1017356]: Connection closed by invalid user elrond 45.148.10.240 port 33894 [preauth] 2026-07-01T11:15:01.511071-05:00 claude-cloud CRON[1017495]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T11:15:01.517136-05:00 claude-cloud CRON[1017495]: pam_unix(cron:session): session closed for user root 2026-07-01T11:15:02.478405-05:00 claude-cloud sshd[1017493]: Invalid user admin3 from 165.154.227.158 port 54990 2026-07-01T11:15:02.715492-05:00 claude-cloud sshd[1017493]: Received disconnect from 165.154.227.158 port 54990:11: Bye Bye [preauth] 2026-07-01T11:15:02.715706-05:00 claude-cloud sshd[1017493]: Disconnected from invalid user admin3 165.154.227.158 port 54990 [preauth] 2026-07-01T11:15:17.107895-05:00 claude-cloud systemd-logind[853]: New session c5702 of user claude. 2026-07-01T11:15:17.408671-05:00 claude-cloud systemd-logind[853]: Session c5702 logged out. Waiting for processes to exit. 2026-07-01T11:15:17.409943-05:00 claude-cloud systemd-logind[853]: Removed session c5702. 2026-07-01T11:15:52.612394-05:00 claude-cloud sshd[1017661]: Invalid user admin from 45.148.10.240 port 59926 2026-07-01T11:15:52.625658-05:00 claude-cloud sshd[1017661]: Connection closed by invalid user admin 45.148.10.240 port 59926 [preauth] 2026-07-01T11:16:45.723366-05:00 claude-cloud sshd[1017771]: Connection closed by authenticating user root 27.71.230.31 port 39932 [preauth] 2026-07-01T11:17:01.526201-05:00 claude-cloud CRON[1017844]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T11:17:01.532068-05:00 claude-cloud CRON[1017844]: pam_unix(cron:session): session closed for user root 2026-07-01T11:17:03.304719-05:00 claude-cloud sshd[1017849]: Invalid user parser from 165.154.227.158 port 25398 2026-07-01T11:17:03.520010-05:00 claude-cloud sshd[1017849]: Received disconnect from 165.154.227.158 port 25398:11: Bye Bye [preauth] 2026-07-01T11:17:03.520324-05:00 claude-cloud sshd[1017849]: Disconnected from invalid user parser 165.154.227.158 port 25398 [preauth] 2026-07-01T11:17:37.952911-05:00 claude-cloud sshd[1017941]: Connection closed by authenticating user root 45.148.10.240 port 38174 [preauth] 2026-07-01T11:17:49.128089-05:00 claude-cloud sshd[1018004]: Connection closed by 104.140.188.46 port 56825 2026-07-01T11:18:51.123161-05:00 claude-cloud sshd[1018144]: Invalid user fort from 165.154.227.158 port 59918 2026-07-01T11:18:51.361983-05:00 claude-cloud sshd[1018144]: Received disconnect from 165.154.227.158 port 59918:11: Bye Bye [preauth] 2026-07-01T11:18:51.362222-05:00 claude-cloud sshd[1018144]: Disconnected from invalid user fort 165.154.227.158 port 59918 [preauth] 2026-07-01T11:19:17.047070-05:00 claude-cloud sshd[1018211]: Invalid user user from 45.148.10.240 port 50212 2026-07-01T11:19:17.059235-05:00 claude-cloud sshd[1018211]: Connection closed by invalid user user 45.148.10.240 port 50212 [preauth] 2026-07-01T11:19:21.121680-05:00 claude-cloud sshd[1018210]: Connection closed by authenticating user root 45.198.224.46 port 49254 [preauth] 2026-07-01T11:20:20.797523-05:00 claude-cloud systemd-logind[853]: New session c5703 of user claude. 2026-07-01T11:20:21.193490-05:00 claude-cloud systemd-logind[853]: Session c5703 logged out. Waiting for processes to exit. 2026-07-01T11:20:21.196233-05:00 claude-cloud systemd-logind[853]: Removed session c5703. 2026-07-01T11:20:33.777762-05:00 claude-cloud sshd[1018444]: Invalid user biomed from 165.154.227.158 port 30196 2026-07-01T11:20:34.017906-05:00 claude-cloud sshd[1018444]: Received disconnect from 165.154.227.158 port 30196:11: Bye Bye [preauth] 2026-07-01T11:20:34.018104-05:00 claude-cloud sshd[1018444]: Disconnected from invalid user biomed 165.154.227.158 port 30196 [preauth] 2026-07-01T11:20:55.924149-05:00 claude-cloud sshd[1018503]: Invalid user user from 45.148.10.240 port 57556 2026-07-01T11:20:55.935713-05:00 claude-cloud sshd[1018503]: Connection closed by invalid user user 45.148.10.240 port 57556 [preauth] 2026-07-01T11:22:43.811821-05:00 claude-cloud sshd[1018866]: Invalid user miner from 45.148.10.240 port 52244 2026-07-01T11:22:43.826479-05:00 claude-cloud sshd[1018866]: Connection closed by invalid user miner 45.148.10.240 port 52244 [preauth] 2026-07-01T11:23:21.062571-05:00 claude-cloud sshd[1018824]: Connection closed by authenticating user root 27.71.230.31 port 36862 [preauth] 2026-07-01T11:24:31.715077-05:00 claude-cloud sshd[1019143]: Connection closed by authenticating user root 45.148.10.240 port 37214 [preauth] 2026-07-01T11:25:01.547329-05:00 claude-cloud CRON[1019227]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T11:25:01.553514-05:00 claude-cloud CRON[1019227]: pam_unix(cron:session): session closed for user root 2026-07-01T11:25:25.010088-05:00 claude-cloud systemd-logind[853]: New session c5704 of user claude. 2026-07-01T11:25:25.316269-05:00 claude-cloud systemd-logind[853]: Session c5704 logged out. Waiting for processes to exit. 2026-07-01T11:25:25.318396-05:00 claude-cloud systemd-logind[853]: Removed session c5704. 2026-07-01T11:26:10.850890-05:00 claude-cloud sshd[1019444]: Invalid user git from 45.148.10.240 port 43296 2026-07-01T11:26:10.864495-05:00 claude-cloud sshd[1019444]: Connection closed by invalid user git 45.148.10.240 port 43296 [preauth] 2026-07-01T11:27:50.180505-05:00 claude-cloud sshd[1019705]: Connection closed by authenticating user root 45.148.10.240 port 56946 [preauth] 2026-07-01T11:28:33.347270-05:00 claude-cloud sshd[1019805]: Connection closed by authenticating user root 27.71.230.31 port 48420 [preauth] 2026-07-01T11:29:05.546325-05:00 claude-cloud sshd[1019898]: Invalid user nieliming from 45.198.224.46 port 54110 2026-07-01T11:29:06.218626-05:00 claude-cloud sshd[1019898]: Connection closed by invalid user nieliming 45.198.224.46 port 54110 [preauth] 2026-07-01T11:29:36.001840-05:00 claude-cloud sshd[1019973]: Invalid user admin from 45.148.10.240 port 42982 2026-07-01T11:29:36.015148-05:00 claude-cloud sshd[1019973]: Connection closed by invalid user admin 45.148.10.240 port 42982 [preauth] 2026-07-01T11:30:28.602982-05:00 claude-cloud systemd-logind[853]: New session c5705 of user claude. 2026-07-01T11:30:28.928915-05:00 claude-cloud systemd-logind[853]: Session c5705 logged out. Waiting for processes to exit. 2026-07-01T11:30:28.930779-05:00 claude-cloud systemd-logind[853]: Removed session c5705. 2026-07-01T11:31:17.229823-05:00 claude-cloud sshd[1020281]: Invalid user ubuntu from 45.148.10.240 port 51866 2026-07-01T11:31:17.243968-05:00 claude-cloud sshd[1020281]: Connection closed by invalid user ubuntu 45.148.10.240 port 51866 [preauth] 2026-07-01T11:31:42.429123-05:00 claude-cloud sshd[1020338]: Invalid user rz from 165.154.227.158 port 44854 2026-07-01T11:31:42.651539-05:00 claude-cloud sshd[1020338]: Received disconnect from 165.154.227.158 port 44854:11: Bye Bye [preauth] 2026-07-01T11:31:42.651785-05:00 claude-cloud sshd[1020338]: Disconnected from invalid user rz 165.154.227.158 port 44854 [preauth] 2026-07-01T11:32:52.785268-05:00 claude-cloud sshd[1020598]: Invalid user ari from 45.148.10.240 port 45032 2026-07-01T11:32:52.797754-05:00 claude-cloud sshd[1020598]: Connection closed by invalid user ari 45.148.10.240 port 45032 [preauth] 2026-07-01T11:33:25.827045-05:00 claude-cloud sshd[1020681]: Invalid user wes from 165.154.227.158 port 15058 2026-07-01T11:33:26.064512-05:00 claude-cloud sshd[1020681]: Received disconnect from 165.154.227.158 port 15058:11: Bye Bye [preauth] 2026-07-01T11:33:26.064784-05:00 claude-cloud sshd[1020681]: Disconnected from invalid user wes 165.154.227.158 port 15058 [preauth] 2026-07-01T11:34:35.636688-05:00 claude-cloud sshd[1020859]: Invalid user sedu from 45.148.10.240 port 55036 2026-07-01T11:34:35.650128-05:00 claude-cloud sshd[1020859]: Connection closed by invalid user sedu 45.148.10.240 port 55036 [preauth] 2026-07-01T11:34:36.988465-05:00 claude-cloud sshd[1020845]: Connection closed by authenticating user root 27.71.230.31 port 36820 [preauth] 2026-07-01T11:34:59.936714-05:00 claude-cloud sshd[1020946]: Received disconnect from 188.44.20.33 port 47154:11: disconnected by user [preauth] 2026-07-01T11:34:59.937350-05:00 claude-cloud sshd[1020946]: Disconnected from authenticating user root 188.44.20.33 port 47154 [preauth] 2026-07-01T11:35:01.564851-05:00 claude-cloud CRON[1020948]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T11:35:01.572272-05:00 claude-cloud CRON[1020948]: pam_unix(cron:session): session closed for user root 2026-07-01T11:35:24.782991-05:00 claude-cloud sshd[1021019]: Invalid user inv from 165.154.227.158 port 49756 2026-07-01T11:35:25.010381-05:00 claude-cloud sshd[1021019]: Received disconnect from 165.154.227.158 port 49756:11: Bye Bye [preauth] 2026-07-01T11:35:25.010629-05:00 claude-cloud sshd[1021019]: Disconnected from invalid user inv 165.154.227.158 port 49756 [preauth] 2026-07-01T11:35:32.075075-05:00 claude-cloud systemd-logind[853]: New session c5706 of user claude. 2026-07-01T11:35:32.332349-05:00 claude-cloud systemd-logind[853]: Session c5706 logged out. Waiting for processes to exit. 2026-07-01T11:35:32.335832-05:00 claude-cloud systemd-logind[853]: Removed session c5706. 2026-07-01T11:36:26.964094-05:00 claude-cloud sshd[1021198]: Invalid user solana123 from 45.148.10.240 port 45286 2026-07-01T11:36:26.978116-05:00 claude-cloud sshd[1021198]: Connection closed by invalid user solana123 45.148.10.240 port 45286 [preauth] 2026-07-01T11:36:40.042345-05:00 claude-cloud sshd[1021228]: Invalid user admin from 2.57.121.25 port 59608 2026-07-01T11:36:40.067476-05:00 claude-cloud sshd[1021228]: Connection closed by invalid user admin 2.57.121.25 port 59608 [preauth] 2026-07-01T11:37:16.043364-05:00 claude-cloud sshd[1021336]: Invalid user yu from 165.154.227.158 port 19934 2026-07-01T11:37:16.266184-05:00 claude-cloud sshd[1021336]: Received disconnect from 165.154.227.158 port 19934:11: Bye Bye [preauth] 2026-07-01T11:37:16.266435-05:00 claude-cloud sshd[1021336]: Disconnected from invalid user yu 165.154.227.158 port 19934 [preauth] 2026-07-01T11:38:07.132029-05:00 claude-cloud sshd[1021467]: Invalid user sol123 from 45.148.10.240 port 33874 2026-07-01T11:38:07.147006-05:00 claude-cloud sshd[1021467]: Connection closed by invalid user sol123 45.148.10.240 port 33874 [preauth] 2026-07-01T11:38:55.200697-05:00 claude-cloud sshd[1021614]: Connection closed by authenticating user root 45.198.224.46 port 37776 [preauth] 2026-07-01T11:39:01.936860-05:00 claude-cloud sshd[1021636]: Invalid user renwen from 165.154.227.158 port 54464 2026-07-01T11:39:02.169524-05:00 claude-cloud sshd[1021636]: Received disconnect from 165.154.227.158 port 54464:11: Bye Bye [preauth] 2026-07-01T11:39:02.169865-05:00 claude-cloud sshd[1021636]: Disconnected from invalid user renwen 165.154.227.158 port 54464 [preauth] 2026-07-01T11:39:43.229251-05:00 claude-cloud sshd[1021740]: Invalid user sol from 45.148.10.240 port 35924 2026-07-01T11:39:43.243158-05:00 claude-cloud sshd[1021740]: Connection closed by invalid user sol 45.148.10.240 port 35924 [preauth] 2026-07-01T11:40:28.199532-05:00 claude-cloud sshd[1021846]: Connection closed by authenticating user root 27.71.230.31 port 47080 [preauth] 2026-07-01T11:40:35.561638-05:00 claude-cloud systemd-logind[853]: New session c5707 of user claude. 2026-07-01T11:40:35.862671-05:00 claude-cloud systemd-logind[853]: Session c5707 logged out. Waiting for processes to exit. 2026-07-01T11:40:35.863972-05:00 claude-cloud systemd-logind[853]: Removed session c5707. 2026-07-01T11:41:26.047060-05:00 claude-cloud sshd[1022038]: Invalid user sol from 45.148.10.240 port 51480 2026-07-01T11:41:26.059474-05:00 claude-cloud sshd[1022038]: Connection closed by invalid user sol 45.148.10.240 port 51480 [preauth] 2026-07-01T11:42:47.565022-05:00 claude-cloud sshd[1022308]: Invalid user from 167.99.202.35 port 45438 2026-07-01T11:42:47.584731-05:00 claude-cloud sshd[1022308]: Connection closed by invalid user 167.99.202.35 port 45438 [preauth] 2026-07-01T11:43:11.923706-05:00 claude-cloud sshd[1022374]: Invalid user binance from 45.148.10.240 port 50986 2026-07-01T11:43:11.939613-05:00 claude-cloud sshd[1022374]: Connection closed by invalid user binance 45.148.10.240 port 50986 [preauth] 2026-07-01T11:44:51.144711-05:00 claude-cloud sshd[1023568]: Invalid user okx from 45.148.10.240 port 55614 2026-07-01T11:44:51.157246-05:00 claude-cloud sshd[1023568]: Connection closed by invalid user okx 45.148.10.240 port 55614 [preauth] 2026-07-01T11:45:01.583838-05:00 claude-cloud CRON[1023704]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T11:45:01.588908-05:00 claude-cloud CRON[1023704]: pam_unix(cron:session): session closed for user root 2026-07-01T11:45:38.986736-05:00 claude-cloud systemd-logind[853]: New session c5708 of user claude. 2026-07-01T11:45:39.476485-05:00 claude-cloud systemd-logind[853]: Session c5708 logged out. Waiting for processes to exit. 2026-07-01T11:45:39.477789-05:00 claude-cloud systemd-logind[853]: Removed session c5708. 2026-07-01T11:46:26.816356-05:00 claude-cloud sshd[1024540]: Connection closed by 203.121.106.56 port 33848 [preauth] 2026-07-01T11:46:32.728781-05:00 claude-cloud sshd[1024637]: Invalid user bot from 45.148.10.240 port 36592 2026-07-01T11:46:32.742430-05:00 claude-cloud sshd[1024637]: Connection closed by invalid user bot 45.148.10.240 port 36592 [preauth] 2026-07-01T11:46:45.949724-05:00 claude-cloud sshd[1024524]: Connection closed by authenticating user root 27.71.230.31 port 51100 [preauth] 2026-07-01T11:48:21.233933-05:00 claude-cloud sshd[1030250]: Invalid user telegram from 45.148.10.240 port 59070 2026-07-01T11:48:21.248104-05:00 claude-cloud sshd[1030250]: Connection closed by invalid user telegram 45.148.10.240 port 59070 [preauth] 2026-07-01T11:48:27.677621-05:00 claude-cloud sshd[1030905]: Connection closed by authenticating user root 193.46.255.86 port 24570 [preauth] 2026-07-01T11:48:40.431314-05:00 claude-cloud sshd[1031671]: Connection closed by authenticating user root 45.198.224.46 port 55728 [preauth] 2026-07-01T11:50:10.267495-05:00 claude-cloud sshd[1038563]: Invalid user jito from 45.148.10.240 port 48358 2026-07-01T11:50:10.283999-05:00 claude-cloud sshd[1038563]: Connection closed by invalid user jito 45.148.10.240 port 48358 [preauth] 2026-07-01T11:50:42.727142-05:00 claude-cloud systemd-logind[853]: New session c5709 of user claude. 2026-07-01T11:50:43.094878-05:00 claude-cloud systemd-logind[853]: Session c5709 logged out. Waiting for processes to exit. 2026-07-01T11:50:43.095511-05:00 claude-cloud systemd-logind[853]: Removed session c5709. 2026-07-01T11:51:47.024914-05:00 claude-cloud sshd[1044537]: Invalid user firedancer from 45.148.10.240 port 56508 2026-07-01T11:51:47.038082-05:00 claude-cloud sshd[1044537]: Connection closed by invalid user firedancer 45.148.10.240 port 56508 [preauth] 2026-07-01T11:52:23.671012-05:00 claude-cloud sshd[1045658]: Connection closed by authenticating user root 27.71.230.31 port 50288 [preauth] 2026-07-01T11:53:27.713450-05:00 claude-cloud sshd[1048542]: Connection closed by authenticating user root 45.148.10.240 port 58576 [preauth] 2026-07-01T11:55:01.603602-05:00 claude-cloud CRON[1051363]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T11:55:01.611614-05:00 claude-cloud CRON[1051363]: pam_unix(cron:session): session closed for user root 2026-07-01T11:55:15.157532-05:00 claude-cloud sshd[1051434]: Invalid user bitcoin from 45.148.10.240 port 54446 2026-07-01T11:55:15.172775-05:00 claude-cloud sshd[1051434]: Connection closed by invalid user bitcoin 45.148.10.240 port 54446 [preauth] 2026-07-01T11:55:46.298880-05:00 claude-cloud systemd-logind[853]: New session c5710 of user claude. 2026-07-01T11:55:46.581496-05:00 claude-cloud systemd-logind[853]: Session c5710 logged out. Waiting for processes to exit. 2026-07-01T11:55:46.584182-05:00 claude-cloud systemd-logind[853]: Removed session c5710. 2026-07-01T11:56:56.827920-05:00 claude-cloud sshd[1052882]: Invalid user pool from 45.148.10.240 port 50208 2026-07-01T11:56:56.841025-05:00 claude-cloud sshd[1052882]: Connection closed by invalid user pool 45.148.10.240 port 50208 [preauth] 2026-07-01T11:58:21.543737-05:00 claude-cloud sshd[1053635]: Connection closed by authenticating user root 27.71.230.31 port 39086 [preauth] 2026-07-01T11:58:26.561760-05:00 claude-cloud sshd[1053699]: Connection closed by authenticating user root 45.198.224.46 port 39444 [preauth] 2026-07-01T11:58:35.352878-05:00 claude-cloud sshd[1053833]: Invalid user miner from 45.148.10.240 port 36582 2026-07-01T11:58:35.366199-05:00 claude-cloud sshd[1053833]: Connection closed by invalid user miner 45.148.10.240 port 36582 [preauth] 2026-07-01T12:00:20.913540-05:00 claude-cloud sshd[1054597]: Invalid user ibkr from 45.148.10.240 port 37996 2026-07-01T12:00:20.926682-05:00 claude-cloud sshd[1054597]: Connection closed by invalid user ibkr 45.148.10.240 port 37996 [preauth] 2026-07-01T12:00:50.001781-05:00 claude-cloud systemd-logind[853]: New session c5711 of user claude. 2026-07-01T12:00:50.263530-05:00 claude-cloud systemd-logind[853]: Session c5711 logged out. Waiting for processes to exit. 2026-07-01T12:00:50.265749-05:00 claude-cloud systemd-logind[853]: Removed session c5711. 2026-07-01T12:02:14.190012-05:00 claude-cloud sshd[1055665]: Invalid user ibkrpro from 45.148.10.240 port 60314 2026-07-01T12:02:14.202393-05:00 claude-cloud sshd[1055665]: Connection closed by invalid user ibkrpro 45.148.10.240 port 60314 [preauth] 2026-07-01T12:03:56.275836-05:00 claude-cloud sshd[1056146]: Connection closed by authenticating user root 45.148.10.240 port 46180 [preauth] 2026-07-01T12:04:28.354795-05:00 claude-cloud sshd[1056174]: Connection closed by authenticating user root 27.71.230.31 port 43852 [preauth] 2026-07-01T12:05:01.621557-05:00 claude-cloud CRON[1056321]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T12:05:01.627395-05:00 claude-cloud CRON[1056321]: pam_unix(cron:session): session closed for user root 2026-07-01T12:05:35.939194-05:00 claude-cloud sshd[1056399]: Connection closed by authenticating user root 45.148.10.240 port 35596 [preauth] 2026-07-01T12:05:53.508974-05:00 claude-cloud systemd-logind[853]: New session c5712 of user claude. 2026-07-01T12:05:53.803296-05:00 claude-cloud systemd-logind[853]: Session c5712 logged out. Waiting for processes to exit. 2026-07-01T12:05:53.804938-05:00 claude-cloud systemd-logind[853]: Removed session c5712. 2026-07-01T12:07:21.003232-05:00 claude-cloud sshd[1056693]: Invalid user broker from 45.148.10.240 port 46576 2026-07-01T12:07:21.015379-05:00 claude-cloud sshd[1056693]: Connection closed by invalid user broker 45.148.10.240 port 46576 [preauth] 2026-07-01T12:08:10.597526-05:00 claude-cloud sshd[1057162]: Invalid user ubuntu from 45.198.224.46 port 39798 2026-07-01T12:08:12.042645-05:00 claude-cloud sshd[1057162]: Connection closed by invalid user ubuntu 45.198.224.46 port 39798 [preauth] 2026-07-01T12:09:05.111938-05:00 claude-cloud sshd[1058053]: Invalid user recorder from 45.148.10.240 port 53982 2026-07-01T12:09:05.125077-05:00 claude-cloud sshd[1058053]: Connection closed by invalid user recorder 45.148.10.240 port 53982 [preauth] 2026-07-01T12:10:41.898554-05:00 claude-cloud sshd[1059753]: Invalid user dvr from 45.148.10.240 port 38804 2026-07-01T12:10:41.910824-05:00 claude-cloud sshd[1059753]: Connection closed by invalid user dvr 45.148.10.240 port 38804 [preauth] 2026-07-01T12:10:48.647627-05:00 claude-cloud sshd[1059101]: Connection closed by authenticating user root 27.71.230.31 port 33346 [preauth] 2026-07-01T12:10:57.011325-05:00 claude-cloud systemd-logind[853]: New session c5713 of user claude. 2026-07-01T12:10:57.606463-05:00 claude-cloud systemd-logind[853]: Session c5713 logged out. Waiting for processes to exit. 2026-07-01T12:10:57.609484-05:00 claude-cloud systemd-logind[853]: Removed session c5713. 2026-07-01T12:11:37.595896-05:00 claude-cloud sshd[1060599]: Invalid user adelina from 2.57.121.112 port 33606 2026-07-01T12:11:37.622857-05:00 claude-cloud sshd[1060599]: Connection closed by invalid user adelina 2.57.121.112 port 33606 [preauth] 2026-07-01T12:12:22.971308-05:00 claude-cloud sshd[1061298]: Invalid user cadami from 45.148.10.240 port 54928 2026-07-01T12:12:22.984744-05:00 claude-cloud sshd[1061298]: Connection closed by invalid user cadami 45.148.10.240 port 54928 [preauth] 2026-07-01T12:14:13.093917-05:00 claude-cloud sshd[1062974]: Invalid user radar from 45.148.10.240 port 51354 2026-07-01T12:14:13.107004-05:00 claude-cloud sshd[1062974]: Connection closed by invalid user radar 45.148.10.240 port 51354 [preauth] 2026-07-01T12:15:01.642077-05:00 claude-cloud CRON[1063516]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T12:15:01.649235-05:00 claude-cloud CRON[1063516]: pam_unix(cron:session): session closed for user root 2026-07-01T12:15:23.132147-05:00 claude-cloud sshd[1064017]: Received disconnect from 107.170.247.81 port 54186:11: disconnected by user [preauth] 2026-07-01T12:15:23.132588-05:00 claude-cloud sshd[1064017]: Disconnected from authenticating user root 107.170.247.81 port 54186 [preauth] 2026-07-01T12:15:56.944370-05:00 claude-cloud sshd[1064528]: Invalid user www from 185.242.3.195 port 58956 2026-07-01T12:15:56.952602-05:00 claude-cloud sshd[1064528]: Connection closed by invalid user www 185.242.3.195 port 58956 [preauth] 2026-07-01T12:16:01.880617-05:00 claude-cloud sshd[1064541]: Invalid user was from 45.148.10.240 port 57722 2026-07-01T12:16:01.892829-05:00 claude-cloud sshd[1064541]: Connection closed by invalid user was 45.148.10.240 port 57722 [preauth] 2026-07-01T12:17:01.661184-05:00 claude-cloud CRON[1065438]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T12:17:01.669170-05:00 claude-cloud CRON[1065438]: pam_unix(cron:session): session closed for user root 2026-07-01T12:17:11.252931-05:00 claude-cloud sshd[1064548]: Connection closed by authenticating user root 27.71.230.31 port 44762 [preauth] 2026-07-01T12:17:41.471982-05:00 claude-cloud sshd[1065700]: Invalid user wadmin from 45.148.10.240 port 46674 2026-07-01T12:17:41.484104-05:00 claude-cloud sshd[1065700]: Connection closed by invalid user wadmin 45.148.10.240 port 46674 [preauth] 2026-07-01T12:17:59.789997-05:00 claude-cloud sshd[1066067]: Connection closed by authenticating user root 45.198.224.46 port 32768 [preauth] 2026-07-01T12:19:23.937856-05:00 claude-cloud sshd[1066404]: Invalid user ladmin from 45.148.10.240 port 52896 2026-07-01T12:19:23.951903-05:00 claude-cloud sshd[1066404]: Connection closed by invalid user ladmin 45.148.10.240 port 52896 [preauth] 2026-07-01T12:21:09.536498-05:00 claude-cloud sshd[1066716]: Invalid user bob from 45.148.10.240 port 34252 2026-07-01T12:21:09.549826-05:00 claude-cloud sshd[1066716]: Connection closed by invalid user bob 45.148.10.240 port 34252 [preauth] 2026-07-01T12:22:23.306980-05:00 claude-cloud sshd[1067196]: Invalid user harmony from 128.14.237.154 port 56442 2026-07-01T12:22:23.408104-05:00 claude-cloud sshd[1066863]: Connection closed by authenticating user root 27.71.230.31 port 36930 [preauth] 2026-07-01T12:22:23.456405-05:00 claude-cloud sshd[1067196]: Connection closed by invalid user harmony 128.14.237.154 port 56442 [preauth] 2026-07-01T12:22:48.643455-05:00 claude-cloud sshd[1067324]: Invalid user grid from 45.148.10.240 port 49040 2026-07-01T12:22:48.655145-05:00 claude-cloud sshd[1067324]: Connection closed by invalid user grid 45.148.10.240 port 49040 [preauth] 2026-07-01T12:22:55.251355-05:00 claude-cloud sshd[1067362]: Invalid user first from 211.75.3.37 port 59644 2026-07-01T12:22:55.473759-05:00 claude-cloud sshd[1067362]: Received disconnect from 211.75.3.37 port 59644:11: Bye Bye [preauth] 2026-07-01T12:22:55.473979-05:00 claude-cloud sshd[1067362]: Disconnected from invalid user first 211.75.3.37 port 59644 [preauth] 2026-07-01T12:24:24.585541-05:00 claude-cloud sshd[1068813]: Invalid user bank from 45.148.10.240 port 57728 2026-07-01T12:24:24.597749-05:00 claude-cloud sshd[1068813]: Connection closed by invalid user bank 45.148.10.240 port 57728 [preauth] 2026-07-01T12:25:01.680141-05:00 claude-cloud CRON[1069359]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T12:25:01.685780-05:00 claude-cloud CRON[1069359]: pam_unix(cron:session): session closed for user root 2026-07-01T12:26:09.076782-05:00 claude-cloud sshd[1070849]: Invalid user banking from 45.148.10.240 port 55284 2026-07-01T12:26:09.090009-05:00 claude-cloud sshd[1070849]: Connection closed by invalid user banking 45.148.10.240 port 55284 [preauth] 2026-07-01T12:27:20.327120-05:00 claude-cloud systemd-logind[853]: Session c5454 logged out. Waiting for processes to exit. 2026-07-01T12:27:20.327895-05:00 claude-cloud systemd-logind[853]: Session c5450 logged out. Waiting for processes to exit. 2026-07-01T12:27:20.329483-05:00 claude-cloud systemd-logind[853]: Removed session c5450. 2026-07-01T12:27:20.331048-05:00 claude-cloud systemd-logind[853]: Removed session c5454. 2026-07-01T12:27:43.581924-05:00 claude-cloud sshd[1072270]: Connection closed by authenticating user root 45.198.224.46 port 59206 [preauth] 2026-07-01T12:28:00.446696-05:00 claude-cloud sshd[1072634]: Invalid user broker from 45.148.10.240 port 44634 2026-07-01T12:28:00.462126-05:00 claude-cloud sshd[1072634]: Connection closed by invalid user broker 45.148.10.240 port 44634 [preauth] 2026-07-01T12:28:18.152908-05:00 claude-cloud sshd[1072553]: Connection closed by authenticating user root 27.71.230.31 port 54868 [preauth] 2026-07-01T12:28:35.094070-05:00 claude-cloud sshd[1073365]: Invalid user admin from 2.57.121.25 port 51006 2026-07-01T12:28:35.118547-05:00 claude-cloud sshd[1073365]: Connection closed by invalid user admin 2.57.121.25 port 51006 [preauth] 2026-07-01T12:29:21.384239-05:00 claude-cloud sshd[1073949]: Received disconnect from 45.43.45.254 port 45278:11: disconnected by user [preauth] 2026-07-01T12:29:21.384957-05:00 claude-cloud sshd[1073949]: Disconnected from authenticating user root 45.43.45.254 port 45278 [preauth] 2026-07-01T12:29:42.462427-05:00 claude-cloud sshd[1074528]: Invalid user broker from 45.148.10.240 port 45180 2026-07-01T12:29:42.475258-05:00 claude-cloud sshd[1074528]: Connection closed by invalid user broker 45.148.10.240 port 45180 [preauth] 2026-07-01T12:29:51.455206-05:00 claude-cloud sshd[1074579]: error: kex_exchange_identification: read: Connection reset by peer 2026-07-01T12:29:51.455917-05:00 claude-cloud sshd[1074579]: Connection reset by 91.196.152.196 port 42933 2026-07-01T12:30:01.527878-05:00 claude-cloud sshd[1074580]: Connection closed by 91.196.152.234 port 41457 2026-07-01T12:30:14.160914-05:00 claude-cloud sshd[1074825]: banner exchange: Connection from 91.196.152.194 port 43735: invalid format 2026-07-01T12:30:17.201153-05:00 claude-cloud sshd[1074826]: Connection closed by 91.196.152.199 port 47773 2026-07-01T12:31:24.488785-05:00 claude-cloud sshd[1075614]: Invalid user trader from 45.148.10.240 port 60944 2026-07-01T12:31:24.501766-05:00 claude-cloud sshd[1075614]: Connection closed by invalid user trader 45.148.10.240 port 60944 [preauth] 2026-07-01T12:32:16.912910-05:00 claude-cloud sshd[1076715]: Unable to negotiate with 91.231.89.213 port 52069: no matching host key type found. Their offer: ssh-rsa,ssh-dss [preauth] 2026-07-01T12:32:19.235908-05:00 claude-cloud sshd[1076720]: Unable to negotiate with 91.231.89.104 port 52587: no matching host key type found. Their offer: ssh-rsa,ssh-dss [preauth] 2026-07-01T12:33:13.228373-05:00 claude-cloud sshd[1078243]: Connection closed by 45.148.10.240 port 54010 2026-07-01T12:33:56.616471-05:00 claude-cloud sshd[1079043]: Invalid user admin from 193.46.255.86 port 39950 2026-07-01T12:33:56.641910-05:00 claude-cloud sshd[1079043]: Connection closed by invalid user admin 193.46.255.86 port 39950 [preauth] 2026-07-01T12:34:03.490599-05:00 claude-cloud sshd[1078961]: Connection closed by authenticating user root 27.71.230.31 port 44972 [preauth] 2026-07-01T12:34:51.110124-05:00 claude-cloud sshd[1079914]: Invalid user eth-docker from 45.148.10.240 port 55956 2026-07-01T12:34:51.122413-05:00 claude-cloud sshd[1079914]: Connection closed by invalid user eth-docker 45.148.10.240 port 55956 [preauth] 2026-07-01T12:35:01.698152-05:00 claude-cloud CRON[1080047]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T12:35:01.707723-05:00 claude-cloud CRON[1080047]: pam_unix(cron:session): session closed for user root 2026-07-01T12:35:01.956916-05:00 claude-cloud sshd[1080017]: Invalid user first from 124.18.182.99 port 57738 2026-07-01T12:35:02.241006-05:00 claude-cloud sshd[1080017]: Received disconnect from 124.18.182.99 port 57738:11: Bye Bye [preauth] 2026-07-01T12:35:02.242179-05:00 claude-cloud sshd[1080017]: Disconnected from invalid user first 124.18.182.99 port 57738 [preauth] 2026-07-01T12:35:48.628558-05:00 claude-cloud sshd[1080447]: Invalid user testportal from 211.75.3.37 port 57748 2026-07-01T12:35:48.861043-05:00 claude-cloud sshd[1080447]: Received disconnect from 211.75.3.37 port 57748:11: Bye Bye [preauth] 2026-07-01T12:35:48.861525-05:00 claude-cloud sshd[1080447]: Disconnected from invalid user testportal 211.75.3.37 port 57748 [preauth] 2026-07-01T12:36:34.513652-05:00 claude-cloud sshd[1080704]: Invalid user ethdocker from 45.148.10.240 port 56864 2026-07-01T12:36:34.526012-05:00 claude-cloud sshd[1080704]: Connection closed by invalid user ethdocker 45.148.10.240 port 56864 [preauth] 2026-07-01T12:37:08.700318-05:00 claude-cloud sshd[1080846]: Connection closed by 45.148.10.183 port 34628 2026-07-01T12:37:45.279425-05:00 claude-cloud sshd[1081001]: Connection closed by authenticating user root 45.198.224.46 port 38062 [preauth] 2026-07-01T12:38:03.285169-05:00 claude-cloud sshd[1081107]: Invalid user nas from 211.75.3.37 port 50428 2026-07-01T12:38:03.513965-05:00 claude-cloud sshd[1081107]: Received disconnect from 211.75.3.37 port 50428:11: Bye Bye [preauth] 2026-07-01T12:38:03.514442-05:00 claude-cloud sshd[1081107]: Disconnected from invalid user nas 211.75.3.37 port 50428 [preauth] 2026-07-01T12:38:13.639032-05:00 claude-cloud sshd[1081148]: Invalid user classics from 124.18.182.99 port 41390 2026-07-01T12:38:13.934898-05:00 claude-cloud sshd[1081148]: Received disconnect from 124.18.182.99 port 41390:11: Bye Bye [preauth] 2026-07-01T12:38:13.935096-05:00 claude-cloud sshd[1081148]: Disconnected from invalid user classics 124.18.182.99 port 41390 [preauth] 2026-07-01T12:38:22.585042-05:00 claude-cloud sshd[1081202]: Invalid user sol from 45.148.10.240 port 47884 2026-07-01T12:38:22.598938-05:00 claude-cloud sshd[1081202]: Connection closed by invalid user sol 45.148.10.240 port 47884 [preauth] 2026-07-01T12:39:55.792085-05:00 claude-cloud sshd[1081591]: Connection closed by authenticating user root 27.71.230.31 port 33254 [preauth] 2026-07-01T12:40:06.131432-05:00 claude-cloud sshd[1081688]: Invalid user sol from 45.148.10.183 port 54036 2026-07-01T12:40:06.144353-05:00 claude-cloud sshd[1081688]: Connection closed by invalid user sol 45.148.10.183 port 54036 [preauth] 2026-07-01T12:40:12.132783-05:00 claude-cloud sshd[1081715]: Invalid user sol from 45.148.10.240 port 38046 2026-07-01T12:40:12.146237-05:00 claude-cloud sshd[1081715]: Connection closed by invalid user sol 45.148.10.240 port 38046 [preauth] 2026-07-01T12:40:16.104546-05:00 claude-cloud sshd[1081728]: Invalid user testportal from 124.18.182.99 port 39500 2026-07-01T12:40:16.397491-05:00 claude-cloud sshd[1081728]: Received disconnect from 124.18.182.99 port 39500:11: Bye Bye [preauth] 2026-07-01T12:40:16.397658-05:00 claude-cloud sshd[1081728]: Disconnected from invalid user testportal 124.18.182.99 port 39500 [preauth] 2026-07-01T12:40:25.264716-05:00 claude-cloud sshd[1081774]: Invalid user two from 211.75.3.37 port 33426 2026-07-01T12:40:25.497184-05:00 claude-cloud sshd[1081774]: Received disconnect from 211.75.3.37 port 33426:11: Bye Bye [preauth] 2026-07-01T12:40:25.498047-05:00 claude-cloud sshd[1081774]: Disconnected from invalid user two 211.75.3.37 port 33426 [preauth] 2026-07-01T12:41:51.051196-05:00 claude-cloud sshd[1082171]: Invalid user sol from 45.148.10.240 port 49472 2026-07-01T12:41:51.062666-05:00 claude-cloud sshd[1082171]: Connection closed by invalid user sol 45.148.10.240 port 49472 [preauth] 2026-07-01T12:42:21.647803-05:00 claude-cloud sshd[1082307]: Invalid user xl from 124.18.182.99 port 40552 2026-07-01T12:42:21.930156-05:00 claude-cloud sshd[1082307]: Received disconnect from 124.18.182.99 port 40552:11: Bye Bye [preauth] 2026-07-01T12:42:21.930608-05:00 claude-cloud sshd[1082307]: Disconnected from invalid user xl 124.18.182.99 port 40552 [preauth] 2026-07-01T12:42:31.136791-05:00 claude-cloud sshd[1082351]: Invalid user ping1 from 211.75.3.37 port 49068 2026-07-01T12:42:31.361389-05:00 claude-cloud sshd[1082351]: Received disconnect from 211.75.3.37 port 49068:11: Bye Bye [preauth] 2026-07-01T12:42:31.361609-05:00 claude-cloud sshd[1082351]: Disconnected from invalid user ping1 211.75.3.37 port 49068 [preauth] 2026-07-01T12:43:27.361872-05:00 claude-cloud sshd[1082599]: Invalid user sol from 45.148.10.240 port 53106 2026-07-01T12:43:27.374626-05:00 claude-cloud sshd[1082599]: Connection closed by invalid user sol 45.148.10.240 port 53106 [preauth] 2026-07-01T12:43:29.534906-05:00 claude-cloud sshd[1082601]: Invalid user solana from 45.148.10.183 port 34638 2026-07-01T12:43:29.549067-05:00 claude-cloud sshd[1082601]: Connection closed by invalid user solana 45.148.10.183 port 34638 [preauth] 2026-07-01T12:44:14.969907-05:00 claude-cloud sshd[1082809]: Invalid user nas from 124.18.182.99 port 57774 2026-07-01T12:44:15.269172-05:00 claude-cloud sshd[1082809]: Received disconnect from 124.18.182.99 port 57774:11: Bye Bye [preauth] 2026-07-01T12:44:15.270607-05:00 claude-cloud sshd[1082809]: Disconnected from invalid user nas 124.18.182.99 port 57774 [preauth] 2026-07-01T12:44:35.931962-05:00 claude-cloud sshd[1082905]: Invalid user webedit from 211.75.3.37 port 54610 2026-07-01T12:44:36.158528-05:00 claude-cloud sshd[1082905]: Received disconnect from 211.75.3.37 port 54610:11: Bye Bye [preauth] 2026-07-01T12:44:36.159045-05:00 claude-cloud sshd[1082905]: Disconnected from invalid user webedit 211.75.3.37 port 54610 [preauth] 2026-07-01T12:45:01.714717-05:00 claude-cloud CRON[1083052]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T12:45:01.720717-05:00 claude-cloud CRON[1083052]: pam_unix(cron:session): session closed for user root 2026-07-01T12:45:10.189675-05:00 claude-cloud sshd[1083086]: Invalid user sol from 45.148.10.240 port 40694 2026-07-01T12:45:10.201439-05:00 claude-cloud sshd[1083086]: Connection closed by invalid user sol 45.148.10.240 port 40694 [preauth] 2026-07-01T12:46:07.200910-05:00 claude-cloud sshd[1083337]: Connection closed by authenticating user root 27.71.230.31 port 48938 [preauth] 2026-07-01T12:46:40.554175-05:00 claude-cloud sshd[1083547]: Invalid user solana from 45.148.10.183 port 32852 2026-07-01T12:46:40.567503-05:00 claude-cloud sshd[1083547]: Connection closed by invalid user solana 45.148.10.183 port 32852 [preauth] 2026-07-01T12:46:55.413251-05:00 claude-cloud sshd[1083619]: Invalid user solana from 45.148.10.240 port 51958 2026-07-01T12:46:55.426101-05:00 claude-cloud sshd[1083619]: Connection closed by invalid user solana 45.148.10.240 port 51958 [preauth] 2026-07-01T12:47:27.650778-05:00 claude-cloud sshd[1083770]: Connection closed by authenticating user root 45.198.224.46 port 48732 [preauth] 2026-07-01T12:48:33.237882-05:00 claude-cloud sshd[1084071]: Invalid user solv from 45.148.10.240 port 51462 2026-07-01T12:48:33.251499-05:00 claude-cloud sshd[1084071]: Connection closed by invalid user solv 45.148.10.240 port 51462 [preauth] 2026-07-01T12:50:01.336782-05:00 claude-cloud sshd[1084465]: Invalid user sol from 45.148.10.183 port 50904 2026-07-01T12:50:01.349861-05:00 claude-cloud sshd[1084465]: Connection closed by invalid user sol 45.148.10.183 port 50904 [preauth] 2026-07-01T12:50:17.646984-05:00 claude-cloud sshd[1084553]: Invalid user solv from 45.148.10.240 port 44612 2026-07-01T12:50:17.659651-05:00 claude-cloud sshd[1084553]: Connection closed by invalid user solv 45.148.10.240 port 44612 [preauth] 2026-07-01T12:51:56.104108-05:00 claude-cloud sshd[1084909]: Connection closed by authenticating user root 27.71.230.31 port 36634 [preauth] 2026-07-01T12:52:07.721794-05:00 claude-cloud sshd[1085045]: Invalid user ubuntu from 45.148.10.240 port 48664 2026-07-01T12:52:07.734153-05:00 claude-cloud sshd[1085045]: Connection closed by invalid user ubuntu 45.148.10.240 port 48664 [preauth] 2026-07-01T12:52:58.166408-05:00 claude-cloud sshd[1085235]: Invalid user sol from 45.148.10.183 port 54590 2026-07-01T12:52:58.180442-05:00 claude-cloud sshd[1085235]: Connection closed by invalid user sol 45.148.10.183 port 54590 [preauth] 2026-07-01T12:53:50.017333-05:00 claude-cloud sshd[1085490]: Invalid user ubuntu from 45.148.10.240 port 38042 2026-07-01T12:53:50.035218-05:00 claude-cloud sshd[1085490]: Connection closed by invalid user ubuntu 45.148.10.240 port 38042 [preauth] 2026-07-01T12:55:01.733300-05:00 claude-cloud CRON[1085817]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T12:55:01.738655-05:00 claude-cloud CRON[1085817]: pam_unix(cron:session): session closed for user root 2026-07-01T12:55:28.243394-05:00 claude-cloud sshd[1085926]: Invalid user ubuntu from 45.148.10.240 port 39462 2026-07-01T12:55:28.255855-05:00 claude-cloud sshd[1085926]: Connection closed by invalid user ubuntu 45.148.10.240 port 39462 [preauth] 2026-07-01T12:55:37.936547-05:00 claude-cloud sshd[1085968]: Invalid user memberlite from 211.75.3.37 port 41418 2026-07-01T12:55:38.168555-05:00 claude-cloud sshd[1085968]: Received disconnect from 211.75.3.37 port 41418:11: Bye Bye [preauth] 2026-07-01T12:55:38.169305-05:00 claude-cloud sshd[1085968]: Disconnected from invalid user memberlite 211.75.3.37 port 41418 [preauth] 2026-07-01T12:55:46.784311-05:00 claude-cloud sshd[1086029]: Invalid user ping1 from 124.18.182.99 port 39590 2026-07-01T12:55:47.067406-05:00 claude-cloud sshd[1086029]: Received disconnect from 124.18.182.99 port 39590:11: Bye Bye [preauth] 2026-07-01T12:55:47.067675-05:00 claude-cloud sshd[1086029]: Disconnected from invalid user ping1 124.18.182.99 port 39590 [preauth] 2026-07-01T12:56:10.698744-05:00 claude-cloud sshd[1086142]: Invalid user sol from 45.148.10.183 port 56538 2026-07-01T12:56:10.712702-05:00 claude-cloud sshd[1086142]: Connection closed by invalid user sol 45.148.10.183 port 56538 [preauth] 2026-07-01T12:57:07.627863-05:00 claude-cloud sshd[1086479]: Invalid user ubuntu from 45.148.10.240 port 55510 2026-07-01T12:57:07.639724-05:00 claude-cloud sshd[1086479]: Connection closed by invalid user ubuntu 45.148.10.240 port 55510 [preauth] 2026-07-01T12:57:10.984898-05:00 claude-cloud sshd[1086481]: Invalid user support from 45.198.224.46 port 42856 2026-07-01T12:57:11.823410-05:00 claude-cloud sshd[1086481]: Connection closed by invalid user support 45.198.224.46 port 42856 [preauth] 2026-07-01T12:57:44.411503-05:00 claude-cloud sshd[1086636]: Invalid user mrc from 124.18.182.99 port 35858 2026-07-01T12:57:44.697201-05:00 claude-cloud sshd[1086636]: Received disconnect from 124.18.182.99 port 35858:11: Bye Bye [preauth] 2026-07-01T12:57:44.697461-05:00 claude-cloud sshd[1086636]: Disconnected from invalid user mrc 124.18.182.99 port 35858 [preauth] 2026-07-01T12:57:45.503488-05:00 claude-cloud sshd[1086640]: Invalid user webservices from 211.75.3.37 port 56254 2026-07-01T12:57:45.734936-05:00 claude-cloud sshd[1086640]: Received disconnect from 211.75.3.37 port 56254:11: Bye Bye [preauth] 2026-07-01T12:57:45.735251-05:00 claude-cloud sshd[1086640]: Disconnected from invalid user webservices 211.75.3.37 port 56254 [preauth] 2026-07-01T12:57:45.897367-05:00 claude-cloud sshd[1086599]: Connection closed by authenticating user root 27.71.230.31 port 44300 [preauth] 2026-07-01T12:57:57.452362-05:00 claude-cloud sshd[1086688]: Received disconnect from 148.153.245.161 port 44612:11: disconnected by user [preauth] 2026-07-01T12:57:57.453728-05:00 claude-cloud sshd[1086688]: Disconnected from authenticating user root 148.153.245.161 port 44612 [preauth] 2026-07-01T12:58:52.767752-05:00 claude-cloud sshd[1086952]: Invalid user ubuntu from 45.148.10.240 port 45602 2026-07-01T12:58:52.782171-05:00 claude-cloud sshd[1086952]: Connection closed by invalid user ubuntu 45.148.10.240 port 45602 [preauth] 2026-07-01T12:59:09.368057-05:00 claude-cloud sshd[1087047]: Invalid user solana from 45.148.10.183 port 43412 2026-07-01T12:59:09.381805-05:00 claude-cloud sshd[1087047]: Connection closed by invalid user solana 45.148.10.183 port 43412 [preauth] 2026-07-01T12:59:41.258700-05:00 claude-cloud sshd[1087182]: Invalid user blocked from 124.18.182.99 port 47570 2026-07-01T12:59:41.551371-05:00 claude-cloud sshd[1087182]: Received disconnect from 124.18.182.99 port 47570:11: Bye Bye [preauth] 2026-07-01T12:59:41.551711-05:00 claude-cloud sshd[1087182]: Disconnected from invalid user blocked 124.18.182.99 port 47570 [preauth] 2026-07-01T12:59:52.240800-05:00 claude-cloud sshd[1087233]: Invalid user classics from 211.75.3.37 port 56912 2026-07-01T12:59:52.470633-05:00 claude-cloud sshd[1087233]: Received disconnect from 211.75.3.37 port 56912:11: Bye Bye [preauth] 2026-07-01T12:59:52.470886-05:00 claude-cloud sshd[1087233]: Disconnected from invalid user classics 211.75.3.37 port 56912 [preauth] 2026-07-01T13:00:33.980664-05:00 claude-cloud sshd[1087391]: Invalid user ubuntu from 45.148.10.240 port 53960 2026-07-01T13:00:33.992432-05:00 claude-cloud sshd[1087391]: Connection closed by invalid user ubuntu 45.148.10.240 port 53960 [preauth] 2026-07-01T13:01:27.991769-05:00 claude-cloud systemd-logind[853]: New session c5714 of user claude. 2026-07-01T13:01:28.535236-05:00 claude-cloud systemd-logind[853]: Session c5714 logged out. Waiting for processes to exit. 2026-07-01T13:01:28.537585-05:00 claude-cloud systemd-logind[853]: Removed session c5714. 2026-07-01T13:01:34.436640-05:00 claude-cloud sshd[1087701]: Invalid user memberlite from 124.18.182.99 port 49390 2026-07-01T13:01:34.725671-05:00 claude-cloud sshd[1087701]: Received disconnect from 124.18.182.99 port 49390:11: Bye Bye [preauth] 2026-07-01T13:01:34.725860-05:00 claude-cloud sshd[1087701]: Disconnected from invalid user memberlite 124.18.182.99 port 49390 [preauth] 2026-07-01T13:01:56.014082-05:00 claude-cloud sshd[1087784]: Invalid user blocked from 211.75.3.37 port 35756 2026-07-01T13:01:56.243413-05:00 claude-cloud sshd[1087784]: Received disconnect from 211.75.3.37 port 35756:11: Bye Bye [preauth] 2026-07-01T13:01:56.243836-05:00 claude-cloud sshd[1087784]: Disconnected from invalid user blocked 211.75.3.37 port 35756 [preauth] 2026-07-01T13:02:14.503030-05:00 claude-cloud sshd[1087867]: Invalid user ubuntu from 45.148.10.240 port 45908 2026-07-01T13:02:14.515492-05:00 claude-cloud sshd[1087867]: Connection closed by invalid user ubuntu 45.148.10.240 port 45908 [preauth] 2026-07-01T13:02:30.320244-05:00 claude-cloud sshd[1087925]: Invalid user solana from 45.148.10.183 port 44360 2026-07-01T13:02:30.332827-05:00 claude-cloud sshd[1087925]: Connection closed by invalid user solana 45.148.10.183 port 44360 [preauth] 2026-07-01T13:03:28.428141-05:00 claude-cloud sshd[1088184]: Invalid user webedit from 124.18.182.99 port 50894 2026-07-01T13:03:28.718386-05:00 claude-cloud sshd[1088184]: Received disconnect from 124.18.182.99 port 50894:11: Bye Bye [preauth] 2026-07-01T13:03:28.718546-05:00 claude-cloud sshd[1088184]: Disconnected from invalid user webedit 124.18.182.99 port 50894 [preauth] 2026-07-01T13:04:02.570603-05:00 claude-cloud sshd[1088378]: Connection closed by authenticating user root 45.148.10.240 port 46028 [preauth] 2026-07-01T13:04:10.358375-05:00 claude-cloud sshd[1088399]: Invalid user f from 211.75.3.37 port 53172 2026-07-01T13:04:10.582751-05:00 claude-cloud sshd[1088399]: Received disconnect from 211.75.3.37 port 53172:11: Bye Bye [preauth] 2026-07-01T13:04:10.583243-05:00 claude-cloud sshd[1088399]: Disconnected from invalid user f 211.75.3.37 port 53172 [preauth] 2026-07-01T13:04:12.391650-05:00 claude-cloud sshd[1088220]: Connection closed by authenticating user root 27.71.230.31 port 44984 [preauth] 2026-07-01T13:05:01.750522-05:00 claude-cloud CRON[1088629]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T13:05:01.756097-05:00 claude-cloud CRON[1088629]: pam_unix(cron:session): session closed for user root 2026-07-01T13:05:21.834077-05:00 claude-cloud sshd[1088709]: Invalid user solana from 45.148.10.183 port 58294 2026-07-01T13:05:21.847752-05:00 claude-cloud sshd[1088709]: Connection closed by invalid user solana 45.148.10.183 port 58294 [preauth] 2026-07-01T13:05:55.030811-05:00 claude-cloud sshd[1088845]: Invalid user sol-docker from 45.148.10.240 port 53580 2026-07-01T13:05:55.044337-05:00 claude-cloud sshd[1088845]: Connection closed by invalid user sol-docker 45.148.10.240 port 53580 [preauth] 2026-07-01T13:06:32.564030-05:00 claude-cloud systemd-logind[853]: New session c5715 of user claude. 2026-07-01T13:06:32.838104-05:00 claude-cloud systemd-logind[853]: Session c5715 logged out. Waiting for processes to exit. 2026-07-01T13:06:32.839053-05:00 claude-cloud systemd-logind[853]: Removed session c5715. 2026-07-01T13:06:57.167713-05:00 claude-cloud sshd[1089189]: Connection closed by authenticating user root 45.198.224.46 port 40932 [preauth] 2026-07-01T13:07:35.897659-05:00 claude-cloud sshd[1089361]: Invalid user soldocker from 45.148.10.240 port 52900 2026-07-01T13:07:35.909716-05:00 claude-cloud sshd[1089361]: Connection closed by invalid user soldocker 45.148.10.240 port 52900 [preauth] 2026-07-01T13:08:03.900924-05:00 claude-cloud sshd[1089461]: Received disconnect from 103.57.224.219 port 30504:11: disconnected by user [preauth] 2026-07-01T13:08:03.901842-05:00 claude-cloud sshd[1089461]: Disconnected from authenticating user root 103.57.224.219 port 30504 [preauth] 2026-07-01T13:08:44.080173-05:00 claude-cloud sshd[1089704]: Invalid user sol from 45.148.10.183 port 59640 2026-07-01T13:08:44.094244-05:00 claude-cloud sshd[1089704]: Connection closed by invalid user sol 45.148.10.183 port 59640 [preauth] 2026-07-01T13:09:14.315229-05:00 claude-cloud sshd[1089854]: Invalid user solana from 45.148.10.240 port 35488 2026-07-01T13:09:14.327376-05:00 claude-cloud sshd[1089854]: Connection closed by invalid user solana 45.148.10.240 port 35488 [preauth] 2026-07-01T13:09:48.383066-05:00 claude-cloud sshd[1089932]: Connection closed by authenticating user root 27.71.230.31 port 45786 [preauth] 2026-07-01T13:10:58.726465-05:00 claude-cloud sshd[1090310]: Invalid user postgres from 45.148.10.240 port 42506 2026-07-01T13:10:58.738559-05:00 claude-cloud sshd[1090310]: Connection closed by invalid user postgres 45.148.10.240 port 42506 [preauth] 2026-07-01T13:11:36.595439-05:00 claude-cloud systemd-logind[853]: New session c5716 of user claude. 2026-07-01T13:11:36.865072-05:00 claude-cloud systemd-logind[853]: Session c5716 logged out. Waiting for processes to exit. 2026-07-01T13:11:36.865957-05:00 claude-cloud systemd-logind[853]: Removed session c5716. 2026-07-01T13:11:38.201199-05:00 claude-cloud sshd[1090500]: Invalid user sol from 45.148.10.183 port 46914 2026-07-01T13:11:38.215571-05:00 claude-cloud sshd[1090500]: Connection closed by invalid user sol 45.148.10.183 port 46914 [preauth] 2026-07-01T13:12:42.703645-05:00 claude-cloud sshd[1090760]: Connection closed by authenticating user root 45.148.10.240 port 39496 [preauth] 2026-07-01T13:14:20.642954-05:00 claude-cloud sshd[1091165]: Connection closed by authenticating user root 45.148.10.240 port 47038 [preauth] 2026-07-01T13:14:36.746496-05:00 claude-cloud sshd[1091201]: Invalid user sol from 45.148.10.183 port 33306 2026-07-01T13:14:36.759747-05:00 claude-cloud sshd[1091201]: Connection closed by invalid user sol 45.148.10.183 port 33306 [preauth] 2026-07-01T13:14:57.201144-05:00 claude-cloud sshd[1091277]: Invalid user xl from 211.75.3.37 port 36332 2026-07-01T13:14:57.430183-05:00 claude-cloud sshd[1091277]: Received disconnect from 211.75.3.37 port 36332:11: Bye Bye [preauth] 2026-07-01T13:14:57.430447-05:00 claude-cloud sshd[1091277]: Disconnected from invalid user xl 211.75.3.37 port 36332 [preauth] 2026-07-01T13:15:01.768355-05:00 claude-cloud CRON[1091295]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T13:15:01.774936-05:00 claude-cloud CRON[1091295]: pam_unix(cron:session): session closed for user root 2026-07-01T13:15:35.210385-05:00 claude-cloud sshd[1091353]: Connection closed by authenticating user root 27.71.230.31 port 58730 [preauth] 2026-07-01T13:15:56.047103-05:00 claude-cloud sshd[1091451]: Connection closed by 195.178.110.217 port 57140 2026-07-01T13:16:04.476739-05:00 claude-cloud sshd[1091480]: Connection closed by authenticating user root 45.148.10.240 port 53162 [preauth] 2026-07-01T13:16:14.166105-05:00 claude-cloud sshd[1091509]: Invalid user zhixianxiao from 45.198.224.46 port 34678 2026-07-01T13:16:14.815646-05:00 claude-cloud sshd[1091509]: Connection closed by invalid user zhixianxiao 45.198.224.46 port 34678 [preauth] 2026-07-01T13:16:22.347003-05:00 claude-cloud sshd[1091534]: Received disconnect from 61.219.232.138 port 42332:11: Bye Bye [preauth] 2026-07-01T13:16:22.348311-05:00 claude-cloud sshd[1091534]: Disconnected from authenticating user root 61.219.232.138 port 42332 [preauth] 2026-07-01T13:16:40.911952-05:00 claude-cloud systemd-logind[853]: New session c5717 of user claude. 2026-07-01T13:16:41.217090-05:00 claude-cloud systemd-logind[853]: Session c5717 logged out. Waiting for processes to exit. 2026-07-01T13:16:41.219377-05:00 claude-cloud systemd-logind[853]: Removed session c5717. 2026-07-01T13:16:45.086268-05:00 claude-cloud sshd[1091621]: Received disconnect from 65.254.93.170 port 55764:11: Bye Bye [preauth] 2026-07-01T13:16:45.087049-05:00 claude-cloud sshd[1091621]: Disconnected from authenticating user root 65.254.93.170 port 55764 [preauth] 2026-07-01T13:17:01.785006-05:00 claude-cloud CRON[1091745]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T13:17:01.799597-05:00 claude-cloud CRON[1091745]: pam_unix(cron:session): session closed for user root 2026-07-01T13:17:58.934215-05:00 claude-cloud sshd[1091887]: Connection closed by authenticating user root 45.148.10.240 port 36876 [preauth] 2026-07-01T13:18:25.720832-05:00 claude-cloud sshd[1091978]: Invalid user sol from 45.148.10.183 port 41948 2026-07-01T13:18:25.734556-05:00 claude-cloud sshd[1091978]: Connection closed by invalid user sol 45.148.10.183 port 41948 [preauth] 2026-07-01T13:19:47.964064-05:00 claude-cloud sshd[1092251]: Invalid user solana from 45.148.10.240 port 38454 2026-07-01T13:19:47.977146-05:00 claude-cloud sshd[1092251]: Connection closed by invalid user solana 45.148.10.240 port 38454 [preauth] 2026-07-01T13:19:59.587408-05:00 claude-cloud sshd[1092282]: Connection closed by authenticating user root 195.178.110.217 port 60860 [preauth] 2026-07-01T13:20:30.675540-05:00 claude-cloud sshd[1092367]: Invalid user admin from 2.57.121.25 port 3358 2026-07-01T13:20:30.701330-05:00 claude-cloud sshd[1092367]: Connection closed by invalid user admin 2.57.121.25 port 3358 [preauth] 2026-07-01T13:20:40.991547-05:00 claude-cloud sshd[1092415]: Invalid user august from 2.57.121.112 port 16876 2026-07-01T13:20:41.016679-05:00 claude-cloud sshd[1092415]: Connection closed by invalid user august 2.57.121.112 port 16876 [preauth] 2026-07-01T13:20:59.017994-05:00 claude-cloud sshd[1092472]: Connection closed by authenticating user root 45.148.10.183 port 55046 [preauth] 2026-07-01T13:21:28.403758-05:00 claude-cloud sshd[1092547]: Connection closed by authenticating user root 27.71.230.31 port 48300 [preauth] 2026-07-01T13:21:34.093708-05:00 claude-cloud sshd[1092580]: Invalid user solana from 45.148.10.240 port 46108 2026-07-01T13:21:34.106364-05:00 claude-cloud sshd[1092580]: Connection closed by invalid user solana 45.148.10.240 port 46108 [preauth] 2026-07-01T13:21:45.298605-05:00 claude-cloud systemd-logind[853]: New session c5718 of user claude. 2026-07-01T13:21:45.586470-05:00 claude-cloud systemd-logind[853]: Session c5718 logged out. Waiting for processes to exit. 2026-07-01T13:21:45.587769-05:00 claude-cloud systemd-logind[853]: Removed session c5718. 2026-07-01T13:21:56.340798-05:00 claude-cloud sshd[1092657]: Connection closed by authenticating user root 195.178.110.217 port 35756 [preauth] 2026-07-01T13:23:21.070216-05:00 claude-cloud sshd[1092934]: Invalid user defi from 45.148.10.240 port 49464 2026-07-01T13:23:21.083183-05:00 claude-cloud sshd[1092934]: Connection closed by invalid user defi 45.148.10.240 port 49464 [preauth] 2026-07-01T13:23:34.059740-05:00 claude-cloud sshd[1092961]: Received disconnect from 65.254.93.170 port 59562:11: Bye Bye [preauth] 2026-07-01T13:23:34.060143-05:00 claude-cloud sshd[1092961]: Disconnected from authenticating user root 65.254.93.170 port 59562 [preauth] 2026-07-01T13:23:53.541575-05:00 claude-cloud sshd[1093014]: Connection closed by authenticating user root 195.178.110.217 port 38858 [preauth] 2026-07-01T13:24:24.486075-05:00 claude-cloud sshd[1093106]: Connection closed by authenticating user root 45.148.10.183 port 39388 [preauth] 2026-07-01T13:25:01.809641-05:00 claude-cloud CRON[1093243]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T13:25:01.816106-05:00 claude-cloud CRON[1093243]: pam_unix(cron:session): session closed for user root 2026-07-01T13:25:07.189545-05:00 claude-cloud sshd[1093256]: Invalid user geth from 45.148.10.240 port 46876 2026-07-01T13:25:07.202039-05:00 claude-cloud sshd[1093256]: Connection closed by invalid user geth 45.148.10.240 port 46876 [preauth] 2026-07-01T13:25:27.232081-05:00 claude-cloud sshd[1093320]: Received disconnect from 65.254.93.170 port 37906:11: Bye Bye [preauth] 2026-07-01T13:25:27.232772-05:00 claude-cloud sshd[1093320]: Disconnected from authenticating user root 65.254.93.170 port 37906 [preauth] 2026-07-01T13:25:46.279529-05:00 claude-cloud sshd[1093378]: Connection closed by authenticating user root 195.178.110.217 port 41980 [preauth] 2026-07-01T13:25:47.036005-05:00 claude-cloud sshd[1093375]: Invalid user yuanzhecai from 45.198.224.46 port 51860 2026-07-01T13:25:47.784467-05:00 claude-cloud sshd[1093375]: Connection closed by invalid user yuanzhecai 45.198.224.46 port 51860 [preauth] 2026-07-01T13:26:02.909392-05:00 claude-cloud sshd[1093424]: Received disconnect from 137.184.228.138 port 49618:11: Bye Bye [preauth] 2026-07-01T13:26:02.909820-05:00 claude-cloud sshd[1093424]: Disconnected from authenticating user root 137.184.228.138 port 49618 [preauth] 2026-07-01T13:26:45.961295-05:00 claude-cloud sshd[1093562]: Invalid user ethereum from 45.148.10.240 port 58804 2026-07-01T13:26:45.973387-05:00 claude-cloud sshd[1093562]: Connection closed by invalid user ethereum 45.148.10.240 port 58804 [preauth] 2026-07-01T13:26:49.587546-05:00 claude-cloud systemd-logind[853]: New session c5719 of user claude. 2026-07-01T13:26:49.850545-05:00 claude-cloud systemd-logind[853]: Session c5719 logged out. Waiting for processes to exit. 2026-07-01T13:26:49.852011-05:00 claude-cloud systemd-logind[853]: Removed session c5719. 2026-07-01T13:27:18.181149-05:00 claude-cloud sshd[1093661]: Received disconnect from 65.254.93.170 port 44464:11: Bye Bye [preauth] 2026-07-01T13:27:18.181936-05:00 claude-cloud sshd[1093661]: Disconnected from authenticating user root 65.254.93.170 port 44464 [preauth] 2026-07-01T13:27:28.194135-05:00 claude-cloud sshd[1093676]: Connection closed by authenticating user root 27.71.230.31 port 60284 [preauth] 2026-07-01T13:27:32.305044-05:00 claude-cloud sshd[1093731]: Invalid user solana from 45.148.10.183 port 45050 2026-07-01T13:27:32.319682-05:00 claude-cloud sshd[1093731]: Connection closed by invalid user solana 45.148.10.183 port 45050 [preauth] 2026-07-01T13:27:38.135118-05:00 claude-cloud sshd[1093742]: Connection closed by authenticating user root 195.178.110.217 port 45102 [preauth] 2026-07-01T13:28:23.515228-05:00 claude-cloud sshd[1093949]: Invalid user eth from 45.148.10.240 port 42046 2026-07-01T13:28:23.527827-05:00 claude-cloud sshd[1093949]: Connection closed by invalid user eth 45.148.10.240 port 42046 [preauth] 2026-07-01T13:29:18.642689-05:00 claude-cloud sshd[1094096]: Received disconnect from 65.254.93.170 port 51028:11: Bye Bye [preauth] 2026-07-01T13:29:18.643138-05:00 claude-cloud sshd[1094096]: Disconnected from authenticating user root 65.254.93.170 port 51028 [preauth] 2026-07-01T13:29:21.103203-05:00 claude-cloud sshd[1094108]: Connection closed by authenticating user root 195.178.110.217 port 48234 [preauth] 2026-07-01T13:29:45.347955-05:00 claude-cloud sshd[1094212]: Received disconnect from 61.219.232.138 port 60516:11: Bye Bye [preauth] 2026-07-01T13:29:45.350034-05:00 claude-cloud sshd[1094212]: Disconnected from authenticating user root 61.219.232.138 port 60516 [preauth] 2026-07-01T13:30:07.623268-05:00 claude-cloud sshd[1094279]: Invalid user eth-docker from 45.148.10.240 port 34516 2026-07-01T13:30:07.636183-05:00 claude-cloud sshd[1094279]: Connection closed by invalid user eth-docker 45.148.10.240 port 34516 [preauth] 2026-07-01T13:30:23.106830-05:00 claude-cloud sshd[1094326]: Received disconnect from 137.184.228.138 port 49814:11: Bye Bye [preauth] 2026-07-01T13:30:23.108301-05:00 claude-cloud sshd[1094326]: Disconnected from authenticating user root 137.184.228.138 port 49814 [preauth] 2026-07-01T13:30:46.577768-05:00 claude-cloud sshd[1094414]: Invalid user solana from 45.148.10.183 port 59728 2026-07-01T13:30:46.591519-05:00 claude-cloud sshd[1094414]: Connection closed by invalid user solana 45.148.10.183 port 59728 [preauth] 2026-07-01T13:31:04.345027-05:00 claude-cloud sshd[1094450]: Connection closed by authenticating user root 195.178.110.217 port 51328 [preauth] 2026-07-01T13:31:27.737003-05:00 claude-cloud sshd[1094513]: Received disconnect from 65.254.93.170 port 57620:11: Bye Bye [preauth] 2026-07-01T13:31:27.737811-05:00 claude-cloud sshd[1094513]: Disconnected from authenticating user root 65.254.93.170 port 57620 [preauth] 2026-07-01T13:31:53.890387-05:00 claude-cloud systemd-logind[853]: New session c5720 of user claude. 2026-07-01T13:31:54.195183-05:00 claude-cloud systemd-logind[853]: Session c5720 logged out. Waiting for processes to exit. 2026-07-01T13:31:54.196080-05:00 claude-cloud systemd-logind[853]: Removed session c5720. 2026-07-01T13:31:56.114138-05:00 claude-cloud sshd[1094638]: Invalid user eth from 45.148.10.240 port 52992 2026-07-01T13:31:56.127224-05:00 claude-cloud sshd[1094638]: Connection closed by invalid user eth 45.148.10.240 port 52992 [preauth] 2026-07-01T13:32:01.311784-05:00 claude-cloud sshd[1094640]: Received disconnect from 137.184.228.138 port 49936:11: Bye Bye [preauth] 2026-07-01T13:32:01.312190-05:00 claude-cloud sshd[1094640]: Disconnected from authenticating user root 137.184.228.138 port 49936 [preauth] 2026-07-01T13:32:24.425781-05:00 claude-cloud sshd[1094725]: Received disconnect from 61.219.232.138 port 43072:11: Bye Bye [preauth] 2026-07-01T13:32:24.428010-05:00 claude-cloud sshd[1094725]: Disconnected from authenticating user root 61.219.232.138 port 43072 [preauth] 2026-07-01T13:32:49.496120-05:00 claude-cloud sshd[1094798]: Connection closed by authenticating user root 195.178.110.217 port 54418 [preauth] 2026-07-01T13:33:31.452608-05:00 claude-cloud sshd[1094871]: Connection closed by authenticating user root 27.71.230.31 port 48228 [preauth] 2026-07-01T13:33:33.569983-05:00 claude-cloud sshd[1094929]: Received disconnect from 65.254.93.170 port 35956:11: Bye Bye [preauth] 2026-07-01T13:33:33.570431-05:00 claude-cloud sshd[1094929]: Disconnected from authenticating user root 65.254.93.170 port 35956 [preauth] 2026-07-01T13:33:37.657141-05:00 claude-cloud sshd[1094942]: Invalid user ftpuser from 137.184.228.138 port 50054 2026-07-01T13:33:37.822424-05:00 claude-cloud sshd[1094942]: Received disconnect from 137.184.228.138 port 50054:11: Bye Bye [preauth] 2026-07-01T13:33:37.822786-05:00 claude-cloud sshd[1094942]: Disconnected from invalid user ftpuser 137.184.228.138 port 50054 [preauth] 2026-07-01T13:33:40.723737-05:00 claude-cloud sshd[1094953]: Invalid user eth from 45.148.10.240 port 34924 2026-07-01T13:33:40.736786-05:00 claude-cloud sshd[1094953]: Connection closed by invalid user eth 45.148.10.240 port 34924 [preauth] 2026-07-01T13:33:52.679741-05:00 claude-cloud sshd[1095006]: Invalid user solana from 45.148.10.183 port 59676 2026-07-01T13:33:52.692100-05:00 claude-cloud sshd[1095006]: Connection closed by invalid user solana 45.148.10.183 port 59676 [preauth] 2026-07-01T13:34:14.810891-05:00 claude-cloud sshd[1095081]: Invalid user from 8.219.159.94 port 50200 2026-07-01T13:34:15.019132-05:00 claude-cloud sshd[1095081]: Connection closed by invalid user 8.219.159.94 port 50200 [preauth] 2026-07-01T13:34:36.273801-05:00 claude-cloud sshd[1095129]: Connection closed by authenticating user root 195.178.110.217 port 57524 [preauth] 2026-07-01T13:35:01.830132-05:00 claude-cloud CRON[1095210]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T13:35:01.836880-05:00 claude-cloud CRON[1095210]: pam_unix(cron:session): session closed for user root 2026-07-01T13:35:11.769353-05:00 claude-cloud sshd[1095238]: Received disconnect from 137.184.228.138 port 50180:11: Bye Bye [preauth] 2026-07-01T13:35:11.769731-05:00 claude-cloud sshd[1095238]: Disconnected from authenticating user root 137.184.228.138 port 50180 [preauth] 2026-07-01T13:35:15.795320-05:00 claude-cloud sshd[1095245]: Invalid user bailey from 45.198.224.46 port 38222 2026-07-01T13:35:16.411498-05:00 claude-cloud sshd[1095245]: Connection closed by invalid user bailey 45.198.224.46 port 38222 [preauth] 2026-07-01T13:35:27.589102-05:00 claude-cloud sshd[1095288]: Received disconnect from 61.219.232.138 port 43650:11: Bye Bye [preauth] 2026-07-01T13:35:27.589599-05:00 claude-cloud sshd[1095288]: Disconnected from authenticating user root 61.219.232.138 port 43650 [preauth] 2026-07-01T13:35:31.932027-05:00 claude-cloud sshd[1095303]: Invalid user sol from 45.148.10.240 port 52314 2026-07-01T13:35:31.947152-05:00 claude-cloud sshd[1095303]: Connection closed by invalid user sol 45.148.10.240 port 52314 [preauth] 2026-07-01T13:35:36.442570-05:00 claude-cloud sshd[1095312]: Received disconnect from 65.254.93.170 port 42518:11: Bye Bye [preauth] 2026-07-01T13:35:36.442946-05:00 claude-cloud sshd[1095312]: Disconnected from authenticating user root 65.254.93.170 port 42518 [preauth] 2026-07-01T13:36:34.734205-05:00 claude-cloud sshd[1095512]: Connection closed by authenticating user root 195.178.110.217 port 60606 [preauth] 2026-07-01T13:36:47.218630-05:00 claude-cloud sshd[1095549]: Received disconnect from 137.184.228.138 port 50310:11: Bye Bye [preauth] 2026-07-01T13:36:47.220577-05:00 claude-cloud sshd[1095549]: Disconnected from authenticating user root 137.184.228.138 port 50310 [preauth] 2026-07-01T13:36:53.665216-05:00 claude-cloud sshd[1095563]: Invalid user solana from 45.148.10.183 port 35126 2026-07-01T13:36:53.678708-05:00 claude-cloud sshd[1095563]: Connection closed by invalid user solana 45.148.10.183 port 35126 [preauth] 2026-07-01T13:36:58.310694-05:00 claude-cloud systemd-logind[853]: New session c5721 of user claude. 2026-07-01T13:36:58.565100-05:00 claude-cloud systemd-logind[853]: Session c5721 logged out. Waiting for processes to exit. 2026-07-01T13:36:58.566898-05:00 claude-cloud systemd-logind[853]: Removed session c5721. 2026-07-01T13:37:22.996446-05:00 claude-cloud sshd[1095665]: Connection closed by authenticating user claude 45.148.10.240 port 48436 [preauth] 2026-07-01T13:37:43.109237-05:00 claude-cloud sshd[1095715]: Invalid user admin from 65.254.93.170 port 49088 2026-07-01T13:37:43.363859-05:00 claude-cloud sshd[1095715]: Received disconnect from 65.254.93.170 port 49088:11: Bye Bye [preauth] 2026-07-01T13:37:43.364140-05:00 claude-cloud sshd[1095715]: Disconnected from invalid user admin 65.254.93.170 port 49088 [preauth] 2026-07-01T13:38:18.335356-05:00 claude-cloud sshd[1095897]: Received disconnect from 137.184.228.138 port 50430:11: Bye Bye [preauth] 2026-07-01T13:38:18.336200-05:00 claude-cloud sshd[1095897]: Disconnected from authenticating user root 137.184.228.138 port 50430 [preauth] 2026-07-01T13:38:19.516684-05:00 claude-cloud sshd[1095899]: Received disconnect from 61.219.232.138 port 60520:11: Bye Bye [preauth] 2026-07-01T13:38:19.517021-05:00 claude-cloud sshd[1095899]: Disconnected from authenticating user root 61.219.232.138 port 60520 [preauth] 2026-07-01T13:38:39.671139-05:00 claude-cloud sshd[1095970]: Connection closed by authenticating user root 195.178.110.217 port 35466 [preauth] 2026-07-01T13:39:05.806086-05:00 claude-cloud sshd[1096049]: Invalid user validator from 45.148.10.240 port 54848 2026-07-01T13:39:05.818723-05:00 claude-cloud sshd[1096049]: Connection closed by invalid user validator 45.148.10.240 port 54848 [preauth] 2026-07-01T13:39:27.420948-05:00 claude-cloud sshd[1096069]: Connection closed by authenticating user root 27.71.230.31 port 54846 [preauth] 2026-07-01T13:39:43.669076-05:00 claude-cloud sshd[1096151]: Received disconnect from 65.254.93.170 port 56740:11: Bye Bye [preauth] 2026-07-01T13:39:43.669639-05:00 claude-cloud sshd[1096151]: Disconnected from authenticating user root 65.254.93.170 port 56740 [preauth] 2026-07-01T13:39:45.992445-05:00 claude-cloud sshd[1096172]: Received disconnect from 137.184.228.138 port 50556:11: Bye Bye [preauth] 2026-07-01T13:39:45.993141-05:00 claude-cloud sshd[1096172]: Disconnected from authenticating user root 137.184.228.138 port 50556 [preauth] 2026-07-01T13:39:58.523909-05:00 claude-cloud sshd[1096216]: Invalid user solana from 45.148.10.183 port 51276 2026-07-01T13:39:58.537828-05:00 claude-cloud sshd[1096216]: Connection closed by invalid user solana 45.148.10.183 port 51276 [preauth] 2026-07-01T13:40:43.139705-05:00 claude-cloud sshd[1096350]: Invalid user node from 45.148.10.240 port 50612 2026-07-01T13:40:43.151814-05:00 claude-cloud sshd[1096350]: Connection closed by invalid user node 45.148.10.240 port 50612 [preauth] 2026-07-01T13:40:52.667114-05:00 claude-cloud sshd[1096367]: Connection closed by authenticating user root 195.178.110.217 port 38562 [preauth] 2026-07-01T13:40:57.288000-05:00 claude-cloud sshd[1096390]: Received disconnect from 61.219.232.138 port 47468:11: Bye Bye [preauth] 2026-07-01T13:40:57.288531-05:00 claude-cloud sshd[1096390]: Disconnected from authenticating user root 61.219.232.138 port 47468 [preauth] 2026-07-01T13:41:14.784724-05:00 claude-cloud sshd[1096475]: Invalid user ubuntu from 137.184.228.138 port 50676 2026-07-01T13:41:14.949303-05:00 claude-cloud sshd[1096475]: Received disconnect from 137.184.228.138 port 50676:11: Bye Bye [preauth] 2026-07-01T13:41:14.949536-05:00 claude-cloud sshd[1096475]: Disconnected from invalid user ubuntu 137.184.228.138 port 50676 [preauth] 2026-07-01T13:41:44.665849-05:00 claude-cloud sshd[1096553]: Invalid user ubuntu from 65.254.93.170 port 35086 2026-07-01T13:41:44.921030-05:00 claude-cloud sshd[1096553]: Received disconnect from 65.254.93.170 port 35086:11: Bye Bye [preauth] 2026-07-01T13:41:44.921909-05:00 claude-cloud sshd[1096553]: Disconnected from invalid user ubuntu 65.254.93.170 port 35086 [preauth] 2026-07-01T13:42:02.840890-05:00 claude-cloud systemd-logind[853]: New session c5722 of user claude. 2026-07-01T13:42:03.205806-05:00 claude-cloud systemd-logind[853]: Session c5722 logged out. Waiting for processes to exit. 2026-07-01T13:42:03.207887-05:00 claude-cloud systemd-logind[853]: Removed session c5722. 2026-07-01T13:42:26.763636-05:00 claude-cloud sshd[1096685]: Invalid user operator from 45.148.10.240 port 45414 2026-07-01T13:42:26.775791-05:00 claude-cloud sshd[1096685]: Connection closed by invalid user operator 45.148.10.240 port 45414 [preauth] 2026-07-01T13:42:45.555653-05:00 claude-cloud sshd[1096741]: Received disconnect from 137.184.228.138 port 50796:11: Bye Bye [preauth] 2026-07-01T13:42:45.555947-05:00 claude-cloud sshd[1096741]: Disconnected from authenticating user root 137.184.228.138 port 50796 [preauth] 2026-07-01T13:43:00.647534-05:00 claude-cloud sshd[1096777]: Connection closed by authenticating user root 195.178.110.217 port 41664 [preauth] 2026-07-01T13:43:04.172888-05:00 claude-cloud sshd[1096798]: Invalid user sols from 45.148.10.183 port 48604 2026-07-01T13:43:04.187128-05:00 claude-cloud sshd[1096798]: Connection closed by invalid user sols 45.148.10.183 port 48604 [preauth] 2026-07-01T13:43:49.243518-05:00 claude-cloud sshd[1096960]: Received disconnect from 65.254.93.170 port 41652:11: Bye Bye [preauth] 2026-07-01T13:43:49.244206-05:00 claude-cloud sshd[1096960]: Disconnected from authenticating user root 65.254.93.170 port 41652 [preauth] 2026-07-01T13:44:05.487143-05:00 claude-cloud sshd[1097012]: Invalid user ftpuser from 61.219.232.138 port 60530 2026-07-01T13:44:05.714099-05:00 claude-cloud sshd[1097012]: Received disconnect from 61.219.232.138 port 60530:11: Bye Bye [preauth] 2026-07-01T13:44:05.714374-05:00 claude-cloud sshd[1097012]: Disconnected from invalid user ftpuser 61.219.232.138 port 60530 [preauth] 2026-07-01T13:44:12.023757-05:00 claude-cloud sshd[1097029]: Invalid user trader from 45.148.10.240 port 50652 2026-07-01T13:44:12.036015-05:00 claude-cloud sshd[1097029]: Connection closed by invalid user trader 45.148.10.240 port 50652 [preauth] 2026-07-01T13:44:19.566563-05:00 claude-cloud sshd[1097051]: Invalid user admin from 137.184.228.138 port 50916 2026-07-01T13:44:19.733399-05:00 claude-cloud sshd[1097051]: Received disconnect from 137.184.228.138 port 50916:11: Bye Bye [preauth] 2026-07-01T13:44:19.733632-05:00 claude-cloud sshd[1097051]: Disconnected from invalid user admin 137.184.228.138 port 50916 [preauth] 2026-07-01T13:44:45.119242-05:00 claude-cloud sshd[1097112]: Invalid user zhw from 45.198.224.46 port 55880 2026-07-01T13:44:46.149520-05:00 claude-cloud sshd[1097112]: Connection closed by invalid user zhw 45.198.224.46 port 55880 [preauth] 2026-07-01T13:45:01.849994-05:00 claude-cloud CRON[1097161]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T13:45:01.857415-05:00 claude-cloud CRON[1097161]: pam_unix(cron:session): session closed for user root 2026-07-01T13:45:06.684899-05:00 claude-cloud sshd[1097173]: Connection closed by authenticating user root 195.178.110.217 port 44774 [preauth] 2026-07-01T13:45:33.647467-05:00 claude-cloud sshd[1097181]: Connection closed by authenticating user root 27.71.230.31 port 44896 [preauth] 2026-07-01T13:45:51.357068-05:00 claude-cloud sshd[1097344]: Received disconnect from 65.254.93.170 port 48372:11: Bye Bye [preauth] 2026-07-01T13:45:51.358143-05:00 claude-cloud sshd[1097344]: Disconnected from authenticating user root 65.254.93.170 port 48372 [preauth] 2026-07-01T13:45:54.627329-05:00 claude-cloud sshd[1097358]: Invalid user trading from 45.148.10.240 port 46248 2026-07-01T13:45:54.639082-05:00 claude-cloud sshd[1097358]: Connection closed by invalid user trading 45.148.10.240 port 46248 [preauth] 2026-07-01T13:45:54.957977-05:00 claude-cloud sshd[1097356]: Received disconnect from 137.184.228.138 port 51040:11: Bye Bye [preauth] 2026-07-01T13:45:54.959247-05:00 claude-cloud sshd[1097356]: Disconnected from authenticating user root 137.184.228.138 port 51040 [preauth] 2026-07-01T13:46:13.637691-05:00 claude-cloud sshd[1097424]: Invalid user jito from 45.148.10.183 port 58654 2026-07-01T13:46:13.650211-05:00 claude-cloud sshd[1097424]: Connection closed by invalid user jito 45.148.10.183 port 58654 [preauth] 2026-07-01T13:46:35.063998-05:00 claude-cloud sshd[1097471]: Connection closed by authenticating user www-data 185.242.3.195 port 38134 [preauth] 2026-07-01T13:46:50.975203-05:00 claude-cloud sshd[1097530]: Received disconnect from 61.219.232.138 port 38244:11: Bye Bye [preauth] 2026-07-01T13:46:50.975939-05:00 claude-cloud sshd[1097530]: Disconnected from authenticating user root 61.219.232.138 port 38244 [preauth] 2026-07-01T13:47:08.347363-05:00 claude-cloud systemd-logind[853]: New session c5723 of user claude. 2026-07-01T13:47:08.725183-05:00 claude-cloud systemd-logind[853]: Session c5723 logged out. Waiting for processes to exit. 2026-07-01T13:47:08.726953-05:00 claude-cloud systemd-logind[853]: Removed session c5723. 2026-07-01T13:47:09.135997-05:00 claude-cloud sshd[1097586]: Connection closed by authenticating user root 195.178.110.217 port 47876 [preauth] 2026-07-01T13:47:30.697789-05:00 claude-cloud sshd[1097634]: Received disconnect from 137.184.228.138 port 51158:11: Bye Bye [preauth] 2026-07-01T13:47:30.699019-05:00 claude-cloud sshd[1097634]: Disconnected from authenticating user root 137.184.228.138 port 51158 [preauth] 2026-07-01T13:47:41.643890-05:00 claude-cloud sshd[1097669]: Invalid user trader from 45.148.10.240 port 55900 2026-07-01T13:47:41.657352-05:00 claude-cloud sshd[1097669]: Connection closed by invalid user trader 45.148.10.240 port 55900 [preauth] 2026-07-01T13:47:54.574257-05:00 claude-cloud sshd[1097718]: Received disconnect from 65.254.93.170 port 54952:11: Bye Bye [preauth] 2026-07-01T13:47:54.574955-05:00 claude-cloud sshd[1097718]: Disconnected from authenticating user root 65.254.93.170 port 54952 [preauth] 2026-07-01T13:48:46.121123-05:00 claude-cloud sshd[1097831]: Connection closed by 66.132.186.190 port 20338 [preauth] 2026-07-01T13:49:04.761244-05:00 claude-cloud sshd[1098004]: Connection closed by authenticating user root 195.178.110.217 port 50924 [preauth] 2026-07-01T13:49:09.935885-05:00 claude-cloud sshd[1098024]: Received disconnect from 137.184.228.138 port 51280:11: Bye Bye [preauth] 2026-07-01T13:49:09.936176-05:00 claude-cloud sshd[1098024]: Disconnected from authenticating user root 137.184.228.138 port 51280 [preauth] 2026-07-01T13:49:34.356492-05:00 claude-cloud sshd[1098097]: Invalid user soul from 45.148.10.183 port 53278 2026-07-01T13:49:34.369390-05:00 claude-cloud sshd[1098097]: Connection closed by invalid user soul 45.148.10.183 port 53278 [preauth] 2026-07-01T13:49:35.660533-05:00 claude-cloud sshd[1098099]: Invalid user trader from 45.148.10.240 port 35694 2026-07-01T13:49:35.672967-05:00 claude-cloud sshd[1098099]: Connection closed by invalid user trader 45.148.10.240 port 35694 [preauth] 2026-07-01T13:49:37.611880-05:00 claude-cloud sshd[1098103]: Invalid user admin from 61.219.232.138 port 41624 2026-07-01T13:49:37.836403-05:00 claude-cloud sshd[1098103]: Received disconnect from 61.219.232.138 port 41624:11: Bye Bye [preauth] 2026-07-01T13:49:37.836793-05:00 claude-cloud sshd[1098103]: Disconnected from invalid user admin 61.219.232.138 port 41624 [preauth] 2026-07-01T13:49:58.282959-05:00 claude-cloud sshd[1098170]: Invalid user ftpuser from 65.254.93.170 port 33284 2026-07-01T13:49:58.540756-05:00 claude-cloud sshd[1098170]: Received disconnect from 65.254.93.170 port 33284:11: Bye Bye [preauth] 2026-07-01T13:49:58.541883-05:00 claude-cloud sshd[1098170]: Disconnected from invalid user ftpuser 65.254.93.170 port 33284 [preauth] 2026-07-01T13:50:50.189880-05:00 claude-cloud sshd[1098349]: Received disconnect from 137.184.228.138 port 51402:11: Bye Bye [preauth] 2026-07-01T13:50:50.190147-05:00 claude-cloud sshd[1098349]: Disconnected from authenticating user root 137.184.228.138 port 51402 [preauth] 2026-07-01T13:50:50.769169-05:00 claude-cloud sshd[1098351]: Connection closed by authenticating user root 195.178.110.217 port 54028 [preauth] 2026-07-01T13:51:20.963628-05:00 claude-cloud sshd[1098426]: Invalid user trader from 45.148.10.240 port 42330 2026-07-01T13:51:20.975246-05:00 claude-cloud sshd[1098426]: Connection closed by invalid user trader 45.148.10.240 port 42330 [preauth] 2026-07-01T13:51:30.104059-05:00 claude-cloud sshd[1098381]: Connection closed by authenticating user root 27.71.230.31 port 59308 [preauth] 2026-07-01T13:52:21.076052-05:00 claude-cloud systemd-logind[853]: New session c5724 of user claude. 2026-07-01T13:52:21.348611-05:00 claude-cloud systemd-logind[853]: Session c5724 logged out. Waiting for processes to exit. 2026-07-01T13:52:21.357393-05:00 claude-cloud systemd-logind[853]: Removed session c5724. 2026-07-01T13:52:38.550082-05:00 claude-cloud sshd[1098652]: Received disconnect from 61.219.232.138 port 35602:11: Bye Bye [preauth] 2026-07-01T13:52:38.550947-05:00 claude-cloud sshd[1098652]: Disconnected from authenticating user root 61.219.232.138 port 35602 [preauth] 2026-07-01T13:52:38.701512-05:00 claude-cloud sshd[1098656]: Invalid user sol from 45.148.10.183 port 49412 2026-07-01T13:52:38.714539-05:00 claude-cloud sshd[1098656]: Connection closed by invalid user sol 45.148.10.183 port 49412 [preauth] 2026-07-01T13:52:38.752801-05:00 claude-cloud sshd[1098654]: Connection closed by authenticating user root 195.178.110.217 port 57124 [preauth] 2026-07-01T13:52:58.965998-05:00 claude-cloud sshd[1098742]: Invalid user trading from 45.148.10.240 port 39290 2026-07-01T13:52:58.978356-05:00 claude-cloud sshd[1098742]: Connection closed by invalid user trading 45.148.10.240 port 39290 [preauth] 2026-07-01T13:54:09.883030-05:00 claude-cloud sshd[1098926]: Invalid user shop from 45.198.224.46 port 37624 2026-07-01T13:54:10.601844-05:00 claude-cloud sshd[1098926]: Connection closed by invalid user shop 45.198.224.46 port 37624 [preauth] 2026-07-01T13:54:27.571146-05:00 claude-cloud sshd[1098983]: Connection closed by authenticating user root 195.178.110.217 port 60214 [preauth] 2026-07-01T13:54:40.759459-05:00 claude-cloud sshd[1099025]: Connection closed by authenticating user root 45.148.10.240 port 43426 [preauth] 2026-07-01T13:55:01.868466-05:00 claude-cloud CRON[1099113]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T13:55:01.874751-05:00 claude-cloud CRON[1099113]: pam_unix(cron:session): session closed for user root 2026-07-01T13:55:21.535377-05:00 claude-cloud sshd[1099178]: Received disconnect from 61.219.232.138 port 36930:11: Bye Bye [preauth] 2026-07-01T13:55:21.535938-05:00 claude-cloud sshd[1099178]: Disconnected from authenticating user root 61.219.232.138 port 36930 [preauth] 2026-07-01T13:55:49.080983-05:00 claude-cloud sshd[1099256]: Invalid user solana from 45.148.10.183 port 47394 2026-07-01T13:55:49.093460-05:00 claude-cloud sshd[1099256]: Connection closed by invalid user solana 45.148.10.183 port 47394 [preauth] 2026-07-01T13:56:16.008606-05:00 claude-cloud sshd[1099319]: Connection closed by authenticating user root 195.178.110.217 port 35054 [preauth] 2026-07-01T13:56:28.595996-05:00 claude-cloud sshd[1099365]: Invalid user shardeum from 45.148.10.240 port 36604 2026-07-01T13:56:28.607946-05:00 claude-cloud sshd[1099365]: Connection closed by invalid user shardeum 45.148.10.240 port 36604 [preauth] 2026-07-01T13:57:16.557565-05:00 claude-cloud sshd[1099483]: Connection closed by authenticating user root 27.71.230.31 port 47836 [preauth] 2026-07-01T13:57:25.376401-05:00 claude-cloud systemd-logind[853]: New session c5725 of user claude. 2026-07-01T13:57:25.667898-05:00 claude-cloud systemd-logind[853]: Session c5725 logged out. Waiting for processes to exit. 2026-07-01T13:57:25.669203-05:00 claude-cloud systemd-logind[853]: Removed session c5725. 2026-07-01T13:58:08.260796-05:00 claude-cloud sshd[1099679]: Connection closed by authenticating user root 195.178.110.217 port 38146 [preauth] 2026-07-01T13:58:08.965427-05:00 claude-cloud sshd[1099688]: Connection closed by authenticating user root 45.148.10.240 port 60670 [preauth] 2026-07-01T13:58:18.179147-05:00 claude-cloud sshd[1099719]: Invalid user from 91.92.42.227 port 42400 2026-07-01T13:58:26.079666-05:00 claude-cloud sshd[1099719]: Connection closed by invalid user 91.92.42.227 port 42400 [preauth] 2026-07-01T13:59:15.386037-05:00 claude-cloud sshd[1099946]: Invalid user sole from 45.148.10.183 port 46216 2026-07-01T13:59:15.399899-05:00 claude-cloud sshd[1099946]: Connection closed by invalid user sole 45.148.10.183 port 46216 [preauth] 2026-07-01T13:59:55.744592-05:00 claude-cloud sshd[1100062]: Connection closed by authenticating user root 45.148.10.240 port 57054 [preauth] 2026-07-01T14:00:06.273705-05:00 claude-cloud sshd[1100097]: Connection closed by authenticating user root 195.178.110.217 port 41240 [preauth] 2026-07-01T14:00:44.749059-05:00 claude-cloud sshd[1100225]: Invalid user support from 176.53.159.197 port 16090 2026-07-01T14:00:44.834441-05:00 claude-cloud sshd[1100225]: Connection reset by invalid user support 176.53.159.197 port 16090 [preauth] 2026-07-01T14:01:06.619210-05:00 claude-cloud sshd[1100274]: Received disconnect from 61.219.232.138 port 39568:11: Bye Bye [preauth] 2026-07-01T14:01:06.620746-05:00 claude-cloud sshd[1100274]: Disconnected from authenticating user root 61.219.232.138 port 39568 [preauth] 2026-07-01T14:01:51.170530-05:00 claude-cloud sshd[1100408]: Connection closed by authenticating user root 45.148.10.240 port 47488 [preauth] 2026-07-01T14:02:05.862614-05:00 claude-cloud sshd[1100445]: Connection closed by authenticating user root 195.178.110.217 port 44308 [preauth] 2026-07-01T14:02:06.400474-05:00 claude-cloud sshd[1100453]: Invalid user git from 79.125.162.32 port 46962 2026-07-01T14:02:06.446503-05:00 claude-cloud sshd[1100453]: Received disconnect from 79.125.162.32 port 46962:11: Bye Bye [preauth] 2026-07-01T14:02:06.447547-05:00 claude-cloud sshd[1100453]: Disconnected from invalid user git 79.125.162.32 port 46962 [preauth] 2026-07-01T14:02:15.770134-05:00 claude-cloud sshd[1100482]: Invalid user solv from 45.148.10.183 port 39856 2026-07-01T14:02:15.783775-05:00 claude-cloud sshd[1100482]: Connection closed by invalid user solv 45.148.10.183 port 39856 [preauth] 2026-07-01T14:02:30.362195-05:00 claude-cloud systemd-logind[853]: New session c5726 of user claude. 2026-07-01T14:02:30.649785-05:00 claude-cloud systemd-logind[853]: Session c5726 logged out. Waiting for processes to exit. 2026-07-01T14:02:30.651362-05:00 claude-cloud systemd-logind[853]: Removed session c5726. 2026-07-01T14:03:19.153430-05:00 claude-cloud sshd[1100694]: Connection closed by 13.220.107.9 port 43082 [preauth] 2026-07-01T14:03:20.648043-05:00 claude-cloud sshd[1100719]: Invalid user support from 176.53.159.198 port 25038 2026-07-01T14:03:20.728221-05:00 claude-cloud sshd[1100719]: Connection reset by invalid user support 176.53.159.198 port 25038 [preauth] 2026-07-01T14:03:41.717453-05:00 claude-cloud sshd[1100760]: Invalid user nagios from 45.198.224.46 port 41090 2026-07-01T14:03:42.318521-05:00 claude-cloud sshd[1100760]: Connection closed by invalid user nagios 45.198.224.46 port 41090 [preauth] 2026-07-01T14:03:46.081468-05:00 claude-cloud sshd[1100786]: Invalid user firedancer from 45.148.10.240 port 39458 2026-07-01T14:03:46.094592-05:00 claude-cloud sshd[1100786]: Connection closed by invalid user firedancer 45.148.10.240 port 39458 [preauth] 2026-07-01T14:03:49.944680-05:00 claude-cloud sshd[1100798]: Connection closed by 45.148.10.121 port 49550 [preauth] 2026-07-01T14:03:52.604059-05:00 claude-cloud sshd[1100803]: Invalid user ubuntu from 61.219.232.138 port 32882 2026-07-01T14:03:52.828714-05:00 claude-cloud sshd[1100803]: Received disconnect from 61.219.232.138 port 32882:11: Bye Bye [preauth] 2026-07-01T14:03:52.828923-05:00 claude-cloud sshd[1100803]: Disconnected from invalid user ubuntu 61.219.232.138 port 32882 [preauth] 2026-07-01T14:03:55.422032-05:00 claude-cloud sshd[1100648]: Connection closed by authenticating user root 27.71.230.31 port 42988 [preauth] 2026-07-01T14:04:11.051401-05:00 claude-cloud sshd[1100847]: Connection closed by authenticating user root 195.178.110.217 port 47418 [preauth] 2026-07-01T14:05:01.884041-05:00 claude-cloud CRON[1101029]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T14:05:01.890715-05:00 claude-cloud CRON[1101029]: pam_unix(cron:session): session closed for user root 2026-07-01T14:05:24.849013-05:00 claude-cloud sshd[1101105]: Invalid user solv from 45.148.10.183 port 51640 2026-07-01T14:05:24.861856-05:00 claude-cloud sshd[1101105]: Connection closed by invalid user solv 45.148.10.183 port 51640 [preauth] 2026-07-01T14:05:29.471162-05:00 claude-cloud sshd[1101114]: Invalid user blockchain from 45.148.10.240 port 51370 2026-07-01T14:05:29.484737-05:00 claude-cloud sshd[1101114]: Connection closed by invalid user blockchain 45.148.10.240 port 51370 [preauth] 2026-07-01T14:05:45.269364-05:00 claude-cloud sshd[1101165]: Connection reset by authenticating user root 45.148.10.151 port 60534 [preauth] 2026-07-01T14:06:14.066919-05:00 claude-cloud sshd[1101238]: Connection closed by authenticating user root 195.178.110.217 port 50566 [preauth] 2026-07-01T14:07:12.102766-05:00 claude-cloud sshd[1101403]: Connection closed by authenticating user www-data 45.148.10.240 port 38818 [preauth] 2026-07-01T14:07:35.085445-05:00 claude-cloud systemd-logind[853]: New session c5727 of user claude. 2026-07-01T14:07:35.382376-05:00 claude-cloud systemd-logind[853]: Session c5727 logged out. Waiting for processes to exit. 2026-07-01T14:07:35.384369-05:00 claude-cloud systemd-logind[853]: Removed session c5727. 2026-07-01T14:08:22.706446-05:00 claude-cloud sshd[1101648]: Connection closed by authenticating user root 195.178.110.217 port 53652 [preauth] 2026-07-01T14:08:34.350405-05:00 claude-cloud sshd[1101668]: Invalid user solb from 45.148.10.183 port 37636 2026-07-01T14:08:34.362895-05:00 claude-cloud sshd[1101668]: Connection closed by invalid user solb 45.148.10.183 port 37636 [preauth] 2026-07-01T14:08:59.350032-05:00 claude-cloud sshd[1101752]: Invalid user user from 45.148.10.240 port 37392 2026-07-01T14:08:59.362094-05:00 claude-cloud sshd[1101752]: Connection closed by invalid user user 45.148.10.240 port 37392 [preauth] 2026-07-01T14:09:04.329494-05:00 claude-cloud sshd[1101743]: Connection closed by authenticating user root 27.71.230.31 port 58918 [preauth] 2026-07-01T14:10:28.323202-05:00 claude-cloud sshd[1102097]: Connection closed by authenticating user root 195.178.110.217 port 56782 [preauth] 2026-07-01T14:10:41.042065-05:00 claude-cloud sshd[1102133]: Invalid user user from 45.148.10.240 port 34512 2026-07-01T14:10:41.055837-05:00 claude-cloud sshd[1102133]: Connection closed by invalid user user 45.148.10.240 port 34512 [preauth] 2026-07-01T14:11:41.991247-05:00 claude-cloud sshd[1102285]: Invalid user solz from 45.148.10.183 port 40612 2026-07-01T14:11:42.005126-05:00 claude-cloud sshd[1102285]: Connection closed by invalid user solz 45.148.10.183 port 40612 [preauth] 2026-07-01T14:12:13.991394-05:00 claude-cloud sshd[1102403]: Invalid user admin from 2.57.121.25 port 26566 2026-07-01T14:12:14.017867-05:00 claude-cloud sshd[1102403]: Connection closed by invalid user admin 2.57.121.25 port 26566 [preauth] 2026-07-01T14:12:19.552431-05:00 claude-cloud sshd[1102426]: Connection closed by authenticating user root 45.148.10.240 port 53896 [preauth] 2026-07-01T14:12:26.316897-05:00 claude-cloud sshd[1102440]: Connection reset by authenticating user root 45.148.10.147 port 60592 [preauth] 2026-07-01T14:12:36.842534-05:00 claude-cloud sshd[1102459]: Connection closed by authenticating user root 195.178.110.217 port 59908 [preauth] 2026-07-01T14:12:39.277699-05:00 claude-cloud systemd-logind[853]: New session c5728 of user claude. 2026-07-01T14:12:39.568757-05:00 claude-cloud systemd-logind[853]: Session c5728 logged out. Waiting for processes to exit. 2026-07-01T14:12:39.569880-05:00 claude-cloud systemd-logind[853]: Removed session c5728. 2026-07-01T14:13:10.423424-05:00 claude-cloud sshd[1102554]: Connection closed by authenticating user root 45.198.224.46 port 44036 [preauth] 2026-07-01T14:14:08.363626-05:00 claude-cloud sshd[1102747]: Invalid user elround from 45.148.10.240 port 57794 2026-07-01T14:14:08.376004-05:00 claude-cloud sshd[1102747]: Connection closed by invalid user elround 45.148.10.240 port 57794 [preauth] 2026-07-01T14:14:45.451150-05:00 claude-cloud sshd[1102853]: Invalid user firedancer from 45.148.10.183 port 38774 2026-07-01T14:14:45.464037-05:00 claude-cloud sshd[1102853]: Connection closed by invalid user firedancer 45.148.10.183 port 38774 [preauth] 2026-07-01T14:14:50.460077-05:00 claude-cloud sshd[1102883]: Connection closed by authenticating user root 195.178.110.217 port 34762 [preauth] 2026-07-01T14:14:56.958964-05:00 claude-cloud sshd[1102844]: Connection closed by authenticating user root 27.71.230.31 port 34058 [preauth] 2026-07-01T14:15:01.904597-05:00 claude-cloud CRON[1102908]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T14:15:01.910394-05:00 claude-cloud CRON[1102908]: pam_unix(cron:session): session closed for user root 2026-07-01T14:15:05.009661-05:00 claude-cloud sshd[1102911]: Received disconnect from 79.125.162.32 port 35131:11: Bye Bye [preauth] 2026-07-01T14:15:05.010189-05:00 claude-cloud sshd[1102911]: Disconnected from authenticating user root 79.125.162.32 port 35131 [preauth] 2026-07-01T14:16:03.801927-05:00 claude-cloud sshd[1103101]: Invalid user elrond from 45.148.10.240 port 60970 2026-07-01T14:16:03.814260-05:00 claude-cloud sshd[1103101]: Connection closed by invalid user elrond 45.148.10.240 port 60970 [preauth] 2026-07-01T14:17:01.922746-05:00 claude-cloud CRON[1103265]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T14:17:01.932259-05:00 claude-cloud CRON[1103265]: pam_unix(cron:session): session closed for user root 2026-07-01T14:17:06.453671-05:00 claude-cloud sshd[1103274]: Connection closed by authenticating user root 195.178.110.217 port 37846 [preauth] 2026-07-01T14:17:39.982019-05:00 claude-cloud sshd[1103368]: Received disconnect from 79.125.162.32 port 52426:11: Bye Bye [preauth] 2026-07-01T14:17:39.982537-05:00 claude-cloud sshd[1103368]: Disconnected from authenticating user root 79.125.162.32 port 52426 [preauth] 2026-07-01T14:17:43.868050-05:00 claude-cloud systemd-logind[853]: New session c5729 of user claude. 2026-07-01T14:17:44.166873-05:00 claude-cloud systemd-logind[853]: Session c5729 logged out. Waiting for processes to exit. 2026-07-01T14:17:44.169737-05:00 claude-cloud systemd-logind[853]: Removed session c5729. 2026-07-01T14:17:50.254783-05:00 claude-cloud sshd[1103423]: Invalid user admin from 45.148.10.240 port 55178 2026-07-01T14:17:50.267773-05:00 claude-cloud sshd[1103423]: Connection closed by invalid user admin 45.148.10.240 port 55178 [preauth] 2026-07-01T14:18:12.536483-05:00 claude-cloud sshd[1103484]: Connection reset by authenticating user root 45.227.254.170 port 22012 [preauth] 2026-07-01T14:19:26.608454-05:00 claude-cloud sshd[1103710]: Connection closed by authenticating user root 195.178.110.217 port 40954 [preauth] 2026-07-01T14:19:36.929928-05:00 claude-cloud sshd[1103730]: Connection closed by authenticating user root 45.148.10.240 port 53806 [preauth] 2026-07-01T14:20:12.705172-05:00 claude-cloud sshd[1103896]: Invalid user user from 79.125.162.32 port 55568 2026-07-01T14:20:12.758113-05:00 claude-cloud sshd[1103896]: Received disconnect from 79.125.162.32 port 55568:11: Bye Bye [preauth] 2026-07-01T14:20:12.758431-05:00 claude-cloud sshd[1103896]: Disconnected from invalid user user 79.125.162.32 port 55568 [preauth] 2026-07-01T14:21:01.341428-05:00 claude-cloud sshd[1104049]: Connection closed by authenticating user root 45.148.10.183 port 53456 [preauth] 2026-07-01T14:21:25.696506-05:00 claude-cloud sshd[1104113]: Invalid user user from 45.148.10.240 port 49992 2026-07-01T14:21:25.709055-05:00 claude-cloud sshd[1104113]: Connection closed by invalid user user 45.148.10.240 port 49992 [preauth] 2026-07-01T14:21:35.933143-05:00 claude-cloud sshd[1103967]: Connection closed by authenticating user root 27.71.230.31 port 35662 [preauth] 2026-07-01T14:21:58.511931-05:00 claude-cloud sshd[1104232]: Connection closed by authenticating user root 195.178.110.217 port 44030 [preauth] 2026-07-01T14:22:42.010090-05:00 claude-cloud sshd[1104336]: Connection closed by authenticating user root 45.198.224.46 port 52042 [preauth] 2026-07-01T14:22:48.919035-05:00 claude-cloud systemd-logind[853]: New session c5730 of user claude. 2026-07-01T14:22:49.184189-05:00 claude-cloud systemd-logind[853]: Session c5730 logged out. Waiting for processes to exit. 2026-07-01T14:22:49.185389-05:00 claude-cloud systemd-logind[853]: Removed session c5730. 2026-07-01T14:22:51.873307-05:00 claude-cloud sshd[1104389]: Received disconnect from 79.125.162.32 port 44634:11: Bye Bye [preauth] 2026-07-01T14:22:51.873691-05:00 claude-cloud sshd[1104389]: Disconnected from authenticating user root 79.125.162.32 port 44634 [preauth] 2026-07-01T14:23:07.942331-05:00 claude-cloud sshd[1104431]: Invalid user user from 45.148.10.240 port 46962 2026-07-01T14:23:07.953887-05:00 claude-cloud sshd[1104431]: Connection closed by invalid user user 45.148.10.240 port 46962 [preauth] 2026-07-01T14:24:26.185478-05:00 claude-cloud sshd[1104682]: Connection closed by authenticating user root 195.178.110.217 port 47156 [preauth] 2026-07-01T14:24:29.144503-05:00 claude-cloud sshd[1104694]: Connection reset by authenticating user root 45.148.10.147 port 22374 [preauth] 2026-07-01T14:24:36.278067-05:00 claude-cloud sshd[1104706]: Invalid user shred from 45.148.10.183 port 33664 2026-07-01T14:24:36.292098-05:00 claude-cloud sshd[1104706]: Connection closed by invalid user shred 45.148.10.183 port 33664 [preauth] 2026-07-01T14:24:45.132920-05:00 claude-cloud sshd[1104735]: Invalid user miner from 45.148.10.240 port 33772 2026-07-01T14:24:45.147033-05:00 claude-cloud sshd[1104735]: Connection closed by invalid user miner 45.148.10.240 port 33772 [preauth] 2026-07-01T14:25:01.942520-05:00 claude-cloud CRON[1104779]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T14:25:01.948498-05:00 claude-cloud CRON[1104779]: pam_unix(cron:session): session closed for user root 2026-07-01T14:25:16.982390-05:00 claude-cloud sshd[1104822]: Invalid user admin from 79.125.162.32 port 60203 2026-07-01T14:25:17.028344-05:00 claude-cloud sshd[1104822]: Received disconnect from 79.125.162.32 port 60203:11: Bye Bye [preauth] 2026-07-01T14:25:17.028586-05:00 claude-cloud sshd[1104822]: Disconnected from invalid user admin 79.125.162.32 port 60203 [preauth] 2026-07-01T14:26:03.726573-05:00 claude-cloud sshd[1104974]: Connection closed by 115.190.125.207 port 48574 2026-07-01T14:26:31.339691-05:00 claude-cloud sshd[1105056]: Connection closed by authenticating user root 45.148.10.240 port 33360 [preauth] 2026-07-01T14:27:01.075354-05:00 claude-cloud sshd[1105146]: Connection closed by authenticating user root 195.178.110.217 port 50220 [preauth] 2026-07-01T14:27:34.705167-05:00 claude-cloud sshd[1105241]: Invalid user validator from 45.148.10.183 port 48526 2026-07-01T14:27:34.720032-05:00 claude-cloud sshd[1105241]: Connection closed by invalid user validator 45.148.10.183 port 48526 [preauth] 2026-07-01T14:27:48.836906-05:00 claude-cloud sshd[1105297]: Received disconnect from 79.125.162.32 port 49262:11: Bye Bye [preauth] 2026-07-01T14:27:48.837750-05:00 claude-cloud sshd[1105297]: Disconnected from authenticating user root 79.125.162.32 port 49262 [preauth] 2026-07-01T14:27:53.402740-05:00 claude-cloud systemd-logind[853]: New session c5731 of user claude. 2026-07-01T14:27:53.704405-05:00 claude-cloud systemd-logind[853]: Session c5731 logged out. Waiting for processes to exit. 2026-07-01T14:27:53.705392-05:00 claude-cloud systemd-logind[853]: Removed session c5731. 2026-07-01T14:28:24.040902-05:00 claude-cloud sshd[1105393]: Invalid user git from 45.148.10.240 port 45252 2026-07-01T14:28:24.053448-05:00 claude-cloud sshd[1105393]: Connection closed by invalid user git 45.148.10.240 port 45252 [preauth] 2026-07-01T14:28:27.596171-05:00 claude-cloud sshd[1105058]: Connection closed by authenticating user root 27.71.230.31 port 54870 [preauth] 2026-07-01T14:29:33.289557-05:00 claude-cloud sshd[1105589]: Invalid user ayah from 2.57.121.112 port 6354 2026-07-01T14:29:33.314840-05:00 claude-cloud sshd[1105589]: Connection closed by invalid user ayah 2.57.121.112 port 6354 [preauth] 2026-07-01T14:29:40.180800-05:00 claude-cloud sshd[1105606]: Connection closed by authenticating user root 195.178.110.217 port 53280 [preauth] 2026-07-01T14:30:13.523900-05:00 claude-cloud sshd[1105733]: Connection closed by authenticating user root 45.148.10.240 port 55028 [preauth] 2026-07-01T14:30:17.683763-05:00 claude-cloud sshd[1105755]: Invalid user test1234 from 79.125.162.32 port 35179 2026-07-01T14:30:17.727491-05:00 claude-cloud sshd[1105755]: Received disconnect from 79.125.162.32 port 35179:11: Bye Bye [preauth] 2026-07-01T14:30:17.727851-05:00 claude-cloud sshd[1105755]: Disconnected from invalid user test1234 79.125.162.32 port 35179 [preauth] 2026-07-01T14:30:22.979104-05:00 claude-cloud sshd[1105767]: Connection reset by authenticating user root 45.227.254.170 port 64120 [preauth] 2026-07-01T14:30:49.617170-05:00 claude-cloud sshd[1105909]: Invalid user admin from 45.148.10.121 port 52040 2026-07-01T14:30:49.630377-05:00 claude-cloud sshd[1105909]: Connection closed by invalid user admin 45.148.10.121 port 52040 [preauth] 2026-07-01T14:30:51.161444-05:00 claude-cloud sshd[1105911]: Invalid user binance from 45.148.10.183 port 45642 2026-07-01T14:30:51.175703-05:00 claude-cloud sshd[1105911]: Connection closed by invalid user binance 45.148.10.183 port 45642 [preauth] 2026-07-01T14:32:00.674010-05:00 claude-cloud sshd[1106108]: Invalid user admin from 45.148.10.240 port 48316 2026-07-01T14:32:00.686862-05:00 claude-cloud sshd[1106108]: Connection closed by invalid user admin 45.148.10.240 port 48316 [preauth] 2026-07-01T14:32:04.501884-05:00 claude-cloud sshd[1106110]: Invalid user ubuntu from 45.198.224.46 port 54474 2026-07-01T14:32:05.222471-05:00 claude-cloud sshd[1106110]: Connection closed by invalid user ubuntu 45.198.224.46 port 54474 [preauth] 2026-07-01T14:32:08.703795-05:00 claude-cloud sshd[1106133]: Connection closed by authenticating user root 195.178.110.217 port 56350 [preauth] 2026-07-01T14:32:42.935924-05:00 claude-cloud sshd[1106220]: Invalid user myth from 79.125.162.32 port 52469 2026-07-01T14:32:42.983046-05:00 claude-cloud sshd[1106220]: Received disconnect from 79.125.162.32 port 52469:11: Bye Bye [preauth] 2026-07-01T14:32:42.983430-05:00 claude-cloud sshd[1106220]: Disconnected from invalid user myth 79.125.162.32 port 52469 [preauth] 2026-07-01T14:32:58.126000-05:00 claude-cloud systemd-logind[853]: New session c5732 of user claude. 2026-07-01T14:32:58.375027-05:00 claude-cloud systemd-logind[853]: Session c5732 logged out. Waiting for processes to exit. 2026-07-01T14:32:58.376983-05:00 claude-cloud systemd-logind[853]: Removed session c5732. 2026-07-01T14:33:18.401605-05:00 claude-cloud sshd[1106177]: Connection closed by authenticating user root 27.71.230.31 port 33952 [preauth] 2026-07-01T14:33:50.342018-05:00 claude-cloud sshd[1106436]: Invalid user trader from 45.148.10.183 port 60732 2026-07-01T14:33:50.355994-05:00 claude-cloud sshd[1106436]: Connection closed by invalid user trader 45.148.10.183 port 60732 [preauth] 2026-07-01T14:33:54.750235-05:00 claude-cloud sshd[1106447]: Invalid user ubuntu from 45.148.10.240 port 42724 2026-07-01T14:33:54.763836-05:00 claude-cloud sshd[1106447]: Connection closed by invalid user ubuntu 45.148.10.240 port 42724 [preauth] 2026-07-01T14:34:46.899547-05:00 claude-cloud sshd[1106619]: Connection closed by authenticating user root 195.178.110.217 port 59422 [preauth] 2026-07-01T14:35:01.962388-05:00 claude-cloud CRON[1106654]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T14:35:01.971907-05:00 claude-cloud CRON[1106654]: pam_unix(cron:session): session closed for user root 2026-07-01T14:35:18.759621-05:00 claude-cloud sshd[1106713]: Invalid user ubuntu from 79.125.162.32 port 36939 2026-07-01T14:35:18.811081-05:00 claude-cloud sshd[1106713]: Received disconnect from 79.125.162.32 port 36939:11: Bye Bye [preauth] 2026-07-01T14:35:18.811396-05:00 claude-cloud sshd[1106713]: Disconnected from invalid user ubuntu 79.125.162.32 port 36939 [preauth] 2026-07-01T14:35:39.432538-05:00 claude-cloud sshd[1106772]: Invalid user ari from 45.148.10.240 port 33964 2026-07-01T14:35:39.445258-05:00 claude-cloud sshd[1106772]: Connection closed by invalid user ari 45.148.10.240 port 33964 [preauth] 2026-07-01T14:36:11.865601-05:00 claude-cloud sshd[1106859]: Connection reset by authenticating user root 45.148.10.152 port 58706 [preauth] 2026-07-01T14:36:56.713198-05:00 claude-cloud sshd[1107004]: Invalid user trading from 45.148.10.183 port 39420 2026-07-01T14:36:56.727672-05:00 claude-cloud sshd[1107004]: Connection closed by invalid user trading 45.148.10.183 port 39420 [preauth] 2026-07-01T14:37:16.218867-05:00 claude-cloud sshd[1107063]: Invalid user sedu from 45.148.10.240 port 60960 2026-07-01T14:37:16.231880-05:00 claude-cloud sshd[1107063]: Connection closed by invalid user sedu 45.148.10.240 port 60960 [preauth] 2026-07-01T14:37:22.575387-05:00 claude-cloud sshd[1107084]: Connection closed by authenticating user root 195.178.110.217 port 34248 [preauth] 2026-07-01T14:37:50.336376-05:00 claude-cloud sshd[1107159]: Received disconnect from 79.125.162.32 port 54232:11: Bye Bye [preauth] 2026-07-01T14:37:50.338392-05:00 claude-cloud sshd[1107159]: Disconnected from authenticating user root 79.125.162.32 port 54232 [preauth] 2026-07-01T14:38:03.856466-05:00 claude-cloud systemd-logind[853]: New session c5733 of user claude. 2026-07-01T14:38:04.157577-05:00 claude-cloud systemd-logind[853]: Session c5733 logged out. Waiting for processes to exit. 2026-07-01T14:38:04.159449-05:00 claude-cloud systemd-logind[853]: Removed session c5733. 2026-07-01T14:38:30.655040-05:00 claude-cloud sshd[1107255]: Connection closed by authenticating user root 27.71.230.31 port 47694 [preauth] 2026-07-01T14:38:59.573923-05:00 claude-cloud sshd[1107371]: Invalid user solana123 from 45.148.10.240 port 56054 2026-07-01T14:38:59.586185-05:00 claude-cloud sshd[1107371]: Connection closed by invalid user solana123 45.148.10.240 port 56054 [preauth] 2026-07-01T14:40:05.807653-05:00 claude-cloud sshd[1107544]: Invalid user ubuntu from 45.148.10.183 port 48752 2026-07-01T14:40:05.820660-05:00 claude-cloud sshd[1107544]: Connection closed by invalid user ubuntu 45.148.10.183 port 48752 [preauth] 2026-07-01T14:40:20.325996-05:00 claude-cloud sshd[1107606]: Connection closed by authenticating user root 195.178.110.217 port 37328 [preauth] 2026-07-01T14:40:33.226607-05:00 claude-cloud sshd[1107630]: Received disconnect from 79.125.162.32 port 59588:11: Bye Bye [preauth] 2026-07-01T14:40:33.228649-05:00 claude-cloud sshd[1107630]: Disconnected from authenticating user root 79.125.162.32 port 59588 [preauth] 2026-07-01T14:40:50.905409-05:00 claude-cloud sshd[1107765]: Invalid user sol123 from 45.148.10.240 port 43480 2026-07-01T14:40:50.919247-05:00 claude-cloud sshd[1107765]: Connection closed by invalid user sol123 45.148.10.240 port 43480 [preauth] 2026-07-01T14:41:25.914159-05:00 claude-cloud sshd[1107842]: Connection closed by authenticating user root 45.198.224.46 port 35004 [preauth] 2026-07-01T14:42:14.209842-05:00 claude-cloud sshd[1107977]: Connection reset by authenticating user root 45.148.10.152 port 60568 [preauth] 2026-07-01T14:42:35.365594-05:00 claude-cloud sshd[1108031]: Invalid user from 8.148.184.200 port 46288 2026-07-01T14:42:35.566556-05:00 claude-cloud sshd[1108031]: Connection closed by invalid user 8.148.184.200 port 46288 [preauth] 2026-07-01T14:42:36.064263-05:00 claude-cloud sshd[1108040]: Invalid user sol from 45.148.10.240 port 34384 2026-07-01T14:42:36.082953-05:00 claude-cloud sshd[1108040]: Connection closed by invalid user sol 45.148.10.240 port 34384 [preauth] 2026-07-01T14:43:07.915351-05:00 claude-cloud sshd[1108137]: Received disconnect from 79.125.162.32 port 48648:11: Bye Bye [preauth] 2026-07-01T14:43:07.915832-05:00 claude-cloud sshd[1108137]: Disconnected from authenticating user root 79.125.162.32 port 48648 [preauth] 2026-07-01T14:43:09.883822-05:00 claude-cloud systemd-logind[853]: New session c5734 of user claude. 2026-07-01T14:43:10.188873-05:00 claude-cloud systemd-logind[853]: Session c5734 logged out. Waiting for processes to exit. 2026-07-01T14:43:10.190622-05:00 claude-cloud systemd-logind[853]: Removed session c5734. 2026-07-01T14:43:16.230498-05:00 claude-cloud sshd[1108191]: Invalid user bitcoin from 45.148.10.183 port 57238 2026-07-01T14:43:16.244385-05:00 claude-cloud sshd[1108191]: Connection closed by invalid user bitcoin 45.148.10.183 port 57238 [preauth] 2026-07-01T14:43:18.728237-05:00 claude-cloud sshd[1108198]: Connection closed by authenticating user root 195.178.110.217 port 40450 [preauth] 2026-07-01T14:44:22.217769-05:00 claude-cloud sshd[1108379]: Invalid user sol from 45.148.10.240 port 34432 2026-07-01T14:44:22.230987-05:00 claude-cloud sshd[1108379]: Connection closed by invalid user sol 45.148.10.240 port 34432 [preauth] 2026-07-01T14:45:01.984174-05:00 claude-cloud CRON[1108489]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T14:45:01.991426-05:00 claude-cloud CRON[1108489]: pam_unix(cron:session): session closed for user root 2026-07-01T14:45:40.858621-05:00 claude-cloud sshd[1108598]: Received disconnect from 79.125.162.32 port 33109:11: Bye Bye [preauth] 2026-07-01T14:45:40.859011-05:00 claude-cloud sshd[1108598]: Disconnected from authenticating user root 79.125.162.32 port 33109 [preauth] 2026-07-01T14:46:12.189830-05:00 claude-cloud sshd[1108687]: Connection closed by authenticating user root 195.178.110.217 port 43518 [preauth] 2026-07-01T14:46:15.556095-05:00 claude-cloud sshd[1108707]: Invalid user binance from 45.148.10.240 port 36920 2026-07-01T14:46:15.568076-05:00 claude-cloud sshd[1108707]: Connection closed by invalid user binance 45.148.10.240 port 36920 [preauth] 2026-07-01T14:46:57.706064-05:00 claude-cloud sshd[1108845]: Invalid user ethereum from 45.148.10.183 port 57474 2026-07-01T14:46:57.719219-05:00 claude-cloud sshd[1108845]: Connection closed by invalid user ethereum 45.148.10.183 port 57474 [preauth] 2026-07-01T14:48:06.280836-05:00 claude-cloud sshd[1109011]: Connection reset by authenticating user root 45.148.10.147 port 47392 [preauth] 2026-07-01T14:48:09.989620-05:00 claude-cloud sshd[1109028]: Invalid user okx from 45.148.10.240 port 48348 2026-07-01T14:48:10.001675-05:00 claude-cloud sshd[1109028]: Connection closed by invalid user okx 45.148.10.240 port 48348 [preauth] 2026-07-01T14:48:15.436298-05:00 claude-cloud systemd-logind[853]: New session c5735 of user claude. 2026-07-01T14:48:15.729732-05:00 claude-cloud systemd-logind[853]: Session c5735 logged out. Waiting for processes to exit. 2026-07-01T14:48:15.731213-05:00 claude-cloud systemd-logind[853]: Removed session c5735. 2026-07-01T14:48:17.571536-05:00 claude-cloud sshd[1109069]: Received disconnect from 79.125.162.32 port 50404:11: Bye Bye [preauth] 2026-07-01T14:48:17.572113-05:00 claude-cloud sshd[1109069]: Disconnected from authenticating user root 79.125.162.32 port 50404 [preauth] 2026-07-01T14:49:09.965391-05:00 claude-cloud sshd[1109222]: Connection closed by authenticating user root 195.178.110.217 port 46648 [preauth] 2026-07-01T14:49:36.703266-05:00 claude-cloud sshd[1109302]: Connection closed by authenticating user root 45.148.10.183 port 56908 [preauth] 2026-07-01T14:49:48.446969-05:00 claude-cloud sshd[1109340]: Invalid user bot from 45.148.10.240 port 50164 2026-07-01T14:49:48.461547-05:00 claude-cloud sshd[1109340]: Connection closed by invalid user bot 45.148.10.240 port 50164 [preauth] 2026-07-01T14:50:20.113081-05:00 claude-cloud sshd[1109399]: Connection closed by authenticating user root 27.71.230.31 port 52568 [preauth] 2026-07-01T14:50:47.688518-05:00 claude-cloud sshd[1109485]: Connection closed by authenticating user root 45.198.224.46 port 32904 [preauth] 2026-07-01T14:51:29.132497-05:00 claude-cloud sshd[1109688]: Invalid user telegram from 45.148.10.240 port 48160 2026-07-01T14:51:29.146330-05:00 claude-cloud sshd[1109688]: Connection closed by invalid user telegram 45.148.10.240 port 48160 [preauth] 2026-07-01T14:52:04.836177-05:00 claude-cloud sshd[1109790]: Connection closed by authenticating user root 195.178.110.217 port 49720 [preauth] 2026-07-01T14:52:50.726833-05:00 claude-cloud sshd[1109920]: Invalid user trader from 45.148.10.183 port 44080 2026-07-01T14:52:50.741426-05:00 claude-cloud sshd[1109920]: Connection closed by invalid user trader 45.148.10.183 port 44080 [preauth] 2026-07-01T14:53:20.168985-05:00 claude-cloud sshd[1110004]: Invalid user jito from 45.148.10.240 port 50994 2026-07-01T14:53:20.181097-05:00 claude-cloud sshd[1110004]: Connection closed by invalid user jito 45.148.10.240 port 50994 [preauth] 2026-07-01T14:53:20.241224-05:00 claude-cloud systemd-logind[853]: New session c5736 of user claude. 2026-07-01T14:53:20.593799-05:00 claude-cloud systemd-logind[853]: Session c5736 logged out. Waiting for processes to exit. 2026-07-01T14:53:20.595542-05:00 claude-cloud systemd-logind[853]: Removed session c5736. 2026-07-01T14:53:54.870563-05:00 claude-cloud sshd[1110115]: Connection reset by authenticating user root 45.227.254.170 port 51598 [preauth] 2026-07-01T14:55:02.010149-05:00 claude-cloud CRON[1110315]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T14:55:02.012589-05:00 claude-cloud CRON[1110315]: pam_unix(cron:session): session closed for user root 2026-07-01T14:55:05.941858-05:00 claude-cloud sshd[1110325]: Invalid user firedancer from 45.148.10.240 port 57130 2026-07-01T14:55:05.953887-05:00 claude-cloud sshd[1110325]: Connection closed by invalid user firedancer 45.148.10.240 port 57130 [preauth] 2026-07-01T14:55:14.021912-05:00 claude-cloud sshd[1110345]: Connection closed by authenticating user root 195.178.110.217 port 52782 [preauth] 2026-07-01T14:55:50.255185-05:00 claude-cloud sshd[1110460]: Invalid user trader from 45.148.10.183 port 39984 2026-07-01T14:55:50.268235-05:00 claude-cloud sshd[1110460]: Connection closed by invalid user trader 45.148.10.183 port 39984 [preauth] 2026-07-01T14:56:33.765653-05:00 claude-cloud sshd[1110477]: Connection closed by authenticating user root 27.71.230.31 port 34272 [preauth] 2026-07-01T14:56:47.816629-05:00 claude-cloud sshd[1110633]: Connection closed by authenticating user root 45.148.10.240 port 58002 [preauth] 2026-07-01T14:58:17.761539-05:00 claude-cloud sshd[1110882]: Connection closed by authenticating user root 195.178.110.217 port 55848 [preauth] 2026-07-01T14:58:25.423474-05:00 claude-cloud systemd-logind[853]: New session c5737 of user claude. 2026-07-01T14:58:25.682480-05:00 claude-cloud systemd-logind[853]: Session c5737 logged out. Waiting for processes to exit. 2026-07-01T14:58:25.684885-05:00 claude-cloud systemd-logind[853]: Removed session c5737. 2026-07-01T14:58:40.988574-05:00 claude-cloud sshd[1110950]: Invalid user bitcoin from 45.148.10.240 port 45476 2026-07-01T14:58:41.002169-05:00 claude-cloud sshd[1110950]: Connection closed by invalid user bitcoin 45.148.10.240 port 45476 [preauth] 2026-07-01T14:59:01.830065-05:00 claude-cloud sshd[1111029]: Invalid user trader from 45.148.10.183 port 43184 2026-07-01T14:59:01.843253-05:00 claude-cloud sshd[1111029]: Connection closed by invalid user trader 45.148.10.183 port 43184 [preauth] 2026-07-01T14:59:34.003439-05:00 claude-cloud sshd[1111124]: Connection reset by authenticating user root 45.148.10.152 port 39142 [preauth] 2026-07-01T15:00:27.684595-05:00 claude-cloud sshd[1111270]: Invalid user ubuntu from 45.198.224.46 port 35170 2026-07-01T15:00:28.229508-05:00 claude-cloud sshd[1111270]: Connection closed by invalid user ubuntu 45.198.224.46 port 35170 [preauth] 2026-07-01T15:00:37.389754-05:00 claude-cloud sshd[1111289]: Invalid user pool from 45.148.10.240 port 43116 2026-07-01T15:00:37.401907-05:00 claude-cloud sshd[1111289]: Connection closed by invalid user pool 45.148.10.240 port 43116 [preauth] 2026-07-01T15:01:29.358658-05:00 claude-cloud sshd[1111456]: Connection closed by authenticating user root 195.178.110.217 port 58922 [preauth] 2026-07-01T15:02:18.443850-05:00 claude-cloud sshd[1111677]: Connection closed by authenticating user root 45.148.10.183 port 45410 [preauth] 2026-07-01T15:02:22.610980-05:00 claude-cloud sshd[1111692]: Invalid user miner from 45.148.10.240 port 60228 2026-07-01T15:02:22.626259-05:00 claude-cloud sshd[1111692]: Connection closed by invalid user miner 45.148.10.240 port 60228 [preauth] 2026-07-01T15:02:31.974874-05:00 claude-cloud sshd[1111608]: Connection closed by authenticating user root 27.71.230.31 port 50692 [preauth] 2026-07-01T15:03:30.881960-05:00 claude-cloud systemd-logind[853]: New session c5738 of user claude. 2026-07-01T15:03:31.172310-05:00 claude-cloud systemd-logind[853]: Session c5738 logged out. Waiting for processes to exit. 2026-07-01T15:03:31.173986-05:00 claude-cloud systemd-logind[853]: Removed session c5738. 2026-07-01T15:04:03.492771-05:00 claude-cloud sshd[1111977]: Invalid user admin from 2.57.121.25 port 50790 2026-07-01T15:04:03.518938-05:00 claude-cloud sshd[1111977]: Connection closed by invalid user admin 2.57.121.25 port 50790 [preauth] 2026-07-01T15:04:03.923094-05:00 claude-cloud sshd[1111982]: Invalid user ibkr from 45.148.10.240 port 59858 2026-07-01T15:04:03.935184-05:00 claude-cloud sshd[1111982]: Connection closed by invalid user ibkr 45.148.10.240 port 59858 [preauth] 2026-07-01T15:04:21.472968-05:00 claude-cloud sshd[1112039]: Connection closed by authenticating user root 195.178.110.217 port 33788 [preauth] 2026-07-01T15:05:01.017238-05:00 claude-cloud CRON[1112139]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T15:05:01.023512-05:00 claude-cloud CRON[1112139]: pam_unix(cron:session): session closed for user root 2026-07-01T15:05:12.460896-05:00 claude-cloud sshd[1112181]: Connection reset by authenticating user root 45.148.10.147 port 2124 [preauth] 2026-07-01T15:05:15.171158-05:00 claude-cloud sshd[1112185]: Received disconnect from 103.161.34.59 port 1336:11: disconnected by user [preauth] 2026-07-01T15:05:15.171443-05:00 claude-cloud sshd[1112185]: Disconnected from authenticating user root 103.161.34.59 port 1336 [preauth] 2026-07-01T15:05:38.917724-05:00 claude-cloud sshd[1112239]: Invalid user exchange from 45.148.10.183 port 36120 2026-07-01T15:05:38.930950-05:00 claude-cloud sshd[1112239]: Connection closed by invalid user exchange 45.148.10.183 port 36120 [preauth] 2026-07-01T15:05:54.568620-05:00 claude-cloud sshd[1112298]: Invalid user ibkrpro from 45.148.10.240 port 41596 2026-07-01T15:05:54.579976-05:00 claude-cloud sshd[1112298]: Connection closed by invalid user ibkrpro 45.148.10.240 port 41596 [preauth] 2026-07-01T15:07:20.843077-05:00 claude-cloud sshd[1112535]: Connection closed by authenticating user root 195.178.110.217 port 36878 [preauth] 2026-07-01T15:07:41.373940-05:00 claude-cloud sshd[1112593]: Connection closed by authenticating user root 45.148.10.240 port 51404 [preauth] 2026-07-01T15:08:10.114114-05:00 claude-cloud sshd[1112637]: Connection closed by authenticating user root 27.71.230.31 port 48132 [preauth] 2026-07-01T15:08:35.727921-05:00 claude-cloud systemd-logind[853]: New session c5739 of user claude. 2026-07-01T15:08:36.006516-05:00 claude-cloud systemd-logind[853]: Session c5739 logged out. Waiting for processes to exit. 2026-07-01T15:08:36.008268-05:00 claude-cloud systemd-logind[853]: Removed session c5739. 2026-07-01T15:08:50.554446-05:00 claude-cloud sshd[1112797]: Invalid user solana from 45.148.10.183 port 49866 2026-07-01T15:08:50.567968-05:00 claude-cloud sshd[1112797]: Connection closed by invalid user solana 45.148.10.183 port 49866 [preauth] 2026-07-01T15:09:21.999316-05:00 claude-cloud sshd[1112889]: Connection closed by authenticating user root 45.148.10.240 port 42918 [preauth] 2026-07-01T15:09:56.540542-05:00 claude-cloud sshd[1112995]: Invalid user ubuntu from 45.198.224.46 port 33568 2026-07-01T15:09:57.210479-05:00 claude-cloud sshd[1112995]: Connection closed by invalid user ubuntu 45.198.224.46 port 33568 [preauth] 2026-07-01T15:10:52.122240-05:00 claude-cloud sshd[1113167]: Connection reset by authenticating user root 45.227.254.170 port 61148 [preauth] 2026-07-01T15:11:09.006130-05:00 claude-cloud sshd[1113202]: Invalid user broker from 45.148.10.240 port 47442 2026-07-01T15:11:09.018447-05:00 claude-cloud sshd[1113202]: Connection closed by invalid user broker 45.148.10.240 port 47442 [preauth] 2026-07-01T15:12:28.596954-05:00 claude-cloud sshd[1113525]: Invalid user sol from 45.148.10.183 port 45140 2026-07-01T15:12:28.610608-05:00 claude-cloud sshd[1113525]: Connection closed by invalid user sol 45.148.10.183 port 45140 [preauth] 2026-07-01T15:13:03.730262-05:00 claude-cloud sshd[1113633]: Invalid user recorder from 45.148.10.240 port 55236 2026-07-01T15:13:03.743189-05:00 claude-cloud sshd[1113633]: Connection closed by invalid user recorder 45.148.10.240 port 55236 [preauth] 2026-07-01T15:13:39.899245-05:00 claude-cloud systemd-logind[853]: New session c5740 of user claude. 2026-07-01T15:13:40.227945-05:00 claude-cloud systemd-logind[853]: Session c5740 logged out. Waiting for processes to exit. 2026-07-01T15:13:40.230369-05:00 claude-cloud systemd-logind[853]: Removed session c5740. 2026-07-01T15:13:53.330857-05:00 claude-cloud sshd[1113761]: Connection closed by authenticating user root 27.71.230.31 port 39284 [preauth] 2026-07-01T15:14:11.167143-05:00 claude-cloud sshd[1113842]: Invalid user AdminGPON from 45.148.10.121 port 60168 2026-07-01T15:14:11.179546-05:00 claude-cloud sshd[1113842]: Connection closed by invalid user AdminGPON 45.148.10.121 port 60168 [preauth] 2026-07-01T15:14:53.521657-05:00 claude-cloud sshd[1113989]: Invalid user dvr from 45.148.10.240 port 35776 2026-07-01T15:14:53.533811-05:00 claude-cloud sshd[1113989]: Connection closed by invalid user dvr 45.148.10.240 port 35776 [preauth] 2026-07-01T15:15:01.033460-05:00 claude-cloud CRON[1114000]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T15:15:01.041321-05:00 claude-cloud CRON[1114000]: pam_unix(cron:session): session closed for user root 2026-07-01T15:15:15.496212-05:00 claude-cloud sshd[1114054]: Invalid user sol from 45.148.10.183 port 43448 2026-07-01T15:15:15.508700-05:00 claude-cloud sshd[1114054]: Connection closed by invalid user sol 45.148.10.183 port 43448 [preauth] 2026-07-01T15:16:22.479735-05:00 claude-cloud sshd[1114242]: Connection reset by authenticating user root 45.148.10.157 port 52360 [preauth] 2026-07-01T15:16:38.986092-05:00 claude-cloud sshd[1114306]: Invalid user cadami from 45.148.10.240 port 55188 2026-07-01T15:16:39.001496-05:00 claude-cloud sshd[1114306]: Connection closed by invalid user cadami 45.148.10.240 port 55188 [preauth] 2026-07-01T15:17:01.052111-05:00 claude-cloud CRON[1114382]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T15:17:01.058767-05:00 claude-cloud CRON[1114382]: pam_unix(cron:session): session closed for user root 2026-07-01T15:17:59.256364-05:00 claude-cloud sshd[1114563]: Connection closed by authenticating user root 185.242.3.195 port 52858 [preauth] 2026-07-01T15:18:09.359462-05:00 claude-cloud sshd[1114587]: Invalid user sol from 45.148.10.183 port 37438 2026-07-01T15:18:09.374403-05:00 claude-cloud sshd[1114587]: Connection closed by invalid user sol 45.148.10.183 port 37438 [preauth] 2026-07-01T15:18:32.741793-05:00 claude-cloud sshd[1114649]: Invalid user radar from 45.148.10.240 port 38420 2026-07-01T15:18:32.754470-05:00 claude-cloud sshd[1114649]: Connection closed by invalid user radar 45.148.10.240 port 38420 [preauth] 2026-07-01T15:18:44.558393-05:00 claude-cloud systemd-logind[853]: New session c5741 of user claude. 2026-07-01T15:18:44.830628-05:00 claude-cloud systemd-logind[853]: Session c5741 logged out. Waiting for processes to exit. 2026-07-01T15:18:44.832339-05:00 claude-cloud systemd-logind[853]: Removed session c5741. 2026-07-01T15:19:39.253127-05:00 claude-cloud sshd[1114857]: Invalid user pc from 45.198.224.46 port 35656 2026-07-01T15:19:40.119512-05:00 claude-cloud sshd[1114857]: Connection closed by invalid user pc 45.198.224.46 port 35656 [preauth] 2026-07-01T15:20:05.723516-05:00 claude-cloud sshd[1114859]: Connection closed by authenticating user root 27.71.230.31 port 55034 [preauth] 2026-07-01T15:20:19.934795-05:00 claude-cloud sshd[1115010]: Invalid user was from 45.148.10.240 port 50646 2026-07-01T15:20:19.946939-05:00 claude-cloud sshd[1115010]: Connection closed by invalid user was 45.148.10.240 port 50646 [preauth] 2026-07-01T15:20:22.866412-05:00 claude-cloud sshd[1115015]: banner exchange: Connection from 27.29.116.137 port 49778: invalid format 2026-07-01T15:20:30.721388-05:00 claude-cloud sshd[1115035]: Received disconnect from 27.29.116.137 port 36292:11: Bye Bye [preauth] 2026-07-01T15:20:30.721644-05:00 claude-cloud sshd[1115035]: Disconnected from 27.29.116.137 port 36292 [preauth] 2026-07-01T15:21:16.377781-05:00 claude-cloud sshd[1115192]: Invalid user ubuntu from 45.148.10.183 port 47074 2026-07-01T15:21:16.391088-05:00 claude-cloud sshd[1115192]: Connection closed by invalid user ubuntu 45.148.10.183 port 47074 [preauth] 2026-07-01T15:21:56.749517-05:00 claude-cloud sshd[1115367]: Connection reset by authenticating user root 45.227.254.170 port 16814 [preauth] 2026-07-01T15:22:00.069291-05:00 claude-cloud sshd[1115376]: Invalid user wadmin from 45.148.10.240 port 38522 2026-07-01T15:22:00.083591-05:00 claude-cloud sshd[1115376]: Connection closed by invalid user wadmin 45.148.10.240 port 38522 [preauth] 2026-07-01T15:22:29.662616-05:00 claude-cloud sshd[1115466]: Connection closed by 92.118.39.49 port 34560 2026-07-01T15:23:44.072367-05:00 claude-cloud sshd[1115697]: Invalid user ladmin from 45.148.10.240 port 58584 2026-07-01T15:23:44.086096-05:00 claude-cloud sshd[1115697]: Connection closed by invalid user ladmin 45.148.10.240 port 58584 [preauth] 2026-07-01T15:23:48.968189-05:00 claude-cloud systemd-logind[853]: New session c5742 of user claude. 2026-07-01T15:23:49.206562-05:00 claude-cloud systemd-logind[853]: Session c5742 logged out. Waiting for processes to exit. 2026-07-01T15:23:49.210092-05:00 claude-cloud systemd-logind[853]: Removed session c5742. 2026-07-01T15:24:30.813025-05:00 claude-cloud sshd[1115830]: Invalid user ubuntu from 45.148.10.183 port 57256 2026-07-01T15:24:30.826457-05:00 claude-cloud sshd[1115830]: Connection closed by invalid user ubuntu 45.148.10.183 port 57256 [preauth] 2026-07-01T15:25:01.070636-05:00 claude-cloud CRON[1115919]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T15:25:01.078928-05:00 claude-cloud CRON[1115919]: pam_unix(cron:session): session closed for user root 2026-07-01T15:25:34.095070-05:00 claude-cloud sshd[1116011]: Invalid user bob from 45.148.10.240 port 47232 2026-07-01T15:25:34.106248-05:00 claude-cloud sshd[1116011]: Connection closed by invalid user bob 45.148.10.240 port 47232 [preauth] 2026-07-01T15:25:42.433776-05:00 claude-cloud sshd[1116006]: Connection closed by authenticating user root 27.71.230.31 port 37682 [preauth] 2026-07-01T15:27:22.026413-05:00 claude-cloud sshd[1116357]: Invalid user grid from 45.148.10.240 port 54692 2026-07-01T15:27:22.038520-05:00 claude-cloud sshd[1116357]: Connection closed by invalid user grid 45.148.10.240 port 54692 [preauth] 2026-07-01T15:27:27.446813-05:00 claude-cloud sshd[1116371]: Connection reset by authenticating user root 45.148.10.147 port 10460 [preauth] 2026-07-01T15:27:42.494212-05:00 claude-cloud sshd[1116415]: Invalid user ubuntu from 45.148.10.183 port 50112 2026-07-01T15:27:42.506891-05:00 claude-cloud sshd[1116415]: Connection closed by invalid user ubuntu 45.148.10.183 port 50112 [preauth] 2026-07-01T15:28:53.628452-05:00 claude-cloud systemd-logind[853]: New session c5743 of user claude. 2026-07-01T15:28:53.919915-05:00 claude-cloud systemd-logind[853]: Session c5743 logged out. Waiting for processes to exit. 2026-07-01T15:28:53.921134-05:00 claude-cloud systemd-logind[853]: Removed session c5743. 2026-07-01T15:29:06.859738-05:00 claude-cloud sshd[1116689]: Invalid user bank from 45.148.10.240 port 45772 2026-07-01T15:29:06.871859-05:00 claude-cloud sshd[1116689]: Connection closed by invalid user bank 45.148.10.240 port 45772 [preauth] 2026-07-01T15:29:34.057726-05:00 claude-cloud sshd[1116755]: Invalid user git from 45.198.224.46 port 44740 2026-07-01T15:29:34.745194-05:00 claude-cloud sshd[1116755]: Connection closed by invalid user git 45.198.224.46 port 44740 [preauth] 2026-07-01T15:30:51.948527-05:00 claude-cloud sshd[1117017]: Invalid user trading from 45.148.10.183 port 37400 2026-07-01T15:30:51.960975-05:00 claude-cloud sshd[1117017]: Connection closed by invalid user trading 45.148.10.183 port 37400 [preauth] 2026-07-01T15:31:02.851307-05:00 claude-cloud sshd[1117041]: Invalid user banking from 45.148.10.240 port 58234 2026-07-01T15:31:02.863913-05:00 claude-cloud sshd[1117041]: Connection closed by invalid user banking 45.148.10.240 port 58234 [preauth] 2026-07-01T15:31:37.635982-05:00 claude-cloud sshd[1117122]: Connection closed by authenticating user root 27.71.230.31 port 38010 [preauth] 2026-07-01T15:32:54.558954-05:00 claude-cloud sshd[1117433]: Invalid user broker from 45.148.10.240 port 36344 2026-07-01T15:32:54.570714-05:00 claude-cloud sshd[1117433]: Connection closed by invalid user broker 45.148.10.240 port 36344 [preauth] 2026-07-01T15:33:03.293818-05:00 claude-cloud sshd[1117452]: Connection reset by authenticating user root 45.148.10.151 port 44602 [preauth] 2026-07-01T15:33:55.534159-05:00 claude-cloud sshd[1117633]: Invalid user trader from 45.148.10.183 port 57692 2026-07-01T15:33:55.547783-05:00 claude-cloud sshd[1117633]: Connection closed by invalid user trader 45.148.10.183 port 57692 [preauth] 2026-07-01T15:33:57.882126-05:00 claude-cloud systemd-logind[853]: New session c5744 of user claude. 2026-07-01T15:33:58.163124-05:00 claude-cloud systemd-logind[853]: Session c5744 logged out. Waiting for processes to exit. 2026-07-01T15:33:58.166084-05:00 claude-cloud systemd-logind[853]: Removed session c5744. 2026-07-01T15:34:36.203168-05:00 claude-cloud sshd[1117754]: Invalid user broker from 45.148.10.240 port 37786 2026-07-01T15:34:36.215682-05:00 claude-cloud sshd[1117754]: Connection closed by invalid user broker 45.148.10.240 port 37786 [preauth] 2026-07-01T15:35:01.089879-05:00 claude-cloud CRON[1117836]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T15:35:01.094998-05:00 claude-cloud CRON[1117836]: pam_unix(cron:session): session closed for user root 2026-07-01T15:36:19.738207-05:00 claude-cloud sshd[1118083]: Invalid user trader from 45.148.10.240 port 54546 2026-07-01T15:36:19.750074-05:00 claude-cloud sshd[1118083]: Connection closed by invalid user trader 45.148.10.240 port 54546 [preauth] 2026-07-01T15:37:06.534673-05:00 claude-cloud sshd[1118227]: Invalid user pool from 45.148.10.183 port 48170 2026-07-01T15:37:06.549139-05:00 claude-cloud sshd[1118227]: Connection closed by invalid user pool 45.148.10.183 port 48170 [preauth] 2026-07-01T15:38:01.345096-05:00 claude-cloud sshd[1118391]: Invalid user flora from 2.57.121.112 port 60436 2026-07-01T15:38:01.371707-05:00 claude-cloud sshd[1118391]: Connection closed by invalid user flora 2.57.121.112 port 60436 [preauth] 2026-07-01T15:38:34.546839-05:00 claude-cloud sshd[1118470]: Connection reset by authenticating user root 45.148.10.147 port 25368 [preauth] 2026-07-01T15:39:02.189186-05:00 claude-cloud systemd-logind[853]: New session c5745 of user claude. 2026-07-01T15:39:02.554604-05:00 claude-cloud systemd-logind[853]: Session c5745 logged out. Waiting for processes to exit. 2026-07-01T15:39:02.557164-05:00 claude-cloud systemd-logind[853]: Removed session c5745. 2026-07-01T15:39:13.825360-05:00 claude-cloud sshd[1118607]: Connection closed by authenticating user root 45.198.224.46 port 50408 [preauth] 2026-07-01T15:39:16.505474-05:00 claude-cloud sshd[1118624]: Connection closed by 147.45.60.18 port 30808 2026-07-01T15:41:44.002091-05:00 claude-cloud sshd[1119061]: Connection closed by 45.148.10.183 port 50658 2026-07-01T15:43:30.521763-05:00 claude-cloud sshd[1119432]: Connection closed by authenticating user root 27.71.230.31 port 35996 [preauth] 2026-07-01T15:44:04.441768-05:00 claude-cloud sshd[1119531]: Connection reset by authenticating user root 62.60.130.219 port 44078 [preauth] 2026-07-01T15:44:06.502131-05:00 claude-cloud systemd-logind[853]: New session c5746 of user claude. 2026-07-01T15:44:06.797651-05:00 claude-cloud systemd-logind[853]: Session c5746 logged out. Waiting for processes to exit. 2026-07-01T15:44:06.798812-05:00 claude-cloud systemd-logind[853]: Removed session c5746. 2026-07-01T15:44:41.720581-05:00 claude-cloud sshd[1119649]: Invalid user sol from 45.148.10.183 port 36374 2026-07-01T15:44:41.735140-05:00 claude-cloud sshd[1119649]: Connection closed by invalid user sol 45.148.10.183 port 36374 [preauth] 2026-07-01T15:45:01.111478-05:00 claude-cloud CRON[1119712]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T15:45:01.120268-05:00 claude-cloud CRON[1119712]: pam_unix(cron:session): session closed for user root 2026-07-01T15:48:04.820807-05:00 claude-cloud sshd[1120278]: Invalid user solana from 45.148.10.183 port 56010 2026-07-01T15:48:04.834699-05:00 claude-cloud sshd[1120278]: Connection closed by invalid user solana 45.148.10.183 port 56010 [preauth] 2026-07-01T15:48:54.027369-05:00 claude-cloud sshd[1120430]: Invalid user ubuntu from 45.198.224.46 port 45426 2026-07-01T15:48:55.157896-05:00 claude-cloud sshd[1120430]: Connection closed by invalid user ubuntu 45.198.224.46 port 45426 [preauth] 2026-07-01T15:49:03.165781-05:00 claude-cloud sshd[1120463]: Connection closed by authenticating user root 45.148.10.121 port 44128 [preauth] 2026-07-01T15:49:10.556162-05:00 claude-cloud systemd-logind[853]: New session c5747 of user claude. 2026-07-01T15:49:10.875012-05:00 claude-cloud systemd-logind[853]: Session c5747 logged out. Waiting for processes to exit. 2026-07-01T15:49:10.877803-05:00 claude-cloud systemd-logind[853]: Removed session c5747. 2026-07-01T15:49:22.583562-05:00 claude-cloud sshd[1120504]: Connection closed by authenticating user root 27.71.230.31 port 60922 [preauth] 2026-07-01T15:49:35.614375-05:00 claude-cloud sshd[1120555]: Connection reset by authenticating user root 45.148.10.151 port 24348 [preauth] 2026-07-01T15:51:08.440834-05:00 claude-cloud sshd[1120852]: Invalid user solana from 45.148.10.183 port 51036 2026-07-01T15:51:08.455557-05:00 claude-cloud sshd[1120852]: Connection closed by invalid user solana 45.148.10.183 port 51036 [preauth] 2026-07-01T15:51:18.210818-05:00 claude-cloud sshd[1120882]: Connection closed by authenticating user root 92.118.39.49 port 39154 [preauth] 2026-07-01T15:53:20.571167-05:00 claude-cloud sshd[1121319]: Connection closed by authenticating user root 92.118.39.49 port 42250 [preauth] 2026-07-01T15:54:15.006206-05:00 claude-cloud systemd-logind[853]: New session c5748 of user claude. 2026-07-01T15:54:15.362883-05:00 claude-cloud systemd-logind[853]: Session c5748 logged out. Waiting for processes to exit. 2026-07-01T15:54:15.367752-05:00 claude-cloud systemd-logind[853]: Removed session c5748. 2026-07-01T15:54:34.411635-05:00 claude-cloud sshd[1121543]: Invalid user sol from 45.148.10.183 port 40990 2026-07-01T15:54:34.424249-05:00 claude-cloud sshd[1121543]: Connection closed by invalid user sol 45.148.10.183 port 40990 [preauth] 2026-07-01T15:55:01.136305-05:00 claude-cloud CRON[1121648]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T15:55:01.142205-05:00 claude-cloud CRON[1121648]: pam_unix(cron:session): session closed for user root 2026-07-01T15:55:07.128834-05:00 claude-cloud sshd[1121668]: Connection reset by authenticating user root 45.148.10.141 port 36520 [preauth] 2026-07-01T15:55:20.059122-05:00 claude-cloud sshd[1121688]: Connection closed by authenticating user root 27.71.230.31 port 50272 [preauth] 2026-07-01T15:55:21.746540-05:00 claude-cloud sshd[1121704]: Connection closed by authenticating user root 92.118.39.49 port 45312 [preauth] 2026-07-01T15:55:37.143784-05:00 claude-cloud sshd[1121745]: Invalid user admin from 2.57.121.25 port 25696 2026-07-01T15:55:37.169133-05:00 claude-cloud sshd[1121745]: Connection closed by invalid user admin 2.57.121.25 port 25696 [preauth] 2026-07-01T15:57:21.930246-05:00 claude-cloud sshd[1122093]: Connection closed by authenticating user root 92.118.39.49 port 48366 [preauth] 2026-07-01T15:57:25.233606-05:00 claude-cloud sshd[1122105]: Invalid user sol from 45.148.10.183 port 35284 2026-07-01T15:57:25.248518-05:00 claude-cloud sshd[1122105]: Connection closed by invalid user sol 45.148.10.183 port 35284 [preauth] 2026-07-01T15:58:36.281517-05:00 claude-cloud sshd[1122270]: Invalid user shaohailun from 45.198.224.46 port 39138 2026-07-01T15:58:37.156190-05:00 claude-cloud sshd[1122270]: Connection closed by invalid user shaohailun 45.198.224.46 port 39138 [preauth] 2026-07-01T15:59:19.660813-05:00 claude-cloud systemd-logind[853]: New session c5749 of user claude. 2026-07-01T15:59:19.968365-05:00 claude-cloud systemd-logind[853]: Session c5749 logged out. Waiting for processes to exit. 2026-07-01T15:59:19.970541-05:00 claude-cloud systemd-logind[853]: Removed session c5749. 2026-07-01T15:59:22.137176-05:00 claude-cloud sshd[1122444]: Connection closed by authenticating user root 92.118.39.49 port 51390 [preauth] 2026-07-01T16:00:47.026382-05:00 claude-cloud sshd[1122729]: Connection reset by authenticating user root 45.148.10.157 port 26146 [preauth] 2026-07-01T16:00:58.300466-05:00 claude-cloud sshd[1122758]: Invalid user sol from 45.148.10.183 port 35206 2026-07-01T16:00:58.314233-05:00 claude-cloud sshd[1122758]: Connection closed by invalid user sol 45.148.10.183 port 35206 [preauth] 2026-07-01T16:01:17.571740-05:00 claude-cloud sshd[1122807]: Connection closed by authenticating user root 92.118.39.49 port 54414 [preauth] 2026-07-01T16:01:17.696151-05:00 claude-cloud sshd[1122780]: Connection closed by authenticating user root 27.71.230.31 port 53142 [preauth] 2026-07-01T16:03:12.881563-05:00 claude-cloud sshd[1123227]: Connection closed by authenticating user root 92.118.39.49 port 57436 [preauth] 2026-07-01T16:03:35.458429-05:00 claude-cloud sshd[1123286]: Invalid user solana from 45.148.10.183 port 54316 2026-07-01T16:03:35.471231-05:00 claude-cloud sshd[1123286]: Connection closed by invalid user solana 45.148.10.183 port 54316 [preauth] 2026-07-01T16:04:24.107777-05:00 claude-cloud systemd-logind[853]: New session c5750 of user claude. 2026-07-01T16:04:24.356406-05:00 claude-cloud systemd-logind[853]: Session c5750 logged out. Waiting for processes to exit. 2026-07-01T16:04:24.357487-05:00 claude-cloud systemd-logind[853]: Removed session c5750. 2026-07-01T16:05:01.156077-05:00 claude-cloud CRON[1123571]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T16:05:01.162268-05:00 claude-cloud CRON[1123571]: pam_unix(cron:session): session closed for user root 2026-07-01T16:05:04.321767-05:00 claude-cloud sshd[1123574]: Connection closed by authenticating user root 92.118.39.49 port 60466 [preauth] 2026-07-01T16:06:25.519128-05:00 claude-cloud sshd[1123811]: Connection reset by authenticating user root 45.148.10.141 port 44620 [preauth] 2026-07-01T16:06:55.199931-05:00 claude-cloud sshd[1123925]: Invalid user solana from 45.148.10.183 port 41956 2026-07-01T16:06:55.213489-05:00 claude-cloud sshd[1123925]: Connection closed by invalid user solana 45.148.10.183 port 41956 [preauth] 2026-07-01T16:06:56.030765-05:00 claude-cloud sshd[1123913]: Connection closed by authenticating user root 92.118.39.49 port 35302 [preauth] 2026-07-01T16:07:19.935582-05:00 claude-cloud sshd[1123973]: Connection closed by authenticating user root 27.71.230.31 port 56622 [preauth] 2026-07-01T16:08:16.933783-05:00 claude-cloud sshd[1124154]: Connection closed by authenticating user root 45.198.224.46 port 47764 [preauth] 2026-07-01T16:08:47.943927-05:00 claude-cloud sshd[1124272]: Connection closed by authenticating user root 92.118.39.49 port 38304 [preauth] 2026-07-01T16:09:28.763238-05:00 claude-cloud systemd-logind[853]: New session c5751 of user claude. 2026-07-01T16:09:29.086552-05:00 claude-cloud systemd-logind[853]: Session c5751 logged out. Waiting for processes to exit. 2026-07-01T16:09:29.088160-05:00 claude-cloud systemd-logind[853]: Removed session c5751. 2026-07-01T16:09:59.084933-05:00 claude-cloud sshd[1124480]: Invalid user solana from 45.148.10.183 port 48300 2026-07-01T16:09:59.098836-05:00 claude-cloud sshd[1124480]: Connection closed by invalid user solana 45.148.10.183 port 48300 [preauth] 2026-07-01T16:10:42.300779-05:00 claude-cloud sshd[1124593]: Connection closed by authenticating user root 92.118.39.49 port 41302 [preauth] 2026-07-01T16:11:54.797137-05:00 claude-cloud sshd[1124839]: Connection reset by authenticating user root 45.148.10.151 port 19262 [preauth] 2026-07-01T16:12:37.270942-05:00 claude-cloud sshd[1124945]: Connection closed by authenticating user root 92.118.39.49 port 44326 [preauth] 2026-07-01T16:13:04.545701-05:00 claude-cloud sshd[1125099]: Invalid user sol from 45.148.10.183 port 43556 2026-07-01T16:13:04.558815-05:00 claude-cloud sshd[1125099]: Connection closed by invalid user sol 45.148.10.183 port 43556 [preauth] 2026-07-01T16:13:16.464352-05:00 claude-cloud sshd[1125101]: Connection closed by authenticating user root 27.71.230.31 port 36342 [preauth] 2026-07-01T16:14:33.718206-05:00 claude-cloud sshd[1125373]: Connection closed by authenticating user root 92.118.39.49 port 47336 [preauth] 2026-07-01T16:14:34.285371-05:00 claude-cloud systemd-logind[853]: New session c5752 of user claude. 2026-07-01T16:14:34.624764-05:00 claude-cloud systemd-logind[853]: Session c5752 logged out. Waiting for processes to exit. 2026-07-01T16:14:34.627656-05:00 claude-cloud systemd-logind[853]: Removed session c5752. 2026-07-01T16:15:01.176791-05:00 claude-cloud CRON[1125476]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T16:15:01.183619-05:00 claude-cloud CRON[1125476]: pam_unix(cron:session): session closed for user root 2026-07-01T16:16:31.884396-05:00 claude-cloud sshd[1125737]: Connection closed by authenticating user root 92.118.39.49 port 50330 [preauth] 2026-07-01T16:17:01.198824-05:00 claude-cloud CRON[1125841]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T16:17:01.210380-05:00 claude-cloud CRON[1125841]: pam_unix(cron:session): session closed for user root 2026-07-01T16:17:24.175383-05:00 claude-cloud sshd[1125907]: Connection reset by authenticating user root 45.148.10.151 port 2450 [preauth] 2026-07-01T16:17:58.132738-05:00 claude-cloud sshd[1125993]: Connection closed by 185.242.3.121 port 25774 2026-07-01T16:18:01.508394-05:00 claude-cloud sshd[1125992]: Invalid user ubuntu from 45.198.224.46 port 43304 2026-07-01T16:18:02.305433-05:00 claude-cloud sshd[1125992]: Connection closed by invalid user ubuntu 45.198.224.46 port 43304 [preauth] 2026-07-01T16:18:29.234609-05:00 claude-cloud sshd[1126074]: Connection closed by authenticating user root 92.118.39.49 port 53332 [preauth] 2026-07-01T16:19:11.477559-05:00 claude-cloud sshd[1126209]: Connection closed by authenticating user root 27.71.230.31 port 38046 [preauth] 2026-07-01T16:19:12.599778-05:00 claude-cloud sshd[1126239]: Invalid user sol from 45.148.10.183 port 53228 2026-07-01T16:19:12.612374-05:00 claude-cloud sshd[1126239]: Connection closed by invalid user sol 45.148.10.183 port 53228 [preauth] 2026-07-01T16:19:38.853253-05:00 claude-cloud systemd-logind[853]: New session c5753 of user claude. 2026-07-01T16:19:39.232784-05:00 claude-cloud systemd-logind[853]: Session c5753 logged out. Waiting for processes to exit. 2026-07-01T16:19:39.235884-05:00 claude-cloud systemd-logind[853]: Removed session c5753. 2026-07-01T16:20:23.748529-05:00 claude-cloud sshd[1126434]: Connection closed by authenticating user root 92.118.39.49 port 56344 [preauth] 2026-07-01T16:22:15.611560-05:00 claude-cloud sshd[1126787]: Connection closed by authenticating user root 92.118.39.49 port 59336 [preauth] 2026-07-01T16:22:25.649497-05:00 claude-cloud sshd[1126813]: Invalid user sol from 45.148.10.183 port 50256 2026-07-01T16:22:25.663214-05:00 claude-cloud sshd[1126813]: Connection closed by invalid user sol 45.148.10.183 port 50256 [preauth] 2026-07-01T16:22:51.212740-05:00 claude-cloud sshd[1126894]: Invalid user user from 45.148.10.121 port 43590 2026-07-01T16:22:51.225399-05:00 claude-cloud sshd[1126894]: Connection closed by invalid user user 45.148.10.121 port 43590 [preauth] 2026-07-01T16:23:07.122713-05:00 claude-cloud sshd[1126936]: Connection reset by authenticating user root 45.148.10.141 port 30940 [preauth] 2026-07-01T16:24:11.452727-05:00 claude-cloud sshd[1127200]: Connection closed by authenticating user root 92.118.39.49 port 34076 [preauth] 2026-07-01T16:24:43.308191-05:00 claude-cloud systemd-logind[853]: New session c5754 of user claude. 2026-07-01T16:24:43.585900-05:00 claude-cloud systemd-logind[853]: Session c5754 logged out. Waiting for processes to exit. 2026-07-01T16:24:43.587568-05:00 claude-cloud systemd-logind[853]: Removed session c5754. 2026-07-01T16:25:01.222736-05:00 claude-cloud CRON[1127357]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T16:25:01.229871-05:00 claude-cloud CRON[1127357]: pam_unix(cron:session): session closed for user root 2026-07-01T16:25:12.180351-05:00 claude-cloud sshd[1127352]: Connection closed by authenticating user root 27.71.230.31 port 55682 [preauth] 2026-07-01T16:25:28.804856-05:00 claude-cloud sshd[1127425]: Connection closed by authenticating user root 45.148.10.183 port 59714 [preauth] 2026-07-01T16:26:06.177496-05:00 claude-cloud sshd[1127572]: Connection closed by authenticating user root 92.118.39.49 port 37082 [preauth] 2026-07-01T16:27:38.039297-05:00 claude-cloud sshd[1127882]: Connection closed by authenticating user root 45.198.224.46 port 60802 [preauth] 2026-07-01T16:28:00.902240-05:00 claude-cloud sshd[1127987]: Connection closed by authenticating user root 92.118.39.49 port 40096 [preauth] 2026-07-01T16:28:50.457438-05:00 claude-cloud sshd[1128112]: Connection reset by authenticating user root 62.60.130.219 port 55998 [preauth] 2026-07-01T16:28:52.040106-05:00 claude-cloud sshd[1128124]: Connection closed by authenticating user root 45.148.10.183 port 44402 [preauth] 2026-07-01T16:29:47.629409-05:00 claude-cloud systemd-logind[853]: New session c5755 of user claude. 2026-07-01T16:29:47.941409-05:00 claude-cloud systemd-logind[853]: Session c5755 logged out. Waiting for processes to exit. 2026-07-01T16:29:47.943179-05:00 claude-cloud systemd-logind[853]: Removed session c5755. 2026-07-01T16:30:01.502820-05:00 claude-cloud sshd[1128358]: Invalid user admin from 92.118.39.49 port 43124 2026-07-01T16:30:01.678605-05:00 claude-cloud sshd[1128358]: Connection closed by invalid user admin 92.118.39.49 port 43124 [preauth] 2026-07-01T16:31:08.462099-05:00 claude-cloud sshd[1128520]: Connection closed by authenticating user root 27.71.230.31 port 39610 [preauth] 2026-07-01T16:32:01.232069-05:00 claude-cloud sshd[1128704]: Invalid user admin from 92.118.39.49 port 46100 2026-07-01T16:32:01.346343-05:00 claude-cloud sshd[1128704]: Connection closed by invalid user admin 92.118.39.49 port 46100 [preauth] 2026-07-01T16:33:41.220987-05:00 claude-cloud sshd[1129007]: Connection closed by 47.80.3.77 port 52384 2026-07-01T16:34:02.999075-05:00 claude-cloud sshd[1129133]: Invalid user admin from 92.118.39.49 port 49094 2026-07-01T16:34:03.078672-05:00 claude-cloud sshd[1129133]: Connection closed by invalid user admin 92.118.39.49 port 49094 [preauth] 2026-07-01T16:34:28.803635-05:00 claude-cloud sshd[1129216]: Connection reset by authenticating user root 45.148.10.157 port 16274 [preauth] 2026-07-01T16:34:51.773373-05:00 claude-cloud systemd-logind[853]: New session c5756 of user claude. 2026-07-01T16:34:52.104820-05:00 claude-cloud systemd-logind[853]: Session c5756 logged out. Waiting for processes to exit. 2026-07-01T16:34:52.106610-05:00 claude-cloud systemd-logind[853]: Removed session c5756. 2026-07-01T16:35:01.240538-05:00 claude-cloud CRON[1129330]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T16:35:01.247100-05:00 claude-cloud CRON[1129330]: pam_unix(cron:session): session closed for user root 2026-07-01T16:35:19.168333-05:00 claude-cloud sshd[1129385]: Invalid user solana from 45.148.10.183 port 56204 2026-07-01T16:35:19.181891-05:00 claude-cloud sshd[1129385]: Connection closed by invalid user solana 45.148.10.183 port 56204 [preauth] 2026-07-01T16:36:08.830956-05:00 claude-cloud sshd[1129540]: Invalid user admin from 92.118.39.49 port 52052 2026-07-01T16:36:08.860932-05:00 claude-cloud sshd[1129540]: Connection closed by invalid user admin 92.118.39.49 port 52052 [preauth] 2026-07-01T16:37:06.085262-05:00 claude-cloud sshd[1129691]: Connection closed by authenticating user root 27.71.230.31 port 39276 [preauth] 2026-07-01T16:37:15.301318-05:00 claude-cloud sshd[1129735]: Invalid user sales from 45.198.224.46 port 52146 2026-07-01T16:37:16.035263-05:00 claude-cloud sshd[1129735]: Connection closed by invalid user sales 45.198.224.46 port 52146 [preauth] 2026-07-01T16:38:11.219740-05:00 claude-cloud sshd[1129915]: Invalid user solana from 45.148.10.183 port 33682 2026-07-01T16:38:11.233380-05:00 claude-cloud sshd[1129915]: Connection closed by invalid user solana 45.148.10.183 port 33682 [preauth] 2026-07-01T16:39:55.733609-05:00 claude-cloud systemd-logind[853]: New session c5757 of user claude. 2026-07-01T16:39:56.178493-05:00 claude-cloud systemd-logind[853]: Session c5757 logged out. Waiting for processes to exit. 2026-07-01T16:39:56.180423-05:00 claude-cloud systemd-logind[853]: Removed session c5757. 2026-07-01T16:40:12.421357-05:00 claude-cloud sshd[1130490]: Connection reset by authenticating user root 45.148.10.152 port 47286 [preauth] 2026-07-01T16:40:24.593059-05:00 claude-cloud sshd[1130540]: Connection closed by 203.121.106.56 port 16144 [preauth] 2026-07-01T16:41:21.694934-05:00 claude-cloud sshd[1130936]: Invalid user solana from 45.148.10.183 port 44844 2026-07-01T16:41:21.708088-05:00 claude-cloud sshd[1130936]: Connection closed by invalid user solana 45.148.10.183 port 44844 [preauth] 2026-07-01T16:43:01.385155-05:00 claude-cloud sshd[1131393]: Connection closed by authenticating user root 27.71.230.31 port 56368 [preauth] 2026-07-01T16:44:35.631582-05:00 claude-cloud sshd[1131737]: Invalid user solana from 45.148.10.183 port 60366 2026-07-01T16:44:35.644069-05:00 claude-cloud sshd[1131737]: Connection closed by invalid user solana 45.148.10.183 port 60366 [preauth] 2026-07-01T16:44:59.830124-05:00 claude-cloud systemd-logind[853]: New session c5758 of user claude. 2026-07-01T16:45:00.302184-05:00 claude-cloud systemd-logind[853]: Session c5758 logged out. Waiting for processes to exit. 2026-07-01T16:45:00.304392-05:00 claude-cloud systemd-logind[853]: Removed session c5758. 2026-07-01T16:45:01.258096-05:00 claude-cloud CRON[1131817]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T16:45:01.263855-05:00 claude-cloud CRON[1131817]: pam_unix(cron:session): session closed for user root 2026-07-01T16:45:46.667667-05:00 claude-cloud sshd[1131954]: Connection reset by authenticating user root 45.227.254.170 port 12450 [preauth] 2026-07-01T16:46:14.967477-05:00 claude-cloud sshd[1132039]: Invalid user harleigh from 2.57.121.112 port 39686 2026-07-01T16:46:14.993889-05:00 claude-cloud sshd[1132039]: Connection closed by invalid user harleigh 2.57.121.112 port 39686 [preauth] 2026-07-01T16:47:16.525696-05:00 claude-cloud sshd[1132238]: Invalid user client from 45.198.224.46 port 45930 2026-07-01T16:47:17.054348-05:00 claude-cloud sshd[1132238]: Connection closed by invalid user client 45.198.224.46 port 45930 [preauth] 2026-07-01T16:47:18.427935-05:00 claude-cloud sshd[1132258]: Invalid user admin from 2.57.121.25 port 8414 2026-07-01T16:47:18.453724-05:00 claude-cloud sshd[1132258]: Connection closed by invalid user admin 2.57.121.25 port 8414 [preauth] 2026-07-01T16:47:37.646807-05:00 claude-cloud sshd[1132304]: Invalid user sols from 45.148.10.183 port 37522 2026-07-01T16:47:37.661538-05:00 claude-cloud sshd[1132304]: Connection closed by invalid user sols 45.148.10.183 port 37522 [preauth] 2026-07-01T16:49:29.310378-05:00 claude-cloud sshd[1132638]: Connection closed by authenticating user root 185.242.3.195 port 60892 [preauth] 2026-07-01T16:50:04.121885-05:00 claude-cloud systemd-logind[853]: New session c5759 of user claude. 2026-07-01T16:50:04.433006-05:00 claude-cloud systemd-logind[853]: Session c5759 logged out. Waiting for processes to exit. 2026-07-01T16:50:04.434458-05:00 claude-cloud systemd-logind[853]: Removed session c5759. 2026-07-01T16:50:45.638002-05:00 claude-cloud sshd[1132871]: Invalid user jito from 45.148.10.183 port 39198 2026-07-01T16:50:45.652203-05:00 claude-cloud sshd[1132871]: Connection closed by invalid user jito 45.148.10.183 port 39198 [preauth] 2026-07-01T16:50:48.599759-05:00 claude-cloud sshd[1132883]: Received disconnect from 209.209.8.82 port 37308:11: disconnected by user [preauth] 2026-07-01T16:50:48.600076-05:00 claude-cloud sshd[1132883]: Disconnected from authenticating user root 209.209.8.82 port 37308 [preauth] 2026-07-01T16:51:21.784015-05:00 claude-cloud sshd[1132997]: Connection reset by authenticating user root 45.227.254.170 port 53286 [preauth] 2026-07-01T16:53:57.109748-05:00 claude-cloud sshd[1133475]: Invalid user soul from 45.148.10.183 port 40740 2026-07-01T16:53:57.122813-05:00 claude-cloud sshd[1133475]: Connection closed by invalid user soul 45.148.10.183 port 40740 [preauth] 2026-07-01T16:54:33.922983-05:00 claude-cloud sshd[1133579]: Connection closed by 2.57.122.168 port 42474 2026-07-01T16:55:01.280608-05:00 claude-cloud CRON[1133732]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T16:55:01.288766-05:00 claude-cloud CRON[1133732]: pam_unix(cron:session): session closed for user root 2026-07-01T16:55:05.078790-05:00 claude-cloud sshd[1133682]: Connection closed by authenticating user root 27.71.230.31 port 48118 [preauth] 2026-07-01T16:55:08.013639-05:00 claude-cloud systemd-logind[853]: New session c5760 of user claude. 2026-07-01T16:55:08.282764-05:00 claude-cloud systemd-logind[853]: Session c5760 logged out. Waiting for processes to exit. 2026-07-01T16:55:08.285240-05:00 claude-cloud systemd-logind[853]: Removed session c5760. 2026-07-01T16:55:17.789477-05:00 claude-cloud sshd[1133782]: userauth_pubkey: signature algorithm ssh-dss not in PubkeyAcceptedAlgorithms [preauth] 2026-07-01T16:55:18.342780-05:00 claude-cloud sshd[1133782]: Received disconnect from 51.79.177.223 port 14728:11: disconnected by user [preauth] 2026-07-01T16:55:18.343164-05:00 claude-cloud sshd[1133782]: Disconnected from authenticating user root 51.79.177.223 port 14728 [preauth] 2026-07-01T16:55:43.534662-05:00 claude-cloud sshd[1133857]: Connection closed by 111.228.37.179 port 37656 2026-07-01T16:56:11.082380-05:00 claude-cloud sshd[1133950]: Connection closed by authenticating user root 45.148.10.121 port 48550 [preauth] 2026-07-01T16:57:00.802091-05:00 claude-cloud sshd[1134107]: Connection reset by authenticating user root 45.148.10.157 port 64400 [preauth] 2026-07-01T16:57:09.678797-05:00 claude-cloud sshd[1134119]: Connection closed by authenticating user root 45.198.224.46 port 50018 [preauth] 2026-07-01T16:57:11.593028-05:00 claude-cloud sshd[1134134]: Invalid user sol from 45.148.10.183 port 45472 2026-07-01T16:57:11.608408-05:00 claude-cloud sshd[1134134]: Connection closed by invalid user sol 45.148.10.183 port 45472 [preauth] 2026-07-01T17:00:11.843556-05:00 claude-cloud systemd-logind[853]: New session c5761 of user claude. 2026-07-01T17:00:12.149753-05:00 claude-cloud systemd-logind[853]: Session c5761 logged out. Waiting for processes to exit. 2026-07-01T17:00:12.151637-05:00 claude-cloud systemd-logind[853]: Removed session c5761. 2026-07-01T17:00:50.834123-05:00 claude-cloud sshd[1134777]: Connection closed by authenticating user root 27.71.230.31 port 51264 [preauth] 2026-07-01T17:03:20.889762-05:00 claude-cloud sshd[1135274]: Invalid user sole from 45.148.10.183 port 34992 2026-07-01T17:03:20.903340-05:00 claude-cloud sshd[1135274]: Connection closed by invalid user sole 45.148.10.183 port 34992 [preauth] 2026-07-01T17:04:18.836785-05:00 claude-cloud sshd[1135432]: Connection closed by authenticating user root 2.57.122.168 port 46202 [preauth] 2026-07-01T17:05:01.298441-05:00 claude-cloud CRON[1135627]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T17:05:01.306222-05:00 claude-cloud CRON[1135627]: pam_unix(cron:session): session closed for user root 2026-07-01T17:05:16.577641-05:00 claude-cloud systemd-logind[853]: New session c5762 of user claude. 2026-07-01T17:05:16.849048-05:00 claude-cloud systemd-logind[853]: Session c5762 logged out. Waiting for processes to exit. 2026-07-01T17:05:16.852638-05:00 claude-cloud systemd-logind[853]: Removed session c5762. 2026-07-01T17:06:31.406064-05:00 claude-cloud sshd[1135887]: Connection closed by authenticating user root 2.57.122.168 port 49256 [preauth] 2026-07-01T17:06:31.446945-05:00 claude-cloud sshd[1135889]: Invalid user solv from 45.148.10.183 port 56712 2026-07-01T17:06:31.460852-05:00 claude-cloud sshd[1135889]: Connection closed by invalid user solv 45.148.10.183 port 56712 [preauth] 2026-07-01T17:06:54.862226-05:00 claude-cloud sshd[1135905]: Connection closed by authenticating user root 27.71.230.31 port 51916 [preauth] 2026-07-01T17:07:00.326741-05:00 claude-cloud sshd[1135968]: Connection closed by authenticating user root 45.198.224.46 port 43834 [preauth] 2026-07-01T17:08:46.943244-05:00 claude-cloud sshd[1136300]: Connection closed by authenticating user root 2.57.122.168 port 52244 [preauth] 2026-07-01T17:09:48.438310-05:00 claude-cloud sshd[1136493]: Invalid user solv from 45.148.10.183 port 50128 2026-07-01T17:09:48.451919-05:00 claude-cloud sshd[1136493]: Connection closed by invalid user solv 45.148.10.183 port 50128 [preauth] 2026-07-01T17:10:21.501141-05:00 claude-cloud systemd-logind[853]: New session c5763 of user claude. 2026-07-01T17:10:21.794908-05:00 claude-cloud systemd-logind[853]: Session c5763 logged out. Waiting for processes to exit. 2026-07-01T17:10:21.796974-05:00 claude-cloud systemd-logind[853]: Removed session c5763. 2026-07-01T17:11:04.943831-05:00 claude-cloud sshd[1136706]: Connection closed by authenticating user root 2.57.122.168 port 55262 [preauth] 2026-07-01T17:12:34.462911-05:00 claude-cloud sshd[1136953]: Connection closed by authenticating user root 27.71.230.31 port 33962 [preauth] 2026-07-01T17:12:57.716015-05:00 claude-cloud sshd[1137048]: Invalid user solb from 45.148.10.183 port 53026 2026-07-01T17:12:57.729339-05:00 claude-cloud sshd[1137048]: Connection closed by invalid user solb 45.148.10.183 port 53026 [preauth] 2026-07-01T17:13:11.703534-05:00 claude-cloud sshd[1137066]: Received disconnect from 172.245.225.106 port 33256:11: disconnected by user [preauth] 2026-07-01T17:13:11.704589-05:00 claude-cloud sshd[1137066]: Disconnected from authenticating user root 172.245.225.106 port 33256 [preauth] 2026-07-01T17:13:20.770793-05:00 claude-cloud sshd[1137102]: Connection closed by authenticating user root 2.57.122.168 port 58280 [preauth] 2026-07-01T17:13:23.544780-05:00 claude-cloud sshd[1137101]: Connection reset by 205.210.31.220 port 60664 [preauth] 2026-07-01T17:15:01.320319-05:00 claude-cloud CRON[1137465]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T17:15:01.326225-05:00 claude-cloud CRON[1137465]: pam_unix(cron:session): session closed for user root 2026-07-01T17:15:26.494936-05:00 claude-cloud systemd-logind[853]: New session c5764 of user claude. 2026-07-01T17:15:26.824205-05:00 claude-cloud systemd-logind[853]: Session c5764 logged out. Waiting for processes to exit. 2026-07-01T17:15:26.825559-05:00 claude-cloud systemd-logind[853]: Removed session c5764. 2026-07-01T17:15:32.433524-05:00 claude-cloud sshd[1137550]: Connection closed by authenticating user root 2.57.122.168 port 33036 [preauth] 2026-07-01T17:16:08.688797-05:00 claude-cloud sshd[1137645]: Invalid user solz from 45.148.10.183 port 56864 2026-07-01T17:16:08.701532-05:00 claude-cloud sshd[1137645]: Connection closed by invalid user solz 45.148.10.183 port 56864 [preauth] 2026-07-01T17:17:01.333854-05:00 claude-cloud CRON[1137815]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T17:17:01.340247-05:00 claude-cloud CRON[1137815]: pam_unix(cron:session): session closed for user root 2026-07-01T17:17:08.864157-05:00 claude-cloud sshd[1137832]: Connection closed by authenticating user root 45.198.224.46 port 35024 [preauth] 2026-07-01T17:17:44.167311-05:00 claude-cloud sshd[1137930]: Connection closed by authenticating user root 2.57.122.168 port 36030 [preauth] 2026-07-01T17:18:29.974657-05:00 claude-cloud sshd[1138038]: Connection closed by authenticating user root 27.71.230.31 port 35408 [preauth] 2026-07-01T17:18:32.059400-05:00 claude-cloud sshd[1138059]: Received disconnect from 95.111.246.23 port 45090:11: Bye Bye [preauth] 2026-07-01T17:18:32.059838-05:00 claude-cloud sshd[1138059]: Disconnected from authenticating user root 95.111.246.23 port 45090 [preauth] 2026-07-01T17:19:04.886470-05:00 claude-cloud sshd[1138163]: Invalid user firedancer from 45.148.10.183 port 60908 2026-07-01T17:19:04.902038-05:00 claude-cloud sshd[1138163]: Connection closed by invalid user firedancer 45.148.10.183 port 60908 [preauth] 2026-07-01T17:19:51.504776-05:00 claude-cloud sshd[1138305]: Connection closed by authenticating user root 2.57.122.168 port 38998 [preauth] 2026-07-01T17:20:31.609237-05:00 claude-cloud systemd-logind[853]: New session c5765 of user claude. 2026-07-01T17:20:31.944676-05:00 claude-cloud systemd-logind[853]: Session c5765 logged out. Waiting for processes to exit. 2026-07-01T17:20:31.947408-05:00 claude-cloud systemd-logind[853]: Removed session c5765. 2026-07-01T17:21:10.022034-05:00 claude-cloud sshd[1138533]: Connection closed by 54.218.230.32 port 58112 [preauth] 2026-07-01T17:21:11.165983-05:00 claude-cloud sshd[1138535]: Connection closed by 54.218.230.32 port 58118 [preauth] 2026-07-01T17:21:11.798000-05:00 claude-cloud sshd[1138546]: Unable to negotiate with 54.218.230.32 port 58120: no matching host key type found. Their offer: ecdsa-sha2-nistp384,ecdsa-sha2-nistp384-cert-v01@openssh.com [preauth] 2026-07-01T17:21:12.373897-05:00 claude-cloud sshd[1138548]: Unable to negotiate with 54.218.230.32 port 58134: no matching host key type found. Their offer: ecdsa-sha2-nistp521,ecdsa-sha2-nistp521-cert-v01@openssh.com [preauth] 2026-07-01T17:21:13.889165-05:00 claude-cloud sshd[1138552]: Connection closed by 54.218.230.32 port 58140 [preauth] 2026-07-01T17:21:14.990063-05:00 claude-cloud sshd[1138561]: Connection closed by 54.218.230.32 port 46242 [preauth] 2026-07-01T17:21:15.438265-05:00 claude-cloud sshd[1138563]: Unable to negotiate with 54.218.230.32 port 46248: no matching host key type found. Their offer: ssh-rsa,ssh-rsa-cert-v01@openssh.com [preauth] 2026-07-01T17:21:16.152523-05:00 claude-cloud sshd[1138568]: Unable to negotiate with 54.218.230.32 port 46258: no matching host key type found. Their offer: ssh-dss,ssh-dss-cert-v01@openssh.com [preauth] 2026-07-01T17:21:42.627442-05:00 claude-cloud sshd[1138630]: Received disconnect from 165.154.254.143 port 55720:11: Bye Bye [preauth] 2026-07-01T17:21:42.629133-05:00 claude-cloud sshd[1138630]: Disconnected from authenticating user root 165.154.254.143 port 55720 [preauth] 2026-07-01T17:22:01.597523-05:00 claude-cloud sshd[1138699]: Connection closed by authenticating user root 2.57.122.168 port 41994 [preauth] 2026-07-01T17:22:09.454077-05:00 claude-cloud sshd[1138724]: Connection closed by 147.45.60.18 port 15224 2026-07-01T17:22:27.121904-05:00 claude-cloud sshd[1138779]: Connection closed by authenticating user root 45.148.10.183 port 38218 [preauth] 2026-07-01T17:23:31.098201-05:00 claude-cloud sshd[1138967]: Invalid user admin from 183.36.126.68 port 40010 2026-07-01T17:23:31.305753-05:00 claude-cloud sshd[1138967]: Received disconnect from 183.36.126.68 port 40010:11: Bye Bye [preauth] 2026-07-01T17:23:31.306192-05:00 claude-cloud sshd[1138967]: Disconnected from invalid user admin 183.36.126.68 port 40010 [preauth] 2026-07-01T17:24:10.831802-05:00 claude-cloud sshd[1139065]: Connection closed by authenticating user root 2.57.122.168 port 44960 [preauth] 2026-07-01T17:24:30.632377-05:00 claude-cloud sshd[1139115]: Connection closed by authenticating user root 27.71.230.31 port 42974 [preauth] 2026-07-01T17:24:44.147622-05:00 claude-cloud sshd[1139173]: Received disconnect from 115.190.197.138 port 25020:11: Bye Bye [preauth] 2026-07-01T17:24:44.148169-05:00 claude-cloud sshd[1139173]: Disconnected from authenticating user root 115.190.197.138 port 25020 [preauth] 2026-07-01T17:25:01.349037-05:00 claude-cloud CRON[1139239]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T17:25:01.353953-05:00 claude-cloud CRON[1139239]: pam_unix(cron:session): session closed for user root 2026-07-01T17:25:21.596414-05:00 claude-cloud sshd[1139294]: Received disconnect from 120.48.80.70 port 51264:11: Bye Bye [preauth] 2026-07-01T17:25:21.597447-05:00 claude-cloud sshd[1139294]: Disconnected from authenticating user root 120.48.80.70 port 51264 [preauth] 2026-07-01T17:25:25.871818-05:00 claude-cloud sshd[1139321]: Connection closed by authenticating user root 45.148.10.183 port 47398 [preauth] 2026-07-01T17:25:34.715250-05:00 claude-cloud sshd[1139342]: Received disconnect from 58.186.20.143 port 56480:11: Bye Bye [preauth] 2026-07-01T17:25:34.715694-05:00 claude-cloud sshd[1139342]: Disconnected from authenticating user root 58.186.20.143 port 56480 [preauth] 2026-07-01T17:25:37.262351-05:00 claude-cloud systemd-logind[853]: New session c5766 of user claude. 2026-07-01T17:25:37.549342-05:00 claude-cloud systemd-logind[853]: Session c5766 logged out. Waiting for processes to exit. 2026-07-01T17:25:37.552186-05:00 claude-cloud systemd-logind[853]: Removed session c5766. 2026-07-01T17:25:45.543312-05:00 claude-cloud sshd[1139419]: Invalid user sftp from 160.251.101.169 port 33750 2026-07-01T17:25:45.805847-05:00 claude-cloud sshd[1139419]: Received disconnect from 160.251.101.169 port 33750:11: Bye Bye [preauth] 2026-07-01T17:25:45.806119-05:00 claude-cloud sshd[1139419]: Disconnected from invalid user sftp 160.251.101.169 port 33750 [preauth] 2026-07-01T17:26:30.475551-05:00 claude-cloud sshd[1139568]: Connection closed by authenticating user root 2.57.122.168 port 47940 [preauth] 2026-07-01T17:27:14.437245-05:00 claude-cloud sshd[1139696]: Received disconnect from 14.103.127.2 port 42824:11: Bye Bye [preauth] 2026-07-01T17:27:14.440312-05:00 claude-cloud sshd[1139696]: Disconnected from authenticating user root 14.103.127.2 port 42824 [preauth] 2026-07-01T17:27:23.982635-05:00 claude-cloud sshd[1139722]: Invalid user master from 45.198.224.46 port 59938 2026-07-01T17:27:24.782891-05:00 claude-cloud sshd[1139722]: Connection closed by invalid user master 45.198.224.46 port 59938 [preauth] 2026-07-01T17:27:58.891215-05:00 claude-cloud sshd[1139835]: Received disconnect from 183.36.126.68 port 58038:11: Bye Bye [preauth] 2026-07-01T17:27:58.893333-05:00 claude-cloud sshd[1139835]: Disconnected from authenticating user root 183.36.126.68 port 58038 [preauth] 2026-07-01T17:28:35.508781-05:00 claude-cloud sshd[1139944]: Received disconnect from 183.36.126.68 port 39094:11: Bye Bye [preauth] 2026-07-01T17:28:35.509385-05:00 claude-cloud sshd[1139944]: Disconnected from authenticating user root 183.36.126.68 port 39094 [preauth] 2026-07-01T17:28:46.541785-05:00 claude-cloud sshd[1139972]: Connection closed by authenticating user root 2.57.122.168 port 50932 [preauth] 2026-07-01T17:28:47.521450-05:00 claude-cloud sshd[1139977]: Invalid user shred from 45.148.10.183 port 60400 2026-07-01T17:28:47.534196-05:00 claude-cloud sshd[1139977]: Connection closed by invalid user shred 45.148.10.183 port 60400 [preauth] 2026-07-01T17:28:58.381984-05:00 claude-cloud sshd[1140009]: Invalid user ubnt from 45.148.10.121 port 56716 2026-07-01T17:28:58.398053-05:00 claude-cloud sshd[1140009]: Connection closed by invalid user ubnt 45.148.10.121 port 56716 [preauth] 2026-07-01T17:28:59.389871-05:00 claude-cloud sshd[1140020]: Invalid user test2 from 120.48.80.70 port 36090 2026-07-01T17:28:59.560509-05:00 claude-cloud sshd[1140020]: Received disconnect from 120.48.80.70 port 36090:11: Bye Bye [preauth] 2026-07-01T17:28:59.560789-05:00 claude-cloud sshd[1140020]: Disconnected from invalid user test2 120.48.80.70 port 36090 [preauth] 2026-07-01T17:29:11.965732-05:00 claude-cloud sshd[1140039]: Received disconnect from 183.36.126.68 port 48538:11: Bye Bye [preauth] 2026-07-01T17:29:11.966983-05:00 claude-cloud sshd[1140039]: Disconnected from authenticating user root 183.36.126.68 port 48538 [preauth] 2026-07-01T17:29:12.144888-05:00 claude-cloud sshd[1140041]: Received disconnect from 14.103.123.19 port 35304:11: Bye Bye [preauth] 2026-07-01T17:29:12.145376-05:00 claude-cloud sshd[1140041]: Disconnected from authenticating user root 14.103.123.19 port 35304 [preauth] 2026-07-01T17:29:48.785377-05:00 claude-cloud sshd[1140165]: Received disconnect from 183.36.126.68 port 58006:11: Bye Bye [preauth] 2026-07-01T17:29:48.785867-05:00 claude-cloud sshd[1140165]: Disconnected from authenticating user root 183.36.126.68 port 58006 [preauth] 2026-07-01T17:30:04.876722-05:00 claude-cloud sshd[1140216]: Received disconnect from 120.48.80.70 port 49870:11: Bye Bye [preauth] 2026-07-01T17:30:04.877092-05:00 claude-cloud sshd[1140216]: Disconnected from authenticating user root 120.48.80.70 port 49870 [preauth] 2026-07-01T17:30:06.886130-05:00 claude-cloud sshd[1140167]: error: kex_exchange_identification: read: Connection reset by peer 2026-07-01T17:30:06.886632-05:00 claude-cloud sshd[1140167]: Connection reset by 182.47.191.78 port 45483 2026-07-01T17:30:26.410363-05:00 claude-cloud sshd[1140255]: Connection closed by authenticating user root 27.71.230.31 port 37236 [preauth] 2026-07-01T17:30:42.016610-05:00 claude-cloud systemd-logind[853]: New session c5767 of user claude. 2026-07-01T17:30:42.090589-05:00 claude-cloud sshd[1140322]: Invalid user steam1 from 183.36.126.68 port 39220 2026-07-01T17:30:42.299778-05:00 claude-cloud sshd[1140322]: Received disconnect from 183.36.126.68 port 39220:11: Bye Bye [preauth] 2026-07-01T17:30:42.300092-05:00 claude-cloud sshd[1140322]: Disconnected from invalid user steam1 183.36.126.68 port 39220 [preauth] 2026-07-01T17:30:42.304708-05:00 claude-cloud systemd-logind[853]: Session c5767 logged out. Waiting for processes to exit. 2026-07-01T17:30:42.306704-05:00 claude-cloud systemd-logind[853]: Removed session c5767. 2026-07-01T17:30:48.104499-05:00 claude-cloud sshd[1140364]: Invalid user elasticsearch from 181.188.176.242 port 44556 2026-07-01T17:30:48.341054-05:00 claude-cloud sshd[1140364]: Received disconnect from 181.188.176.242 port 44556:11: Bye Bye [preauth] 2026-07-01T17:30:48.341407-05:00 claude-cloud sshd[1140364]: Disconnected from invalid user elasticsearch 181.188.176.242 port 44556 [preauth] 2026-07-01T17:31:01.442661-05:00 claude-cloud sshd[1140395]: Connection closed by authenticating user root 2.57.122.168 port 53968 [preauth] 2026-07-01T17:31:06.351865-05:00 claude-cloud sshd[1140414]: Received disconnect from 95.111.246.23 port 34768:11: Bye Bye [preauth] 2026-07-01T17:31:06.352960-05:00 claude-cloud sshd[1140414]: Disconnected from authenticating user root 95.111.246.23 port 34768 [preauth] 2026-07-01T17:31:06.356578-05:00 claude-cloud sshd[1140412]: Received disconnect from 120.48.80.70 port 35416:11: Bye Bye [preauth] 2026-07-01T17:31:06.357037-05:00 claude-cloud sshd[1140412]: Disconnected from authenticating user root 120.48.80.70 port 35416 [preauth] 2026-07-01T17:31:18.237080-05:00 claude-cloud sshd[1140444]: Received disconnect from 183.36.126.68 port 48596:11: Bye Bye [preauth] 2026-07-01T17:31:18.239964-05:00 claude-cloud sshd[1140444]: Disconnected from authenticating user root 183.36.126.68 port 48596 [preauth] 2026-07-01T17:31:47.424139-05:00 claude-cloud sshd[1140535]: Invalid user validator from 45.148.10.183 port 44140 2026-07-01T17:31:47.438211-05:00 claude-cloud sshd[1140535]: Connection closed by invalid user validator 45.148.10.183 port 44140 [preauth] 2026-07-01T17:31:52.941739-05:00 claude-cloud sshd[1140554]: Received disconnect from 183.36.126.68 port 58064:11: Bye Bye [preauth] 2026-07-01T17:31:52.942442-05:00 claude-cloud sshd[1140554]: Disconnected from authenticating user root 183.36.126.68 port 58064 [preauth] 2026-07-01T17:31:59.834435-05:00 claude-cloud sshd[1140566]: Received disconnect from 165.154.254.143 port 40320:11: Bye Bye [preauth] 2026-07-01T17:31:59.834747-05:00 claude-cloud sshd[1140566]: Disconnected from authenticating user root 165.154.254.143 port 40320 [preauth] 2026-07-01T17:32:10.389415-05:00 claude-cloud sshd[1140604]: Invalid user deployer from 120.48.80.70 port 49190 2026-07-01T17:32:10.552200-05:00 claude-cloud sshd[1140604]: Received disconnect from 120.48.80.70 port 49190:11: Bye Bye [preauth] 2026-07-01T17:32:10.552894-05:00 claude-cloud sshd[1140604]: Disconnected from invalid user deployer 120.48.80.70 port 49190 [preauth] 2026-07-01T17:32:12.825220-05:00 claude-cloud sshd[1140609]: Received disconnect from 210.210.155.71 port 40536:11: disconnected by user [preauth] 2026-07-01T17:32:12.825574-05:00 claude-cloud sshd[1140609]: Disconnected from authenticating user root 210.210.155.71 port 40536 [preauth] 2026-07-01T17:32:28.502429-05:00 claude-cloud sshd[1140660]: Received disconnect from 183.36.126.68 port 39356:11: Bye Bye [preauth] 2026-07-01T17:32:28.502769-05:00 claude-cloud sshd[1140660]: Disconnected from authenticating user root 183.36.126.68 port 39356 [preauth] 2026-07-01T17:32:35.416626-05:00 claude-cloud sshd[1140683]: Received disconnect from 58.186.20.143 port 50924:11: Bye Bye [preauth] 2026-07-01T17:32:35.416956-05:00 claude-cloud sshd[1140683]: Disconnected from authenticating user root 58.186.20.143 port 50924 [preauth] 2026-07-01T17:33:00.960948-05:00 claude-cloud sshd[1140751]: Received disconnect from 95.111.246.23 port 47602:11: Bye Bye [preauth] 2026-07-01T17:33:00.962686-05:00 claude-cloud sshd[1140751]: Disconnected from authenticating user root 95.111.246.23 port 47602 [preauth] 2026-07-01T17:33:01.529738-05:00 claude-cloud sshd[1140749]: Received disconnect from 160.251.101.169 port 48570:11: Bye Bye [preauth] 2026-07-01T17:33:01.530203-05:00 claude-cloud sshd[1140749]: Disconnected from authenticating user root 160.251.101.169 port 48570 [preauth] 2026-07-01T17:33:03.328842-05:00 claude-cloud sshd[1140760]: Invalid user deployer from 183.36.126.68 port 48800 2026-07-01T17:33:03.538063-05:00 claude-cloud sshd[1140760]: Received disconnect from 183.36.126.68 port 48800:11: Bye Bye [preauth] 2026-07-01T17:33:03.538343-05:00 claude-cloud sshd[1140760]: Disconnected from invalid user deployer 183.36.126.68 port 48800 [preauth] 2026-07-01T17:33:15.310378-05:00 claude-cloud sshd[1140784]: Received disconnect from 120.48.80.70 port 34760:11: Bye Bye [preauth] 2026-07-01T17:33:15.311137-05:00 claude-cloud sshd[1140784]: Disconnected from authenticating user root 120.48.80.70 port 34760 [preauth] 2026-07-01T17:33:15.699652-05:00 claude-cloud sshd[1140801]: Connection closed by authenticating user root 2.57.122.168 port 56954 [preauth] 2026-07-01T17:33:38.575641-05:00 claude-cloud sshd[1140873]: Received disconnect from 183.36.126.68 port 57932:11: Bye Bye [preauth] 2026-07-01T17:33:38.576042-05:00 claude-cloud sshd[1140873]: Disconnected from authenticating user root 183.36.126.68 port 57932 [preauth] 2026-07-01T17:33:46.548562-05:00 claude-cloud sshd[1140908]: Received disconnect from 165.154.254.143 port 59226:11: Bye Bye [preauth] 2026-07-01T17:33:46.549375-05:00 claude-cloud sshd[1140908]: Disconnected from authenticating user root 165.154.254.143 port 59226 [preauth] 2026-07-01T17:34:13.576227-05:00 claude-cloud sshd[1140977]: Received disconnect from 183.36.126.68 port 39474:11: Bye Bye [preauth] 2026-07-01T17:34:13.576614-05:00 claude-cloud sshd[1140977]: Disconnected from authenticating user root 183.36.126.68 port 39474 [preauth] 2026-07-01T17:34:21.945256-05:00 claude-cloud sshd[1141003]: Received disconnect from 181.188.176.242 port 43706:11: Bye Bye [preauth] 2026-07-01T17:34:21.946249-05:00 claude-cloud sshd[1141003]: Disconnected from authenticating user root 181.188.176.242 port 43706 [preauth] 2026-07-01T17:34:38.067665-05:00 claude-cloud sshd[1141039]: Received disconnect from 58.186.20.143 port 59782:11: Bye Bye [preauth] 2026-07-01T17:34:38.069517-05:00 claude-cloud sshd[1141039]: Disconnected from authenticating user root 58.186.20.143 port 59782 [preauth] 2026-07-01T17:34:47.537749-05:00 claude-cloud sshd[1141072]: Invalid user test2 from 183.36.126.68 port 48212 2026-07-01T17:34:47.754315-05:00 claude-cloud sshd[1141072]: Received disconnect from 183.36.126.68 port 48212:11: Bye Bye [preauth] 2026-07-01T17:34:47.754598-05:00 claude-cloud sshd[1141072]: Disconnected from invalid user test2 183.36.126.68 port 48212 [preauth] 2026-07-01T17:34:48.498424-05:00 claude-cloud sshd[1141074]: Received disconnect from 160.251.101.169 port 59608:11: Bye Bye [preauth] 2026-07-01T17:34:48.498893-05:00 claude-cloud sshd[1141074]: Disconnected from authenticating user root 160.251.101.169 port 59608 [preauth] 2026-07-01T17:34:55.761874-05:00 claude-cloud sshd[1141112]: Received disconnect from 95.111.246.23 port 46450:11: Bye Bye [preauth] 2026-07-01T17:34:55.762544-05:00 claude-cloud sshd[1141112]: Disconnected from authenticating user root 95.111.246.23 port 46450 [preauth] 2026-07-01T17:34:58.287491-05:00 claude-cloud sshd[1141123]: Invalid user binance from 45.148.10.183 port 45034 2026-07-01T17:34:58.301746-05:00 claude-cloud sshd[1141123]: Connection closed by invalid user binance 45.148.10.183 port 45034 [preauth] 2026-07-01T17:35:01.363335-05:00 claude-cloud CRON[1141130]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T17:35:01.372132-05:00 claude-cloud CRON[1141130]: pam_unix(cron:session): session closed for user root 2026-07-01T17:35:04.176626-05:00 claude-cloud sshd[1141140]: Received disconnect from 181.129.41.162 port 51382:11: Bye Bye [preauth] 2026-07-01T17:35:04.176875-05:00 claude-cloud sshd[1141140]: Disconnected from authenticating user root 181.129.41.162 port 51382 [preauth] 2026-07-01T17:35:09.051859-05:00 claude-cloud sshd[1141121]: Received disconnect from 14.103.127.2 port 34572:11: Bye Bye [preauth] 2026-07-01T17:35:09.052915-05:00 claude-cloud sshd[1141121]: Disconnected from authenticating user root 14.103.127.2 port 34572 [preauth] 2026-07-01T17:35:19.288784-05:00 claude-cloud sshd[1141182]: Received disconnect from 120.48.80.70 port 34146:11: Bye Bye [preauth] 2026-07-01T17:35:19.289399-05:00 claude-cloud sshd[1141182]: Disconnected from authenticating user root 120.48.80.70 port 34146 [preauth] 2026-07-01T17:35:26.769671-05:00 claude-cloud sshd[1141206]: Connection closed by authenticating user root 2.57.122.168 port 59924 [preauth] 2026-07-01T17:35:28.226156-05:00 claude-cloud sshd[1141211]: Received disconnect from 165.154.254.143 port 32816:11: Bye Bye [preauth] 2026-07-01T17:35:28.226586-05:00 claude-cloud sshd[1141211]: Disconnected from authenticating user root 165.154.254.143 port 32816 [preauth] 2026-07-01T17:35:47.115819-05:00 claude-cloud systemd-logind[853]: New session c5768 of user claude. 2026-07-01T17:35:47.394947-05:00 claude-cloud systemd-logind[853]: Session c5768 logged out. Waiting for processes to exit. 2026-07-01T17:35:47.397222-05:00 claude-cloud systemd-logind[853]: Removed session c5768. 2026-07-01T17:36:27.068953-05:00 claude-cloud sshd[1141416]: Connection closed by authenticating user root 27.71.230.31 port 55844 [preauth] 2026-07-01T17:36:30.807637-05:00 claude-cloud sshd[1141470]: Received disconnect from 181.188.176.242 port 40240:11: Bye Bye [preauth] 2026-07-01T17:36:30.808070-05:00 claude-cloud sshd[1141470]: Disconnected from authenticating user root 181.188.176.242 port 40240 [preauth] 2026-07-01T17:36:33.989986-05:00 claude-cloud sshd[1141472]: Received disconnect from 160.251.101.169 port 44038:11: Bye Bye [preauth] 2026-07-01T17:36:33.990789-05:00 claude-cloud sshd[1141472]: Disconnected from authenticating user root 160.251.101.169 port 44038 [preauth] 2026-07-01T17:36:49.653408-05:00 claude-cloud sshd[1141509]: Received disconnect from 58.186.20.143 port 40408:11: Bye Bye [preauth] 2026-07-01T17:36:49.654051-05:00 claude-cloud sshd[1141509]: Disconnected from authenticating user root 58.186.20.143 port 40408 [preauth] 2026-07-01T17:36:49.774937-05:00 claude-cloud sshd[1141523]: Received disconnect from 95.111.246.23 port 51722:11: Bye Bye [preauth] 2026-07-01T17:36:49.775204-05:00 claude-cloud sshd[1141523]: Disconnected from authenticating user root 95.111.246.23 port 51722 [preauth] 2026-07-01T17:36:57.952129-05:00 claude-cloud sshd[1141457]: Connection closed by 120.48.80.70 port 47558 [preauth] 2026-07-01T17:37:06.529742-05:00 claude-cloud sshd[1141568]: Received disconnect from 165.154.254.143 port 55056:11: Bye Bye [preauth] 2026-07-01T17:37:06.530055-05:00 claude-cloud sshd[1141568]: Disconnected from authenticating user root 165.154.254.143 port 55056 [preauth] 2026-07-01T17:37:31.853010-05:00 claude-cloud sshd[1141646]: Connection closed by authenticating user root 2.57.122.168 port 34674 [preauth] 2026-07-01T17:37:33.703088-05:00 claude-cloud sshd[1141645]: Connection closed by authenticating user root 45.198.224.46 port 58502 [preauth] 2026-07-01T17:38:00.646695-05:00 claude-cloud sshd[1141746]: Invalid user trader from 45.148.10.183 port 37694 2026-07-01T17:38:00.660003-05:00 claude-cloud sshd[1141746]: Connection closed by invalid user trader 45.148.10.183 port 37694 [preauth] 2026-07-01T17:38:01.105539-05:00 claude-cloud sshd[1141737]: Invalid user ubuntu from 14.103.127.2 port 39688 2026-07-01T17:38:01.299269-05:00 claude-cloud sshd[1141737]: Received disconnect from 14.103.127.2 port 39688:11: Bye Bye [preauth] 2026-07-01T17:38:01.299725-05:00 claude-cloud sshd[1141737]: Disconnected from invalid user ubuntu 14.103.127.2 port 39688 [preauth] 2026-07-01T17:38:22.510260-05:00 claude-cloud sshd[1141807]: Received disconnect from 160.251.101.169 port 35430:11: Bye Bye [preauth] 2026-07-01T17:38:22.511093-05:00 claude-cloud sshd[1141807]: Disconnected from authenticating user root 160.251.101.169 port 35430 [preauth] 2026-07-01T17:38:44.440734-05:00 claude-cloud sshd[1141876]: Received disconnect from 181.188.176.242 port 54874:11: Bye Bye [preauth] 2026-07-01T17:38:44.441188-05:00 claude-cloud sshd[1141876]: Disconnected from authenticating user root 181.188.176.242 port 54874 [preauth] 2026-07-01T17:38:45.638128-05:00 claude-cloud sshd[1141885]: Received disconnect from 95.111.246.23 port 39060:11: Bye Bye [preauth] 2026-07-01T17:38:45.638620-05:00 claude-cloud sshd[1141885]: Disconnected from authenticating user root 95.111.246.23 port 39060 [preauth] 2026-07-01T17:38:48.519818-05:00 claude-cloud sshd[1141890]: Invalid user admin from 2.57.121.25 port 38210 2026-07-01T17:38:48.547144-05:00 claude-cloud sshd[1141890]: Connection closed by invalid user admin 2.57.121.25 port 38210 [preauth] 2026-07-01T17:38:51.525102-05:00 claude-cloud sshd[1141897]: Invalid user elasticsearch from 165.154.254.143 port 42294 2026-07-01T17:38:51.714390-05:00 claude-cloud sshd[1141897]: Received disconnect from 165.154.254.143 port 42294:11: Bye Bye [preauth] 2026-07-01T17:38:51.714893-05:00 claude-cloud sshd[1141897]: Disconnected from invalid user elasticsearch 165.154.254.143 port 42294 [preauth] 2026-07-01T17:39:00.618397-05:00 claude-cloud sshd[1141925]: Received disconnect from 14.103.123.19 port 39562:11: Bye Bye [preauth] 2026-07-01T17:39:00.618755-05:00 claude-cloud sshd[1141925]: Disconnected from authenticating user root 14.103.123.19 port 39562 [preauth] 2026-07-01T17:39:10.870762-05:00 claude-cloud sshd[1141946]: Received disconnect from 58.186.20.143 port 49284:11: Bye Bye [preauth] 2026-07-01T17:39:10.871873-05:00 claude-cloud sshd[1141946]: Disconnected from authenticating user root 58.186.20.143 port 49284 [preauth] 2026-07-01T17:39:49.201498-05:00 claude-cloud sshd[1142068]: Connection closed by authenticating user root 2.57.122.168 port 37656 [preauth] 2026-07-01T17:40:11.072668-05:00 claude-cloud sshd[1142122]: Received disconnect from 160.251.101.169 port 54966:11: Bye Bye [preauth] 2026-07-01T17:40:11.073026-05:00 claude-cloud sshd[1142122]: Disconnected from authenticating user root 160.251.101.169 port 54966 [preauth] 2026-07-01T17:40:27.991153-05:00 claude-cloud sshd[1142181]: Received disconnect from 165.154.254.143 port 60290:11: Bye Bye [preauth] 2026-07-01T17:40:27.991682-05:00 claude-cloud sshd[1142181]: Disconnected from authenticating user root 165.154.254.143 port 60290 [preauth] 2026-07-01T17:40:39.498273-05:00 claude-cloud sshd[1142209]: Invalid user user from 95.111.246.23 port 46050 2026-07-01T17:40:39.520082-05:00 claude-cloud sshd[1142209]: Received disconnect from 95.111.246.23 port 46050:11: Bye Bye [preauth] 2026-07-01T17:40:39.520452-05:00 claude-cloud sshd[1142209]: Disconnected from invalid user user 95.111.246.23 port 46050 [preauth] 2026-07-01T17:40:51.605921-05:00 claude-cloud systemd-logind[853]: New session c5769 of user claude. 2026-07-01T17:40:51.905612-05:00 claude-cloud systemd-logind[853]: Session c5769 logged out. Waiting for processes to exit. 2026-07-01T17:40:51.906924-05:00 claude-cloud systemd-logind[853]: Removed session c5769. 2026-07-01T17:40:52.208312-05:00 claude-cloud sshd[1142256]: Received disconnect from 120.48.80.70 port 46514:11: Bye Bye [preauth] 2026-07-01T17:40:52.208852-05:00 claude-cloud sshd[1142256]: Disconnected from authenticating user root 120.48.80.70 port 46514 [preauth] 2026-07-01T17:40:54.470778-05:00 claude-cloud sshd[1142280]: Received disconnect from 181.188.176.242 port 56384:11: Bye Bye [preauth] 2026-07-01T17:40:54.471398-05:00 claude-cloud sshd[1142280]: Disconnected from authenticating user root 181.188.176.242 port 56384 [preauth] 2026-07-01T17:41:04.871198-05:00 claude-cloud sshd[1142306]: Invalid user trading from 45.148.10.183 port 38378 2026-07-01T17:41:04.884530-05:00 claude-cloud sshd[1142306]: Connection closed by invalid user trading 45.148.10.183 port 38378 [preauth] 2026-07-01T17:41:27.799477-05:00 claude-cloud sshd[1142376]: Received disconnect from 58.186.20.143 port 58140:11: Bye Bye [preauth] 2026-07-01T17:41:27.799791-05:00 claude-cloud sshd[1142376]: Disconnected from authenticating user root 58.186.20.143 port 58140 [preauth] 2026-07-01T17:41:53.959256-05:00 claude-cloud sshd[1142472]: Received disconnect from 160.251.101.169 port 50330:11: Bye Bye [preauth] 2026-07-01T17:41:53.959973-05:00 claude-cloud sshd[1142472]: Disconnected from authenticating user root 160.251.101.169 port 50330 [preauth] 2026-07-01T17:41:59.351628-05:00 claude-cloud sshd[1142493]: Invalid user ubuntu from 165.154.254.143 port 43188 2026-07-01T17:41:59.541512-05:00 claude-cloud sshd[1142493]: Received disconnect from 165.154.254.143 port 43188:11: Bye Bye [preauth] 2026-07-01T17:41:59.541897-05:00 claude-cloud sshd[1142493]: Disconnected from invalid user ubuntu 165.154.254.143 port 43188 [preauth] 2026-07-01T17:42:04.492541-05:00 claude-cloud sshd[1142500]: Connection closed by 120.48.80.70 port 60208 [preauth] 2026-07-01T17:42:07.153264-05:00 claude-cloud sshd[1142513]: Connection closed by authenticating user root 2.57.122.168 port 40628 [preauth] 2026-07-01T17:42:22.451952-05:00 claude-cloud sshd[1142555]: Received disconnect from 14.103.123.19 port 60974:11: Bye Bye [preauth] 2026-07-01T17:42:22.452349-05:00 claude-cloud sshd[1142555]: Disconnected from authenticating user root 14.103.123.19 port 60974 [preauth] 2026-07-01T17:42:30.656121-05:00 claude-cloud sshd[1142523]: Connection closed by authenticating user root 27.71.230.31 port 42274 [preauth] 2026-07-01T17:42:32.248541-05:00 claude-cloud sshd[1142584]: Received disconnect from 95.111.246.23 port 33304:11: Bye Bye [preauth] 2026-07-01T17:42:32.248876-05:00 claude-cloud sshd[1142584]: Disconnected from authenticating user root 95.111.246.23 port 33304 [preauth] 2026-07-01T17:43:07.331565-05:00 claude-cloud sshd[1142667]: Received disconnect from 181.188.176.242 port 39366:11: Bye Bye [preauth] 2026-07-01T17:43:07.333969-05:00 claude-cloud sshd[1142667]: Disconnected from authenticating user root 181.188.176.242 port 39366 [preauth] 2026-07-01T17:43:33.161660-05:00 claude-cloud sshd[1142738]: Invalid user ubuntu from 165.154.254.143 port 47052 2026-07-01T17:43:33.359755-05:00 claude-cloud sshd[1142738]: Received disconnect from 165.154.254.143 port 47052:11: Bye Bye [preauth] 2026-07-01T17:43:33.360112-05:00 claude-cloud sshd[1142738]: Disconnected from invalid user ubuntu 165.154.254.143 port 47052 [preauth] 2026-07-01T17:43:40.258795-05:00 claude-cloud sshd[1142761]: Received disconnect from 160.251.101.169 port 46464:11: Bye Bye [preauth] 2026-07-01T17:43:40.259526-05:00 claude-cloud sshd[1142761]: Disconnected from authenticating user root 160.251.101.169 port 46464 [preauth] 2026-07-01T17:43:41.499419-05:00 claude-cloud sshd[1142770]: Invalid user test2 from 58.186.20.143 port 38766 2026-07-01T17:43:41.686716-05:00 claude-cloud sshd[1142770]: Received disconnect from 58.186.20.143 port 38766:11: Bye Bye [preauth] 2026-07-01T17:43:41.687101-05:00 claude-cloud sshd[1142770]: Disconnected from invalid user test2 58.186.20.143 port 38766 [preauth] 2026-07-01T17:44:06.600887-05:00 claude-cloud sshd[1142854]: Received disconnect from 14.103.127.2 port 49450:11: Bye Bye [preauth] 2026-07-01T17:44:06.601553-05:00 claude-cloud sshd[1142854]: Disconnected from authenticating user root 14.103.127.2 port 49450 [preauth] 2026-07-01T17:44:12.969174-05:00 claude-cloud sshd[1142885]: Invalid user ubuntu from 45.148.10.183 port 50612 2026-07-01T17:44:12.983404-05:00 claude-cloud sshd[1142885]: Connection closed by invalid user ubuntu 45.148.10.183 port 50612 [preauth] 2026-07-01T17:44:14.585884-05:00 claude-cloud sshd[1142884]: Connection closed by authenticating user root 2.57.122.168 port 43594 [preauth] 2026-07-01T17:44:27.976737-05:00 claude-cloud sshd[1142927]: Received disconnect from 95.111.246.23 port 45480:11: Bye Bye [preauth] 2026-07-01T17:44:27.977043-05:00 claude-cloud sshd[1142927]: Disconnected from authenticating user root 95.111.246.23 port 45480 [preauth] 2026-07-01T17:44:53.137053-05:00 claude-cloud sshd[1143006]: error: kex_exchange_identification: read: Connection reset by peer 2026-07-01T17:44:53.137910-05:00 claude-cloud sshd[1143006]: Connection reset by 195.178.110.137 port 58764 2026-07-01T17:45:01.388539-05:00 claude-cloud CRON[1143029]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T17:45:01.395116-05:00 claude-cloud CRON[1143029]: pam_unix(cron:session): session closed for user root 2026-07-01T17:45:11.422947-05:00 claude-cloud sshd[1143048]: Received disconnect from 165.154.254.143 port 43552:11: Bye Bye [preauth] 2026-07-01T17:45:11.423358-05:00 claude-cloud sshd[1143048]: Disconnected from authenticating user root 165.154.254.143 port 43552 [preauth] 2026-07-01T17:45:12.014971-05:00 claude-cloud sshd[1143050]: Invalid user steam1 from 115.190.197.138 port 38138 2026-07-01T17:45:12.159159-05:00 claude-cloud sshd[1143050]: Received disconnect from 115.190.197.138 port 38138:11: Bye Bye [preauth] 2026-07-01T17:45:12.159538-05:00 claude-cloud sshd[1143050]: Disconnected from invalid user steam1 115.190.197.138 port 38138 [preauth] 2026-07-01T17:45:21.200618-05:00 claude-cloud sshd[1143075]: Received disconnect from 181.188.176.242 port 49488:11: Bye Bye [preauth] 2026-07-01T17:45:21.201151-05:00 claude-cloud sshd[1143075]: Disconnected from authenticating user root 181.188.176.242 port 49488 [preauth] 2026-07-01T17:45:28.645903-05:00 claude-cloud sshd[1143099]: Invalid user docker from 160.251.101.169 port 36300 2026-07-01T17:45:28.925502-05:00 claude-cloud sshd[1143099]: Received disconnect from 160.251.101.169 port 36300:11: Bye Bye [preauth] 2026-07-01T17:45:28.925774-05:00 claude-cloud sshd[1143099]: Disconnected from invalid user docker 160.251.101.169 port 36300 [preauth] 2026-07-01T17:45:56.113390-05:00 claude-cloud systemd-logind[853]: New session c5770 of user claude. 2026-07-01T17:45:56.394612-05:00 claude-cloud systemd-logind[853]: Session c5770 logged out. Waiting for processes to exit. 2026-07-01T17:45:56.396843-05:00 claude-cloud systemd-logind[853]: Removed session c5770. 2026-07-01T17:46:04.968389-05:00 claude-cloud sshd[1143269]: Invalid user steam1 from 58.186.20.143 port 47624 2026-07-01T17:46:05.160539-05:00 claude-cloud sshd[1143269]: Received disconnect from 58.186.20.143 port 47624:11: Bye Bye [preauth] 2026-07-01T17:46:05.160893-05:00 claude-cloud sshd[1143269]: Disconnected from invalid user steam1 58.186.20.143 port 47624 [preauth] 2026-07-01T17:46:21.673060-05:00 claude-cloud sshd[1143333]: Invalid user lighthouse from 95.111.246.23 port 36202 2026-07-01T17:46:21.708719-05:00 claude-cloud sshd[1143333]: Received disconnect from 95.111.246.23 port 36202:11: Bye Bye [preauth] 2026-07-01T17:46:21.708896-05:00 claude-cloud sshd[1143333]: Disconnected from invalid user lighthouse 95.111.246.23 port 36202 [preauth] 2026-07-01T17:46:27.663514-05:00 claude-cloud sshd[1143347]: Connection closed by authenticating user root 2.57.122.168 port 46506 [preauth] 2026-07-01T17:46:47.190998-05:00 claude-cloud sshd[1143398]: Received disconnect from 165.154.254.143 port 43996:11: Bye Bye [preauth] 2026-07-01T17:46:47.191502-05:00 claude-cloud sshd[1143398]: Disconnected from authenticating user root 165.154.254.143 port 43996 [preauth] 2026-07-01T17:46:49.083168-05:00 claude-cloud sshd[1143410]: Received disconnect from 181.129.41.162 port 55133:11: Bye Bye [preauth] 2026-07-01T17:46:49.083775-05:00 claude-cloud sshd[1143410]: Disconnected from authenticating user root 181.129.41.162 port 55133 [preauth] 2026-07-01T17:47:10.404474-05:00 claude-cloud sshd[1143474]: Invalid user dev from 14.103.127.2 port 53206 2026-07-01T17:47:10.598157-05:00 claude-cloud sshd[1143474]: Received disconnect from 14.103.127.2 port 53206:11: Bye Bye [preauth] 2026-07-01T17:47:10.598449-05:00 claude-cloud sshd[1143474]: Disconnected from invalid user dev 14.103.127.2 port 53206 [preauth] 2026-07-01T17:47:12.636617-05:00 claude-cloud sshd[1143476]: Received disconnect from 160.251.101.169 port 58160:11: Bye Bye [preauth] 2026-07-01T17:47:12.636834-05:00 claude-cloud sshd[1143476]: Disconnected from authenticating user root 160.251.101.169 port 58160 [preauth] 2026-07-01T17:47:25.336519-05:00 claude-cloud sshd[1143524]: Invalid user bitcoin from 45.148.10.183 port 46520 2026-07-01T17:47:25.349329-05:00 claude-cloud sshd[1143524]: Connection closed by invalid user bitcoin 45.148.10.183 port 46520 [preauth] 2026-07-01T17:47:28.028292-05:00 claude-cloud sshd[1143520]: Invalid user ubuntu from 45.198.224.46 port 35872 2026-07-01T17:47:29.030383-05:00 claude-cloud sshd[1143520]: Connection closed by invalid user ubuntu 45.198.224.46 port 35872 [preauth] 2026-07-01T17:47:34.569396-05:00 claude-cloud sshd[1143546]: Received disconnect from 181.188.176.242 port 49630:11: Bye Bye [preauth] 2026-07-01T17:47:34.569745-05:00 claude-cloud sshd[1143546]: Disconnected from authenticating user root 181.188.176.242 port 49630 [preauth] 2026-07-01T17:48:12.541047-05:00 claude-cloud sshd[1143652]: Received disconnect from 58.186.20.143 port 56482:11: Bye Bye [preauth] 2026-07-01T17:48:12.541937-05:00 claude-cloud sshd[1143652]: Disconnected from authenticating user root 58.186.20.143 port 56482 [preauth] 2026-07-01T17:48:12.550612-05:00 claude-cloud sshd[1143661]: Invalid user testuser from 95.111.246.23 port 39168 2026-07-01T17:48:12.574446-05:00 claude-cloud sshd[1143661]: Received disconnect from 95.111.246.23 port 39168:11: Bye Bye [preauth] 2026-07-01T17:48:12.574745-05:00 claude-cloud sshd[1143661]: Disconnected from invalid user testuser 95.111.246.23 port 39168 [preauth] 2026-07-01T17:48:19.059314-05:00 claude-cloud sshd[1143634]: Connection closed by authenticating user root 27.71.230.31 port 57590 [preauth] 2026-07-01T17:48:19.437625-05:00 claude-cloud sshd[1143678]: Invalid user dev from 165.154.254.143 port 36754 2026-07-01T17:48:19.646884-05:00 claude-cloud sshd[1143678]: Received disconnect from 165.154.254.143 port 36754:11: Bye Bye [preauth] 2026-07-01T17:48:19.647064-05:00 claude-cloud sshd[1143678]: Disconnected from invalid user dev 165.154.254.143 port 36754 [preauth] 2026-07-01T17:48:41.790447-05:00 claude-cloud sshd[1143738]: Connection closed by authenticating user root 2.57.122.168 port 49442 [preauth] 2026-07-01T17:48:54.055653-05:00 claude-cloud sshd[1143778]: Received disconnect from 160.251.101.169 port 39872:11: Bye Bye [preauth] 2026-07-01T17:48:54.057476-05:00 claude-cloud sshd[1143778]: Disconnected from authenticating user root 160.251.101.169 port 39872 [preauth] 2026-07-01T17:49:43.848841-05:00 claude-cloud sshd[1143923]: Invalid user ubuntu from 181.188.176.242 port 51324 2026-07-01T17:49:44.081843-05:00 claude-cloud sshd[1143923]: Received disconnect from 181.188.176.242 port 51324:11: Bye Bye [preauth] 2026-07-01T17:49:44.082217-05:00 claude-cloud sshd[1143923]: Disconnected from invalid user ubuntu 181.188.176.242 port 51324 [preauth] 2026-07-01T17:49:44.511681-05:00 claude-cloud sshd[1143934]: Received disconnect from 181.129.41.162 port 43705:11: Bye Bye [preauth] 2026-07-01T17:49:44.512172-05:00 claude-cloud sshd[1143934]: Disconnected from authenticating user root 181.129.41.162 port 43705 [preauth] 2026-07-01T17:49:58.803757-05:00 claude-cloud sshd[1143993]: Received disconnect from 165.154.254.143 port 49538:11: Bye Bye [preauth] 2026-07-01T17:49:58.806028-05:00 claude-cloud sshd[1143993]: Disconnected from authenticating user root 165.154.254.143 port 49538 [preauth] 2026-07-01T17:50:04.717988-05:00 claude-cloud sshd[1144016]: Invalid user ubuntu from 95.111.246.23 port 38754 2026-07-01T17:50:04.759567-05:00 claude-cloud sshd[1144016]: Received disconnect from 95.111.246.23 port 38754:11: Bye Bye [preauth] 2026-07-01T17:50:04.759940-05:00 claude-cloud sshd[1144016]: Disconnected from invalid user ubuntu 95.111.246.23 port 38754 [preauth] 2026-07-01T17:50:05.216797-05:00 claude-cloud sshd[1144007]: Received disconnect from 14.103.127.2 port 48192:11: Bye Bye [preauth] 2026-07-01T17:50:05.217245-05:00 claude-cloud sshd[1144007]: Disconnected from authenticating user root 14.103.127.2 port 48192 [preauth] 2026-07-01T17:50:23.689177-05:00 claude-cloud sshd[1144063]: Received disconnect from 58.186.20.143 port 37108:11: Bye Bye [preauth] 2026-07-01T17:50:23.689672-05:00 claude-cloud sshd[1144063]: Disconnected from authenticating user root 58.186.20.143 port 37108 [preauth] 2026-07-01T17:50:40.780804-05:00 claude-cloud sshd[1144102]: Invalid user oracle from 160.251.101.169 port 33876 2026-07-01T17:50:41.052342-05:00 claude-cloud sshd[1144102]: Received disconnect from 160.251.101.169 port 33876:11: Bye Bye [preauth] 2026-07-01T17:50:41.052561-05:00 claude-cloud sshd[1144102]: Disconnected from invalid user oracle 160.251.101.169 port 33876 [preauth] 2026-07-01T17:50:57.288002-05:00 claude-cloud sshd[1144152]: Connection closed by authenticating user root 2.57.122.168 port 52392 [preauth] 2026-07-01T17:51:00.559466-05:00 claude-cloud systemd-logind[853]: New session c5771 of user claude. 2026-07-01T17:51:00.850888-05:00 claude-cloud systemd-logind[853]: Session c5771 logged out. Waiting for processes to exit. 2026-07-01T17:51:00.852721-05:00 claude-cloud systemd-logind[853]: Removed session c5771. 2026-07-01T17:51:35.967882-05:00 claude-cloud sshd[1144269]: Received disconnect from 165.154.254.143 port 40788:11: Bye Bye [preauth] 2026-07-01T17:51:35.968222-05:00 claude-cloud sshd[1144269]: Disconnected from authenticating user root 165.154.254.143 port 40788 [preauth] 2026-07-01T17:51:59.054780-05:00 claude-cloud sshd[1144353]: Received disconnect from 181.188.176.242 port 44822:11: Bye Bye [preauth] 2026-07-01T17:51:59.056412-05:00 claude-cloud sshd[1144353]: Disconnected from authenticating user root 181.188.176.242 port 44822 [preauth] 2026-07-01T17:51:59.929240-05:00 claude-cloud sshd[1144367]: Received disconnect from 95.111.246.23 port 51704:11: Bye Bye [preauth] 2026-07-01T17:51:59.929477-05:00 claude-cloud sshd[1144367]: Disconnected from authenticating user root 95.111.246.23 port 51704 [preauth] 2026-07-01T17:52:26.592691-05:00 claude-cloud sshd[1144434]: Invalid user ubuntu from 14.103.123.19 port 14512 2026-07-01T17:52:26.768148-05:00 claude-cloud sshd[1144434]: Received disconnect from 14.103.123.19 port 14512:11: Bye Bye [preauth] 2026-07-01T17:52:26.768514-05:00 claude-cloud sshd[1144434]: Disconnected from invalid user ubuntu 14.103.123.19 port 14512 [preauth] 2026-07-01T17:52:27.372533-05:00 claude-cloud sshd[1144446]: Invalid user ubuntu from 160.251.101.169 port 39068 2026-07-01T17:52:27.654115-05:00 claude-cloud sshd[1144446]: Received disconnect from 160.251.101.169 port 39068:11: Bye Bye [preauth] 2026-07-01T17:52:27.654527-05:00 claude-cloud sshd[1144446]: Disconnected from invalid user ubuntu 160.251.101.169 port 39068 [preauth] 2026-07-01T17:52:35.250614-05:00 claude-cloud sshd[1144470]: Received disconnect from 181.129.41.162 port 60508:11: Bye Bye [preauth] 2026-07-01T17:52:35.251748-05:00 claude-cloud sshd[1144470]: Disconnected from authenticating user root 181.129.41.162 port 60508 [preauth] 2026-07-01T17:52:37.168486-05:00 claude-cloud sshd[1144479]: Received disconnect from 58.186.20.143 port 45966:11: Bye Bye [preauth] 2026-07-01T17:52:37.168741-05:00 claude-cloud sshd[1144479]: Disconnected from authenticating user root 58.186.20.143 port 45966 [preauth] 2026-07-01T17:53:02.772020-05:00 claude-cloud sshd[1144546]: Received disconnect from 14.103.127.2 port 51812:11: Bye Bye [preauth] 2026-07-01T17:53:02.772411-05:00 claude-cloud sshd[1144546]: Disconnected from authenticating user root 14.103.127.2 port 51812 [preauth] 2026-07-01T17:53:11.652784-05:00 claude-cloud sshd[1144558]: Connection closed by authenticating user root 2.57.122.168 port 55366 [preauth] 2026-07-01T17:53:14.702787-05:00 claude-cloud sshd[1144575]: Received disconnect from 165.154.254.143 port 58592:11: Bye Bye [preauth] 2026-07-01T17:53:14.703319-05:00 claude-cloud sshd[1144575]: Disconnected from authenticating user root 165.154.254.143 port 58592 [preauth] 2026-07-01T17:53:52.509053-05:00 claude-cloud sshd[1144708]: Connection closed by authenticating user root 45.148.10.183 port 43618 [preauth] 2026-07-01T17:53:53.401612-05:00 claude-cloud sshd[1144710]: Invalid user admin from 95.111.246.23 port 56342 2026-07-01T17:53:53.426434-05:00 claude-cloud sshd[1144710]: Received disconnect from 95.111.246.23 port 56342:11: Bye Bye [preauth] 2026-07-01T17:53:53.426743-05:00 claude-cloud sshd[1144710]: Disconnected from invalid user admin 95.111.246.23 port 56342 [preauth] 2026-07-01T17:54:09.954739-05:00 claude-cloud sshd[1144743]: Received disconnect from 181.188.176.242 port 36362:11: Bye Bye [preauth] 2026-07-01T17:54:09.955156-05:00 claude-cloud sshd[1144743]: Disconnected from authenticating user root 181.188.176.242 port 36362 [preauth] 2026-07-01T17:54:12.001406-05:00 claude-cloud sshd[1144748]: Received disconnect from 160.251.101.169 port 35976:11: Bye Bye [preauth] 2026-07-01T17:54:12.001770-05:00 claude-cloud sshd[1144748]: Disconnected from authenticating user root 160.251.101.169 port 35976 [preauth] 2026-07-01T17:54:13.333409-05:00 claude-cloud sshd[1144727]: Connection closed by authenticating user root 27.71.230.31 port 34052 [preauth] 2026-07-01T17:54:30.166864-05:00 claude-cloud sshd[1144819]: Invalid user jaimie from 2.57.121.112 port 6100 2026-07-01T17:54:30.192073-05:00 claude-cloud sshd[1144819]: Connection closed by invalid user jaimie 2.57.121.112 port 6100 [preauth] 2026-07-01T17:54:47.786738-05:00 claude-cloud sshd[1144863]: Invalid user admin from 58.186.20.143 port 54822 2026-07-01T17:54:47.977616-05:00 claude-cloud sshd[1144863]: Received disconnect from 58.186.20.143 port 54822:11: Bye Bye [preauth] 2026-07-01T17:54:47.977828-05:00 claude-cloud sshd[1144863]: Disconnected from invalid user admin 58.186.20.143 port 54822 [preauth] 2026-07-01T17:55:01.409687-05:00 claude-cloud CRON[1144909]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T17:55:01.415773-05:00 claude-cloud CRON[1144909]: pam_unix(cron:session): session closed for user root 2026-07-01T17:55:20.881753-05:00 claude-cloud sshd[1144969]: Received disconnect from 181.129.41.162 port 49079:11: Bye Bye [preauth] 2026-07-01T17:55:20.882178-05:00 claude-cloud sshd[1144969]: Disconnected from authenticating user root 181.129.41.162 port 49079 [preauth] 2026-07-01T17:55:47.117498-05:00 claude-cloud sshd[1145108]: Received disconnect from 95.111.246.23 port 53062:11: Bye Bye [preauth] 2026-07-01T17:55:47.118269-05:00 claude-cloud sshd[1145108]: Disconnected from authenticating user root 95.111.246.23 port 53062 [preauth] 2026-07-01T17:55:51.208782-05:00 claude-cloud sshd[1145030]: Connection closed by 14.103.123.19 port 56916 [preauth] 2026-07-01T17:55:55.748208-05:00 claude-cloud sshd[1145135]: Received disconnect from 160.251.101.169 port 42194:11: Bye Bye [preauth] 2026-07-01T17:55:55.748463-05:00 claude-cloud sshd[1145135]: Disconnected from authenticating user root 160.251.101.169 port 42194 [preauth] 2026-07-01T17:56:01.170942-05:00 claude-cloud sshd[1145153]: Invalid user elasticsearch from 14.103.127.2 port 47322 2026-07-01T17:56:01.370353-05:00 claude-cloud sshd[1145153]: Received disconnect from 14.103.127.2 port 47322:11: Bye Bye [preauth] 2026-07-01T17:56:01.370541-05:00 claude-cloud sshd[1145153]: Disconnected from invalid user elasticsearch 14.103.127.2 port 47322 [preauth] 2026-07-01T17:56:04.523159-05:00 claude-cloud systemd-logind[853]: New session c5772 of user claude. 2026-07-01T17:56:04.803948-05:00 claude-cloud systemd-logind[853]: Session c5772 logged out. Waiting for processes to exit. 2026-07-01T17:56:04.806200-05:00 claude-cloud systemd-logind[853]: Removed session c5772. 2026-07-01T17:56:25.239784-05:00 claude-cloud sshd[1145224]: Invalid user dev from 181.188.176.242 port 57080 2026-07-01T17:56:25.475177-05:00 claude-cloud sshd[1145224]: Received disconnect from 181.188.176.242 port 57080:11: Bye Bye [preauth] 2026-07-01T17:56:25.475515-05:00 claude-cloud sshd[1145224]: Disconnected from invalid user dev 181.188.176.242 port 57080 [preauth] 2026-07-01T17:56:59.307263-05:00 claude-cloud sshd[1145325]: Invalid user trader from 45.148.10.183 port 41652 2026-07-01T17:56:59.320438-05:00 claude-cloud sshd[1145325]: Connection closed by invalid user trader 45.148.10.183 port 41652 [preauth] 2026-07-01T17:57:08.513678-05:00 claude-cloud sshd[1145352]: Received disconnect from 58.186.20.143 port 35446:11: Bye Bye [preauth] 2026-07-01T17:57:08.514651-05:00 claude-cloud sshd[1145352]: Disconnected from authenticating user root 58.186.20.143 port 35446 [preauth] 2026-07-01T17:57:52.796310-05:00 claude-cloud sshd[1145482]: Connection closed by authenticating user root 45.198.224.46 port 52078 [preauth] 2026-07-01T17:58:12.488263-05:00 claude-cloud sshd[1145546]: Received disconnect from 181.129.41.162 port 37654:11: Bye Bye [preauth] 2026-07-01T17:58:12.489239-05:00 claude-cloud sshd[1145546]: Disconnected from authenticating user root 181.129.41.162 port 37654 [preauth] 2026-07-01T17:58:43.919834-05:00 claude-cloud sshd[1145622]: Received disconnect from 181.188.176.242 port 57132:11: Bye Bye [preauth] 2026-07-01T17:58:43.923323-05:00 claude-cloud sshd[1145622]: Disconnected from authenticating user root 181.188.176.242 port 57132 [preauth] 2026-07-01T17:59:01.251907-05:00 claude-cloud sshd[1145667]: Received disconnect from 14.103.127.2 port 51680:11: Bye Bye [preauth] 2026-07-01T17:59:01.252871-05:00 claude-cloud sshd[1145667]: Disconnected from authenticating user root 14.103.127.2 port 51680 [preauth] 2026-07-01T17:59:25.961802-05:00 claude-cloud sshd[1145750]: Invalid user deployer from 58.186.20.143 port 44310 2026-07-01T17:59:26.155573-05:00 claude-cloud sshd[1145750]: Received disconnect from 58.186.20.143 port 44310:11: Bye Bye [preauth] 2026-07-01T17:59:26.156019-05:00 claude-cloud sshd[1145750]: Disconnected from invalid user deployer 58.186.20.143 port 44310 [preauth] 2026-07-01T17:59:30.604911-05:00 claude-cloud sshd[1145765]: Connection closed by authenticating user root 45.148.10.121 port 46142 [preauth] 2026-07-01T18:00:08.736849-05:00 claude-cloud sshd[1145849]: Connection closed by authenticating user root 27.71.230.31 port 48184 [preauth] 2026-07-01T18:00:09.123253-05:00 claude-cloud sshd[1145895]: Invalid user trader from 45.148.10.183 port 34276 2026-07-01T18:00:09.136748-05:00 claude-cloud sshd[1145895]: Connection closed by invalid user trader 45.148.10.183 port 34276 [preauth] 2026-07-01T18:00:53.250947-05:00 claude-cloud sshd[1146023]: Invalid user ubuntu from 181.188.176.242 port 46090 2026-07-01T18:00:53.477209-05:00 claude-cloud sshd[1146023]: Received disconnect from 181.188.176.242 port 46090:11: Bye Bye [preauth] 2026-07-01T18:00:53.477580-05:00 claude-cloud sshd[1146023]: Disconnected from invalid user ubuntu 181.188.176.242 port 46090 [preauth] 2026-07-01T18:00:54.293019-05:00 claude-cloud sshd[1146027]: Received disconnect from 181.129.41.162 port 54456:11: Bye Bye [preauth] 2026-07-01T18:00:54.293660-05:00 claude-cloud sshd[1146027]: Disconnected from authenticating user root 181.129.41.162 port 54456 [preauth] 2026-07-01T18:01:08.805758-05:00 claude-cloud systemd-logind[853]: New session c5773 of user claude. 2026-07-01T18:01:09.129690-05:00 claude-cloud systemd-logind[853]: Session c5773 logged out. Waiting for processes to exit. 2026-07-01T18:01:09.131221-05:00 claude-cloud systemd-logind[853]: Removed session c5773. 2026-07-01T18:01:40.192352-05:00 claude-cloud sshd[1146150]: Received disconnect from 58.186.20.143 port 53168:11: Bye Bye [preauth] 2026-07-01T18:01:40.193067-05:00 claude-cloud sshd[1146150]: Disconnected from authenticating user root 58.186.20.143 port 53168 [preauth] 2026-07-01T18:02:03.618877-05:00 claude-cloud sshd[1146209]: Connection closed by 14.103.127.2 port 44998 [preauth] 2026-07-01T18:03:05.210318-05:00 claude-cloud sshd[1146409]: Received disconnect from 181.188.176.242 port 38034:11: Bye Bye [preauth] 2026-07-01T18:03:05.213439-05:00 claude-cloud sshd[1146409]: Disconnected from authenticating user root 181.188.176.242 port 38034 [preauth] 2026-07-01T18:03:16.381397-05:00 claude-cloud sshd[1146451]: Invalid user trader from 45.148.10.183 port 47322 2026-07-01T18:03:16.395658-05:00 claude-cloud sshd[1146451]: Connection closed by invalid user trader 45.148.10.183 port 47322 [preauth] 2026-07-01T18:03:38.171506-05:00 claude-cloud sshd[1146501]: Received disconnect from 181.129.41.162 port 43023:11: Bye Bye [preauth] 2026-07-01T18:03:38.178463-05:00 claude-cloud sshd[1146501]: Disconnected from authenticating user root 181.129.41.162 port 43023 [preauth] 2026-07-01T18:04:53.513861-05:00 claude-cloud sshd[1146724]: Received disconnect from 14.103.127.2 port 50092:11: Bye Bye [preauth] 2026-07-01T18:04:53.515367-05:00 claude-cloud sshd[1146724]: Disconnected from authenticating user root 14.103.127.2 port 50092 [preauth] 2026-07-01T18:05:01.426548-05:00 claude-cloud CRON[1146750]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T18:05:01.432051-05:00 claude-cloud CRON[1146750]: pam_unix(cron:session): session closed for user root 2026-07-01T18:05:58.898983-05:00 claude-cloud sshd[1146902]: Connection closed by authenticating user root 27.71.230.31 port 43196 [preauth] 2026-07-01T18:06:13.036734-05:00 claude-cloud systemd-logind[853]: New session c5774 of user claude. 2026-07-01T18:06:13.298003-05:00 claude-cloud systemd-logind[853]: Session c5774 logged out. Waiting for processes to exit. 2026-07-01T18:06:13.301044-05:00 claude-cloud systemd-logind[853]: Removed session c5774. 2026-07-01T18:06:22.551371-05:00 claude-cloud sshd[1147014]: Invalid user test from 181.129.41.162 port 59822 2026-07-01T18:06:22.733515-05:00 claude-cloud sshd[1147014]: Received disconnect from 181.129.41.162 port 59822:11: Bye Bye [preauth] 2026-07-01T18:06:22.733825-05:00 claude-cloud sshd[1147014]: Disconnected from invalid user test 181.129.41.162 port 59822 [preauth] 2026-07-01T18:06:30.077916-05:00 claude-cloud sshd[1147037]: Connection closed by authenticating user root 45.148.10.183 port 57580 [preauth] 2026-07-01T18:07:38.586106-05:00 claude-cloud sshd[1147281]: Invalid user from 45.153.34.151 port 45858 2026-07-01T18:07:46.490668-05:00 claude-cloud sshd[1147281]: Connection closed by invalid user 45.153.34.151 port 45858 [preauth] 2026-07-01T18:07:50.606070-05:00 claude-cloud sshd[1147320]: Received disconnect from 14.103.127.2 port 36986:11: Bye Bye [preauth] 2026-07-01T18:07:50.606771-05:00 claude-cloud sshd[1147320]: Disconnected from authenticating user root 14.103.127.2 port 36986 [preauth] 2026-07-01T18:08:08.801108-05:00 claude-cloud sshd[1147359]: Connection closed by authenticating user root 45.198.224.46 port 37066 [preauth] 2026-07-01T18:09:03.345694-05:00 claude-cloud sshd[1147556]: Invalid user user from 181.129.41.162 port 48390 2026-07-01T18:09:03.522710-05:00 claude-cloud sshd[1147556]: Received disconnect from 181.129.41.162 port 48390:11: Bye Bye [preauth] 2026-07-01T18:09:03.522929-05:00 claude-cloud sshd[1147556]: Disconnected from invalid user user 181.129.41.162 port 48390 [preauth] 2026-07-01T18:09:40.792896-05:00 claude-cloud sshd[1147642]: Invalid user exchange from 45.148.10.183 port 54080 2026-07-01T18:09:40.806425-05:00 claude-cloud sshd[1147642]: Connection closed by invalid user exchange 45.148.10.183 port 54080 [preauth] 2026-07-01T18:10:30.560156-05:00 claude-cloud sshd[1147813]: Invalid user test2 from 115.190.197.138 port 22960 2026-07-01T18:10:30.700454-05:00 claude-cloud sshd[1147813]: Received disconnect from 115.190.197.138 port 22960:11: Bye Bye [preauth] 2026-07-01T18:10:30.700724-05:00 claude-cloud sshd[1147813]: Disconnected from invalid user test2 115.190.197.138 port 22960 [preauth] 2026-07-01T18:10:46.242840-05:00 claude-cloud sshd[1147867]: Invalid user ubuntu from 14.103.127.2 port 59774 2026-07-01T18:10:47.050180-05:00 claude-cloud sshd[1147867]: Received disconnect from 14.103.127.2 port 59774:11: Bye Bye [preauth] 2026-07-01T18:10:47.050440-05:00 claude-cloud sshd[1147867]: Disconnected from invalid user ubuntu 14.103.127.2 port 59774 [preauth] 2026-07-01T18:11:17.140234-05:00 claude-cloud systemd-logind[853]: New session c5775 of user claude. 2026-07-01T18:11:17.426860-05:00 claude-cloud systemd-logind[853]: Session c5775 logged out. Waiting for processes to exit. 2026-07-01T18:11:17.429177-05:00 claude-cloud systemd-logind[853]: Removed session c5775. 2026-07-01T18:11:49.946592-05:00 claude-cloud sshd[1148044]: Connection closed by authenticating user root 27.71.230.31 port 50016 [preauth] 2026-07-01T18:11:50.637055-05:00 claude-cloud sshd[1148068]: Received disconnect from 181.129.41.162 port 36956:11: Bye Bye [preauth] 2026-07-01T18:11:50.637361-05:00 claude-cloud sshd[1148068]: Disconnected from authenticating user root 181.129.41.162 port 36956 [preauth] 2026-07-01T18:12:57.647550-05:00 claude-cloud sshd[1148270]: Invalid user solana from 45.148.10.183 port 44588 2026-07-01T18:12:57.659883-05:00 claude-cloud sshd[1148270]: Connection closed by invalid user solana 45.148.10.183 port 44588 [preauth] 2026-07-01T18:13:22.001958-05:00 claude-cloud sshd[1148344]: Received disconnect from 23.153.216.49 port 14918:11: disconnected by user [preauth] 2026-07-01T18:13:22.003212-05:00 claude-cloud sshd[1148344]: Disconnected from authenticating user root 23.153.216.49 port 14918 [preauth] 2026-07-01T18:13:42.413712-05:00 claude-cloud sshd[1148402]: Received disconnect from 14.103.127.2 port 58090:11: Bye Bye [preauth] 2026-07-01T18:13:42.415121-05:00 claude-cloud sshd[1148402]: Disconnected from authenticating user root 14.103.127.2 port 58090 [preauth] 2026-07-01T18:14:29.101577-05:00 claude-cloud sshd[1148540]: Received disconnect from 181.129.41.162 port 53753:11: Bye Bye [preauth] 2026-07-01T18:14:29.101988-05:00 claude-cloud sshd[1148540]: Disconnected from authenticating user root 181.129.41.162 port 53753 [preauth] 2026-07-01T18:15:01.441977-05:00 claude-cloud CRON[1148666]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T18:15:01.447957-05:00 claude-cloud CRON[1148666]: pam_unix(cron:session): session closed for user root 2026-07-01T18:15:57.846469-05:00 claude-cloud sshd[1148827]: Invalid user sol from 45.148.10.183 port 35942 2026-07-01T18:15:57.859760-05:00 claude-cloud sshd[1148827]: Connection closed by invalid user sol 45.148.10.183 port 35942 [preauth] 2026-07-01T18:16:21.272147-05:00 claude-cloud systemd-logind[853]: New session c5776 of user claude. 2026-07-01T18:16:21.553932-05:00 claude-cloud systemd-logind[853]: Session c5776 logged out. Waiting for processes to exit. 2026-07-01T18:16:21.555954-05:00 claude-cloud systemd-logind[853]: Removed session c5776. 2026-07-01T18:17:01.456097-05:00 claude-cloud CRON[1149108]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T18:17:01.461166-05:00 claude-cloud CRON[1149108]: pam_unix(cron:session): session closed for user root 2026-07-01T18:17:13.654563-05:00 claude-cloud sshd[1149140]: Invalid user es from 181.129.41.162 port 42322 2026-07-01T18:17:13.886824-05:00 claude-cloud sshd[1149140]: Received disconnect from 181.129.41.162 port 42322:11: Bye Bye [preauth] 2026-07-01T18:17:13.887213-05:00 claude-cloud sshd[1149140]: Disconnected from invalid user es 181.129.41.162 port 42322 [preauth] 2026-07-01T18:17:41.376404-05:00 claude-cloud sshd[1149200]: Connection closed by authenticating user root 27.71.230.31 port 50750 [preauth] 2026-07-01T18:17:57.786654-05:00 claude-cloud sshd[1149253]: Connection closed by authenticating user root 45.198.224.46 port 38822 [preauth] 2026-07-01T18:19:01.100143-05:00 claude-cloud sshd[1149456]: Invalid user sol from 45.148.10.183 port 42216 2026-07-01T18:19:01.113713-05:00 claude-cloud sshd[1149456]: Connection closed by invalid user sol 45.148.10.183 port 42216 [preauth] 2026-07-01T18:19:52.225260-05:00 claude-cloud sshd[1149620]: Received disconnect from 181.129.41.162 port 59121:11: Bye Bye [preauth] 2026-07-01T18:19:52.226506-05:00 claude-cloud sshd[1149620]: Disconnected from authenticating user root 181.129.41.162 port 59121 [preauth] 2026-07-01T18:21:14.005154-05:00 claude-cloud sshd[1149858]: Connection closed by authenticating user root 185.242.3.195 port 38718 [preauth] 2026-07-01T18:21:25.198591-05:00 claude-cloud systemd-logind[853]: New session c5777 of user claude. 2026-07-01T18:21:25.486949-05:00 claude-cloud systemd-logind[853]: Session c5777 logged out. Waiting for processes to exit. 2026-07-01T18:21:25.489963-05:00 claude-cloud systemd-logind[853]: Removed session c5777. 2026-07-01T18:22:10.865833-05:00 claude-cloud sshd[1150053]: Invalid user sol from 45.148.10.183 port 52382 2026-07-01T18:22:10.880118-05:00 claude-cloud sshd[1150053]: Connection closed by invalid user sol 45.148.10.183 port 52382 [preauth] 2026-07-01T18:22:36.545518-05:00 claude-cloud sshd[1150129]: Received disconnect from 181.129.41.162 port 47689:11: Bye Bye [preauth] 2026-07-01T18:22:36.545933-05:00 claude-cloud sshd[1150129]: Disconnected from authenticating user root 181.129.41.162 port 47689 [preauth] 2026-07-01T18:23:55.203817-05:00 claude-cloud sshd[1150285]: Connection closed by authenticating user root 27.71.230.31 port 51860 [preauth] 2026-07-01T18:25:01.475102-05:00 claude-cloud CRON[1150569]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T18:25:01.481067-05:00 claude-cloud CRON[1150569]: pam_unix(cron:session): session closed for user root 2026-07-01T18:25:11.135919-05:00 claude-cloud sshd[1150586]: Received disconnect from 209.90.232.251 port 39414:11: disconnected by user [preauth] 2026-07-01T18:25:11.136522-05:00 claude-cloud sshd[1150586]: Disconnected from authenticating user root 209.90.232.251 port 39414 [preauth] 2026-07-01T18:25:21.329108-05:00 claude-cloud sshd[1150618]: Invalid user ubuntu from 45.148.10.183 port 57062 2026-07-01T18:25:21.344020-05:00 claude-cloud sshd[1150618]: Connection closed by invalid user ubuntu 45.148.10.183 port 57062 [preauth] 2026-07-01T18:26:29.402758-05:00 claude-cloud systemd-logind[853]: New session c5778 of user claude. 2026-07-01T18:26:29.685228-05:00 claude-cloud systemd-logind[853]: Session c5778 logged out. Waiting for processes to exit. 2026-07-01T18:26:29.687699-05:00 claude-cloud systemd-logind[853]: Removed session c5778. 2026-07-01T18:27:35.884436-05:00 claude-cloud sshd[1151036]: Invalid user web from 45.198.224.46 port 60902 2026-07-01T18:27:37.107109-05:00 claude-cloud sshd[1151036]: Connection closed by invalid user web 45.198.224.46 port 60902 [preauth] 2026-07-01T18:28:03.586902-05:00 claude-cloud sshd[1151187]: Received disconnect from 181.115.171.215 port 17425:11: Bye Bye [preauth] 2026-07-01T18:28:03.588154-05:00 claude-cloud sshd[1151187]: Disconnected from authenticating user root 181.115.171.215 port 17425 [preauth] 2026-07-01T18:28:16.135995-05:00 claude-cloud sshd[1151239]: Invalid user test from 45.148.10.121 port 52812 2026-07-01T18:28:16.149270-05:00 claude-cloud sshd[1151239]: Connection closed by invalid user test 45.148.10.121 port 52812 [preauth] 2026-07-01T18:28:38.250869-05:00 claude-cloud sshd[1151301]: Invalid user ubuntu from 45.148.10.183 port 50954 2026-07-01T18:28:38.263036-05:00 claude-cloud sshd[1151301]: Connection closed by invalid user ubuntu 45.148.10.183 port 50954 [preauth] 2026-07-01T18:28:54.647658-05:00 claude-cloud sshd[1151350]: Received disconnect from 38.94.97.3 port 59218:11: Bye Bye [preauth] 2026-07-01T18:28:54.647907-05:00 claude-cloud sshd[1151350]: Disconnected from authenticating user root 38.94.97.3 port 59218 [preauth] 2026-07-01T18:29:00.048665-05:00 claude-cloud sshd[1151381]: Received disconnect from 181.115.171.215 port 37243:11: Bye Bye [preauth] 2026-07-01T18:29:00.049079-05:00 claude-cloud sshd[1151381]: Disconnected from authenticating user root 181.115.171.215 port 37243 [preauth] 2026-07-01T18:30:05.978201-05:00 claude-cloud sshd[1151580]: Received disconnect from 141.95.34.214 port 52118:11: disconnected by user [preauth] 2026-07-01T18:30:05.978675-05:00 claude-cloud sshd[1151580]: Disconnected from authenticating user root 141.95.34.214 port 52118 [preauth] 2026-07-01T18:30:07.797391-05:00 claude-cloud sshd[1151593]: Invalid user admin from 2.57.121.25 port 19524 2026-07-01T18:30:07.823240-05:00 claude-cloud sshd[1151593]: Connection closed by invalid user admin 2.57.121.25 port 19524 [preauth] 2026-07-01T18:30:14.059618-05:00 claude-cloud sshd[1151611]: Received disconnect from 31.179.197.26 port 56776:11: Bye Bye [preauth] 2026-07-01T18:30:14.060496-05:00 claude-cloud sshd[1151611]: Disconnected from authenticating user root 31.179.197.26 port 56776 [preauth] 2026-07-01T18:31:23.115717-05:00 claude-cloud sshd[1151830]: Connection closed by 185.247.137.21 port 56343 2026-07-01T18:31:23.237868-05:00 claude-cloud sshd[1151846]: Connection closed by 185.247.137.21 port 35735 [preauth] 2026-07-01T18:31:33.727807-05:00 claude-cloud systemd-logind[853]: New session c5779 of user claude. 2026-07-01T18:31:34.007985-05:00 claude-cloud systemd-logind[853]: Session c5779 logged out. Waiting for processes to exit. 2026-07-01T18:31:34.009471-05:00 claude-cloud systemd-logind[853]: Removed session c5779. 2026-07-01T18:31:54.809308-05:00 claude-cloud sshd[1151952]: Invalid user ubuntu from 45.148.10.183 port 37646 2026-07-01T18:31:54.823064-05:00 claude-cloud sshd[1151952]: Connection closed by invalid user ubuntu 45.148.10.183 port 37646 [preauth] 2026-07-01T18:34:37.314601-05:00 claude-cloud sshd[1152421]: Received disconnect from 120.48.9.231 port 53126:11: Bye Bye [preauth] 2026-07-01T18:34:37.315039-05:00 claude-cloud sshd[1152421]: Disconnected from authenticating user root 120.48.9.231 port 53126 [preauth] 2026-07-01T18:35:01.497077-05:00 claude-cloud CRON[1152486]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T18:35:01.504664-05:00 claude-cloud CRON[1152486]: pam_unix(cron:session): session closed for user root 2026-07-01T18:35:03.687912-05:00 claude-cloud sshd[1152489]: Invalid user trading from 45.148.10.183 port 57908 2026-07-01T18:35:03.701386-05:00 claude-cloud sshd[1152489]: Connection closed by invalid user trading 45.148.10.183 port 57908 [preauth] 2026-07-01T18:35:31.740361-05:00 claude-cloud sshd[1152542]: Connection closed by authenticating user root 27.71.230.31 port 53920 [preauth] 2026-07-01T18:36:38.313004-05:00 claude-cloud systemd-logind[853]: New session c5780 of user claude. 2026-07-01T18:36:38.613264-05:00 claude-cloud systemd-logind[853]: Session c5780 logged out. Waiting for processes to exit. 2026-07-01T18:36:38.615903-05:00 claude-cloud systemd-logind[853]: Removed session c5780. 2026-07-01T18:38:09.260374-05:00 claude-cloud sshd[1153105]: Invalid user trader from 45.148.10.183 port 48878 2026-07-01T18:38:09.273908-05:00 claude-cloud sshd[1153105]: Connection closed by invalid user trader 45.148.10.183 port 48878 [preauth] 2026-07-01T18:40:36.674802-05:00 claude-cloud sshd[1153556]: Received disconnect from 38.94.97.3 port 35354:11: Bye Bye [preauth] 2026-07-01T18:40:36.675323-05:00 claude-cloud sshd[1153556]: Disconnected from authenticating user root 38.94.97.3 port 35354 [preauth] 2026-07-01T18:40:49.738661-05:00 claude-cloud sshd[1153599]: Received disconnect from 31.179.197.26 port 43530:11: Bye Bye [preauth] 2026-07-01T18:40:49.739470-05:00 claude-cloud sshd[1153599]: Disconnected from authenticating user root 31.179.197.26 port 43530 [preauth] 2026-07-01T18:41:19.566262-05:00 claude-cloud sshd[1153711]: Invalid user pool from 45.148.10.183 port 48632 2026-07-01T18:41:19.580193-05:00 claude-cloud sshd[1153711]: Connection closed by invalid user pool 45.148.10.183 port 48632 [preauth] 2026-07-01T18:41:26.046712-05:00 claude-cloud sshd[1153699]: Connection closed by authenticating user root 27.71.230.31 port 45602 [preauth] 2026-07-01T18:41:42.547619-05:00 claude-cloud systemd-logind[853]: New session c5781 of user claude. 2026-07-01T18:41:42.975143-05:00 claude-cloud systemd-logind[853]: Session c5781 logged out. Waiting for processes to exit. 2026-07-01T18:41:42.976344-05:00 claude-cloud systemd-logind[853]: Removed session c5781. 2026-07-01T18:42:22.481793-05:00 claude-cloud sshd[1153918]: Received disconnect from 38.94.97.3 port 41770:11: Bye Bye [preauth] 2026-07-01T18:42:22.482196-05:00 claude-cloud sshd[1153918]: Disconnected from authenticating user root 38.94.97.3 port 41770 [preauth] 2026-07-01T18:42:25.716883-05:00 claude-cloud sshd[1153930]: Received disconnect from 31.179.197.26 port 48568:11: Bye Bye [preauth] 2026-07-01T18:42:25.717164-05:00 claude-cloud sshd[1153930]: Disconnected from authenticating user root 31.179.197.26 port 48568 [preauth] 2026-07-01T18:44:01.487559-05:00 claude-cloud sshd[1154215]: Received disconnect from 31.179.197.26 port 59924:11: Bye Bye [preauth] 2026-07-01T18:44:01.487972-05:00 claude-cloud sshd[1154215]: Disconnected from authenticating user root 31.179.197.26 port 59924 [preauth] 2026-07-01T18:44:04.191728-05:00 claude-cloud sshd[1154224]: Received disconnect from 38.94.97.3 port 48172:11: Bye Bye [preauth] 2026-07-01T18:44:04.192297-05:00 claude-cloud sshd[1154224]: Disconnected from authenticating user root 38.94.97.3 port 48172 [preauth] 2026-07-01T18:45:01.519671-05:00 claude-cloud CRON[1154394]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T18:45:01.524742-05:00 claude-cloud CRON[1154394]: pam_unix(cron:session): session closed for user root 2026-07-01T18:45:28.608879-05:00 claude-cloud sshd[1154467]: Received disconnect from 31.179.197.26 port 53102:11: Bye Bye [preauth] 2026-07-01T18:45:28.610997-05:00 claude-cloud sshd[1154467]: Disconnected from authenticating user root 31.179.197.26 port 53102 [preauth] 2026-07-01T18:45:43.908964-05:00 claude-cloud sshd[1154531]: Received disconnect from 38.94.97.3 port 54602:11: Bye Bye [preauth] 2026-07-01T18:45:43.909387-05:00 claude-cloud sshd[1154531]: Disconnected from authenticating user root 38.94.97.3 port 54602 [preauth] 2026-07-01T18:46:27.747616-05:00 claude-cloud sshd[1154675]: userauth_pubkey: signature algorithm ssh-dss not in PubkeyAcceptedAlgorithms [preauth] 2026-07-01T18:46:27.768227-05:00 claude-cloud sshd[1154675]: Received disconnect from 103.161.34.59 port 42372:11: disconnected by user [preauth] 2026-07-01T18:46:27.768531-05:00 claude-cloud sshd[1154675]: Disconnected from authenticating user root 103.161.34.59 port 42372 [preauth] 2026-07-01T18:46:46.931988-05:00 claude-cloud systemd-logind[853]: New session c5782 of user claude. 2026-07-01T18:46:47.263641-05:00 claude-cloud systemd-logind[853]: Session c5782 logged out. Waiting for processes to exit. 2026-07-01T18:46:47.265551-05:00 claude-cloud systemd-logind[853]: Removed session c5782. 2026-07-01T18:47:01.064410-05:00 claude-cloud sshd[1154784]: Received disconnect from 31.179.197.26 port 42582:11: Bye Bye [preauth] 2026-07-01T18:47:01.065377-05:00 claude-cloud sshd[1154784]: Disconnected from authenticating user root 31.179.197.26 port 42582 [preauth] 2026-07-01T18:47:26.513656-05:00 claude-cloud sshd[1154816]: Connection closed by authenticating user root 27.71.230.31 port 42770 [preauth] 2026-07-01T18:47:29.515593-05:00 claude-cloud sshd[1154866]: Received disconnect from 38.94.97.3 port 32768:11: Bye Bye [preauth] 2026-07-01T18:47:29.516061-05:00 claude-cloud sshd[1154866]: Disconnected from authenticating user root 38.94.97.3 port 32768 [preauth] 2026-07-01T18:48:36.662812-05:00 claude-cloud sshd[1155140]: Received disconnect from 31.179.197.26 port 42610:11: Bye Bye [preauth] 2026-07-01T18:48:36.664036-05:00 claude-cloud sshd[1155140]: Disconnected from authenticating user root 31.179.197.26 port 42610 [preauth] 2026-07-01T18:49:11.675692-05:00 claude-cloud sshd[1155232]: Received disconnect from 38.94.97.3 port 39174:11: Bye Bye [preauth] 2026-07-01T18:49:11.677350-05:00 claude-cloud sshd[1155232]: Disconnected from authenticating user root 38.94.97.3 port 39174 [preauth] 2026-07-01T18:49:24.255318-05:00 claude-cloud sshd[1155270]: Received disconnect from 176.65.131.147 port 17730:11: disconnected by user [preauth] 2026-07-01T18:49:24.256144-05:00 claude-cloud sshd[1155270]: Disconnected from authenticating user root 176.65.131.147 port 17730 [preauth] 2026-07-01T18:50:06.067757-05:00 claude-cloud sshd[1155402]: Received disconnect from 31.179.197.26 port 58976:11: Bye Bye [preauth] 2026-07-01T18:50:06.068079-05:00 claude-cloud sshd[1155402]: Disconnected from authenticating user root 31.179.197.26 port 58976 [preauth] 2026-07-01T18:50:51.808151-05:00 claude-cloud sshd[1155537]: Received disconnect from 38.94.97.3 port 45592:11: Bye Bye [preauth] 2026-07-01T18:50:51.810605-05:00 claude-cloud sshd[1155537]: Disconnected from authenticating user root 38.94.97.3 port 45592 [preauth] 2026-07-01T18:51:34.034596-05:00 claude-cloud sshd[1155668]: Received disconnect from 31.179.197.26 port 35664:11: Bye Bye [preauth] 2026-07-01T18:51:34.037990-05:00 claude-cloud sshd[1155668]: Disconnected from authenticating user root 31.179.197.26 port 35664 [preauth] 2026-07-01T18:51:34.083247-05:00 claude-cloud sshd[1155670]: Connection closed by 91.92.40.13 port 35132 2026-07-01T18:51:51.136496-05:00 claude-cloud systemd-logind[853]: New session c5783 of user claude. 2026-07-01T18:51:51.397046-05:00 claude-cloud systemd-logind[853]: Session c5783 logged out. Waiting for processes to exit. 2026-07-01T18:51:51.399781-05:00 claude-cloud systemd-logind[853]: Removed session c5783. 2026-07-01T18:52:26.026905-05:00 claude-cloud sshd[1155852]: Received disconnect from 38.94.97.3 port 51980:11: Bye Bye [preauth] 2026-07-01T18:52:26.027370-05:00 claude-cloud sshd[1155852]: Disconnected from authenticating user root 38.94.97.3 port 51980 [preauth] 2026-07-01T18:52:38.857000-05:00 claude-cloud sshd[1155881]: Connection closed by 71.6.146.186 port 37160 [preauth] 2026-07-01T18:52:42.389898-05:00 claude-cloud sshd[1155886]: Connection closed by 71.6.146.186 port 38096 [preauth] 2026-07-01T18:53:00.097018-05:00 claude-cloud sshd[1155958]: Received disconnect from 31.179.197.26 port 52612:11: Bye Bye [preauth] 2026-07-01T18:53:00.097314-05:00 claude-cloud sshd[1155958]: Disconnected from authenticating user root 31.179.197.26 port 52612 [preauth] 2026-07-01T18:53:41.468989-05:00 claude-cloud sshd[1155972]: Connection closed by authenticating user root 27.71.230.31 port 37752 [preauth] 2026-07-01T18:54:04.076622-05:00 claude-cloud sshd[1156144]: Received disconnect from 38.94.97.3 port 58384:11: Bye Bye [preauth] 2026-07-01T18:54:04.076936-05:00 claude-cloud sshd[1156144]: Disconnected from authenticating user root 38.94.97.3 port 58384 [preauth] 2026-07-01T18:54:07.543729-05:00 claude-cloud sshd[1156153]: Connection closed by authenticating user root 91.92.40.13 port 39528 [preauth] 2026-07-01T18:54:30.733181-05:00 claude-cloud sshd[1156226]: Received disconnect from 31.179.197.26 port 56214:11: Bye Bye [preauth] 2026-07-01T18:54:30.733952-05:00 claude-cloud sshd[1156226]: Disconnected from authenticating user root 31.179.197.26 port 56214 [preauth] 2026-07-01T18:55:01.537954-05:00 claude-cloud CRON[1156320]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T18:55:01.544392-05:00 claude-cloud CRON[1156320]: pam_unix(cron:session): session closed for user root 2026-07-01T18:55:28.632886-05:00 claude-cloud sshd[1156409]: Connection closed by authenticating user root 91.92.40.13 port 54198 [preauth] 2026-07-01T18:55:48.724225-05:00 claude-cloud sshd[1156478]: Received disconnect from 38.94.97.3 port 36570:11: Bye Bye [preauth] 2026-07-01T18:55:48.724738-05:00 claude-cloud sshd[1156478]: Disconnected from authenticating user root 38.94.97.3 port 36570 [preauth] 2026-07-01T18:56:01.695788-05:00 claude-cloud sshd[1156513]: Received disconnect from 31.179.197.26 port 37560:11: Bye Bye [preauth] 2026-07-01T18:56:01.696543-05:00 claude-cloud sshd[1156513]: Disconnected from authenticating user root 31.179.197.26 port 37560 [preauth] 2026-07-01T18:56:49.079188-05:00 claude-cloud sshd[1156646]: Connection closed by authenticating user root 91.92.40.13 port 42136 [preauth] 2026-07-01T18:56:55.447748-05:00 claude-cloud systemd-logind[853]: New session c5784 of user claude. 2026-07-01T18:56:55.719081-05:00 claude-cloud systemd-logind[853]: Session c5784 logged out. Waiting for processes to exit. 2026-07-01T18:56:55.720595-05:00 claude-cloud systemd-logind[853]: Removed session c5784. 2026-07-01T18:57:24.716117-05:00 claude-cloud sshd[1156759]: Received disconnect from 38.94.97.3 port 42976:11: Bye Bye [preauth] 2026-07-01T18:57:24.717598-05:00 claude-cloud sshd[1156759]: Disconnected from authenticating user root 38.94.97.3 port 42976 [preauth] 2026-07-01T18:57:35.426223-05:00 claude-cloud sshd[1156813]: Received disconnect from 31.179.197.26 port 33532:11: Bye Bye [preauth] 2026-07-01T18:57:35.426960-05:00 claude-cloud sshd[1156813]: Disconnected from authenticating user root 31.179.197.26 port 33532 [preauth] 2026-07-01T18:58:05.717725-05:00 claude-cloud sshd[1156922]: Connection closed by authenticating user root 45.148.10.121 port 56526 [preauth] 2026-07-01T18:58:08.547391-05:00 claude-cloud sshd[1156931]: Connection closed by authenticating user root 91.92.40.13 port 46162 [preauth] 2026-07-01T18:58:30.641241-05:00 claude-cloud sshd[1156986]: Received disconnect from 20.244.20.183 port 59030:11: Bye Bye [preauth] 2026-07-01T18:58:30.641902-05:00 claude-cloud sshd[1156986]: Disconnected from authenticating user root 20.244.20.183 port 59030 [preauth] 2026-07-01T18:59:01.102564-05:00 claude-cloud sshd[1157136]: Received disconnect from 38.94.97.3 port 49374:11: Bye Bye [preauth] 2026-07-01T18:59:01.102923-05:00 claude-cloud sshd[1157136]: Disconnected from authenticating user root 38.94.97.3 port 49374 [preauth] 2026-07-01T18:59:03.567911-05:00 claude-cloud sshd[1157150]: Received disconnect from 31.179.197.26 port 54544:11: Bye Bye [preauth] 2026-07-01T18:59:03.568548-05:00 claude-cloud sshd[1157150]: Disconnected from authenticating user root 31.179.197.26 port 54544 [preauth] 2026-07-01T18:59:27.861524-05:00 claude-cloud sshd[1157226]: Connection closed by authenticating user root 91.92.40.13 port 50502 [preauth] 2026-07-01T18:59:35.580386-05:00 claude-cloud sshd[1157127]: Connection closed by authenticating user root 27.71.230.31 port 41588 [preauth] 2026-07-01T19:00:36.915578-05:00 claude-cloud sshd[1157439]: Received disconnect from 31.179.197.26 port 42948:11: Bye Bye [preauth] 2026-07-01T19:00:36.916049-05:00 claude-cloud sshd[1157439]: Disconnected from authenticating user root 31.179.197.26 port 42948 [preauth] 2026-07-01T19:00:43.111475-05:00 claude-cloud sshd[1157469]: Connection closed by authenticating user root 91.92.40.13 port 54018 [preauth] 2026-07-01T19:00:45.090186-05:00 claude-cloud sshd[1157493]: Received disconnect from 38.94.97.3 port 55792:11: Bye Bye [preauth] 2026-07-01T19:00:45.091085-05:00 claude-cloud sshd[1157493]: Disconnected from authenticating user root 38.94.97.3 port 55792 [preauth] 2026-07-01T19:01:35.168970-05:00 claude-cloud sshd[1157605]: Received disconnect from 120.48.9.231 port 34124:11: Bye Bye [preauth] 2026-07-01T19:01:35.169471-05:00 claude-cloud sshd[1157605]: Disconnected from authenticating user root 120.48.9.231 port 34124 [preauth] 2026-07-01T19:01:56.241251-05:00 claude-cloud sshd[1157674]: Connection closed by authenticating user root 91.92.40.13 port 40824 [preauth] 2026-07-01T19:01:59.526525-05:00 claude-cloud systemd-logind[853]: New session c5785 of user claude. 2026-07-01T19:01:59.826376-05:00 claude-cloud systemd-logind[853]: Session c5785 logged out. Waiting for processes to exit. 2026-07-01T19:01:59.830539-05:00 claude-cloud systemd-logind[853]: Removed session c5785. 2026-07-01T19:02:08.663792-05:00 claude-cloud sshd[1157727]: Invalid user probe from 193.46.255.86 port 33700 2026-07-01T19:02:08.822564-05:00 claude-cloud sshd[1157727]: Connection closed by invalid user probe 193.46.255.86 port 33700 [preauth] 2026-07-01T19:02:20.923713-05:00 claude-cloud sshd[1157782]: Invalid user jerrica from 2.57.121.112 port 41224 2026-07-01T19:02:20.949111-05:00 claude-cloud sshd[1157782]: Connection closed by invalid user jerrica 2.57.121.112 port 41224 [preauth] 2026-07-01T19:02:29.467974-05:00 claude-cloud sshd[1157801]: Received disconnect from 38.94.97.3 port 33956:11: Bye Bye [preauth] 2026-07-01T19:02:29.469008-05:00 claude-cloud sshd[1157801]: Disconnected from authenticating user root 38.94.97.3 port 33956 [preauth] 2026-07-01T19:03:10.596021-05:00 claude-cloud sshd[1157929]: Connection closed by authenticating user root 91.92.40.13 port 53866 [preauth] 2026-07-01T19:04:12.000570-05:00 claude-cloud sshd[1158110]: Received disconnect from 20.244.20.183 port 49884:11: Bye Bye [preauth] 2026-07-01T19:04:12.001614-05:00 claude-cloud sshd[1158110]: Disconnected from authenticating user root 20.244.20.183 port 49884 [preauth] 2026-07-01T19:04:23.728580-05:00 claude-cloud sshd[1158139]: Connection closed by authenticating user root 91.92.40.13 port 33868 [preauth] 2026-07-01T19:04:45.393569-05:00 claude-cloud sshd[1158224]: Received disconnect from 8.222.183.20 port 57192:11: Bye Bye [preauth] 2026-07-01T19:04:45.394558-05:00 claude-cloud sshd[1158224]: Disconnected from authenticating user root 8.222.183.20 port 57192 [preauth] 2026-07-01T19:05:01.554921-05:00 claude-cloud CRON[1158290]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T19:05:01.563519-05:00 claude-cloud CRON[1158290]: pam_unix(cron:session): session closed for user root 2026-07-01T19:05:12.018096-05:00 claude-cloud sshd[1158278]: Connection closed by authenticating user root 27.71.230.31 port 50734 [preauth] 2026-07-01T19:05:35.416741-05:00 claude-cloud sshd[1158382]: Connection closed by authenticating user root 91.92.40.13 port 37936 [preauth] 2026-07-01T19:05:54.490719-05:00 claude-cloud sshd[1158446]: Received disconnect from 20.244.20.183 port 39832:11: Bye Bye [preauth] 2026-07-01T19:05:54.491096-05:00 claude-cloud sshd[1158446]: Disconnected from authenticating user root 20.244.20.183 port 39832 [preauth] 2026-07-01T19:06:47.743575-05:00 claude-cloud sshd[1158607]: Connection closed by authenticating user root 91.92.40.13 port 35224 [preauth] 2026-07-01T19:07:26.669878-05:00 claude-cloud sshd[1158734]: Received disconnect from 120.48.9.231 port 33156:11: Bye Bye [preauth] 2026-07-01T19:07:26.670254-05:00 claude-cloud sshd[1158734]: Disconnected from authenticating user root 120.48.9.231 port 33156 [preauth] 2026-07-01T19:07:43.189121-05:00 claude-cloud sshd[1158768]: Received disconnect from 20.244.20.183 port 48480:11: Bye Bye [preauth] 2026-07-01T19:07:43.190268-05:00 claude-cloud sshd[1158768]: Disconnected from authenticating user root 20.244.20.183 port 48480 [preauth] 2026-07-01T19:07:57.497828-05:00 claude-cloud sshd[1158818]: Received disconnect from 143.202.104.13 port 50044:11: Bye Bye [preauth] 2026-07-01T19:07:57.498332-05:00 claude-cloud sshd[1158818]: Disconnected from authenticating user root 143.202.104.13 port 50044 [preauth] 2026-07-01T19:08:03.807453-05:00 claude-cloud sshd[1158832]: Connection closed by authenticating user root 91.92.40.13 port 51670 [preauth] 2026-07-01T19:09:16.993156-05:00 claude-cloud sshd[1159127]: Connection closed by authenticating user root 91.92.40.13 port 48256 [preauth] 2026-07-01T19:09:30.755539-05:00 claude-cloud sshd[1159176]: Received disconnect from 20.244.20.183 port 56624:11: Bye Bye [preauth] 2026-07-01T19:09:30.756068-05:00 claude-cloud sshd[1159176]: Disconnected from authenticating user root 20.244.20.183 port 56624 [preauth] 2026-07-01T19:10:32.011327-05:00 claude-cloud sshd[1159351]: Connection closed by 120.48.9.231 port 58480 [preauth] 2026-07-01T19:10:34.633893-05:00 claude-cloud sshd[1159365]: Connection closed by authenticating user root 91.92.40.13 port 40940 [preauth] 2026-07-01T19:11:10.910108-05:00 claude-cloud sshd[1159447]: Connection closed by authenticating user root 27.71.230.31 port 32972 [preauth] 2026-07-01T19:11:15.671957-05:00 claude-cloud sshd[1159496]: Received disconnect from 20.244.20.183 port 45904:11: Bye Bye [preauth] 2026-07-01T19:11:15.672537-05:00 claude-cloud sshd[1159496]: Disconnected from authenticating user root 20.244.20.183 port 45904 [preauth] 2026-07-01T19:11:53.201621-05:00 claude-cloud sshd[1159640]: Connection closed by authenticating user root 91.92.40.13 port 38050 [preauth] 2026-07-01T19:13:08.722921-05:00 claude-cloud sshd[1159861]: Received disconnect from 20.244.20.183 port 38086:11: Bye Bye [preauth] 2026-07-01T19:13:08.723420-05:00 claude-cloud sshd[1159861]: Disconnected from authenticating user root 20.244.20.183 port 38086 [preauth] 2026-07-01T19:13:13.862392-05:00 claude-cloud sshd[1159879]: Connection closed by authenticating user root 91.92.40.13 port 35172 [preauth] 2026-07-01T19:14:34.853854-05:00 claude-cloud sshd[1160134]: Connection closed by authenticating user root 91.92.40.13 port 35208 [preauth] 2026-07-01T19:15:01.577240-05:00 claude-cloud CRON[1160229]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T19:15:01.583402-05:00 claude-cloud CRON[1160229]: pam_unix(cron:session): session closed for user root 2026-07-01T19:15:04.103227-05:00 claude-cloud sshd[1160235]: Received disconnect from 20.244.20.183 port 58678:11: Bye Bye [preauth] 2026-07-01T19:15:04.103847-05:00 claude-cloud sshd[1160235]: Disconnected from authenticating user root 20.244.20.183 port 58678 [preauth] 2026-07-01T19:15:56.263815-05:00 claude-cloud sshd[1160395]: Connection closed by authenticating user root 91.92.40.13 port 55470 [preauth] 2026-07-01T19:16:08.559718-05:00 claude-cloud sshd[1160419]: Received disconnect from 8.222.183.20 port 43950:11: Bye Bye [preauth] 2026-07-01T19:16:08.562122-05:00 claude-cloud sshd[1160419]: Disconnected from authenticating user root 8.222.183.20 port 43950 [preauth] 2026-07-01T19:16:56.078832-05:00 claude-cloud sshd[1160572]: Connection closed by authenticating user root 27.71.230.31 port 53088 [preauth] 2026-07-01T19:16:56.168901-05:00 claude-cloud sshd[1160611]: Received disconnect from 20.244.20.183 port 36896:11: Bye Bye [preauth] 2026-07-01T19:16:56.169745-05:00 claude-cloud sshd[1160611]: Disconnected from authenticating user root 20.244.20.183 port 36896 [preauth] 2026-07-01T19:17:01.591340-05:00 claude-cloud CRON[1160622]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T19:17:01.597845-05:00 claude-cloud CRON[1160622]: pam_unix(cron:session): session closed for user root 2026-07-01T19:17:13.740511-05:00 claude-cloud sshd[1160657]: Connection closed by authenticating user root 91.92.40.13 port 36106 [preauth] 2026-07-01T19:17:54.037018-05:00 claude-cloud sshd[1160778]: Received disconnect from 143.202.104.13 port 3065:11: Bye Bye [preauth] 2026-07-01T19:17:54.037716-05:00 claude-cloud sshd[1160778]: Disconnected from authenticating user root 143.202.104.13 port 3065 [preauth] 2026-07-01T19:18:30.802148-05:00 claude-cloud sshd[1160877]: Connection closed by authenticating user root 91.92.40.13 port 60622 [preauth] 2026-07-01T19:18:31.811960-05:00 claude-cloud sshd[1160879]: Received disconnect from 8.222.183.20 port 58476:11: Bye Bye [preauth] 2026-07-01T19:18:31.812401-05:00 claude-cloud sshd[1160879]: Disconnected from authenticating user root 8.222.183.20 port 58476 [preauth] 2026-07-01T19:18:47.577175-05:00 claude-cloud sshd[1160959]: Received disconnect from 20.244.20.183 port 59412:11: Bye Bye [preauth] 2026-07-01T19:18:47.578031-05:00 claude-cloud sshd[1160959]: Disconnected from authenticating user root 20.244.20.183 port 59412 [preauth] 2026-07-01T19:19:45.531941-05:00 claude-cloud sshd[1161205]: Invalid user admin from 91.92.40.13 port 55626 2026-07-01T19:19:45.559496-05:00 claude-cloud sshd[1161205]: Connection closed by invalid user admin 91.92.40.13 port 55626 [preauth] 2026-07-01T19:20:42.465860-05:00 claude-cloud sshd[1161373]: Received disconnect from 20.244.20.183 port 43300:11: Bye Bye [preauth] 2026-07-01T19:20:42.466517-05:00 claude-cloud sshd[1161373]: Disconnected from authenticating user root 20.244.20.183 port 43300 [preauth] 2026-07-01T19:20:57.135027-05:00 claude-cloud sshd[1161424]: Received disconnect from 8.222.183.20 port 53246:11: Bye Bye [preauth] 2026-07-01T19:20:57.135468-05:00 claude-cloud sshd[1161424]: Disconnected from authenticating user root 8.222.183.20 port 53246 [preauth] 2026-07-01T19:21:01.017210-05:00 claude-cloud sshd[1161433]: Invalid user admin from 91.92.40.13 port 58296 2026-07-01T19:21:01.035350-05:00 claude-cloud sshd[1161433]: Connection closed by invalid user admin 91.92.40.13 port 58296 [preauth] 2026-07-01T19:21:13.823088-05:00 claude-cloud sshd[1161466]: Received disconnect from 143.202.104.13 port 28847:11: Bye Bye [preauth] 2026-07-01T19:21:13.823684-05:00 claude-cloud sshd[1161466]: Disconnected from authenticating user root 143.202.104.13 port 28847 [preauth] 2026-07-01T19:22:16.383199-05:00 claude-cloud sshd[1161690]: Invalid user admin from 91.92.40.13 port 52174 2026-07-01T19:22:16.477843-05:00 claude-cloud sshd[1161690]: Connection closed by invalid user admin 91.92.40.13 port 52174 [preauth] 2026-07-01T19:22:32.379548-05:00 claude-cloud sshd[1161737]: Received disconnect from 20.244.20.183 port 33882:11: Bye Bye [preauth] 2026-07-01T19:22:32.380419-05:00 claude-cloud sshd[1161737]: Disconnected from authenticating user root 20.244.20.183 port 33882 [preauth] 2026-07-01T19:22:50.463039-05:00 claude-cloud sshd[1161762]: Connection closed by authenticating user root 27.71.230.31 port 60138 [preauth] 2026-07-01T19:23:15.047213-05:00 claude-cloud sshd[1161851]: Received disconnect from 143.202.104.13 port 42836:11: Bye Bye [preauth] 2026-07-01T19:23:15.048165-05:00 claude-cloud sshd[1161851]: Disconnected from authenticating user root 143.202.104.13 port 42836 [preauth] 2026-07-01T19:23:29.512234-05:00 claude-cloud sshd[1161905]: Invalid user admin from 91.92.40.13 port 38064 2026-07-01T19:23:29.573005-05:00 claude-cloud sshd[1161905]: Connection closed by invalid user admin 91.92.40.13 port 38064 [preauth] 2026-07-01T19:24:23.428717-05:00 claude-cloud sshd[1162103]: Received disconnect from 20.244.20.183 port 53730:11: Bye Bye [preauth] 2026-07-01T19:24:23.429057-05:00 claude-cloud sshd[1162103]: Disconnected from authenticating user root 20.244.20.183 port 53730 [preauth] 2026-07-01T19:24:25.551466-05:00 claude-cloud sshd[1162114]: Invalid user admin from 2.57.121.25 port 39950 2026-07-01T19:24:25.576438-05:00 claude-cloud sshd[1162114]: Connection closed by invalid user admin 2.57.121.25 port 39950 [preauth] 2026-07-01T19:24:44.900402-05:00 claude-cloud sshd[1162157]: Invalid user admin from 91.92.40.13 port 43484 2026-07-01T19:24:44.946966-05:00 claude-cloud sshd[1162157]: Connection closed by invalid user admin 91.92.40.13 port 43484 [preauth] 2026-07-01T19:25:01.607310-05:00 claude-cloud CRON[1162218]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T19:25:01.613538-05:00 claude-cloud CRON[1162218]: pam_unix(cron:session): session closed for user root 2026-07-01T19:25:14.369953-05:00 claude-cloud sshd[1162250]: Received disconnect from 143.202.104.13 port 11293:11: Bye Bye [preauth] 2026-07-01T19:25:14.370245-05:00 claude-cloud sshd[1162250]: Disconnected from authenticating user root 143.202.104.13 port 11293 [preauth] 2026-07-01T19:26:15.082929-05:00 claude-cloud sshd[1162459]: Received disconnect from 20.244.20.183 port 52406:11: Bye Bye [preauth] 2026-07-01T19:26:15.084070-05:00 claude-cloud sshd[1162459]: Disconnected from authenticating user root 20.244.20.183 port 52406 [preauth] 2026-07-01T19:26:34.586811-05:00 claude-cloud sshd[1162519]: Received disconnect from 103.241.45.120 port 46766:11: Bye Bye [preauth] 2026-07-01T19:26:34.587182-05:00 claude-cloud sshd[1162519]: Disconnected from authenticating user root 103.241.45.120 port 46766 [preauth] 2026-07-01T19:26:52.795958-05:00 claude-cloud sshd[1162591]: Connection closed by authenticating user root 45.148.10.121 port 42132 [preauth] 2026-07-01T19:27:31.182898-05:00 claude-cloud sshd[1162691]: Received disconnect from 143.202.104.13 port 35224:11: Bye Bye [preauth] 2026-07-01T19:27:31.183821-05:00 claude-cloud sshd[1162691]: Disconnected from authenticating user root 143.202.104.13 port 35224 [preauth] 2026-07-01T19:27:58.528794-05:00 claude-cloud sshd[1162801]: userauth_pubkey: signature algorithm ssh-dss not in PubkeyAcceptedAlgorithms [preauth] 2026-07-01T19:27:58.674869-05:00 claude-cloud sshd[1162801]: Received disconnect from 96.8.116.34 port 44258:11: disconnected by user [preauth] 2026-07-01T19:27:58.675164-05:00 claude-cloud sshd[1162801]: Disconnected from authenticating user root 96.8.116.34 port 44258 [preauth] 2026-07-01T19:28:07.710267-05:00 claude-cloud sshd[1162826]: Received disconnect from 20.244.20.183 port 35672:11: Bye Bye [preauth] 2026-07-01T19:28:07.711051-05:00 claude-cloud sshd[1162826]: Disconnected from authenticating user root 20.244.20.183 port 35672 [preauth] 2026-07-01T19:28:32.747782-05:00 claude-cloud sshd[1162900]: Received disconnect from 8.222.183.20 port 44732:11: Bye Bye [preauth] 2026-07-01T19:28:32.748254-05:00 claude-cloud sshd[1162900]: Disconnected from authenticating user root 8.222.183.20 port 44732 [preauth] 2026-07-01T19:28:50.414779-05:00 claude-cloud sshd[1162917]: Connection closed by authenticating user root 27.71.230.31 port 46082 [preauth] 2026-07-01T19:29:26.725994-05:00 claude-cloud sshd[1163069]: Received disconnect from 143.202.104.13 port 63992:11: Bye Bye [preauth] 2026-07-01T19:29:26.726628-05:00 claude-cloud sshd[1163069]: Disconnected from authenticating user root 143.202.104.13 port 63992 [preauth] 2026-07-01T19:31:00.157868-05:00 claude-cloud sshd[1163423]: Received disconnect from 8.222.183.20 port 53536:11: Bye Bye [preauth] 2026-07-01T19:31:00.158291-05:00 claude-cloud sshd[1163423]: Disconnected from authenticating user root 8.222.183.20 port 53536 [preauth] 2026-07-01T19:31:25.868776-05:00 claude-cloud sshd[1163502]: Received disconnect from 143.202.104.13 port 57136:11: Bye Bye [preauth] 2026-07-01T19:31:25.869336-05:00 claude-cloud sshd[1163502]: Disconnected from authenticating user root 143.202.104.13 port 57136 [preauth] 2026-07-01T19:33:25.736367-05:00 claude-cloud sshd[1163881]: Received disconnect from 143.202.104.13 port 63718:11: Bye Bye [preauth] 2026-07-01T19:33:25.736872-05:00 claude-cloud sshd[1163881]: Disconnected from authenticating user root 143.202.104.13 port 63718 [preauth] 2026-07-01T19:33:31.167247-05:00 claude-cloud sshd[1163892]: Received disconnect from 8.222.183.20 port 47740:11: Bye Bye [preauth] 2026-07-01T19:33:31.168016-05:00 claude-cloud sshd[1163892]: Disconnected from authenticating user root 8.222.183.20 port 47740 [preauth] 2026-07-01T19:34:03.155330-05:00 claude-cloud sshd[1163988]: Connection closed by 61.76.136.25 port 46843 [preauth] 2026-07-01T19:34:19.834718-05:00 claude-cloud sshd[1164068]: Invalid user jingyli from 45.148.10.239 port 47108 2026-07-01T19:34:20.025758-05:00 claude-cloud sshd[1164068]: Connection closed by invalid user jingyli 45.148.10.239 port 47108 [preauth] 2026-07-01T19:34:54.902265-05:00 claude-cloud sshd[1164103]: Connection closed by authenticating user root 27.71.230.31 port 55482 [preauth] 2026-07-01T19:35:01.625349-05:00 claude-cloud CRON[1164198]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T19:35:01.632377-05:00 claude-cloud CRON[1164198]: pam_unix(cron:session): session closed for user root 2026-07-01T19:35:05.058322-05:00 claude-cloud sshd[1164216]: Invalid user admin from 91.92.40.13 port 55104 2026-07-01T19:35:05.084105-05:00 claude-cloud sshd[1164216]: Connection closed by invalid user admin 91.92.40.13 port 55104 [preauth] 2026-07-01T19:35:22.431517-05:00 claude-cloud sshd[1164268]: Received disconnect from 143.202.104.13 port 56058:11: Bye Bye [preauth] 2026-07-01T19:35:22.431810-05:00 claude-cloud sshd[1164268]: Disconnected from authenticating user root 143.202.104.13 port 56058 [preauth] 2026-07-01T19:36:00.668638-05:00 claude-cloud sshd[1164390]: Received disconnect from 8.222.183.20 port 42492:11: Bye Bye [preauth] 2026-07-01T19:36:00.669098-05:00 claude-cloud sshd[1164390]: Disconnected from authenticating user root 8.222.183.20 port 42492 [preauth] 2026-07-01T19:36:20.596582-05:00 claude-cloud sshd[1164460]: Invalid user admin from 91.92.40.13 port 50686 2026-07-01T19:36:20.612957-05:00 claude-cloud sshd[1164460]: Connection closed by invalid user admin 91.92.40.13 port 50686 [preauth] 2026-07-01T19:37:32.241175-05:00 claude-cloud sshd[1164676]: Received disconnect from 143.202.104.13 port 27228:11: Bye Bye [preauth] 2026-07-01T19:37:32.241508-05:00 claude-cloud sshd[1164676]: Disconnected from authenticating user root 143.202.104.13 port 27228 [preauth] 2026-07-01T19:37:34.203105-05:00 claude-cloud sshd[1164680]: Invalid user admin from 91.92.40.13 port 52732 2026-07-01T19:37:34.274409-05:00 claude-cloud sshd[1164680]: Connection closed by invalid user admin 91.92.40.13 port 52732 [preauth] 2026-07-01T19:38:25.197816-05:00 claude-cloud sshd[1164845]: Received disconnect from 8.222.183.20 port 53658:11: Bye Bye [preauth] 2026-07-01T19:38:25.198474-05:00 claude-cloud sshd[1164845]: Disconnected from authenticating user root 8.222.183.20 port 53658 [preauth] 2026-07-01T19:38:58.460188-05:00 claude-cloud sshd[1164943]: Invalid user admin from 91.92.40.13 port 44654 2026-07-01T19:38:58.479940-05:00 claude-cloud sshd[1164943]: Connection closed by invalid user admin 91.92.40.13 port 44654 [preauth] 2026-07-01T19:39:11.747180-05:00 claude-cloud sshd[1164981]: Received disconnect from 103.241.45.120 port 48180:11: Bye Bye [preauth] 2026-07-01T19:39:11.747889-05:00 claude-cloud sshd[1164981]: Disconnected from authenticating user root 103.241.45.120 port 48180 [preauth] 2026-07-01T19:39:38.675967-05:00 claude-cloud sshd[1165078]: Received disconnect from 143.202.104.13 port 63378:11: Bye Bye [preauth] 2026-07-01T19:39:38.676488-05:00 claude-cloud sshd[1165078]: Disconnected from authenticating user root 143.202.104.13 port 63378 [preauth] 2026-07-01T19:40:28.402767-05:00 claude-cloud sshd[1165305]: Invalid user admin from 91.92.40.13 port 53626 2026-07-01T19:40:28.417751-05:00 claude-cloud sshd[1165305]: Connection closed by invalid user admin 91.92.40.13 port 53626 [preauth] 2026-07-01T19:40:47.732482-05:00 claude-cloud sshd[1165312]: Connection closed by authenticating user root 27.71.230.31 port 38514 [preauth] 2026-07-01T19:40:55.805690-05:00 claude-cloud sshd[1165388]: Received disconnect from 8.222.183.20 port 52510:11: Bye Bye [preauth] 2026-07-01T19:40:55.806064-05:00 claude-cloud sshd[1165388]: Disconnected from authenticating user root 8.222.183.20 port 52510 [preauth] 2026-07-01T19:41:09.964192-05:00 claude-cloud sshd[1165422]: Received disconnect from 103.241.45.120 port 42752:11: Bye Bye [preauth] 2026-07-01T19:41:09.964676-05:00 claude-cloud sshd[1165422]: Disconnected from authenticating user root 103.241.45.120 port 42752 [preauth] 2026-07-01T19:41:39.983245-05:00 claude-cloud sshd[1165507]: Received disconnect from 143.202.104.13 port 27451:11: Bye Bye [preauth] 2026-07-01T19:41:39.983599-05:00 claude-cloud sshd[1165507]: Disconnected from authenticating user root 143.202.104.13 port 27451 [preauth] 2026-07-01T19:43:22.747445-05:00 claude-cloud sshd[1165845]: Received disconnect from 8.222.183.20 port 43160:11: Bye Bye [preauth] 2026-07-01T19:43:22.747936-05:00 claude-cloud sshd[1165845]: Disconnected from authenticating user root 8.222.183.20 port 43160 [preauth] 2026-07-01T19:43:24.607324-05:00 claude-cloud sshd[1165856]: Received disconnect from 103.241.45.120 port 59226:11: Bye Bye [preauth] 2026-07-01T19:43:24.607676-05:00 claude-cloud sshd[1165856]: Disconnected from authenticating user root 103.241.45.120 port 59226 [preauth] 2026-07-01T19:43:37.580384-05:00 claude-cloud sshd[1165882]: Received disconnect from 143.202.104.13 port 31124:11: Bye Bye [preauth] 2026-07-01T19:43:37.581196-05:00 claude-cloud sshd[1165882]: Disconnected from authenticating user root 143.202.104.13 port 31124 [preauth] 2026-07-01T19:45:01.644038-05:00 claude-cloud CRON[1166166]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T19:45:01.651338-05:00 claude-cloud CRON[1166166]: pam_unix(cron:session): session closed for user root 2026-07-01T19:45:20.139265-05:00 claude-cloud sshd[1166227]: Received disconnect from 103.241.45.120 port 57002:11: Bye Bye [preauth] 2026-07-01T19:45:20.140012-05:00 claude-cloud sshd[1166227]: Disconnected from authenticating user root 103.241.45.120 port 57002 [preauth] 2026-07-01T19:45:39.039460-05:00 claude-cloud sshd[1166269]: Received disconnect from 143.202.104.13 port 1041:11: Bye Bye [preauth] 2026-07-01T19:45:39.039836-05:00 claude-cloud sshd[1166269]: Disconnected from authenticating user root 143.202.104.13 port 1041 [preauth] 2026-07-01T19:46:34.472314-05:00 claude-cloud sshd[1166439]: Connection closed by authenticating user root 27.71.230.31 port 60494 [preauth] 2026-07-01T19:47:17.898507-05:00 claude-cloud sshd[1166608]: Received disconnect from 103.241.45.120 port 52724:11: Bye Bye [preauth] 2026-07-01T19:47:17.899155-05:00 claude-cloud sshd[1166608]: Disconnected from authenticating user root 103.241.45.120 port 52724 [preauth] 2026-07-01T19:47:33.301117-05:00 claude-cloud sshd[1166643]: Invalid user admin from 193.46.255.86 port 21816 2026-07-01T19:47:33.326888-05:00 claude-cloud sshd[1166643]: Connection closed by invalid user admin 193.46.255.86 port 21816 [preauth] 2026-07-01T19:48:26.317321-05:00 claude-cloud sshd[1166808]: Received disconnect from 8.222.183.20 port 54630:11: Bye Bye [preauth] 2026-07-01T19:48:26.318085-05:00 claude-cloud sshd[1166808]: Disconnected from authenticating user root 8.222.183.20 port 54630 [preauth] 2026-07-01T19:49:04.355616-05:00 claude-cloud sshd[1166931]: Received disconnect from 103.241.45.120 port 33264:11: Bye Bye [preauth] 2026-07-01T19:49:04.355943-05:00 claude-cloud sshd[1166931]: Disconnected from authenticating user root 103.241.45.120 port 33264 [preauth] 2026-07-01T19:50:52.532945-05:00 claude-cloud sshd[1167344]: Received disconnect from 103.241.45.120 port 54260:11: Bye Bye [preauth] 2026-07-01T19:50:52.533978-05:00 claude-cloud sshd[1167344]: Disconnected from authenticating user root 103.241.45.120 port 54260 [preauth] 2026-07-01T19:51:29.219933-05:00 claude-cloud sshd[1167471]: Invalid user administrator from 91.92.40.13 port 60860 2026-07-01T19:51:29.234954-05:00 claude-cloud sshd[1167471]: Connection closed by invalid user administrator 91.92.40.13 port 60860 [preauth] 2026-07-01T19:52:36.343603-05:00 claude-cloud sshd[1167642]: Connection closed by authenticating user root 27.71.230.31 port 37526 [preauth] 2026-07-01T19:52:52.183909-05:00 claude-cloud sshd[1167730]: Received disconnect from 103.241.45.120 port 58720:11: Bye Bye [preauth] 2026-07-01T19:52:52.184321-05:00 claude-cloud sshd[1167730]: Disconnected from authenticating user root 103.241.45.120 port 58720 [preauth] 2026-07-01T19:53:06.435185-05:00 claude-cloud sshd[1167765]: Connection closed by authenticating user root 185.242.3.195 port 58748 [preauth] 2026-07-01T19:53:07.604098-05:00 claude-cloud sshd[1167767]: Invalid user administrator from 91.92.40.13 port 45124 2026-07-01T19:53:07.623345-05:00 claude-cloud sshd[1167767]: Connection closed by invalid user administrator 91.92.40.13 port 45124 [preauth] 2026-07-01T19:54:41.143425-05:00 claude-cloud sshd[1168046]: Received disconnect from 103.241.45.120 port 53364:11: Bye Bye [preauth] 2026-07-01T19:54:41.143994-05:00 claude-cloud sshd[1168046]: Disconnected from authenticating user root 103.241.45.120 port 53364 [preauth] 2026-07-01T19:54:45.141596-05:00 claude-cloud sshd[1168084]: Invalid user administrator from 91.92.40.13 port 38586 2026-07-01T19:54:45.159327-05:00 claude-cloud sshd[1168084]: Connection closed by invalid user administrator 91.92.40.13 port 38586 [preauth] 2026-07-01T19:55:01.665546-05:00 claude-cloud CRON[1168143]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T19:55:01.674687-05:00 claude-cloud CRON[1168143]: pam_unix(cron:session): session closed for user root 2026-07-01T19:56:19.308009-05:00 claude-cloud sshd[1168376]: Invalid user administrator from 91.92.40.13 port 52642 2026-07-01T19:56:19.331600-05:00 claude-cloud sshd[1168376]: Connection closed by invalid user administrator 91.92.40.13 port 52642 [preauth] 2026-07-01T19:56:29.741120-05:00 claude-cloud sshd[1168396]: Received disconnect from 103.241.45.120 port 55054:11: Bye Bye [preauth] 2026-07-01T19:56:29.741574-05:00 claude-cloud sshd[1168396]: Disconnected from authenticating user root 103.241.45.120 port 55054 [preauth] 2026-07-01T19:57:55.409045-05:00 claude-cloud sshd[1168683]: Invalid user administrator from 91.92.40.13 port 50030 2026-07-01T19:57:55.425175-05:00 claude-cloud sshd[1168683]: Connection closed by invalid user administrator 91.92.40.13 port 50030 [preauth] 2026-07-01T19:58:24.139886-05:00 claude-cloud sshd[1168765]: Received disconnect from 103.241.45.120 port 57020:11: Bye Bye [preauth] 2026-07-01T19:58:24.140255-05:00 claude-cloud sshd[1168765]: Disconnected from authenticating user root 103.241.45.120 port 57020 [preauth] 2026-07-01T19:58:34.961669-05:00 claude-cloud sshd[1168799]: Invalid user admin from 45.148.10.121 port 34714 2026-07-01T19:58:34.975261-05:00 claude-cloud sshd[1168799]: Connection closed by invalid user admin 45.148.10.121 port 34714 [preauth] 2026-07-01T19:58:40.757574-05:00 claude-cloud sshd[1168776]: Connection closed by authenticating user root 27.71.230.31 port 54628 [preauth] 2026-07-01T20:00:15.958526-05:00 claude-cloud sshd[1169123]: Received disconnect from 103.241.45.120 port 51022:11: Bye Bye [preauth] 2026-07-01T20:00:15.958987-05:00 claude-cloud sshd[1169123]: Disconnected from authenticating user root 103.241.45.120 port 51022 [preauth] 2026-07-01T20:02:06.083850-05:00 claude-cloud sshd[1169535]: Received disconnect from 103.241.45.120 port 59784:11: Bye Bye [preauth] 2026-07-01T20:02:06.084292-05:00 claude-cloud sshd[1169535]: Disconnected from authenticating user root 103.241.45.120 port 59784 [preauth] 2026-07-01T20:03:54.739185-05:00 claude-cloud sshd[1169868]: Received disconnect from 103.241.45.120 port 33094:11: Bye Bye [preauth] 2026-07-01T20:03:54.739901-05:00 claude-cloud sshd[1169868]: Disconnected from authenticating user root 103.241.45.120 port 33094 [preauth] 2026-07-01T20:04:14.408945-05:00 claude-cloud systemd-logind[853]: New session c5786 of user claude. 2026-07-01T20:04:14.698509-05:00 claude-cloud systemd-logind[853]: Session c5786 logged out. Waiting for processes to exit. 2026-07-01T20:04:14.700207-05:00 claude-cloud systemd-logind[853]: Removed session c5786. 2026-07-01T20:05:01.687490-05:00 claude-cloud CRON[1170089]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T20:05:01.693024-05:00 claude-cloud CRON[1170089]: pam_unix(cron:session): session closed for user root 2026-07-01T20:05:12.366162-05:00 claude-cloud sshd[1169990]: Connection closed by authenticating user root 27.71.230.31 port 47366 [preauth] 2026-07-01T20:09:04.673932-05:00 claude-cloud sshd[1170803]: Connection closed by authenticating user backup 91.92.40.13 port 32832 [preauth] 2026-07-01T20:09:17.939729-05:00 claude-cloud systemd-logind[853]: New session c5787 of user claude. 2026-07-01T20:09:18.287903-05:00 claude-cloud systemd-logind[853]: Session c5787 logged out. Waiting for processes to exit. 2026-07-01T20:09:18.289238-05:00 claude-cloud systemd-logind[853]: Removed session c5787. 2026-07-01T20:10:29.969334-05:00 claude-cloud sshd[1171040]: Connection closed by authenticating user root 27.71.230.31 port 33564 [preauth] 2026-07-01T20:10:53.512110-05:00 claude-cloud sshd[1171196]: Connection closed by authenticating user backup 91.92.40.13 port 37402 [preauth] 2026-07-01T20:12:42.194882-05:00 claude-cloud sshd[1171506]: Invalid user centos from 91.92.40.13 port 47462 2026-07-01T20:12:42.217848-05:00 claude-cloud sshd[1171506]: Connection closed by invalid user centos 91.92.40.13 port 47462 [preauth] 2026-07-01T20:13:47.061441-05:00 claude-cloud sshd[1171698]: Connection closed by 165.154.236.241 port 62002 2026-07-01T20:13:47.402259-05:00 claude-cloud sshd[1171699]: Unable to negotiate with 165.154.236.241 port 62196: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1 [preauth] 2026-07-01T20:14:21.007527-05:00 claude-cloud sshd[1171800]: Invalid user centos from 91.92.40.13 port 40190 2026-07-01T20:14:21.022468-05:00 claude-cloud sshd[1171800]: Connection closed by invalid user centos 91.92.40.13 port 40190 [preauth] 2026-07-01T20:14:21.517893-05:00 claude-cloud systemd-logind[853]: New session c5788 of user claude. 2026-07-01T20:14:21.802491-05:00 claude-cloud systemd-logind[853]: Session c5788 logged out. Waiting for processes to exit. 2026-07-01T20:14:21.803411-05:00 claude-cloud systemd-logind[853]: Removed session c5788. 2026-07-01T20:15:01.703482-05:00 claude-cloud CRON[1171936]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T20:15:01.710299-05:00 claude-cloud CRON[1171936]: pam_unix(cron:session): session closed for user root 2026-07-01T20:15:46.957719-05:00 claude-cloud sshd[1172078]: Invalid user karrington from 2.57.121.112 port 7368 2026-07-01T20:15:46.983897-05:00 claude-cloud sshd[1172078]: Connection closed by invalid user karrington 2.57.121.112 port 7368 [preauth] 2026-07-01T20:15:58.836918-05:00 claude-cloud sshd[1172106]: Invalid user centos from 91.92.40.13 port 49802 2026-07-01T20:15:58.854566-05:00 claude-cloud sshd[1172106]: Connection closed by invalid user centos 91.92.40.13 port 49802 [preauth] 2026-07-01T20:16:28.369484-05:00 claude-cloud sshd[1172162]: Connection closed by authenticating user root 27.71.230.31 port 59318 [preauth] 2026-07-01T20:17:01.718479-05:00 claude-cloud CRON[1172286]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T20:17:01.728863-05:00 claude-cloud CRON[1172286]: pam_unix(cron:session): session closed for user root 2026-07-01T20:17:41.553111-05:00 claude-cloud sshd[1172401]: Invalid user centos from 91.92.40.13 port 47832 2026-07-01T20:17:41.568454-05:00 claude-cloud sshd[1172401]: Connection closed by invalid user centos 91.92.40.13 port 47832 [preauth] 2026-07-01T20:18:24.138960-05:00 claude-cloud sshd[1172523]: userauth_pubkey: signature algorithm ssh-dss not in PubkeyAcceptedAlgorithms [preauth] 2026-07-01T20:18:24.166346-05:00 claude-cloud sshd[1172523]: Received disconnect from 62.210.199.83 port 13012:11: disconnected by user [preauth] 2026-07-01T20:18:24.166632-05:00 claude-cloud sshd[1172523]: Disconnected from authenticating user root 62.210.199.83 port 13012 [preauth] 2026-07-01T20:19:24.806773-05:00 claude-cloud sshd[1172703]: Invalid user debian from 91.92.40.13 port 39014 2026-07-01T20:19:24.826731-05:00 claude-cloud sshd[1172703]: Connection closed by invalid user debian 91.92.40.13 port 39014 [preauth] 2026-07-01T20:19:25.099921-05:00 claude-cloud systemd-logind[853]: New session c5789 of user claude. 2026-07-01T20:19:25.392383-05:00 claude-cloud systemd-logind[853]: Session c5789 logged out. Waiting for processes to exit. 2026-07-01T20:19:25.394267-05:00 claude-cloud systemd-logind[853]: Removed session c5789. 2026-07-01T20:22:40.102603-05:00 claude-cloud sshd[1173273]: Connection closed by authenticating user root 27.71.230.31 port 57682 [preauth] 2026-07-01T20:24:28.546486-05:00 claude-cloud systemd-logind[853]: New session c5790 of user claude. 2026-07-01T20:24:28.823959-05:00 claude-cloud systemd-logind[853]: Session c5790 logged out. Waiting for processes to exit. 2026-07-01T20:24:28.825917-05:00 claude-cloud systemd-logind[853]: Removed session c5790. 2026-07-01T20:25:01.742612-05:00 claude-cloud CRON[1173746]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T20:25:01.748832-05:00 claude-cloud CRON[1173746]: pam_unix(cron:session): session closed for user root 2026-07-01T20:25:49.949686-05:00 claude-cloud sshd[1173923]: Invalid user admin from 139.19.117.197 port 50334 2026-07-01T20:25:49.955003-05:00 claude-cloud sshd[1173923]: userauth_pubkey: signature algorithm ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] 2026-07-01T20:25:59.870942-05:00 claude-cloud sshd[1173923]: Connection closed by invalid user admin 139.19.117.197 port 50334 [preauth] 2026-07-01T20:28:29.924973-05:00 claude-cloud sshd[1174321]: Connection closed by authenticating user root 27.71.230.31 port 39340 [preauth] 2026-07-01T20:29:32.384873-05:00 claude-cloud systemd-logind[853]: New session c5791 of user claude. 2026-07-01T20:29:32.668813-05:00 claude-cloud systemd-logind[853]: Session c5791 logged out. Waiting for processes to exit. 2026-07-01T20:29:32.670412-05:00 claude-cloud systemd-logind[853]: Removed session c5791. 2026-07-01T20:30:08.159845-05:00 claude-cloud sshd[1174646]: Received disconnect from 179.61.232.244 port 59220:11: disconnected by user [preauth] 2026-07-01T20:30:08.161585-05:00 claude-cloud sshd[1174646]: Disconnected from authenticating user root 179.61.232.244 port 59220 [preauth] 2026-07-01T20:30:14.297976-05:00 claude-cloud sshd[1174667]: Invalid user debian from 91.92.40.13 port 50736 2026-07-01T20:30:14.313554-05:00 claude-cloud sshd[1174667]: Connection closed by invalid user debian 91.92.40.13 port 50736 [preauth] 2026-07-01T20:30:16.322925-05:00 claude-cloud sshd[1174679]: Invalid user admin from 45.148.10.121 port 35110 2026-07-01T20:30:16.336251-05:00 claude-cloud sshd[1174679]: Connection closed by invalid user admin 45.148.10.121 port 35110 [preauth] 2026-07-01T20:32:07.131650-05:00 claude-cloud sshd[1175062]: Invalid user debian from 91.92.40.13 port 53220 2026-07-01T20:32:07.147436-05:00 claude-cloud sshd[1175062]: Connection closed by invalid user debian 91.92.40.13 port 53220 [preauth] 2026-07-01T20:33:54.994111-05:00 claude-cloud sshd[1175373]: Invalid user deploy from 91.92.40.13 port 49640 2026-07-01T20:33:55.018355-05:00 claude-cloud sshd[1175373]: Connection closed by invalid user deploy 91.92.40.13 port 49640 [preauth] 2026-07-01T20:34:25.982511-05:00 claude-cloud sshd[1175424]: Connection closed by authenticating user root 27.71.230.31 port 56328 [preauth] 2026-07-01T20:34:35.832615-05:00 claude-cloud systemd-logind[853]: New session c5792 of user claude. 2026-07-01T20:34:36.143304-05:00 claude-cloud systemd-logind[853]: Session c5792 logged out. Waiting for processes to exit. 2026-07-01T20:34:36.144581-05:00 claude-cloud systemd-logind[853]: Removed session c5792. 2026-07-01T20:35:01.759384-05:00 claude-cloud CRON[1175573]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T20:35:01.766644-05:00 claude-cloud CRON[1175573]: pam_unix(cron:session): session closed for user root 2026-07-01T20:35:50.756412-05:00 claude-cloud sshd[1175714]: Invalid user deploy from 91.92.40.13 port 57768 2026-07-01T20:35:50.771635-05:00 claude-cloud sshd[1175714]: Connection closed by invalid user deploy 91.92.40.13 port 57768 [preauth] 2026-07-01T20:37:56.750944-05:00 claude-cloud sshd[1176078]: Invalid user deploy from 91.92.40.13 port 53232 2026-07-01T20:37:56.766480-05:00 claude-cloud sshd[1176078]: Connection closed by invalid user deploy 91.92.40.13 port 53232 [preauth] 2026-07-01T20:39:39.287077-05:00 claude-cloud systemd-logind[853]: New session c5793 of user claude. 2026-07-01T20:39:39.627944-05:00 claude-cloud systemd-logind[853]: Session c5793 logged out. Waiting for processes to exit. 2026-07-01T20:39:39.629468-05:00 claude-cloud systemd-logind[853]: Removed session c5793. 2026-07-01T20:40:20.384707-05:00 claude-cloud sshd[1176473]: Connection closed by authenticating user root 27.71.230.31 port 53774 [preauth] 2026-07-01T20:40:33.030488-05:00 claude-cloud sshd[1176523]: Connection closed by authenticating user root 171.244.61.79 port 37472 [preauth] 2026-07-01T20:43:21.943493-05:00 claude-cloud sshd[1177073]: Invalid user admin from 2.57.121.25 port 59486 2026-07-01T20:43:21.968765-05:00 claude-cloud sshd[1177073]: Connection closed by invalid user admin 2.57.121.25 port 59486 [preauth] 2026-07-01T20:44:43.040444-05:00 claude-cloud systemd-logind[853]: New session c5794 of user claude. 2026-07-01T20:44:43.328170-05:00 claude-cloud systemd-logind[853]: Session c5794 logged out. Waiting for processes to exit. 2026-07-01T20:44:43.329840-05:00 claude-cloud systemd-logind[853]: Removed session c5794. 2026-07-01T20:45:01.777900-05:00 claude-cloud CRON[1177379]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T20:45:01.784045-05:00 claude-cloud CRON[1177379]: pam_unix(cron:session): session closed for user root 2026-07-01T20:46:18.608142-05:00 claude-cloud sshd[1177582]: Connection closed by authenticating user root 27.71.230.31 port 41652 [preauth] 2026-07-01T20:48:21.629746-05:00 claude-cloud sshd[1177965]: Invalid user deploy from 91.92.40.13 port 36458 2026-07-01T20:48:21.646584-05:00 claude-cloud sshd[1177965]: Connection closed by invalid user deploy 91.92.40.13 port 36458 [preauth] 2026-07-01T20:49:46.560974-05:00 claude-cloud systemd-logind[853]: New session c5795 of user claude. 2026-07-01T20:49:46.836107-05:00 claude-cloud systemd-logind[853]: Session c5795 logged out. Waiting for processes to exit. 2026-07-01T20:49:46.837822-05:00 claude-cloud systemd-logind[853]: Removed session c5795. 2026-07-01T20:50:36.037660-05:00 claude-cloud sshd[1178335]: Invalid user deploy from 91.92.40.13 port 50872 2026-07-01T20:50:36.064501-05:00 claude-cloud sshd[1178335]: Connection closed by invalid user deploy 91.92.40.13 port 50872 [preauth] 2026-07-01T20:52:21.304303-05:00 claude-cloud sshd[1178642]: Invalid user user from 193.46.255.86 port 37084 2026-07-01T20:52:21.331243-05:00 claude-cloud sshd[1178642]: Connection closed by invalid user user 193.46.255.86 port 37084 [preauth] 2026-07-01T20:52:27.265869-05:00 claude-cloud sshd[1178622]: Connection closed by authenticating user root 27.71.230.31 port 55244 [preauth] 2026-07-01T20:52:40.749448-05:00 claude-cloud systemd-logind[853]: New session c5796 of user claude. 2026-07-01T20:52:40.890539-05:00 claude-cloud systemd-logind[853]: Session c5796 logged out. Waiting for processes to exit. 2026-07-01T20:52:40.892625-05:00 claude-cloud systemd-logind[853]: Removed session c5796. 2026-07-01T20:53:16.631718-05:00 claude-cloud systemd-logind[853]: New session c5797 of user claude. 2026-07-01T20:53:16.955477-05:00 claude-cloud systemd-logind[853]: Session c5797 logged out. Waiting for processes to exit. 2026-07-01T20:53:16.958904-05:00 claude-cloud systemd-logind[853]: Removed session c5797. 2026-07-01T20:53:34.187572-05:00 claude-cloud sshd[1178947]: Received disconnect from 83.233.149.204 port 60874:11: Bye Bye [preauth] 2026-07-01T20:53:34.187908-05:00 claude-cloud sshd[1178947]: Disconnected from authenticating user root 83.233.149.204 port 60874 [preauth] 2026-07-01T20:54:50.033910-05:00 claude-cloud systemd-logind[853]: New session c5798 of user claude. 2026-07-01T20:54:50.285268-05:00 claude-cloud systemd-logind[853]: Session c5798 logged out. Waiting for processes to exit. 2026-07-01T20:54:50.286728-05:00 claude-cloud systemd-logind[853]: Removed session c5798. 2026-07-01T20:55:01.796956-05:00 claude-cloud CRON[1179215]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T20:55:01.802467-05:00 claude-cloud CRON[1179215]: pam_unix(cron:session): session closed for user root 2026-07-01T20:58:20.339602-05:00 claude-cloud sshd[1179755]: Connection closed by authenticating user root 27.71.230.31 port 50752 [preauth] 2026-07-01T20:59:53.408545-05:00 claude-cloud systemd-logind[853]: New session c5799 of user claude. 2026-07-01T20:59:53.708293-05:00 claude-cloud systemd-logind[853]: Session c5799 logged out. Waiting for processes to exit. 2026-07-01T20:59:53.710918-05:00 claude-cloud systemd-logind[853]: Removed session c5799. 2026-07-01T21:02:48.469516-05:00 claude-cloud sshd[1180641]: Received disconnect from 117.159.39.226 port 45530:11: Bye Bye [preauth] 2026-07-01T21:02:48.470504-05:00 claude-cloud sshd[1180641]: Disconnected from authenticating user root 117.159.39.226 port 45530 [preauth] 2026-07-01T21:04:17.382506-05:00 claude-cloud sshd[1180882]: Invalid user db2inst from 171.25.158.68 port 64176 2026-07-01T21:04:17.419259-05:00 claude-cloud sshd[1180882]: Received disconnect from 171.25.158.68 port 64176:11: Bye Bye [preauth] 2026-07-01T21:04:17.419884-05:00 claude-cloud sshd[1180882]: Disconnected from invalid user db2inst 171.25.158.68 port 64176 [preauth] 2026-07-01T21:04:19.682762-05:00 claude-cloud sshd[1180850]: Connection closed by authenticating user root 27.71.230.31 port 47722 [preauth] 2026-07-01T21:04:56.892633-05:00 claude-cloud systemd-logind[853]: New session c5800 of user claude. 2026-07-01T21:04:57.196828-05:00 claude-cloud systemd-logind[853]: Session c5800 logged out. Waiting for processes to exit. 2026-07-01T21:04:57.199198-05:00 claude-cloud systemd-logind[853]: Removed session c5800. 2026-07-01T21:05:01.832244-05:00 claude-cloud CRON[1181031]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T21:05:01.840398-05:00 claude-cloud CRON[1181031]: pam_unix(cron:session): session closed for user root 2026-07-01T21:06:00.165130-05:00 claude-cloud sshd[1181192]: Invalid user from 64.62.197.175 port 14353 2026-07-01T21:06:03.475889-05:00 claude-cloud sshd[1181192]: Connection closed by invalid user 64.62.197.175 port 14353 [preauth] 2026-07-01T21:06:23.290263-05:00 claude-cloud sshd[1181253]: Received disconnect from 79.40.60.117 port 42044:11: Bye Bye [preauth] 2026-07-01T21:06:23.290966-05:00 claude-cloud sshd[1181253]: Disconnected from authenticating user root 79.40.60.117 port 42044 [preauth] 2026-07-01T21:07:01.564894-05:00 claude-cloud sshd[1181451]: Received disconnect from 83.233.149.204 port 59845:11: Bye Bye [preauth] 2026-07-01T21:07:01.565798-05:00 claude-cloud sshd[1181451]: Disconnected from authenticating user root 83.233.149.204 port 59845 [preauth] 2026-07-01T21:07:48.134659-05:00 claude-cloud sshd[1181583]: Received disconnect from 165.227.170.113 port 51188:11: Bye Bye [preauth] 2026-07-01T21:07:48.135663-05:00 claude-cloud sshd[1181583]: Disconnected from authenticating user root 165.227.170.113 port 51188 [preauth] 2026-07-01T21:07:50.311565-05:00 claude-cloud sshd[1181590]: Received disconnect from 20.172.240.136 port 45894:11: Bye Bye [preauth] 2026-07-01T21:07:50.311878-05:00 claude-cloud sshd[1181590]: Disconnected from authenticating user root 20.172.240.136 port 45894 [preauth] 2026-07-01T21:08:47.652475-05:00 claude-cloud sshd[1181768]: Received disconnect from 83.233.149.204 port 59089:11: Bye Bye [preauth] 2026-07-01T21:08:47.653175-05:00 claude-cloud sshd[1181768]: Disconnected from authenticating user root 83.233.149.204 port 59089 [preauth] 2026-07-01T21:10:00.503200-05:00 claude-cloud systemd-logind[853]: New session c5801 of user claude. 2026-07-01T21:10:00.826975-05:00 claude-cloud systemd-logind[853]: Session c5801 logged out. Waiting for processes to exit. 2026-07-01T21:10:00.828242-05:00 claude-cloud systemd-logind[853]: Removed session c5801. 2026-07-01T21:10:26.502756-05:00 claude-cloud sshd[1182081]: Received disconnect from 83.233.149.204 port 63703:11: Bye Bye [preauth] 2026-07-01T21:10:26.503345-05:00 claude-cloud sshd[1182081]: Disconnected from authenticating user root 83.233.149.204 port 63703 [preauth] 2026-07-01T21:10:31.455065-05:00 claude-cloud sshd[1182023]: Connection closed by authenticating user root 27.71.230.31 port 37834 [preauth] 2026-07-01T21:10:38.458247-05:00 claude-cloud sshd[1182041]: Connection closed by 101.35.238.93 port 33010 [preauth] 2026-07-01T21:11:23.673840-05:00 claude-cloud sshd[1182261]: Invalid user admin from 198.98.56.227 port 56198 2026-07-01T21:11:23.773929-05:00 claude-cloud sshd[1182261]: Received disconnect from 198.98.56.227 port 56198:11: Bye Bye [preauth] 2026-07-01T21:11:23.774173-05:00 claude-cloud sshd[1182261]: Disconnected from invalid user admin 198.98.56.227 port 56198 [preauth] 2026-07-01T21:11:59.243796-05:00 claude-cloud sshd[1182357]: Received disconnect from 83.233.149.204 port 59789:11: Bye Bye [preauth] 2026-07-01T21:11:59.245835-05:00 claude-cloud sshd[1182357]: Disconnected from authenticating user root 83.233.149.204 port 59789 [preauth] 2026-07-01T21:12:41.209653-05:00 claude-cloud sshd[1182474]: Received disconnect from 178.156.191.87 port 36204:11: Bye Bye [preauth] 2026-07-01T21:12:41.210424-05:00 claude-cloud sshd[1182474]: Disconnected from authenticating user root 178.156.191.87 port 36204 [preauth] 2026-07-01T21:13:35.828177-05:00 claude-cloud sshd[1182693]: Received disconnect from 83.233.149.204 port 63052:11: Bye Bye [preauth] 2026-07-01T21:13:35.829143-05:00 claude-cloud sshd[1182693]: Disconnected from authenticating user root 83.233.149.204 port 63052 [preauth] 2026-07-01T21:15:01.856125-05:00 claude-cloud CRON[1182973]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T21:15:01.864016-05:00 claude-cloud CRON[1182973]: pam_unix(cron:session): session closed for user root 2026-07-01T21:15:04.095670-05:00 claude-cloud systemd-logind[853]: New session c5802 of user claude. 2026-07-01T21:15:04.482346-05:00 claude-cloud systemd-logind[853]: Session c5802 logged out. Waiting for processes to exit. 2026-07-01T21:15:04.484816-05:00 claude-cloud systemd-logind[853]: Removed session c5802. 2026-07-01T21:15:14.072818-05:00 claude-cloud sshd[1183017]: Received disconnect from 83.233.149.204 port 59549:11: Bye Bye [preauth] 2026-07-01T21:15:14.074745-05:00 claude-cloud sshd[1183017]: Disconnected from authenticating user root 83.233.149.204 port 59549 [preauth] 2026-07-01T21:15:29.068889-05:00 claude-cloud sshd[1183062]: Received disconnect from 165.227.170.113 port 51012:11: Bye Bye [preauth] 2026-07-01T21:15:29.069341-05:00 claude-cloud sshd[1183062]: Disconnected from authenticating user root 165.227.170.113 port 51012 [preauth] 2026-07-01T21:15:47.979556-05:00 claude-cloud sshd[1183111]: Received disconnect from 171.25.158.68 port 35414:11: Bye Bye [preauth] 2026-07-01T21:15:47.980079-05:00 claude-cloud sshd[1183111]: Disconnected from authenticating user root 171.25.158.68 port 35414 [preauth] 2026-07-01T21:16:04.527191-05:00 claude-cloud sshd[1183165]: Connection closed by 195.178.110.228 port 50640 2026-07-01T21:16:20.010980-05:00 claude-cloud sshd[1183218]: Received disconnect from 79.40.60.117 port 34644:11: Bye Bye [preauth] 2026-07-01T21:16:20.011394-05:00 claude-cloud sshd[1183218]: Disconnected from authenticating user root 79.40.60.117 port 34644 [preauth] 2026-07-01T21:16:22.348435-05:00 claude-cloud sshd[1183201]: Connection closed by authenticating user root 27.71.230.31 port 43290 [preauth] 2026-07-01T21:16:29.714673-05:00 claude-cloud sshd[1183239]: Received disconnect from 198.98.56.227 port 51934:11: Bye Bye [preauth] 2026-07-01T21:16:29.715007-05:00 claude-cloud sshd[1183239]: Disconnected from authenticating user root 198.98.56.227 port 51934 [preauth] 2026-07-01T21:16:33.839573-05:00 claude-cloud sshd[1183265]: Received disconnect from 20.172.240.136 port 51480:11: Bye Bye [preauth] 2026-07-01T21:16:33.839741-05:00 claude-cloud sshd[1183265]: Disconnected from authenticating user root 20.172.240.136 port 51480 [preauth] 2026-07-01T21:16:40.481015-05:00 claude-cloud sshd[1183302]: Received disconnect from 178.156.191.87 port 38010:11: Bye Bye [preauth] 2026-07-01T21:16:40.481749-05:00 claude-cloud sshd[1183302]: Disconnected from authenticating user root 178.156.191.87 port 38010 [preauth] 2026-07-01T21:16:50.035558-05:00 claude-cloud sshd[1183335]: Received disconnect from 115.190.44.249 port 56118:11: Bye Bye [preauth] 2026-07-01T21:16:50.036662-05:00 claude-cloud sshd[1183335]: Disconnected from authenticating user root 115.190.44.249 port 56118 [preauth] 2026-07-01T21:16:53.566138-05:00 claude-cloud sshd[1183358]: Received disconnect from 83.233.149.204 port 60991:11: Bye Bye [preauth] 2026-07-01T21:16:53.566572-05:00 claude-cloud sshd[1183358]: Disconnected from authenticating user root 83.233.149.204 port 60991 [preauth] 2026-07-01T21:17:01.874040-05:00 claude-cloud CRON[1183391]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T21:17:01.880529-05:00 claude-cloud CRON[1183391]: pam_unix(cron:session): session closed for user root 2026-07-01T21:17:04.048428-05:00 claude-cloud sshd[1183394]: Received disconnect from 165.227.170.113 port 48054:11: Bye Bye [preauth] 2026-07-01T21:17:04.048824-05:00 claude-cloud sshd[1183394]: Disconnected from authenticating user root 165.227.170.113 port 48054 [preauth] 2026-07-01T21:17:24.896130-05:00 claude-cloud sshd[1183455]: Received disconnect from 171.25.158.68 port 29538:11: Bye Bye [preauth] 2026-07-01T21:17:24.896889-05:00 claude-cloud sshd[1183455]: Disconnected from authenticating user root 171.25.158.68 port 29538 [preauth] 2026-07-01T21:18:08.935527-05:00 claude-cloud sshd[1183563]: Invalid user guest from 198.98.56.227 port 57436 2026-07-01T21:18:09.039145-05:00 claude-cloud sshd[1183563]: Received disconnect from 198.98.56.227 port 57436:11: Bye Bye [preauth] 2026-07-01T21:18:09.039515-05:00 claude-cloud sshd[1183563]: Disconnected from invalid user guest 198.98.56.227 port 57436 [preauth] 2026-07-01T21:18:09.214019-05:00 claude-cloud sshd[1183565]: Invalid user test from 20.172.240.136 port 34250 2026-07-01T21:18:09.318822-05:00 claude-cloud sshd[1183565]: Received disconnect from 20.172.240.136 port 34250:11: Bye Bye [preauth] 2026-07-01T21:18:09.319140-05:00 claude-cloud sshd[1183565]: Disconnected from invalid user test 20.172.240.136 port 34250 [preauth] 2026-07-01T21:18:12.610500-05:00 claude-cloud sshd[1183580]: Invalid user test from 178.156.191.87 port 45390 2026-07-01T21:18:12.714558-05:00 claude-cloud sshd[1183580]: Received disconnect from 178.156.191.87 port 45390:11: Bye Bye [preauth] 2026-07-01T21:18:12.714744-05:00 claude-cloud sshd[1183580]: Disconnected from invalid user test 178.156.191.87 port 45390 [preauth] 2026-07-01T21:18:21.311304-05:00 claude-cloud sshd[1183607]: Received disconnect from 83.233.149.204 port 62655:11: Bye Bye [preauth] 2026-07-01T21:18:21.311901-05:00 claude-cloud sshd[1183607]: Disconnected from authenticating user root 83.233.149.204 port 62655 [preauth] 2026-07-01T21:18:35.759578-05:00 claude-cloud sshd[1183639]: Received disconnect from 79.40.60.117 port 40832:11: Bye Bye [preauth] 2026-07-01T21:18:35.760473-05:00 claude-cloud sshd[1183639]: Disconnected from authenticating user root 79.40.60.117 port 40832 [preauth] 2026-07-01T21:18:46.126228-05:00 claude-cloud sshd[1183687]: Invalid user david from 165.227.170.113 port 36960 2026-07-01T21:18:46.136675-05:00 claude-cloud sshd[1183687]: Received disconnect from 165.227.170.113 port 36960:11: Bye Bye [preauth] 2026-07-01T21:18:46.136873-05:00 claude-cloud sshd[1183687]: Disconnected from invalid user david 165.227.170.113 port 36960 [preauth] 2026-07-01T21:18:56.909011-05:00 claude-cloud sshd[1183748]: Invalid user guest from 171.25.158.68 port 11212 2026-07-01T21:18:56.952807-05:00 claude-cloud sshd[1183748]: Received disconnect from 171.25.158.68 port 11212:11: Bye Bye [preauth] 2026-07-01T21:18:56.953030-05:00 claude-cloud sshd[1183748]: Disconnected from invalid user guest 171.25.158.68 port 11212 [preauth] 2026-07-01T21:19:38.307607-05:00 claude-cloud sshd[1183866]: Invalid user david from 198.98.56.227 port 34702 2026-07-01T21:19:38.404370-05:00 claude-cloud sshd[1183866]: Received disconnect from 198.98.56.227 port 34702:11: Bye Bye [preauth] 2026-07-01T21:19:38.404724-05:00 claude-cloud sshd[1183866]: Disconnected from invalid user david 198.98.56.227 port 34702 [preauth] 2026-07-01T21:19:46.832799-05:00 claude-cloud sshd[1183881]: Received disconnect from 178.156.191.87 port 43656:11: Bye Bye [preauth] 2026-07-01T21:19:46.833131-05:00 claude-cloud sshd[1183881]: Disconnected from authenticating user root 178.156.191.87 port 43656 [preauth] 2026-07-01T21:19:47.094965-05:00 claude-cloud sshd[1183886]: Received disconnect from 20.172.240.136 port 35424:11: Bye Bye [preauth] 2026-07-01T21:19:47.095598-05:00 claude-cloud sshd[1183886]: Disconnected from authenticating user root 20.172.240.136 port 35424 [preauth] 2026-07-01T21:19:52.268470-05:00 claude-cloud sshd[1183913]: Received disconnect from 83.233.149.204 port 61967:11: Bye Bye [preauth] 2026-07-01T21:19:52.269429-05:00 claude-cloud sshd[1183913]: Disconnected from authenticating user root 83.233.149.204 port 61967 [preauth] 2026-07-01T21:20:04.257066-05:00 claude-cloud sshd[1183942]: Received disconnect from 176.65.131.192 port 28338:11: disconnected by user [preauth] 2026-07-01T21:20:04.257753-05:00 claude-cloud sshd[1183942]: Disconnected from authenticating user root 176.65.131.192 port 28338 [preauth] 2026-07-01T21:20:10.750086-05:00 claude-cloud systemd-logind[853]: New session c5803 of user claude. 2026-07-01T21:20:11.046055-05:00 claude-cloud systemd-logind[853]: Session c5803 logged out. Waiting for processes to exit. 2026-07-01T21:20:11.048000-05:00 claude-cloud systemd-logind[853]: Removed session c5803. 2026-07-01T21:20:28.194546-05:00 claude-cloud sshd[1184022]: Invalid user admin from 165.227.170.113 port 55316 2026-07-01T21:20:28.206968-05:00 claude-cloud sshd[1184022]: Received disconnect from 165.227.170.113 port 55316:11: Bye Bye [preauth] 2026-07-01T21:20:28.207414-05:00 claude-cloud sshd[1184022]: Disconnected from invalid user admin 165.227.170.113 port 55316 [preauth] 2026-07-01T21:20:37.401906-05:00 claude-cloud sshd[1184043]: Received disconnect from 171.25.158.68 port 20568:11: Bye Bye [preauth] 2026-07-01T21:20:37.402134-05:00 claude-cloud sshd[1184043]: Disconnected from authenticating user root 171.25.158.68 port 20568 [preauth] 2026-07-01T21:20:51.191098-05:00 claude-cloud sshd[1183846]: Connection closed by 117.159.39.226 port 55544 [preauth] 2026-07-01T21:20:53.799969-05:00 claude-cloud sshd[1184104]: Received disconnect from 79.40.60.117 port 47020:11: Bye Bye [preauth] 2026-07-01T21:20:53.800329-05:00 claude-cloud sshd[1184104]: Disconnected from authenticating user root 79.40.60.117 port 47020 [preauth] 2026-07-01T21:21:10.070915-05:00 claude-cloud sshd[1184139]: Invalid user ftpuser from 198.98.56.227 port 40206 2026-07-01T21:21:10.165103-05:00 claude-cloud sshd[1184139]: Received disconnect from 198.98.56.227 port 40206:11: Bye Bye [preauth] 2026-07-01T21:21:10.165595-05:00 claude-cloud sshd[1184139]: Disconnected from invalid user ftpuser 198.98.56.227 port 40206 [preauth] 2026-07-01T21:21:22.605105-05:00 claude-cloud sshd[1184201]: Received disconnect from 178.156.191.87 port 55090:11: Bye Bye [preauth] 2026-07-01T21:21:22.605518-05:00 claude-cloud sshd[1184201]: Disconnected from authenticating user root 178.156.191.87 port 55090 [preauth] 2026-07-01T21:21:25.326304-05:00 claude-cloud sshd[1184223]: Received disconnect from 83.233.149.204 port 61714:11: Bye Bye [preauth] 2026-07-01T21:21:25.329413-05:00 claude-cloud sshd[1184223]: Disconnected from authenticating user root 83.233.149.204 port 61714 [preauth] 2026-07-01T21:21:32.472451-05:00 claude-cloud sshd[1184240]: Received disconnect from 20.172.240.136 port 41338:11: Bye Bye [preauth] 2026-07-01T21:21:32.472869-05:00 claude-cloud sshd[1184240]: Disconnected from authenticating user root 20.172.240.136 port 41338 [preauth] 2026-07-01T21:21:39.445344-05:00 claude-cloud sshd[1184288]: Received disconnect from 199.127.60.187 port 19406:11: disconnected by user [preauth] 2026-07-01T21:21:39.446765-05:00 claude-cloud sshd[1184288]: Disconnected from authenticating user root 199.127.60.187 port 19406 [preauth] 2026-07-01T21:22:08.235573-05:00 claude-cloud sshd[1184395]: Invalid user guest from 165.227.170.113 port 44296 2026-07-01T21:22:08.246413-05:00 claude-cloud sshd[1184395]: Received disconnect from 165.227.170.113 port 44296:11: Bye Bye [preauth] 2026-07-01T21:22:08.246642-05:00 claude-cloud sshd[1184395]: Disconnected from invalid user guest 165.227.170.113 port 44296 [preauth] 2026-07-01T21:22:08.589556-05:00 claude-cloud sshd[1184401]: Received disconnect from 171.25.158.68 port 36612:11: Bye Bye [preauth] 2026-07-01T21:22:08.590042-05:00 claude-cloud sshd[1184401]: Disconnected from authenticating user root 171.25.158.68 port 36612 [preauth] 2026-07-01T21:22:08.979046-05:00 claude-cloud sshd[1184403]: Connection closed by 220.154.133.166 port 60042 2026-07-01T21:22:12.132915-05:00 claude-cloud sshd[1184404]: Connection closed by authenticating user root 220.154.133.166 port 60056 [preauth] 2026-07-01T21:22:14.697834-05:00 claude-cloud sshd[1184416]: Received disconnect from 203.145.143.163 port 49832:11: Bye Bye [preauth] 2026-07-01T21:22:14.698152-05:00 claude-cloud sshd[1184416]: Disconnected from authenticating user root 203.145.143.163 port 49832 [preauth] 2026-07-01T21:22:39.275572-05:00 claude-cloud sshd[1184419]: Connection closed by authenticating user root 27.71.230.31 port 49696 [preauth] 2026-07-01T21:22:43.035949-05:00 claude-cloud sshd[1184637]: Received disconnect from 198.98.56.227 port 45714:11: Bye Bye [preauth] 2026-07-01T21:22:43.036728-05:00 claude-cloud sshd[1184637]: Disconnected from authenticating user root 198.98.56.227 port 45714 [preauth] 2026-07-01T21:22:54.550515-05:00 claude-cloud sshd[1184771]: Invalid user admin1 from 117.72.212.5 port 54804 2026-07-01T21:22:54.610400-05:00 claude-cloud sshd[1184774]: Received disconnect from 178.156.191.87 port 49854:11: Bye Bye [preauth] 2026-07-01T21:22:54.610726-05:00 claude-cloud sshd[1184774]: Disconnected from authenticating user root 178.156.191.87 port 49854 [preauth] 2026-07-01T21:22:54.687144-05:00 claude-cloud sshd[1184771]: Received disconnect from 117.72.212.5 port 54804:11: Bye Bye [preauth] 2026-07-01T21:22:54.687515-05:00 claude-cloud sshd[1184771]: Disconnected from invalid user admin1 117.72.212.5 port 54804 [preauth] 2026-07-01T21:22:56.779436-05:00 claude-cloud sshd[1184778]: Received disconnect from 83.233.149.204 port 64834:11: Bye Bye [preauth] 2026-07-01T21:22:56.779806-05:00 claude-cloud sshd[1184778]: Disconnected from authenticating user root 83.233.149.204 port 64834 [preauth] 2026-07-01T21:23:10.650382-05:00 claude-cloud sshd[1184898]: Received disconnect from 79.40.60.117 port 53212:11: Bye Bye [preauth] 2026-07-01T21:23:10.650822-05:00 claude-cloud sshd[1184898]: Disconnected from authenticating user root 79.40.60.117 port 53212 [preauth] 2026-07-01T21:23:21.310481-05:00 claude-cloud sshd[1185085]: Received disconnect from 20.172.240.136 port 58902:11: Bye Bye [preauth] 2026-07-01T21:23:21.310710-05:00 claude-cloud sshd[1185085]: Disconnected from authenticating user root 20.172.240.136 port 58902 [preauth] 2026-07-01T21:23:28.391083-05:00 claude-cloud sshd[1185202]: Received disconnect from 115.190.44.249 port 59032:11: Bye Bye [preauth] 2026-07-01T21:23:28.391834-05:00 claude-cloud sshd[1185202]: Disconnected from authenticating user root 115.190.44.249 port 59032 [preauth] 2026-07-01T21:23:30.196475-05:00 claude-cloud sshd[1185215]: Received disconnect from 45.61.187.220 port 36962:11: Bye Bye [preauth] 2026-07-01T21:23:30.196734-05:00 claude-cloud sshd[1185215]: Disconnected from authenticating user root 45.61.187.220 port 36962 [preauth] 2026-07-01T21:23:36.991103-05:00 claude-cloud sshd[1185511]: Invalid user admin from 171.25.158.68 port 19858 2026-07-01T21:23:37.029703-05:00 claude-cloud sshd[1185511]: Received disconnect from 171.25.158.68 port 19858:11: Bye Bye [preauth] 2026-07-01T21:23:37.029925-05:00 claude-cloud sshd[1185511]: Disconnected from invalid user admin 171.25.158.68 port 19858 [preauth] 2026-07-01T21:23:47.369190-05:00 claude-cloud sshd[1185710]: Received disconnect from 165.227.170.113 port 41672:11: Bye Bye [preauth] 2026-07-01T21:23:47.370710-05:00 claude-cloud sshd[1185710]: Disconnected from authenticating user root 165.227.170.113 port 41672 [preauth] 2026-07-01T21:24:14.562069-05:00 claude-cloud sshd[1185933]: Received disconnect from 198.98.56.227 port 51226:11: Bye Bye [preauth] 2026-07-01T21:24:14.562886-05:00 claude-cloud sshd[1185933]: Disconnected from authenticating user root 198.98.56.227 port 51226 [preauth] 2026-07-01T21:24:21.865139-05:00 claude-cloud sshd[1185993]: Received disconnect from 178.156.191.87 port 52692:11: Bye Bye [preauth] 2026-07-01T21:24:21.867236-05:00 claude-cloud sshd[1185993]: Disconnected from authenticating user root 178.156.191.87 port 52692 [preauth] 2026-07-01T21:24:22.947019-05:00 claude-cloud sshd[1185995]: Connection closed by authenticating user root 185.242.3.195 port 50224 [preauth] 2026-07-01T21:24:29.008333-05:00 claude-cloud sshd[1186088]: Received disconnect from 83.233.149.204 port 59642:11: Bye Bye [preauth] 2026-07-01T21:24:29.008846-05:00 claude-cloud sshd[1186088]: Disconnected from authenticating user root 83.233.149.204 port 59642 [preauth] 2026-07-01T21:24:43.651439-05:00 claude-cloud sshd[1186406]: Connection closed by authenticating user root 195.178.110.228 port 54982 [preauth] 2026-07-01T21:25:01.892343-05:00 claude-cloud CRON[1186606]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T21:25:01.899409-05:00 claude-cloud CRON[1186606]: pam_unix(cron:session): session closed for user root 2026-07-01T21:25:04.811882-05:00 claude-cloud sshd[1186664]: Invalid user ftpuser from 171.25.158.68 port 16852 2026-07-01T21:25:04.856162-05:00 claude-cloud sshd[1186664]: Received disconnect from 171.25.158.68 port 16852:11: Bye Bye [preauth] 2026-07-01T21:25:04.856580-05:00 claude-cloud sshd[1186664]: Disconnected from invalid user ftpuser 171.25.158.68 port 16852 [preauth] 2026-07-01T21:25:04.996052-05:00 claude-cloud systemd-logind[853]: New session c5804 of user claude. 2026-07-01T21:25:05.045976-05:00 claude-cloud systemd-logind[853]: Session c5804 logged out. Waiting for processes to exit. 2026-07-01T21:25:05.048359-05:00 claude-cloud systemd-logind[853]: Removed session c5804. 2026-07-01T21:25:09.705136-05:00 claude-cloud sshd[1186777]: Invalid user ubuntu from 20.172.240.136 port 44060 2026-07-01T21:25:09.801940-05:00 claude-cloud sshd[1186777]: Received disconnect from 20.172.240.136 port 44060:11: Bye Bye [preauth] 2026-07-01T21:25:09.802132-05:00 claude-cloud sshd[1186777]: Disconnected from invalid user ubuntu 20.172.240.136 port 44060 [preauth] 2026-07-01T21:25:14.475708-05:00 claude-cloud systemd-logind[853]: New session c5805 of user claude. 2026-07-01T21:25:15.013921-05:00 claude-cloud systemd-logind[853]: Session c5805 logged out. Waiting for processes to exit. 2026-07-01T21:25:15.015887-05:00 claude-cloud systemd-logind[853]: Removed session c5805. 2026-07-01T21:25:21.116375-05:00 claude-cloud sshd[1187019]: Received disconnect from 79.40.60.117 port 59400:11: Bye Bye [preauth] 2026-07-01T21:25:21.116783-05:00 claude-cloud sshd[1187019]: Disconnected from authenticating user root 79.40.60.117 port 59400 [preauth] 2026-07-01T21:25:24.670870-05:00 claude-cloud sshd[1187028]: Received disconnect from 165.227.170.113 port 43422:11: Bye Bye [preauth] 2026-07-01T21:25:24.671175-05:00 claude-cloud sshd[1187028]: Disconnected from authenticating user root 165.227.170.113 port 43422 [preauth] 2026-07-01T21:25:38.529420-05:00 claude-cloud sshd[1187343]: Invalid user admin from 139.19.117.197 port 52096 2026-07-01T21:25:38.530371-05:00 claude-cloud sshd[1187343]: userauth_pubkey: signature algorithm ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] 2026-07-01T21:25:43.846406-05:00 claude-cloud sshd[1187457]: Invalid user db2inst from 198.98.56.227 port 56738 2026-07-01T21:25:43.950150-05:00 claude-cloud sshd[1187457]: Received disconnect from 198.98.56.227 port 56738:11: Bye Bye [preauth] 2026-07-01T21:25:43.950622-05:00 claude-cloud sshd[1187457]: Disconnected from invalid user db2inst 198.98.56.227 port 56738 [preauth] 2026-07-01T21:25:48.442114-05:00 claude-cloud sshd[1187343]: Connection closed by invalid user admin 139.19.117.197 port 52096 [preauth] 2026-07-01T21:25:50.280783-05:00 claude-cloud sshd[1187610]: Invalid user hadoop from 178.156.191.87 port 38672 2026-07-01T21:25:50.383594-05:00 claude-cloud sshd[1187610]: Received disconnect from 178.156.191.87 port 38672:11: Bye Bye [preauth] 2026-07-01T21:25:50.383861-05:00 claude-cloud sshd[1187610]: Disconnected from invalid user hadoop 178.156.191.87 port 38672 [preauth] 2026-07-01T21:25:59.264870-05:00 claude-cloud sshd[1187778]: Invalid user oracle from 140.246.137.102 port 42252 2026-07-01T21:25:59.478264-05:00 claude-cloud sshd[1187778]: Received disconnect from 140.246.137.102 port 42252:11: Bye Bye [preauth] 2026-07-01T21:25:59.478825-05:00 claude-cloud sshd[1187778]: Disconnected from invalid user oracle 140.246.137.102 port 42252 [preauth] 2026-07-01T21:26:01.961108-05:00 claude-cloud sshd[1187813]: Received disconnect from 83.233.149.204 port 62603:11: Bye Bye [preauth] 2026-07-01T21:26:01.961790-05:00 claude-cloud sshd[1187813]: Disconnected from authenticating user root 83.233.149.204 port 62603 [preauth] 2026-07-01T21:26:19.478984-05:00 claude-cloud sshd[1188314]: Connection closed by authenticating user root 195.178.110.228 port 58178 [preauth] 2026-07-01T21:26:35.694763-05:00 claude-cloud sshd[1188730]: Received disconnect from 171.25.158.68 port 14728:11: Bye Bye [preauth] 2026-07-01T21:26:35.701761-05:00 claude-cloud sshd[1188730]: Disconnected from authenticating user root 171.25.158.68 port 14728 [preauth] 2026-07-01T21:26:55.093817-05:00 claude-cloud sshd[1189403]: Received disconnect from 140.246.137.102 port 55088:11: Bye Bye [preauth] 2026-07-01T21:26:55.095898-05:00 claude-cloud sshd[1189403]: Disconnected from authenticating user root 140.246.137.102 port 55088 [preauth] 2026-07-01T21:27:06.261442-05:00 claude-cloud sshd[1189736]: Invalid user newuser from 165.227.170.113 port 42492 2026-07-01T21:27:06.270855-05:00 claude-cloud sshd[1189736]: Received disconnect from 165.227.170.113 port 42492:11: Bye Bye [preauth] 2026-07-01T21:27:06.272988-05:00 claude-cloud sshd[1189736]: Disconnected from invalid user newuser 165.227.170.113 port 42492 [preauth] 2026-07-01T21:27:06.748104-05:00 claude-cloud sshd[1189733]: Received disconnect from 20.172.240.136 port 45532:11: Bye Bye [preauth] 2026-07-01T21:27:06.750042-05:00 claude-cloud sshd[1189733]: Disconnected from authenticating user root 20.172.240.136 port 45532 [preauth] 2026-07-01T21:27:16.024793-05:00 claude-cloud sshd[1189822]: Received disconnect from 198.98.56.227 port 34012:11: Bye Bye [preauth] 2026-07-01T21:27:16.027886-05:00 claude-cloud sshd[1189822]: Disconnected from authenticating user root 198.98.56.227 port 34012 [preauth] 2026-07-01T21:27:22.152603-05:00 claude-cloud sshd[1189944]: Received disconnect from 178.156.191.87 port 54108:11: Bye Bye [preauth] 2026-07-01T21:27:22.154332-05:00 claude-cloud sshd[1189944]: Disconnected from authenticating user root 178.156.191.87 port 54108 [preauth] 2026-07-01T21:27:34.487692-05:00 claude-cloud sshd[1190087]: Invalid user hadoop from 79.40.60.117 port 37366 2026-07-01T21:27:34.622763-05:00 claude-cloud sshd[1190087]: Received disconnect from 79.40.60.117 port 37366:11: Bye Bye [preauth] 2026-07-01T21:27:34.622960-05:00 claude-cloud sshd[1190087]: Disconnected from invalid user hadoop 79.40.60.117 port 37366 [preauth] 2026-07-01T21:27:38.835218-05:00 claude-cloud sshd[1190161]: Received disconnect from 83.233.149.204 port 59107:11: Bye Bye [preauth] 2026-07-01T21:27:38.838712-05:00 claude-cloud sshd[1190161]: Disconnected from authenticating user root 83.233.149.204 port 59107 [preauth] 2026-07-01T21:27:41.315000-05:00 claude-cloud sshd[1190227]: Invalid user sysadmin from 140.246.137.102 port 37900 2026-07-01T21:27:41.527443-05:00 claude-cloud sshd[1190227]: Received disconnect from 140.246.137.102 port 37900:11: Bye Bye [preauth] 2026-07-01T21:27:41.527772-05:00 claude-cloud sshd[1190227]: Disconnected from invalid user sysadmin 140.246.137.102 port 37900 [preauth] 2026-07-01T21:28:02.966401-05:00 claude-cloud sshd[1190557]: Connection closed by authenticating user root 195.178.110.228 port 33104 [preauth] 2026-07-01T21:28:11.469741-05:00 claude-cloud sshd[1190586]: Received disconnect from 171.25.158.68 port 56734:11: Bye Bye [preauth] 2026-07-01T21:28:11.471838-05:00 claude-cloud sshd[1190586]: Disconnected from authenticating user root 171.25.158.68 port 56734 [preauth] 2026-07-01T21:28:24.175197-05:00 claude-cloud sshd[1190629]: Received disconnect from 140.246.137.102 port 48944:11: Bye Bye [preauth] 2026-07-01T21:28:24.177128-05:00 claude-cloud sshd[1190629]: Disconnected from authenticating user root 140.246.137.102 port 48944 [preauth] 2026-07-01T21:28:24.257771-05:00 claude-cloud sshd[1190601]: Connection closed by authenticating user root 27.71.230.31 port 48082 [preauth] 2026-07-01T21:28:48.500656-05:00 claude-cloud sshd[1190927]: Invalid user postgres from 165.227.170.113 port 48624 2026-07-01T21:28:48.514983-05:00 claude-cloud sshd[1190927]: Received disconnect from 165.227.170.113 port 48624:11: Bye Bye [preauth] 2026-07-01T21:28:48.516269-05:00 claude-cloud sshd[1190927]: Disconnected from invalid user postgres 165.227.170.113 port 48624 [preauth] 2026-07-01T21:28:48.638241-05:00 claude-cloud sshd[1190918]: Received disconnect from 198.98.56.227 port 39526:11: Bye Bye [preauth] 2026-07-01T21:28:48.640255-05:00 claude-cloud sshd[1190918]: Disconnected from authenticating user root 198.98.56.227 port 39526 [preauth] 2026-07-01T21:28:52.107688-05:00 claude-cloud sshd[1190936]: Received disconnect from 178.156.191.87 port 47270:11: Bye Bye [preauth] 2026-07-01T21:28:52.108212-05:00 claude-cloud sshd[1190936]: Disconnected from authenticating user root 178.156.191.87 port 47270 [preauth] 2026-07-01T21:28:53.587619-05:00 claude-cloud sshd[1190938]: Received disconnect from 45.61.187.220 port 49944:11: Bye Bye [preauth] 2026-07-01T21:28:53.589210-05:00 claude-cloud sshd[1190938]: Disconnected from authenticating user root 45.61.187.220 port 49944 [preauth] 2026-07-01T21:29:01.119932-05:00 claude-cloud sshd[1190986]: Received disconnect from 20.172.240.136 port 44224:11: Bye Bye [preauth] 2026-07-01T21:29:01.120659-05:00 claude-cloud sshd[1190986]: Disconnected from authenticating user root 20.172.240.136 port 44224 [preauth] 2026-07-01T21:29:07.112133-05:00 claude-cloud sshd[1191041]: Received disconnect from 140.246.137.102 port 59988:11: Bye Bye [preauth] 2026-07-01T21:29:07.114022-05:00 claude-cloud sshd[1191041]: Disconnected from authenticating user root 140.246.137.102 port 59988 [preauth] 2026-07-01T21:29:41.716534-05:00 claude-cloud sshd[1191121]: Invalid user david from 171.25.158.68 port 15330 2026-07-01T21:29:41.748561-05:00 claude-cloud sshd[1191121]: Received disconnect from 171.25.158.68 port 15330:11: Bye Bye [preauth] 2026-07-01T21:29:41.748854-05:00 claude-cloud sshd[1191121]: Disconnected from invalid user david 171.25.158.68 port 15330 [preauth] 2026-07-01T21:29:50.867039-05:00 claude-cloud sshd[1191144]: Received disconnect from 79.40.60.117 port 43566:11: Bye Bye [preauth] 2026-07-01T21:29:50.869753-05:00 claude-cloud sshd[1191144]: Disconnected from authenticating user root 79.40.60.117 port 43566 [preauth] 2026-07-01T21:29:51.924697-05:00 claude-cloud sshd[1191158]: Connection closed by authenticating user root 195.178.110.228 port 36298 [preauth] 2026-07-01T21:30:00.453164-05:00 claude-cloud sshd[1191173]: Received disconnect from 140.246.137.102 port 42806:11: Bye Bye [preauth] 2026-07-01T21:30:00.454230-05:00 claude-cloud sshd[1191173]: Disconnected from authenticating user root 140.246.137.102 port 42806 [preauth] 2026-07-01T21:30:14.544426-05:00 claude-cloud sshd[1191262]: Received disconnect from 203.145.143.163 port 49420:11: Bye Bye [preauth] 2026-07-01T21:30:14.544690-05:00 claude-cloud sshd[1191262]: Disconnected from authenticating user root 203.145.143.163 port 49420 [preauth] 2026-07-01T21:30:18.332174-05:00 claude-cloud systemd-logind[853]: New session c5806 of user claude. 2026-07-01T21:30:18.806638-05:00 claude-cloud systemd-logind[853]: Session c5806 logged out. Waiting for processes to exit. 2026-07-01T21:30:18.808750-05:00 claude-cloud systemd-logind[853]: Removed session c5806. 2026-07-01T21:30:21.706699-05:00 claude-cloud sshd[1191318]: Received disconnect from 45.61.187.220 port 51810:11: Bye Bye [preauth] 2026-07-01T21:30:21.708529-05:00 claude-cloud sshd[1191318]: Disconnected from authenticating user root 45.61.187.220 port 51810 [preauth] 2026-07-01T21:30:24.547709-05:00 claude-cloud sshd[1191343]: Received disconnect from 198.98.56.227 port 45040:11: Bye Bye [preauth] 2026-07-01T21:30:24.547944-05:00 claude-cloud sshd[1191343]: Disconnected from authenticating user root 198.98.56.227 port 45040 [preauth] 2026-07-01T21:30:24.642126-05:00 claude-cloud sshd[1191345]: Received disconnect from 178.156.191.87 port 35170:11: Bye Bye [preauth] 2026-07-01T21:30:24.643177-05:00 claude-cloud sshd[1191345]: Disconnected from authenticating user root 178.156.191.87 port 35170 [preauth] 2026-07-01T21:30:42.542981-05:00 claude-cloud sshd[1191409]: Invalid user deng from 140.246.137.102 port 53850 2026-07-01T21:30:42.750446-05:00 claude-cloud sshd[1191409]: Received disconnect from 140.246.137.102 port 53850:11: Bye Bye [preauth] 2026-07-01T21:30:42.751906-05:00 claude-cloud sshd[1191409]: Disconnected from invalid user deng 140.246.137.102 port 53850 [preauth] 2026-07-01T21:30:50.791905-05:00 claude-cloud sshd[1191469]: Received disconnect from 20.172.240.136 port 48138:11: Bye Bye [preauth] 2026-07-01T21:30:50.793157-05:00 claude-cloud sshd[1191469]: Disconnected from authenticating user root 20.172.240.136 port 48138 [preauth] 2026-07-01T21:31:12.565394-05:00 claude-cloud sshd[1191531]: Invalid user newuser from 171.25.158.68 port 19158 2026-07-01T21:31:12.600307-05:00 claude-cloud sshd[1191531]: Received disconnect from 171.25.158.68 port 19158:11: Bye Bye [preauth] 2026-07-01T21:31:12.600580-05:00 claude-cloud sshd[1191531]: Disconnected from invalid user newuser 171.25.158.68 port 19158 [preauth] 2026-07-01T21:31:27.600679-05:00 claude-cloud sshd[1191619]: Invalid user guest from 140.246.137.102 port 36662 2026-07-01T21:31:27.816074-05:00 claude-cloud sshd[1191619]: Received disconnect from 140.246.137.102 port 36662:11: Bye Bye [preauth] 2026-07-01T21:31:27.816383-05:00 claude-cloud sshd[1191619]: Disconnected from invalid user guest 140.246.137.102 port 36662 [preauth] 2026-07-01T21:31:47.845767-05:00 claude-cloud sshd[1191714]: Connection closed by authenticating user root 195.178.110.228 port 39472 [preauth] 2026-07-01T21:31:51.851425-05:00 claude-cloud sshd[1191744]: Received disconnect from 45.61.187.220 port 53682:11: Bye Bye [preauth] 2026-07-01T21:31:51.852265-05:00 claude-cloud sshd[1191744]: Disconnected from authenticating user root 45.61.187.220 port 53682 [preauth] 2026-07-01T21:31:55.802715-05:00 claude-cloud sshd[1191749]: Received disconnect from 79.40.60.117 port 49748:11: Bye Bye [preauth] 2026-07-01T21:31:55.806097-05:00 claude-cloud sshd[1191749]: Disconnected from authenticating user root 79.40.60.117 port 49748 [preauth] 2026-07-01T21:31:56.790849-05:00 claude-cloud sshd[1191758]: Received disconnect from 178.156.191.87 port 53144:11: Bye Bye [preauth] 2026-07-01T21:31:56.792568-05:00 claude-cloud sshd[1191758]: Disconnected from authenticating user root 178.156.191.87 port 53144 [preauth] 2026-07-01T21:31:58.855626-05:00 claude-cloud sshd[1191762]: Invalid user newuser from 198.98.56.227 port 50546 2026-07-01T21:31:58.956522-05:00 claude-cloud sshd[1191762]: Received disconnect from 198.98.56.227 port 50546:11: Bye Bye [preauth] 2026-07-01T21:31:58.957732-05:00 claude-cloud sshd[1191762]: Disconnected from invalid user newuser 198.98.56.227 port 50546 [preauth] 2026-07-01T21:32:08.272519-05:00 claude-cloud sshd[1191783]: Invalid user user from 140.246.137.102 port 47706 2026-07-01T21:32:08.489314-05:00 claude-cloud sshd[1191783]: Received disconnect from 140.246.137.102 port 47706:11: Bye Bye [preauth] 2026-07-01T21:32:08.489696-05:00 claude-cloud sshd[1191783]: Disconnected from invalid user user 140.246.137.102 port 47706 [preauth] 2026-07-01T21:32:12.272086-05:00 claude-cloud sshd[1191795]: Received disconnect from 203.145.143.163 port 54314:11: Bye Bye [preauth] 2026-07-01T21:32:12.273070-05:00 claude-cloud sshd[1191795]: Disconnected from authenticating user root 203.145.143.163 port 54314 [preauth] 2026-07-01T21:32:37.763094-05:00 claude-cloud sshd[1191869]: Received disconnect from 20.172.240.136 port 48294:11: Bye Bye [preauth] 2026-07-01T21:32:37.765710-05:00 claude-cloud sshd[1191869]: Disconnected from authenticating user root 20.172.240.136 port 48294 [preauth] 2026-07-01T21:32:44.438100-05:00 claude-cloud sshd[1191896]: Received disconnect from 171.25.158.68 port 33764:11: Bye Bye [preauth] 2026-07-01T21:32:44.439025-05:00 claude-cloud sshd[1191896]: Disconnected from authenticating user root 171.25.158.68 port 33764 [preauth] 2026-07-01T21:33:22.094447-05:00 claude-cloud sshd[1192020]: Received disconnect from 45.61.187.220 port 55548:11: Bye Bye [preauth] 2026-07-01T21:33:22.095871-05:00 claude-cloud sshd[1192020]: Disconnected from authenticating user root 45.61.187.220 port 55548 [preauth] 2026-07-01T21:33:32.088989-05:00 claude-cloud sshd[1192051]: Received disconnect from 178.156.191.87 port 60388:11: Bye Bye [preauth] 2026-07-01T21:33:32.090386-05:00 claude-cloud sshd[1192051]: Disconnected from authenticating user root 178.156.191.87 port 60388 [preauth] 2026-07-01T21:33:32.311061-05:00 claude-cloud sshd[1192058]: Connection closed by 203.121.106.56 port 54254 [preauth] 2026-07-01T21:33:34.676942-05:00 claude-cloud sshd[1192063]: Connection closed by authenticating user root 195.178.110.228 port 42636 [preauth] 2026-07-01T21:33:36.045604-05:00 claude-cloud sshd[1192065]: Received disconnect from 198.98.56.227 port 56054:11: Bye Bye [preauth] 2026-07-01T21:33:36.047240-05:00 claude-cloud sshd[1192065]: Disconnected from authenticating user root 198.98.56.227 port 56054 [preauth] 2026-07-01T21:34:01.682457-05:00 claude-cloud sshd[1192213]: Invalid user ubuntu from 79.40.60.117 port 55936 2026-07-01T21:34:01.757155-05:00 claude-cloud sshd[1192213]: Received disconnect from 79.40.60.117 port 55936:11: Bye Bye [preauth] 2026-07-01T21:34:01.757422-05:00 claude-cloud sshd[1192213]: Disconnected from invalid user ubuntu 79.40.60.117 port 55936 [preauth] 2026-07-01T21:34:11.439540-05:00 claude-cloud sshd[1192242]: Invalid user ansible from 203.145.143.163 port 59220 2026-07-01T21:34:11.637215-05:00 claude-cloud sshd[1192242]: Received disconnect from 203.145.143.163 port 59220:11: Bye Bye [preauth] 2026-07-01T21:34:11.637708-05:00 claude-cloud sshd[1192242]: Disconnected from invalid user ansible 203.145.143.163 port 59220 [preauth] 2026-07-01T21:34:19.791157-05:00 claude-cloud sshd[1192257]: Connection closed by authenticating user root 27.71.230.31 port 56982 [preauth] 2026-07-01T21:34:26.490238-05:00 claude-cloud sshd[1192295]: Invalid user postgres from 171.25.158.68 port 39872 2026-07-01T21:34:26.525818-05:00 claude-cloud sshd[1192295]: Received disconnect from 171.25.158.68 port 39872:11: Bye Bye [preauth] 2026-07-01T21:34:26.526672-05:00 claude-cloud sshd[1192295]: Disconnected from invalid user postgres 171.25.158.68 port 39872 [preauth] 2026-07-01T21:34:30.512801-05:00 claude-cloud sshd[1192308]: Received disconnect from 20.172.240.136 port 58256:11: Bye Bye [preauth] 2026-07-01T21:34:30.513059-05:00 claude-cloud sshd[1192308]: Disconnected from authenticating user root 20.172.240.136 port 58256 [preauth] 2026-07-01T21:34:56.161778-05:00 claude-cloud sshd[1192374]: Invalid user oracle from 117.72.212.5 port 55188 2026-07-01T21:34:56.320768-05:00 claude-cloud sshd[1192374]: Received disconnect from 117.72.212.5 port 55188:11: Bye Bye [preauth] 2026-07-01T21:34:56.321006-05:00 claude-cloud sshd[1192374]: Disconnected from invalid user oracle 117.72.212.5 port 55188 [preauth] 2026-07-01T21:34:56.713975-05:00 claude-cloud sshd[1192376]: Invalid user ansible from 45.61.187.220 port 57440 2026-07-01T21:34:56.840036-05:00 claude-cloud sshd[1192376]: Received disconnect from 45.61.187.220 port 57440:11: Bye Bye [preauth] 2026-07-01T21:34:56.840424-05:00 claude-cloud sshd[1192376]: Disconnected from invalid user ansible 45.61.187.220 port 57440 [preauth] 2026-07-01T21:35:01.916434-05:00 claude-cloud CRON[1192389]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T21:35:01.925301-05:00 claude-cloud CRON[1192389]: pam_unix(cron:session): session closed for user root 2026-07-01T21:35:07.020881-05:00 claude-cloud sshd[1192399]: Received disconnect from 178.156.191.87 port 56070:11: Bye Bye [preauth] 2026-07-01T21:35:07.021781-05:00 claude-cloud sshd[1192399]: Disconnected from authenticating user root 178.156.191.87 port 56070 [preauth] 2026-07-01T21:35:09.772113-05:00 claude-cloud sshd[1192411]: Received disconnect from 198.98.56.227 port 33334:11: Bye Bye [preauth] 2026-07-01T21:35:09.772803-05:00 claude-cloud sshd[1192411]: Disconnected from authenticating user root 198.98.56.227 port 33334 [preauth] 2026-07-01T21:35:22.711550-05:00 claude-cloud systemd-logind[853]: New session c5807 of user claude. 2026-07-01T21:35:22.731445-05:00 claude-cloud sshd[1192448]: Connection closed by authenticating user root 195.178.110.228 port 45828 [preauth] 2026-07-01T21:35:22.995205-05:00 claude-cloud systemd-logind[853]: Session c5807 logged out. Waiting for processes to exit. 2026-07-01T21:35:22.997120-05:00 claude-cloud systemd-logind[853]: Removed session c5807. 2026-07-01T21:35:57.882946-05:00 claude-cloud sshd[1192636]: Received disconnect from 171.25.158.68 port 20430:11: Bye Bye [preauth] 2026-07-01T21:35:57.883340-05:00 claude-cloud sshd[1192636]: Disconnected from authenticating user root 171.25.158.68 port 20430 [preauth] 2026-07-01T21:36:08.457140-05:00 claude-cloud sshd[1192655]: Received disconnect from 203.145.143.163 port 35890:11: Bye Bye [preauth] 2026-07-01T21:36:08.458034-05:00 claude-cloud sshd[1192655]: Disconnected from authenticating user root 203.145.143.163 port 35890 [preauth] 2026-07-01T21:36:13.097250-05:00 claude-cloud sshd[1192670]: Received disconnect from 79.40.60.117 port 33896:11: Bye Bye [preauth] 2026-07-01T21:36:13.098833-05:00 claude-cloud sshd[1192670]: Disconnected from authenticating user root 79.40.60.117 port 33896 [preauth] 2026-07-01T21:36:17.681119-05:00 claude-cloud sshd[1192691]: Received disconnect from 20.172.240.136 port 57320:11: Bye Bye [preauth] 2026-07-01T21:36:17.681576-05:00 claude-cloud sshd[1192691]: Disconnected from authenticating user root 20.172.240.136 port 57320 [preauth] 2026-07-01T21:36:21.432572-05:00 claude-cloud sshd[1192702]: Received disconnect from 45.61.187.220 port 59304:11: Bye Bye [preauth] 2026-07-01T21:36:21.433405-05:00 claude-cloud sshd[1192702]: Disconnected from authenticating user root 45.61.187.220 port 59304 [preauth] 2026-07-01T21:36:37.973713-05:00 claude-cloud sshd[1192750]: Invalid user postgres from 198.98.56.227 port 38840 2026-07-01T21:36:38.077231-05:00 claude-cloud sshd[1192750]: Received disconnect from 198.98.56.227 port 38840:11: Bye Bye [preauth] 2026-07-01T21:36:38.077723-05:00 claude-cloud sshd[1192750]: Disconnected from invalid user postgres 198.98.56.227 port 38840 [preauth] 2026-07-01T21:36:40.198809-05:00 claude-cloud sshd[1192759]: Invalid user ubuntu from 178.156.191.87 port 48616 2026-07-01T21:36:40.302655-05:00 claude-cloud sshd[1192759]: Received disconnect from 178.156.191.87 port 48616:11: Bye Bye [preauth] 2026-07-01T21:36:40.302936-05:00 claude-cloud sshd[1192759]: Disconnected from invalid user ubuntu 178.156.191.87 port 48616 [preauth] 2026-07-01T21:37:08.383019-05:00 claude-cloud sshd[1192887]: Connection closed by authenticating user root 195.178.110.228 port 49016 [preauth] 2026-07-01T21:37:31.302159-05:00 claude-cloud sshd[1193121]: Received disconnect from 117.72.212.5 port 55358:11: Bye Bye [preauth] 2026-07-01T21:37:31.303411-05:00 claude-cloud sshd[1193121]: Disconnected from authenticating user root 117.72.212.5 port 55358 [preauth] 2026-07-01T21:37:42.822116-05:00 claude-cloud sshd[1193230]: Received disconnect from 45.61.187.220 port 32932:11: Bye Bye [preauth] 2026-07-01T21:37:42.822932-05:00 claude-cloud sshd[1193230]: Disconnected from authenticating user root 45.61.187.220 port 32932 [preauth] 2026-07-01T21:37:55.688959-05:00 claude-cloud sshd[1193346]: Received disconnect from 203.145.143.163 port 40792:11: Bye Bye [preauth] 2026-07-01T21:37:55.690591-05:00 claude-cloud sshd[1193346]: Disconnected from authenticating user root 203.145.143.163 port 40792 [preauth] 2026-07-01T21:38:02.316777-05:00 claude-cloud sshd[1193382]: Received disconnect from 20.172.240.136 port 52806:11: Bye Bye [preauth] 2026-07-01T21:38:02.317123-05:00 claude-cloud sshd[1193382]: Disconnected from authenticating user root 20.172.240.136 port 52806 [preauth] 2026-07-01T21:38:18.723875-05:00 claude-cloud sshd[1193548]: Invalid user test from 79.40.60.117 port 40076 2026-07-01T21:38:18.861965-05:00 claude-cloud sshd[1193548]: Received disconnect from 79.40.60.117 port 40076:11: Bye Bye [preauth] 2026-07-01T21:38:18.863385-05:00 claude-cloud sshd[1193548]: Disconnected from invalid user test 79.40.60.117 port 40076 [preauth] 2026-07-01T21:38:49.120781-05:00 claude-cloud sshd[1193858]: Connection closed by authenticating user root 195.178.110.228 port 52154 [preauth] 2026-07-01T21:39:02.443798-05:00 claude-cloud sshd[1194053]: Received disconnect from 45.61.187.220 port 34792:11: Bye Bye [preauth] 2026-07-01T21:39:02.445040-05:00 claude-cloud sshd[1194053]: Disconnected from authenticating user root 45.61.187.220 port 34792 [preauth] 2026-07-01T21:39:49.638348-05:00 claude-cloud sshd[1194417]: Received disconnect from 203.145.143.163 port 45694:11: Bye Bye [preauth] 2026-07-01T21:39:49.641219-05:00 claude-cloud sshd[1194417]: Disconnected from authenticating user root 203.145.143.163 port 45694 [preauth] 2026-07-01T21:39:53.991591-05:00 claude-cloud sshd[1194429]: Invalid user hadoop from 20.172.240.136 port 60324 2026-07-01T21:39:54.086033-05:00 claude-cloud sshd[1194429]: Received disconnect from 20.172.240.136 port 60324:11: Bye Bye [preauth] 2026-07-01T21:39:54.086564-05:00 claude-cloud sshd[1194429]: Disconnected from invalid user hadoop 20.172.240.136 port 60324 [preauth] 2026-07-01T21:40:06.519410-05:00 claude-cloud sshd[1194510]: Invalid user user from 117.72.212.5 port 55524 2026-07-01T21:40:06.675993-05:00 claude-cloud sshd[1194510]: Received disconnect from 117.72.212.5 port 55524:11: Bye Bye [preauth] 2026-07-01T21:40:06.676241-05:00 claude-cloud sshd[1194510]: Disconnected from invalid user user 117.72.212.5 port 55524 [preauth] 2026-07-01T21:40:22.632639-05:00 claude-cloud sshd[1194528]: Connection closed by authenticating user root 27.71.230.31 port 58628 [preauth] 2026-07-01T21:40:24.470042-05:00 claude-cloud sshd[1194583]: Received disconnect from 45.61.187.220 port 36652:11: Bye Bye [preauth] 2026-07-01T21:40:24.471151-05:00 claude-cloud sshd[1194583]: Disconnected from authenticating user root 45.61.187.220 port 36652 [preauth] 2026-07-01T21:40:26.302051-05:00 claude-cloud systemd-logind[853]: New session c5808 of user claude. 2026-07-01T21:40:26.566857-05:00 claude-cloud systemd-logind[853]: Session c5808 logged out. Waiting for processes to exit. 2026-07-01T21:40:26.568734-05:00 claude-cloud systemd-logind[853]: Removed session c5808. 2026-07-01T21:40:28.036099-05:00 claude-cloud sshd[1194612]: Connection closed by authenticating user root 195.178.110.228 port 55334 [preauth] 2026-07-01T21:40:36.063062-05:00 claude-cloud sshd[1194626]: Received disconnect from 79.40.60.117 port 46282:11: Bye Bye [preauth] 2026-07-01T21:40:36.063573-05:00 claude-cloud sshd[1194626]: Disconnected from authenticating user root 79.40.60.117 port 46282 [preauth] 2026-07-01T21:41:40.254821-05:00 claude-cloud sshd[1195268]: Received disconnect from 203.145.143.163 port 50590:11: Bye Bye [preauth] 2026-07-01T21:41:40.257597-05:00 claude-cloud sshd[1195268]: Disconnected from authenticating user root 203.145.143.163 port 50590 [preauth] 2026-07-01T21:41:44.252122-05:00 claude-cloud sshd[1195283]: Invalid user testing from 45.61.187.220 port 38518 2026-07-01T21:41:44.376712-05:00 claude-cloud sshd[1195283]: Received disconnect from 45.61.187.220 port 38518:11: Bye Bye [preauth] 2026-07-01T21:41:44.377150-05:00 claude-cloud sshd[1195283]: Disconnected from invalid user testing 45.61.187.220 port 38518 [preauth] 2026-07-01T21:42:04.485462-05:00 claude-cloud sshd[1195643]: userauth_pubkey: signature algorithm ssh-dss not in PubkeyAcceptedAlgorithms [preauth] 2026-07-01T21:42:04.540394-05:00 claude-cloud sshd[1195643]: Received disconnect from 213.152.185.117 port 41098:11: disconnected by user [preauth] 2026-07-01T21:42:04.540663-05:00 claude-cloud sshd[1195643]: Disconnected from authenticating user root 213.152.185.117 port 41098 [preauth] 2026-07-01T21:42:09.318881-05:00 claude-cloud sshd[1195736]: Connection closed by authenticating user root 195.178.110.228 port 58526 [preauth] 2026-07-01T21:42:33.224296-05:00 claude-cloud sshd[1196027]: Received disconnect from 117.72.212.5 port 55702:11: Bye Bye [preauth] 2026-07-01T21:42:33.227913-05:00 claude-cloud sshd[1196027]: Disconnected from authenticating user root 117.72.212.5 port 55702 [preauth] 2026-07-01T21:42:42.275859-05:00 claude-cloud sshd[1196259]: Received disconnect from 79.40.60.117 port 52460:11: Bye Bye [preauth] 2026-07-01T21:42:42.282561-05:00 claude-cloud sshd[1196259]: Disconnected from authenticating user root 79.40.60.117 port 52460 [preauth] 2026-07-01T21:43:04.011546-05:00 claude-cloud sshd[1196751]: Received disconnect from 45.61.187.220 port 40382:11: Bye Bye [preauth] 2026-07-01T21:43:04.015021-05:00 claude-cloud sshd[1196751]: Disconnected from authenticating user root 45.61.187.220 port 40382 [preauth] 2026-07-01T21:43:25.234120-05:00 claude-cloud sshd[1197339]: Received disconnect from 203.145.143.163 port 55484:11: Bye Bye [preauth] 2026-07-01T21:43:25.237946-05:00 claude-cloud sshd[1197339]: Disconnected from authenticating user root 203.145.143.163 port 55484 [preauth] 2026-07-01T21:43:58.840879-05:00 claude-cloud sshd[1197602]: Connection closed by authenticating user root 195.178.110.228 port 33496 [preauth] 2026-07-01T21:44:25.089479-05:00 claude-cloud sshd[1197688]: Received disconnect from 45.61.187.220 port 42240:11: Bye Bye [preauth] 2026-07-01T21:44:25.091228-05:00 claude-cloud sshd[1197688]: Disconnected from authenticating user root 45.61.187.220 port 42240 [preauth] 2026-07-01T21:44:26.892752-05:00 claude-cloud sshd[1197697]: Invalid user admin from 223.123.92.149 port 40100 2026-07-01T21:44:27.042827-05:00 claude-cloud sshd[1197697]: Connection closed by invalid user admin 223.123.92.149 port 40100 [preauth] 2026-07-01T21:44:44.702470-05:00 claude-cloud sshd[1197890]: Received disconnect from 79.40.60.117 port 58646:11: Bye Bye [preauth] 2026-07-01T21:44:44.702889-05:00 claude-cloud sshd[1197890]: Disconnected from authenticating user root 79.40.60.117 port 58646 [preauth] 2026-07-01T21:44:57.822626-05:00 claude-cloud sshd[1198079]: Invalid user deng from 117.72.212.5 port 55868 2026-07-01T21:44:57.973218-05:00 claude-cloud sshd[1198079]: Received disconnect from 117.72.212.5 port 55868:11: Bye Bye [preauth] 2026-07-01T21:44:57.973719-05:00 claude-cloud sshd[1198079]: Disconnected from invalid user deng 117.72.212.5 port 55868 [preauth] 2026-07-01T21:45:01.965618-05:00 claude-cloud CRON[1198132]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T21:45:01.987372-05:00 claude-cloud CRON[1198132]: pam_unix(cron:session): session closed for user root 2026-07-01T21:45:15.605164-05:00 claude-cloud sshd[1198180]: Invalid user ubuntu from 203.145.143.163 port 60390 2026-07-01T21:45:15.794860-05:00 claude-cloud sshd[1198180]: Received disconnect from 203.145.143.163 port 60390:11: Bye Bye [preauth] 2026-07-01T21:45:15.796043-05:00 claude-cloud sshd[1198180]: Disconnected from invalid user ubuntu 203.145.143.163 port 60390 [preauth] 2026-07-01T21:45:29.654750-05:00 claude-cloud systemd-logind[853]: New session c5809 of user claude. 2026-07-01T21:45:30.126299-05:00 claude-cloud systemd-logind[853]: Session c5809 logged out. Waiting for processes to exit. 2026-07-01T21:45:30.128227-05:00 claude-cloud systemd-logind[853]: Removed session c5809. 2026-07-01T21:45:48.612774-05:00 claude-cloud sshd[1198515]: Invalid user ubuntu from 45.61.187.220 port 44114 2026-07-01T21:45:48.733406-05:00 claude-cloud sshd[1198515]: Received disconnect from 45.61.187.220 port 44114:11: Bye Bye [preauth] 2026-07-01T21:45:48.735473-05:00 claude-cloud sshd[1198515]: Disconnected from invalid user ubuntu 45.61.187.220 port 44114 [preauth] 2026-07-01T21:45:48.750959-05:00 claude-cloud sshd[1198513]: Connection closed by authenticating user root 195.178.110.228 port 36672 [preauth] 2026-07-01T21:46:25.016458-05:00 claude-cloud sshd[1198734]: Connection closed by authenticating user root 27.71.230.31 port 53906 [preauth] 2026-07-01T21:47:12.039896-05:00 claude-cloud sshd[1199095]: Invalid user testing from 203.145.143.163 port 37064 2026-07-01T21:47:12.252763-05:00 claude-cloud sshd[1199095]: Received disconnect from 203.145.143.163 port 37064:11: Bye Bye [preauth] 2026-07-01T21:47:12.253978-05:00 claude-cloud sshd[1199095]: Disconnected from invalid user testing 203.145.143.163 port 37064 [preauth] 2026-07-01T21:47:14.066640-05:00 claude-cloud sshd[1199107]: Received disconnect from 45.61.187.220 port 45982:11: Bye Bye [preauth] 2026-07-01T21:47:14.067650-05:00 claude-cloud sshd[1199107]: Disconnected from authenticating user root 45.61.187.220 port 45982 [preauth] 2026-07-01T21:47:27.286027-05:00 claude-cloud sshd[1199133]: Invalid user reza from 117.72.212.5 port 56036 2026-07-01T21:47:27.444081-05:00 claude-cloud sshd[1199133]: Received disconnect from 117.72.212.5 port 56036:11: Bye Bye [preauth] 2026-07-01T21:47:27.444362-05:00 claude-cloud sshd[1199133]: Disconnected from invalid user reza 117.72.212.5 port 56036 [preauth] 2026-07-01T21:47:34.862700-05:00 claude-cloud sshd[1199177]: Connection closed by authenticating user root 195.178.110.228 port 39810 [preauth] 2026-07-01T21:48:31.068221-05:00 claude-cloud sshd[1199378]: Connection closed by 45.148.10.183 port 53080 2026-07-01T21:48:48.019976-05:00 claude-cloud systemd-logind[853]: New session c5810 of user claude. 2026-07-01T21:48:48.086179-05:00 claude-cloud sudo: claude : TTY=tty37 ; PWD=/home/claude ; USER=root ; COMMAND=/usr/bin/true 2026-07-01T21:48:48.092323-05:00 claude-cloud sudo: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) 2026-07-01T21:48:48.097876-05:00 claude-cloud sudo: pam_unix(sudo:session): session closed for user root 2026-07-01T21:48:48.124918-05:00 claude-cloud systemd-logind[853]: Session c5810 logged out. Waiting for processes to exit. 2026-07-01T21:48:48.126636-05:00 claude-cloud systemd-logind[853]: Removed session c5810. 2026-07-01T21:49:03.896077-05:00 claude-cloud sshd[1199498]: Received disconnect from 203.145.143.163 port 41968:11: Bye Bye [preauth] 2026-07-01T21:49:03.897825-05:00 claude-cloud sshd[1199498]: Disconnected from authenticating user root 203.145.143.163 port 41968 [preauth] 2026-07-01T21:49:21.412885-05:00 claude-cloud sshd[1199551]: Connection closed by authenticating user root 195.178.110.228 port 42966 [preauth] 2026-07-01T21:49:27.961129-05:00 claude-cloud systemd-logind[853]: New session c5811 of user claude. 2026-07-01T21:49:28.008660-05:00 claude-cloud sudo: claude : TTY=tty37 ; PWD=/home/claude ; USER=root ; COMMAND=/usr/bin/fallocate -l 4G /swapfile 2026-07-01T21:49:28.012702-05:00 claude-cloud sudo: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) 2026-07-01T21:49:28.047496-05:00 claude-cloud sudo: pam_unix(sudo:session): session closed for user root 2026-07-01T21:49:28.070472-05:00 claude-cloud sudo: claude : TTY=tty37 ; PWD=/home/claude ; USER=root ; COMMAND=/usr/bin/chmod 600 /swapfile 2026-07-01T21:49:28.072200-05:00 claude-cloud sudo: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) 2026-07-01T21:49:28.076710-05:00 claude-cloud sudo: pam_unix(sudo:session): session closed for user root 2026-07-01T21:49:28.088588-05:00 claude-cloud sudo: claude : TTY=tty37 ; PWD=/home/claude ; USER=root ; COMMAND=/usr/sbin/mkswap /swapfile 2026-07-01T21:49:28.090578-05:00 claude-cloud sudo: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) 2026-07-01T21:49:28.104803-05:00 claude-cloud sudo: pam_unix(sudo:session): session closed for user root 2026-07-01T21:49:28.124893-05:00 claude-cloud sudo: claude : TTY=tty37 ; PWD=/home/claude ; USER=root ; COMMAND=/usr/sbin/swapon /swapfile 2026-07-01T21:49:28.127339-05:00 claude-cloud sudo: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) 2026-07-01T21:49:28.139351-05:00 claude-cloud sudo: pam_unix(sudo:session): session closed for user root 2026-07-01T21:49:28.160027-05:00 claude-cloud systemd-logind[853]: Session c5811 logged out. Waiting for processes to exit. 2026-07-01T21:49:28.161902-05:00 claude-cloud systemd-logind[853]: Removed session c5811. 2026-07-01T21:49:52.738031-05:00 claude-cloud sshd[1199722]: Received disconnect from 117.72.212.5 port 56206:11: Bye Bye [preauth] 2026-07-01T21:49:52.739319-05:00 claude-cloud sshd[1199722]: Disconnected from authenticating user root 117.72.212.5 port 56206 [preauth] 2026-07-01T21:50:14.732968-05:00 claude-cloud systemd-logind[853]: New session c5812 of user claude. 2026-07-01T21:50:14.790767-05:00 claude-cloud sudo: claude : TTY=tty37 ; PWD=/home/claude ; USER=root ; COMMAND=/usr/bin/tee -a /etc/fstab 2026-07-01T21:50:14.794495-05:00 claude-cloud sudo: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) 2026-07-01T21:50:14.803904-05:00 claude-cloud sudo: pam_unix(sudo:session): session closed for user root 2026-07-01T21:50:14.823906-05:00 claude-cloud sudo: claude : TTY=tty37 ; PWD=/home/claude ; USER=root ; COMMAND=/usr/sbin/sysctl vm.swappiness=60 2026-07-01T21:50:14.827078-05:00 claude-cloud sudo: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) 2026-07-01T21:50:14.833427-05:00 claude-cloud sudo: pam_unix(sudo:session): session closed for user root 2026-07-01T21:50:14.851228-05:00 claude-cloud systemd-logind[853]: Session c5812 logged out. Waiting for processes to exit. 2026-07-01T21:50:14.853411-05:00 claude-cloud systemd-logind[853]: Removed session c5812. 2026-07-01T21:50:33.319078-05:00 claude-cloud systemd-logind[853]: New session c5813 of user claude. 2026-07-01T21:50:33.617109-05:00 claude-cloud systemd-logind[853]: Session c5813 logged out. Waiting for processes to exit. 2026-07-01T21:50:33.618483-05:00 claude-cloud systemd-logind[853]: Removed session c5813. 2026-07-01T21:50:49.469977-05:00 claude-cloud sshd[1200032]: Received disconnect from 168.194.64.3 port 48984:11: disconnected by user [preauth] 2026-07-01T21:50:49.471019-05:00 claude-cloud sshd[1200032]: Disconnected from authenticating user root 168.194.64.3 port 48984 [preauth] 2026-07-01T21:50:58.248593-05:00 claude-cloud sshd[1200057]: Received disconnect from 203.145.143.163 port 46868:11: Bye Bye [preauth] 2026-07-01T21:50:58.250582-05:00 claude-cloud sshd[1200057]: Disconnected from authenticating user root 203.145.143.163 port 46868 [preauth] 2026-07-01T21:52:18.280581-05:00 claude-cloud sshd[1200390]: Invalid user sol from 45.148.10.183 port 36736 2026-07-01T21:52:18.295574-05:00 claude-cloud sshd[1200390]: Connection closed by invalid user sol 45.148.10.183 port 36736 [preauth] 2026-07-01T21:52:25.675612-05:00 claude-cloud sshd[1200425]: Received disconnect from 117.72.212.5 port 56372:11: Bye Bye [preauth] 2026-07-01T21:52:25.676208-05:00 claude-cloud sshd[1200425]: Disconnected from authenticating user root 117.72.212.5 port 56372 [preauth] 2026-07-01T21:52:47.204453-05:00 claude-cloud sshd[1200361]: Connection closed by authenticating user root 27.71.230.31 port 60762 [preauth] 2026-07-01T21:52:48.463505-05:00 claude-cloud sshd[1200495]: Received disconnect from 203.145.143.163 port 51768:11: Bye Bye [preauth] 2026-07-01T21:52:48.467712-05:00 claude-cloud sshd[1200495]: Disconnected from authenticating user root 203.145.143.163 port 51768 [preauth] 2026-07-01T21:53:29.764897-05:00 claude-cloud sshd[1200601]: Invalid user orangepi from 223.123.92.149 port 34362 2026-07-01T21:53:29.918403-05:00 claude-cloud sshd[1200601]: Connection closed by invalid user orangepi 223.123.92.149 port 34362 [preauth] 2026-07-01T21:54:09.679036-05:00 claude-cloud sshd[1200710]: Invalid user ubnt from 193.46.255.86 port 23018 2026-07-01T21:54:09.704766-05:00 claude-cloud sshd[1200710]: Connection closed by invalid user ubnt 193.46.255.86 port 23018 [preauth] 2026-07-01T21:54:22.736433-05:00 claude-cloud sshd[1200765]: Invalid user admin from 2.57.121.25 port 23046 2026-07-01T21:54:22.763858-05:00 claude-cloud sshd[1200765]: Connection closed by invalid user admin 2.57.121.25 port 23046 [preauth] 2026-07-01T21:54:41.979190-05:00 claude-cloud sshd[1200802]: Received disconnect from 203.145.143.163 port 56670:11: Bye Bye [preauth] 2026-07-01T21:54:41.981003-05:00 claude-cloud sshd[1200802]: Disconnected from authenticating user root 203.145.143.163 port 56670 [preauth] 2026-07-01T21:55:02.008806-05:00 claude-cloud CRON[1200954]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T21:55:02.023570-05:00 claude-cloud CRON[1200954]: pam_unix(cron:session): session closed for user root 2026-07-01T21:55:04.754702-05:00 claude-cloud sshd[1200967]: Received disconnect from 117.72.212.5 port 56538:11: Bye Bye [preauth] 2026-07-01T21:55:04.756595-05:00 claude-cloud sshd[1200967]: Disconnected from authenticating user root 117.72.212.5 port 56538 [preauth] 2026-07-01T21:55:22.161140-05:00 claude-cloud sshd[1201003]: Invalid user solana from 45.148.10.183 port 47616 2026-07-01T21:55:22.177725-05:00 claude-cloud sshd[1201003]: Connection closed by invalid user solana 45.148.10.183 port 47616 [preauth] 2026-07-01T21:55:37.551621-05:00 claude-cloud systemd-logind[853]: New session c5814 of user claude. 2026-07-01T21:55:37.858877-05:00 claude-cloud systemd-logind[853]: Session c5814 logged out. Waiting for processes to exit. 2026-07-01T21:55:37.861888-05:00 claude-cloud systemd-logind[853]: Removed session c5814. 2026-07-01T21:56:16.244195-05:00 claude-cloud sshd[1201169]: Received disconnect from 208.115.214.194 port 56370:11: disconnected by user [preauth] 2026-07-01T21:56:16.246883-05:00 claude-cloud sshd[1201169]: Disconnected from authenticating user root 208.115.214.194 port 56370 [preauth] 2026-07-01T21:56:32.182154-05:00 claude-cloud sshd[1201210]: Received disconnect from 115.190.44.249 port 44222:11: Bye Bye [preauth] 2026-07-01T21:56:32.183249-05:00 claude-cloud sshd[1201210]: Disconnected from authenticating user root 115.190.44.249 port 44222 [preauth] 2026-07-01T21:57:34.110163-05:00 claude-cloud sshd[1201454]: Received disconnect from 117.72.212.5 port 56704:11: Bye Bye [preauth] 2026-07-01T21:57:34.111895-05:00 claude-cloud sshd[1201454]: Disconnected from authenticating user root 117.72.212.5 port 56704 [preauth] 2026-07-01T21:58:46.756041-05:00 claude-cloud sshd[1202172]: Invalid user solana from 45.148.10.183 port 39214 2026-07-01T21:58:46.770316-05:00 claude-cloud sshd[1202172]: Connection closed by invalid user solana 45.148.10.183 port 39214 [preauth] 2026-07-01T21:59:05.941547-05:00 claude-cloud systemd-logind[853]: New session c5815 of user claude. 2026-07-01T21:59:05.960408-05:00 claude-cloud systemd-logind[853]: New session c5816 of user claude. 2026-07-01T21:59:05.985539-05:00 claude-cloud systemd-logind[853]: Session c5815 logged out. Waiting for processes to exit. 2026-07-01T21:59:05.990337-05:00 claude-cloud systemd-logind[853]: Removed session c5815. 2026-07-01T21:59:06.641087-05:00 claude-cloud systemd-logind[853]: New session c5817 of user claude. 2026-07-01T21:59:06.721711-05:00 claude-cloud systemd-logind[853]: Session c5817 logged out. Waiting for processes to exit. 2026-07-01T21:59:06.726975-05:00 claude-cloud systemd-logind[853]: Removed session c5817. 2026-07-01T21:59:07.299094-05:00 claude-cloud systemd-logind[853]: New session c5818 of user claude. 2026-07-01T21:59:20.593673-05:00 claude-cloud sshd[1202308]: Connection closed by authenticating user root 27.71.230.31 port 40168 [preauth] 2026-07-01T22:00:09.946914-05:00 claude-cloud sshd[1203611]: Invalid user sysadmin from 117.72.212.5 port 56870 2026-07-01T22:00:10.099087-05:00 claude-cloud sshd[1203611]: Received disconnect from 117.72.212.5 port 56870:11: Bye Bye [preauth] 2026-07-01T22:00:10.100619-05:00 claude-cloud sshd[1203611]: Disconnected from invalid user sysadmin 117.72.212.5 port 56870 [preauth] 2026-07-01T22:00:41.203046-05:00 claude-cloud systemd-logind[853]: New session c5819 of user claude. 2026-07-01T22:00:41.740437-05:00 claude-cloud systemd-logind[853]: Session c5819 logged out. Waiting for processes to exit. 2026-07-01T22:00:41.742127-05:00 claude-cloud systemd-logind[853]: Removed session c5819. 2026-07-01T22:00:42.822844-05:00 claude-cloud sshd[1203746]: Received disconnect from 31.42.184.185 port 40420:11: disconnected by user [preauth] 2026-07-01T22:00:42.823138-05:00 claude-cloud sshd[1203746]: Disconnected from authenticating user root 31.42.184.185 port 40420 [preauth] 2026-07-01T22:01:08.507879-05:00 claude-cloud systemd-logind[853]: New session c5820 of user claude. 2026-07-01T22:01:08.546543-05:00 claude-cloud systemd-logind[853]: Session c5820 logged out. Waiting for processes to exit. 2026-07-01T22:01:08.548194-05:00 claude-cloud systemd-logind[853]: Removed session c5820. 2026-07-01T22:01:24.028197-05:00 claude-cloud systemd-logind[853]: New session c5821 of user claude. 2026-07-01T22:01:24.097670-05:00 claude-cloud systemd-logind[853]: Session c5821 logged out. Waiting for processes to exit. 2026-07-01T22:01:24.099619-05:00 claude-cloud systemd-logind[853]: Removed session c5821. 2026-07-01T22:01:34.249038-05:00 claude-cloud sshd[1204195]: Connection closed by authenticating user root 223.123.92.149 port 33200 [preauth] 2026-07-01T22:01:50.816954-05:00 claude-cloud sshd[1204342]: Invalid user sol from 45.148.10.183 port 52202 2026-07-01T22:01:50.830055-05:00 claude-cloud sshd[1204342]: Connection closed by invalid user sol 45.148.10.183 port 52202 [preauth] 2026-07-01T22:02:37.538853-05:00 claude-cloud sshd[1204577]: Received disconnect from 117.72.212.5 port 57036:11: Bye Bye [preauth] 2026-07-01T22:02:37.541403-05:00 claude-cloud sshd[1204577]: Disconnected from authenticating user root 117.72.212.5 port 57036 [preauth] 2026-07-01T22:04:46.054694-05:00 claude-cloud systemd-logind[853]: New session c5822 of user claude. 2026-07-01T22:05:01.038118-05:00 claude-cloud CRON[1206532]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T22:05:01.045420-05:00 claude-cloud CRON[1206532]: pam_unix(cron:session): session closed for user root 2026-07-01T22:05:05.974431-05:00 claude-cloud sshd[1206679]: Invalid user guest from 117.72.212.5 port 57200 2026-07-01T22:05:06.124596-05:00 claude-cloud sshd[1206679]: Received disconnect from 117.72.212.5 port 57200:11: Bye Bye [preauth] 2026-07-01T22:05:06.124868-05:00 claude-cloud sshd[1206679]: Disconnected from invalid user guest 117.72.212.5 port 57200 [preauth] 2026-07-01T22:05:09.389848-05:00 claude-cloud sshd[1206710]: Invalid user sol from 45.148.10.183 port 46422 2026-07-01T22:05:09.405161-05:00 claude-cloud sshd[1206710]: Connection closed by invalid user sol 45.148.10.183 port 46422 [preauth] 2026-07-01T22:05:25.677222-05:00 claude-cloud systemd-logind[853]: Session c5822 logged out. Waiting for processes to exit. 2026-07-01T22:05:25.678576-05:00 claude-cloud systemd-logind[853]: Removed session c5822. 2026-07-01T22:05:35.294368-05:00 claude-cloud sshd[1206835]: Connection closed by authenticating user root 27.71.230.31 port 59798 [preauth] 2026-07-01T22:05:38.199831-05:00 claude-cloud systemd-logind[853]: New session c5823 of user claude. 2026-07-01T22:05:38.230798-05:00 claude-cloud systemd-logind[853]: Session c5823 logged out. Waiting for processes to exit. 2026-07-01T22:05:38.232953-05:00 claude-cloud systemd-logind[853]: Removed session c5823. 2026-07-01T22:06:11.639213-05:00 claude-cloud sshd[1208107]: Accepted publickey for claude from 104.189.115.46 port 57253 ssh2: ED25519 SHA256:fT1j0HdefD6T81yDhO/gK0G3xMuDvWaQIxSLZl9GZuE 2026-07-01T22:06:11.643491-05:00 claude-cloud sshd[1208107]: pam_unix(sshd:session): session opened for user claude(uid=1000) by claude(uid=0) 2026-07-01T22:06:11.664819-05:00 claude-cloud systemd-logind[853]: New session 2754 of user claude. 2026-07-01T22:06:13.597990-05:00 claude-cloud sshd[1208200]: Received disconnect from 104.189.115.46 port 57253:11: disconnected by user 2026-07-01T22:06:13.601779-05:00 claude-cloud sshd[1208200]: Disconnected from user claude 104.189.115.46 port 57253 2026-07-01T22:06:13.602149-05:00 claude-cloud sshd[1208107]: pam_unix(sshd:session): session closed for user claude 2026-07-01T22:06:13.609205-05:00 claude-cloud systemd-logind[853]: Session 2754 logged out. Waiting for processes to exit. 2026-07-01T22:06:13.611259-05:00 claude-cloud systemd-logind[853]: Removed session 2754. 2026-07-01T22:06:15.298811-05:00 claude-cloud sshd[1208210]: Accepted publickey for claude from 104.189.115.46 port 57264 ssh2: ED25519 SHA256:fT1j0HdefD6T81yDhO/gK0G3xMuDvWaQIxSLZl9GZuE 2026-07-01T22:06:15.299823-05:00 claude-cloud sshd[1208210]: pam_unix(sshd:session): session opened for user claude(uid=1000) by claude(uid=0) 2026-07-01T22:06:15.308362-05:00 claude-cloud systemd-logind[853]: New session 2755 of user claude. 2026-07-01T22:06:16.169728-05:00 claude-cloud sshd[1208332]: Received disconnect from 104.189.115.46 port 57264:11: disconnected by user 2026-07-01T22:06:16.174095-05:00 claude-cloud sshd[1208332]: Disconnected from user claude 104.189.115.46 port 57264 2026-07-01T22:06:16.174228-05:00 claude-cloud sshd[1208210]: pam_unix(sshd:session): session closed for user claude 2026-07-01T22:06:16.179866-05:00 claude-cloud systemd-logind[853]: Session 2755 logged out. Waiting for processes to exit. 2026-07-01T22:06:16.182906-05:00 claude-cloud systemd-logind[853]: Removed session 2755. 2026-07-01T22:06:16.430189-05:00 claude-cloud systemd-logind[853]: New session c5824 of user claude. 2026-07-01T22:06:16.550422-05:00 claude-cloud systemd-logind[853]: Session c5824 logged out. Waiting for processes to exit. 2026-07-01T22:06:16.551702-05:00 claude-cloud systemd-logind[853]: Removed session c5824. 2026-07-01T22:06:20.947832-05:00 claude-cloud systemd-logind[853]: New session c5825 of user claude. 2026-07-01T22:06:21.196692-05:00 claude-cloud systemd-logind[853]: Session c5825 logged out. Waiting for processes to exit. 2026-07-01T22:06:21.199154-05:00 claude-cloud systemd-logind[853]: Removed session c5825. 2026-07-01T22:06:21.208667-05:00 claude-cloud systemd-logind[853]: New session c5826 of user claude. 2026-07-01T22:06:21.299833-05:00 claude-cloud systemd-logind[853]: Session c5826 logged out. Waiting for processes to exit. 2026-07-01T22:06:21.302030-05:00 claude-cloud systemd-logind[853]: Removed session c5826. 2026-07-01T22:07:21.265777-05:00 claude-cloud sshd[1209951]: Accepted publickey for claude from 104.189.115.46 port 57546 ssh2: ED25519 SHA256:fT1j0HdefD6T81yDhO/gK0G3xMuDvWaQIxSLZl9GZuE 2026-07-01T22:07:21.270680-05:00 claude-cloud sshd[1209951]: pam_unix(sshd:session): session opened for user claude(uid=1000) by claude(uid=0) 2026-07-01T22:07:21.284468-05:00 claude-cloud systemd-logind[853]: New session 2756 of user claude. 2026-07-01T22:07:22.960355-05:00 claude-cloud sshd[1210072]: Received disconnect from 104.189.115.46 port 57546:11: disconnected by user 2026-07-01T22:07:22.963155-05:00 claude-cloud sshd[1210072]: Disconnected from user claude 104.189.115.46 port 57546 2026-07-01T22:07:22.964562-05:00 claude-cloud sshd[1209951]: pam_unix(sshd:session): session closed for user claude 2026-07-01T22:07:22.966985-05:00 claude-cloud systemd-logind[853]: Session 2756 logged out. Waiting for processes to exit. 2026-07-01T22:07:22.968216-05:00 claude-cloud systemd-logind[853]: Removed session 2756. 2026-07-01T22:07:24.286138-05:00 claude-cloud sshd[1210084]: Accepted publickey for claude from 104.189.115.46 port 57563 ssh2: ED25519 SHA256:fT1j0HdefD6T81yDhO/gK0G3xMuDvWaQIxSLZl9GZuE 2026-07-01T22:07:24.289178-05:00 claude-cloud sshd[1210084]: pam_unix(sshd:session): session opened for user claude(uid=1000) by claude(uid=0) 2026-07-01T22:07:24.301383-05:00 claude-cloud systemd-logind[853]: New session 2757 of user claude. 2026-07-01T22:07:25.090237-05:00 claude-cloud sshd[1210185]: Received disconnect from 104.189.115.46 port 57563:11: disconnected by user 2026-07-01T22:07:25.093520-05:00 claude-cloud sshd[1210185]: Disconnected from user claude 104.189.115.46 port 57563 2026-07-01T22:07:25.093910-05:00 claude-cloud sshd[1210084]: pam_unix(sshd:session): session closed for user claude 2026-07-01T22:07:25.097762-05:00 claude-cloud systemd-logind[853]: Session 2757 logged out. Waiting for processes to exit. 2026-07-01T22:07:25.098784-05:00 claude-cloud systemd-logind[853]: Removed session 2757. 2026-07-01T22:07:27.452924-05:00 claude-cloud systemd-logind[853]: New session c5827 of user claude. 2026-07-01T22:07:27.540570-05:00 claude-cloud systemd-logind[853]: Session c5827 logged out. Waiting for processes to exit. 2026-07-01T22:07:27.542368-05:00 claude-cloud systemd-logind[853]: Removed session c5827. 2026-07-01T22:07:29.113604-05:00 claude-cloud sshd[1210424]: Invalid user khloe from 2.57.121.112 port 43780 2026-07-01T22:07:29.138396-05:00 claude-cloud sshd[1210424]: Connection closed by invalid user khloe 2.57.121.112 port 43780 [preauth] 2026-07-01T22:07:31.877824-05:00 claude-cloud systemd-logind[853]: New session c5828 of user claude. 2026-07-01T22:07:32.110803-05:00 claude-cloud systemd-logind[853]: Session c5828 logged out. Waiting for processes to exit. 2026-07-01T22:07:32.111990-05:00 claude-cloud systemd-logind[853]: Removed session c5828. 2026-07-01T22:07:34.608062-05:00 claude-cloud sshd[1210469]: Received disconnect from 117.72.212.5 port 57362:11: Bye Bye [preauth] 2026-07-01T22:07:34.610629-05:00 claude-cloud sshd[1210469]: Disconnected from authenticating user root 117.72.212.5 port 57362 [preauth] 2026-07-01T22:07:35.828988-05:00 claude-cloud systemd-logind[853]: New session c5829 of user claude. 2026-07-01T22:07:36.227902-05:00 claude-cloud systemd-logind[853]: Session c5829 logged out. Waiting for processes to exit. 2026-07-01T22:07:36.229739-05:00 claude-cloud systemd-logind[853]: Removed session c5829. 2026-07-01T22:08:02.612593-05:00 claude-cloud sshd[1211073]: Invalid user sol from 45.148.10.183 port 51124 2026-07-01T22:08:02.625568-05:00 claude-cloud sshd[1211073]: Connection closed by invalid user sol 45.148.10.183 port 51124 [preauth] 2026-07-01T22:09:28.388120-05:00 claude-cloud systemd-logind[853]: New session c5830 of user claude. 2026-07-01T22:09:28.544710-05:00 claude-cloud systemd-logind[853]: Session c5830 logged out. Waiting for processes to exit. 2026-07-01T22:09:28.549831-05:00 claude-cloud systemd-logind[853]: Removed session c5830. 2026-07-01T22:09:28.552044-05:00 claude-cloud systemd-logind[853]: Removed session c1799. 2026-07-01T22:09:28.553497-05:00 claude-cloud systemd-logind[853]: Removed session c532. 2026-07-01T22:09:29.725340-05:00 claude-cloud systemd-logind[853]: New session c5831 of user claude. 2026-07-01T22:09:29.834513-05:00 claude-cloud systemd-logind[853]: Session c5831 logged out. Waiting for processes to exit. 2026-07-01T22:09:29.836206-05:00 claude-cloud systemd-logind[853]: Removed session c5831. 2026-07-01T22:09:31.044261-05:00 claude-cloud systemd-logind[853]: New session c5832 of user claude. 2026-07-01T22:09:31.270355-05:00 claude-cloud systemd-logind[853]: Session c5832 logged out. Waiting for processes to exit. 2026-07-01T22:09:31.272634-05:00 claude-cloud systemd-logind[853]: Removed session c5832. 2026-07-01T22:10:04.858210-05:00 claude-cloud sshd[1214083]: Invalid user admin from 34.140.88.205 port 64010 2026-07-01T22:10:04.871360-05:00 claude-cloud sshd[1214083]: Connection closed by invalid user admin 34.140.88.205 port 64010 [preauth] 2026-07-01T22:10:06.802803-05:00 claude-cloud sshd[1214081]: Connection closed by 34.140.88.205 port 64004 [preauth] 2026-07-01T22:10:08.563857-05:00 claude-cloud sshd[1214229]: Connection closed by 34.53.245.93 port 11822 2026-07-01T22:10:30.616721-05:00 claude-cloud sshd[1214983]: error: Protocol major versions differ: 2 vs. 1 2026-07-01T22:10:30.617524-05:00 claude-cloud sshd[1214983]: banner exchange: Connection from 34.53.245.93 port 55608: could not read protocol version 2026-07-01T22:10:31.083762-05:00 claude-cloud sshd[1214984]: Unable to negotiate with 34.53.245.93 port 55620: no matching host key type found. Their offer: ssh-dss [preauth] 2026-07-01T22:10:31.433188-05:00 claude-cloud sshd[1215028]: Unable to negotiate with 34.53.245.93 port 55636: no matching host key type found. Their offer: ssh-rsa [preauth] 2026-07-01T22:10:31.976462-05:00 claude-cloud sshd[1215043]: Connection closed by 34.53.245.93 port 55644 [preauth] 2026-07-01T22:10:32.133436-05:00 claude-cloud sshd[1215045]: Unable to negotiate with 34.53.245.93 port 55656: no matching host key type found. Their offer: ecdsa-sha2-nistp384 [preauth] 2026-07-01T22:10:32.409049-05:00 claude-cloud sshd[1215047]: Unable to negotiate with 34.53.245.93 port 55660: no matching host key type found. Their offer: ecdsa-sha2-nistp521 [preauth] 2026-07-01T22:10:32.882779-05:00 claude-cloud sshd[1215049]: Connection closed by 34.53.245.93 port 55670 [preauth] 2026-07-01T22:10:33.420717-05:00 claude-cloud sshd[1215051]: Invalid user qqynj from 34.53.245.93 port 55678 2026-07-01T22:10:33.522804-05:00 claude-cloud sshd[1215051]: Connection closed by invalid user qqynj 34.53.245.93 port 55678 [preauth] 2026-07-01T22:11:24.846729-05:00 claude-cloud sshd[1217123]: Invalid user solana from 45.148.10.183 port 44242 2026-07-01T22:11:24.861378-05:00 claude-cloud sshd[1217123]: Connection closed by invalid user solana 45.148.10.183 port 44242 [preauth] 2026-07-01T22:11:57.944389-05:00 claude-cloud sshd[1217576]: Connection closed by authenticating user root 27.71.230.31 port 35652 [preauth] 2026-07-01T22:12:40.332166-05:00 claude-cloud systemd-logind[853]: New session c5833 of user claude. 2026-07-01T22:12:40.675158-05:00 claude-cloud systemd-logind[853]: Session c5833 logged out. Waiting for processes to exit. 2026-07-01T22:12:40.677016-05:00 claude-cloud systemd-logind[853]: Removed session c5833. 2026-07-01T22:14:04.728893-05:00 claude-cloud sshd[1221120]: Accepted publickey for claude from 104.189.115.46 port 59094 ssh2: ED25519 SHA256:zL06FyFNS5Fmvhoc+jYXcch3IeQts0ckk+VDgUYLY7Y 2026-07-01T22:14:04.736093-05:00 claude-cloud systemd-logind[853]: New session c5834 of user claude. 2026-07-01T22:14:04.737355-05:00 claude-cloud sshd[1221120]: pam_unix(sshd:session): session opened for user claude(uid=1000) by claude(uid=0) 2026-07-01T22:14:04.759979-05:00 claude-cloud systemd-logind[853]: New session 2758 of user claude. 2026-07-01T22:14:04.835544-05:00 claude-cloud systemd-logind[853]: Session c5834 logged out. Waiting for processes to exit. 2026-07-01T22:14:04.836685-05:00 claude-cloud systemd-logind[853]: Removed session c5834. 2026-07-01T22:14:06.131209-05:00 claude-cloud systemd-logind[853]: New session c5835 of user claude. 2026-07-01T22:14:06.329578-05:00 claude-cloud sshd[1221268]: Received disconnect from 104.189.115.46 port 59094:11: disconnected by user 2026-07-01T22:14:06.330681-05:00 claude-cloud sshd[1221268]: Disconnected from user claude 104.189.115.46 port 59094 2026-07-01T22:14:06.331544-05:00 claude-cloud sshd[1221120]: pam_unix(sshd:session): session closed for user claude 2026-07-01T22:14:06.341684-05:00 claude-cloud systemd-logind[853]: Session 2758 logged out. Waiting for processes to exit. 2026-07-01T22:14:06.341879-05:00 claude-cloud systemd-logind[853]: Removed session 2758. 2026-07-01T22:14:06.382722-05:00 claude-cloud systemd-logind[853]: Session c5835 logged out. Waiting for processes to exit. 2026-07-01T22:14:06.384142-05:00 claude-cloud systemd-logind[853]: Removed session c5835. 2026-07-01T22:14:07.711614-05:00 claude-cloud sshd[1221341]: Accepted publickey for claude from 104.189.115.46 port 59127 ssh2: ED25519 SHA256:zL06FyFNS5Fmvhoc+jYXcch3IeQts0ckk+VDgUYLY7Y 2026-07-01T22:14:07.715702-05:00 claude-cloud sshd[1221341]: pam_unix(sshd:session): session opened for user claude(uid=1000) by claude(uid=0) 2026-07-01T22:14:07.724364-05:00 claude-cloud systemd-logind[853]: New session 2759 of user claude. 2026-07-01T22:14:08.586252-05:00 claude-cloud sshd[1221466]: Received disconnect from 104.189.115.46 port 59127:11: disconnected by user 2026-07-01T22:14:08.588797-05:00 claude-cloud sshd[1221466]: Disconnected from user claude 104.189.115.46 port 59127 2026-07-01T22:14:08.588948-05:00 claude-cloud sshd[1221341]: pam_unix(sshd:session): session closed for user claude 2026-07-01T22:14:08.593560-05:00 claude-cloud systemd-logind[853]: Session 2759 logged out. Waiting for processes to exit. 2026-07-01T22:14:08.595146-05:00 claude-cloud systemd-logind[853]: Removed session 2759. 2026-07-01T22:14:27.027960-05:00 claude-cloud sshd[1221774]: Invalid user solana from 45.148.10.183 port 44308 2026-07-01T22:14:27.041453-05:00 claude-cloud sshd[1221774]: Connection closed by invalid user solana 45.148.10.183 port 44308 [preauth] 2026-07-01T22:15:01.055443-05:00 claude-cloud CRON[1222411]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T22:15:01.060449-05:00 claude-cloud CRON[1222411]: pam_unix(cron:session): session closed for user root 2026-07-01T22:16:24.048467-05:00 claude-cloud sshd[1222918]: Received disconnect from 209.90.232.249 port 42998:11: disconnected by user [preauth] 2026-07-01T22:16:24.049244-05:00 claude-cloud sshd[1222918]: Disconnected from authenticating user root 209.90.232.249 port 42998 [preauth] 2026-07-01T22:17:01.068815-05:00 claude-cloud CRON[1223037]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T22:17:01.073766-05:00 claude-cloud CRON[1223037]: pam_unix(cron:session): session closed for user root 2026-07-01T22:17:34.870800-05:00 claude-cloud systemd-logind[853]: New session c5836 of user claude. 2026-07-01T22:17:35.195862-05:00 claude-cloud systemd-logind[853]: Session c5836 logged out. Waiting for processes to exit. 2026-07-01T22:17:35.199377-05:00 claude-cloud systemd-logind[853]: Removed session c5836. 2026-07-01T22:17:44.554401-05:00 claude-cloud sshd[1223162]: Invalid user solana from 45.148.10.183 port 42118 2026-07-01T22:17:44.567419-05:00 claude-cloud sshd[1223162]: Connection closed by invalid user solana 45.148.10.183 port 42118 [preauth] 2026-07-01T22:17:59.492959-05:00 claude-cloud systemd-logind[853]: New session c5837 of user claude. 2026-07-01T22:17:59.853487-05:00 claude-cloud systemd-logind[853]: Session c5837 logged out. Waiting for processes to exit. 2026-07-01T22:17:59.856237-05:00 claude-cloud systemd-logind[853]: Removed session c5837. 2026-07-01T22:18:15.431163-05:00 claude-cloud sshd[1223223]: Connection closed by authenticating user root 27.71.230.31 port 44220 [preauth] 2026-07-01T22:20:44.887214-05:00 claude-cloud sshd[1224299]: Invalid user sol from 45.148.10.183 port 40472 2026-07-01T22:20:44.899734-05:00 claude-cloud sshd[1224299]: Connection closed by invalid user sol 45.148.10.183 port 40472 [preauth] 2026-07-01T22:23:03.688614-05:00 claude-cloud systemd-logind[853]: New session c5838 of user claude. 2026-07-01T22:23:04.003730-05:00 claude-cloud systemd-logind[853]: Session c5838 logged out. Waiting for processes to exit. 2026-07-01T22:23:04.005517-05:00 claude-cloud systemd-logind[853]: Removed session c5838. 2026-07-01T22:23:59.766966-05:00 claude-cloud sshd[1226222]: Invalid user sol from 45.148.10.183 port 33528 2026-07-01T22:23:59.780448-05:00 claude-cloud sshd[1226222]: Connection closed by invalid user sol 45.148.10.183 port 33528 [preauth] 2026-07-01T22:24:18.721362-05:00 claude-cloud sshd[1226248]: Connection closed by authenticating user root 27.71.230.31 port 35152 [preauth] 2026-07-01T22:24:53.831409-05:00 claude-cloud sshd[1226357]: Received disconnect from 198.46.134.148 port 34584:11: disconnected by user [preauth] 2026-07-01T22:24:53.831856-05:00 claude-cloud sshd[1226357]: Disconnected from authenticating user root 198.46.134.148 port 34584 [preauth] 2026-07-01T22:25:01.088540-05:00 claude-cloud CRON[1226383]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T22:25:01.096668-05:00 claude-cloud CRON[1226383]: pam_unix(cron:session): session closed for user root 2026-07-01T22:25:39.304400-05:00 claude-cloud sshd[1226486]: Invalid user admin from 139.19.117.197 port 34956 2026-07-01T22:25:39.308664-05:00 claude-cloud sshd[1226486]: userauth_pubkey: signature algorithm ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] 2026-07-01T22:25:49.202134-05:00 claude-cloud sshd[1226486]: Connection closed by invalid user admin 139.19.117.197 port 34956 [preauth] 2026-07-01T22:26:26.533523-05:00 claude-cloud sshd[1226637]: Connection closed by 199.45.154.155 port 52630 [preauth] 2026-07-01T22:26:47.740887-05:00 claude-cloud sshd[1226731]: Invalid user sol from 45.148.10.183 port 51442 2026-07-01T22:26:47.753896-05:00 claude-cloud sshd[1226731]: Connection closed by invalid user sol 45.148.10.183 port 51442 [preauth] 2026-07-01T22:28:07.969354-05:00 claude-cloud systemd-logind[853]: New session c5839 of user claude. 2026-07-01T22:28:08.314597-05:00 claude-cloud systemd-logind[853]: Session c5839 logged out. Waiting for processes to exit. 2026-07-01T22:28:08.316994-05:00 claude-cloud systemd-logind[853]: Removed session c5839. 2026-07-01T22:29:13.324920-05:00 claude-cloud systemd-logind[853]: New session c5840 of user claude. 2026-07-01T22:29:14.371053-05:00 claude-cloud systemd-logind[853]: Session c5840 logged out. Waiting for processes to exit. 2026-07-01T22:29:14.372393-05:00 claude-cloud systemd-logind[853]: Removed session c5840. 2026-07-01T22:29:54.435343-05:00 claude-cloud sshd[1227292]: Invalid user sol from 45.148.10.183 port 37256 2026-07-01T22:29:54.447940-05:00 claude-cloud sshd[1227292]: Connection closed by invalid user sol 45.148.10.183 port 37256 [preauth] 2026-07-01T22:30:23.238861-05:00 claude-cloud sshd[1227349]: Connection closed by authenticating user root 27.71.230.31 port 33132 [preauth] 2026-07-01T22:33:10.603726-05:00 claude-cloud sshd[1227834]: Connection closed by authenticating user root 45.148.10.183 port 37404 [preauth] 2026-07-01T22:33:12.031515-05:00 claude-cloud systemd-logind[853]: New session c5841 of user claude. 2026-07-01T22:33:12.322450-05:00 claude-cloud systemd-logind[853]: Session c5841 logged out. Waiting for processes to exit. 2026-07-01T22:33:12.324948-05:00 claude-cloud systemd-logind[853]: Removed session c5841. 2026-07-01T22:35:01.108953-05:00 claude-cloud CRON[1228148]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T22:35:01.116215-05:00 claude-cloud CRON[1228148]: pam_unix(cron:session): session closed for user root 2026-07-01T22:36:51.269492-05:00 claude-cloud sshd[1228518]: Connection closed by authenticating user root 45.148.10.183 port 38940 [preauth] 2026-07-01T22:36:52.554944-05:00 claude-cloud sshd[1228409]: Connection closed by authenticating user root 27.71.230.31 port 44766 [preauth] 2026-07-01T22:37:46.196231-05:00 claude-cloud systemd-logind[853]: New session c5842 of user claude. 2026-07-01T22:37:46.532579-05:00 claude-cloud systemd-logind[853]: Session c5842 logged out. Waiting for processes to exit. 2026-07-01T22:37:46.534266-05:00 claude-cloud systemd-logind[853]: Removed session c5842. 2026-07-01T22:38:05.258904-05:00 claude-cloud sshd[1228743]: Received disconnect from 85.120.81.241 port 57306:11: disconnected by user [preauth] 2026-07-01T22:38:05.259347-05:00 claude-cloud sshd[1228743]: Disconnected from authenticating user root 85.120.81.241 port 57306 [preauth] 2026-07-01T22:38:16.387058-05:00 claude-cloud systemd-logind[853]: New session c5843 of user claude. 2026-07-01T22:38:16.658015-05:00 claude-cloud systemd-logind[853]: Session c5843 logged out. Waiting for processes to exit. 2026-07-01T22:38:16.659858-05:00 claude-cloud systemd-logind[853]: Removed session c5843. 2026-07-01T22:39:21.177090-05:00 claude-cloud sshd[1228965]: Received disconnect from 168.194.64.3 port 43150:11: disconnected by user [preauth] 2026-07-01T22:39:21.177825-05:00 claude-cloud sshd[1228965]: Disconnected from authenticating user root 168.194.64.3 port 43150 [preauth] 2026-07-01T22:39:36.447116-05:00 claude-cloud sshd[1229013]: Invalid user solana from 45.148.10.183 port 54400 2026-07-01T22:39:36.460780-05:00 claude-cloud sshd[1229013]: Connection closed by invalid user solana 45.148.10.183 port 54400 [preauth] 2026-07-01T22:39:46.897848-05:00 claude-cloud sshd[1229053]: Received disconnect from 198.46.134.148 port 40276:11: disconnected by user [preauth] 2026-07-01T22:39:46.899582-05:00 claude-cloud sshd[1229053]: Disconnected from authenticating user root 198.46.134.148 port 40276 [preauth] 2026-07-01T22:40:36.761036-05:00 claude-cloud sshd[1229172]: Received disconnect from 200.155.66.2 port 48940:11: Bye Bye [preauth] 2026-07-01T22:40:36.763887-05:00 claude-cloud sshd[1229172]: Disconnected from authenticating user root 200.155.66.2 port 48940 [preauth] 2026-07-01T22:41:40.523068-05:00 claude-cloud systemd-logind[853]: New session c5844 of user claude. 2026-07-01T22:41:40.721142-05:00 claude-cloud systemd-logind[853]: Session c5844 logged out. Waiting for processes to exit. 2026-07-01T22:41:40.723650-05:00 claude-cloud systemd-logind[853]: Removed session c5844. 2026-07-01T22:41:53.894831-05:00 claude-cloud systemd-logind[853]: New session c5845 of user claude. 2026-07-01T22:41:54.663135-05:00 claude-cloud systemd-logind[853]: Session c5845 logged out. Waiting for processes to exit. 2026-07-01T22:41:54.665527-05:00 claude-cloud systemd-logind[853]: Removed session c5845. 2026-07-01T22:42:22.761520-05:00 claude-cloud systemd-logind[853]: New session c5846 of user claude. 2026-07-01T22:42:22.789238-05:00 claude-cloud systemd-logind[853]: Session c5846 logged out. Waiting for processes to exit. 2026-07-01T22:42:22.791533-05:00 claude-cloud systemd-logind[853]: Removed session c5846. 2026-07-01T22:42:34.274088-05:00 claude-cloud systemd-logind[853]: New session c5847 of user claude. 2026-07-01T22:42:34.299246-05:00 claude-cloud systemd-logind[853]: Session c5847 logged out. Waiting for processes to exit. 2026-07-01T22:42:34.301318-05:00 claude-cloud systemd-logind[853]: Removed session c5847. 2026-07-01T22:42:53.099320-05:00 claude-cloud sshd[1229638]: Invalid user solana from 45.148.10.183 port 60602 2026-07-01T22:42:53.113261-05:00 claude-cloud sshd[1229638]: Connection closed by invalid user solana 45.148.10.183 port 60602 [preauth] 2026-07-01T22:42:55.412682-05:00 claude-cloud sshd[1229588]: Connection closed by authenticating user root 27.71.230.31 port 48270 [preauth] 2026-07-01T22:43:09.244324-05:00 claude-cloud sshd[1229676]: Accepted publickey for claude from 104.189.115.46 port 63438 ssh2: ED25519 SHA256:fT1j0HdefD6T81yDhO/gK0G3xMuDvWaQIxSLZl9GZuE 2026-07-01T22:43:09.248631-05:00 claude-cloud sshd[1229676]: pam_unix(sshd:session): session opened for user claude(uid=1000) by claude(uid=0) 2026-07-01T22:43:09.255913-05:00 claude-cloud systemd-logind[853]: New session 2764 of user claude. 2026-07-01T22:43:10.637356-05:00 claude-cloud sshd[1229730]: Received disconnect from 104.189.115.46 port 63438:11: disconnected by user 2026-07-01T22:43:10.638514-05:00 claude-cloud sshd[1229730]: Disconnected from user claude 104.189.115.46 port 63438 2026-07-01T22:43:10.640838-05:00 claude-cloud sshd[1229676]: pam_unix(sshd:session): session closed for user claude 2026-07-01T22:43:10.648507-05:00 claude-cloud systemd-logind[853]: Session 2764 logged out. Waiting for processes to exit. 2026-07-01T22:43:10.649439-05:00 claude-cloud systemd-logind[853]: Removed session 2764. 2026-07-01T22:43:21.297900-05:00 claude-cloud systemd-logind[853]: New session c5848 of user claude. 2026-07-01T22:43:21.581727-05:00 claude-cloud systemd-logind[853]: Session c5848 logged out. Waiting for processes to exit. 2026-07-01T22:43:21.584519-05:00 claude-cloud systemd-logind[853]: Removed session c5848. 2026-07-01T22:44:18.564493-05:00 claude-cloud sshd[1229943]: Accepted publickey for claude from 104.189.115.46 port 63568 ssh2: ED25519 SHA256:fT1j0HdefD6T81yDhO/gK0G3xMuDvWaQIxSLZl9GZuE 2026-07-01T22:44:18.570124-05:00 claude-cloud sshd[1229943]: pam_unix(sshd:session): session opened for user claude(uid=1000) by claude(uid=0) 2026-07-01T22:44:18.584680-05:00 claude-cloud systemd-logind[853]: New session 2765 of user claude. 2026-07-01T22:44:21.017199-05:00 claude-cloud sshd[1230004]: Received disconnect from 104.189.115.46 port 63568:11: disconnected by user 2026-07-01T22:44:21.020179-05:00 claude-cloud sshd[1230004]: Disconnected from user claude 104.189.115.46 port 63568 2026-07-01T22:44:21.023384-05:00 claude-cloud sshd[1229943]: pam_unix(sshd:session): session closed for user claude 2026-07-01T22:44:21.030464-05:00 claude-cloud systemd-logind[853]: Session 2765 logged out. Waiting for processes to exit. 2026-07-01T22:44:21.031860-05:00 claude-cloud systemd-logind[853]: Removed session 2765. 2026-07-01T22:44:22.282264-05:00 claude-cloud sshd[1230009]: Accepted publickey for claude from 104.189.115.46 port 63574 ssh2: ED25519 SHA256:fT1j0HdefD6T81yDhO/gK0G3xMuDvWaQIxSLZl9GZuE 2026-07-01T22:44:22.289254-05:00 claude-cloud sshd[1230009]: pam_unix(sshd:session): session opened for user claude(uid=1000) by claude(uid=0) 2026-07-01T22:44:22.304877-05:00 claude-cloud systemd-logind[853]: New session 2766 of user claude. 2026-07-01T22:44:22.958379-05:00 claude-cloud sshd[1230056]: Received disconnect from 104.189.115.46 port 63574:11: disconnected by user 2026-07-01T22:44:22.961350-05:00 claude-cloud sshd[1230056]: Disconnected from user claude 104.189.115.46 port 63574 2026-07-01T22:44:22.962651-05:00 claude-cloud sshd[1230009]: pam_unix(sshd:session): session closed for user claude 2026-07-01T22:44:22.969398-05:00 claude-cloud systemd-logind[853]: Session 2766 logged out. Waiting for processes to exit. 2026-07-01T22:44:22.973005-05:00 claude-cloud systemd-logind[853]: Removed session 2766. 2026-07-01T22:44:57.429516-05:00 claude-cloud sshd[1230161]: Received disconnect from 203.145.143.163 port 45140:11: Bye Bye [preauth] 2026-07-01T22:44:57.432082-05:00 claude-cloud sshd[1230161]: Disconnected from authenticating user root 203.145.143.163 port 45140 [preauth] 2026-07-01T22:45:01.129022-05:00 claude-cloud CRON[1230174]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T22:45:01.136529-05:00 claude-cloud CRON[1230174]: pam_unix(cron:session): session closed for user root 2026-07-01T22:45:59.975400-05:00 claude-cloud sshd[1230317]: Invalid user solana from 45.148.10.183 port 54210 2026-07-01T22:45:59.988742-05:00 claude-cloud sshd[1230317]: Connection closed by invalid user solana 45.148.10.183 port 54210 [preauth] 2026-07-01T22:48:25.472089-05:00 claude-cloud systemd-logind[853]: New session c5849 of user claude. 2026-07-01T22:48:25.868181-05:00 claude-cloud systemd-logind[853]: Session c5849 logged out. Waiting for processes to exit. 2026-07-01T22:48:25.870539-05:00 claude-cloud systemd-logind[853]: Removed session c5849. 2026-07-01T22:48:27.611055-05:00 claude-cloud sshd[1230773]: Connection closed by 205.210.31.182 port 56193 2026-07-01T22:48:52.395869-05:00 claude-cloud sshd[1230814]: Connection closed by authenticating user root 27.71.230.31 port 35056 [preauth] 2026-07-01T22:49:03.037603-05:00 claude-cloud sshd[1230901]: Invalid user solana from 45.148.10.183 port 35908 2026-07-01T22:49:03.051112-05:00 claude-cloud sshd[1230901]: Connection closed by invalid user solana 45.148.10.183 port 35908 [preauth] 2026-07-01T22:49:15.589327-05:00 claude-cloud sshd[1230929]: Accepted publickey for claude from 104.189.115.46 port 64169 ssh2: ED25519 SHA256:fT1j0HdefD6T81yDhO/gK0G3xMuDvWaQIxSLZl9GZuE 2026-07-01T22:49:15.596525-05:00 claude-cloud sshd[1230929]: pam_unix(sshd:session): session opened for user claude(uid=1000) by claude(uid=0) 2026-07-01T22:49:15.624124-05:00 claude-cloud systemd-logind[853]: New session 2768 of user claude. 2026-07-01T22:49:19.085373-05:00 claude-cloud sshd[1230989]: Received disconnect from 104.189.115.46 port 64169:11: disconnected by user 2026-07-01T22:49:19.086512-05:00 claude-cloud sshd[1230989]: Disconnected from user claude 104.189.115.46 port 64169 2026-07-01T22:49:19.087199-05:00 claude-cloud sshd[1230929]: pam_unix(sshd:session): session closed for user claude 2026-07-01T22:49:19.095101-05:00 claude-cloud systemd-logind[853]: Session 2768 logged out. Waiting for processes to exit. 2026-07-01T22:49:19.096628-05:00 claude-cloud systemd-logind[853]: Removed session 2768. 2026-07-01T22:49:45.079805-05:00 claude-cloud sshd[1231080]: userauth_pubkey: signature algorithm ssh-dss not in PubkeyAcceptedAlgorithms [preauth] 2026-07-01T22:49:45.119199-05:00 claude-cloud sshd[1231080]: Received disconnect from 50.7.233.211 port 7874:11: disconnected by user [preauth] 2026-07-01T22:49:45.119859-05:00 claude-cloud sshd[1231080]: Disconnected from authenticating user root 50.7.233.211 port 7874 [preauth] 2026-07-01T22:50:46.671623-05:00 claude-cloud sshd[1231245]: Accepted publickey for claude from 104.189.115.46 port 64349 ssh2: ED25519 SHA256:fT1j0HdefD6T81yDhO/gK0G3xMuDvWaQIxSLZl9GZuE 2026-07-01T22:50:46.677828-05:00 claude-cloud sshd[1231245]: pam_unix(sshd:session): session opened for user claude(uid=1000) by claude(uid=0) 2026-07-01T22:50:46.692005-05:00 claude-cloud systemd-logind[853]: New session 2769 of user claude. 2026-07-01T22:50:49.160603-05:00 claude-cloud sshd[1231302]: Received disconnect from 104.189.115.46 port 64349:11: disconnected by user 2026-07-01T22:50:49.161152-05:00 claude-cloud sshd[1231302]: Disconnected from user claude 104.189.115.46 port 64349 2026-07-01T22:50:49.163217-05:00 claude-cloud sshd[1231245]: pam_unix(sshd:session): session closed for user claude 2026-07-01T22:50:49.175172-05:00 claude-cloud systemd-logind[853]: Session 2769 logged out. Waiting for processes to exit. 2026-07-01T22:50:49.177872-05:00 claude-cloud systemd-logind[853]: Removed session 2769. 2026-07-01T22:50:50.430833-05:00 claude-cloud sshd[1231313]: Accepted publickey for claude from 104.189.115.46 port 64363 ssh2: ED25519 SHA256:fT1j0HdefD6T81yDhO/gK0G3xMuDvWaQIxSLZl9GZuE 2026-07-01T22:50:50.438013-05:00 claude-cloud sshd[1231313]: pam_unix(sshd:session): session opened for user claude(uid=1000) by claude(uid=0) 2026-07-01T22:50:50.454385-05:00 claude-cloud systemd-logind[853]: New session 2770 of user claude. 2026-07-01T22:50:50.828591-05:00 claude-cloud sshd[1231318]: Received disconnect from 203.145.143.163 port 54718:11: Bye Bye [preauth] 2026-07-01T22:50:50.828897-05:00 claude-cloud sshd[1231318]: Disconnected from authenticating user root 203.145.143.163 port 54718 [preauth] 2026-07-01T22:50:52.830298-05:00 claude-cloud sshd[1231363]: Received disconnect from 104.189.115.46 port 64363:11: disconnected by user 2026-07-01T22:50:52.830670-05:00 claude-cloud sshd[1231363]: Disconnected from user claude 104.189.115.46 port 64363 2026-07-01T22:50:52.832202-05:00 claude-cloud sshd[1231313]: pam_unix(sshd:session): session closed for user claude 2026-07-01T22:50:52.840255-05:00 claude-cloud systemd-logind[853]: Session 2770 logged out. Waiting for processes to exit. 2026-07-01T22:50:52.841852-05:00 claude-cloud systemd-logind[853]: Removed session 2770. 2026-07-01T22:50:54.115877-05:00 claude-cloud sshd[1231367]: Accepted publickey for claude from 104.189.115.46 port 64375 ssh2: ED25519 SHA256:fT1j0HdefD6T81yDhO/gK0G3xMuDvWaQIxSLZl9GZuE 2026-07-01T22:50:54.119941-05:00 claude-cloud sshd[1231367]: pam_unix(sshd:session): session opened for user claude(uid=1000) by claude(uid=0) 2026-07-01T22:50:54.138467-05:00 claude-cloud systemd-logind[853]: New session 2771 of user claude. 2026-07-01T22:50:58.296148-05:00 claude-cloud sshd[1231419]: Received disconnect from 104.189.115.46 port 64375:11: disconnected by user 2026-07-01T22:50:58.296906-05:00 claude-cloud sshd[1231419]: Disconnected from user claude 104.189.115.46 port 64375 2026-07-01T22:50:58.297673-05:00 claude-cloud sshd[1231367]: pam_unix(sshd:session): session closed for user claude 2026-07-01T22:50:58.305714-05:00 claude-cloud systemd-logind[853]: Session 2771 logged out. Waiting for processes to exit. 2026-07-01T22:50:58.307153-05:00 claude-cloud systemd-logind[853]: Removed session 2771. 2026-07-01T22:51:48.371876-05:00 claude-cloud sshd[1231593]: Received disconnect from 200.155.66.2 port 57834:11: Bye Bye [preauth] 2026-07-01T22:51:48.372843-05:00 claude-cloud sshd[1231593]: Disconnected from authenticating user root 200.155.66.2 port 57834 [preauth] 2026-07-01T22:52:11.682751-05:00 claude-cloud systemd-logind[853]: New session c5850 of user claude. 2026-07-01T22:52:11.732063-05:00 claude-cloud systemd-logind[853]: Session c5850 logged out. Waiting for processes to exit. 2026-07-01T22:52:11.734413-05:00 claude-cloud systemd-logind[853]: Removed session c5850. 2026-07-01T22:52:12.109585-05:00 claude-cloud sshd[1231672]: Invalid user solana from 45.148.10.183 port 32840 2026-07-01T22:52:12.126088-05:00 claude-cloud sshd[1231672]: Connection closed by invalid user solana 45.148.10.183 port 32840 [preauth] 2026-07-01T22:52:48.524541-05:00 claude-cloud sshd[1231769]: Received disconnect from 203.145.143.163 port 59146:11: Bye Bye [preauth] 2026-07-01T22:52:48.525385-05:00 claude-cloud sshd[1231769]: Disconnected from authenticating user root 203.145.143.163 port 59146 [preauth] 2026-07-01T22:53:29.424380-05:00 claude-cloud systemd-logind[853]: New session c5851 of user claude. 2026-07-01T22:53:29.769113-05:00 claude-cloud systemd-logind[853]: Session c5851 logged out. Waiting for processes to exit. 2026-07-01T22:53:29.772404-05:00 claude-cloud systemd-logind[853]: Removed session c5851. 2026-07-01T22:53:43.387523-05:00 claude-cloud sshd[1231935]: Received disconnect from 200.155.66.2 port 41290:11: Bye Bye [preauth] 2026-07-01T22:53:43.388013-05:00 claude-cloud sshd[1231935]: Disconnected from authenticating user root 200.155.66.2 port 41290 [preauth] 2026-07-01T22:54:20.339164-05:00 claude-cloud sshd[1232027]: Invalid user xserve from 200.77.172.159 port 54320 2026-07-01T22:54:20.518995-05:00 claude-cloud sshd[1232027]: Received disconnect from 200.77.172.159 port 54320:11: Bye Bye [preauth] 2026-07-01T22:54:20.519671-05:00 claude-cloud sshd[1232027]: Disconnected from invalid user xserve 200.77.172.159 port 54320 [preauth] 2026-07-01T22:54:44.536787-05:00 claude-cloud sshd[1232092]: Invalid user dev from 203.145.143.163 port 35336 2026-07-01T22:54:44.761973-05:00 claude-cloud sshd[1232092]: Received disconnect from 203.145.143.163 port 35336:11: Bye Bye [preauth] 2026-07-01T22:54:44.762342-05:00 claude-cloud sshd[1232092]: Disconnected from invalid user dev 203.145.143.163 port 35336 [preauth] 2026-07-01T22:54:46.625150-05:00 claude-cloud sshd[1232121]: error: maximum authentication attempts exceeded for root from 64.226.126.224 port 46088 ssh2 [preauth] 2026-07-01T22:54:46.625591-05:00 claude-cloud sshd[1232121]: Disconnecting authenticating user root 64.226.126.224 port 46088: Too many authentication failures [preauth] 2026-07-01T22:54:47.841640-05:00 claude-cloud sshd[1232123]: error: maximum authentication attempts exceeded for root from 64.226.126.224 port 46092 ssh2 [preauth] 2026-07-01T22:54:47.842243-05:00 claude-cloud sshd[1232123]: Disconnecting authenticating user root 64.226.126.224 port 46092: Too many authentication failures [preauth] 2026-07-01T22:54:48.041393-05:00 claude-cloud sshd[1232128]: error: maximum authentication attempts exceeded for root from 64.226.126.224 port 46096 ssh2 [preauth] 2026-07-01T22:54:48.041720-05:00 claude-cloud sshd[1232128]: Disconnecting authenticating user root 64.226.126.224 port 46096: Too many authentication failures [preauth] 2026-07-01T22:54:50.028681-05:00 claude-cloud sshd[1232133]: Connection closed by authenticating user root 193.46.255.86 port 19658 [preauth] 2026-07-01T22:54:51.225994-05:00 claude-cloud sshd[1232070]: Connection closed by authenticating user root 27.71.230.31 port 49322 [preauth] 2026-07-01T22:54:55.263350-05:00 claude-cloud sshd[1232146]: Received disconnect from 64.226.126.224 port 46100:11: disconnected by user [preauth] 2026-07-01T22:54:55.263585-05:00 claude-cloud sshd[1232146]: Disconnected from authenticating user root 64.226.126.224 port 46100 [preauth] 2026-07-01T22:55:01.152441-05:00 claude-cloud CRON[1232166]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T22:55:01.157812-05:00 claude-cloud CRON[1232166]: pam_unix(cron:session): session closed for user root 2026-07-01T22:55:02.679970-05:00 claude-cloud sshd[1232178]: Invalid user admin from 64.226.126.224 port 53424 2026-07-01T22:55:02.740907-05:00 claude-cloud sshd[1232178]: error: maximum authentication attempts exceeded for invalid user admin from 64.226.126.224 port 53424 ssh2 [preauth] 2026-07-01T22:55:02.741145-05:00 claude-cloud sshd[1232178]: Disconnecting invalid user admin 64.226.126.224 port 53424: Too many authentication failures [preauth] 2026-07-01T22:55:18.794165-05:00 claude-cloud sshd[1232218]: Invalid user sols from 45.148.10.183 port 35356 2026-07-01T22:55:18.808716-05:00 claude-cloud sshd[1232218]: Connection closed by invalid user sols 45.148.10.183 port 35356 [preauth] 2026-07-01T22:55:42.388025-05:00 claude-cloud sshd[1232264]: Received disconnect from 200.155.66.2 port 53926:11: Bye Bye [preauth] 2026-07-01T22:55:42.388824-05:00 claude-cloud sshd[1232264]: Disconnected from authenticating user root 200.155.66.2 port 53926 [preauth] 2026-07-01T22:55:56.835916-05:00 claude-cloud sshd[1232324]: Connection closed by authenticating user root 185.242.3.195 port 38122 [preauth] 2026-07-01T22:56:44.167694-05:00 claude-cloud sshd[1232446]: Received disconnect from 203.145.143.163 port 39764:11: Bye Bye [preauth] 2026-07-01T22:56:44.168562-05:00 claude-cloud sshd[1232446]: Disconnected from authenticating user root 203.145.143.163 port 39764 [preauth] 2026-07-01T22:57:19.376957-05:00 claude-cloud sshd[1232613]: Invalid user fonts from 103.189.234.57 port 36452 2026-07-01T22:57:19.557320-05:00 claude-cloud sshd[1232613]: Received disconnect from 103.189.234.57 port 36452:11: Bye Bye [preauth] 2026-07-01T22:57:19.557682-05:00 claude-cloud sshd[1232613]: Disconnected from invalid user fonts 103.189.234.57 port 36452 [preauth] 2026-07-01T22:57:45.026501-05:00 claude-cloud sshd[1232677]: Received disconnect from 200.155.66.2 port 47218:11: Bye Bye [preauth] 2026-07-01T22:57:45.026944-05:00 claude-cloud sshd[1232677]: Disconnected from authenticating user root 200.155.66.2 port 47218 [preauth] 2026-07-01T22:57:59.083817-05:00 claude-cloud sshd[1232705]: Invalid user libra from 41.216.177.55 port 51824 2026-07-01T22:57:59.273401-05:00 claude-cloud sshd[1232705]: Received disconnect from 41.216.177.55 port 51824:11: Bye Bye [preauth] 2026-07-01T22:57:59.273670-05:00 claude-cloud sshd[1232705]: Disconnected from invalid user libra 41.216.177.55 port 51824 [preauth] 2026-07-01T22:58:33.089064-05:00 claude-cloud sshd[1232814]: Invalid user jito from 45.148.10.183 port 50052 2026-07-01T22:58:33.102376-05:00 claude-cloud sshd[1232814]: Connection closed by invalid user jito 45.148.10.183 port 50052 [preauth] 2026-07-01T22:58:33.739168-05:00 claude-cloud sshd[1232809]: Received disconnect from 203.145.143.163 port 44196:11: Bye Bye [preauth] 2026-07-01T22:58:33.739577-05:00 claude-cloud sshd[1232809]: Disconnected from authenticating user root 203.145.143.163 port 44196 [preauth] 2026-07-01T22:58:33.798263-05:00 claude-cloud systemd-logind[853]: New session c5852 of user claude. 2026-07-01T22:58:34.121105-05:00 claude-cloud systemd-logind[853]: Session c5852 logged out. Waiting for processes to exit. 2026-07-01T22:58:34.122979-05:00 claude-cloud systemd-logind[853]: Removed session c5852. 2026-07-01T22:59:41.322208-05:00 claude-cloud sshd[1233018]: Received disconnect from 200.155.66.2 port 54400:11: Bye Bye [preauth] 2026-07-01T22:59:41.323513-05:00 claude-cloud sshd[1233018]: Disconnected from authenticating user root 200.155.66.2 port 54400 [preauth] 2026-07-01T23:00:20.417189-05:00 claude-cloud sshd[1233116]: Received disconnect from 203.145.143.163 port 48626:11: Bye Bye [preauth] 2026-07-01T23:00:20.418002-05:00 claude-cloud sshd[1233116]: Disconnected from authenticating user root 203.145.143.163 port 48626 [preauth] 2026-07-01T23:00:45.200142-05:00 claude-cloud sshd[1233139]: Connection closed by authenticating user root 27.71.230.31 port 46948 [preauth] 2026-07-01T23:01:32.129691-05:00 claude-cloud sshd[1233321]: Received disconnect from 200.155.66.2 port 41960:11: Bye Bye [preauth] 2026-07-01T23:01:32.130606-05:00 claude-cloud sshd[1233321]: Disconnected from authenticating user root 200.155.66.2 port 41960 [preauth] 2026-07-01T23:01:39.095395-05:00 claude-cloud sshd[1233347]: Invalid user soul from 45.148.10.183 port 60190 2026-07-01T23:01:39.107894-05:00 claude-cloud sshd[1233347]: Connection closed by invalid user soul 45.148.10.183 port 60190 [preauth] 2026-07-01T23:02:07.195352-05:00 claude-cloud sshd[1233417]: Invalid user devops from 203.145.143.163 port 53056 2026-07-01T23:02:07.407350-05:00 claude-cloud sshd[1233417]: Received disconnect from 203.145.143.163 port 53056:11: Bye Bye [preauth] 2026-07-01T23:02:07.407640-05:00 claude-cloud sshd[1233417]: Disconnected from invalid user devops 203.145.143.163 port 53056 [preauth] 2026-07-01T23:02:10.290099-05:00 claude-cloud sshd[1233429]: Invalid user classic from 200.77.172.159 port 39544 2026-07-01T23:02:10.470991-05:00 claude-cloud sshd[1233429]: Received disconnect from 200.77.172.159 port 39544:11: Bye Bye [preauth] 2026-07-01T23:02:10.471416-05:00 claude-cloud sshd[1233429]: Disconnected from invalid user classic 200.77.172.159 port 39544 [preauth] 2026-07-01T23:02:46.073349-05:00 claude-cloud sshd[1233536]: Invalid user recruiter from 103.189.234.57 port 56718 2026-07-01T23:02:46.250212-05:00 claude-cloud sshd[1233536]: Received disconnect from 103.189.234.57 port 56718:11: Bye Bye [preauth] 2026-07-01T23:02:46.250789-05:00 claude-cloud sshd[1233536]: Disconnected from invalid user recruiter 103.189.234.57 port 56718 [preauth] 2026-07-01T23:03:03.841920-05:00 claude-cloud sshd[1233603]: Invalid user lex from 41.216.177.55 port 59222 2026-07-01T23:03:04.025914-05:00 claude-cloud sshd[1233603]: Received disconnect from 41.216.177.55 port 59222:11: Bye Bye [preauth] 2026-07-01T23:03:04.026173-05:00 claude-cloud sshd[1233603]: Disconnected from invalid user lex 41.216.177.55 port 59222 [preauth] 2026-07-01T23:03:25.833862-05:00 claude-cloud sshd[1233680]: Received disconnect from 200.155.66.2 port 51900:11: Bye Bye [preauth] 2026-07-01T23:03:25.834416-05:00 claude-cloud sshd[1233680]: Disconnected from authenticating user root 200.155.66.2 port 51900 [preauth] 2026-07-01T23:03:28.335216-05:00 claude-cloud sshd[1233689]: Invalid user admin from 2.57.121.25 port 42796 2026-07-01T23:03:28.361049-05:00 claude-cloud sshd[1233689]: Connection closed by invalid user admin 2.57.121.25 port 42796 [preauth] 2026-07-01T23:03:38.520999-05:00 claude-cloud systemd-logind[853]: New session c5853 of user claude. 2026-07-01T23:03:38.791661-05:00 claude-cloud systemd-logind[853]: Session c5853 logged out. Waiting for processes to exit. 2026-07-01T23:03:38.792755-05:00 claude-cloud systemd-logind[853]: Removed session c5853. 2026-07-01T23:03:55.765105-05:00 claude-cloud sshd[1233770]: Received disconnect from 203.145.143.163 port 57486:11: Bye Bye [preauth] 2026-07-01T23:03:55.766380-05:00 claude-cloud sshd[1233770]: Disconnected from authenticating user root 203.145.143.163 port 57486 [preauth] 2026-07-01T23:04:28.183981-05:00 claude-cloud sshd[1233846]: Invalid user mtt from 200.77.172.159 port 48530 2026-07-01T23:04:28.367200-05:00 claude-cloud sshd[1233846]: Received disconnect from 200.77.172.159 port 48530:11: Bye Bye [preauth] 2026-07-01T23:04:28.367598-05:00 claude-cloud sshd[1233846]: Disconnected from invalid user mtt 200.77.172.159 port 48530 [preauth] 2026-07-01T23:04:37.164051-05:00 claude-cloud sshd[1233868]: Invalid user relay2 from 103.189.234.57 port 43032 2026-07-01T23:04:37.342253-05:00 claude-cloud sshd[1233868]: Received disconnect from 103.189.234.57 port 43032:11: Bye Bye [preauth] 2026-07-01T23:04:37.342723-05:00 claude-cloud sshd[1233868]: Disconnected from invalid user relay2 103.189.234.57 port 43032 [preauth] 2026-07-01T23:04:58.642693-05:00 claude-cloud sshd[1233949]: Invalid user sol from 45.148.10.183 port 38564 2026-07-01T23:04:58.657019-05:00 claude-cloud sshd[1233949]: Connection closed by invalid user sol 45.148.10.183 port 38564 [preauth] 2026-07-01T23:05:01.171429-05:00 claude-cloud CRON[1233962]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T23:05:01.182581-05:00 claude-cloud CRON[1233962]: pam_unix(cron:session): session closed for user root 2026-07-01T23:05:03.327582-05:00 claude-cloud sshd[1233967]: Invalid user personals from 41.216.177.55 port 43894 2026-07-01T23:05:03.513750-05:00 claude-cloud sshd[1233967]: Received disconnect from 41.216.177.55 port 43894:11: Bye Bye [preauth] 2026-07-01T23:05:03.513956-05:00 claude-cloud sshd[1233967]: Disconnected from invalid user personals 41.216.177.55 port 43894 [preauth] 2026-07-01T23:05:20.007976-05:00 claude-cloud sshd[1234005]: Received disconnect from 200.155.66.2 port 53834:11: Bye Bye [preauth] 2026-07-01T23:05:20.008736-05:00 claude-cloud sshd[1234005]: Disconnected from authenticating user root 200.155.66.2 port 53834 [preauth] 2026-07-01T23:05:30.203491-05:00 claude-cloud sshd[1234066]: Connection reset by authenticating user root 45.227.254.170 port 64712 [preauth] 2026-07-01T23:05:44.817119-05:00 claude-cloud sshd[1234101]: Received disconnect from 203.145.143.163 port 33686:11: Bye Bye [preauth] 2026-07-01T23:05:44.817633-05:00 claude-cloud sshd[1234101]: Disconnected from authenticating user root 203.145.143.163 port 33686 [preauth] 2026-07-01T23:06:17.071690-05:00 claude-cloud sshd[1234183]: Invalid user dap from 103.189.234.57 port 46184 2026-07-01T23:06:17.247015-05:00 claude-cloud sshd[1234183]: Received disconnect from 103.189.234.57 port 46184:11: Bye Bye [preauth] 2026-07-01T23:06:17.247325-05:00 claude-cloud sshd[1234183]: Disconnected from invalid user dap 103.189.234.57 port 46184 [preauth] 2026-07-01T23:06:32.398847-05:00 claude-cloud sshd[1234223]: Invalid user tops from 200.77.172.159 port 57494 2026-07-01T23:06:32.577872-05:00 claude-cloud sshd[1234223]: Received disconnect from 200.77.172.159 port 57494:11: Bye Bye [preauth] 2026-07-01T23:06:32.578123-05:00 claude-cloud sshd[1234223]: Disconnected from invalid user tops 200.77.172.159 port 57494 [preauth] 2026-07-01T23:06:32.958497-05:00 claude-cloud sshd[1234195]: Connection closed by authenticating user root 27.71.230.31 port 57652 [preauth] 2026-07-01T23:06:54.294994-05:00 claude-cloud sshd[1234349]: Invalid user recruiter from 41.216.177.55 port 37974 2026-07-01T23:06:54.477535-05:00 claude-cloud sshd[1234349]: Received disconnect from 41.216.177.55 port 37974:11: Bye Bye [preauth] 2026-07-01T23:06:54.478150-05:00 claude-cloud sshd[1234349]: Disconnected from invalid user recruiter 41.216.177.55 port 37974 [preauth] 2026-07-01T23:07:19.268667-05:00 claude-cloud sshd[1234407]: Received disconnect from 200.155.66.2 port 54368:11: Bye Bye [preauth] 2026-07-01T23:07:19.270353-05:00 claude-cloud sshd[1234407]: Disconnected from authenticating user root 200.155.66.2 port 54368 [preauth] 2026-07-01T23:07:39.060505-05:00 claude-cloud sshd[1234454]: Received disconnect from 203.145.143.163 port 38112:11: Bye Bye [preauth] 2026-07-01T23:07:39.063405-05:00 claude-cloud sshd[1234454]: Disconnected from authenticating user root 203.145.143.163 port 38112 [preauth] 2026-07-01T23:07:53.740202-05:00 claude-cloud sshd[1234506]: Invalid user solana from 45.148.10.183 port 53470 2026-07-01T23:07:53.753902-05:00 claude-cloud sshd[1234506]: Connection closed by invalid user solana 45.148.10.183 port 53470 [preauth] 2026-07-01T23:08:07.572924-05:00 claude-cloud sshd[1234535]: Invalid user alfred from 103.189.234.57 port 51746 2026-07-01T23:08:07.753165-05:00 claude-cloud sshd[1234535]: Received disconnect from 103.189.234.57 port 51746:11: Bye Bye [preauth] 2026-07-01T23:08:07.753589-05:00 claude-cloud sshd[1234535]: Disconnected from invalid user alfred 103.189.234.57 port 51746 [preauth] 2026-07-01T23:08:30.573461-05:00 claude-cloud sshd[1234595]: Invalid user alfred from 200.77.172.159 port 38224 2026-07-01T23:08:30.746117-05:00 claude-cloud sshd[1234595]: Received disconnect from 200.77.172.159 port 38224:11: Bye Bye [preauth] 2026-07-01T23:08:30.746637-05:00 claude-cloud sshd[1234595]: Disconnected from invalid user alfred 200.77.172.159 port 38224 [preauth] 2026-07-01T23:08:42.546889-05:00 claude-cloud systemd-logind[853]: New session c5854 of user claude. 2026-07-01T23:08:42.861272-05:00 claude-cloud systemd-logind[853]: Session c5854 logged out. Waiting for processes to exit. 2026-07-01T23:08:42.864835-05:00 claude-cloud systemd-logind[853]: Removed session c5854. 2026-07-01T23:08:45.074143-05:00 claude-cloud sshd[1234656]: Invalid user nsk from 41.216.177.55 port 45408 2026-07-01T23:08:45.261066-05:00 claude-cloud sshd[1234656]: Received disconnect from 41.216.177.55 port 45408:11: Bye Bye [preauth] 2026-07-01T23:08:45.261471-05:00 claude-cloud sshd[1234656]: Disconnected from invalid user nsk 41.216.177.55 port 45408 [preauth] 2026-07-01T23:09:15.815250-05:00 claude-cloud sshd[1234745]: Received disconnect from 200.155.66.2 port 52050:11: Bye Bye [preauth] 2026-07-01T23:09:15.815823-05:00 claude-cloud sshd[1234745]: Disconnected from authenticating user root 200.155.66.2 port 52050 [preauth] 2026-07-01T23:09:44.726325-05:00 claude-cloud sshd[1234816]: Received disconnect from 203.145.143.163 port 42542:11: Bye Bye [preauth] 2026-07-01T23:09:44.728527-05:00 claude-cloud sshd[1234816]: Disconnected from authenticating user root 203.145.143.163 port 42542 [preauth] 2026-07-01T23:10:29.489502-05:00 claude-cloud sshd[1234930]: Invalid user techhelp from 200.77.172.159 port 47182 2026-07-01T23:10:29.663183-05:00 claude-cloud sshd[1234930]: Received disconnect from 200.77.172.159 port 47182:11: Bye Bye [preauth] 2026-07-01T23:10:29.663723-05:00 claude-cloud sshd[1234930]: Disconnected from invalid user techhelp 200.77.172.159 port 47182 [preauth] 2026-07-01T23:10:30.528950-05:00 claude-cloud sshd[1234932]: Received disconnect from 38.96.178.220 port 58722:11: disconnected by user [preauth] 2026-07-01T23:10:30.529365-05:00 claude-cloud sshd[1234932]: Disconnected from authenticating user root 38.96.178.220 port 58722 [preauth] 2026-07-01T23:11:11.390994-05:00 claude-cloud sshd[1235059]: Invalid user sole from 45.148.10.183 port 58008 2026-07-01T23:11:11.404991-05:00 claude-cloud sshd[1235059]: Connection closed by invalid user sole 45.148.10.183 port 58008 [preauth] 2026-07-01T23:11:13.555609-05:00 claude-cloud sshd[1235064]: Received disconnect from 200.155.66.2 port 49560:11: Bye Bye [preauth] 2026-07-01T23:11:13.556187-05:00 claude-cloud sshd[1235064]: Disconnected from authenticating user root 200.155.66.2 port 49560 [preauth] 2026-07-01T23:11:42.054534-05:00 claude-cloud sshd[1235131]: Received disconnect from 203.145.143.163 port 46970:11: Bye Bye [preauth] 2026-07-01T23:11:42.054890-05:00 claude-cloud sshd[1235131]: Disconnected from authenticating user root 203.145.143.163 port 46970 [preauth] 2026-07-01T23:11:49.539642-05:00 claude-cloud sshd[1235156]: Connection reset by authenticating user root 45.148.10.141 port 21264 [preauth] 2026-07-01T23:12:23.682184-05:00 claude-cloud sshd[1235261]: Invalid user fonts from 200.77.172.159 port 56120 2026-07-01T23:12:23.854763-05:00 claude-cloud sshd[1235261]: Received disconnect from 200.77.172.159 port 56120:11: Bye Bye [preauth] 2026-07-01T23:12:23.855094-05:00 claude-cloud sshd[1235261]: Disconnected from invalid user fonts 200.77.172.159 port 56120 [preauth] 2026-07-01T23:12:31.583513-05:00 claude-cloud sshd[1235239]: Connection closed by authenticating user root 27.71.230.31 port 38444 [preauth] 2026-07-01T23:13:07.040106-05:00 claude-cloud sshd[1235372]: Received disconnect from 200.155.66.2 port 37378:11: Bye Bye [preauth] 2026-07-01T23:13:07.040538-05:00 claude-cloud sshd[1235372]: Disconnected from authenticating user root 200.155.66.2 port 37378 [preauth] 2026-07-01T23:13:28.865592-05:00 claude-cloud systemd-logind[853]: New session c5855 of user claude. 2026-07-01T23:13:28.965959-05:00 claude-cloud systemd-logind[853]: Session c5855 logged out. Waiting for processes to exit. 2026-07-01T23:13:28.967132-05:00 claude-cloud systemd-logind[853]: Removed session c5855. 2026-07-01T23:13:33.764172-05:00 claude-cloud sshd[1235471]: Received disconnect from 203.145.143.163 port 51400:11: Bye Bye [preauth] 2026-07-01T23:13:33.764593-05:00 claude-cloud sshd[1235471]: Disconnected from authenticating user root 203.145.143.163 port 51400 [preauth] 2026-07-01T23:13:47.177913-05:00 claude-cloud systemd-logind[853]: New session c5856 of user claude. 2026-07-01T23:13:47.436255-05:00 claude-cloud systemd-logind[853]: Session c5856 logged out. Waiting for processes to exit. 2026-07-01T23:13:47.438593-05:00 claude-cloud systemd-logind[853]: Removed session c5856. 2026-07-01T23:14:17.984868-05:00 claude-cloud sshd[1235592]: Invalid user personals from 200.77.172.159 port 36820 2026-07-01T23:14:18.161671-05:00 claude-cloud sshd[1235592]: Received disconnect from 200.77.172.159 port 36820:11: Bye Bye [preauth] 2026-07-01T23:14:18.162058-05:00 claude-cloud sshd[1235592]: Disconnected from invalid user personals 200.77.172.159 port 36820 [preauth] 2026-07-01T23:14:48.120078-05:00 claude-cloud sshd[1235693]: Invalid user solv from 45.148.10.183 port 56692 2026-07-01T23:14:48.134434-05:00 claude-cloud sshd[1235693]: Connection closed by invalid user solv 45.148.10.183 port 56692 [preauth] 2026-07-01T23:14:48.345398-05:00 claude-cloud systemd-logind[853]: New session c5857 of user claude. 2026-07-01T23:14:52.780517-05:00 claude-cloud systemd-logind[853]: Session c5857 logged out. Waiting for processes to exit. 2026-07-01T23:14:52.782232-05:00 claude-cloud systemd-logind[853]: Removed session c5857. 2026-07-01T23:15:01.200241-05:00 claude-cloud CRON[1235736]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T23:15:01.206841-05:00 claude-cloud CRON[1235736]: pam_unix(cron:session): session closed for user root 2026-07-01T23:15:10.981703-05:00 claude-cloud sshd[1235765]: Received disconnect from 200.155.66.2 port 38844:11: Bye Bye [preauth] 2026-07-01T23:15:10.982770-05:00 claude-cloud sshd[1235765]: Disconnected from authenticating user root 200.155.66.2 port 38844 [preauth] 2026-07-01T23:15:23.387435-05:00 claude-cloud systemd-logind[853]: New session c5858 of user claude. 2026-07-01T23:15:24.628938-05:00 claude-cloud systemd-logind[853]: Session c5858 logged out. Waiting for processes to exit. 2026-07-01T23:15:24.631731-05:00 claude-cloud systemd-logind[853]: Removed session c5858. 2026-07-01T23:15:25.768222-05:00 claude-cloud sshd[1235816]: Received disconnect from 203.145.143.163 port 55826:11: Bye Bye [preauth] 2026-07-01T23:15:25.768780-05:00 claude-cloud sshd[1235816]: Disconnected from authenticating user root 203.145.143.163 port 55826 [preauth] 2026-07-01T23:16:20.833403-05:00 claude-cloud sshd[1235971]: Invalid user dap from 200.77.172.159 port 45808 2026-07-01T23:16:21.008659-05:00 claude-cloud sshd[1235971]: Received disconnect from 200.77.172.159 port 45808:11: Bye Bye [preauth] 2026-07-01T23:16:21.009155-05:00 claude-cloud sshd[1235971]: Disconnected from invalid user dap 200.77.172.159 port 45808 [preauth] 2026-07-01T23:17:01.218486-05:00 claude-cloud CRON[1236081]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T23:17:01.223937-05:00 claude-cloud CRON[1236081]: pam_unix(cron:session): session closed for user root 2026-07-01T23:17:09.614116-05:00 claude-cloud sshd[1236111]: Received disconnect from 200.155.66.2 port 52860:11: Bye Bye [preauth] 2026-07-01T23:17:09.615552-05:00 claude-cloud sshd[1236111]: Disconnected from authenticating user root 200.155.66.2 port 52860 [preauth] 2026-07-01T23:17:23.787572-05:00 claude-cloud sshd[1236160]: Connection reset by authenticating user root 62.60.130.219 port 18530 [preauth] 2026-07-01T23:17:39.785626-05:00 claude-cloud sshd[1236201]: Invalid user solv from 45.148.10.183 port 55072 2026-07-01T23:17:39.801242-05:00 claude-cloud sshd[1236201]: Connection closed by invalid user solv 45.148.10.183 port 55072 [preauth] 2026-07-01T23:18:21.295847-05:00 claude-cloud sshd[1236376]: Invalid user libra from 200.77.172.159 port 54776 2026-07-01T23:18:21.470963-05:00 claude-cloud sshd[1236376]: Received disconnect from 200.77.172.159 port 54776:11: Bye Bye [preauth] 2026-07-01T23:18:21.471887-05:00 claude-cloud sshd[1236376]: Disconnected from invalid user libra 200.77.172.159 port 54776 [preauth] 2026-07-01T23:18:45.687119-05:00 claude-cloud sshd[1236434]: Invalid user techhelp from 103.189.234.57 port 55716 2026-07-01T23:18:45.859677-05:00 claude-cloud sshd[1236434]: Received disconnect from 103.189.234.57 port 55716:11: Bye Bye [preauth] 2026-07-01T23:18:45.859869-05:00 claude-cloud sshd[1236434]: Disconnected from invalid user techhelp 103.189.234.57 port 55716 [preauth] 2026-07-01T23:18:51.260812-05:00 claude-cloud systemd-logind[853]: New session c5859 of user claude. 2026-07-01T23:18:51.671029-05:00 claude-cloud systemd-logind[853]: Session c5859 logged out. Waiting for processes to exit. 2026-07-01T23:18:51.673665-05:00 claude-cloud systemd-logind[853]: Removed session c5859. 2026-07-01T23:19:04.978652-05:00 claude-cloud sshd[1236454]: Connection closed by authenticating user root 27.71.230.31 port 40624 [preauth] 2026-07-01T23:20:05.495943-05:00 claude-cloud sshd[1236682]: Invalid user relay2 from 41.216.177.55 port 39792 2026-07-01T23:20:05.686950-05:00 claude-cloud sshd[1236682]: Received disconnect from 41.216.177.55 port 39792:11: Bye Bye [preauth] 2026-07-01T23:20:05.687140-05:00 claude-cloud sshd[1236682]: Disconnected from invalid user relay2 41.216.177.55 port 39792 [preauth] 2026-07-01T23:20:19.924778-05:00 claude-cloud sshd[1236724]: Invalid user lex from 200.77.172.159 port 35500 2026-07-01T23:20:20.102385-05:00 claude-cloud sshd[1236724]: Received disconnect from 200.77.172.159 port 35500:11: Bye Bye [preauth] 2026-07-01T23:20:20.102911-05:00 claude-cloud sshd[1236724]: Disconnected from invalid user lex 200.77.172.159 port 35500 [preauth] 2026-07-01T23:20:28.280547-05:00 claude-cloud sshd[1236746]: Invalid user pravo from 103.189.234.57 port 60090 2026-07-01T23:20:28.451154-05:00 claude-cloud sshd[1236746]: Received disconnect from 103.189.234.57 port 60090:11: Bye Bye [preauth] 2026-07-01T23:20:28.451574-05:00 claude-cloud sshd[1236746]: Disconnected from invalid user pravo 103.189.234.57 port 60090 [preauth] 2026-07-01T23:20:44.008370-05:00 claude-cloud sshd[1236788]: Invalid user solb from 45.148.10.183 port 60136 2026-07-01T23:20:44.022928-05:00 claude-cloud sshd[1236788]: Connection closed by invalid user solb 45.148.10.183 port 60136 [preauth] 2026-07-01T23:22:04.903596-05:00 claude-cloud sshd[1237016]: Invalid user classic from 41.216.177.55 port 39458 2026-07-01T23:22:05.088294-05:00 claude-cloud sshd[1237016]: Received disconnect from 41.216.177.55 port 39458:11: Bye Bye [preauth] 2026-07-01T23:22:05.088662-05:00 claude-cloud sshd[1237016]: Disconnected from invalid user classic 41.216.177.55 port 39458 [preauth] 2026-07-01T23:22:10.370552-05:00 claude-cloud sshd[1237036]: Invalid user personals from 103.189.234.57 port 60426 2026-07-01T23:22:10.543828-05:00 claude-cloud sshd[1237036]: Received disconnect from 103.189.234.57 port 60426:11: Bye Bye [preauth] 2026-07-01T23:22:10.544461-05:00 claude-cloud sshd[1237036]: Disconnected from invalid user personals 103.189.234.57 port 60426 [preauth] 2026-07-01T23:22:25.517048-05:00 claude-cloud sshd[1237084]: Received disconnect from 212.192.240.10 port 65498:11: disconnected by user [preauth] 2026-07-01T23:22:25.519435-05:00 claude-cloud sshd[1237084]: Disconnected from authenticating user root 212.192.240.10 port 65498 [preauth] 2026-07-01T23:22:26.392655-05:00 claude-cloud sshd[1237086]: Invalid user backlinks from 200.77.172.159 port 44500 2026-07-01T23:22:26.570400-05:00 claude-cloud sshd[1237086]: Received disconnect from 200.77.172.159 port 44500:11: Bye Bye [preauth] 2026-07-01T23:22:26.570605-05:00 claude-cloud sshd[1237086]: Disconnected from invalid user backlinks 200.77.172.159 port 44500 [preauth] 2026-07-01T23:22:55.145422-05:00 claude-cloud sshd[1237169]: Connection reset by authenticating user root 45.148.10.151 port 15308 [preauth] 2026-07-01T23:23:51.398328-05:00 claude-cloud sshd[1237326]: Invalid user solz from 45.148.10.183 port 36332 2026-07-01T23:23:51.410432-05:00 claude-cloud sshd[1237326]: Connection closed by invalid user solz 45.148.10.183 port 36332 [preauth] 2026-07-01T23:23:51.778951-05:00 claude-cloud sshd[1237324]: Invalid user libra from 103.189.234.57 port 54798 2026-07-01T23:23:51.955895-05:00 claude-cloud sshd[1237324]: Received disconnect from 103.189.234.57 port 54798:11: Bye Bye [preauth] 2026-07-01T23:23:51.956134-05:00 claude-cloud sshd[1237324]: Disconnected from invalid user libra 103.189.234.57 port 54798 [preauth] 2026-07-01T23:23:55.320956-05:00 claude-cloud systemd-logind[853]: New session c5860 of user claude. 2026-07-01T23:23:55.580306-05:00 claude-cloud systemd-logind[853]: Session c5860 logged out. Waiting for processes to exit. 2026-07-01T23:23:55.583225-05:00 claude-cloud systemd-logind[853]: Removed session c5860. 2026-07-01T23:23:56.667951-05:00 claude-cloud sshd[1237348]: Invalid user kp from 41.216.177.55 port 34238 2026-07-01T23:23:56.856784-05:00 claude-cloud sshd[1237348]: Received disconnect from 41.216.177.55 port 34238:11: Bye Bye [preauth] 2026-07-01T23:23:56.857247-05:00 claude-cloud sshd[1237348]: Disconnected from invalid user kp 41.216.177.55 port 34238 [preauth] 2026-07-01T23:24:24.029053-05:00 claude-cloud sshd[1237426]: Invalid user nsk from 200.77.172.159 port 53454 2026-07-01T23:24:24.215014-05:00 claude-cloud sshd[1237426]: Received disconnect from 200.77.172.159 port 53454:11: Bye Bye [preauth] 2026-07-01T23:24:24.215300-05:00 claude-cloud sshd[1237426]: Disconnected from invalid user nsk 200.77.172.159 port 53454 [preauth] 2026-07-01T23:25:01.235846-05:00 claude-cloud CRON[1237541]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T23:25:01.242607-05:00 claude-cloud CRON[1237541]: pam_unix(cron:session): session closed for user root 2026-07-01T23:25:13.782381-05:00 claude-cloud sshd[1237548]: Connection closed by authenticating user root 27.71.230.31 port 51842 [preauth] 2026-07-01T23:25:29.296970-05:00 claude-cloud sshd[1237646]: Invalid user disk from 103.189.234.57 port 51990 2026-07-01T23:25:29.474116-05:00 claude-cloud sshd[1237646]: Received disconnect from 103.189.234.57 port 51990:11: Bye Bye [preauth] 2026-07-01T23:25:29.474637-05:00 claude-cloud sshd[1237646]: Disconnected from invalid user disk 103.189.234.57 port 51990 [preauth] 2026-07-01T23:25:33.871393-05:00 claude-cloud systemd-logind[853]: New session c5861 of user claude. 2026-07-01T23:25:34.211329-05:00 claude-cloud systemd-logind[853]: Session c5861 logged out. Waiting for processes to exit. 2026-07-01T23:25:34.213583-05:00 claude-cloud systemd-logind[853]: Removed session c5861. 2026-07-01T23:25:38.409327-05:00 claude-cloud sshd[1237735]: Invalid user admin from 139.19.117.197 port 47024 2026-07-01T23:25:38.414328-05:00 claude-cloud sshd[1237735]: userauth_pubkey: signature algorithm ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] 2026-07-01T23:25:45.378595-05:00 claude-cloud sshd[1237776]: Invalid user alfred from 41.216.177.55 port 49396 2026-07-01T23:25:45.562884-05:00 claude-cloud sshd[1237776]: Received disconnect from 41.216.177.55 port 49396:11: Bye Bye [preauth] 2026-07-01T23:25:45.563095-05:00 claude-cloud sshd[1237776]: Disconnected from invalid user alfred 41.216.177.55 port 49396 [preauth] 2026-07-01T23:25:48.320784-05:00 claude-cloud sshd[1237735]: Connection closed by invalid user admin 139.19.117.197 port 47024 [preauth] 2026-07-01T23:26:09.310556-05:00 claude-cloud systemd-logind[853]: New session c5862 of user claude. 2026-07-01T23:26:09.419195-05:00 claude-cloud systemd-logind[853]: Session c5862 logged out. Waiting for processes to exit. 2026-07-01T23:26:09.420638-05:00 claude-cloud systemd-logind[853]: Removed session c5862. 2026-07-01T23:26:18.408805-05:00 claude-cloud sshd[1238216]: Invalid user recruiter from 200.77.172.159 port 34156 2026-07-01T23:26:18.582220-05:00 claude-cloud sshd[1238216]: Received disconnect from 200.77.172.159 port 34156:11: Bye Bye [preauth] 2026-07-01T23:26:18.582750-05:00 claude-cloud sshd[1238216]: Disconnected from invalid user recruiter 200.77.172.159 port 34156 [preauth] 2026-07-01T23:26:20.506039-05:00 claude-cloud systemd-logind[853]: New session c5863 of user claude. 2026-07-01T23:26:25.898836-05:00 claude-cloud systemd-logind[853]: Session c5863 logged out. Waiting for processes to exit. 2026-07-01T23:26:25.900848-05:00 claude-cloud systemd-logind[853]: Removed session c5863. 2026-07-01T23:26:54.707183-05:00 claude-cloud sshd[1238687]: Invalid user firedancer from 45.148.10.183 port 47308 2026-07-01T23:26:54.721854-05:00 claude-cloud sshd[1238687]: Connection closed by invalid user firedancer 45.148.10.183 port 47308 [preauth] 2026-07-01T23:26:58.949520-05:00 claude-cloud systemd-logind[853]: New session c5864 of user claude. 2026-07-01T23:26:59.031192-05:00 claude-cloud systemd-logind[853]: Session c5864 logged out. Waiting for processes to exit. 2026-07-01T23:26:59.032806-05:00 claude-cloud systemd-logind[853]: Removed session c5864. 2026-07-01T23:27:29.131718-05:00 claude-cloud systemd-logind[853]: New session c5865 of user claude. 2026-07-01T23:27:29.232616-05:00 claude-cloud systemd-logind[853]: Session c5865 logged out. Waiting for processes to exit. 2026-07-01T23:27:29.234098-05:00 claude-cloud systemd-logind[853]: Removed session c5865. 2026-07-01T23:27:37.317190-05:00 claude-cloud sshd[1239317]: Invalid user fonts from 41.216.177.55 port 49774 2026-07-01T23:27:37.503095-05:00 claude-cloud sshd[1239317]: Received disconnect from 41.216.177.55 port 49774:11: Bye Bye [preauth] 2026-07-01T23:27:37.503481-05:00 claude-cloud sshd[1239317]: Disconnected from invalid user fonts 41.216.177.55 port 49774 [preauth] 2026-07-01T23:27:39.168656-05:00 claude-cloud sshd[1239319]: Received disconnect from 192.210.194.2 port 45274:11: disconnected by user [preauth] 2026-07-01T23:27:39.169058-05:00 claude-cloud sshd[1239319]: Disconnected from authenticating user root 192.210.194.2 port 45274 [preauth] 2026-07-01T23:27:50.047750-05:00 claude-cloud systemd-logind[853]: New session c5866 of user claude. 2026-07-01T23:28:21.665434-05:00 claude-cloud sshd[1239943]: Invalid user kp from 200.77.172.159 port 43132 2026-07-01T23:28:21.852057-05:00 claude-cloud sshd[1239943]: Received disconnect from 200.77.172.159 port 43132:11: Bye Bye [preauth] 2026-07-01T23:28:21.854831-05:00 claude-cloud sshd[1239943]: Disconnected from invalid user kp 200.77.172.159 port 43132 [preauth] 2026-07-01T23:28:26.003155-05:00 claude-cloud sshd[1239954]: Connection reset by authenticating user root 62.60.130.219 port 24078 [preauth] 2026-07-01T23:28:59.313667-05:00 claude-cloud systemd-logind[853]: New session c5867 of user claude. 2026-07-01T23:28:59.695006-05:00 claude-cloud systemd-logind[853]: Session c5867 logged out. Waiting for processes to exit. 2026-07-01T23:28:59.696672-05:00 claude-cloud systemd-logind[853]: Removed session c5867. 2026-07-01T23:29:28.279105-05:00 claude-cloud systemd-logind[853]: Session c5866 logged out. Waiting for processes to exit. 2026-07-01T23:29:28.280709-05:00 claude-cloud systemd-logind[853]: Removed session c5866. 2026-07-01T23:30:03.833561-05:00 claude-cloud sshd[1240677]: Connection closed by authenticating user root 45.148.10.183 port 33356 [preauth] 2026-07-01T23:30:22.026393-05:00 claude-cloud sshd[1242067]: Invalid user disk from 200.77.172.159 port 52110 2026-07-01T23:30:22.199644-05:00 claude-cloud sshd[1242067]: Received disconnect from 200.77.172.159 port 52110:11: Bye Bye [preauth] 2026-07-01T23:30:22.199918-05:00 claude-cloud sshd[1242067]: Disconnected from invalid user disk 200.77.172.159 port 52110 [preauth] 2026-07-01T23:31:30.555612-05:00 claude-cloud sshd[1242852]: Connection closed by authenticating user root 27.71.230.31 port 54110 [preauth] 2026-07-01T23:31:47.849541-05:00 claude-cloud systemd-logind[853]: New session c5868 of user claude. 2026-07-01T23:31:47.990451-05:00 claude-cloud systemd-logind[853]: Session c5868 logged out. Waiting for processes to exit. 2026-07-01T23:31:47.991260-05:00 claude-cloud systemd-logind[853]: Removed session c5868. 2026-07-01T23:32:17.638693-05:00 claude-cloud sshd[1245337]: Invalid user parts from 200.77.172.159 port 32814 2026-07-01T23:32:17.809857-05:00 claude-cloud sshd[1245337]: Received disconnect from 200.77.172.159 port 32814:11: Bye Bye [preauth] 2026-07-01T23:32:17.810062-05:00 claude-cloud sshd[1245337]: Disconnected from invalid user parts 200.77.172.159 port 32814 [preauth] 2026-07-01T23:32:52.372168-05:00 claude-cloud sshd[1246403]: Received disconnect from 103.239.252.132 port 34983:11: Bye Bye [preauth] 2026-07-01T23:32:52.373380-05:00 claude-cloud sshd[1246403]: Disconnected from authenticating user root 103.239.252.132 port 34983 [preauth] 2026-07-01T23:33:09.988766-05:00 claude-cloud sshd[1246859]: Connection closed by authenticating user root 45.148.10.183 port 44644 [preauth] 2026-07-01T23:33:54.460088-05:00 claude-cloud sshd[1249618]: Connection reset by authenticating user root 45.148.10.141 port 33910 [preauth] 2026-07-01T23:34:02.163364-05:00 claude-cloud sshd[1249659]: Connection reset by 205.210.31.152 port 57800 [preauth] 2026-07-01T23:34:03.695751-05:00 claude-cloud systemd-logind[853]: New session c5869 of user claude. 2026-07-01T23:34:04.173666-05:00 claude-cloud systemd-logind[853]: Session c5869 logged out. Waiting for processes to exit. 2026-07-01T23:34:04.174858-05:00 claude-cloud systemd-logind[853]: Removed session c5869. 2026-07-01T23:34:19.426967-05:00 claude-cloud sshd[1250920]: Invalid user jacksonville from 200.77.172.159 port 41790 2026-07-01T23:34:19.602662-05:00 claude-cloud sshd[1250920]: Received disconnect from 200.77.172.159 port 41790:11: Bye Bye [preauth] 2026-07-01T23:34:19.602859-05:00 claude-cloud sshd[1250920]: Disconnected from invalid user jacksonville 200.77.172.159 port 41790 [preauth] 2026-07-01T23:34:49.956811-05:00 claude-cloud sshd[1251739]: Received disconnect from 117.149.196.217 port 49778:11: Bye Bye [preauth] 2026-07-01T23:34:49.958332-05:00 claude-cloud sshd[1251739]: Disconnected from authenticating user root 117.149.196.217 port 49778 [preauth] 2026-07-01T23:35:01.258070-05:00 claude-cloud CRON[1251992]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T23:35:01.266674-05:00 claude-cloud CRON[1251992]: pam_unix(cron:session): session closed for user root 2026-07-01T23:36:19.931236-05:00 claude-cloud sshd[1254416]: Invalid user shred from 45.148.10.183 port 46546 2026-07-01T23:36:19.948153-05:00 claude-cloud sshd[1254416]: Connection closed by invalid user shred 45.148.10.183 port 46546 [preauth] 2026-07-01T23:36:23.552300-05:00 claude-cloud sshd[1254464]: Invalid user pravo from 200.77.172.159 port 50782 2026-07-01T23:36:23.727410-05:00 claude-cloud sshd[1254464]: Received disconnect from 200.77.172.159 port 50782:11: Bye Bye [preauth] 2026-07-01T23:36:23.727595-05:00 claude-cloud sshd[1254464]: Disconnected from invalid user pravo 200.77.172.159 port 50782 [preauth] 2026-07-01T23:37:28.037345-05:00 claude-cloud sshd[1255412]: Connection closed by authenticating user root 27.71.230.31 port 59054 [preauth] 2026-07-01T23:38:21.803594-05:00 claude-cloud sshd[1256442]: Invalid user relay2 from 200.77.172.159 port 59738 2026-07-01T23:38:21.982258-05:00 claude-cloud sshd[1256442]: Received disconnect from 200.77.172.159 port 59738:11: Bye Bye [preauth] 2026-07-01T23:38:21.982497-05:00 claude-cloud sshd[1256442]: Disconnected from invalid user relay2 200.77.172.159 port 59738 [preauth] 2026-07-01T23:39:09.378846-05:00 claude-cloud systemd-logind[853]: New session c5870 of user claude. 2026-07-01T23:39:09.681442-05:00 claude-cloud systemd-logind[853]: Session c5870 logged out. Waiting for processes to exit. 2026-07-01T23:39:09.683541-05:00 claude-cloud systemd-logind[853]: Removed session c5870. 2026-07-01T23:39:25.365471-05:00 claude-cloud sshd[1258417]: Connection reset by authenticating user root 45.148.10.151 port 53008 [preauth] 2026-07-01T23:39:32.984655-05:00 claude-cloud systemd-logind[853]: New session c5871 of user claude. 2026-07-01T23:39:33.024204-05:00 claude-cloud systemd-logind[853]: Session c5871 logged out. Waiting for processes to exit. 2026-07-01T23:39:33.025926-05:00 claude-cloud systemd-logind[853]: Removed session c5871. 2026-07-01T23:39:36.907317-05:00 claude-cloud sshd[1258768]: Invalid user validator from 45.148.10.183 port 44874 2026-07-01T23:39:36.921643-05:00 claude-cloud sshd[1258768]: Connection closed by invalid user validator 45.148.10.183 port 44874 [preauth] 2026-07-01T23:39:49.857410-05:00 claude-cloud systemd-logind[853]: New session c5872 of user claude. 2026-07-01T23:39:50.819398-05:00 claude-cloud systemd-logind[853]: Session c5872 logged out. Waiting for processes to exit. 2026-07-01T23:39:50.820451-05:00 claude-cloud systemd-logind[853]: Removed session c5872. 2026-07-01T23:40:02.649305-05:00 claude-cloud systemd-logind[853]: New session c5873 of user claude. 2026-07-01T23:41:47.384810-05:00 claude-cloud systemd-logind[853]: Session c5873 logged out. Waiting for processes to exit. 2026-07-01T23:41:47.387080-05:00 claude-cloud systemd-logind[853]: Removed session c5873. 2026-07-01T23:42:35.488499-05:00 claude-cloud sshd[1263237]: Invalid user erp from 103.239.252.132 port 46463 2026-07-01T23:42:35.677386-05:00 claude-cloud sshd[1263237]: Received disconnect from 103.239.252.132 port 46463:11: Bye Bye [preauth] 2026-07-01T23:42:35.678173-05:00 claude-cloud sshd[1263237]: Disconnected from invalid user erp 103.239.252.132 port 46463 [preauth] 2026-07-01T23:42:47.290789-05:00 claude-cloud sshd[1263346]: Invalid user binance from 45.148.10.183 port 48028 2026-07-01T23:42:47.306078-05:00 claude-cloud sshd[1263346]: Connection closed by invalid user binance 45.148.10.183 port 48028 [preauth] 2026-07-01T23:43:28.540563-05:00 claude-cloud sshd[1264162]: Connection closed by authenticating user root 27.71.230.31 port 37900 [preauth] 2026-07-01T23:43:45.632725-05:00 claude-cloud sshd[1264874]: Received disconnect from 91.208.197.64 port 58210:11: disconnected by user [preauth] 2026-07-01T23:43:45.633594-05:00 claude-cloud sshd[1264874]: Disconnected from authenticating user root 91.208.197.64 port 58210 [preauth] 2026-07-01T23:44:13.357652-05:00 claude-cloud systemd-logind[853]: New session c5874 of user claude. 2026-07-01T23:44:13.792101-05:00 claude-cloud systemd-logind[853]: Session c5874 logged out. Waiting for processes to exit. 2026-07-01T23:44:13.796815-05:00 claude-cloud systemd-logind[853]: Removed session c5874. 2026-07-01T23:44:54.899658-05:00 claude-cloud sshd[1266593]: Connection reset by authenticating user root 45.148.10.151 port 42136 [preauth] 2026-07-01T23:44:57.817587-05:00 claude-cloud sshd[1266616]: Received disconnect from 103.239.252.132 port 37312:11: Bye Bye [preauth] 2026-07-01T23:44:57.818231-05:00 claude-cloud sshd[1266616]: Disconnected from authenticating user root 103.239.252.132 port 37312 [preauth] 2026-07-01T23:45:01.280242-05:00 claude-cloud CRON[1266730]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T23:45:01.288412-05:00 claude-cloud CRON[1266730]: pam_unix(cron:session): session closed for user root 2026-07-01T23:45:40.407971-05:00 claude-cloud sshd[1267235]: Invalid user kyana from 2.57.121.112 port 47126 2026-07-01T23:45:40.434758-05:00 claude-cloud sshd[1267235]: Connection closed by invalid user kyana 2.57.121.112 port 47126 [preauth] 2026-07-01T23:46:07.342948-05:00 claude-cloud sshd[1267642]: Invalid user jenkins from 117.149.196.217 port 57304 2026-07-01T23:46:07.610260-05:00 claude-cloud sshd[1267642]: Received disconnect from 117.149.196.217 port 57304:11: Bye Bye [preauth] 2026-07-01T23:46:07.610736-05:00 claude-cloud sshd[1267642]: Disconnected from invalid user jenkins 117.149.196.217 port 57304 [preauth] 2026-07-01T23:46:27.390749-05:00 claude-cloud sshd[1267917]: Invalid user trader from 45.148.10.183 port 59298 2026-07-01T23:46:27.403665-05:00 claude-cloud sshd[1267917]: Connection closed by invalid user trader 45.148.10.183 port 59298 [preauth] 2026-07-01T23:47:22.788342-05:00 claude-cloud sshd[1268705]: Received disconnect from 103.239.252.132 port 56388:11: Bye Bye [preauth] 2026-07-01T23:47:22.788980-05:00 claude-cloud sshd[1268705]: Disconnected from authenticating user root 103.239.252.132 port 56388 [preauth] 2026-07-01T23:47:59.077205-05:00 claude-cloud sshd[1269419]: Invalid user user from 117.149.196.217 port 48206 2026-07-01T23:47:59.332614-05:00 claude-cloud sshd[1269419]: Received disconnect from 117.149.196.217 port 48206:11: Bye Bye [preauth] 2026-07-01T23:47:59.335532-05:00 claude-cloud sshd[1269419]: Disconnected from invalid user user 117.149.196.217 port 48206 [preauth] 2026-07-01T23:48:56.914394-05:00 claude-cloud sshd[1270203]: Invalid user trading from 45.148.10.183 port 45048 2026-07-01T23:48:56.929022-05:00 claude-cloud sshd[1270203]: Connection closed by invalid user trading 45.148.10.183 port 45048 [preauth] 2026-07-01T23:49:17.458424-05:00 claude-cloud systemd-logind[853]: New session c5875 of user claude. 2026-07-01T23:49:17.966711-05:00 claude-cloud systemd-logind[853]: Session c5875 logged out. Waiting for processes to exit. 2026-07-01T23:49:17.968844-05:00 claude-cloud systemd-logind[853]: Removed session c5875. 2026-07-01T23:49:38.559677-05:00 claude-cloud sshd[1270576]: Connection closed by authenticating user root 27.71.230.31 port 33476 [preauth] 2026-07-01T23:49:49.061265-05:00 claude-cloud sshd[1270969]: Received disconnect from 117.149.196.217 port 38044:11: Bye Bye [preauth] 2026-07-01T23:49:49.062456-05:00 claude-cloud sshd[1270969]: Disconnected from authenticating user root 117.149.196.217 port 38044 [preauth] 2026-07-01T23:49:54.403264-05:00 claude-cloud sshd[1270981]: Received disconnect from 103.239.252.132 port 47237:11: Bye Bye [preauth] 2026-07-01T23:49:54.404724-05:00 claude-cloud sshd[1270981]: Disconnected from authenticating user root 103.239.252.132 port 47237 [preauth] 2026-07-01T23:50:29.562615-05:00 claude-cloud sshd[1271271]: Connection reset by authenticating user root 45.148.10.151 port 58166 [preauth] 2026-07-01T23:51:53.947137-05:00 claude-cloud sshd[1272028]: Invalid user admin from 117.149.196.217 port 41234 2026-07-01T23:51:54.218620-05:00 claude-cloud sshd[1272028]: Received disconnect from 117.149.196.217 port 41234:11: Bye Bye [preauth] 2026-07-01T23:51:54.219059-05:00 claude-cloud sshd[1272028]: Disconnected from invalid user admin 117.149.196.217 port 41234 [preauth] 2026-07-01T23:52:05.963472-05:00 claude-cloud systemd-logind[853]: New session c5876 of user claude. 2026-07-01T23:52:06.607337-05:00 claude-cloud systemd-logind[853]: Session c5876 logged out. Waiting for processes to exit. 2026-07-01T23:52:06.609480-05:00 claude-cloud systemd-logind[853]: Removed session c5876. 2026-07-01T23:52:11.056570-05:00 claude-cloud sshd[1272406]: Invalid user ubuntu from 45.148.10.183 port 60856 2026-07-01T23:52:11.070891-05:00 claude-cloud sshd[1272406]: Connection closed by invalid user ubuntu 45.148.10.183 port 60856 [preauth] 2026-07-01T23:52:11.488421-05:00 claude-cloud sshd[1272404]: Received disconnect from 103.239.252.132 port 38079:11: Bye Bye [preauth] 2026-07-01T23:52:11.488766-05:00 claude-cloud sshd[1272404]: Disconnected from authenticating user root 103.239.252.132 port 38079 [preauth] 2026-07-01T23:52:43.232484-05:00 claude-cloud systemd-logind[853]: New session c5877 of user claude. 2026-07-01T23:52:43.751456-05:00 claude-cloud systemd-logind[853]: Session c5877 logged out. Waiting for processes to exit. 2026-07-01T23:52:43.754185-05:00 claude-cloud systemd-logind[853]: Removed session c5877. 2026-07-01T23:53:07.222549-05:00 claude-cloud sshd[1273283]: Received disconnect from 176.65.131.215 port 35746:11: disconnected by user [preauth] 2026-07-01T23:53:07.223579-05:00 claude-cloud sshd[1273283]: Disconnected from authenticating user root 176.65.131.215 port 35746 [preauth] 2026-07-01T23:53:38.560464-05:00 claude-cloud sshd[1273583]: Invalid user test from 117.149.196.217 port 53018 2026-07-01T23:53:38.803458-05:00 claude-cloud sshd[1273583]: Received disconnect from 117.149.196.217 port 53018:11: Bye Bye [preauth] 2026-07-01T23:53:38.803831-05:00 claude-cloud sshd[1273583]: Disconnected from invalid user test 117.149.196.217 port 53018 [preauth] 2026-07-01T23:54:23.224791-05:00 claude-cloud systemd-logind[853]: New session c5878 of user claude. 2026-07-01T23:54:23.471964-05:00 claude-cloud systemd-logind[853]: Session c5878 logged out. Waiting for processes to exit. 2026-07-01T23:54:23.474946-05:00 claude-cloud systemd-logind[853]: Removed session c5878. 2026-07-01T23:54:32.335325-05:00 claude-cloud sshd[1274193]: Invalid user teste from 103.239.252.132 port 57157 2026-07-01T23:54:32.527935-05:00 claude-cloud sshd[1274193]: Received disconnect from 103.239.252.132 port 57157:11: Bye Bye [preauth] 2026-07-01T23:54:32.528405-05:00 claude-cloud sshd[1274193]: Disconnected from invalid user teste 103.239.252.132 port 57157 [preauth] 2026-07-01T23:54:46.038114-05:00 claude-cloud sshd[1274447]: Invalid user admin from 193.46.255.86 port 22368 2026-07-01T23:54:46.060426-05:00 claude-cloud systemd-logind[853]: New session c5879 of user claude. 2026-07-01T23:54:46.066392-05:00 claude-cloud sshd[1274447]: Connection closed by invalid user admin 193.46.255.86 port 22368 [preauth] 2026-07-01T23:54:47.801269-05:00 claude-cloud sshd[1274503]: Received disconnect from 209.141.33.207 port 44034:11: disconnected by user [preauth] 2026-07-01T23:54:47.801578-05:00 claude-cloud sshd[1274503]: Disconnected from authenticating user root 209.141.33.207 port 44034 [preauth] 2026-07-01T23:54:54.860012-05:00 claude-cloud systemd-logind[853]: Session c5879 logged out. Waiting for processes to exit. 2026-07-01T23:54:54.861259-05:00 claude-cloud systemd-logind[853]: Removed session c5879. 2026-07-01T23:55:01.309421-05:00 claude-cloud CRON[1275022]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T23:55:01.317391-05:00 claude-cloud CRON[1275022]: pam_unix(cron:session): session closed for user root 2026-07-01T23:55:09.970713-05:00 claude-cloud systemd-logind[853]: New session c5880 of user claude. 2026-07-01T23:55:10.816309-05:00 claude-cloud systemd-logind[853]: Session c5880 logged out. Waiting for processes to exit. 2026-07-01T23:55:10.817761-05:00 claude-cloud systemd-logind[853]: Removed session c5880. 2026-07-01T23:55:16.163433-05:00 claude-cloud sshd[1275145]: Connection closed by authenticating user root 27.71.230.31 port 35160 [preauth] 2026-07-01T23:55:18.537085-05:00 claude-cloud sshd[1275291]: Invalid user bitcoin from 45.148.10.183 port 51594 2026-07-01T23:55:18.551031-05:00 claude-cloud sshd[1275291]: Connection closed by invalid user bitcoin 45.148.10.183 port 51594 [preauth] 2026-07-01T23:55:22.537756-05:00 claude-cloud sshd[1275339]: Received disconnect from 117.149.196.217 port 42262:11: Bye Bye [preauth] 2026-07-01T23:55:22.538106-05:00 claude-cloud sshd[1275339]: Disconnected from authenticating user root 117.149.196.217 port 42262 [preauth] 2026-07-01T23:55:58.239327-05:00 claude-cloud sshd[1275773]: Connection reset by authenticating user root 45.148.10.147 port 41788 [preauth] 2026-07-01T23:56:49.608255-05:00 claude-cloud sshd[1276274]: Received disconnect from 103.239.252.132 port 48003:11: Bye Bye [preauth] 2026-07-01T23:56:49.608917-05:00 claude-cloud sshd[1276274]: Disconnected from authenticating user root 103.239.252.132 port 48003 [preauth] 2026-07-01T23:57:03.437534-05:00 claude-cloud sshd[1276351]: Received disconnect from 117.149.196.217 port 52032:11: Bye Bye [preauth] 2026-07-01T23:57:03.438436-05:00 claude-cloud sshd[1276351]: Disconnected from authenticating user root 117.149.196.217 port 52032 [preauth] 2026-07-01T23:57:42.390045-05:00 claude-cloud sshd[1276737]: Received disconnect from 192.3.145.26 port 47816:11: disconnected by user [preauth] 2026-07-01T23:57:42.391076-05:00 claude-cloud sshd[1276737]: Disconnected from authenticating user root 192.3.145.26 port 47816 [preauth] 2026-07-01T23:58:36.814603-05:00 claude-cloud sshd[1277236]: Invalid user ethereum from 45.148.10.183 port 54472 2026-07-01T23:58:36.826980-05:00 claude-cloud sshd[1277236]: Connection closed by invalid user ethereum 45.148.10.183 port 54472 [preauth] 2026-07-01T23:58:45.044383-05:00 claude-cloud sshd[1277429]: Invalid user testing from 121.229.13.210 port 37989 2026-07-01T23:58:45.260814-05:00 claude-cloud sshd[1277429]: Received disconnect from 121.229.13.210 port 37989:11: Bye Bye [preauth] 2026-07-01T23:58:45.261038-05:00 claude-cloud sshd[1277429]: Disconnected from invalid user testing 121.229.13.210 port 37989 [preauth] 2026-07-01T23:58:47.721593-05:00 claude-cloud sshd[1277541]: Invalid user postgres from 117.149.196.217 port 42310 2026-07-01T23:58:47.981634-05:00 claude-cloud sshd[1277541]: Received disconnect from 117.149.196.217 port 42310:11: Bye Bye [preauth] 2026-07-01T23:58:47.982005-05:00 claude-cloud sshd[1277541]: Disconnected from invalid user postgres 117.149.196.217 port 42310 [preauth] 2026-07-01T23:59:01.327319-05:00 claude-cloud CRON[1277815]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-01T23:59:01.338223-05:00 claude-cloud CRON[1277815]: pam_unix(cron:session): session closed for user root 2026-07-01T23:59:05.078581-05:00 claude-cloud sshd[1277874]: Received disconnect from 103.239.252.132 port 38841:11: Bye Bye [preauth] 2026-07-01T23:59:05.079013-05:00 claude-cloud sshd[1277874]: Disconnected from authenticating user root 103.239.252.132 port 38841 [preauth] 2026-07-01T23:59:06.924264-05:00 claude-cloud sshd[1277975]: Received disconnect from 36.134.69.15 port 44668:11: Bye Bye [preauth] 2026-07-01T23:59:06.924779-05:00 claude-cloud sshd[1277975]: Disconnected from authenticating user root 36.134.69.15 port 44668 [preauth] 2026-07-01T23:59:27.439815-05:00 claude-cloud systemd-logind[853]: New session c5881 of user claude. 2026-07-01T23:59:27.737021-05:00 claude-cloud systemd-logind[853]: Session c5881 logged out. Waiting for processes to exit. 2026-07-01T23:59:27.739080-05:00 claude-cloud systemd-logind[853]: Removed session c5881. 2026-07-01T23:59:53.580973-05:00 claude-cloud sshd[1279675]: banner exchange: Connection from 64.62.156.172 port 63692: invalid format 2026-07-01T23:59:58.930239-05:00 claude-cloud sshd[1279741]: Received disconnect from 106.75.239.166 port 48344:11: Bye Bye [preauth] 2026-07-01T23:59:58.930749-05:00 claude-cloud sshd[1279741]: Disconnected from authenticating user root 106.75.239.166 port 48344 [preauth] 2026-07-02T00:00:38.460025-05:00 claude-cloud sshd[1280564]: Received disconnect from 117.149.196.217 port 43520:11: Bye Bye [preauth] 2026-07-02T00:00:38.460542-05:00 claude-cloud sshd[1280564]: Disconnected from authenticating user root 117.149.196.217 port 43520 [preauth] 2026-07-02T00:01:11.666243-05:00 claude-cloud sshd[1281362]: Connection closed by authenticating user root 27.71.230.31 port 37400 [preauth] 2026-07-02T00:01:29.735625-05:00 claude-cloud sshd[1281890]: Connection reset by authenticating user root 45.148.10.147 port 14890 [preauth] 2026-07-02T00:01:31.601355-05:00 claude-cloud sshd[1281892]: Received disconnect from 103.239.252.132 port 57919:11: Bye Bye [preauth] 2026-07-02T00:01:31.601754-05:00 claude-cloud sshd[1281892]: Disconnected from authenticating user root 103.239.252.132 port 57919 [preauth] 2026-07-02T00:01:43.374204-05:00 claude-cloud sshd[1282074]: Received disconnect from 219.92.8.225 port 55554:11: Bye Bye [preauth] 2026-07-02T00:01:43.375013-05:00 claude-cloud sshd[1282074]: Disconnected from authenticating user root 219.92.8.225 port 55554 [preauth] 2026-07-02T00:01:43.557012-05:00 claude-cloud sshd[1282157]: Connection closed by authenticating user root 45.148.10.183 port 46810 [preauth] 2026-07-02T00:02:27.884780-05:00 claude-cloud sshd[1282966]: Invalid user ftp_user from 117.149.196.217 port 55810 2026-07-02T00:02:28.122169-05:00 claude-cloud sshd[1282966]: Received disconnect from 117.149.196.217 port 55810:11: Bye Bye [preauth] 2026-07-02T00:02:28.123382-05:00 claude-cloud sshd[1282966]: Disconnected from invalid user ftp_user 117.149.196.217 port 55810 [preauth] 2026-07-02T00:02:47.757116-05:00 claude-cloud sshd[1283322]: error: maximum authentication attempts exceeded for root from 72.48.182.84 port 46712 ssh2 [preauth] 2026-07-02T00:02:47.758063-05:00 claude-cloud sshd[1283322]: Disconnecting authenticating user root 72.48.182.84 port 46712: Too many authentication failures [preauth] 2026-07-02T00:02:49.984331-05:00 claude-cloud sshd[1283386]: error: maximum authentication attempts exceeded for root from 72.48.182.84 port 47122 ssh2 [preauth] 2026-07-02T00:02:49.984738-05:00 claude-cloud sshd[1283386]: Disconnecting authenticating user root 72.48.182.84 port 47122: Too many authentication failures [preauth] 2026-07-02T00:02:52.529175-05:00 claude-cloud sshd[1283414]: error: maximum authentication attempts exceeded for root from 72.48.182.84 port 47470 ssh2 [preauth] 2026-07-02T00:02:52.529684-05:00 claude-cloud sshd[1283414]: Disconnecting authenticating user root 72.48.182.84 port 47470: Too many authentication failures [preauth] 2026-07-02T00:02:54.111037-05:00 claude-cloud sshd[1283462]: Received disconnect from 72.48.182.84 port 47944:11: disconnected by user [preauth] 2026-07-02T00:02:54.111641-05:00 claude-cloud sshd[1283462]: Disconnected from authenticating user root 72.48.182.84 port 47944 [preauth] 2026-07-02T00:02:55.383942-05:00 claude-cloud sshd[1283493]: Invalid user admin from 72.48.182.84 port 48184 2026-07-02T00:02:56.239668-05:00 claude-cloud sshd[1283493]: error: maximum authentication attempts exceeded for invalid user admin from 72.48.182.84 port 48184 ssh2 [preauth] 2026-07-02T00:02:56.239947-05:00 claude-cloud sshd[1283493]: Disconnecting invalid user admin 72.48.182.84 port 48184: Too many authentication failures [preauth] 2026-07-02T00:03:13.149810-05:00 claude-cloud sshd[1283771]: Received disconnect from 121.229.13.210 port 59342:11: Bye Bye [preauth] 2026-07-02T00:03:13.150072-05:00 claude-cloud sshd[1283771]: Disconnected from authenticating user root 121.229.13.210 port 59342 [preauth] 2026-07-02T00:03:50.606623-05:00 claude-cloud sshd[1284547]: Received disconnect from 103.239.252.132 port 48758:11: Bye Bye [preauth] 2026-07-02T00:03:50.607117-05:00 claude-cloud sshd[1284547]: Disconnected from authenticating user root 103.239.252.132 port 48758 [preauth] 2026-07-02T00:04:00.199331-05:00 claude-cloud sshd[1284678]: Received disconnect from 36.134.69.15 port 43444:11: Bye Bye [preauth] 2026-07-02T00:04:00.199628-05:00 claude-cloud sshd[1284678]: Disconnected from authenticating user root 36.134.69.15 port 43444 [preauth] 2026-07-02T00:04:21.539909-05:00 claude-cloud sshd[1285181]: Invalid user ali from 117.149.196.217 port 54706 2026-07-02T00:04:21.795681-05:00 claude-cloud sshd[1285181]: Received disconnect from 117.149.196.217 port 54706:11: Bye Bye [preauth] 2026-07-02T00:04:21.796060-05:00 claude-cloud sshd[1285181]: Disconnected from invalid user ali 117.149.196.217 port 54706 [preauth] 2026-07-02T00:04:31.348531-05:00 claude-cloud systemd-logind[853]: New session c5882 of user claude. 2026-07-02T00:04:31.600729-05:00 claude-cloud systemd-logind[853]: Session c5882 logged out. Waiting for processes to exit. 2026-07-02T00:04:31.603047-05:00 claude-cloud systemd-logind[853]: Removed session c5882. 2026-07-02T00:04:50.771731-05:00 claude-cloud sshd[1285631]: Invalid user trader from 45.148.10.183 port 59898 2026-07-02T00:04:50.784827-05:00 claude-cloud sshd[1285631]: Connection closed by invalid user trader 45.148.10.183 port 59898 [preauth] 2026-07-02T00:04:52.461846-05:00 claude-cloud sshd[1285564]: Invalid user mysql from 121.229.13.210 port 39514 2026-07-02T00:04:52.639822-05:00 claude-cloud sshd[1285564]: Received disconnect from 121.229.13.210 port 39514:11: Bye Bye [preauth] 2026-07-02T00:04:52.640094-05:00 claude-cloud sshd[1285564]: Disconnected from invalid user mysql 121.229.13.210 port 39514 [preauth] 2026-07-02T00:04:59.230634-05:00 claude-cloud sshd[1286145]: Received disconnect from 36.134.69.15 port 56614:11: Bye Bye [preauth] 2026-07-02T00:04:59.230927-05:00 claude-cloud sshd[1286145]: Disconnected from authenticating user root 36.134.69.15 port 56614 [preauth] 2026-07-02T00:05:01.348781-05:00 claude-cloud CRON[1286177]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-02T00:05:01.354632-05:00 claude-cloud CRON[1286177]: pam_unix(cron:session): session closed for user root 2026-07-02T00:05:58.119730-05:00 claude-cloud sshd[1286861]: Received disconnect from 36.134.69.15 port 41556:11: Bye Bye [preauth] 2026-07-02T00:05:58.120350-05:00 claude-cloud sshd[1286861]: Disconnected from authenticating user root 36.134.69.15 port 41556 [preauth] 2026-07-02T00:06:09.015391-05:00 claude-cloud sshd[1287035]: Received disconnect from 117.149.196.217 port 49062:11: Bye Bye [preauth] 2026-07-02T00:06:09.016118-05:00 claude-cloud sshd[1287035]: Disconnected from authenticating user root 117.149.196.217 port 49062 [preauth] 2026-07-02T00:06:10.532227-05:00 claude-cloud sshd[1287039]: Received disconnect from 103.239.252.132 port 39600:11: Bye Bye [preauth] 2026-07-02T00:06:10.532541-05:00 claude-cloud sshd[1287039]: Disconnected from authenticating user root 103.239.252.132 port 39600 [preauth] 2026-07-02T00:06:29.859151-05:00 claude-cloud systemd-logind[853]: New session c5883 of user claude. 2026-07-02T00:06:30.273794-05:00 claude-cloud sshd[1287394]: Received disconnect from 121.229.13.210 port 47919:11: Bye Bye [preauth] 2026-07-02T00:06:30.274567-05:00 claude-cloud sshd[1287394]: Disconnected from authenticating user root 121.229.13.210 port 47919 [preauth] 2026-07-02T00:06:57.443575-05:00 claude-cloud sshd[1287747]: Received disconnect from 36.134.69.15 port 54728:11: Bye Bye [preauth] 2026-07-02T00:06:57.445098-05:00 claude-cloud sshd[1287747]: Disconnected from authenticating user root 36.134.69.15 port 54728 [preauth] 2026-07-02T00:06:59.852994-05:00 claude-cloud sshd[1287785]: Connection reset by authenticating user root 45.148.10.151 port 49380 [preauth] 2026-07-02T00:07:05.691346-05:00 claude-cloud systemd-logind[853]: Session c5883 logged out. Waiting for processes to exit. 2026-07-02T00:07:05.709548-05:00 claude-cloud systemd-logind[853]: Removed session c5883. 2026-07-02T00:07:14.990140-05:00 claude-cloud sshd[1287909]: Connection closed by authenticating user root 27.71.230.31 port 35554 [preauth] 2026-07-02T00:07:20.177390-05:00 claude-cloud sshd[1288058]: Received disconnect from 185.233.3.95 port 57446:11: Bye Bye [preauth] 2026-07-02T00:07:20.178034-05:00 claude-cloud sshd[1288058]: Disconnected from authenticating user root 185.233.3.95 port 57446 [preauth] 2026-07-02T00:07:23.602321-05:00 claude-cloud systemd-logind[853]: New session c5884 of user claude. 2026-07-02T00:07:23.673057-05:00 claude-cloud systemd-logind[853]: Session c5884 logged out. Waiting for processes to exit. 2026-07-02T00:07:23.675031-05:00 claude-cloud systemd-logind[853]: Removed session c5884. 2026-07-02T00:07:54.046814-05:00 claude-cloud sshd[1288966]: Invalid user trader from 45.148.10.183 port 53394 2026-07-02T00:07:54.060656-05:00 claude-cloud sshd[1288966]: Connection closed by invalid user trader 45.148.10.183 port 53394 [preauth] 2026-07-02T00:07:55.345126-05:00 claude-cloud sshd[1288969]: Invalid user ubuntu from 117.149.196.217 port 53146 2026-07-02T00:07:55.594423-05:00 claude-cloud sshd[1288969]: Received disconnect from 117.149.196.217 port 53146:11: Bye Bye [preauth] 2026-07-02T00:07:55.595635-05:00 claude-cloud sshd[1288969]: Disconnected from invalid user ubuntu 117.149.196.217 port 53146 [preauth] 2026-07-02T00:08:00.020232-05:00 claude-cloud systemd-logind[853]: New session c5885 of user claude. 2026-07-02T00:08:02.535371-05:00 claude-cloud systemd-logind[853]: Session c5885 logged out. Waiting for processes to exit. 2026-07-02T00:08:02.536760-05:00 claude-cloud systemd-logind[853]: Removed session c5885. 2026-07-02T00:08:17.256409-05:00 claude-cloud sshd[1289404]: Received disconnect from 106.75.239.166 port 50332:11: Bye Bye [preauth] 2026-07-02T00:08:17.258030-05:00 claude-cloud sshd[1289404]: Disconnected from authenticating user root 106.75.239.166 port 50332 [preauth] 2026-07-02T00:08:34.266851-05:00 claude-cloud sshd[1289879]: Received disconnect from 103.239.252.132 port 58676:11: Bye Bye [preauth] 2026-07-02T00:08:34.268707-05:00 claude-cloud sshd[1289879]: Disconnected from authenticating user root 103.239.252.132 port 58676 [preauth] 2026-07-02T00:09:35.145084-05:00 claude-cloud systemd-logind[853]: New session c5886 of user claude. 2026-07-02T00:09:35.585328-05:00 claude-cloud sshd[1290833]: Received disconnect from 117.149.196.217 port 59300:11: Bye Bye [preauth] 2026-07-02T00:09:35.586049-05:00 claude-cloud sshd[1290833]: Disconnected from authenticating user root 117.149.196.217 port 59300 [preauth] 2026-07-02T00:09:35.719357-05:00 claude-cloud systemd-logind[853]: Session c5886 logged out. Waiting for processes to exit. 2026-07-02T00:09:35.720544-05:00 claude-cloud systemd-logind[853]: Removed session c5886. 2026-07-02T00:10:53.703369-05:00 claude-cloud sshd[1291756]: Received disconnect from 103.239.252.132 port 49515:11: Bye Bye [preauth] 2026-07-02T00:10:53.703858-05:00 claude-cloud sshd[1291756]: Disconnected from authenticating user root 103.239.252.132 port 49515 [preauth] 2026-07-02T00:11:00.780526-05:00 claude-cloud sshd[1291795]: Invalid user admin from 2.57.121.25 port 46362 2026-07-02T00:11:00.806244-05:00 claude-cloud sshd[1291795]: Connection closed by invalid user admin 2.57.121.25 port 46362 [preauth] 2026-07-02T00:11:02.207373-05:00 claude-cloud sshd[1291799]: Invalid user trader from 45.148.10.183 port 57092 2026-07-02T00:11:02.220745-05:00 claude-cloud sshd[1291799]: Connection closed by invalid user trader 45.148.10.183 port 57092 [preauth] 2026-07-02T00:11:18.385970-05:00 claude-cloud sshd[1291878]: Received disconnect from 106.75.239.166 port 48726:11: Bye Bye [preauth] 2026-07-02T00:11:18.386488-05:00 claude-cloud sshd[1291878]: Disconnected from authenticating user root 106.75.239.166 port 48726 [preauth] 2026-07-02T00:11:25.780202-05:00 claude-cloud sshd[1292009]: Invalid user debian from 36.134.69.15 port 50948 2026-07-02T00:11:25.958551-05:00 claude-cloud sshd[1292009]: Received disconnect from 36.134.69.15 port 50948:11: Bye Bye [preauth] 2026-07-02T00:11:25.959015-05:00 claude-cloud sshd[1292009]: Disconnected from invalid user debian 36.134.69.15 port 50948 [preauth] 2026-07-02T00:11:50.600512-05:00 claude-cloud sshd[1292222]: Received disconnect from 219.92.8.225 port 48070:11: Bye Bye [preauth] 2026-07-02T00:11:50.600881-05:00 claude-cloud sshd[1292222]: Disconnected from authenticating user root 219.92.8.225 port 48070 [preauth] 2026-07-02T00:12:01.124617-05:00 claude-cloud sshd[1292348]: Received disconnect from 106.75.239.166 port 57160:11: Bye Bye [preauth] 2026-07-02T00:12:01.126429-05:00 claude-cloud sshd[1292348]: Disconnected from authenticating user root 106.75.239.166 port 57160 [preauth] 2026-07-02T00:12:02.539403-05:00 claude-cloud sshd[1292353]: Invalid user testuser from 185.233.3.95 port 46150 2026-07-02T00:12:02.626196-05:00 claude-cloud sshd[1292353]: Received disconnect from 185.233.3.95 port 46150:11: Bye Bye [preauth] 2026-07-02T00:12:02.626456-05:00 claude-cloud sshd[1292353]: Disconnected from invalid user testuser 185.233.3.95 port 46150 [preauth] 2026-07-02T00:12:25.344919-05:00 claude-cloud sshd[1292657]: Connection reset by authenticating user root 62.60.130.219 port 12780 [preauth] 2026-07-02T00:12:46.015825-05:00 claude-cloud sshd[1292751]: Invalid user testuser from 106.75.239.166 port 39560 2026-07-02T00:12:46.187436-05:00 claude-cloud sshd[1292751]: Received disconnect from 106.75.239.166 port 39560:11: Bye Bye [preauth] 2026-07-02T00:12:46.187631-05:00 claude-cloud sshd[1292751]: Disconnected from invalid user testuser 106.75.239.166 port 39560 [preauth] 2026-07-02T00:13:15.276734-05:00 claude-cloud sshd[1293048]: Invalid user admin from 103.239.252.132 port 40362 2026-07-02T00:13:15.466937-05:00 claude-cloud sshd[1293048]: Received disconnect from 103.239.252.132 port 40362:11: Bye Bye [preauth] 2026-07-02T00:13:15.468428-05:00 claude-cloud sshd[1293048]: Disconnected from invalid user admin 103.239.252.132 port 40362 [preauth] 2026-07-02T00:13:17.038790-05:00 claude-cloud sshd[1293009]: Connection closed by authenticating user root 27.71.230.31 port 57124 [preauth] 2026-07-02T00:14:12.189071-05:00 claude-cloud sshd[1294277]: Connection closed by authenticating user root 45.148.10.183 port 54034 [preauth] 2026-07-02T00:14:16.835838-05:00 claude-cloud sshd[1294282]: Received disconnect from 106.75.239.166 port 52072:11: Bye Bye [preauth] 2026-07-02T00:14:16.836907-05:00 claude-cloud sshd[1294282]: Disconnected from authenticating user root 106.75.239.166 port 52072 [preauth] 2026-07-02T00:14:19.500420-05:00 claude-cloud sshd[1294339]: Received disconnect from 219.92.8.225 port 59918:11: Bye Bye [preauth] 2026-07-02T00:14:19.500704-05:00 claude-cloud sshd[1294339]: Disconnected from authenticating user root 219.92.8.225 port 59918 [preauth] 2026-07-02T00:14:39.917986-05:00 claude-cloud systemd-logind[853]: New session c5887 of user claude. 2026-07-02T00:14:40.314155-05:00 claude-cloud systemd-logind[853]: Session c5887 logged out. Waiting for processes to exit. 2026-07-02T00:14:40.315239-05:00 claude-cloud systemd-logind[853]: Removed session c5887. 2026-07-02T00:15:01.367159-05:00 claude-cloud CRON[1295056]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-02T00:15:01.374502-05:00 claude-cloud CRON[1295056]: pam_unix(cron:session): session closed for user root 2026-07-02T00:15:02.229591-05:00 claude-cloud sshd[1294961]: Connection closed by 106.75.239.166 port 41446 [preauth] 2026-07-02T00:15:42.244102-05:00 claude-cloud sshd[1295542]: Invalid user elasticsearch from 106.75.239.166 port 33354 2026-07-02T00:15:42.418252-05:00 claude-cloud sshd[1295542]: Received disconnect from 106.75.239.166 port 33354:11: Bye Bye [preauth] 2026-07-02T00:15:42.418517-05:00 claude-cloud sshd[1295542]: Disconnected from invalid user elasticsearch 106.75.239.166 port 33354 [preauth] 2026-07-02T00:16:21.929148-05:00 claude-cloud sshd[1295817]: Received disconnect from 106.75.239.166 port 56634:11: Bye Bye [preauth] 2026-07-02T00:16:21.930026-05:00 claude-cloud sshd[1295817]: Disconnected from authenticating user root 106.75.239.166 port 56634 [preauth] 2026-07-02T00:16:46.743512-05:00 claude-cloud sshd[1295935]: Received disconnect from 219.92.8.225 port 33866:11: Bye Bye [preauth] 2026-07-02T00:16:46.744317-05:00 claude-cloud sshd[1295935]: Disconnected from authenticating user root 219.92.8.225 port 33866 [preauth] 2026-07-02T00:17:01.381376-05:00 claude-cloud CRON[1296232]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-02T00:17:01.388960-05:00 claude-cloud CRON[1296232]: pam_unix(cron:session): session closed for user root 2026-07-02T00:17:04.241375-05:00 claude-cloud sshd[1296255]: Received disconnect from 106.75.239.166 port 45272:11: Bye Bye [preauth] 2026-07-02T00:17:04.241789-05:00 claude-cloud sshd[1296255]: Disconnected from authenticating user root 106.75.239.166 port 45272 [preauth] 2026-07-02T00:17:56.910920-05:00 claude-cloud sshd[1297249]: Connection reset by authenticating user root 45.148.10.151 port 31368 [preauth] 2026-07-02T00:18:01.763548-05:00 claude-cloud sshd[1297370]: Invalid user exchange from 45.148.10.183 port 49970 2026-07-02T00:18:01.776046-05:00 claude-cloud sshd[1297370]: Connection closed by invalid user exchange 45.148.10.183 port 49970 [preauth] 2026-07-02T00:19:20.217768-05:00 claude-cloud sshd[1298215]: Received disconnect from 219.92.8.225 port 59972:11: Bye Bye [preauth] 2026-07-02T00:19:20.219081-05:00 claude-cloud sshd[1298215]: Disconnected from authenticating user root 219.92.8.225 port 59972 [preauth] 2026-07-02T00:19:24.128501-05:00 claude-cloud sshd[1298055]: Connection closed by authenticating user root 27.71.230.31 port 59420 [preauth] 2026-07-02T00:19:44.382422-05:00 claude-cloud systemd-logind[853]: New session c5888 of user claude. 2026-07-02T00:19:44.637355-05:00 claude-cloud systemd-logind[853]: Session c5888 logged out. Waiting for processes to exit. 2026-07-02T00:19:44.638048-05:00 claude-cloud systemd-logind[853]: Removed session c5888. 2026-07-02T00:20:00.636520-05:00 claude-cloud sshd[1298745]: Invalid user from 45.153.34.165 port 35874 2026-07-02T00:20:08.549642-05:00 claude-cloud sshd[1298745]: Connection closed by invalid user 45.153.34.165 port 35874 [preauth] 2026-07-02T00:20:45.817943-05:00 claude-cloud sshd[1299173]: Invalid user solana from 45.148.10.183 port 53742 2026-07-02T00:20:45.830690-05:00 claude-cloud sshd[1299173]: Connection closed by invalid user solana 45.148.10.183 port 53742 [preauth] 2026-07-02T00:20:52.853923-05:00 claude-cloud sshd[1299237]: Received disconnect from 185.233.3.95 port 52090:11: Bye Bye [preauth] 2026-07-02T00:20:52.855335-05:00 claude-cloud sshd[1299237]: Disconnected from authenticating user root 185.233.3.95 port 52090 [preauth] 2026-07-02T00:21:52.428300-05:00 claude-cloud sshd[1299868]: Received disconnect from 219.92.8.225 port 38524:11: Bye Bye [preauth] 2026-07-02T00:21:52.428819-05:00 claude-cloud sshd[1299868]: Disconnected from authenticating user root 219.92.8.225 port 38524 [preauth] 2026-07-02T00:22:59.696204-05:00 claude-cloud sshd[1301693]: Received disconnect from 109.236.86.20 port 51918:11: disconnected by user [preauth] 2026-07-02T00:22:59.696934-05:00 claude-cloud sshd[1301693]: Disconnected from authenticating user root 109.236.86.20 port 51918 [preauth] 2026-07-02T00:23:26.803833-05:00 claude-cloud sshd[1302512]: Connection reset by authenticating user root 45.148.10.147 port 3212 [preauth] 2026-07-02T00:23:41.791351-05:00 claude-cloud sshd[1303066]: Received disconnect from 185.233.3.95 port 54134:11: Bye Bye [preauth] 2026-07-02T00:23:41.792002-05:00 claude-cloud sshd[1303066]: Disconnected from authenticating user root 185.233.3.95 port 54134 [preauth] 2026-07-02T00:24:11.699227-05:00 claude-cloud sshd[1303744]: Invalid user sol from 45.148.10.183 port 35994 2026-07-02T00:24:11.713180-05:00 claude-cloud sshd[1303744]: Connection closed by invalid user sol 45.148.10.183 port 35994 [preauth] 2026-07-02T00:24:17.342030-05:00 claude-cloud sshd[1303954]: Received disconnect from 219.92.8.225 port 43656:11: Bye Bye [preauth] 2026-07-02T00:24:17.342685-05:00 claude-cloud sshd[1303954]: Disconnected from authenticating user root 219.92.8.225 port 43656 [preauth] 2026-07-02T00:24:49.226975-05:00 claude-cloud systemd-logind[853]: New session c5889 of user claude. 2026-07-02T00:24:49.514155-05:00 claude-cloud systemd-logind[853]: Session c5889 logged out. Waiting for processes to exit. 2026-07-02T00:24:49.518086-05:00 claude-cloud systemd-logind[853]: Removed session c5889. 2026-07-02T00:25:01.404134-05:00 claude-cloud CRON[1304747]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-02T00:25:01.414167-05:00 claude-cloud CRON[1304747]: pam_unix(cron:session): session closed for user root 2026-07-02T00:25:39.324436-05:00 claude-cloud sshd[1305252]: Invalid user admin from 139.19.117.197 port 49696 2026-07-02T00:25:39.331342-05:00 claude-cloud sshd[1305252]: userauth_pubkey: signature algorithm ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] 2026-07-02T00:25:47.341452-05:00 claude-cloud systemd-logind[853]: New session c5890 of user claude. 2026-07-02T00:25:47.462483-05:00 claude-cloud systemd-logind[853]: Session c5890 logged out. Waiting for processes to exit. 2026-07-02T00:25:47.464251-05:00 claude-cloud systemd-logind[853]: Removed session c5890. 2026-07-02T00:25:47.480248-05:00 claude-cloud sshd[1305449]: Accepted publickey for claude from 104.189.115.46 port 54443 ssh2: ED25519 SHA256:fT1j0HdefD6T81yDhO/gK0G3xMuDvWaQIxSLZl9GZuE 2026-07-02T00:25:47.487002-05:00 claude-cloud sshd[1305449]: pam_unix(sshd:session): session opened for user claude(uid=1000) by claude(uid=0) 2026-07-02T00:25:47.502880-05:00 claude-cloud systemd-logind[853]: New session 2785 of user claude. 2026-07-02T00:25:48.642751-05:00 claude-cloud systemd-logind[853]: New session c5891 of user claude. 2026-07-02T00:25:48.862499-05:00 claude-cloud systemd-logind[853]: Session c5891 logged out. Waiting for processes to exit. 2026-07-02T00:25:48.864057-05:00 claude-cloud systemd-logind[853]: Removed session c5891. 2026-07-02T00:25:49.234236-05:00 claude-cloud sshd[1305252]: Connection closed by invalid user admin 139.19.117.197 port 49696 [preauth] 2026-07-02T00:25:49.340606-05:00 claude-cloud sshd[1305696]: Received disconnect from 104.189.115.46 port 54443:11: disconnected by user 2026-07-02T00:25:49.340962-05:00 claude-cloud sshd[1305696]: Disconnected from user claude 104.189.115.46 port 54443 2026-07-02T00:25:49.343017-05:00 claude-cloud sshd[1305449]: pam_unix(sshd:session): session closed for user claude 2026-07-02T00:25:49.350152-05:00 claude-cloud systemd-logind[853]: Session 2785 logged out. Waiting for processes to exit. 2026-07-02T00:25:49.351796-05:00 claude-cloud systemd-logind[853]: Removed session 2785. 2026-07-02T00:25:50.710709-05:00 claude-cloud sshd[1305730]: Accepted publickey for claude from 104.189.115.46 port 54492 ssh2: ED25519 SHA256:fT1j0HdefD6T81yDhO/gK0G3xMuDvWaQIxSLZl9GZuE 2026-07-02T00:25:50.715844-05:00 claude-cloud sshd[1305730]: pam_unix(sshd:session): session opened for user claude(uid=1000) by claude(uid=0) 2026-07-02T00:25:50.727426-05:00 claude-cloud systemd-logind[853]: New session 2786 of user claude. 2026-07-02T00:25:51.533518-05:00 claude-cloud sshd[1305793]: Received disconnect from 104.189.115.46 port 54492:11: disconnected by user 2026-07-02T00:25:51.533998-05:00 claude-cloud sshd[1305793]: Disconnected from user claude 104.189.115.46 port 54492 2026-07-02T00:25:51.535198-05:00 claude-cloud sshd[1305730]: pam_unix(sshd:session): session closed for user claude 2026-07-02T00:25:51.541980-05:00 claude-cloud systemd-logind[853]: Session 2786 logged out. Waiting for processes to exit. 2026-07-02T00:25:51.544652-05:00 claude-cloud systemd-logind[853]: Removed session 2786. 2026-07-02T00:26:42.777081-05:00 claude-cloud sshd[1307228]: Invalid user elasticsearch from 185.233.3.95 port 60914 2026-07-02T00:26:42.873642-05:00 claude-cloud sshd[1307228]: Received disconnect from 185.233.3.95 port 60914:11: Bye Bye [preauth] 2026-07-02T00:26:42.873899-05:00 claude-cloud sshd[1307228]: Disconnected from invalid user elasticsearch 185.233.3.95 port 60914 [preauth] 2026-07-02T00:26:46.669754-05:00 claude-cloud sshd[1307252]: Received disconnect from 219.92.8.225 port 50444:11: Bye Bye [preauth] 2026-07-02T00:26:46.671521-05:00 claude-cloud sshd[1307252]: Disconnected from authenticating user root 219.92.8.225 port 50444 [preauth] 2026-07-02T00:26:51.597842-05:00 claude-cloud sshd[1304837]: Connection closed by authenticating user root 27.71.230.31 port 52604 [preauth] 2026-07-02T00:27:15.773376-05:00 claude-cloud sshd[1308079]: Invalid user sol from 45.148.10.183 port 49288 2026-07-02T00:27:15.787607-05:00 claude-cloud sshd[1308079]: Connection closed by invalid user sol 45.148.10.183 port 49288 [preauth] 2026-07-02T00:27:37.666536-05:00 claude-cloud sshd[1308739]: Connection closed by authenticating user root 185.242.3.195 port 42800 [preauth] 2026-07-02T00:28:57.961603-05:00 claude-cloud sshd[1311626]: Connection reset by authenticating user root 45.148.10.147 port 8402 [preauth] 2026-07-02T00:29:14.941683-05:00 claude-cloud sshd[1312290]: Received disconnect from 219.92.8.225 port 35180:11: Bye Bye [preauth] 2026-07-02T00:29:14.941939-05:00 claude-cloud sshd[1312290]: Disconnected from authenticating user root 219.92.8.225 port 35180 [preauth] 2026-07-02T00:29:39.436248-05:00 claude-cloud sshd[1312940]: Invalid user admin from 185.233.3.95 port 57080 2026-07-02T00:29:39.528233-05:00 claude-cloud sshd[1312940]: Received disconnect from 185.233.3.95 port 57080:11: Bye Bye [preauth] 2026-07-02T00:29:39.528432-05:00 claude-cloud sshd[1312940]: Disconnected from invalid user admin 185.233.3.95 port 57080 [preauth] 2026-07-02T00:29:52.848083-05:00 claude-cloud systemd-logind[853]: New session c5892 of user claude. 2026-07-02T00:29:53.109924-05:00 claude-cloud systemd-logind[853]: Session c5892 logged out. Waiting for processes to exit. 2026-07-02T00:29:53.111306-05:00 claude-cloud systemd-logind[853]: Removed session c5892. 2026-07-02T00:30:08.365801-05:00 claude-cloud sshd[1313609]: Invalid user sol from 45.148.10.183 port 44790 2026-07-02T00:30:08.380614-05:00 claude-cloud sshd[1313609]: Connection closed by invalid user sol 45.148.10.183 port 44790 [preauth] 2026-07-02T00:31:33.484030-05:00 claude-cloud sshd[1314105]: Connection closed by authenticating user root 27.71.230.31 port 53846 [preauth] 2026-07-02T00:31:45.537191-05:00 claude-cloud sshd[1314293]: Received disconnect from 219.92.8.225 port 45740:11: Bye Bye [preauth] 2026-07-02T00:31:45.539384-05:00 claude-cloud sshd[1314293]: Disconnected from authenticating user root 219.92.8.225 port 45740 [preauth] 2026-07-02T00:32:32.281545-05:00 claude-cloud sshd[1314447]: Received disconnect from 185.233.3.95 port 37436:11: Bye Bye [preauth] 2026-07-02T00:32:32.282523-05:00 claude-cloud sshd[1314447]: Disconnected from authenticating user root 185.233.3.95 port 37436 [preauth] 2026-07-02T00:33:22.147759-05:00 claude-cloud sshd[1314579]: Invalid user ubuntu from 45.148.10.183 port 35182 2026-07-02T00:33:22.162367-05:00 claude-cloud sshd[1314579]: Connection closed by invalid user ubuntu 45.148.10.183 port 35182 [preauth] 2026-07-02T00:34:29.986793-05:00 claude-cloud sshd[1314770]: Connection reset by authenticating user root 45.148.10.157 port 43702 [preauth] 2026-07-02T00:34:56.417251-05:00 claude-cloud systemd-logind[853]: New session c5893 of user claude. 2026-07-02T00:34:56.715667-05:00 claude-cloud systemd-logind[853]: Session c5893 logged out. Waiting for processes to exit. 2026-07-02T00:34:56.719799-05:00 claude-cloud systemd-logind[853]: Removed session c5893. 2026-07-02T00:35:01.432211-05:00 claude-cloud CRON[1314911]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-02T00:35:01.436723-05:00 claude-cloud CRON[1314911]: pam_unix(cron:session): session closed for user root 2026-07-02T00:35:27.857614-05:00 claude-cloud sshd[1314987]: Received disconnect from 185.233.3.95 port 33128:11: Bye Bye [preauth] 2026-07-02T00:35:27.857956-05:00 claude-cloud sshd[1314987]: Disconnected from authenticating user root 185.233.3.95 port 33128 [preauth] 2026-07-02T00:36:08.830821-05:00 claude-cloud sshd[1315127]: banner exchange: Connection from 91.238.181.94 port 65103: invalid format 2026-07-02T00:36:31.870678-05:00 claude-cloud sshd[1315175]: Invalid user ubuntu from 45.148.10.183 port 56236 2026-07-02T00:36:31.885729-05:00 claude-cloud sshd[1315175]: Connection closed by invalid user ubuntu 45.148.10.183 port 56236 [preauth] 2026-07-02T00:36:40.994381-05:00 claude-cloud sshd[1315200]: Received disconnect from 219.92.8.225 port 55306:11: Bye Bye [preauth] 2026-07-02T00:36:40.995163-05:00 claude-cloud sshd[1315200]: Disconnected from authenticating user root 219.92.8.225 port 55306 [preauth] 2026-07-02T00:37:45.231378-05:00 claude-cloud sshd[1315309]: Connection closed by authenticating user root 27.71.230.31 port 57062 [preauth] 2026-07-02T00:38:25.818850-05:00 claude-cloud sshd[1315501]: Received disconnect from 185.233.3.95 port 51572:11: Bye Bye [preauth] 2026-07-02T00:38:25.819583-05:00 claude-cloud sshd[1315501]: Disconnected from authenticating user root 185.233.3.95 port 51572 [preauth] 2026-07-02T00:39:09.721475-05:00 claude-cloud sshd[1315624]: Invalid user admin from 219.92.8.225 port 33328 2026-07-02T00:39:09.893424-05:00 claude-cloud sshd[1315624]: Received disconnect from 219.92.8.225 port 33328:11: Bye Bye [preauth] 2026-07-02T00:39:09.893660-05:00 claude-cloud sshd[1315624]: Disconnected from invalid user admin 219.92.8.225 port 33328 [preauth] 2026-07-02T00:39:56.850677-05:00 claude-cloud sshd[1315766]: Invalid user ubuntu from 45.148.10.183 port 47272 2026-07-02T00:39:56.864656-05:00 claude-cloud sshd[1315766]: Connection closed by invalid user ubuntu 45.148.10.183 port 47272 [preauth] 2026-07-02T00:40:00.222430-05:00 claude-cloud systemd-logind[853]: New session c5894 of user claude. 2026-07-02T00:40:00.488988-05:00 claude-cloud sshd[1315782]: Connection reset by authenticating user root 45.148.10.152 port 36566 [preauth] 2026-07-02T00:40:00.576588-05:00 claude-cloud systemd-logind[853]: Session c5894 logged out. Waiting for processes to exit. 2026-07-02T00:40:00.578334-05:00 claude-cloud systemd-logind[853]: Removed session c5894. 2026-07-02T00:41:18.271715-05:00 claude-cloud sshd[1316143]: Received disconnect from 185.233.3.95 port 59306:11: Bye Bye [preauth] 2026-07-02T00:41:18.272456-05:00 claude-cloud sshd[1316143]: Disconnected from authenticating user root 185.233.3.95 port 59306 [preauth] 2026-07-02T00:41:37.455728-05:00 claude-cloud sshd[1316195]: Received disconnect from 219.92.8.225 port 35760:11: Bye Bye [preauth] 2026-07-02T00:41:37.457003-05:00 claude-cloud sshd[1316195]: Disconnected from authenticating user root 219.92.8.225 port 35760 [preauth] 2026-07-02T00:42:26.886045-05:00 claude-cloud sshd[1316332]: Received disconnect from 45.175.123.254 port 62353:11: disconnected by user [preauth] 2026-07-02T00:42:26.886892-05:00 claude-cloud sshd[1316332]: Disconnected from authenticating user root 45.175.123.254 port 62353 [preauth] 2026-07-02T00:42:51.569381-05:00 claude-cloud sshd[1316462]: Invalid user trading from 45.148.10.183 port 37064 2026-07-02T00:42:51.582567-05:00 claude-cloud sshd[1316462]: Connection closed by invalid user trading 45.148.10.183 port 37064 [preauth] 2026-07-02T00:43:24.124682-05:00 claude-cloud sshd[1316522]: Connection closed by authenticating user root 27.71.230.31 port 34740 [preauth] 2026-07-02T00:44:01.566757-05:00 claude-cloud sshd[1316660]: Invalid user elasticsearch from 219.92.8.225 port 37674 2026-07-02T00:44:01.766725-05:00 claude-cloud sshd[1316660]: Received disconnect from 219.92.8.225 port 37674:11: Bye Bye [preauth] 2026-07-02T00:44:01.766923-05:00 claude-cloud sshd[1316660]: Disconnected from invalid user elasticsearch 219.92.8.225 port 37674 [preauth] 2026-07-02T00:44:17.992809-05:00 claude-cloud sshd[1316737]: Received disconnect from 185.233.3.95 port 50558:11: Bye Bye [preauth] 2026-07-02T00:44:17.993143-05:00 claude-cloud sshd[1316737]: Disconnected from authenticating user root 185.233.3.95 port 50558 [preauth] 2026-07-02T00:45:01.447081-05:00 claude-cloud CRON[1317488]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-02T00:45:01.453211-05:00 claude-cloud CRON[1317488]: pam_unix(cron:session): session closed for user root 2026-07-02T00:45:04.338759-05:00 claude-cloud systemd-logind[853]: New session c5895 of user claude. 2026-07-02T00:45:04.673185-05:00 claude-cloud systemd-logind[853]: Session c5895 logged out. Waiting for processes to exit. 2026-07-02T00:45:04.674807-05:00 claude-cloud systemd-logind[853]: Removed session c5895. 2026-07-02T00:45:29.208510-05:00 claude-cloud sshd[1317949]: Connection reset by authenticating user root 45.148.10.152 port 24264 [preauth] 2026-07-02T00:45:53.937661-05:00 claude-cloud sshd[1318060]: Invalid user trader from 45.148.10.183 port 41420 2026-07-02T00:45:53.950041-05:00 claude-cloud sshd[1318060]: Connection closed by invalid user trader 45.148.10.183 port 41420 [preauth] 2026-07-02T00:46:48.458450-05:00 claude-cloud systemd-logind[853]: New session c5896 of user claude. 2026-07-02T00:46:48.482194-05:00 claude-cloud systemd-logind[853]: Session c5896 logged out. Waiting for processes to exit. 2026-07-02T00:46:48.484713-05:00 claude-cloud systemd-logind[853]: Removed session c5896. 2026-07-02T00:47:13.989760-05:00 claude-cloud sshd[1318412]: Received disconnect from 185.233.3.95 port 37344:11: Bye Bye [preauth] 2026-07-02T00:47:13.990385-05:00 claude-cloud sshd[1318412]: Disconnected from authenticating user root 185.233.3.95 port 37344 [preauth] 2026-07-02T00:47:21.135916-05:00 claude-cloud systemd-logind[853]: New session c5897 of user claude. 2026-07-02T00:47:21.171645-05:00 claude-cloud systemd-logind[853]: Session c5897 logged out. Waiting for processes to exit. 2026-07-02T00:47:21.174180-05:00 claude-cloud systemd-logind[853]: Removed session c5897. 2026-07-02T00:47:42.427376-05:00 claude-cloud systemd-logind[853]: New session c5898 of user claude. 2026-07-02T00:47:42.674479-05:00 claude-cloud sshd[1318491]: Accepted publickey for claude from 104.189.115.46 port 57723 ssh2: ED25519 SHA256:fT1j0HdefD6T81yDhO/gK0G3xMuDvWaQIxSLZl9GZuE 2026-07-02T00:47:42.678367-05:00 claude-cloud sshd[1318491]: pam_unix(sshd:session): session opened for user claude(uid=1000) by claude(uid=0) 2026-07-02T00:47:42.689648-05:00 claude-cloud systemd-logind[853]: New session 2789 of user claude. 2026-07-02T00:47:42.718238-05:00 claude-cloud systemd-logind[853]: New session c5899 of user claude. 2026-07-02T00:47:42.748103-05:00 claude-cloud systemd-logind[853]: Session c5899 logged out. Waiting for processes to exit. 2026-07-02T00:47:42.750867-05:00 claude-cloud systemd-logind[853]: Removed session c5899. 2026-07-02T00:47:44.095245-05:00 claude-cloud systemd-logind[853]: Session c5898 logged out. Waiting for processes to exit. 2026-07-02T00:47:44.097420-05:00 claude-cloud systemd-logind[853]: Removed session c5898. 2026-07-02T00:47:44.219503-05:00 claude-cloud sshd[1318567]: Received disconnect from 104.189.115.46 port 57723:11: disconnected by user 2026-07-02T00:47:44.220378-05:00 claude-cloud sshd[1318567]: Disconnected from user claude 104.189.115.46 port 57723 2026-07-02T00:47:44.222023-05:00 claude-cloud sshd[1318491]: pam_unix(sshd:session): session closed for user claude 2026-07-02T00:47:44.229850-05:00 claude-cloud systemd-logind[853]: Session 2789 logged out. Waiting for processes to exit. 2026-07-02T00:47:44.231510-05:00 claude-cloud systemd-logind[853]: Removed session 2789. 2026-07-02T00:49:15.728710-05:00 claude-cloud systemd-logind[853]: New session c5900 of user claude. 2026-07-02T00:49:15.750831-05:00 claude-cloud systemd-logind[853]: Session c5900 logged out. Waiting for processes to exit. 2026-07-02T00:49:15.752491-05:00 claude-cloud systemd-logind[853]: Removed session c5900. 2026-07-02T00:49:16.092000-05:00 claude-cloud systemd-logind[853]: New session c5901 of user claude. 2026-07-02T00:49:16.117738-05:00 claude-cloud systemd-logind[853]: Session c5901 logged out. Waiting for processes to exit. 2026-07-02T00:49:16.119599-05:00 claude-cloud systemd-logind[853]: Removed session c5901. 2026-07-02T00:49:23.885603-05:00 claude-cloud sshd[1319453]: error: kex_exchange_identification: read: Connection reset by peer 2026-07-02T00:49:23.886344-05:00 claude-cloud sshd[1319453]: Connection reset by 172.174.125.243 port 30464 2026-07-02T00:49:28.239217-05:00 claude-cloud sshd[1319655]: Accepted publickey for claude from 104.189.115.46 port 57999 ssh2: ED25519 SHA256:fT1j0HdefD6T81yDhO/gK0G3xMuDvWaQIxSLZl9GZuE 2026-07-02T00:49:28.243731-05:00 claude-cloud sshd[1319655]: pam_unix(sshd:session): session opened for user claude(uid=1000) by claude(uid=0) 2026-07-02T00:49:28.254086-05:00 claude-cloud systemd-logind[853]: New session 2790 of user claude. 2026-07-02T00:49:37.537676-05:00 claude-cloud sshd[1319556]: Connection closed by authenticating user root 27.71.230.31 port 43926 [preauth] 2026-07-02T00:50:08.687736-05:00 claude-cloud systemd-logind[853]: New session c5902 of user claude. 2026-07-02T00:50:08.954757-05:00 claude-cloud systemd-logind[853]: Session c5902 logged out. Waiting for processes to exit. 2026-07-02T00:50:08.956502-05:00 claude-cloud systemd-logind[853]: Removed session c5902. 2026-07-02T00:50:11.665675-05:00 claude-cloud sshd[1320873]: Received disconnect from 185.233.3.95 port 35696:11: Bye Bye [preauth] 2026-07-02T00:50:11.666045-05:00 claude-cloud sshd[1320873]: Disconnected from authenticating user root 185.233.3.95 port 35696 [preauth] 2026-07-02T00:50:54.645686-05:00 claude-cloud sshd[1322129]: Connection reset by authenticating user root 45.148.10.151 port 42728 [preauth] 2026-07-02T00:52:35.659030-05:00 claude-cloud systemd-logind[853]: New session c5903 of user claude. 2026-07-02T00:52:35.741737-05:00 claude-cloud systemd-logind[853]: Session c5903 logged out. Waiting for processes to exit. 2026-07-02T00:52:35.743943-05:00 claude-cloud systemd-logind[853]: Removed session c5903. 2026-07-02T00:52:45.833710-05:00 claude-cloud systemd-logind[853]: New session c5904 of user claude. 2026-07-02T00:52:48.195361-05:00 claude-cloud systemd-logind[853]: Session c5904 logged out. Waiting for processes to exit. 2026-07-02T00:52:48.197809-05:00 claude-cloud systemd-logind[853]: Removed session c5904. 2026-07-02T00:53:54.940420-05:00 claude-cloud sshd[1326571]: Connection closed by authenticating user root 193.46.255.86 port 54382 [preauth] 2026-07-02T00:55:01.464103-05:00 claude-cloud CRON[1328010]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-02T00:55:01.470848-05:00 claude-cloud CRON[1328010]: pam_unix(cron:session): session closed for user root 2026-07-02T00:55:12.562300-05:00 claude-cloud systemd-logind[853]: New session c5905 of user claude. 2026-07-02T00:55:12.817561-05:00 claude-cloud systemd-logind[853]: Session c5905 logged out. Waiting for processes to exit. 2026-07-02T00:55:12.818888-05:00 claude-cloud systemd-logind[853]: Removed session c5905. 2026-07-02T00:55:40.619915-05:00 claude-cloud sshd[1328446]: Connection closed by authenticating user root 27.71.230.31 port 60460 [preauth] 2026-07-02T00:56:25.820826-05:00 claude-cloud sshd[1329564]: Connection reset by authenticating user root 45.148.10.157 port 46600 [preauth] 2026-07-02T00:58:06.494037-05:00 claude-cloud sshd[1330786]: Invalid user admin from 123.31.20.162 port 59607 2026-07-02T00:58:06.721880-05:00 claude-cloud sshd[1330786]: Connection closed by invalid user admin 123.31.20.162 port 59607 [preauth] 2026-07-02T00:58:29.699916-05:00 claude-cloud systemd-logind[853]: New session c5906 of user claude. 2026-07-02T00:58:29.731758-05:00 claude-cloud systemd-logind[853]: Session c5906 logged out. Waiting for processes to exit. 2026-07-02T00:58:29.735894-05:00 claude-cloud systemd-logind[853]: Removed session c5906. 2026-07-02T00:58:39.367187-05:00 claude-cloud systemd-logind[853]: New session c5907 of user claude. 2026-07-02T00:58:39.393109-05:00 claude-cloud systemd-logind[853]: Session c5907 logged out. Waiting for processes to exit. 2026-07-02T00:58:39.394718-05:00 claude-cloud systemd-logind[853]: Removed session c5907. 2026-07-02T00:58:41.985837-05:00 claude-cloud systemd-logind[853]: New session c5908 of user claude. 2026-07-02T00:58:42.008255-05:00 claude-cloud systemd-logind[853]: Session c5908 logged out. Waiting for processes to exit. 2026-07-02T00:58:42.012039-05:00 claude-cloud systemd-logind[853]: Removed session c5908. 2026-07-02T00:59:28.998949-05:00 claude-cloud sshd[1319782]: Received disconnect from 104.189.115.46 port 57999:11: disconnected by user 2026-07-02T00:59:29.001653-05:00 claude-cloud sshd[1319782]: Disconnected from user claude 104.189.115.46 port 57999 2026-07-02T00:59:29.002917-05:00 claude-cloud sshd[1319655]: pam_unix(sshd:session): session closed for user claude 2026-07-02T00:59:29.010079-05:00 claude-cloud systemd-logind[853]: Session 2790 logged out. Waiting for processes to exit. 2026-07-02T00:59:29.013628-05:00 claude-cloud systemd-logind[853]: Removed session 2790. 2026-07-02T01:00:16.140869-05:00 claude-cloud systemd-logind[853]: New session c5909 of user claude. 2026-07-02T01:00:16.528665-05:00 claude-cloud systemd-logind[853]: Session c5909 logged out. Waiting for processes to exit. 2026-07-02T01:00:16.530151-05:00 claude-cloud systemd-logind[853]: Removed session c5909. 2026-07-02T01:00:30.336579-05:00 claude-cloud sshd[1332746]: error: kex_exchange_identification: read: Connection reset by peer 2026-07-02T01:00:30.337464-05:00 claude-cloud sshd[1332746]: Connection reset by 188.240.59.7 port 63871 2026-07-02T01:00:42.663899-05:00 claude-cloud sshd[1332850]: Connection reset by 31.14.254.17 port 4462 [preauth] 2026-07-02T01:01:29.422568-05:00 claude-cloud sshd[1333380]: Connection closed by authenticating user root 27.71.230.31 port 40098 [preauth] 2026-07-02T01:01:53.680224-05:00 claude-cloud sshd[1333792]: Connection reset by authenticating user root 45.148.10.147 port 61100 [preauth] 2026-07-02T01:05:01.484512-05:00 claude-cloud CRON[1340507]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-02T01:05:01.491582-05:00 claude-cloud CRON[1340507]: pam_unix(cron:session): session closed for user root 2026-07-02T01:05:20.216840-05:00 claude-cloud systemd-logind[853]: New session c5910 of user claude. 2026-07-02T01:05:20.484780-05:00 claude-cloud systemd-logind[853]: Session c5910 logged out. Waiting for processes to exit. 2026-07-02T01:05:20.486841-05:00 claude-cloud systemd-logind[853]: Removed session c5910. 2026-07-02T01:07:22.353011-05:00 claude-cloud sshd[1346628]: Connection closed by authenticating user root 27.71.230.31 port 46468 [preauth] 2026-07-02T01:07:31.544604-05:00 claude-cloud sshd[1347198]: Connection reset by authenticating user root 45.148.10.151 port 59064 [preauth] 2026-07-02T01:10:24.161531-05:00 claude-cloud systemd-logind[853]: New session c5911 of user claude. 2026-07-02T01:10:24.538833-05:00 claude-cloud systemd-logind[853]: Session c5911 logged out. Waiting for processes to exit. 2026-07-02T01:10:24.541079-05:00 claude-cloud systemd-logind[853]: Removed session c5911. 2026-07-02T01:13:10.834107-05:00 claude-cloud sshd[1354031]: Connection reset by authenticating user root 45.148.10.157 port 11750 [preauth] 2026-07-02T01:13:29.277353-05:00 claude-cloud sshd[1354049]: Connection closed by authenticating user root 27.71.230.31 port 37892 [preauth] 2026-07-02T01:15:01.505920-05:00 claude-cloud CRON[1354387]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-02T01:15:01.512359-05:00 claude-cloud CRON[1354387]: pam_unix(cron:session): session closed for user root 2026-07-02T01:15:35.628033-05:00 claude-cloud systemd-logind[853]: New session c5912 of user claude. 2026-07-02T01:15:36.009838-05:00 claude-cloud systemd-logind[853]: Session c5912 logged out. Waiting for processes to exit. 2026-07-02T01:15:36.012236-05:00 claude-cloud systemd-logind[853]: Removed session c5912. 2026-07-02T01:17:01.522983-05:00 claude-cloud CRON[1354767]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-02T01:17:01.534156-05:00 claude-cloud CRON[1354767]: pam_unix(cron:session): session closed for user root 2026-07-02T01:18:28.981976-05:00 claude-cloud sshd[1357250]: Invalid user admin from 2.57.121.25 port 37914 2026-07-02T01:18:29.006402-05:00 claude-cloud sshd[1357250]: Connection closed by invalid user admin 2.57.121.25 port 37914 [preauth] 2026-07-02T01:18:40.579366-05:00 claude-cloud sshd[1357458]: Connection reset by authenticating user root 62.60.130.219 port 37968 [preauth] 2026-07-02T01:19:30.854110-05:00 claude-cloud sshd[1358579]: Connection closed by authenticating user root 27.71.230.31 port 55660 [preauth] 2026-07-02T01:19:44.821790-05:00 claude-cloud sshd[1359110]: Received disconnect from 51.75.149.221 port 40046:11: disconnected by user [preauth] 2026-07-02T01:19:44.822736-05:00 claude-cloud sshd[1359110]: Disconnected from authenticating user root 51.75.149.221 port 40046 [preauth] 2026-07-02T01:20:39.249915-05:00 claude-cloud systemd-logind[853]: New session c5913 of user claude. 2026-07-02T01:20:39.535550-05:00 claude-cloud systemd-logind[853]: Session c5913 logged out. Waiting for processes to exit. 2026-07-02T01:20:39.536731-05:00 claude-cloud systemd-logind[853]: Removed session c5913. 2026-07-02T01:21:13.380143-05:00 claude-cloud sshd[1362021]: Invalid user laurie from 2.57.121.112 port 23934 2026-07-02T01:21:13.407805-05:00 claude-cloud sshd[1362021]: Connection closed by invalid user laurie 2.57.121.112 port 23934 [preauth] 2026-07-02T01:24:17.984587-05:00 claude-cloud sshd[1367332]: Connection reset by authenticating user root 45.148.10.151 port 7972 [preauth] 2026-07-02T01:25:01.553229-05:00 claude-cloud CRON[1368024]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-02T01:25:01.561534-05:00 claude-cloud CRON[1368024]: pam_unix(cron:session): session closed for user root 2026-07-02T01:25:39.468352-05:00 claude-cloud sshd[1368187]: Invalid user admin from 139.19.117.197 port 55810 2026-07-02T01:25:39.473239-05:00 claude-cloud sshd[1368187]: userauth_pubkey: signature algorithm ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] 2026-07-02T01:25:43.265764-05:00 claude-cloud systemd-logind[853]: New session c5914 of user claude. 2026-07-02T01:25:43.558698-05:00 claude-cloud systemd-logind[853]: Session c5914 logged out. Waiting for processes to exit. 2026-07-02T01:25:43.560483-05:00 claude-cloud systemd-logind[853]: Removed session c5914. 2026-07-02T01:25:49.380222-05:00 claude-cloud sshd[1368187]: Connection closed by invalid user admin 139.19.117.197 port 55810 [preauth] 2026-07-02T01:25:52.192567-05:00 claude-cloud sshd[1368110]: Connection closed by authenticating user root 27.71.230.31 port 46400 [preauth] 2026-07-02T01:26:11.603111-05:00 claude-cloud sshd[1368330]: Received disconnect from 74.48.105.66 port 36054:11: disconnected by user [preauth] 2026-07-02T01:26:11.605551-05:00 claude-cloud sshd[1368330]: Disconnected from authenticating user root 74.48.105.66 port 36054 [preauth] 2026-07-02T01:26:54.987693-05:00 claude-cloud systemd-logind[853]: New session c5915 of user claude. 2026-07-02T01:26:55.307737-05:00 claude-cloud systemd-logind[853]: Session c5915 logged out. Waiting for processes to exit. 2026-07-02T01:26:55.309218-05:00 claude-cloud systemd-logind[853]: Removed session c5915. 2026-07-02T01:26:59.601009-05:00 claude-cloud systemd-logind[853]: New session c5916 of user claude. 2026-07-02T01:26:59.915997-05:00 claude-cloud systemd-logind[853]: Session c5916 logged out. Waiting for processes to exit. 2026-07-02T01:26:59.917447-05:00 claude-cloud systemd-logind[853]: Removed session c5916. 2026-07-02T01:27:16.268627-05:00 claude-cloud systemd-logind[853]: New session c5917 of user claude. 2026-07-02T01:27:45.829054-05:00 claude-cloud systemd-logind[853]: Session c5917 logged out. Waiting for processes to exit. 2026-07-02T01:27:45.830638-05:00 claude-cloud systemd-logind[853]: Removed session c5917. 2026-07-02T01:28:49.698268-05:00 claude-cloud sshd[1372356]: Connection closed by 195.178.110.227 port 45090 2026-07-02T01:29:30.824158-05:00 claude-cloud systemd-logind[853]: New session c5918 of user claude. 2026-07-02T01:29:31.019109-05:00 claude-cloud systemd-logind[853]: New session c5919 of user claude. 2026-07-02T01:29:33.729373-05:00 claude-cloud systemd-logind[853]: Session c5918 logged out. Waiting for processes to exit. 2026-07-02T01:29:33.731238-05:00 claude-cloud systemd-logind[853]: Removed session c5918. 2026-07-02T01:29:34.059751-05:00 claude-cloud systemd-logind[853]: Session c5919 logged out. Waiting for processes to exit. 2026-07-02T01:29:34.062106-05:00 claude-cloud systemd-logind[853]: Removed session c5919. 2026-07-02T01:29:34.471863-05:00 claude-cloud systemd-logind[853]: New session c5920 of user claude. 2026-07-02T01:29:35.039954-05:00 claude-cloud systemd-logind[853]: Session c5920 logged out. Waiting for processes to exit. 2026-07-02T01:29:35.041559-05:00 claude-cloud systemd-logind[853]: Removed session c5920. 2026-07-02T01:29:35.358117-05:00 claude-cloud systemd-logind[853]: New session c5921 of user claude. 2026-07-02T01:29:35.922869-05:00 claude-cloud systemd-logind[853]: Session c5921 logged out. Waiting for processes to exit. 2026-07-02T01:29:35.925377-05:00 claude-cloud systemd-logind[853]: Removed session c5921. 2026-07-02T01:29:36.247369-05:00 claude-cloud systemd-logind[853]: New session c5922 of user claude. 2026-07-02T01:29:36.815073-05:00 claude-cloud systemd-logind[853]: Session c5922 logged out. Waiting for processes to exit. 2026-07-02T01:29:36.816890-05:00 claude-cloud systemd-logind[853]: Removed session c5922. 2026-07-02T01:29:37.127596-05:00 claude-cloud systemd-logind[853]: New session c5923 of user claude. 2026-07-02T01:29:37.696196-05:00 claude-cloud systemd-logind[853]: Session c5923 logged out. Waiting for processes to exit. 2026-07-02T01:29:37.698190-05:00 claude-cloud systemd-logind[853]: Removed session c5923. 2026-07-02T01:29:38.015112-05:00 claude-cloud systemd-logind[853]: New session c5924 of user claude. 2026-07-02T01:29:38.592392-05:00 claude-cloud systemd-logind[853]: Session c5924 logged out. Waiting for processes to exit. 2026-07-02T01:29:38.595114-05:00 claude-cloud systemd-logind[853]: Removed session c5924. 2026-07-02T01:29:38.890488-05:00 claude-cloud systemd-logind[853]: New session c5925 of user claude. 2026-07-02T01:29:38.916694-05:00 claude-cloud systemd-logind[853]: Session c5925 logged out. Waiting for processes to exit. 2026-07-02T01:29:38.917624-05:00 claude-cloud systemd-logind[853]: Removed session c5925. 2026-07-02T01:29:44.764424-05:00 claude-cloud sshd[1373868]: Connection reset by authenticating user root 45.227.254.170 port 41238 [preauth] 2026-07-02T01:30:46.894416-05:00 claude-cloud systemd-logind[853]: New session c5926 of user claude. 2026-07-02T01:30:47.166999-05:00 claude-cloud systemd-logind[853]: Session c5926 logged out. Waiting for processes to exit. 2026-07-02T01:30:47.168002-05:00 claude-cloud systemd-logind[853]: Removed session c5926. 2026-07-02T01:31:26.008393-05:00 claude-cloud sshd[1375017]: Connection closed by authenticating user root 27.71.230.31 port 47046 [preauth] 2026-07-02T01:33:44.446005-05:00 claude-cloud sshd[1378644]: Connection closed by authenticating user root 195.178.110.227 port 48844 [preauth] 2026-07-02T01:35:01.574668-05:00 claude-cloud CRON[1379548]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-02T01:35:01.581562-05:00 claude-cloud CRON[1379548]: pam_unix(cron:session): session closed for user root 2026-07-02T01:35:13.843225-05:00 claude-cloud sshd[1379615]: Connection reset by authenticating user root 45.148.10.141 port 48526 [preauth] 2026-07-02T01:35:17.437073-05:00 claude-cloud sshd[1379637]: Connection closed by authenticating user root 195.178.110.227 port 52054 [preauth] 2026-07-02T01:35:50.681377-05:00 claude-cloud systemd-logind[853]: New session c5927 of user claude. 2026-07-02T01:35:50.971046-05:00 claude-cloud systemd-logind[853]: Session c5927 logged out. Waiting for processes to exit. 2026-07-02T01:35:50.972402-05:00 claude-cloud systemd-logind[853]: Removed session c5927. 2026-07-02T01:36:44.871666-05:00 claude-cloud sshd[1379953]: Received disconnect from 121.122.119.214 port 38696:11: Bye Bye [preauth] 2026-07-02T01:36:44.872863-05:00 claude-cloud sshd[1379953]: Disconnected from authenticating user root 121.122.119.214 port 38696 [preauth] 2026-07-02T01:36:54.108653-05:00 claude-cloud sshd[1379971]: Connection closed by authenticating user root 195.178.110.227 port 55274 [preauth] 2026-07-02T01:38:29.346208-05:00 claude-cloud sshd[1380255]: Connection closed by authenticating user root 195.178.110.227 port 58462 [preauth] 2026-07-02T01:38:32.825422-05:00 claude-cloud sshd[1380031]: Connection closed by authenticating user root 27.71.230.31 port 51274 [preauth] 2026-07-02T01:40:04.002885-05:00 claude-cloud sshd[1380524]: Connection closed by authenticating user root 195.178.110.227 port 33390 [preauth] 2026-07-02T01:40:44.884166-05:00 claude-cloud sshd[1380688]: Connection reset by authenticating user root 45.148.10.141 port 48272 [preauth] 2026-07-02T01:40:54.581769-05:00 claude-cloud systemd-logind[853]: New session c5928 of user claude. 2026-07-02T01:40:54.864583-05:00 claude-cloud systemd-logind[853]: Session c5928 logged out. Waiting for processes to exit. 2026-07-02T01:40:54.867619-05:00 claude-cloud systemd-logind[853]: Removed session c5928. 2026-07-02T01:41:37.813575-05:00 claude-cloud sshd[1380853]: Connection closed by authenticating user root 195.178.110.227 port 36550 [preauth] 2026-07-02T01:43:08.575803-05:00 claude-cloud sshd[1381106]: Connection closed by authenticating user root 195.178.110.227 port 39684 [preauth] 2026-07-02T01:43:21.150709-05:00 claude-cloud sshd[1381162]: Connection closed by 45.148.10.121 port 50342 [preauth] 2026-07-02T01:43:24.092402-05:00 claude-cloud sshd[1381147]: Connection closed by authenticating user root 27.71.230.31 port 38370 [preauth] 2026-07-02T01:43:25.637102-05:00 claude-cloud sshd[1381171]: Received disconnect from 121.122.119.214 port 40638:11: Bye Bye [preauth] 2026-07-02T01:43:25.637391-05:00 claude-cloud sshd[1381171]: Disconnected from authenticating user root 121.122.119.214 port 40638 [preauth] 2026-07-02T01:44:39.602614-05:00 claude-cloud sshd[1381361]: Connection closed by authenticating user root 195.178.110.227 port 42838 [preauth] 2026-07-02T01:45:01.595238-05:00 claude-cloud CRON[1381486]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-02T01:45:01.602994-05:00 claude-cloud CRON[1381486]: pam_unix(cron:session): session closed for user root 2026-07-02T01:45:38.054652-05:00 claude-cloud sshd[1381728]: Received disconnect from 121.122.119.214 port 59077:11: Bye Bye [preauth] 2026-07-02T01:45:38.055464-05:00 claude-cloud sshd[1381728]: Disconnected from authenticating user root 121.122.119.214 port 59077 [preauth] 2026-07-02T01:45:58.977302-05:00 claude-cloud systemd-logind[853]: New session c5929 of user claude. 2026-07-02T01:45:59.279440-05:00 claude-cloud systemd-logind[853]: Session c5929 logged out. Waiting for processes to exit. 2026-07-02T01:45:59.281390-05:00 claude-cloud systemd-logind[853]: Removed session c5929. 2026-07-02T01:46:11.835775-05:00 claude-cloud sshd[1381834]: Connection closed by authenticating user root 195.178.110.227 port 46016 [preauth] 2026-07-02T01:46:17.474854-05:00 claude-cloud sshd[1381863]: Connection reset by authenticating user root 45.148.10.141 port 63126 [preauth] 2026-07-02T01:46:42.443032-05:00 claude-cloud sshd[1381921]: Connection closed by 112.126.62.31 port 36070 2026-07-02T01:48:00.749386-05:00 claude-cloud sshd[1382130]: Received disconnect from 121.122.119.214 port 49290:11: Bye Bye [preauth] 2026-07-02T01:48:00.750005-05:00 claude-cloud sshd[1382130]: Disconnected from authenticating user root 121.122.119.214 port 49290 [preauth] 2026-07-02T01:48:00.998937-05:00 claude-cloud sshd[1382132]: Connection closed by authenticating user root 195.178.110.227 port 49162 [preauth] 2026-07-02T01:49:39.596086-05:00 claude-cloud sshd[1382383]: Connection closed by authenticating user root 27.71.230.31 port 53342 [preauth] 2026-07-02T01:49:46.966400-05:00 claude-cloud sshd[1382439]: Connection closed by authenticating user root 195.178.110.227 port 52334 [preauth] 2026-07-02T01:50:15.295185-05:00 claude-cloud sshd[1382546]: Received disconnect from 121.122.119.214 port 39503:11: Bye Bye [preauth] 2026-07-02T01:50:15.295599-05:00 claude-cloud sshd[1382546]: Disconnected from authenticating user root 121.122.119.214 port 39503 [preauth] 2026-07-02T01:51:03.095164-05:00 claude-cloud systemd-logind[853]: New session c5930 of user claude. 2026-07-02T01:51:03.455978-05:00 claude-cloud systemd-logind[853]: Session c5930 logged out. Waiting for processes to exit. 2026-07-02T01:51:03.458536-05:00 claude-cloud systemd-logind[853]: Removed session c5930. 2026-07-02T01:51:16.441527-05:00 claude-cloud sshd[1382738]: userauth_pubkey: signature algorithm ssh-dss not in PubkeyAcceptedAlgorithms [preauth] 2026-07-02T01:51:16.758429-05:00 claude-cloud sshd[1382738]: Received disconnect from 142.44.247.134 port 33140:11: disconnected by user [preauth] 2026-07-02T01:51:16.758760-05:00 claude-cloud sshd[1382738]: Disconnected from authenticating user root 142.44.247.134 port 33140 [preauth] 2026-07-02T01:51:41.230113-05:00 claude-cloud sshd[1382838]: Connection closed by authenticating user root 195.178.110.227 port 55486 [preauth] 2026-07-02T01:51:55.713410-05:00 claude-cloud sshd[1382950]: Connection reset by authenticating user root 45.148.10.157 port 37656 [preauth] 2026-07-02T01:52:33.508405-05:00 claude-cloud sshd[1383405]: Received disconnect from 121.122.119.214 port 57947:11: Bye Bye [preauth] 2026-07-02T01:52:33.508930-05:00 claude-cloud sshd[1383405]: Disconnected from authenticating user root 121.122.119.214 port 57947 [preauth] 2026-07-02T01:53:36.052885-05:00 claude-cloud sshd[1384182]: Invalid user test from 193.46.255.86 port 46430 2026-07-02T01:53:36.078627-05:00 claude-cloud sshd[1384182]: Connection closed by invalid user test 193.46.255.86 port 46430 [preauth] 2026-07-02T01:53:38.391432-05:00 claude-cloud sshd[1384197]: Connection closed by authenticating user root 195.178.110.227 port 58610 [preauth] 2026-07-02T01:54:46.508491-05:00 claude-cloud sshd[1385697]: Received disconnect from 121.122.119.214 port 48155:11: Bye Bye [preauth] 2026-07-02T01:54:46.509094-05:00 claude-cloud sshd[1385697]: Disconnected from authenticating user root 121.122.119.214 port 48155 [preauth] 2026-07-02T01:55:01.615929-05:00 claude-cloud CRON[1385742]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-02T01:55:01.624445-05:00 claude-cloud CRON[1385742]: pam_unix(cron:session): session closed for user root 2026-07-02T01:55:37.235503-05:00 claude-cloud sshd[1385881]: Connection closed by authenticating user root 195.178.110.227 port 33514 [preauth] 2026-07-02T01:55:54.236707-05:00 claude-cloud sshd[1385896]: Connection closed by authenticating user root 27.71.230.31 port 39202 [preauth] 2026-07-02T01:56:07.528902-05:00 claude-cloud systemd-logind[853]: New session c5931 of user claude. 2026-07-02T01:56:07.813526-05:00 claude-cloud systemd-logind[853]: Session c5931 logged out. Waiting for processes to exit. 2026-07-02T01:56:07.814919-05:00 claude-cloud systemd-logind[853]: Removed session c5931. 2026-07-02T01:57:00.504453-05:00 claude-cloud sshd[1386299]: Received disconnect from 121.122.119.214 port 38364:11: Bye Bye [preauth] 2026-07-02T01:57:00.505646-05:00 claude-cloud sshd[1386299]: Disconnected from authenticating user root 121.122.119.214 port 38364 [preauth] 2026-07-02T01:57:22.567425-05:00 claude-cloud systemd-logind[853]: Session c5816 logged out. Waiting for processes to exit. 2026-07-02T01:57:22.568177-05:00 claude-cloud systemd-logind[853]: Session c5818 logged out. Waiting for processes to exit. 2026-07-02T01:57:22.570090-05:00 claude-cloud systemd-logind[853]: Removed session c5816. 2026-07-02T01:57:22.572766-05:00 claude-cloud systemd-logind[853]: Removed session c5818. 2026-07-02T01:57:23.905557-05:00 claude-cloud systemd-logind[853]: New session c5932 of user claude. 2026-07-02T01:57:23.943079-05:00 claude-cloud systemd-logind[853]: Session c5932 logged out. Waiting for processes to exit. 2026-07-02T01:57:23.946185-05:00 claude-cloud systemd-logind[853]: Removed session c5932. 2026-07-02T01:57:24.080067-05:00 claude-cloud systemd-logind[853]: New session c5933 of user claude. 2026-07-02T01:57:24.109703-05:00 claude-cloud systemd-logind[853]: New session c5934 of user claude. 2026-07-02T01:57:24.131182-05:00 claude-cloud systemd-logind[853]: New session c5935 of user claude. 2026-07-02T01:57:24.139178-05:00 claude-cloud systemd-logind[853]: Session c5933 logged out. Waiting for processes to exit. 2026-07-02T01:57:24.151968-05:00 claude-cloud systemd-logind[853]: Removed session c5933. 2026-07-02T01:57:24.162378-05:00 claude-cloud systemd-logind[853]: Session c5934 logged out. Waiting for processes to exit. 2026-07-02T01:57:24.165355-05:00 claude-cloud systemd-logind[853]: Session c5935 logged out. Waiting for processes to exit. 2026-07-02T01:57:24.170305-05:00 claude-cloud systemd-logind[853]: Removed session c5934. 2026-07-02T01:57:24.174589-05:00 claude-cloud systemd-logind[853]: Removed session c5935. 2026-07-02T01:57:24.180782-05:00 claude-cloud systemd-logind[853]: New session c5936 of user claude. 2026-07-02T01:57:24.201209-05:00 claude-cloud systemd-logind[853]: New session c5937 of user claude. 2026-07-02T01:57:24.224172-05:00 claude-cloud systemd-logind[853]: New session c5938 of user claude. 2026-07-02T01:57:24.241215-05:00 claude-cloud systemd-logind[853]: New session c5939 of user claude. 2026-07-02T01:57:24.279524-05:00 claude-cloud systemd-logind[853]: Session c5936 logged out. Waiting for processes to exit. 2026-07-02T01:57:24.286410-05:00 claude-cloud systemd-logind[853]: Removed session c5936. 2026-07-02T01:57:24.289867-05:00 claude-cloud systemd-logind[853]: Session c5939 logged out. Waiting for processes to exit. 2026-07-02T01:57:24.292011-05:00 claude-cloud systemd-logind[853]: Session c5938 logged out. Waiting for processes to exit. 2026-07-02T01:57:24.294568-05:00 claude-cloud systemd-logind[853]: Removed session c5939. 2026-07-02T01:57:24.296266-05:00 claude-cloud systemd-logind[853]: Removed session c5938. 2026-07-02T01:57:24.299348-05:00 claude-cloud systemd-logind[853]: Session c5937 logged out. Waiting for processes to exit. 2026-07-02T01:57:24.300896-05:00 claude-cloud systemd-logind[853]: Removed session c5937. 2026-07-02T01:57:32.277952-05:00 claude-cloud sshd[1386505]: Connection reset by authenticating user root 45.148.10.152 port 50640 [preauth] 2026-07-02T01:57:34.221751-05:00 claude-cloud sshd[1386507]: Connection closed by authenticating user root 195.178.110.227 port 36676 [preauth] 2026-07-02T01:57:41.487691-05:00 claude-cloud systemd-logind[853]: New session c5940 of user claude. 2026-07-02T01:57:41.512392-05:00 claude-cloud systemd-logind[853]: New session c5941 of user claude. 2026-07-02T01:57:41.545135-05:00 claude-cloud systemd-logind[853]: Session c5940 logged out. Waiting for processes to exit. 2026-07-02T01:57:41.547088-05:00 claude-cloud systemd-logind[853]: Removed session c5940. 2026-07-02T01:57:42.661710-05:00 claude-cloud systemd-logind[853]: New session c5942 of user claude. 2026-07-02T01:57:42.731622-05:00 claude-cloud systemd-logind[853]: Session c5942 logged out. Waiting for processes to exit. 2026-07-02T01:57:42.734817-05:00 claude-cloud systemd-logind[853]: Removed session c5942. 2026-07-02T01:57:43.196595-05:00 claude-cloud systemd-logind[853]: New session c5943 of user claude. 2026-07-02T01:57:43.389003-05:00 claude-cloud systemd-logind[853]: New session c5944 of user claude. 2026-07-02T01:57:43.987310-05:00 claude-cloud systemd-logind[853]: Session c5944 logged out. Waiting for processes to exit. 2026-07-02T01:57:43.989775-05:00 claude-cloud systemd-logind[853]: Removed session c5944. 2026-07-02T01:57:44.734217-05:00 claude-cloud systemd-logind[853]: Session c5943 logged out. Waiting for processes to exit. 2026-07-02T01:57:44.736399-05:00 claude-cloud systemd-logind[853]: Removed session c5943. 2026-07-02T01:57:46.148333-05:00 claude-cloud systemd-logind[853]: New session c5945 of user claude. 2026-07-02T01:57:46.254389-05:00 claude-cloud systemd-logind[853]: Session c5945 logged out. Waiting for processes to exit. 2026-07-02T01:57:46.292384-05:00 claude-cloud systemd-logind[853]: Removed session c5453. 2026-07-02T01:57:47.370547-05:00 claude-cloud systemd-logind[853]: New session c5946 of user claude. 2026-07-02T01:58:10.976764-05:00 claude-cloud systemd-logind[853]: New session c5947 of user claude. 2026-07-02T01:58:11.021709-05:00 claude-cloud systemd-logind[853]: Session c5947 logged out. Waiting for processes to exit. 2026-07-02T01:58:11.024038-05:00 claude-cloud systemd-logind[853]: Removed session c5947. 2026-07-02T01:58:35.718824-05:00 claude-cloud systemd-logind[853]: New session c5948 of user claude. 2026-07-02T01:58:49.674662-05:00 claude-cloud systemd-logind[853]: Session c5948 logged out. Waiting for processes to exit. 2026-07-02T01:58:49.677204-05:00 claude-cloud systemd-logind[853]: Removed session c5948. 2026-07-02T01:59:09.596883-05:00 claude-cloud sshd[1387594]: Received disconnect from 121.122.119.214 port 56803:11: Bye Bye [preauth] 2026-07-02T01:59:09.597261-05:00 claude-cloud sshd[1387594]: Disconnected from authenticating user root 121.122.119.214 port 56803 [preauth] 2026-07-02T01:59:30.784521-05:00 claude-cloud sshd[1388084]: Connection closed by authenticating user root 195.178.110.227 port 39776 [preauth] 2026-07-02T01:59:35.893548-05:00 claude-cloud systemd-logind[853]: New session c5949 of user claude. 2026-07-02T01:59:38.710180-05:00 claude-cloud systemd-logind[853]: Session c5949 logged out. Waiting for processes to exit. 2026-07-02T01:59:38.711156-05:00 claude-cloud systemd-logind[853]: Removed session c5949. 2026-07-02T01:59:39.996183-05:00 claude-cloud systemd-logind[853]: New session c5950 of user claude. 2026-07-02T01:59:42.907709-05:00 claude-cloud systemd-logind[853]: Session c5950 logged out. Waiting for processes to exit. 2026-07-02T01:59:42.909073-05:00 claude-cloud systemd-logind[853]: Removed session c5950. 2026-07-02T01:59:43.247449-05:00 claude-cloud systemd-logind[853]: New session c5951 of user claude. 2026-07-02T01:59:43.731203-05:00 claude-cloud systemd-logind[853]: Session c5951 logged out. Waiting for processes to exit. 2026-07-02T01:59:43.731734-05:00 claude-cloud systemd-logind[853]: Removed session c5951. 2026-07-02T01:59:44.034854-05:00 claude-cloud systemd-logind[853]: New session c5952 of user claude. 2026-07-02T01:59:44.603851-05:00 claude-cloud systemd-logind[853]: Session c5952 logged out. Waiting for processes to exit. 2026-07-02T01:59:44.606185-05:00 claude-cloud systemd-logind[853]: Removed session c5952. 2026-07-02T01:59:44.705488-05:00 claude-cloud systemd-logind[853]: New session c5953 of user claude. 2026-07-02T01:59:44.751786-05:00 claude-cloud systemd-logind[853]: Session c5953 logged out. Waiting for processes to exit. 2026-07-02T01:59:44.753831-05:00 claude-cloud systemd-logind[853]: Removed session c5953. 2026-07-02T01:59:44.909442-05:00 claude-cloud systemd-logind[853]: New session c5954 of user claude. 2026-07-02T01:59:45.490389-05:00 claude-cloud systemd-logind[853]: Session c5954 logged out. Waiting for processes to exit. 2026-07-02T01:59:45.492037-05:00 claude-cloud systemd-logind[853]: Removed session c5954. 2026-07-02T01:59:45.799343-05:00 claude-cloud systemd-logind[853]: New session c5955 of user claude. 2026-07-02T01:59:46.362795-05:00 claude-cloud systemd-logind[853]: Session c5955 logged out. Waiting for processes to exit. 2026-07-02T01:59:46.365562-05:00 claude-cloud systemd-logind[853]: Removed session c5955. 2026-07-02T01:59:46.679038-05:00 claude-cloud systemd-logind[853]: New session c5956 of user claude. 2026-07-02T01:59:46.953457-05:00 claude-cloud systemd-logind[853]: Session c5956 logged out. Waiting for processes to exit. 2026-07-02T01:59:46.955819-05:00 claude-cloud systemd-logind[853]: Removed session c5956. 2026-07-02T01:59:47.278291-05:00 claude-cloud systemd-logind[853]: New session c5957 of user claude. 2026-07-02T01:59:47.324982-05:00 claude-cloud systemd-logind[853]: Session c5957 logged out. Waiting for processes to exit. 2026-07-02T01:59:47.326397-05:00 claude-cloud systemd-logind[853]: Removed session c5957. 2026-07-02T02:00:29.827146-05:00 claude-cloud sshd[1389060]: Connection closed by authenticating user root 185.242.3.195 port 38490 [preauth] 2026-07-02T02:01:12.516331-05:00 claude-cloud systemd-logind[853]: New session c5958 of user claude. 2026-07-02T02:01:13.048018-05:00 claude-cloud systemd-logind[853]: Session c5958 logged out. Waiting for processes to exit. 2026-07-02T02:01:13.050049-05:00 claude-cloud systemd-logind[853]: Removed session c5958. 2026-07-02T02:01:25.628834-05:00 claude-cloud sshd[1390074]: Received disconnect from 121.122.119.214 port 47011:11: Bye Bye [preauth] 2026-07-02T02:01:25.629529-05:00 claude-cloud sshd[1390074]: Disconnected from authenticating user root 121.122.119.214 port 47011 [preauth] 2026-07-02T02:01:29.743475-05:00 claude-cloud sshd[1390205]: Connection closed by authenticating user root 195.178.110.227 port 42948 [preauth] 2026-07-02T02:02:07.266347-05:00 claude-cloud sshd[1390696]: Connection closed by authenticating user root 27.71.230.31 port 60650 [preauth] 2026-07-02T02:02:35.154026-05:00 claude-cloud systemd-logind[853]: New session c5959 of user claude. 2026-07-02T02:02:35.269490-05:00 claude-cloud systemd-logind[853]: Session c5959 logged out. Waiting for processes to exit. 2026-07-02T02:02:35.270700-05:00 claude-cloud systemd-logind[853]: Removed session c5959. 2026-07-02T02:02:55.650693-05:00 claude-cloud systemd-logind[853]: New session c5960 of user claude. 2026-07-02T02:02:55.775472-05:00 claude-cloud systemd-logind[853]: Session c5960 logged out. Waiting for processes to exit. 2026-07-02T02:02:55.777242-05:00 claude-cloud systemd-logind[853]: Removed session c5960. 2026-07-02T02:02:56.765946-05:00 claude-cloud sshd[1391579]: Accepted publickey for claude from 104.189.115.46 port 62867 ssh2: ED25519 SHA256:fT1j0HdefD6T81yDhO/gK0G3xMuDvWaQIxSLZl9GZuE 2026-07-02T02:02:56.773599-05:00 claude-cloud sshd[1391579]: pam_unix(sshd:session): session opened for user claude(uid=1000) by claude(uid=0) 2026-07-02T02:02:56.786715-05:00 claude-cloud systemd-logind[853]: New session 2799 of user claude. 2026-07-02T02:02:57.009146-05:00 claude-cloud systemd-logind[853]: New session c5961 of user claude. 2026-07-02T02:02:57.319138-05:00 claude-cloud systemd-logind[853]: Session c5961 logged out. Waiting for processes to exit. 2026-07-02T02:02:57.322623-05:00 claude-cloud systemd-logind[853]: Removed session c5961. 2026-07-02T02:03:32.940167-05:00 claude-cloud sshd[1392288]: Connection closed by authenticating user root 195.178.110.227 port 46080 [preauth] 2026-07-02T02:03:41.445550-05:00 claude-cloud sshd[1392369]: Received disconnect from 121.122.119.214 port 37221:11: Bye Bye [preauth] 2026-07-02T02:03:41.446512-05:00 claude-cloud sshd[1392369]: Disconnected from authenticating user root 121.122.119.214 port 37221 [preauth] 2026-07-02T02:03:47.517445-05:00 claude-cloud systemd-logind[853]: New session c5962 of user claude. 2026-07-02T02:03:47.557951-05:00 claude-cloud systemd-logind[853]: Session c5962 logged out. Waiting for processes to exit. 2026-07-02T02:03:47.559453-05:00 claude-cloud systemd-logind[853]: Removed session c5962. 2026-07-02T02:05:01.664320-05:00 claude-cloud CRON[1393494]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-02T02:05:01.671414-05:00 claude-cloud CRON[1393494]: pam_unix(cron:session): session closed for user root 2026-07-02T02:05:24.893554-05:00 claude-cloud systemd-logind[853]: New session c5963 of user claude. 2026-07-02T02:05:25.017611-05:00 claude-cloud systemd-logind[853]: Session c5963 logged out. Waiting for processes to exit. 2026-07-02T02:05:25.019424-05:00 claude-cloud systemd-logind[853]: Removed session c5963. 2026-07-02T02:05:32.288143-05:00 claude-cloud sshd[1393667]: Connection closed by authenticating user root 195.178.110.227 port 49208 [preauth] 2026-07-02T02:05:50.543028-05:00 claude-cloud sshd[1393721]: Received disconnect from 121.122.119.214 port 55659:11: Bye Bye [preauth] 2026-07-02T02:05:50.543449-05:00 claude-cloud sshd[1393721]: Disconnected from authenticating user root 121.122.119.214 port 55659 [preauth] 2026-07-02T02:06:15.154335-05:00 claude-cloud systemd-logind[853]: New session c5964 of user claude. 2026-07-02T02:06:15.218384-05:00 claude-cloud systemd-logind[853]: Session c5964 logged out. Waiting for processes to exit. 2026-07-02T02:06:15.220210-05:00 claude-cloud systemd-logind[853]: Removed session c5964. 2026-07-02T02:06:18.297634-05:00 claude-cloud systemd-logind[853]: New session c5965 of user claude. 2026-07-02T02:06:18.762296-05:00 claude-cloud systemd-logind[853]: Session c5965 logged out. Waiting for processes to exit. 2026-07-02T02:06:18.765649-05:00 claude-cloud systemd-logind[853]: Removed session c5965. 2026-07-02T02:07:39.964480-05:00 claude-cloud sshd[1395259]: Connection closed by authenticating user root 195.178.110.227 port 52342 [preauth] 2026-07-02T02:08:04.041888-05:00 claude-cloud sshd[1395382]: Received disconnect from 121.122.119.214 port 45866:11: Bye Bye [preauth] 2026-07-02T02:08:04.042415-05:00 claude-cloud sshd[1395382]: Disconnected from authenticating user root 121.122.119.214 port 45866 [preauth] 2026-07-02T02:08:07.549747-05:00 claude-cloud sshd[1395327]: Connection closed by authenticating user root 27.71.230.31 port 45704 [preauth] 2026-07-02T02:09:55.121399-05:00 claude-cloud sshd[1397340]: Connection closed by authenticating user root 195.178.110.227 port 55492 [preauth] 2026-07-02T02:10:14.554687-05:00 claude-cloud sshd[1397644]: Received disconnect from 121.122.119.214 port 36074:11: Bye Bye [preauth] 2026-07-02T02:10:14.556221-05:00 claude-cloud sshd[1397644]: Disconnected from authenticating user root 121.122.119.214 port 36074 [preauth] 2026-07-02T02:11:22.415148-05:00 claude-cloud systemd-logind[853]: New session c5966 of user claude. 2026-07-02T02:11:22.886992-05:00 claude-cloud systemd-logind[853]: Session c5966 logged out. Waiting for processes to exit. 2026-07-02T02:11:22.888537-05:00 claude-cloud systemd-logind[853]: Removed session c5966. 2026-07-02T02:12:19.139299-05:00 claude-cloud sshd[1400434]: Connection closed by authenticating user root 195.178.110.227 port 58610 [preauth] 2026-07-02T02:12:25.284979-05:00 claude-cloud sshd[1400446]: Received disconnect from 121.122.119.214 port 54515:11: Bye Bye [preauth] 2026-07-02T02:12:25.286456-05:00 claude-cloud sshd[1400446]: Disconnected from authenticating user root 121.122.119.214 port 54515 [preauth] 2026-07-02T02:12:58.033373-05:00 claude-cloud sshd[1391711]: Received disconnect from 104.189.115.46 port 62867:11: disconnected by user 2026-07-02T02:12:58.034091-05:00 claude-cloud sshd[1391711]: Disconnected from user claude 104.189.115.46 port 62867 2026-07-02T02:12:58.037830-05:00 claude-cloud sshd[1391579]: pam_unix(sshd:session): session closed for user claude 2026-07-02T02:12:58.050043-05:00 claude-cloud systemd-logind[853]: Session 2799 logged out. Waiting for processes to exit. 2026-07-02T02:12:58.051924-05:00 claude-cloud systemd-logind[853]: Removed session 2799. 2026-07-02T02:13:59.785477-05:00 claude-cloud sshd[1401239]: Connection closed by authenticating user root 27.71.230.31 port 39436 [preauth] 2026-07-02T02:14:53.693618-05:00 claude-cloud sshd[1401467]: Connection closed by authenticating user root 195.178.110.227 port 33468 [preauth] 2026-07-02T02:15:01.684209-05:00 claude-cloud CRON[1401635]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-02T02:15:01.691399-05:00 claude-cloud CRON[1401635]: pam_unix(cron:session): session closed for user root 2026-07-02T02:16:26.473068-05:00 claude-cloud systemd-logind[853]: New session c5967 of user claude. 2026-07-02T02:16:26.946056-05:00 claude-cloud systemd-logind[853]: Session c5967 logged out. Waiting for processes to exit. 2026-07-02T02:16:26.947717-05:00 claude-cloud systemd-logind[853]: Removed session c5967. 2026-07-02T02:17:01.706394-05:00 claude-cloud CRON[1402185]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-02T02:17:01.712965-05:00 claude-cloud CRON[1402185]: pam_unix(cron:session): session closed for user root 2026-07-02T02:17:22.081255-05:00 claude-cloud sshd[1402243]: Connection closed by authenticating user root 195.178.110.227 port 36608 [preauth] 2026-07-02T02:19:55.732444-05:00 claude-cloud sshd[1403280]: Connection closed by authenticating user root 27.71.230.31 port 51756 [preauth] 2026-07-02T02:20:00.502966-05:00 claude-cloud sshd[1403774]: Connection closed by authenticating user root 195.178.110.227 port 39702 [preauth] 2026-07-02T02:21:30.229130-05:00 claude-cloud systemd-logind[853]: New session c5968 of user claude. 2026-07-02T02:21:30.712722-05:00 claude-cloud systemd-logind[853]: Session c5968 logged out. Waiting for processes to exit. 2026-07-02T02:21:30.715149-05:00 claude-cloud systemd-logind[853]: Removed session c5968. 2026-07-02T02:22:37.871551-05:00 claude-cloud sshd[1404683]: Connection closed by authenticating user root 195.178.110.227 port 42820 [preauth] 2026-07-02T02:23:05.220476-05:00 claude-cloud sshd[1404752]: Invalid user admin from 45.148.10.121 port 50818 2026-07-02T02:23:05.235351-05:00 claude-cloud sshd[1404752]: Connection closed by invalid user admin 45.148.10.121 port 50818 [preauth] 2026-07-02T02:25:01.726085-05:00 claude-cloud CRON[1405114]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-02T02:25:01.733718-05:00 claude-cloud CRON[1405114]: pam_unix(cron:session): session closed for user root 2026-07-02T02:25:18.683373-05:00 claude-cloud sshd[1405153]: Connection closed by authenticating user root 195.178.110.227 port 45940 [preauth] 2026-07-02T02:25:47.607514-05:00 claude-cloud sshd[1405221]: Connection closed by authenticating user root 27.71.230.31 port 48826 [preauth] 2026-07-02T02:25:49.947677-05:00 claude-cloud sshd[1405254]: Invalid user admin from 2.57.121.25 port 25862 2026-07-02T02:25:49.974062-05:00 claude-cloud sshd[1405254]: Connection closed by invalid user admin 2.57.121.25 port 25862 [preauth] 2026-07-02T02:25:50.007603-05:00 claude-cloud sshd[1405245]: Invalid user user1 from 112.219.151.50 port 64249 2026-07-02T02:25:50.254804-05:00 claude-cloud sshd[1405245]: Received disconnect from 112.219.151.50 port 64249:11: Bye Bye [preauth] 2026-07-02T02:25:50.255123-05:00 claude-cloud sshd[1405245]: Disconnected from invalid user user1 112.219.151.50 port 64249 [preauth] 2026-07-02T02:26:34.216800-05:00 claude-cloud systemd-logind[853]: New session c5969 of user claude. 2026-07-02T02:26:34.536181-05:00 claude-cloud systemd-logind[853]: Session c5969 logged out. Waiting for processes to exit. 2026-07-02T02:26:34.538648-05:00 claude-cloud systemd-logind[853]: Removed session c5969. 2026-07-02T02:28:10.856319-05:00 claude-cloud sshd[1405692]: Connection closed by authenticating user root 195.178.110.227 port 49050 [preauth] 2026-07-02T02:29:24.897881-05:00 claude-cloud sshd[1405916]: Connection closed by 203.121.106.56 port 37634 [preauth] 2026-07-02T02:31:10.335492-05:00 claude-cloud sshd[1406217]: Connection closed by authenticating user root 195.178.110.227 port 52186 [preauth] 2026-07-02T02:31:38.836739-05:00 claude-cloud systemd-logind[853]: New session c5970 of user claude. 2026-07-02T02:31:39.167265-05:00 claude-cloud systemd-logind[853]: Session c5970 logged out. Waiting for processes to exit. 2026-07-02T02:31:39.170359-05:00 claude-cloud systemd-logind[853]: Removed session c5970. 2026-07-02T02:31:43.445526-05:00 claude-cloud sshd[1406260]: Connection closed by authenticating user root 27.71.230.31 port 43866 [preauth] 2026-07-02T02:31:57.966140-05:00 claude-cloud sshd[1406362]: Invalid user es from 117.50.73.90 port 43736 2026-07-02T02:31:58.112309-05:00 claude-cloud sshd[1406362]: Received disconnect from 117.50.73.90 port 43736:11: Bye Bye [preauth] 2026-07-02T02:31:58.112569-05:00 claude-cloud sshd[1406362]: Disconnected from invalid user es 117.50.73.90 port 43736 [preauth] 2026-07-02T02:32:02.374950-05:00 claude-cloud sshd[1406373]: Invalid user es from 112.219.151.50 port 28494 2026-07-02T02:32:02.614478-05:00 claude-cloud sshd[1406373]: Received disconnect from 112.219.151.50 port 28494:11: Bye Bye [preauth] 2026-07-02T02:32:02.614705-05:00 claude-cloud sshd[1406373]: Disconnected from invalid user es 112.219.151.50 port 28494 [preauth] 2026-07-02T02:32:15.150813-05:00 claude-cloud sshd[1406408]: Received disconnect from 103.13.206.152 port 60440:11: Bye Bye [preauth] 2026-07-02T02:32:15.152155-05:00 claude-cloud sshd[1406408]: Disconnected from authenticating user root 103.13.206.152 port 60440 [preauth] 2026-07-02T02:32:16.544202-05:00 claude-cloud sshd[1406420]: Connection closed by 123.56.8.132 port 57702 2026-07-02T02:33:19.596382-05:00 claude-cloud sshd[1406585]: Received disconnect from 115.190.248.214 port 56396:11: Bye Bye [preauth] 2026-07-02T02:33:19.597076-05:00 claude-cloud sshd[1406585]: Disconnected from authenticating user root 115.190.248.214 port 56396 [preauth] 2026-07-02T02:34:15.436846-05:00 claude-cloud sshd[1406746]: Received disconnect from 112.219.151.50 port 44192:11: Bye Bye [preauth] 2026-07-02T02:34:15.437394-05:00 claude-cloud sshd[1406746]: Disconnected from authenticating user root 112.219.151.50 port 44192 [preauth] 2026-07-02T02:34:21.887864-05:00 claude-cloud sshd[1406799]: Connection closed by authenticating user root 195.178.110.227 port 55260 [preauth] 2026-07-02T02:35:01.744544-05:00 claude-cloud CRON[1407048]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-02T02:35:01.750253-05:00 claude-cloud CRON[1407048]: pam_unix(cron:session): session closed for user root 2026-07-02T02:35:35.377219-05:00 claude-cloud sshd[1407118]: Received disconnect from 103.13.206.152 port 56774:11: Bye Bye [preauth] 2026-07-02T02:35:35.378750-05:00 claude-cloud sshd[1407118]: Disconnected from authenticating user root 103.13.206.152 port 56774 [preauth] 2026-07-02T02:36:21.267445-05:00 claude-cloud sshd[1407269]: Received disconnect from 112.219.151.50 port 62110:11: Bye Bye [preauth] 2026-07-02T02:36:21.269227-05:00 claude-cloud sshd[1407269]: Disconnected from authenticating user root 112.219.151.50 port 62110 [preauth] 2026-07-02T02:36:43.546821-05:00 claude-cloud systemd-logind[853]: New session c5971 of user claude. 2026-07-02T02:36:43.843395-05:00 claude-cloud systemd-logind[853]: Session c5971 logged out. Waiting for processes to exit. 2026-07-02T02:36:43.844668-05:00 claude-cloud systemd-logind[853]: Removed session c5971. 2026-07-02T02:37:32.049988-05:00 claude-cloud sshd[1407472]: Connection closed by authenticating user root 195.178.110.227 port 58390 [preauth] 2026-07-02T02:37:32.536769-05:00 claude-cloud sshd[1407438]: Connection closed by authenticating user root 27.71.230.31 port 57734 [preauth] 2026-07-02T02:38:27.267113-05:00 claude-cloud sshd[1407684]: Connection closed by 106.12.172.151 port 47104 2026-07-02T02:38:34.282925-05:00 claude-cloud sshd[1407695]: Received disconnect from 112.219.151.50 port 13066:11: Bye Bye [preauth] 2026-07-02T02:38:34.284000-05:00 claude-cloud sshd[1407695]: Disconnected from authenticating user root 112.219.151.50 port 13066 [preauth] 2026-07-02T02:38:39.577514-05:00 claude-cloud sshd[1407710]: Invalid user testuser from 103.13.206.152 port 46310 2026-07-02T02:38:39.756990-05:00 claude-cloud sshd[1407710]: Received disconnect from 103.13.206.152 port 46310:11: Bye Bye [preauth] 2026-07-02T02:38:39.758535-05:00 claude-cloud sshd[1407710]: Disconnected from invalid user testuser 103.13.206.152 port 46310 [preauth] 2026-07-02T02:40:18.001645-05:00 claude-cloud systemd-logind[853]: New session c5972 of user claude. 2026-07-02T02:40:18.062157-05:00 claude-cloud systemd-logind[853]: Session c5972 logged out. Waiting for processes to exit. 2026-07-02T02:40:18.064893-05:00 claude-cloud systemd-logind[853]: Removed session c5972. 2026-07-02T02:40:29.728151-05:00 claude-cloud systemd-logind[853]: New session c5973 of user claude. 2026-07-02T02:40:29.874981-05:00 claude-cloud systemd-logind[853]: Session c5973 logged out. Waiting for processes to exit. 2026-07-02T02:40:29.877630-05:00 claude-cloud systemd-logind[853]: Removed session c5973. 2026-07-02T02:40:44.221855-05:00 claude-cloud sshd[1408135]: Received disconnect from 112.219.151.50 port 29506:11: Bye Bye [preauth] 2026-07-02T02:40:44.224105-05:00 claude-cloud sshd[1408135]: Disconnected from authenticating user root 112.219.151.50 port 29506 [preauth] 2026-07-02T02:41:02.787575-05:00 claude-cloud sshd[1408178]: Connection closed by authenticating user root 195.178.110.227 port 33274 [preauth] 2026-07-02T02:41:21.694583-05:00 claude-cloud systemd-logind[853]: New session c5974 of user claude. 2026-07-02T02:41:22.529675-05:00 claude-cloud systemd-logind[853]: Session c5974 logged out. Waiting for processes to exit. 2026-07-02T02:41:22.532854-05:00 claude-cloud systemd-logind[853]: Removed session c5974. 2026-07-02T02:41:23.672260-05:00 claude-cloud systemd-logind[853]: New session c5975 of user claude. 2026-07-02T02:41:23.755090-05:00 claude-cloud systemd-logind[853]: Session c5975 logged out. Waiting for processes to exit. 2026-07-02T02:41:23.757114-05:00 claude-cloud systemd-logind[853]: Removed session c5975. 2026-07-02T02:41:36.814723-05:00 claude-cloud systemd-logind[853]: New session c5976 of user claude. 2026-07-02T02:41:38.652400-05:00 claude-cloud systemd-logind[853]: Session c5976 logged out. Waiting for processes to exit. 2026-07-02T02:41:38.654335-05:00 claude-cloud systemd-logind[853]: Removed session c5976. 2026-07-02T02:41:47.176334-05:00 claude-cloud systemd-logind[853]: New session c5977 of user claude. 2026-07-02T02:41:47.477866-05:00 claude-cloud systemd-logind[853]: Session c5977 logged out. Waiting for processes to exit. 2026-07-02T02:41:47.479499-05:00 claude-cloud systemd-logind[853]: Removed session c5977. 2026-07-02T02:41:53.835820-05:00 claude-cloud sshd[1408384]: Received disconnect from 103.13.206.152 port 41850:11: Bye Bye [preauth] 2026-07-02T02:41:53.837868-05:00 claude-cloud sshd[1408384]: Disconnected from authenticating user root 103.13.206.152 port 41850 [preauth] 2026-07-02T02:42:51.724179-05:00 claude-cloud sshd[1408536]: Invalid user oracle from 112.219.151.50 port 45688 2026-07-02T02:42:51.980194-05:00 claude-cloud sshd[1408536]: Received disconnect from 112.219.151.50 port 45688:11: Bye Bye [preauth] 2026-07-02T02:42:51.980407-05:00 claude-cloud sshd[1408536]: Disconnected from invalid user oracle 112.219.151.50 port 45688 [preauth] 2026-07-02T02:43:23.618776-05:00 claude-cloud sshd[1408599]: Connection closed by authenticating user root 27.71.230.31 port 45300 [preauth] 2026-07-02T02:44:07.047971-05:00 claude-cloud sshd[1408747]: Connection closed by authenticating user root 195.178.110.227 port 36398 [preauth] 2026-07-02T02:44:55.727496-05:00 claude-cloud sshd[1408884]: Received disconnect from 112.219.151.50 port 61971:11: Bye Bye [preauth] 2026-07-02T02:44:55.728615-05:00 claude-cloud sshd[1408884]: Disconnected from authenticating user root 112.219.151.50 port 61971 [preauth] 2026-07-02T02:44:59.483352-05:00 claude-cloud sshd[1408886]: Received disconnect from 103.13.206.152 port 43924:11: Bye Bye [preauth] 2026-07-02T02:44:59.483861-05:00 claude-cloud sshd[1408886]: Disconnected from authenticating user root 103.13.206.152 port 43924 [preauth] 2026-07-02T02:45:01.760590-05:00 claude-cloud CRON[1408897]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-02T02:45:01.766714-05:00 claude-cloud CRON[1408897]: pam_unix(cron:session): session closed for user root 2026-07-02T02:46:51.224054-05:00 claude-cloud systemd-logind[853]: New session c5978 of user claude. 2026-07-02T02:46:51.515914-05:00 claude-cloud systemd-logind[853]: Session c5978 logged out. Waiting for processes to exit. 2026-07-02T02:46:51.517912-05:00 claude-cloud systemd-logind[853]: Removed session c5978. 2026-07-02T02:47:02.973187-05:00 claude-cloud sshd[1409283]: Received disconnect from 112.219.151.50 port 12643:11: Bye Bye [preauth] 2026-07-02T02:47:02.973565-05:00 claude-cloud sshd[1409283]: Disconnected from authenticating user root 112.219.151.50 port 12643 [preauth] 2026-07-02T02:47:14.774961-05:00 claude-cloud sshd[1409313]: Connection closed by authenticating user root 195.178.110.227 port 39502 [preauth] 2026-07-02T02:48:07.220248-05:00 claude-cloud sshd[1409431]: Received disconnect from 103.13.206.152 port 39190:11: Bye Bye [preauth] 2026-07-02T02:48:07.220853-05:00 claude-cloud sshd[1409431]: Disconnected from authenticating user root 103.13.206.152 port 39190 [preauth] 2026-07-02T02:49:08.826375-05:00 claude-cloud sshd[1409675]: Invalid user ubuntu from 112.219.151.50 port 28881 2026-07-02T02:49:09.069046-05:00 claude-cloud sshd[1409675]: Received disconnect from 112.219.151.50 port 28881:11: Bye Bye [preauth] 2026-07-02T02:49:09.069412-05:00 claude-cloud sshd[1409675]: Disconnected from invalid user ubuntu 112.219.151.50 port 28881 [preauth] 2026-07-02T02:50:07.605309-05:00 claude-cloud sshd[1409679]: Connection closed by authenticating user root 27.71.230.31 port 39778 [preauth] 2026-07-02T02:50:11.710527-05:00 claude-cloud sshd[1409846]: Connection closed by authenticating user root 195.178.110.227 port 42624 [preauth] 2026-07-02T02:51:15.769016-05:00 claude-cloud sshd[1410035]: Received disconnect from 103.13.206.152 port 59762:11: Bye Bye [preauth] 2026-07-02T02:51:15.770324-05:00 claude-cloud sshd[1410035]: Disconnected from authenticating user root 103.13.206.152 port 59762 [preauth] 2026-07-02T02:51:17.380837-05:00 claude-cloud sshd[1410040]: Received disconnect from 112.219.151.50 port 44564:11: Bye Bye [preauth] 2026-07-02T02:51:17.381631-05:00 claude-cloud sshd[1410040]: Disconnected from authenticating user root 112.219.151.50 port 44564 [preauth] 2026-07-02T02:51:55.084874-05:00 claude-cloud systemd-logind[853]: New session c5979 of user claude. 2026-07-02T02:51:55.345136-05:00 claude-cloud systemd-logind[853]: Session c5979 logged out. Waiting for processes to exit. 2026-07-02T02:51:55.347475-05:00 claude-cloud systemd-logind[853]: Removed session c5979. 2026-07-02T02:52:14.417515-05:00 claude-cloud sshd[1410216]: Invalid user admin from 193.46.255.86 port 35288 2026-07-02T02:52:14.444600-05:00 claude-cloud sshd[1410216]: Connection closed by invalid user admin 193.46.255.86 port 35288 [preauth] 2026-07-02T02:53:06.725843-05:00 claude-cloud sshd[1410357]: Invalid user mtn from 181.164.12.188 port 41798 2026-07-02T02:53:06.999134-05:00 claude-cloud sshd[1410357]: Received disconnect from 181.164.12.188 port 41798:11: Bye Bye [preauth] 2026-07-02T02:53:06.999556-05:00 claude-cloud sshd[1410357]: Disconnected from invalid user mtn 181.164.12.188 port 41798 [preauth] 2026-07-02T02:53:16.793596-05:00 claude-cloud sshd[1410388]: Connection closed by authenticating user root 195.178.110.227 port 45732 [preauth] 2026-07-02T02:53:27.404851-05:00 claude-cloud sshd[1410414]: Received disconnect from 112.219.151.50 port 62014:11: Bye Bye [preauth] 2026-07-02T02:53:27.405489-05:00 claude-cloud sshd[1410414]: Disconnected from authenticating user root 112.219.151.50 port 62014 [preauth] 2026-07-02T02:54:22.137361-05:00 claude-cloud sshd[1410568]: Invalid user es from 103.13.206.152 port 45874 2026-07-02T02:54:22.309341-05:00 claude-cloud sshd[1410568]: Received disconnect from 103.13.206.152 port 45874:11: Bye Bye [preauth] 2026-07-02T02:54:22.309785-05:00 claude-cloud sshd[1410568]: Disconnected from invalid user es 103.13.206.152 port 45874 [preauth] 2026-07-02T02:55:01.777500-05:00 claude-cloud CRON[1410702]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-02T02:55:01.783526-05:00 claude-cloud CRON[1410702]: pam_unix(cron:session): session closed for user root 2026-07-02T02:55:29.874824-05:00 claude-cloud sshd[1410769]: Invalid user testuser from 112.219.151.50 port 12993 2026-07-02T02:55:30.109463-05:00 claude-cloud sshd[1410769]: Received disconnect from 112.219.151.50 port 12993:11: Bye Bye [preauth] 2026-07-02T02:55:30.109687-05:00 claude-cloud sshd[1410769]: Disconnected from invalid user testuser 112.219.151.50 port 12993 [preauth] 2026-07-02T02:55:37.868856-05:00 claude-cloud sshd[1410705]: Connection closed by authenticating user root 27.71.230.31 port 43748 [preauth] 2026-07-02T02:55:50.328868-05:00 claude-cloud sshd[1410820]: Invalid user marielle from 2.57.121.112 port 43820 2026-07-02T02:55:50.354419-05:00 claude-cloud sshd[1410820]: Connection closed by invalid user marielle 2.57.121.112 port 43820 [preauth] 2026-07-02T02:56:25.451979-05:00 claude-cloud sshd[1410916]: Invalid user admin from 195.178.110.227 port 48806 2026-07-02T02:56:25.468988-05:00 claude-cloud sshd[1410916]: Connection closed by invalid user admin 195.178.110.227 port 48806 [preauth] 2026-07-02T02:56:58.620973-05:00 claude-cloud systemd-logind[853]: New session c5980 of user claude. 2026-07-02T02:56:58.877787-05:00 claude-cloud systemd-logind[853]: Session c5980 logged out. Waiting for processes to exit. 2026-07-02T02:56:58.879450-05:00 claude-cloud systemd-logind[853]: Removed session c5980. 2026-07-02T02:57:30.245392-05:00 claude-cloud sshd[1411119]: Invalid user ubuntu from 103.13.206.152 port 58374 2026-07-02T02:57:30.410435-05:00 claude-cloud sshd[1411119]: Received disconnect from 103.13.206.152 port 58374:11: Bye Bye [preauth] 2026-07-02T02:57:30.411493-05:00 claude-cloud sshd[1411119]: Disconnected from invalid user ubuntu 103.13.206.152 port 58374 [preauth] 2026-07-02T02:57:31.254923-05:00 claude-cloud sshd[1411036]: Connection closed by 115.190.248.214 port 51258 [preauth] 2026-07-02T02:57:32.812818-05:00 claude-cloud sshd[1411123]: Received disconnect from 112.219.151.50 port 29413:11: Bye Bye [preauth] 2026-07-02T02:57:32.813549-05:00 claude-cloud sshd[1411123]: Disconnected from authenticating user root 112.219.151.50 port 29413 [preauth] 2026-07-02T02:59:29.199077-05:00 claude-cloud sshd[1411467]: Invalid user admin from 195.178.110.227 port 51812 2026-07-02T02:59:29.211991-05:00 claude-cloud sshd[1411467]: Connection closed by invalid user admin 195.178.110.227 port 51812 [preauth] 2026-07-02T02:59:40.390077-05:00 claude-cloud sshd[1411492]: Received disconnect from 112.219.151.50 port 43917:11: Bye Bye [preauth] 2026-07-02T02:59:40.391238-05:00 claude-cloud sshd[1411492]: Disconnected from authenticating user root 112.219.151.50 port 43917 [preauth] 2026-07-02T03:00:38.128141-05:00 claude-cloud sshd[1411728]: Received disconnect from 103.13.206.152 port 41308:11: Bye Bye [preauth] 2026-07-02T03:00:38.128649-05:00 claude-cloud sshd[1411728]: Disconnected from authenticating user root 103.13.206.152 port 41308 [preauth] 2026-07-02T03:00:48.765071-05:00 claude-cloud sshd[1411773]: Received disconnect from 107.172.88.206 port 41542:11: disconnected by user [preauth] 2026-07-02T03:00:48.766066-05:00 claude-cloud sshd[1411773]: Disconnected from authenticating user root 107.172.88.206 port 41542 [preauth] 2026-07-02T03:01:16.604730-05:00 claude-cloud sshd[1411808]: Connection closed by authenticating user root 27.71.230.31 port 55682 [preauth] 2026-07-02T03:02:02.228850-05:00 claude-cloud systemd-logind[853]: New session c5981 of user claude. 2026-07-02T03:02:02.557989-05:00 claude-cloud systemd-logind[853]: Session c5981 logged out. Waiting for processes to exit. 2026-07-02T03:02:02.559063-05:00 claude-cloud systemd-logind[853]: Removed session c5981. 2026-07-02T03:02:21.583422-05:00 claude-cloud sshd[1412028]: Invalid user admin from 195.178.110.227 port 54818 2026-07-02T03:02:21.598035-05:00 claude-cloud sshd[1412028]: Connection closed by invalid user admin 195.178.110.227 port 54818 [preauth] 2026-07-02T03:03:42.369609-05:00 claude-cloud sshd[1412254]: Invalid user AdminGPON from 45.148.10.121 port 50660 2026-07-02T03:03:42.383103-05:00 claude-cloud sshd[1412254]: Connection closed by invalid user AdminGPON 45.148.10.121 port 50660 [preauth] 2026-07-02T03:03:47.742528-05:00 claude-cloud sshd[1412284]: Received disconnect from 103.13.206.152 port 51002:11: Bye Bye [preauth] 2026-07-02T03:03:47.742886-05:00 claude-cloud sshd[1412284]: Disconnected from authenticating user root 103.13.206.152 port 51002 [preauth] 2026-07-02T03:05:01.801023-05:00 claude-cloud CRON[1412458]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-02T03:05:01.806076-05:00 claude-cloud CRON[1412458]: pam_unix(cron:session): session closed for user root 2026-07-02T03:05:05.470644-05:00 claude-cloud sshd[1412471]: Connection closed by 85.217.149.74 port 59414 [preauth] 2026-07-02T03:05:38.583892-05:00 claude-cloud sshd[1412572]: Invalid user admin from 195.178.110.227 port 57844 2026-07-02T03:05:38.596494-05:00 claude-cloud sshd[1412572]: Connection closed by invalid user admin 195.178.110.227 port 57844 [preauth] 2026-07-02T03:06:24.872673-05:00 claude-cloud sshd[1412710]: Invalid user deploy from 123.56.8.132 port 59580 2026-07-02T03:06:25.084325-05:00 claude-cloud sshd[1412710]: Connection closed by invalid user deploy 123.56.8.132 port 59580 [preauth] 2026-07-02T03:06:25.768145-05:00 claude-cloud sshd[1412719]: Invalid user postgres from 123.56.8.132 port 59586 2026-07-02T03:06:25.911869-05:00 claude-cloud sshd[1412719]: Connection closed by invalid user postgres 123.56.8.132 port 59586 [preauth] 2026-07-02T03:06:26.849990-05:00 claude-cloud sshd[1412721]: Connection closed by authenticating user root 123.56.8.132 port 59590 [preauth] 2026-07-02T03:06:28.131896-05:00 claude-cloud sshd[1412723]: Connection closed by authenticating user root 123.56.8.132 port 59602 [preauth] 2026-07-02T03:06:28.889262-05:00 claude-cloud sshd[1412725]: Invalid user test from 123.56.8.132 port 59608 2026-07-02T03:06:29.031887-05:00 claude-cloud sshd[1412725]: Connection closed by invalid user test 123.56.8.132 port 59608 [preauth] 2026-07-02T03:06:29.819668-05:00 claude-cloud sshd[1412727]: Invalid user ubuntu from 123.56.8.132 port 36104 2026-07-02T03:06:30.360804-05:00 claude-cloud sshd[1412727]: Connection closed by invalid user ubuntu 123.56.8.132 port 36104 [preauth] 2026-07-02T03:06:31.093726-05:00 claude-cloud sshd[1412738]: Invalid user alex from 123.56.8.132 port 36108 2026-07-02T03:06:31.235774-05:00 claude-cloud sshd[1412738]: Connection closed by invalid user alex 123.56.8.132 port 36108 [preauth] 2026-07-02T03:07:05.360679-05:00 claude-cloud sshd[1412850]: Invalid user writers from 181.164.12.188 port 43874 2026-07-02T03:07:05.626861-05:00 claude-cloud sshd[1412850]: Received disconnect from 181.164.12.188 port 43874:11: Bye Bye [preauth] 2026-07-02T03:07:05.627067-05:00 claude-cloud sshd[1412850]: Disconnected from invalid user writers 181.164.12.188 port 43874 [preauth] 2026-07-02T03:07:05.991200-05:00 claude-cloud systemd-logind[853]: New session c5982 of user claude. 2026-07-02T03:07:06.296056-05:00 claude-cloud systemd-logind[853]: Session c5982 logged out. Waiting for processes to exit. 2026-07-02T03:07:06.297790-05:00 claude-cloud systemd-logind[853]: Removed session c5982. 2026-07-02T03:07:06.670721-05:00 claude-cloud sshd[1412862]: Invalid user oracle from 103.13.206.152 port 33192 2026-07-02T03:07:06.860119-05:00 claude-cloud sshd[1412862]: Received disconnect from 103.13.206.152 port 33192:11: Bye Bye [preauth] 2026-07-02T03:07:06.860399-05:00 claude-cloud sshd[1412862]: Disconnected from invalid user oracle 103.13.206.152 port 33192 [preauth] 2026-07-02T03:07:43.053912-05:00 claude-cloud sshd[1412877]: Connection closed by authenticating user root 27.71.230.31 port 33194 [preauth] 2026-07-02T03:08:44.336860-05:00 claude-cloud sshd[1413174]: Invalid user admin from 195.178.110.227 port 60868 2026-07-02T03:08:44.350029-05:00 claude-cloud sshd[1413174]: Connection closed by invalid user admin 195.178.110.227 port 60868 [preauth] 2026-07-02T03:09:00.096678-05:00 claude-cloud sshd[1413244]: Invalid user ubuntu from 117.50.73.90 port 51852 2026-07-02T03:09:00.259458-05:00 claude-cloud sshd[1413244]: Received disconnect from 117.50.73.90 port 51852:11: Bye Bye [preauth] 2026-07-02T03:09:00.259847-05:00 claude-cloud sshd[1413244]: Disconnected from invalid user ubuntu 117.50.73.90 port 51852 [preauth] 2026-07-02T03:09:17.867442-05:00 claude-cloud sshd[1413300]: Invalid user poker from 181.164.12.188 port 33100 2026-07-02T03:09:18.134789-05:00 claude-cloud sshd[1413300]: Received disconnect from 181.164.12.188 port 33100:11: Bye Bye [preauth] 2026-07-02T03:09:18.135011-05:00 claude-cloud sshd[1413300]: Disconnected from invalid user poker 181.164.12.188 port 33100 [preauth] 2026-07-02T03:09:42.836861-05:00 claude-cloud sshd[1413376]: banner exchange: Connection from 64.62.156.172 port 20090: invalid format 2026-07-02T03:10:01.816062-05:00 claude-cloud CRON[1413422]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-02T03:10:01.820856-05:00 claude-cloud CRON[1413422]: pam_unix(cron:session): session closed for user root 2026-07-02T03:10:19.245911-05:00 claude-cloud sshd[1413476]: Received disconnect from 103.13.206.152 port 48080:11: Bye Bye [preauth] 2026-07-02T03:10:19.248189-05:00 claude-cloud sshd[1413476]: Disconnected from authenticating user root 103.13.206.152 port 48080 [preauth] 2026-07-02T03:11:34.644252-05:00 claude-cloud sshd[1413745]: Invalid user offers from 181.164.12.188 port 37690 2026-07-02T03:11:34.923334-05:00 claude-cloud sshd[1413745]: Received disconnect from 181.164.12.188 port 37690:11: Bye Bye [preauth] 2026-07-02T03:11:34.923518-05:00 claude-cloud sshd[1413745]: Disconnected from invalid user offers 181.164.12.188 port 37690 [preauth] 2026-07-02T03:12:09.653585-05:00 claude-cloud sshd[1413866]: Invalid user admin from 195.178.110.227 port 35656 2026-07-02T03:12:09.667927-05:00 claude-cloud sshd[1413866]: Connection closed by invalid user admin 195.178.110.227 port 35656 [preauth] 2026-07-02T03:12:09.705188-05:00 claude-cloud systemd-logind[853]: New session c5983 of user claude. 2026-07-02T03:12:09.974022-05:00 claude-cloud systemd-logind[853]: Session c5983 logged out. Waiting for processes to exit. 2026-07-02T03:12:09.977479-05:00 claude-cloud systemd-logind[853]: Removed session c5983. 2026-07-02T03:13:18.478093-05:00 claude-cloud sshd[1414039]: Connection closed by authenticating user root 27.71.230.31 port 41078 [preauth] 2026-07-02T03:13:35.381979-05:00 claude-cloud sshd[1414111]: Received disconnect from 103.13.206.152 port 37350:11: Bye Bye [preauth] 2026-07-02T03:13:35.382418-05:00 claude-cloud sshd[1414111]: Disconnected from authenticating user root 103.13.206.152 port 37350 [preauth] 2026-07-02T03:13:46.249892-05:00 claude-cloud sshd[1414142]: Invalid user tmc from 181.164.12.188 port 42992 2026-07-02T03:13:46.532435-05:00 claude-cloud sshd[1414142]: Received disconnect from 181.164.12.188 port 42992:11: Bye Bye [preauth] 2026-07-02T03:13:46.532857-05:00 claude-cloud sshd[1414142]: Disconnected from invalid user tmc 181.164.12.188 port 42992 [preauth] 2026-07-02T03:14:00.952714-05:00 claude-cloud sshd[1414035]: Connection closed by 115.190.248.214 port 60274 [preauth] 2026-07-02T03:15:01.829834-05:00 claude-cloud CRON[1414369]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-02T03:15:01.835771-05:00 claude-cloud CRON[1414369]: pam_unix(cron:session): session closed for user root 2026-07-02T03:15:05.677443-05:00 claude-cloud sshd[1414372]: Invalid user admin from 195.178.110.227 port 38630 2026-07-02T03:15:05.691684-05:00 claude-cloud sshd[1414372]: Connection closed by invalid user admin 195.178.110.227 port 38630 [preauth] 2026-07-02T03:15:49.602166-05:00 claude-cloud sshd[1414512]: Invalid user webcal from 181.164.12.188 port 44218 2026-07-02T03:15:49.876420-05:00 claude-cloud sshd[1414512]: Received disconnect from 181.164.12.188 port 44218:11: Bye Bye [preauth] 2026-07-02T03:15:49.876636-05:00 claude-cloud sshd[1414512]: Disconnected from invalid user webcal 181.164.12.188 port 44218 [preauth] 2026-07-02T03:16:47.932052-05:00 claude-cloud sshd[1414678]: Invalid user user1 from 103.13.206.152 port 60912 2026-07-02T03:16:48.112703-05:00 claude-cloud sshd[1414678]: Received disconnect from 103.13.206.152 port 60912:11: Bye Bye [preauth] 2026-07-02T03:16:48.113049-05:00 claude-cloud sshd[1414678]: Disconnected from invalid user user1 103.13.206.152 port 60912 [preauth] 2026-07-02T03:17:01.845616-05:00 claude-cloud CRON[1414709]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-02T03:17:01.852420-05:00 claude-cloud CRON[1414709]: pam_unix(cron:session): session closed for user root 2026-07-02T03:17:13.260674-05:00 claude-cloud systemd-logind[853]: New session c5984 of user claude. 2026-07-02T03:17:13.545687-05:00 claude-cloud systemd-logind[853]: Session c5984 logged out. Waiting for processes to exit. 2026-07-02T03:17:13.547595-05:00 claude-cloud systemd-logind[853]: Removed session c5984. 2026-07-02T03:17:43.891333-05:00 claude-cloud sshd[1414832]: Invalid user testuser from 112.126.62.31 port 38006 2026-07-02T03:17:44.049181-05:00 claude-cloud sshd[1414832]: Connection closed by invalid user testuser 112.126.62.31 port 38006 [preauth] 2026-07-02T03:17:45.489987-05:00 claude-cloud sshd[1414841]: Connection closed by authenticating user root 112.126.62.31 port 38022 [preauth] 2026-07-02T03:17:46.879871-05:00 claude-cloud sshd[1414843]: Connection closed by authenticating user root 112.126.62.31 port 38030 [preauth] 2026-07-02T03:17:49.428649-05:00 claude-cloud sshd[1414848]: Invalid user demo from 112.126.62.31 port 52278 2026-07-02T03:17:49.645610-05:00 claude-cloud sshd[1414848]: Connection closed by invalid user demo 112.126.62.31 port 52278 [preauth] 2026-07-02T03:17:50.448357-05:00 claude-cloud sshd[1414859]: Invalid user zjw from 112.126.62.31 port 52282 2026-07-02T03:17:51.034020-05:00 claude-cloud sshd[1414859]: Connection closed by invalid user zjw 112.126.62.31 port 52282 [preauth] 2026-07-02T03:17:52.009798-05:00 claude-cloud sshd[1414864]: Connection closed by authenticating user root 112.126.62.31 port 52288 [preauth] 2026-07-02T03:17:52.835607-05:00 claude-cloud sshd[1414875]: Invalid user minecraft from 112.126.62.31 port 52302 2026-07-02T03:17:52.994833-05:00 claude-cloud sshd[1414875]: Connection closed by invalid user minecraft 112.126.62.31 port 52302 [preauth] 2026-07-02T03:17:54.297639-05:00 claude-cloud sshd[1414877]: Invalid user postgres from 112.126.62.31 port 52306 2026-07-02T03:17:54.457236-05:00 claude-cloud sshd[1414877]: Connection closed by invalid user postgres 112.126.62.31 port 52306 [preauth] 2026-07-02T03:18:05.632186-05:00 claude-cloud sshd[1414909]: Invalid user admin from 195.178.110.227 port 41632 2026-07-02T03:18:05.645389-05:00 claude-cloud sshd[1414909]: Connection closed by invalid user admin 195.178.110.227 port 41632 [preauth] 2026-07-02T03:19:22.224765-05:00 claude-cloud sshd[1415118]: Connection closed by authenticating user root 27.71.230.31 port 37562 [preauth] 2026-07-02T03:20:53.141738-05:00 claude-cloud sshd[1415464]: Invalid user admin from 195.178.110.227 port 44664 2026-07-02T03:20:53.156433-05:00 claude-cloud sshd[1415464]: Connection closed by invalid user admin 195.178.110.227 port 44664 [preauth] 2026-07-02T03:21:48.455978-05:00 claude-cloud sshd[1415672]: Received disconnect from 23.94.200.194 port 40180:11: disconnected by user [preauth] 2026-07-02T03:21:48.458093-05:00 claude-cloud sshd[1415672]: Disconnected from authenticating user root 23.94.200.194 port 40180 [preauth] 2026-07-02T03:22:16.937427-05:00 claude-cloud systemd-logind[853]: New session c5985 of user claude. 2026-07-02T03:22:17.224501-05:00 claude-cloud systemd-logind[853]: Session c5985 logged out. Waiting for processes to exit. 2026-07-02T03:22:17.225718-05:00 claude-cloud systemd-logind[853]: Removed session c5985. 2026-07-02T03:22:37.661655-05:00 claude-cloud sshd[1415810]: banner exchange: Connection from 3.130.168.2 port 17424: invalid format 2026-07-02T03:23:50.355777-05:00 claude-cloud sshd[1416056]: Invalid user admin from 195.178.110.227 port 47672 2026-07-02T03:23:50.369919-05:00 claude-cloud sshd[1416056]: Connection closed by invalid user admin 195.178.110.227 port 47672 [preauth] 2026-07-02T03:25:01.140440-05:00 claude-cloud sshd[1416209]: Connection closed by 3.130.168.2 port 12816 [preauth] 2026-07-02T03:25:01.865335-05:00 claude-cloud CRON[1416220]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-02T03:25:01.871234-05:00 claude-cloud CRON[1416220]: pam_unix(cron:session): session closed for user root 2026-07-02T03:25:22.128222-05:00 claude-cloud sshd[1416243]: Connection closed by authenticating user root 27.71.230.31 port 60420 [preauth] 2026-07-02T03:26:34.443081-05:00 claude-cloud sshd[1416510]: Invalid user preview from 181.164.12.188 port 58280 2026-07-02T03:26:34.717320-05:00 claude-cloud sshd[1416510]: Received disconnect from 181.164.12.188 port 58280:11: Bye Bye [preauth] 2026-07-02T03:26:34.717502-05:00 claude-cloud sshd[1416510]: Disconnected from invalid user preview 181.164.12.188 port 58280 [preauth] 2026-07-02T03:26:43.593235-05:00 claude-cloud sshd[1416544]: Invalid user admin from 139.19.117.197 port 51018 2026-07-02T03:26:43.597711-05:00 claude-cloud sshd[1416544]: userauth_pubkey: signature algorithm ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] 2026-07-02T03:26:49.274310-05:00 claude-cloud sshd[1416571]: Invalid user admin from 195.178.110.227 port 50670 2026-07-02T03:26:49.288960-05:00 claude-cloud sshd[1416571]: Connection closed by invalid user admin 195.178.110.227 port 50670 [preauth] 2026-07-02T03:26:53.521947-05:00 claude-cloud sshd[1416544]: Connection closed by invalid user admin 139.19.117.197 port 51018 [preauth] 2026-07-02T03:27:20.741941-05:00 claude-cloud systemd-logind[853]: New session c5986 of user claude. 2026-07-02T03:27:21.004839-05:00 claude-cloud systemd-logind[853]: Session c5986 logged out. Waiting for processes to exit. 2026-07-02T03:27:21.007342-05:00 claude-cloud systemd-logind[853]: Removed session c5986. 2026-07-02T03:28:38.475574-05:00 claude-cloud sshd[1416878]: Invalid user blackbox from 181.164.12.188 port 38450 2026-07-02T03:28:38.756188-05:00 claude-cloud sshd[1416878]: Received disconnect from 181.164.12.188 port 38450:11: Bye Bye [preauth] 2026-07-02T03:28:38.756729-05:00 claude-cloud sshd[1416878]: Disconnected from invalid user blackbox 181.164.12.188 port 38450 [preauth] 2026-07-02T03:29:57.252144-05:00 claude-cloud sshd[1417114]: Invalid user admin from 195.178.110.227 port 53686 2026-07-02T03:29:57.266720-05:00 claude-cloud sshd[1417114]: Connection closed by invalid user admin 195.178.110.227 port 53686 [preauth] 2026-07-02T03:30:46.870014-05:00 claude-cloud sshd[1417287]: Invalid user cam from 181.164.12.188 port 56890 2026-07-02T03:30:47.135489-05:00 claude-cloud sshd[1417287]: Received disconnect from 181.164.12.188 port 56890:11: Bye Bye [preauth] 2026-07-02T03:30:47.135866-05:00 claude-cloud sshd[1417287]: Disconnected from invalid user cam 181.164.12.188 port 56890 [preauth] 2026-07-02T03:31:15.448882-05:00 claude-cloud sshd[1417352]: Connection closed by authenticating user root 27.71.230.31 port 59048 [preauth] 2026-07-02T03:32:25.132476-05:00 claude-cloud systemd-logind[853]: New session c5987 of user claude. 2026-07-02T03:32:25.499941-05:00 claude-cloud systemd-logind[853]: Session c5987 logged out. Waiting for processes to exit. 2026-07-02T03:32:25.501966-05:00 claude-cloud systemd-logind[853]: Removed session c5987. 2026-07-02T03:32:53.426010-05:00 claude-cloud sshd[1417746]: Invalid user ads2 from 181.164.12.188 port 46604 2026-07-02T03:32:53.699101-05:00 claude-cloud sshd[1417746]: Received disconnect from 181.164.12.188 port 46604:11: Bye Bye [preauth] 2026-07-02T03:32:53.699470-05:00 claude-cloud sshd[1417746]: Disconnected from invalid user ads2 181.164.12.188 port 46604 [preauth] 2026-07-02T03:32:55.746686-05:00 claude-cloud sshd[1417755]: Invalid user ubuntu from 185.242.3.195 port 50022 2026-07-02T03:32:55.754057-05:00 claude-cloud sshd[1417755]: Connection closed by invalid user ubuntu 185.242.3.195 port 50022 [preauth] 2026-07-02T03:33:07.953707-05:00 claude-cloud sshd[1417779]: Invalid user admin from 195.178.110.227 port 56652 2026-07-02T03:33:07.966806-05:00 claude-cloud sshd[1417779]: Connection closed by invalid user admin 195.178.110.227 port 56652 [preauth] 2026-07-02T03:33:32.692329-05:00 claude-cloud sshd[1417841]: Invalid user admin from 2.57.121.25 port 61538 2026-07-02T03:33:32.717745-05:00 claude-cloud sshd[1417841]: Connection closed by invalid user admin 2.57.121.25 port 61538 [preauth] 2026-07-02T03:34:57.927020-05:00 claude-cloud sshd[1418117]: Invalid user psych from 181.164.12.188 port 47116 2026-07-02T03:34:58.208472-05:00 claude-cloud sshd[1418117]: Received disconnect from 181.164.12.188 port 47116:11: Bye Bye [preauth] 2026-07-02T03:34:58.208667-05:00 claude-cloud sshd[1418117]: Disconnected from invalid user psych 181.164.12.188 port 47116 [preauth] 2026-07-02T03:35:01.881853-05:00 claude-cloud CRON[1418132]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-02T03:35:01.887203-05:00 claude-cloud CRON[1418132]: pam_unix(cron:session): session closed for user root 2026-07-02T03:36:12.956575-05:00 claude-cloud sshd[1418326]: Invalid user admin from 195.178.110.227 port 59654 2026-07-02T03:36:12.971393-05:00 claude-cloud sshd[1418326]: Connection closed by invalid user admin 195.178.110.227 port 59654 [preauth] 2026-07-02T03:36:57.626988-05:00 claude-cloud sshd[1418435]: Received disconnect from 160.238.24.130 port 56392:11: disconnected by user [preauth] 2026-07-02T03:36:57.627495-05:00 claude-cloud sshd[1418435]: Disconnected from authenticating user root 160.238.24.130 port 56392 [preauth] 2026-07-02T03:37:26.329887-05:00 claude-cloud sshd[1418484]: Connection closed by authenticating user root 27.71.230.31 port 36350 [preauth] 2026-07-02T03:37:28.951095-05:00 claude-cloud systemd-logind[853]: New session c5988 of user claude. 2026-07-02T03:37:29.252077-05:00 claude-cloud systemd-logind[853]: Session c5988 logged out. Waiting for processes to exit. 2026-07-02T03:37:29.254696-05:00 claude-cloud systemd-logind[853]: Removed session c5988. 2026-07-02T03:39:15.568582-05:00 claude-cloud sshd[1418849]: Invalid user admin from 195.178.110.227 port 34420 2026-07-02T03:39:15.581423-05:00 claude-cloud sshd[1418849]: Connection closed by invalid user admin 195.178.110.227 port 34420 [preauth] 2026-07-02T03:42:19.471656-05:00 claude-cloud sshd[1419428]: Invalid user admin from 195.178.110.227 port 37402 2026-07-02T03:42:19.486419-05:00 claude-cloud sshd[1419428]: Connection closed by invalid user admin 195.178.110.227 port 37402 [preauth] 2026-07-02T03:42:32.456546-05:00 claude-cloud systemd-logind[853]: New session c5989 of user claude. 2026-07-02T03:42:32.722766-05:00 claude-cloud systemd-logind[853]: Session c5989 logged out. Waiting for processes to exit. 2026-07-02T03:42:32.724634-05:00 claude-cloud systemd-logind[853]: Removed session c5989. 2026-07-02T03:43:18.725138-05:00 claude-cloud sshd[1419584]: Connection closed by authenticating user root 27.71.230.31 port 60814 [preauth] 2026-07-02T03:45:01.900200-05:00 claude-cloud CRON[1419964]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-02T03:45:01.906638-05:00 claude-cloud CRON[1419964]: pam_unix(cron:session): session closed for user root 2026-07-02T03:45:07.287146-05:00 claude-cloud sshd[1419976]: Connection closed by authenticating user root 45.148.10.121 port 53060 [preauth] 2026-07-02T03:45:31.934994-05:00 claude-cloud sshd[1420046]: Invalid user admin from 195.178.110.227 port 40396 2026-07-02T03:45:31.948809-05:00 claude-cloud sshd[1420046]: Connection closed by invalid user admin 195.178.110.227 port 40396 [preauth] 2026-07-02T03:45:40.706648-05:00 claude-cloud sshd[1420066]: Invalid user calendar from 181.164.12.188 port 60066 2026-07-02T03:45:40.980819-05:00 claude-cloud sshd[1420066]: Received disconnect from 181.164.12.188 port 60066:11: Bye Bye [preauth] 2026-07-02T03:45:40.983253-05:00 claude-cloud sshd[1420066]: Disconnected from invalid user calendar 181.164.12.188 port 60066 [preauth] 2026-07-02T03:47:36.224092-05:00 claude-cloud systemd-logind[853]: New session c5990 of user claude. 2026-07-02T03:47:36.512762-05:00 claude-cloud systemd-logind[853]: Session c5990 logged out. Waiting for processes to exit. 2026-07-02T03:47:36.515011-05:00 claude-cloud systemd-logind[853]: Removed session c5990. 2026-07-02T03:48:32.264717-05:00 claude-cloud sshd[1420601]: Invalid user admin from 195.178.110.227 port 43382 2026-07-02T03:48:32.278150-05:00 claude-cloud sshd[1420601]: Connection closed by invalid user admin 195.178.110.227 port 43382 [preauth] 2026-07-02T03:49:55.022005-05:00 claude-cloud sshd[1420746]: Connection closed by authenticating user root 27.71.230.31 port 60678 [preauth] 2026-07-02T03:51:56.246897-05:00 claude-cloud sshd[1421190]: Connection closed by 223.166.28.56 port 55979 2026-07-02T03:52:36.379732-05:00 claude-cloud sshd[1421318]: Connection closed by authenticating user root 193.46.255.86 port 36568 [preauth] 2026-07-02T03:52:39.899053-05:00 claude-cloud systemd-logind[853]: New session c5991 of user claude. 2026-07-02T03:52:40.158108-05:00 claude-cloud systemd-logind[853]: Session c5991 logged out. Waiting for processes to exit. 2026-07-02T03:52:40.159628-05:00 claude-cloud systemd-logind[853]: Removed session c5991. 2026-07-02T03:53:25.352239-05:00 claude-cloud sshd[1421503]: Received disconnect from 1.86.233.5 port 57630:11: Bye Bye [preauth] 2026-07-02T03:53:25.352747-05:00 claude-cloud sshd[1421503]: Disconnected from authenticating user root 1.86.233.5 port 57630 [preauth] 2026-07-02T03:55:01.918175-05:00 claude-cloud CRON[1421838]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-02T03:55:01.925169-05:00 claude-cloud CRON[1421838]: pam_unix(cron:session): session closed for user root 2026-07-02T03:55:27.568226-05:00 claude-cloud sshd[1421912]: Received disconnect from 104.236.66.186 port 41900:11: disconnected by user [preauth] 2026-07-02T03:55:27.570333-05:00 claude-cloud sshd[1421912]: Disconnected from authenticating user root 104.236.66.186 port 41900 [preauth] 2026-07-02T03:55:29.072903-05:00 claude-cloud sshd[1421903]: Connection closed by authenticating user root 27.71.230.31 port 35916 [preauth] 2026-07-02T03:57:43.654346-05:00 claude-cloud systemd-logind[853]: New session c5992 of user claude. 2026-07-02T03:57:43.968754-05:00 claude-cloud systemd-logind[853]: Session c5992 logged out. Waiting for processes to exit. 2026-07-02T03:57:43.970048-05:00 claude-cloud systemd-logind[853]: Removed session c5992. 2026-07-02T04:01:40.666869-05:00 claude-cloud sshd[1422971]: Connection closed by authenticating user root 27.71.230.31 port 33922 [preauth] 2026-07-02T04:02:16.045031-05:00 claude-cloud sshd[1423091]: Received disconnect from 1.86.233.5 port 46452:11: Bye Bye [preauth] 2026-07-02T04:02:16.045667-05:00 claude-cloud sshd[1423091]: Disconnected from authenticating user root 1.86.233.5 port 46452 [preauth] 2026-07-02T04:02:47.347938-05:00 claude-cloud sshd[1423188]: Invalid user support from 176.53.159.197 port 52564 2026-07-02T04:02:47.424775-05:00 claude-cloud sshd[1423188]: Connection reset by invalid user support 176.53.159.197 port 52564 [preauth] 2026-07-02T04:02:48.967292-05:00 claude-cloud systemd-logind[853]: New session c5993 of user claude. 2026-07-02T04:02:49.256977-05:00 claude-cloud systemd-logind[853]: Session c5993 logged out. Waiting for processes to exit. 2026-07-02T04:02:49.258331-05:00 claude-cloud systemd-logind[853]: Removed session c5993. 2026-07-02T04:03:30.583507-05:00 claude-cloud systemd-logind[853]: New session c5994 of user claude. 2026-07-02T04:03:30.672892-05:00 claude-cloud systemd-logind[853]: Session c5994 logged out. Waiting for processes to exit. 2026-07-02T04:03:30.675427-05:00 claude-cloud systemd-logind[853]: Removed session c5994. 2026-07-02T04:03:56.558980-05:00 claude-cloud systemd-logind[853]: New session c5995 of user claude. 2026-07-02T04:03:56.575531-05:00 claude-cloud systemd-logind[853]: New session c5996 of user claude. 2026-07-02T04:03:56.591249-05:00 claude-cloud systemd-logind[853]: New session c5997 of user claude. 2026-07-02T04:03:56.603178-05:00 claude-cloud systemd-logind[853]: New session c5998 of user claude. 2026-07-02T04:03:56.610470-05:00 claude-cloud systemd-logind[853]: Session c5995 logged out. Waiting for processes to exit. 2026-07-02T04:03:56.627132-05:00 claude-cloud systemd-logind[853]: Removed session c5995. 2026-07-02T04:03:56.628354-05:00 claude-cloud systemd-logind[853]: Session c5996 logged out. Waiting for processes to exit. 2026-07-02T04:03:56.634422-05:00 claude-cloud systemd-logind[853]: Removed session c5996. 2026-07-02T04:03:56.640444-05:00 claude-cloud systemd-logind[853]: Session c5997 logged out. Waiting for processes to exit. 2026-07-02T04:03:56.643532-05:00 claude-cloud systemd-logind[853]: Removed session c5997. 2026-07-02T04:03:56.835952-05:00 claude-cloud systemd-logind[853]: Session c5998 logged out. Waiting for processes to exit. 2026-07-02T04:03:56.838242-05:00 claude-cloud systemd-logind[853]: Removed session c5998. 2026-07-02T04:04:18.095258-05:00 claude-cloud systemd-logind[853]: New session c5999 of user claude. 2026-07-02T04:04:29.740650-05:00 claude-cloud systemd-logind[853]: Session c5999 logged out. Waiting for processes to exit. 2026-07-02T04:04:30.311445-05:00 claude-cloud systemd-logind[853]: Removed session c5999. 2026-07-02T04:05:01.939906-05:00 claude-cloud CRON[1423707]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0) 2026-07-02T04:05:01.946777-05:00 claude-cloud CRON[1423707]: pam_unix(cron:session): session closed for user root 2026-07-02T04:05:43.894688-05:00 claude-cloud systemd-logind[853]: Session c5946 logged out. Waiting for processes to exit. 2026-07-02T04:05:43.897204-05:00 claude-cloud systemd-logind[853]: Removed session c5946. 2026-07-02T04:05:44.666955-05:00 claude-cloud systemd-logind[853]: Session c5941 logged out. Waiting for processes to exit. 2026-07-02T04:05:44.668187-05:00 claude-cloud systemd-logind[853]: Removed session c5941. 2026-07-02T04:05:46.226923-05:00 claude-cloud systemd-logind[853]: New session c6000 of user claude. 2026-07-02T04:05:46.241104-05:00 claude-cloud systemd-logind[853]: New session c6001 of user claude. 2026-07-02T04:05:46.285502-05:00 claude-cloud systemd-logind[853]: Session c6000 logged out. Waiting for processes to exit. 2026-07-02T04:05:46.290304-05:00 claude-cloud systemd-logind[853]: Removed session c6000. 2026-07-02T04:05:46.942040-05:00 claude-cloud systemd-logind[853]: New session c6002 of user claude. 2026-07-02T04:05:46.994861-05:00 claude-cloud systemd-logind[853]: Session c6002 logged out. Waiting for processes to exit. 2026-07-02T04:05:46.998293-05:00 claude-cloud systemd-logind[853]: Removed session c6002. 2026-07-02T04:05:47.526401-05:00 claude-cloud systemd-logind[853]: New session c6003 of user claude.