2026-06-28T00:00:14.869018-05:00 claude-cloud sshd[3993473]: Received disconnect from 43.133.26.159 port 20466:11: Bye Bye [preauth]
2026-06-28T00:00:14.869178-05:00 claude-cloud sshd[3993473]: Disconnected from authenticating user root 43.133.26.159 port 20466 [preauth]
2026-06-28T00:00:34.585141-05:00 claude-cloud systemd-logind[853]: New session c4246 of user claude.
2026-06-28T00:00:34.855214-05:00 claude-cloud systemd-logind[853]: Session c4246 logged out. Waiting for processes to exit.
2026-06-28T00:00:34.857608-05:00 claude-cloud systemd-logind[853]: Removed session c4246.
2026-06-28T00:01:24.104515-05:00 claude-cloud sshd[3993680]: Invalid user postgres from 91.92.40.237 port 52468
2026-06-28T00:01:24.120436-05:00 claude-cloud sshd[3993680]: Connection closed by invalid user postgres 91.92.40.237 port 52468 [preauth]
2026-06-28T00:01:34.126709-05:00 claude-cloud sshd[3993716]: Invalid user jj from 103.153.110.190 port 43284
2026-06-28T00:01:34.327152-05:00 claude-cloud sshd[3993716]: Received disconnect from 103.153.110.190 port 43284:11: Bye Bye [preauth]
2026-06-28T00:01:34.327375-05:00 claude-cloud sshd[3993716]: Disconnected from invalid user jj 103.153.110.190 port 43284 [preauth]
2026-06-28T00:02:07.512815-05:00 claude-cloud sshd[3993818]: Invalid user admin from 43.133.26.159 port 43438
2026-06-28T00:02:07.769600-05:00 claude-cloud sshd[3993818]: Received disconnect from 43.133.26.159 port 43438:11: Bye Bye [preauth]
2026-06-28T00:02:07.769808-05:00 claude-cloud sshd[3993818]: Disconnected from invalid user admin 43.133.26.159 port 43438 [preauth]
2026-06-28T00:02:51.455932-05:00 claude-cloud sshd[3993939]: Invalid user admin from 195.178.110.227 port 59626
2026-06-28T00:02:51.470546-05:00 claude-cloud sshd[3993939]: Connection closed by invalid user admin 195.178.110.227 port 59626 [preauth]
2026-06-28T00:03:03.907876-05:00 claude-cloud sshd[3993972]: Invalid user postgres from 91.92.40.237 port 41584
2026-06-28T00:03:04.123912-05:00 claude-cloud sshd[3993972]: Connection closed by invalid user postgres 91.92.40.237 port 41584 [preauth]
2026-06-28T00:03:51.218646-05:00 claude-cloud sshd[3994092]: Invalid user kate from 43.133.26.159 port 39634
2026-06-28T00:03:51.479179-05:00 claude-cloud sshd[3994075]: Connection closed by authenticating user root 27.71.230.31 port 53342 [preauth]
2026-06-28T00:03:51.479724-05:00 claude-cloud sshd[3994092]: Received disconnect from 43.133.26.159 port 39634:11: Bye Bye [preauth]
2026-06-28T00:03:51.479883-05:00 claude-cloud sshd[3994092]: Disconnected from invalid user kate 43.133.26.159 port 39634 [preauth]
2026-06-28T00:03:53.432509-05:00 claude-cloud sshd[3994104]: Invalid user ubuntu from 103.153.110.190 port 34072
2026-06-28T00:03:53.638532-05:00 claude-cloud sshd[3994104]: Received disconnect from 103.153.110.190 port 34072:11: Bye Bye [preauth]
2026-06-28T00:03:53.638916-05:00 claude-cloud sshd[3994104]: Disconnected from invalid user ubuntu 103.153.110.190 port 34072 [preauth]
2026-06-28T00:04:35.467131-05:00 claude-cloud sshd[3994229]: Connection closed by 161.35.47.134 port 47002
2026-06-28T00:04:43.458238-05:00 claude-cloud sshd[3994250]: Invalid user postgres from 91.92.40.237 port 37754
2026-06-28T00:04:43.678006-05:00 claude-cloud sshd[3994250]: Connection closed by invalid user postgres 91.92.40.237 port 37754 [preauth]
2026-06-28T00:05:01.808249-05:00 claude-cloud CRON[3994321]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-28T00:05:01.819988-05:00 claude-cloud CRON[3994321]: pam_unix(cron:session): session closed for user root
2026-06-28T00:05:38.274113-05:00 claude-cloud systemd-logind[853]: New session c4247 of user claude.
2026-06-28T00:05:38.532032-05:00 claude-cloud systemd-logind[853]: Session c4247 logged out. Waiting for processes to exit.
2026-06-28T00:05:38.534213-05:00 claude-cloud systemd-logind[853]: Removed session c4247.
2026-06-28T00:05:45.368462-05:00 claude-cloud sshd[3994444]: Connection closed by 118.193.39.146 port 2570
2026-06-28T00:05:59.758320-05:00 claude-cloud sshd[3994445]: Connection closed by 118.193.39.146 port 2794 [preauth]
2026-06-28T00:06:06.379968-05:00 claude-cloud sshd[3994492]: Invalid user mehdi from 103.153.110.190 port 42260
2026-06-28T00:06:06.586328-05:00 claude-cloud sshd[3994492]: Received disconnect from 103.153.110.190 port 42260:11: Bye Bye [preauth]
2026-06-28T00:06:06.586577-05:00 claude-cloud sshd[3994492]: Disconnected from invalid user mehdi 103.153.110.190 port 42260 [preauth]
2026-06-28T00:06:14.962571-05:00 claude-cloud sshd[3994520]: Invalid user ubuntu from 45.198.224.46 port 49828
2026-06-28T00:06:16.182875-05:00 claude-cloud sshd[3994520]: Connection closed by invalid user ubuntu 45.198.224.46 port 49828 [preauth]
2026-06-28T00:06:21.932724-05:00 claude-cloud sshd[3994535]: Invalid user ftp from 91.92.40.237 port 53710
2026-06-28T00:06:22.198942-05:00 claude-cloud sshd[3994535]: Connection closed by invalid user ftp 91.92.40.237 port 53710 [preauth]
2026-06-28T00:08:08.982617-05:00 claude-cloud systemd-logind[853]: Session c4221 logged out. Waiting for processes to exit.
2026-06-28T00:08:08.983199-05:00 claude-cloud systemd-logind[853]: Session c4223 logged out. Waiting for processes to exit.
2026-06-28T00:08:08.984344-05:00 claude-cloud systemd-logind[853]: Removed session c4221.
2026-06-28T00:08:08.985420-05:00 claude-cloud systemd-logind[853]: Removed session c4223.
2026-06-28T00:08:21.382443-05:00 claude-cloud systemd-logind[853]: New session c4248 of user claude.
2026-06-28T00:08:21.413383-05:00 claude-cloud systemd-logind[853]: New session c4249 of user claude.
2026-06-28T00:08:21.446879-05:00 claude-cloud systemd-logind[853]: Session c4248 logged out. Waiting for processes to exit.
2026-06-28T00:08:21.447980-05:00 claude-cloud systemd-logind[853]: Removed session c4248.
2026-06-28T00:08:22.227080-05:00 claude-cloud systemd-logind[853]: New session c4250 of user claude.
2026-06-28T00:08:22.265819-05:00 claude-cloud systemd-logind[853]: Session c4250 logged out. Waiting for processes to exit.
2026-06-28T00:08:22.267617-05:00 claude-cloud systemd-logind[853]: Removed session c4250.
2026-06-28T00:08:22.803167-05:00 claude-cloud sshd[3994909]: Invalid user pix from 103.153.110.190 port 58904
2026-06-28T00:08:23.007938-05:00 claude-cloud sshd[3994909]: Received disconnect from 103.153.110.190 port 58904:11: Bye Bye [preauth]
2026-06-28T00:08:23.008186-05:00 claude-cloud sshd[3994909]: Disconnected from invalid user pix 103.153.110.190 port 58904 [preauth]
2026-06-28T00:08:39.181574-05:00 claude-cloud systemd-logind[853]: New session c4251 of user claude.
2026-06-28T00:08:41.596900-05:00 claude-cloud sshd[3994993]: Invalid user admin from 195.178.110.227 port 34502
2026-06-28T00:08:41.613044-05:00 claude-cloud sshd[3994993]: Connection closed by invalid user admin 195.178.110.227 port 34502 [preauth]
2026-06-28T00:08:53.588855-05:00 claude-cloud sshd[3995031]: banner exchange: Connection from 184.105.139.67 port 9926: invalid format
2026-06-28T00:09:00.125499-05:00 claude-cloud systemd-logind[853]: New session c4252 of user claude.
2026-06-28T00:09:00.144708-05:00 claude-cloud systemd-logind[853]: New session c4253 of user claude.
2026-06-28T00:09:00.176110-05:00 claude-cloud systemd-logind[853]: Session c4253 logged out. Waiting for processes to exit.
2026-06-28T00:09:00.177452-05:00 claude-cloud systemd-logind[853]: Removed session c4253.
2026-06-28T00:09:00.878977-05:00 claude-cloud systemd-logind[853]: New session c4254 of user claude.
2026-06-28T00:09:00.918348-05:00 claude-cloud systemd-logind[853]: Session c4254 logged out. Waiting for processes to exit.
2026-06-28T00:09:00.920138-05:00 claude-cloud systemd-logind[853]: Removed session c4254.
2026-06-28T00:09:01.492573-05:00 claude-cloud systemd-logind[853]: New session c4255 of user claude.
2026-06-28T00:09:02.176330-05:00 claude-cloud systemd-logind[853]: Session c4251 logged out. Waiting for processes to exit.
2026-06-28T00:09:02.180518-05:00 claude-cloud systemd-logind[853]: Session c4249 logged out. Waiting for processes to exit.
2026-06-28T00:09:02.185037-05:00 claude-cloud systemd-logind[853]: Removed session c4249.
2026-06-28T00:09:02.187194-05:00 claude-cloud systemd-logind[853]: Removed session c4251.
2026-06-28T00:09:54.914982-05:00 claude-cloud systemd-logind[853]: Session c4255 logged out. Waiting for processes to exit.
2026-06-28T00:09:54.918123-05:00 claude-cloud systemd-logind[853]: Session c4252 logged out. Waiting for processes to exit.
2026-06-28T00:09:54.919863-05:00 claude-cloud systemd-logind[853]: Removed session c4255.
2026-06-28T00:09:54.921772-05:00 claude-cloud systemd-logind[853]: Removed session c4252.
2026-06-28T00:10:06.285531-05:00 claude-cloud systemd-logind[853]: New session c4256 of user claude.
2026-06-28T00:10:06.293625-05:00 claude-cloud systemd-logind[853]: New session c4257 of user claude.
2026-06-28T00:10:06.315317-05:00 claude-cloud systemd-logind[853]: Session c4256 logged out. Waiting for processes to exit.
2026-06-28T00:10:06.318960-05:00 claude-cloud systemd-logind[853]: Removed session c4256.
2026-06-28T00:10:07.006072-05:00 claude-cloud systemd-logind[853]: New session c4258 of user claude.
2026-06-28T00:10:07.046540-05:00 claude-cloud systemd-logind[853]: Session c4258 logged out. Waiting for processes to exit.
2026-06-28T00:10:07.049480-05:00 claude-cloud systemd-logind[853]: Removed session c4258.
2026-06-28T00:10:07.639439-05:00 claude-cloud systemd-logind[853]: New session c4259 of user claude.
2026-06-28T00:10:09.606985-05:00 claude-cloud sshd[3995298]: Connection closed by authenticating user root 27.71.230.31 port 48344 [preauth]
2026-06-28T00:10:32.327994-05:00 claude-cloud systemd-logind[853]: Session c4259 logged out. Waiting for processes to exit.
2026-06-28T00:10:32.330875-05:00 claude-cloud systemd-logind[853]: Session c4257 logged out. Waiting for processes to exit.
2026-06-28T00:10:32.332295-05:00 claude-cloud systemd-logind[853]: Removed session c4259.
2026-06-28T00:10:32.333772-05:00 claude-cloud systemd-logind[853]: Removed session c4257.
2026-06-28T00:10:40.170853-05:00 claude-cloud systemd-logind[853]: New session c4260 of user claude.
2026-06-28T00:10:40.184601-05:00 claude-cloud systemd-logind[853]: New session c4261 of user claude.
2026-06-28T00:10:40.215240-05:00 claude-cloud systemd-logind[853]: Session c4260 logged out. Waiting for processes to exit.
2026-06-28T00:10:40.216857-05:00 claude-cloud systemd-logind[853]: Removed session c4260.
2026-06-28T00:10:41.814945-05:00 claude-cloud sshd[3995512]: Invalid user xiwen from 103.153.110.190 port 41390
2026-06-28T00:10:42.007499-05:00 claude-cloud sshd[3995512]: Received disconnect from 103.153.110.190 port 41390:11: Bye Bye [preauth]
2026-06-28T00:10:42.007756-05:00 claude-cloud sshd[3995512]: Disconnected from invalid user xiwen 103.153.110.190 port 41390 [preauth]
2026-06-28T00:10:42.380871-05:00 claude-cloud systemd-logind[853]: New session c4262 of user claude.
2026-06-28T00:10:42.419656-05:00 claude-cloud systemd-logind[853]: Session c4262 logged out. Waiting for processes to exit.
2026-06-28T00:10:42.421591-05:00 claude-cloud systemd-logind[853]: Removed session c4262.
2026-06-28T00:10:42.966472-05:00 claude-cloud systemd-logind[853]: New session c4263 of user claude.
2026-06-28T00:10:50.711013-05:00 claude-cloud systemd-logind[853]: New session c4264 of user claude.
2026-06-28T00:10:50.984669-05:00 claude-cloud systemd-logind[853]: Session c4264 logged out. Waiting for processes to exit.
2026-06-28T00:10:50.986860-05:00 claude-cloud systemd-logind[853]: Removed session c4264.
2026-06-28T00:12:19.003985-05:00 claude-cloud sshd[3995835]: Connection closed by 161.35.47.134 port 38138
2026-06-28T00:13:06.303791-05:00 claude-cloud sshd[3995952]: Invalid user webapps from 103.153.110.190 port 59442
2026-06-28T00:13:06.503108-05:00 claude-cloud sshd[3995952]: Received disconnect from 103.153.110.190 port 59442:11: Bye Bye [preauth]
2026-06-28T00:13:06.503347-05:00 claude-cloud sshd[3995952]: Disconnected from invalid user webapps 103.153.110.190 port 59442 [preauth]
2026-06-28T00:14:00.431589-05:00 claude-cloud sshd[3996127]: Invalid user admin from 195.178.110.227 port 37584
2026-06-28T00:14:00.444645-05:00 claude-cloud sshd[3996127]: Connection closed by invalid user admin 195.178.110.227 port 37584 [preauth]
2026-06-28T00:15:01.832157-05:00 claude-cloud CRON[3996302]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-28T00:15:01.843515-05:00 claude-cloud CRON[3996302]: pam_unix(cron:session): session closed for user root
2026-06-28T00:15:28.436424-05:00 claude-cloud sshd[3996381]: Invalid user mysftp from 103.153.110.190 port 50130
2026-06-28T00:15:28.635364-05:00 claude-cloud sshd[3996381]: Received disconnect from 103.153.110.190 port 50130:11: Bye Bye [preauth]
2026-06-28T00:15:28.635554-05:00 claude-cloud sshd[3996381]: Disconnected from invalid user mysftp 103.153.110.190 port 50130 [preauth]
2026-06-28T00:15:49.121138-05:00 claude-cloud sshd[3996407]: Connection closed by authenticating user root 27.71.230.31 port 45346 [preauth]
2026-06-28T00:15:54.664506-05:00 claude-cloud systemd-logind[853]: New session c4265 of user claude.
2026-06-28T00:15:54.935687-05:00 claude-cloud systemd-logind[853]: Session c4265 logged out. Waiting for processes to exit.
2026-06-28T00:15:54.936750-05:00 claude-cloud systemd-logind[853]: Removed session c4265.
2026-06-28T00:16:08.218240-05:00 claude-cloud sshd[3996499]: Invalid user http from 45.198.224.46 port 54034
2026-06-28T00:16:09.439464-05:00 claude-cloud sshd[3996499]: Connection closed by invalid user http 45.198.224.46 port 54034 [preauth]
2026-06-28T00:17:01.850706-05:00 claude-cloud CRON[3996674]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-28T00:17:01.856288-05:00 claude-cloud CRON[3996674]: pam_unix(cron:session): session closed for user root
2026-06-28T00:17:41.368171-05:00 claude-cloud sshd[3996771]: Invalid user ftp from 91.92.40.237 port 35718
2026-06-28T00:17:41.446178-05:00 claude-cloud sshd[3996771]: Connection closed by invalid user ftp 91.92.40.237 port 35718 [preauth]
2026-06-28T00:17:43.242898-05:00 claude-cloud sshd[3996773]: Invalid user ubuntu from 103.153.110.190 port 54700
2026-06-28T00:17:43.443127-05:00 claude-cloud sshd[3996773]: Received disconnect from 103.153.110.190 port 54700:11: Bye Bye [preauth]
2026-06-28T00:17:43.443404-05:00 claude-cloud sshd[3996773]: Disconnected from invalid user ubuntu 103.153.110.190 port 54700 [preauth]
2026-06-28T00:17:44.176898-05:00 claude-cloud systemd-logind[853]: Session c4263 logged out. Waiting for processes to exit.
2026-06-28T00:17:44.177612-05:00 claude-cloud systemd-logind[853]: Session c4261 logged out. Waiting for processes to exit.
2026-06-28T00:17:44.178830-05:00 claude-cloud systemd-logind[853]: Removed session c4263.
2026-06-28T00:17:44.180106-05:00 claude-cloud systemd-logind[853]: Removed session c4261.
2026-06-28T00:18:25.776685-05:00 claude-cloud systemd-logind[853]: New session c4266 of user claude.
2026-06-28T00:18:25.791975-05:00 claude-cloud systemd-logind[853]: New session c4267 of user claude.
2026-06-28T00:18:25.819074-05:00 claude-cloud systemd-logind[853]: Session c4267 logged out. Waiting for processes to exit.
2026-06-28T00:18:25.824881-05:00 claude-cloud systemd-logind[853]: Removed session c4267.
2026-06-28T00:18:26.800865-05:00 claude-cloud systemd-logind[853]: New session c4268 of user claude.
2026-06-28T00:18:26.852489-05:00 claude-cloud systemd-logind[853]: Session c4268 logged out. Waiting for processes to exit.
2026-06-28T00:18:26.854507-05:00 claude-cloud systemd-logind[853]: Removed session c4268.
2026-06-28T00:18:27.542595-05:00 claude-cloud systemd-logind[853]: New session c4269 of user claude.
2026-06-28T00:19:18.018307-05:00 claude-cloud sshd[3997124]: Invalid user admin from 195.178.110.227 port 40630
2026-06-28T00:19:18.031694-05:00 claude-cloud sshd[3997124]: Connection closed by invalid user admin 195.178.110.227 port 40630 [preauth]
2026-06-28T00:19:18.129593-05:00 claude-cloud sshd[3997115]: Invalid user ftp from 91.92.40.237 port 58928
2026-06-28T00:19:18.417773-05:00 claude-cloud sshd[3997115]: Connection closed by invalid user ftp 91.92.40.237 port 58928 [preauth]
2026-06-28T00:19:58.762080-05:00 claude-cloud sshd[3997308]: Invalid user scptest from 103.153.110.190 port 42304
2026-06-28T00:19:58.960260-05:00 claude-cloud sshd[3997308]: Received disconnect from 103.153.110.190 port 42304:11: Bye Bye [preauth]
2026-06-28T00:19:58.960647-05:00 claude-cloud sshd[3997308]: Disconnected from invalid user scptest 103.153.110.190 port 42304 [preauth]
2026-06-28T00:20:12.051465-05:00 claude-cloud systemd-logind[853]: Session c4266 logged out. Waiting for processes to exit.
2026-06-28T00:20:12.065135-05:00 claude-cloud systemd-logind[853]: Session c4269 logged out. Waiting for processes to exit.
2026-06-28T00:20:12.067460-05:00 claude-cloud systemd-logind[853]: Removed session c4266.
2026-06-28T00:20:12.070272-05:00 claude-cloud systemd-logind[853]: Removed session c4269.
2026-06-28T00:20:49.749703-05:00 claude-cloud systemd-logind[853]: New session c4270 of user claude.
2026-06-28T00:20:49.766502-05:00 claude-cloud systemd-logind[853]: New session c4271 of user claude.
2026-06-28T00:20:49.788476-05:00 claude-cloud systemd-logind[853]: Session c4270 logged out. Waiting for processes to exit.
2026-06-28T00:20:49.791901-05:00 claude-cloud systemd-logind[853]: Removed session c4270.
2026-06-28T00:20:50.954660-05:00 claude-cloud systemd-logind[853]: New session c4272 of user claude.
2026-06-28T00:20:50.999481-05:00 claude-cloud systemd-logind[853]: Session c4272 logged out. Waiting for processes to exit.
2026-06-28T00:20:51.001717-05:00 claude-cloud systemd-logind[853]: Removed session c4272.
2026-06-28T00:20:51.568130-05:00 claude-cloud systemd-logind[853]: New session c4273 of user claude.
2026-06-28T00:20:52.348607-05:00 claude-cloud sshd[3997496]: Invalid user apache from 91.92.40.237 port 52620
2026-06-28T00:20:52.523209-05:00 claude-cloud sshd[3997496]: Connection closed by invalid user apache 91.92.40.237 port 52620 [preauth]
2026-06-28T00:21:13.305182-05:00 claude-cloud systemd-logind[853]: New session c4274 of user claude.
2026-06-28T00:21:13.558231-05:00 claude-cloud systemd-logind[853]: Session c4274 logged out. Waiting for processes to exit.
2026-06-28T00:21:13.561660-05:00 claude-cloud systemd-logind[853]: Removed session c4274.
2026-06-28T00:21:53.937996-05:00 claude-cloud sshd[3997638]: Connection closed by authenticating user root 27.71.230.31 port 36982 [preauth]
2026-06-28T00:22:12.259611-05:00 claude-cloud systemd-logind[853]: Session c4271 logged out. Waiting for processes to exit.
2026-06-28T00:22:12.260669-05:00 claude-cloud systemd-logind[853]: Session c4273 logged out. Waiting for processes to exit.
2026-06-28T00:22:12.262612-05:00 claude-cloud systemd-logind[853]: Removed session c4271.
2026-06-28T00:22:12.264162-05:00 claude-cloud systemd-logind[853]: Removed session c4273.
2026-06-28T00:22:27.472406-05:00 claude-cloud systemd-logind[853]: New session c4275 of user claude.
2026-06-28T00:22:27.492984-05:00 claude-cloud systemd-logind[853]: New session c4276 of user claude.
2026-06-28T00:22:27.523696-05:00 claude-cloud systemd-logind[853]: Session c4276 logged out. Waiting for processes to exit.
2026-06-28T00:22:27.526195-05:00 claude-cloud systemd-logind[853]: Removed session c4276.
2026-06-28T00:22:28.650312-05:00 claude-cloud systemd-logind[853]: New session c4277 of user claude.
2026-06-28T00:22:28.695642-05:00 claude-cloud systemd-logind[853]: Session c4277 logged out. Waiting for processes to exit.
2026-06-28T00:22:28.699659-05:00 claude-cloud systemd-logind[853]: Removed session c4277.
2026-06-28T00:22:29.440570-05:00 claude-cloud systemd-logind[853]: New session c4278 of user claude.
2026-06-28T00:22:30.264881-05:00 claude-cloud sshd[3997833]: Invalid user apache from 91.92.40.237 port 58542
2026-06-28T00:22:30.664424-05:00 claude-cloud sshd[3997833]: Connection closed by invalid user apache 91.92.40.237 port 58542 [preauth]
2026-06-28T00:23:48.184509-05:00 claude-cloud systemd-logind[853]: Session c4278 logged out. Waiting for processes to exit.
2026-06-28T00:23:48.187520-05:00 claude-cloud systemd-logind[853]: Session c4275 logged out. Waiting for processes to exit.
2026-06-28T00:23:48.188803-05:00 claude-cloud systemd-logind[853]: Removed session c4275.
2026-06-28T00:23:48.190157-05:00 claude-cloud systemd-logind[853]: Removed session c4278.
2026-06-28T00:23:58.147730-05:00 claude-cloud sshd[3998096]: Invalid user ftpguest from 212.129.35.101 port 64801
2026-06-28T00:23:58.173716-05:00 claude-cloud sshd[3998096]: Received disconnect from 212.129.35.101 port 64801:11: Bye Bye [preauth]
2026-06-28T00:23:58.173845-05:00 claude-cloud sshd[3998096]: Disconnected from invalid user ftpguest 212.129.35.101 port 64801 [preauth]
2026-06-28T00:24:09.129583-05:00 claude-cloud sshd[3998130]: Invalid user apache from 91.92.40.237 port 55254
2026-06-28T00:24:09.389445-05:00 claude-cloud sshd[3998130]: Connection closed by invalid user apache 91.92.40.237 port 55254 [preauth]
2026-06-28T00:24:48.841585-05:00 claude-cloud systemd-logind[853]: New session c4279 of user claude.
2026-06-28T00:24:48.854320-05:00 claude-cloud systemd-logind[853]: New session c4280 of user claude.
2026-06-28T00:24:48.877904-05:00 claude-cloud systemd-logind[853]: Session c4280 logged out. Waiting for processes to exit.
2026-06-28T00:24:48.879125-05:00 claude-cloud systemd-logind[853]: Removed session c4280.
2026-06-28T00:24:51.496378-05:00 claude-cloud systemd-logind[853]: New session c4281 of user claude.
2026-06-28T00:24:51.540853-05:00 claude-cloud systemd-logind[853]: Session c4281 logged out. Waiting for processes to exit.
2026-06-28T00:24:51.543701-05:00 claude-cloud systemd-logind[853]: Removed session c4281.
2026-06-28T00:24:54.256687-05:00 claude-cloud systemd-logind[853]: New session c4282 of user claude.
2026-06-28T00:25:01.458759-05:00 claude-cloud sshd[3998340]: Invalid user admin from 195.178.110.227 port 43664
2026-06-28T00:25:01.473634-05:00 claude-cloud sshd[3998340]: Connection closed by invalid user admin 195.178.110.227 port 43664 [preauth]
2026-06-28T00:25:01.867192-05:00 claude-cloud CRON[3998342]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-28T00:25:01.874223-05:00 claude-cloud CRON[3998342]: pam_unix(cron:session): session closed for user root
2026-06-28T00:25:48.561988-05:00 claude-cloud systemd-logind[853]: Session c4282 logged out. Waiting for processes to exit.
2026-06-28T00:25:48.564201-05:00 claude-cloud systemd-logind[853]: Removed session c4282.
2026-06-28T00:25:48.668781-05:00 claude-cloud systemd-logind[853]: Session c4279 logged out. Waiting for processes to exit.
2026-06-28T00:25:48.670713-05:00 claude-cloud systemd-logind[853]: Removed session c4279.
2026-06-28T00:25:50.290872-05:00 claude-cloud systemd-logind[853]: New session c4283 of user claude.
2026-06-28T00:25:50.314877-05:00 claude-cloud systemd-logind[853]: New session c4284 of user claude.
2026-06-28T00:25:50.346603-05:00 claude-cloud systemd-logind[853]: Session c4283 logged out. Waiting for processes to exit.
2026-06-28T00:25:50.349718-05:00 claude-cloud systemd-logind[853]: Removed session c4283.
2026-06-28T00:25:51.058209-05:00 claude-cloud systemd-logind[853]: New session c4285 of user claude.
2026-06-28T00:25:51.109722-05:00 claude-cloud systemd-logind[853]: Session c4285 logged out. Waiting for processes to exit.
2026-06-28T00:25:51.114827-05:00 claude-cloud systemd-logind[853]: Removed session c4285.
2026-06-28T00:25:51.668742-05:00 claude-cloud systemd-logind[853]: New session c4286 of user claude.
2026-06-28T00:25:59.327626-05:00 claude-cloud sshd[3998547]: Connection closed by authenticating user root 45.198.224.46 port 45276 [preauth]
2026-06-28T00:26:14.918747-05:00 claude-cloud systemd-logind[853]: Session c4286 logged out. Waiting for processes to exit.
2026-06-28T00:26:14.919789-05:00 claude-cloud systemd-logind[853]: Session c4284 logged out. Waiting for processes to exit.
2026-06-28T00:26:14.921501-05:00 claude-cloud systemd-logind[853]: Removed session c4284.
2026-06-28T00:26:14.923030-05:00 claude-cloud systemd-logind[853]: Removed session c4286.
2026-06-28T00:26:20.261948-05:00 claude-cloud systemd-logind[853]: New session c4287 of user claude.
2026-06-28T00:26:20.623883-05:00 claude-cloud systemd-logind[853]: Session c4287 logged out. Waiting for processes to exit.
2026-06-28T00:26:20.625020-05:00 claude-cloud systemd-logind[853]: Removed session c4287.
2026-06-28T00:26:43.886057-05:00 claude-cloud systemd-logind[853]: New session c4288 of user claude.
2026-06-28T00:26:44.026704-05:00 claude-cloud systemd-logind[853]: New session c4289 of user claude.
2026-06-28T00:26:44.085022-05:00 claude-cloud systemd-logind[853]: Session c4289 logged out. Waiting for processes to exit.
2026-06-28T00:26:44.087014-05:00 claude-cloud systemd-logind[853]: Removed session c4289.
2026-06-28T00:26:44.665385-05:00 claude-cloud systemd-logind[853]: New session c4290 of user claude.
2026-06-28T00:26:44.705030-05:00 claude-cloud systemd-logind[853]: Session c4290 logged out. Waiting for processes to exit.
2026-06-28T00:26:44.706264-05:00 claude-cloud systemd-logind[853]: Removed session c4290.
2026-06-28T00:26:45.313693-05:00 claude-cloud systemd-logind[853]: New session c4291 of user claude.
2026-06-28T00:27:38.342111-05:00 claude-cloud sshd[3998868]: Received disconnect from 150.95.82.21 port 51400:11: Bye Bye [preauth]
2026-06-28T00:27:38.342425-05:00 claude-cloud sshd[3998868]: Disconnected from authenticating user root 150.95.82.21 port 51400 [preauth]
2026-06-28T00:27:50.497372-05:00 claude-cloud sshd[3998880]: Connection closed by authenticating user root 27.71.230.31 port 52524 [preauth]
2026-06-28T00:28:18.651159-05:00 claude-cloud systemd-logind[853]: Session c4291 logged out. Waiting for processes to exit.
2026-06-28T00:28:18.651682-05:00 claude-cloud systemd-logind[853]: Session c4288 logged out. Waiting for processes to exit.
2026-06-28T00:28:18.653601-05:00 claude-cloud systemd-logind[853]: Removed session c4288.
2026-06-28T00:28:18.655246-05:00 claude-cloud systemd-logind[853]: Removed session c4291.
2026-06-28T00:28:23.372796-05:00 claude-cloud systemd-logind[853]: New session c4292 of user claude.
2026-06-28T00:28:23.387202-05:00 claude-cloud systemd-logind[853]: New session c4293 of user claude.
2026-06-28T00:28:23.420607-05:00 claude-cloud systemd-logind[853]: Session c4292 logged out. Waiting for processes to exit.
2026-06-28T00:28:23.422546-05:00 claude-cloud systemd-logind[853]: Removed session c4292.
2026-06-28T00:28:35.294999-05:00 claude-cloud systemd-logind[853]: New session c4294 of user claude.
2026-06-28T00:28:35.340421-05:00 claude-cloud systemd-logind[853]: Session c4294 logged out. Waiting for processes to exit.
2026-06-28T00:28:35.340720-05:00 claude-cloud systemd-logind[853]: Removed session c4294.
2026-06-28T00:28:35.887969-05:00 claude-cloud systemd-logind[853]: New session c4295 of user claude.
2026-06-28T00:29:41.158407-05:00 claude-cloud sshd[3999296]: Connection closed by authenticating user root 89.203.249.139 port 53274 [preauth]
2026-06-28T00:30:16.612318-05:00 claude-cloud systemd-logind[853]: Session c4295 logged out. Waiting for processes to exit.
2026-06-28T00:30:16.614536-05:00 claude-cloud systemd-logind[853]: Session c4293 logged out. Waiting for processes to exit.
2026-06-28T00:30:16.616997-05:00 claude-cloud systemd-logind[853]: Removed session c4293.
2026-06-28T00:30:16.620853-05:00 claude-cloud systemd-logind[853]: Removed session c4295.
2026-06-28T00:30:19.841884-05:00 claude-cloud systemd-logind[853]: New session c4296 of user claude.
2026-06-28T00:30:19.978426-05:00 claude-cloud systemd-logind[853]: New session c4297 of user claude.
2026-06-28T00:30:20.023551-05:00 claude-cloud systemd-logind[853]: Session c4297 logged out. Waiting for processes to exit.
2026-06-28T00:30:20.024950-05:00 claude-cloud systemd-logind[853]: Removed session c4297.
2026-06-28T00:30:20.963033-05:00 claude-cloud systemd-logind[853]: New session c4298 of user claude.
2026-06-28T00:30:21.000895-05:00 claude-cloud systemd-logind[853]: Session c4298 logged out. Waiting for processes to exit.
2026-06-28T00:30:21.002158-05:00 claude-cloud systemd-logind[853]: Removed session c4298.
2026-06-28T00:30:21.598978-05:00 claude-cloud systemd-logind[853]: New session c4299 of user claude.
2026-06-28T00:30:33.893735-05:2026-06-28T01:24:56.370316-05:00 claude-cloud sshd[4009918]: Invalid user bot1 from 102.88.137.213 port 17490
2026-06-28T01:24:56.530350-05:00 claude-cloud sshd[4009918]: Received disconnect from 102.88.137.213 port 17490:11: Bye Bye [preauth]
2026-06-28T01:24:56.530670-05:00 claude-cloud sshd[4009918]: Disconnected from invalid user bot1 102.88.137.213 port 17490 [preauth]
2026-06-28T01:25:01.063829-05:00 claude-cloud CRON[4009936]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-28T01:25:01.069893-05:00 claude-cloud CRON[4009936]: pam_unix(cron:session): session closed for user root
2026-06-28T01:25:17.687857-05:00 claude-cloud systemd-logind[853]: New session c4342 of user claude.
2026-06-28T01:25:17.978581-05:00 claude-cloud systemd-logind[853]: Session c4342 logged out. Waiting for processes to exit.
2026-06-28T01:25:17.981137-05:00 claude-cloud systemd-logind[853]: Removed session c4342.
2026-06-28T01:25:20.003128-05:00 claude-cloud sshd[4009994]: Invalid user jb from 150.95.82.21 port 48964
2026-06-28T01:25:20.174417-05:00 claude-cloud sshd[4009996]: Invalid user ftpuser from 20.173.116.24 port 39826
2026-06-28T01:25:20.224055-05:00 claude-cloud sshd[4009994]: Received disconnect from 150.95.82.21 port 48964:11: Bye Bye [preauth]
2026-06-28T01:25:20.224257-05:00 claude-cloud sshd[4009994]: Disconnected from invalid user jb 150.95.82.21 port 48964 [preauth]
2026-06-28T01:25:20.267535-05:00 claude-cloud sshd[4009996]: Received disconnect from 20.173.116.24 port 39826:11: Bye Bye [preauth]
2026-06-28T01:25:20.267733-05:00 claude-cloud sshd[4009996]: Disconnected from invalid user ftpuser 20.173.116.24 port 39826 [preauth]
2026-06-28T01:26:05.364484-05:00 claude-cloud sshd[4010121]: Invalid user minecraft from 91.92.40.237 port 47064
2026-06-28T01:26:05.678004-05:00 claude-cloud sshd[4010121]: Connection closed by invalid user minecraft 91.92.40.237 port 47064 [preauth]
2026-06-28T01:26:11.563007-05:00 claude-cloud sshd[4010133]: Invalid user ubuntu from 45.198.224.46 port 46492
2026-06-28T01:26:12.273231-05:00 claude-cloud sshd[4010133]: Connection closed by invalid user ubuntu 45.198.224.46 port 46492 [preauth]
2026-06-28T01:26:53.244546-05:00 claude-cloud sshd[4010261]: Invalid user mongod from 102.88.137.213 port 49886
2026-06-28T01:26:53.420867-05:00 claude-cloud sshd[4010261]: Received disconnect from 102.88.137.213 port 49886:11: Bye Bye [preauth]
2026-06-28T01:26:53.421160-05:00 claude-cloud sshd[4010261]: Disconnected from invalid user mongod 102.88.137.213 port 49886 [preauth]
2026-06-28T01:27:11.255996-05:00 claude-cloud sshd[4010318]: Invalid user pilot from 150.95.82.21 port 55568
2026-06-28T01:27:11.460062-05:00 claude-cloud sshd[4010318]: Received disconnect from 150.95.82.21 port 55568:11: Bye Bye [preauth]
2026-06-28T01:27:11.460261-05:00 claude-cloud sshd[4010318]: Disconnected from invalid user pilot 150.95.82.21 port 55568 [preauth]
2026-06-28T01:27:19.108400-05:00 claude-cloud sshd[4010327]: Connection closed by 45.148.10.121 port 32806 [preauth]
2026-06-28T01:27:24.311206-05:00 claude-cloud sshd[4010332]: Connection closed by authenticating user root 115.248.8.65 port 51008 [preauth]
2026-06-28T01:27:36.473316-05:00 claude-cloud sshd[4010388]: Invalid user inspector from 20.173.116.24 port 39656
2026-06-28T01:27:36.566952-05:00 claude-cloud sshd[4010388]: Received disconnect from 20.173.116.24 port 39656:11: Bye Bye [preauth]
2026-06-28T01:27:36.567221-05:00 claude-cloud sshd[4010388]: Disconnected from invalid user inspector 20.173.116.24 port 39656 [preauth]
2026-06-28T01:27:40.794212-05:00 claude-cloud sshd[4010405]: Invalid user minecraft from 91.92.40.237 port 57962
2026-06-28T01:27:40.989391-05:00 claude-cloud sshd[4010405]: Connection closed by invalid user minecraft 91.92.40.237 port 57962 [preauth]
2026-06-28T01:27:44.414782-05:00 claude-cloud sshd[4010357]: Connection closed by authenticating user root 27.71.230.31 port 50220 [preauth]
2026-06-28T01:28:52.158226-05:00 claude-cloud sshd[4010601]: Invalid user inspector from 102.88.137.213 port 33467
2026-06-28T01:28:52.323361-05:00 claude-cloud sshd[4010601]: Received disconnect from 102.88.137.213 port 33467:11: Bye Bye [preauth]
2026-06-28T01:28:52.323515-05:00 claude-cloud sshd[4010601]: Disconnected from invalid user inspector 102.88.137.213 port 33467 [preauth]
2026-06-28T01:29:05.920869-05:00 claude-cloud sshd[4010629]: Received disconnect from 150.95.82.21 port 33926:11: Bye Bye [preauth]
2026-06-28T01:29:05.921205-05:00 claude-cloud sshd[4010629]: Disconnected from authenticating user root 150.95.82.21 port 33926 [preauth]
2026-06-28T01:29:19.792990-05:00 claude-cloud sshd[4010679]: Invalid user minecraft from 91.92.40.237 port 45620
2026-06-28T01:29:20.062585-05:00 claude-cloud sshd[4010679]: Connection closed by invalid user minecraft 91.92.40.237 port 45620 [preauth]
2026-06-28T01:29:54.639557-05:00 claude-cloud sshd[4010796]: Invalid user audit from 20.173.116.24 port 59908
2026-06-28T01:29:54.730679-05:00 claude-cloud sshd[4010796]: Received disconnect from 20.173.116.24 port 59908:11: Bye Bye [preauth]
2026-06-28T01:29:54.730850-05:00 claude-cloud sshd[4010796]: Disconnected from invalid user audit 20.173.116.24 port 59908 [preauth]
2026-06-28T01:30:21.350002-05:00 claude-cloud systemd-logind[853]: New session c4343 of user claude.
2026-06-28T01:30:21.637758-05:00 claude-cloud systemd-logind[853]: Session c4343 logged out. Waiting for processes to exit.
2026-06-28T01:30:21.639782-05:00 claude-cloud systemd-logind[853]: Removed session c4343.
2026-06-28T01:30:49.928327-05:00 claude-cloud sshd[4010952]: Invalid user audit from 102.88.137.213 port 1511
2026-06-28T01:30:50.096157-05:00 claude-cloud sshd[4010952]: Received disconnect from 102.88.137.213 port 1511:11: Bye Bye [preauth]
2026-06-28T01:30:50.096384-05:00 claude-cloud sshd[4010952]: Disconnected from invalid user audit 102.88.137.213 port 1511 [preauth]
2026-06-28T01:30:58.311585-05:00 claude-cloud sshd[4010968]: Invalid user git from 91.92.40.237 port 57758
2026-06-28T01:30:58.591336-05:00 claude-cloud sshd[4010968]: Connection closed by invalid user git 91.92.40.237 port 57758 [preauth]
2026-06-28T01:31:06.823056-05:00 claude-cloud sshd[4010992]: Connection closed by authenticating user root 115.248.8.65 port 36158 [preauth]
2026-06-28T01:32:12.239820-05:00 claude-cloud sshd[4011186]: Received disconnect from 20.173.116.24 port 36332:11: Bye Bye [preauth]
2026-06-28T01:32:12.240339-05:00 claude-cloud sshd[4011186]: Disconnected from authenticating user root 20.173.116.24 port 36332 [preauth]
2026-06-28T01:32:34.989747-05:00 claude-cloud sshd[4011238]: Invalid user git from 91.92.40.237 port 33294
2026-06-28T01:32:35.261680-05:00 claude-cloud sshd[4011238]: Connection closed by invalid user git 91.92.40.237 port 33294 [preauth]
2026-06-28T01:32:43.976963-05:00 claude-cloud sshd[4011276]: Received disconnect from 102.88.137.213 port 17370:11: Bye Bye [preauth]
2026-06-28T01:32:43.977241-05:00 claude-cloud sshd[4011276]: Disconnected from authenticating user root 102.88.137.213 port 17370 [preauth]
2026-06-28T01:33:35.632403-05:00 claude-cloud sshd[4011451]: Connection closed by authenticating user root 27.71.230.31 port 43318 [preauth]
2026-06-28T01:34:31.152065-05:00 claude-cloud sshd[4011618]: Received disconnect from 20.173.116.24 port 33544:11: Bye Bye [preauth]
2026-06-28T01:34:31.152681-05:00 claude-cloud sshd[4011618]: Disconnected from authenticating user root 20.173.116.24 port 33544 [preauth]
2026-06-28T01:34:35.868105-05:00 claude-cloud sshd[4011632]: Invalid user jeremy from 102.88.137.213 port 33459
2026-06-28T01:34:36.038964-05:00 claude-cloud sshd[4011632]: Received disconnect from 102.88.137.213 port 33459:11: Bye Bye [preauth]
2026-06-28T01:34:36.039140-05:00 claude-cloud sshd[4011632]: Disconnected from invalid user jeremy 102.88.137.213 port 33459 [preauth]
2026-06-28T01:34:41.961806-05:00 claude-cloud sshd[4011647]: Connection closed by authenticating user root 115.248.8.65 port 35504 [preauth]
2026-06-28T01:35:01.080743-05:00 claude-cloud CRON[4011729]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-28T01:35:01.088411-05:00 claude-cloud CRON[4011729]: pam_unix(cron:session): session closed for user root
2026-06-28T01:35:25.001303-05:00 claude-cloud systemd-logind[853]: New session c4344 of user claude.
2026-06-28T01:35:25.305476-05:00 claude-cloud systemd-logind[853]: Session c4344 logged out. Waiting for processes to exit.
2026-06-28T01:35:25.307177-05:00 claude-cloud systemd-logind[853]: Removed session c4344.
2026-06-28T01:36:15.499557-05:00 claude-cloud sshd[4011944]: Invalid user boris from 45.198.224.46 port 41434
2026-06-28T01:36:16.304791-05:00 claude-cloud sshd[4011944]: Connection closed by invalid user boris 45.198.224.46 port 41434 [preauth]
2026-06-28T01:36:34.673228-05:00 claude-cloud sshd[4011989]: Received disconnect from 102.88.137.213 port 33541:11: Bye Bye [preauth]
2026-06-28T01:36:34.673793-05:00 claude-cloud sshd[4011989]: Disconnected from authenticating user root 102.88.137.213 port 33541 [preauth]
2026-06-28T01:36:54.569190-05:00 claude-cloud sshd[4012056]: Invalid user ftp_user from 20.173.116.24 port 49572
2026-06-28T01:36:54.666075-05:00 claude-cloud sshd[4012056]: Received disconnect from 20.173.116.24 port 49572:11: Bye Bye [preauth]
2026-06-28T01:36:54.666218-05:00 claude-cloud sshd[4012056]: Disconnected from invalid user ftp_user 20.173.116.24 port 49572 [preauth]
2026-06-28T01:38:26.371251-05:00 claude-cloud sshd[4012274]: Connection closed by authenticating user root 115.248.8.65 port 46106 [preauth]
2026-06-28T01:38:31.405806-05:00 claude-cloud sshd[4012314]: Invalid user git from 102.88.137.213 port 1467
2026-06-28T01:38:31.573434-05:00 claude-cloud sshd[4012314]: Received disconnect from 102.88.137.213 port 1467:11: Bye Bye [preauth]
2026-06-28T01:38:31.573679-05:00 claude-cloud sshd[4012314]: Disconnected from invalid user git 102.88.137.213 port 1467 [preauth]
2026-06-28T01:39:17.710333-05:00 claude-cloud sshd[4012453]: Invalid user git from 20.173.116.24 port 44898
2026-06-28T01:39:17.805498-05:00 claude-cloud sshd[4012453]: Received disconnect from 20.173.116.24 port 44898:11: Bye Bye [preauth]
2026-06-28T01:39:17.805860-05:00 claude-cloud sshd[4012453]: Disconnected from invalid user git 20.173.116.24 port 44898 [preauth]
2026-06-28T01:39:41.718565-05:00 claude-cloud sshd[4012522]: Received disconnect from 13.71.92.229 port 46134:11: Bye Bye [preauth]
2026-06-28T01:39:41.719182-05:00 claude-cloud sshd[4012522]: Disconnected from authenticating user root 13.71.92.229 port 46134 [preauth]
2026-06-28T01:40:26.893231-05:00 claude-cloud sshd[4012645]: Invalid user manu from 102.88.137.213 port 33711
2026-06-28T01:40:27.057886-05:00 claude-cloud sshd[4012645]: Received disconnect from 102.88.137.213 port 33711:11: Bye Bye [preauth]
2026-06-28T01:40:27.058181-05:00 claude-cloud sshd[4012645]: Disconnected from invalid user manu 102.88.137.213 port 33711 [preauth]
2026-06-28T01:40:29.385448-05:00 claude-cloud systemd-logind[853]: New session c4345 of user claude.
2026-06-28T01:40:29.764603-05:00 claude-cloud systemd-logind[853]: Session c4345 logged out. Waiting for processes to exit.
2026-06-28T01:40:29.765684-05:00 claude-cloud systemd-logind[853]: Removed session c4345.
2026-06-28T01:40:43.379318-05:00 claude-cloud sshd[4012466]: Connection closed by authenticating user root 27.71.230.31 port 45230 [preauth]
2026-06-28T01:41:16.481926-05:00 claude-cloud sshd[4012797]: Received disconnect from 172.245.225.106 port 53418:11: disconnected by user [preauth]
2026-06-28T01:41:16.482659-05:00 claude-cloud sshd[4012797]: Disconnected from authenticating user root 172.245.225.106 port 53418 [preauth]
2026-06-28T01:41:39.672443-05:00 claude-cloud sshd[4012869]: Invalid user erick from 20.173.116.24 port 50830
2026-06-28T01:41:39.771683-05:00 claude-cloud sshd[4012869]: Received disconnect from 20.173.116.24 port 50830:11: Bye Bye [preauth]
2026-06-28T01:41:39.771927-05:00 claude-cloud sshd[4012869]: Disconnected from invalid user erick 20.173.116.24 port 50830 [preauth]
2026-06-28T01:42:07.804506-05:00 claude-cloud sshd[4012941]: Invalid user test from 115.248.8.65 port 52312
2026-06-28T01:42:08.383385-05:00 claude-cloud sshd[4012941]: Connection closed by invalid user test 115.248.8.65 port 52312 [preauth]
2026-06-28T01:42:18.010859-05:00 claude-cloud sshd[4012979]: Invalid user david from 58.209.82.184 port 42145
2026-06-28T01:42:18.182021-05:00 claude-cloud sshd[4012979]: Received disconnect from 58.209.82.184 port 42145:11: Bye Bye [preauth]
2026-06-28T01:42:18.182367-05:00 claude-cloud sshd[4012979]: Disconnected from invalid user david 58.209.82.184 port 42145 [preauth]
2026-06-28T01:42:28.661243-05:00 claude-cloud sshd[4013003]: Received disconnect from 102.88.137.213 port 1331:11: Bye Bye [preauth]
2026-06-28T01:42:28.661867-05:00 claude-cloud sshd[4013003]: Disconnected from authenticating user root 102.88.137.213 port 1331 [preauth]
2026-06-28T01:43:13.271411-05:00 claude-cloud sshd[4013195]: Connection closed by 161.35.47.134 port 57056
2026-06-28T01:43:38.062483-05:00 claude-cloud sshd[4013260]: Invalid user git from 91.92.40.237 port 40236
2026-06-28T01:43:38.149796-05:00 claude-cloud sshd[4013260]: Connection closed by invalid user git 91.92.40.237 port 40236 [preauth]
2026-06-28T01:44:00.570546-05:00 claude-cloud sshd[4013329]: Invalid user jeremy from 20.173.116.24 port 48992
2026-06-28T01:44:00.662035-05:00 claude-cloud sshd[4013329]: Received disconnect from 20.173.116.24 port 48992:11: Bye Bye [preauth]
2026-06-28T01:44:00.662249-05:00 claude-cloud sshd[4013329]: Disconnected from invalid user jeremy 20.173.116.24 port 48992 [preauth]
2026-06-28T01:44:28.367208-05:00 claude-cloud sshd[4013404]: Received disconnect from 102.88.137.213 port 33617:11: Bye Bye [preauth]
2026-06-28T01:44:28.367618-05:00 claude-cloud sshd[4013404]: Disconnected from authenticating user root 102.88.137.213 port 33617 [preauth]
2026-06-28T01:45:01.101189-05:00 claude-cloud CRON[4013523]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-28T01:45:01.108339-05:00 claude-cloud CRON[4013523]: pam_unix(cron:session): session closed for user root
2026-06-28T01:45:15.909418-05:00 claude-cloud sshd[4013565]: Invalid user jenkins from 91.92.40.237 port 39510
2026-06-28T01:45:16.322607-05:00 claude-cloud sshd[4013565]: Connection closed by invalid user jenkins 91.92.40.237 port 39510 [preauth]
2026-06-28T01:45:31.153488-05:00 claude-cloud sshd[4013567]: Connection closed by authenticating user root 27.71.230.31 port 36836 [preauth]
2026-06-28T01:45:32.596477-05:00 claude-cloud sshd[4013607]: Invalid user adeel from 58.209.82.184 port 58665
2026-06-28T01:45:32.764922-05:00 claude-cloud sshd[4013607]: Received disconnect from 58.209.82.184 port 58665:11: Bye Bye [preauth]
2026-06-28T01:45:32.765139-05:00 claude-cloud sshd[4013607]: Disconnected from invalid user adeel 58.209.82.184 port 58665 [preauth]
2026-06-28T01:45:33.378314-05:00 claude-cloud systemd-logind[853]: New session c4346 of user claude.
2026-06-28T01:45:33.644592-05:00 claude-cloud systemd-logind[853]: Session c4346 logged out. Waiting for processes to exit.
2026-06-28T01:45:33.645916-05:00 claude-cloud systemd-logind[853]: Removed session c4346.
2026-06-28T01:45:52.244521-05:00 claude-cloud sshd[4013657]: Invalid user user from 115.248.8.65 port 54862
2026-06-28T01:45:52.719173-05:00 claude-cloud sshd[4013657]: Connection closed by invalid user user 115.248.8.65 port 54862 [preauth]
2026-06-28T01:46:10.633933-05:00 claude-cloud sshd[4013694]: Connection closed by authenticating user root 45.198.224.46 port 39064 [preauth]
2026-06-28T01:46:16.091930-05:00 claude-cloud sshd[4013725]: Received disconnect from 20.173.116.24 port 54716:11: Bye Bye [preauth]
2026-06-28T01:46:16.092308-05:00 claude-cloud sshd[4013725]: Disconnected from authenticating user root 20.173.116.24 port 54716 [preauth]
2026-06-28T01:46:22.681722-05:00 claude-cloud sshd[4013750]: Received disconnect from 102.88.137.213 port 1339:11: Bye Bye [preauth]
2026-06-28T01:46:22.682068-05:00 claude-cloud sshd[4013750]: Disconnected from authenticating user root 102.88.137.213 port 1339 [preauth]
2026-06-28T01:46:36.999230-05:00 claude-cloud sshd[4013784]: Invalid user ftptest from 58.209.82.184 port 37598
2026-06-28T01:46:37.199111-05:00 claude-cloud sshd[4013784]: Received disconnect from 58.209.82.184 port 37598:11: Bye Bye [preauth]
2026-06-28T01:46:37.199502-05:00 claude-cloud sshd[4013784]: Disconnected from invalid user ftptest 58.209.82.184 port 37598 [preauth]
2026-06-28T01:46:55.218150-05:00 claude-cloud sshd[4013864]: Invalid user jenkins from 91.92.40.237 port 58948
2026-06-28T01:46:55.578296-05:00 claude-cloud sshd[4013864]: Connection closed by invalid user jenkins 91.92.40.237 port 58948 [preauth]
2026-06-28T01:47:05.534675-05:00 claude-cloud sshd[4013888]: Connection closed by 161.35.47.134 port 48082
2026-06-28T01:48:03.131879-05:00 claude-cloud sshd[4014056]: Invalid user testuser from 116.123.150.231 port 44856
2026-06-28T01:48:03.358055-05:00 claude-cloud sshd[4014056]: Received disconnect from 116.123.150.231 port 44856:11: Bye Bye [preauth]
2026-06-28T01:48:03.358222-05:00 claude-cloud sshd[4014056]: Disconnected from invalid user testuser 116.123.150.231 port 44856 [preauth]
2026-06-28T01:48:31.572456-05:00 claude-cloud sshd[4014131]: Invalid user jenkins from 91.92.40.237 port 37482
2026-06-28T01:48:31.660656-05:00 claude-cloud sshd[4014131]: Connection closed by invalid user jenkins 91.92.40.237 port 37482 [preauth]
2026-06-28T01:48:32.534147-05:00 claude-cloud sshd[4014133]: Invalid user ben from 20.173.116.24 port 50672
2026-06-28T01:48:32.626208-05:00 claude-cloud sshd[4014133]: Received disconnect from 20.173.116.24 port 50672:11: Bye Bye [preauth]
2026-06-28T01:48:32.626556-05:00 claude-cloud sshd[4014133]: Disconnected from invalid user ben 20.173.116.24 port 50672 [preauth]
2026-06-28T01:49:36.918266-05:00 claude-cloud sshd[4014304]: Connection closed by authenticating user root 115.248.8.65 port 52740 [preauth]
2026-06-28T01:50:06.812268-05:00 claude-cloud sshd[4014394]: Invalid user jenkins from 91.92.40.237 port 50758
2026-06-28T01:50:07.089433-05:00 claude-cloud sshd[4014394]: Connection closed by invalid user jenkins 91.92.40.237 port 50758 [preauth]
2026-06-28T01:50:36.298963-05:00 claude-cloud sshd[4014492]: Received disconnect from 208.115.214.194 port 59236:11: disconnected by user [preauth]
2026-06-28T01:50:36.299126-05:00 claude-cloud sshd[4014492]: Disconnected from authenticating user root 208.115.214.194 port 59236 [preauth]
2026-06-28T01:50:37.177872-05:00 claude-cloud systemd-logind[853]: New session c4347 of user claude.
2026-06-28T01:50:37.429947-05:00 claude-cloud systemd-logind[853]: Session c4347 logged out. Waiting for processes to exit.
2026-06-28T01:50:37.431888-05:00 claude-cloud systemd-logind[853]: Removed session c4347.
2026-06-28T01:50:54.250878-05:00 claude-cloud sshd[4014574]: Received disconnect from 20.173.116.24 port 59610:11: Bye Bye [preauth]
2026-06-28T01:50:54.251036-05:00 claude-cloud sshd[4014574]: Disconnected from authenticating user root 20.173.116.24 port 59610 [preauth]
2026-06-28T01:51:28.146467-05:00 claude-cloud sshd[4014636]: Connection closed by authenticating user root 27.71.230.31 port 50868 [preauth]
2026-06-28T01:53:04.429817-05:00 claude-cloud sshd[4014957]: Received disconnect from 13.71.92.229 port 32856:11: Bye Bye [preauth]
2026-06-28T01:53:04.429964-05:00 claude-cloud sshd[4014957]: Disconnected from authenticating user root 13.71.92.229 port 32856 [preauth]
2026-06-28T01:53:15.304030-05:00 claude-cloud sshd[4014978]: Invalid user admin from 115.248.8.65 port 57544
2026-06-28T01:53:15.831043-05:00 claude-cloud sshd[4014978]: Connection closed by invalid user admin 115.248.8.65 port 57544 [preauth]
2026-06-28T01:53:19.084639-05:00 claude-cloud sshd[4014998]: Received disconnect from 20.173.116.24 port 53802:11: Bye Bye [preauth]
2026-06-28T01:53:19.084786-05:00 claude-cloud sshd[4014998]: Disconnected from authenticating user root 20.173.116.24 port 53802 [preauth]
2026-06-28T01:54:27.416396-05:00 claude-cloud sshd[4015188]: Invalid user Test from 116.123.150.231 port 46844
2026-06-28T01:54:27.644010-05:00 claude-cloud sshd[4015188]: Received disconnect from 116.123.150.231 port 46842026-06-28T02:48:31.795797-05:00 claude-cloud sshd[4025596]: Received disconnect from 13.71.92.229 port 39486:11: Bye Bye [preauth]
2026-06-28T02:48:31.796162-05:00 claude-cloud sshd[4025596]: Disconnected from authenticating user root 13.71.92.229 port 39486 [preauth]
2026-06-28T02:48:57.133312-05:00 claude-cloud sshd[4025671]: Invalid user linaro from 115.248.8.65 port 48668
2026-06-28T02:48:57.543760-05:00 claude-cloud sshd[4025671]: Connection closed by invalid user linaro 115.248.8.65 port 48668 [preauth]
2026-06-28T02:49:08.983936-05:00 claude-cloud sshd[4025702]: Connection closed by authenticating user www-data 91.92.40.237 port 49674 [preauth]
2026-06-28T02:49:35.691353-05:00 claude-cloud sshd[4025789]: Invalid user azure from 116.123.150.231 port 45187
2026-06-28T02:49:35.923441-05:00 claude-cloud sshd[4025789]: Received disconnect from 116.123.150.231 port 45187:11: Bye Bye [preauth]
2026-06-28T02:49:35.923690-05:00 claude-cloud sshd[4025789]: Disconnected from invalid user azure 116.123.150.231 port 45187 [preauth]
2026-06-28T02:49:46.377472-05:00 claude-cloud sshd[4025836]: Invalid user iktisat from 189.178.86.243 port 50402
2026-06-28T02:49:46.581237-05:00 claude-cloud sshd[4025836]: Received disconnect from 189.178.86.243 port 50402:11: Bye Bye [preauth]
2026-06-28T02:49:46.581428-05:00 claude-cloud sshd[4025836]: Disconnected from invalid user iktisat 189.178.86.243 port 50402 [preauth]
2026-06-28T02:50:38.988969-05:00 claude-cloud sshd[4025976]: Connection closed by authenticating user www-data 91.92.40.237 port 35670 [preauth]
2026-06-28T02:51:05.299745-05:00 claude-cloud sshd[4026064]: Received disconnect from 13.71.92.229 port 49888:11: Bye Bye [preauth]
2026-06-28T02:51:05.300038-05:00 claude-cloud sshd[4026064]: Disconnected from authenticating user root 13.71.92.229 port 49888 [preauth]
2026-06-28T02:51:17.578972-05:00 claude-cloud sshd[4026069]: Connection closed by authenticating user root 27.71.230.31 port 52016 [preauth]
2026-06-28T02:51:29.033718-05:00 claude-cloud systemd-logind[853]: New session c4359 of user claude.
2026-06-28T02:51:29.356633-05:00 claude-cloud systemd-logind[853]: Session c4359 logged out. Waiting for processes to exit.
2026-06-28T02:51:29.357444-05:00 claude-cloud systemd-logind[853]: Removed session c4359.
2026-06-28T02:51:32.163852-05:00 claude-cloud sshd[4026160]: Connection closed by 161.35.47.134 port 60618
2026-06-28T02:51:41.203926-05:00 claude-cloud sshd[4026180]: Invalid user forum3 from 189.178.86.243 port 57572
2026-06-28T02:51:41.403394-05:00 claude-cloud sshd[4026180]: Received disconnect from 189.178.86.243 port 57572:11: Bye Bye [preauth]
2026-06-28T02:51:41.403747-05:00 claude-cloud sshd[4026180]: Disconnected from invalid user forum3 189.178.86.243 port 57572 [preauth]
2026-06-28T02:51:56.217829-05:00 claude-cloud sshd[4026234]: Invalid user gmodserver from 116.123.150.231 port 36503
2026-06-28T02:51:56.442868-05:00 claude-cloud sshd[4026234]: Received disconnect from 116.123.150.231 port 36503:11: Bye Bye [preauth]
2026-06-28T02:51:56.443044-05:00 claude-cloud sshd[4026234]: Disconnected from invalid user gmodserver 116.123.150.231 port 36503 [preauth]
2026-06-28T02:52:11.067882-05:00 claude-cloud sshd[4026274]: Connection closed by authenticating user www-data 91.92.40.237 port 55158 [preauth]
2026-06-28T02:52:33.573372-05:00 claude-cloud sshd[4026325]: Connection closed by authenticating user root 115.248.8.65 port 50572 [preauth]
2026-06-28T02:53:38.448512-05:00 claude-cloud sshd[4026516]: Invalid user mobiel from 189.178.86.243 port 36494
2026-06-28T02:53:38.649795-05:00 claude-cloud sshd[4026516]: Received disconnect from 189.178.86.243 port 36494:11: Bye Bye [preauth]
2026-06-28T02:53:38.650102-05:00 claude-cloud sshd[4026516]: Disconnected from invalid user mobiel 189.178.86.243 port 36494 [preauth]
2026-06-28T02:53:41.585040-05:00 claude-cloud sshd[4026543]: Invalid user ubuntu from 13.71.92.229 port 60674
2026-06-28T02:53:41.749613-05:00 claude-cloud sshd[4026543]: Received disconnect from 13.71.92.229 port 60674:11: Bye Bye [preauth]
2026-06-28T02:53:41.749785-05:00 claude-cloud sshd[4026543]: Disconnected from invalid user ubuntu 13.71.92.229 port 60674 [preauth]
2026-06-28T02:53:41.851232-05:00 claude-cloud sshd[4026545]: Connection closed by authenticating user backup 91.92.40.237 port 42178 [preauth]
2026-06-28T02:54:18.262453-05:00 claude-cloud sshd[4026665]: Invalid user usuario2 from 116.123.150.231 port 56067
2026-06-28T02:54:18.489092-05:00 claude-cloud sshd[4026665]: Received disconnect from 116.123.150.231 port 56067:11: Bye Bye [preauth]
2026-06-28T02:54:18.489258-05:00 claude-cloud sshd[4026665]: Disconnected from invalid user usuario2 116.123.150.231 port 56067 [preauth]
2026-06-28T02:54:57.869145-05:00 claude-cloud sshd[4026773]: Invalid user admin from 193.46.255.86 port 60918
2026-06-28T02:54:57.894500-05:00 claude-cloud sshd[4026773]: Connection closed by invalid user admin 193.46.255.86 port 60918 [preauth]
2026-06-28T02:55:01.262847-05:00 claude-cloud CRON[4026787]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-28T02:55:01.271420-05:00 claude-cloud CRON[4026787]: pam_unix(cron:session): session closed for user root
2026-06-28T02:55:08.664220-05:00 claude-cloud sshd[4026809]: Connection closed by authenticating user backup 91.92.40.237 port 51794 [preauth]
2026-06-28T02:55:34.161619-05:00 claude-cloud sshd[4026869]: Invalid user elvis from 189.178.86.243 port 43688
2026-06-28T02:55:34.357644-05:00 claude-cloud sshd[4026869]: Received disconnect from 189.178.86.243 port 43688:11: Bye Bye [preauth]
2026-06-28T02:55:34.358022-05:00 claude-cloud sshd[4026869]: Disconnected from invalid user elvis 189.178.86.243 port 43688 [preauth]
2026-06-28T02:55:44.593369-05:00 claude-cloud sshd[4026897]: Invalid user ubuntu from 45.198.224.46 port 56476
2026-06-28T02:55:45.602062-05:00 claude-cloud sshd[4026897]: Connection closed by invalid user ubuntu 45.198.224.46 port 56476 [preauth]
2026-06-28T02:56:15.090411-05:00 claude-cloud sshd[4026987]: Received disconnect from 13.71.92.229 port 43046:11: Bye Bye [preauth]
2026-06-28T02:56:15.090757-05:00 claude-cloud sshd[4026987]: Disconnected from authenticating user root 13.71.92.229 port 43046 [preauth]
2026-06-28T02:56:18.433239-05:00 claude-cloud sshd[4026986]: Connection closed by authenticating user root 115.248.8.65 port 49002 [preauth]
2026-06-28T02:56:33.722326-05:00 claude-cloud systemd-logind[853]: New session c4360 of user claude.
2026-06-28T02:56:34.031449-05:00 claude-cloud systemd-logind[853]: Session c4360 logged out. Waiting for processes to exit.
2026-06-28T02:56:34.032836-05:00 claude-cloud systemd-logind[853]: Removed session c4360.
2026-06-28T02:56:36.872051-05:00 claude-cloud sshd[4027070]: Connection closed by authenticating user backup 91.92.40.237 port 37484 [preauth]
2026-06-28T02:56:38.651839-05:00 claude-cloud sshd[4027075]: Invalid user deploy from 116.123.150.231 port 47398
2026-06-28T02:56:38.878415-05:00 claude-cloud sshd[4027075]: Received disconnect from 116.123.150.231 port 47398:11: Bye Bye [preauth]
2026-06-28T02:56:38.878609-05:00 claude-cloud sshd[4027075]: Disconnected from invalid user deploy 116.123.150.231 port 47398 [preauth]
2026-06-28T02:57:20.138361-05:00 claude-cloud sshd[4027258]: Connection closed by authenticating user root 27.71.230.31 port 60080 [preauth]
2026-06-28T02:57:30.169687-05:00 claude-cloud sshd[4027291]: Invalid user tutorial from 189.178.86.243 port 50872
2026-06-28T02:57:30.365342-05:00 claude-cloud sshd[4027291]: Received disconnect from 189.178.86.243 port 50872:11: Bye Bye [preauth]
2026-06-28T02:57:30.365518-05:00 claude-cloud sshd[4027291]: Disconnected from invalid user tutorial 189.178.86.243 port 50872 [preauth]
2026-06-28T02:58:04.885179-05:00 claude-cloud sshd[4027384]: Connection closed by authenticating user backup 91.92.40.237 port 59600 [preauth]
2026-06-28T02:58:46.467830-05:00 claude-cloud sshd[4027510]: Invalid user io from 13.71.92.229 port 53590
2026-06-28T02:58:46.629989-05:00 claude-cloud sshd[4027510]: Received disconnect from 13.71.92.229 port 53590:11: Bye Bye [preauth]
2026-06-28T02:58:46.630168-05:00 claude-cloud sshd[4027510]: Disconnected from invalid user io 13.71.92.229 port 53590 [preauth]
2026-06-28T02:59:00.960460-05:00 claude-cloud sshd[4027577]: Invalid user ubuntu from 116.123.150.231 port 38730
2026-06-28T02:59:01.192253-05:00 claude-cloud sshd[4027577]: Received disconnect from 116.123.150.231 port 38730:11: Bye Bye [preauth]
2026-06-28T02:59:01.192434-05:00 claude-cloud sshd[4027577]: Disconnected from invalid user ubuntu 116.123.150.231 port 38730 [preauth]
2026-06-28T02:59:34.878060-05:00 claude-cloud sshd[4027689]: Connection closed by authenticating user backup 91.92.40.237 port 38050 [preauth]
2026-06-28T03:00:11.589404-05:00 claude-cloud sshd[4027768]: Connection closed by authenticating user root 115.248.8.65 port 34312 [preauth]
2026-06-28T03:01:05.844745-05:00 claude-cloud sshd[4027932]: Connection closed by authenticating user backup 91.92.40.237 port 34540 [preauth]
2026-06-28T03:01:17.245155-05:00 claude-cloud sshd[4027984]: Invalid user localadmin from 13.71.92.229 port 35982
2026-06-28T03:01:17.409937-05:00 claude-cloud sshd[4027984]: Received disconnect from 13.71.92.229 port 35982:11: Bye Bye [preauth]
2026-06-28T03:01:17.410224-05:00 claude-cloud sshd[4027984]: Disconnected from invalid user localadmin 13.71.92.229 port 35982 [preauth]
2026-06-28T03:01:27.934615-05:00 claude-cloud sshd[4028015]: Received disconnect from 116.123.150.231 port 58297:11: Bye Bye [preauth]
2026-06-28T03:01:27.934940-05:00 claude-cloud sshd[4028015]: Disconnected from authenticating user root 116.123.150.231 port 58297 [preauth]
2026-06-28T03:01:38.529599-05:00 claude-cloud systemd-logind[853]: New session c4361 of user claude.
2026-06-28T03:01:38.892250-05:00 claude-cloud systemd-logind[853]: Session c4361 logged out. Waiting for processes to exit.
2026-06-28T03:01:38.894774-05:00 claude-cloud systemd-logind[853]: Removed session c4361.
2026-06-28T03:02:36.011458-05:00 claude-cloud sshd[4028223]: Connection closed by authenticating user backup 91.92.40.237 port 36028 [preauth]
2026-06-28T03:03:34.294551-05:00 claude-cloud sshd[4028404]: Invalid user bbx from 13.71.92.229 port 46540
2026-06-28T03:03:34.453364-05:00 claude-cloud sshd[4028404]: Received disconnect from 13.71.92.229 port 46540:11: Bye Bye [preauth]
2026-06-28T03:03:34.453720-05:00 claude-cloud sshd[4028404]: Disconnected from invalid user bbx 13.71.92.229 port 46540 [preauth]
2026-06-28T03:03:48.106773-05:00 claude-cloud sshd[4028434]: Connection closed by authenticating user root 115.248.8.65 port 37926 [preauth]
2026-06-28T03:04:06.405238-05:00 claude-cloud sshd[4028499]: Connection closed by authenticating user backup 91.92.40.237 port 41684 [preauth]
2026-06-28T03:04:31.450201-05:00 claude-cloud sshd[4028543]: Connection closed by authenticating user root 27.71.230.31 port 50028 [preauth]
2026-06-28T03:05:01.285226-05:00 claude-cloud CRON[4028655]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-28T03:05:01.290204-05:00 claude-cloud CRON[4028655]: pam_unix(cron:session): session closed for user root
2026-06-28T03:05:36.229726-05:00 claude-cloud sshd[4028758]: Connection closed by authenticating user backup 91.92.40.237 port 56930 [preauth]
2026-06-28T03:05:47.496700-05:00 claude-cloud sshd[4028780]: Connection closed by authenticating user root 45.198.224.46 port 38640 [preauth]
2026-06-28T03:06:42.721624-05:00 claude-cloud systemd-logind[853]: New session c4362 of user claude.
2026-06-28T03:06:43.011758-05:00 claude-cloud systemd-logind[853]: Session c4362 logged out. Waiting for processes to exit.
2026-06-28T03:06:43.012962-05:00 claude-cloud systemd-logind[853]: Removed session c4362.
2026-06-28T03:07:05.792011-05:00 claude-cloud sshd[4029087]: Invalid user support from 91.92.40.237 port 37192
2026-06-28T03:07:05.957436-05:00 claude-cloud sshd[4029087]: Connection closed by invalid user support 91.92.40.237 port 37192 [preauth]
2026-06-28T03:07:34.828137-05:00 claude-cloud sshd[4029155]: Connection closed by authenticating user root 115.248.8.65 port 41552 [preauth]
2026-06-28T03:08:35.545798-05:00 claude-cloud sshd[4029358]: Invalid user support from 91.92.40.237 port 40722
2026-06-28T03:08:35.761654-05:00 claude-cloud sshd[4029358]: Connection closed by invalid user support 91.92.40.237 port 40722 [preauth]
2026-06-28T03:10:01.299242-05:00 claude-cloud CRON[4029585]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-28T03:10:01.303887-05:00 claude-cloud CRON[4029585]: pam_unix(cron:session): session closed for user root
2026-06-28T03:10:03.538431-05:00 claude-cloud sshd[4029597]: Invalid user support from 91.92.40.237 port 50420
2026-06-28T03:10:03.569946-05:00 claude-cloud sshd[4029597]: Connection closed by invalid user support 91.92.40.237 port 50420 [preauth]
2026-06-28T03:10:07.457259-05:00 claude-cloud sshd[4029612]: Invalid user dbadmin from 20.219.91.90 port 42776
2026-06-28T03:10:07.606950-05:00 claude-cloud sshd[4029612]: Received disconnect from 20.219.91.90 port 42776:11: Bye Bye [preauth]
2026-06-28T03:10:07.607221-05:00 claude-cloud sshd[4029612]: Disconnected from invalid user dbadmin 20.219.91.90 port 42776 [preauth]
2026-06-28T03:10:40.280139-05:00 claude-cloud sshd[4029673]: Connection closed by authenticating user root 27.71.230.31 port 47106 [preauth]
2026-06-28T03:11:22.929378-05:00 claude-cloud sshd[4029846]: Connection closed by authenticating user root 115.248.8.65 port 42032 [preauth]
2026-06-28T03:11:33.160620-05:00 claude-cloud sshd[4029883]: Invalid user support from 91.92.40.237 port 42156
2026-06-28T03:11:33.270713-05:00 claude-cloud sshd[4029883]: Connection closed by invalid user support 91.92.40.237 port 42156 [preauth]
2026-06-28T03:11:47.043591-05:00 claude-cloud systemd-logind[853]: New session c4363 of user claude.
2026-06-28T03:11:47.455686-05:00 claude-cloud systemd-logind[853]: Session c4363 logged out. Waiting for processes to exit.
2026-06-28T03:11:47.457593-05:00 claude-cloud systemd-logind[853]: Removed session c4363.
2026-06-28T03:13:01.091670-05:00 claude-cloud sshd[4030152]: Invalid user support from 91.92.40.237 port 33532
2026-06-28T03:13:01.223306-05:00 claude-cloud sshd[4030152]: Connection closed by invalid user support 91.92.40.237 port 33532 [preauth]
2026-06-28T03:14:20.861160-05:00 claude-cloud sshd[4030383]: Connection closed by 161.35.47.134 port 59994
2026-06-28T03:15:01.312962-05:00 claude-cloud CRON[4030488]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-28T03:15:01.319960-05:00 claude-cloud CRON[4030488]: pam_unix(cron:session): session closed for user root
2026-06-28T03:15:03.782450-05:00 claude-cloud sshd[4030486]: Invalid user admin from 115.248.8.65 port 53094
2026-06-28T03:15:04.550675-05:00 claude-cloud sshd[4030486]: Connection closed by invalid user admin 115.248.8.65 port 53094 [preauth]
2026-06-28T03:15:57.314331-05:00 claude-cloud sshd[4030655]: Connection closed by authenticating user root 45.198.224.46 port 40602 [preauth]
2026-06-28T03:16:30.568518-05:00 claude-cloud sshd[4030740]: Connection closed by authenticating user root 27.71.230.31 port 51632 [preauth]
2026-06-28T03:16:51.839907-05:00 claude-cloud systemd-logind[853]: New session c4364 of user claude.
2026-06-28T03:16:52.130606-05:00 claude-cloud systemd-logind[853]: Session c4364 logged out. Waiting for processes to exit.
2026-06-28T03:16:52.132831-05:00 claude-cloud systemd-logind[853]: Removed session c4364.
2026-06-28T03:17:01.328811-05:00 claude-cloud CRON[4030873]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-28T03:17:01.334382-05:00 claude-cloud CRON[4030873]: pam_unix(cron:session): session closed for user root
2026-06-28T03:18:53.230476-05:00 claude-cloud sshd[4031247]: Connection closed by authenticating user root 115.248.8.65 port 34404 [preauth]
2026-06-28T03:20:46.165938-05:00 claude-cloud sshd[4031584]: Connection closed by authenticating user root 45.148.10.121 port 55000 [preauth]
2026-06-28T03:20:54.376939-05:00 claude-cloud sshd[4031565]: Connection closed by 167.94.146.59 port 45192 [preauth]
2026-06-28T03:21:04.333730-05:00 claude-cloud sshd[4031643]: banner exchange: Connection from 64.62.156.66 port 23546: invalid format
2026-06-28T03:21:11.650156-05:00 claude-cloud sshd[4031663]: Invalid user filemaker from 20.219.91.90 port 41714
2026-06-28T03:21:11.805450-05:00 claude-cloud sshd[4031663]: Received disconnect from 20.219.91.90 port 41714:11: Bye Bye [preauth]
2026-06-28T03:21:11.805789-05:00 claude-cloud sshd[4031663]: Disconnected from invalid user filemaker 20.219.91.90 port 41714 [preauth]
2026-06-28T03:21:56.830255-05:00 claude-cloud systemd-logind[853]: New session c4365 of user claude.
2026-06-28T03:21:57.122444-05:00 claude-cloud systemd-logind[853]: Session c4365 logged out. Waiting for processes to exit.
2026-06-28T03:21:57.123917-05:00 claude-cloud systemd-logind[853]: Removed session c4365.
2026-06-28T03:22:19.293918-05:00 claude-cloud sshd[4031904]: Invalid user dbadmin from 185.153.231.45 port 35704
2026-06-28T03:22:19.353366-05:00 claude-cloud sshd[4031904]: Received disconnect from 185.153.231.45 port 35704:11: Bye Bye [preauth]
2026-06-28T03:22:19.353531-05:00 claude-cloud sshd[4031904]: Disconnected from invalid user dbadmin 185.153.231.45 port 35704 [preauth]
2026-06-28T03:22:31.782657-05:00 claude-cloud sshd[4031906]: Connection closed by authenticating user root 27.71.230.31 port 53990 [preauth]
2026-06-28T03:22:37.859295-05:00 claude-cloud sshd[4031944]: Connection closed by authenticating user root 115.248.8.65 port 43778 [preauth]
2026-06-28T03:23:02.864121-05:00 claude-cloud sshd[4032005]: Invalid user hh from 20.219.91.90 port 48814
2026-06-28T03:23:03.018990-05:00 claude-cloud sshd[4032005]: Received disconnect from 20.219.91.90 port 48814:11: Bye Bye [preauth]
2026-06-28T03:23:03.019176-05:00 claude-cloud sshd[4032005]: Disconnected from invalid user hh 20.219.91.90 port 48814 [preauth]
2026-06-28T03:24:16.738920-05:00 claude-cloud sshd[4032245]: Invalid user developer from 91.92.40.237 port 44266
2026-06-28T03:24:16.758557-05:00 claude-cloud sshd[4032245]: Connection closed by invalid user developer 91.92.40.237 port 44266 [preauth]
2026-06-28T03:24:17.629386-05:00 claude-cloud sshd[4032254]: Connection closed by 161.35.47.134 port 60108
2026-06-28T03:25:01.347987-05:00 claude-cloud CRON[4032379]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-28T03:25:01.353335-05:00 claude-cloud CRON[4032379]: pam_unix(cron:session): session closed for user root
2026-06-28T03:25:02.103207-05:00 claude-cloud sshd[4032377]: Invalid user sed from 20.219.91.90 port 55934
2026-06-28T03:25:02.271530-05:00 claude-cloud sshd[4032377]: Received disconnect from 20.219.91.90 port 55934:11: Bye Bye [preauth]
2026-06-28T03:25:02.271817-05:00 claude-cloud sshd[4032377]: Disconnected from invalid user sed 20.219.91.90 port 55934 [preauth]
2026-06-28T03:25:12.847166-05:00 claude-cloud sshd[4032427]: banner exchange: Connection from 45.79.181.104 port 40298: invalid format
2026-06-28T03:25:13.043249-05:00 claude-cloud sshd[4032428]: banner exchange: Connection from 45.79.181.104 port 40304: invalid format
2026-06-28T03:25:43.026217-05:00 claude-cloud sshd[4032488]: Invalid user developer from 91.92.40.237 port 43412
2026-06-28T03:25:43.467950-05:00 claude-cloud sshd[4032488]: Connection closed by invalid user developer 91.92.40.237 port 43412 [preauth]
2026-06-28T03:25:52.690178-05:00 claude-cloud sshd[4032516]: Invalid user tomcat from 45.198.224.46 port 51602
2026-06-28T03:25:53.677972-05:00 claude-cloud sshd[4032516]: Connection closed by invalid user tomcat 45.198.224.46 port 51602 [preauth]
2026-06-28T03:26:17.497248-05:00 claude-cloud sshd[4032579]: Connection closed by authenticating user root 115.248.8.65 port 38960 [preauth]
2026-06-28T03:26:26.578080-05:00 claude-cloud sshd[4032631]: Invalid user sed from 185.153.231.45 port 57650
2026-06-28T03:26:26.636826-05:00 claude-cloud sshd[4032631]: Received disconnect from 185.153.231.45 port 57650:11: Bye Bye [preauth]
2026-06-28T03:26:26.636995-05:00 claude-cloud sshd[4032631]: Disconnected from invalid user sed 185.153.231.45 port 57650 [preauth]
2026-06-28T03:27:00.943070-05:00 claude-cloud systemd-logind[853]: New session c4366 of user claude.
2026-06-28T03:27:01.327883-05:00 claude-cloud systemd-logind[853]: Session c4366 logged out. Waiting for processes to exit.
2026-06-28T03:27:01.329708-05:00 claude-cloud systemd-logind[853]: Removed session c4366.
2026-06-28T03:27:07.491585-05:00 claude-cloud sshd[4032764]: Invalid user ltx from 20.219.91.90 port 34834
2026-06-28T03:27:07.651021-05:00 claude-cloud sshd[4032764]: Received disconnect from 20.219.91.90 port 34834:11: Bye Bye [preauth]
2026-06-28T03:27:07.651265-05:00 claude-cloud sshd[4032764]: Disconnected from invalid user ltx 20.219.91.90 port 34834 [preauth]
2026-06-28T03:27:09.869111-05:00 claude-cloud sshd[4032766]: Invalid user developer from 91.92.40.237 port 55314
2026-06-28T03:27:10.150939-05:00 claude-cloud sshd[4032766]: Connection closed by invalid user developer 91.92.40.237 port 55314 [preauth]
2026-06-28T03:28:30.700704-05:00 claude-cloud sshd[4033043]: Connection closed by authenticating user root 27.71.230.31 port 46214 [preauth]
2026-06-28T03:28:37.881216-05:00 claude-cloud sshd[4033094]: Invalid user developer from 91.92.40.237 port 36580
2026-06-28T03:28:38.027075-05:00 claude-cloud sshd[4033094]: Connection closed by invalid user developer 91.92.40.237 port 36580 [preauth]
2026-06-28T03:28:41.354341-05:00 claude-cloud sshd[4033110]: Invalid user admin from 2.57.121.25 port 34306
2026-06-28T03:28:41.380260-05:00 claude-cloud sshd[4033110]: Connection closed by invalid user admin 2.57.121.25 port 34306 [preauth]
2026-06-28T03:29:12.118571-05:00 claude-cloud sshd[4033182]: Invalid user ny from 20.219.91.90 port 41946
2026-06-28T03:29:12.277416-05:00 claude-cloud sshd[4033182]: Received disconnect from 20.219.91.90 port 41946:11: Bye Bye [preauth]
2026-06-28T03:29:12.277723-05:00 claude-cloud sshd[4033182]: Disconnected from invalid user ny 20.219.91.90 port 41946 [preauth]
2026-06-28T03:30:01.364590-05:00 claude-cloud CRON[4033336]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-28T03:30:01.370176-05:00 claude-cloud CRON[4033336]: pam_unix(cron:session): session closed for user root
2026-06-28T03:30:02.955078-05:00 claude-cloud sshd[4033334]: Connection closed by authenticating user root 115.248.8.65 port 47412 [preauth]
2026-06-28T03:30:05.443391-05:00 claude-cloud sshd[4033358]: Invalid user developer from 91.92.40.237 port 58246
2026-06-28T03:30:05.479085-05:00 claude-cloud sshd[4033358]: Connection closed by invalid user developer 91.92.40.237 port 58246 [preauth]
2026-06-28T03:31:22.654076-05:00 claude-cloud sshd[4033573]: Invalid user john from 45.148.10.239 port 51408
2026-06-28T03:31:22.667409-05:00 claude-cloud sshd[4033573]: Connection closed by invalid user john 45.148.10.239 port 51408 [preauth]
2026-06-28T03:32:05.103019-05:00 claude-cloud systemd-logind[853]: New session c4367 of user claude.
2026-06-28T03:32:05.449659-05:00 claude-cloud systemd-logind[853]: Session c4367 logged out. Waiting for processes to exit.
2026-06-28T03:32:05.451026-05:00 claude-cloud systemd-logind[853]: Removed session c4367.
2026-06-28T03:32:57.911988-05:00 claude-cloud sshd[4033848]: Invalid user swa from 185.153.231.45 port 37648
2026-06-28T03:32:57.976768-05:00 claude-cloud sshd[4033848]: Received disconnect from 185.153.231.45 port 37648:11: Bye Bye [preauth]
2026-06-28T03:32:57.976980-05:00 claude-cloud sshd[4033848]: Disconnected from invalid user swa 185.153.231.45 port 37648 [preauth]
2026-06-28T03:33:43.816193-05:00 claude-cloud sshd[4033991]: Invalid user admin from 115.248.8.65 port 41416
2026-06-28T03:33:44.390476-05:00 claude-cloud sshd[4033991]: Connection closed by invalid user admin 115.248.8.65 port 41416 [preauth]
2026-06-28T03:33:56.502803-05:00 claude-cloud sshd[4034049]: Invalid user cu from 185.153.231.45 port 35472
2026-06-28T03:33:56.597740-05:00 claude-cloud sshd[4034049]: Received disconnect from 185.153.231.45 port 35472:11: Bye Bye [preauth]
2026-06-28T03:33:56.597891-05:00 claude-cloud sshd[4034049]: Disconnected from invalid user cu 185.153.231.45 port 35472 [preauth]
2026-06-28T03:34:53.915733-05:00 claude-cloud sshd[4034184]: Invalid user gw from 185.153.231.45 port 60218
2026-06-28T03:34:53.981292-05:00 claude-cloud sshd[4034184]: Received disconnect from 185.153.231.45 port 60218:11: Bye Bye [preauth]
2026-06-28T03:34:53.981418-05:00 claude-cloud sshd[4034184]: Disconnected from invalid user gw 185.153.231.45 port 60218 [preauth]
2026-06-28T03:35:01.378380-05:00 claude-cloud CRON[4034205]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-28T03:35:01.384000-05:00 claude-cloud CRON[4034205]: pam_unix(cron:session): session closed for user root
2026-06-28T03:35:21.222197-05:00 claude-cloud sshd[4034100]: Connection closed by authenticating user root 27.71.230.31 port 55672 [preauth]
2026-06-28T03:35:51.037140-05:00 claude-cloud sshd[4034377]: Invalid user zabbix from 45.198.224.46 port 45764
2026-06-28T03:35:51.695205-05:00 claude-cloud sshd[4034377]: Connection closed by invalid user zabbix 45.198.224.46 port 45764 [preauth]
2026-06-28T03:37:10.400352-05:00 claude-cloud systemd-logind[853]: New session c4368 of user claude.
2026-06-28T03:37:10.675433-05:00 claude-cloud systemd-logind[853]: Session c4368 logged out. Waiting for processes to exit.
2026-06-28T03:37:10.677196-05:00 claude-cloud systemd-logind[853]: Removed session c4368.
2026-06-28T03:37:30.267225-05:00 claude-cloud sshd[4034647]: Invalid user user from 115.248.8.65 port 36570
2026-06-28T03:37:31.009162-05:00 claude-cloud sshd[4034647]: Connection closed by invalid user user 115.248.8.65 port 36570 [preauth]
2026-06-28T03:37:43.329676-05:00 claude-cloud sshd[4034697]: Connection closed by 161.35.47.134 port 51752
2026-06-28T03:39:53.333910-05:00 claude-cloud sshd[4035152]: Invalid user senate from 20.219.91.90 port 49350
2026-06-28T03:39:53.493791-05:00 claude-cloud sshd[4035152]: Received disconnect from 20.219.91.90 port 49350:11: Bye Bye [preauth]
2026-06-28T03:39:53.494035-05:00 claude-cloud sshd[4035152]: Disconnected from invalid user senate 20.219.91.90 port 49350 [preauth]
2026-06-28T03:41:16.659643-05:00 claude-cloud sshd[4035381]: Connection closed by authenticating user root 115.248.8.65 port 38258 [preauth]
2026-06-28T03:41:20.415551-05:00 claude-cloud sshd[4035395]: Invalid user webadmin from 91.92.40.237 port 36930
2026-06-28T03:41:20.463433-05:00 claude-cloud sshd[4035395]: Connection closed by invalid user webadmin 91.92.40.237 port 36930 [preauth]
2026-06-28T03:41:27.666709-05:00 claude-cloud sshd[4035383]: Connection closed by authenticating user root 27.71.230.31 port 57410 [preauth]
2026-06-28T03:41:59.399559-05:00 claude-cloud sshd[4035514]: Invalid user rb from 20.219.91.90 port 56426
2026-06-28T03:41:59.556535-05:00 claude-cloud sshd[4035514]: Received disconnect from 20.219.91.90 port 56426:11: Bye Bye [preauth]
2026-06-28T03:41:59.556718-05:00 claude-cloud sshd[4035514]: Disconnected from invalid user rb 20.219.91.90 port 56426 [preauth]
2026-06-28T03:42:14.367888-05:00 claude-cloud systemd-logind[853]: New session c4369 of user claude.
2026-06-28T03:42:14.669675-05:00 claude-cloud systemd-logind[853]: Session c4369 logged out. Waiting for processes to exit.
2026-06-28T03:42:14.671471-05:00 claude-cloud systemd-logind[853]: Removed session c4369.
2026-06-28T03:42:48.307812-05:00 claude-cloud sshd[4035693]: Invalid user webadmin from 91.92.40.237 port 34388
2026-06-28T03:42:48.448039-05:00 claude-cloud sshd[4035693]: Connection closed by invalid user webadmin 91.92.40.237 port 34388 [preauth]
2026-06-28T03:44:09.736448-05:00 claude-cloud sshd[4035919]: Invalid user elektra from 20.219.91.90 port 35324
2026-06-28T03:44:09.903164-05:00 claude-cloud sshd[4035919]: Received disconnect from 20.219.91.90 port 35324:11: Bye Bye [preauth]
2026-06-28T03:44:09.903420-05:00 claude-cloud sshd[4035919]: Disconnected from invalid user elektra 20.219.91.90 port 35324 [preauth]
2026-06-28T03:44:18.147325-05:00 claude-cloud sshd[4035942]: Invalid user webadmin from 91.92.40.237 port 54850
2026-06-28T03:44:18.210727-05:00 claude-cloud sshd[4035942]: Connection closed by invalid user webadmin 91.92.40.237 port 54850 [preauth]
2026-06-28T03:45:01.393933-05:00 claude-cloud CRON[4036084]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-28T03:45:01.399351-05:00 claude-cloud CRON[4036084]: pam_unix(cron:session): session closed for user root
2026-06-28T03:45:03.040857-05:00 claude-cloud sshd[4036058]: Connection closed by authenticating user root 115.248.8.65 port 42306 [preauth]
2026-06-28T03:45:44.554304-05:00 claude-cloud sshd[4036211]: Connection closed by authenticating user root 45.198.224.46 port 48334 [preauth]
2026-06-28T03:45:47.274549-05:00 claude-cloud sshd[4036236]: Invalid user newuser from 91.92.40.237 port 36562
2026-06-28T03:45:47.422172-05:00 claude-cloud sshd[4036236]: Connection closed by invalid user newuser 91.92.40.237 port 36562 [preauth]
2026-06-28T03:46:21.936479-05:00 claude-cloud sshd[4036324]: Invalid user proposal from 20.219.91.90 port 42466
2026-06-28T03:46:22.095616-05:00 claude-cloud sshd[4036324]: Received disconnect from 20.219.91.90 port 42466:11: Bye Bye [preauth]
2026-06-28T03:46:22.095820-05:00 claude-cloud sshd[4036324]: Disconnected from invalid user proposal 20.219.91.90 port 42466 [preauth]
2026-06-28T03:47:13.952808-05:00 claude-cloud sshd[4036453]: Invalid user newuser from 91.92.40.237 port 45414
2026-06-28T03:47:13.977100-05:00 claude-cloud sshd[4036453]: Connection closed by invalid user newuser 91.92.40.237 port 45414 [preauth]
2026-06-28T03:47:18.764415-05:00 claude-cloud systemd-logind[853]: New session c4370 of user claude.
2026-06-28T03:47:19.058489-05:00 claude-cloud systemd-logind[853]: Session c4370 logged out. Waiting for processes to exit.
2026-06-28T03:47:19.060474-05:00 claude-cloud systemd-logind[853]: Removed session c4370.
2026-06-28T03:47:38.337680-05:00 claude-cloud sshd[4036556]: Connection closed by 161.35.47.134 port 55058
2026-06-28T03:48:29.123114-05:00 claude-cloud sshd[4036775]: Invalid user fat from 20.219.91.90 port 49598
2026-06-28T03:48:29.292149-05:00 claude-cloud sshd[4036775]: Received disconnect from 20.219.91.90 port 49598:11: Bye Bye [preauth]
2026-06-28T03:48:29.292412-05:00 claude-cloud sshd[4036775]: Disconnected from invalid user fat 20.219.91.90 port 49598 [preauth]
2026-06-28T03:48:31.186346-05:00 claude-cloud sshd[4036735]: Connection closed by authenticating user root 27.71.230.31 port 33230 [preauth]
2026-06-28T03:48:48.566740-05:00 claude-cloud sshd[4036821]: Invalid user admin from 115.248.8.65 port 56910
2026-06-28T03:48:49.101659-05:00 claude-cloud sshd[4036821]: Connection closed by invalid user admin 115.248.8.65 port 56910 [preauth]
2026-06-28T03:52:22.741850-05:00 claude-cloud systemd-logind[853]: New session c4371 of user claude.
2026-06-28T03:52:23.066611-05:00 claude-cloud systemd-logind[853]: Session c4371 logged out. Waiting for processes to exit.
2026-06-28T03:52:23.069386-05:00 claude-cloud systemd-logind[853]: Removed session c4371.
2026-06-28T03:52:30.299552-05:00 claude-cloud sshd[4037484]: Connection closed by authenticating user root 115.248.8.65 port 33148 [preauth]
2026-06-28T03:52:43.487258-05:00 claude-cloud sshd[4037540]: Invalid user devlin from 2.57.121.112 port 37568
2026-06-28T03:52:43.513964-05:00 claude-cloud sshd[4037540]: Connection closed by invalid user devlin 2.57.121.112 port 37568 [preauth]
2026-06-28T03:54:39.122992-05:00 claude-cloud sshd[4037885]: Invalid user user from 45.148.10.121 port 47514
2026-06-28T03:54:39.148912-05:00 claude-cloud sshd[4037885]: Connection closed by invalid user user 45.148.10.121 port 47514 [preauth]
2026-06-28T03:54:49.774339-05:00 claude-cloud sshd[4037911]: Connection closed by authenticating user root 193.46.255.86 port 14310 [preauth]
2026-06-28T03:55:01.411928-05:00 claude-cloud CRON[4037940]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-28T03:55:01.420065-05:00 claude-cloud CRON[4037940]: pam_unix(cron:session): session closed for user root
2026-06-28T03:55:42.137859-05:00 claude-cloud sshd[4038049]: Connection closed by authenticating user root 45.198.224.46 port 59556 [preauth]
2026-06-28T03:56:14.110915-05:00 claude-cloud sshd[4038153]: Connection closed by authenticating user root 115.248.8.65 port 49478 [preauth]
2026-06-28T03:57:27.321724-05:00 claude-cloud systemd-logind[853]: New session c4372 of user claude.
2026-06-28T03:57:27.575374-05:00 claude-cloud systemd-logind[853]: Session c4372 logged out. Waiting for processes to exit.
2026-06-28T03:57:27.576389-05:00 claude-cloud systemd-logind[853]: Removed session c4372.
2026-06-28T03:57:43.777585-05:00 claude-cloud sshd[4038437]: Invalid user newuser from 91.92.40.237 port 38542
2026-06-28T03:57:43.936437-05:00 claude-cloud sshd[4038437]: Connection closed by invalid user newuser 91.92.40.237 port 38542 [preauth]
2026-06-28T03:59:12.808610-05:00 claude-cloud sshd[4038787]: Invalid user mole from 20.219.91.90 port 56922
2026-06-28T03:59:12.965403-05:00 claude-cloud sshd[4038787]: Received disconnect from 20.219.91.90 port 56922:11: Bye Bye [preauth]
2026-06-28T03:59:12.965708-05:00 claude-cloud sshd[4038787]: Disconnected from invalid user mole 20.219.91.90 port 56922 [preauth]
2026-06-28T03:59:19.223659-05:00 claude-cloud sshd[4038810]: Connection closed by 195.178.110.217 port 56810
2026-06-28T03:59:30.761810-05:00 claude-cloud sshd[4038831]: Connection closed by authenticating user root 123.31.20.162 port 50815 [preauth]
2026-06-28T03:59:38.473564-05:00 claude-cloud sshd[4038851]: Invalid user administrator from 91.92.40.237 port 35408
2026-06-28T03:59:38.777401-05:00 claude-cloud sshd[4038851]: Connection closed by invalid user administrator 91.92.40.237 port 35408 [preauth]
2026-06-28T03:59:58.613732-05:00 claude-cloud sshd[4038915]: Invalid user postgres from 115.248.8.65 port 57596
2026-06-28T03:59:59.016961-05:00 claude-cloud sshd[4038915]: Connection closed by invalid user postgres 115.248.8.65 port 57596 [preauth]
2026-06-28T04:00:27.777444-05:00 claude-cloud sshd[4038971]: Connection closed by authenticating user root 27.71.230.31 port 35064 [preauth]
2026-06-28T04:01:24.521879-05:00 claude-cloud sshd[4039153]: Invalid user administrator from 91.92.40.237 port 43850
2026-06-28T04:01:24.790516-05:00 claude-cloud sshd[4039153]: Connection closed by invalid user administrator 91.92.40.237 port 43850 [preauth]
2026-06-28T04:02:01.428699-05:00 claude-cloud sshd[4039276]: Connection closed by 161.35.47.134 port 39812
2026-06-28T04:02:31.518363-05:00 claude-cloud systemd-logind[853]: New session c4373 of user claude.
2026-06-28T04:02:31.932955-05:00 claude-cloud systemd-logind[853]: Session c4373 logged out. Waiting for processes to exit.
2026-06-28T04:02:31.934750-05:00 claude-cloud systemd-logind[853]: Removed session c4373.
2026-06-28T04:02:34.987553-05:00 claude-cloud sshd[4039379]: Connection reset by 46.101.232.106 port 29421 [preauth]
2026-06-28T04:03:09.676933-05:00 claude-cloud sshd[4039496]: Invalid user administrator from 91.92.40.237 port 47312
2026-06-28T04:03:09.785862-05:00 claude-cloud sshd[4039496]: Connection closed by invalid user administrator 91.92.40.237 port 47312 [preauth]
2026-06-28T04:03:39.158902-05:00 claude-cloud sshd[4039562]: Connection closed by authenticating user root 115.248.8.65 port 46124 [preauth]
2026-06-28T04:04:39.842536-05:00 claude-cloud sshd[4039756]: Connection closed by authenticating user root 89.203.249.139 port 46712 [preauth]
2026-06-28T04:04:55.452244-05:00 claude-cloud sshd[4039816]: Invalid user administrator from 91.92.40.237 port 54264
2026-06-28T04:04:55.911241-05:00 claude-cloud sshd[4039816]: Connection closed by invalid user administrator 91.92.40.237 port 54264 [preauth]
2026-06-28T04:05:01.433257-05:00 claude-cloud CRON[4039830]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-28T04:05:01.440517-05:00 claude-cloud CRON[4039830]: pam_unix(cron:session): session closed for user root
2026-06-28T04:05:36.726104-05:00 claude-cloud sshd[4039927]: Invalid user falcon from 45.198.224.46 port 37212
2026-06-28T04:05:37.573845-05:00 claude-cloud sshd[4039927]: Connection closed by invalid user falcon 45.198.224.46 port 37212 [preauth]
2026-06-28T04:06:31.976080-05:00 claude-cloud sshd[4040059]: Connection closed by authenticating user root 27.71.230.31 port 45794 [preauth]
2026-06-28T04:06:47.695667-05:00 claude-cloud sshd[4040137]: Received disconnect from 64.31.53.170 port 55526:11: disconnected by user [preauth]
2026-06-28T04:06:47.695864-05:00 claude-cloud sshd[4040137]: Disconnected from authenticating user root 64.31.53.170 port 55526 [preauth]
2026-06-28T04:07:26.113427-05:00 claude-cloud sshd[4040231]: Connection closed by authenticating user root 115.248.8.65 port 38140 [preauth]
2026-06-28T04:07:35.722110-05:00 claude-cloud systemd-logind[853]: New session c4374 of user claude.
2026-06-28T04:07:36.001104-05:00 claude-cloud systemd-logind[853]: Session c4374 logged out. Waiting for processes to exit.
2026-06-28T04:07:36.002410-05:00 claude-cloud systemd-logind[853]: Removed session c4374.
2026-06-28T04:09:02.364974-05:00 claude-cloud sshd[4040584]: Connection closed by authenticating user root 195.178.110.217 port 60862 [preauth]
2026-06-28T04:10:33.870856-05:00 claude-cloud sshd[4040829]: Connection closed by 161.35.47.134 port 45492
2026-06-28T04:10:48.590839-05:00 claude-cloud sshd[4040884]: Connection closed by authenticating user root 195.178.110.217 port 35670 [preauth]
2026-06-28T04:11:04.703648-05:00 claude-cloud sshd[4040917]: Invalid user openhabian from 115.248.8.65 port 54788
2026-06-28T04:11:05.059990-05:00 claude-cloud sshd[4040917]: Connection closed by invalid user openhabian 115.248.8.65 port 54788 [preauth]
2026-06-28T04:12:34.430677-05:00 claude-cloud sshd[4041147]: Connection closed by authenticating user root 27.71.230.31 port 53368 [preauth]
2026-06-28T04:12:38.536025-05:00 claude-cloud sshd[4041174]: Connection closed by authenticating user root 195.178.110.217 port 38702 [preauth]
2026-06-28T04:12:39.874803-05:00 claude-cloud systemd-logind[853]: New session c4375 of user claude.
2026-06-28T04:12:40.155636-05:00 claude-cloud systemd-logind[853]: Session c4375 logged out. Waiting for processes to exit.
2026-06-28T04:12:40.158374-05:00 claude-cloud systemd-logind[853]: Removed session c4375.
2026-06-28T04:14:28.235478-05:00 claude-cloud sshd[4041499]: Connection closed by authenticating user root 195.178.110.217 port 41770 [preauth]
2026-06-28T04:14:48.374597-05:00 claude-cloud sshd[4041561]: Connection closed by authenticating user root 115.248.8.65 port 35682 [preauth]
2026-06-28T04:15:01.452474-05:00 claude-cloud CRON[4041609]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-28T04:15:01.457567-05:00 claude-cloud CRON[4041609]: pam_unix(cron:session): session closed for user root
2026-06-28T04:15:30.596711-05:00 claude-cloud sshd[4041687]: Invalid user ssh from 91.92.40.237 port 58800
2026-06-28T04:15:30.742410-05:00 claude-cloud sshd[4041687]: Connection closed by invalid user ssh 91.92.40.237 port 58800 [preauth]
2026-06-28T04:15:35.866054-05:00 claude-cloud sshd[4041689]: Invalid user babashahi from 45.198.224.46 port 49746
2026-06-28T04:15:37.242258-05:00 claude-cloud sshd[4041689]: Connection closed by invalid user babashahi 45.198.224.46 port 49746 [preauth]
2026-06-28T04:16:17.510216-05:00 claude-cloud sshd[4041819]: Connection closed by authenticating user root 195.178.110.217 port 44784 [preauth]
2026-06-28T04:17:01.466185-05:00 claude-cloud CRON[4041964]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-28T04:17:01.476479-05:00 claude-cloud CRON[4041964]: pam_unix(cron:session): session closed for user root
2026-06-28T04:17:10.631739-05:00 claude-cloud sshd[4041988]: Invalid user ssh from 91.92.40.237 port 49514
2026-06-28T04:17:11.042053-05:00 claude-cloud sshd[4041988]: Connection closed by invalid user ssh 91.92.40.237 port 49514 [preauth]
2026-06-28T04:17:43.746817-05:00 claude-cloud systemd-logind[853]: New session c4376 of user claude.
2026-06-28T04:17:44.169533-05:00 claude-cloud systemd-logind[853]: Session c4376 logged out. Waiting for processes to exit.
2026-06-28T04:17:44.171581-05:00 claude-cloud systemd-logind[853]: Removed session c4376.
2026-06-28T04:18:08.216857-05:00 claude-cloud sshd[4042143]: Connection closed by authenticating user root 195.178.110.217 port 47810 [preauth]
2026-06-28T04:18:35.024537-05:00 claude-cloud sshd[4042196]: Connection closed by authenticating user root 27.71.230.31 port 40634 [preauth]
2026-06-28T04:18:35.415472-05:00 claude-cloud sshd[4042205]: Invalid user sshadmin from 115.248.8.65 port 45396
2026-06-28T04:18:36.076099-05:00 claude-cloud sshd[4042205]: Connection closed by invalid user sshadmin 115.248.8.65 port 45396 [preauth]
2026-06-28T04:18:49.802536-05:00 claude-cloud sshd[4042341]: Invalid user ssh from 91.92.40.237 port 44306
2026-06-28T04:18:49.901360-05:00 claude-cloud sshd[4042341]: Connection closed by invalid user ssh 91.92.40.237 port 44306 [preauth]
2026-06-28T04:19:55.517965-05:00 claude-cloud sshd[4042532]: Connection closed by authenticating user root 195.178.110.217 port 50816 [preauth]
2026-06-28T04:20:38.684323-05:00 claude-cloud sshd[4042635]: Invalid user ssh from 91.92.40.237 port 60408
2026-06-28T04:20:38.965948-05:00 claude-cloud sshd[4042635]: Connection closed by invalid user ssh 91.92.40.237 port 60408 [preauth]
2026-06-28T04:21:36.478180-05:00 claude-cloud sshd[4042811]: Connection closed by 161.35.47.134 port 45784
2026-06-28T04:21:45.921271-05:00 claude-cloud sshd[4042838]: Connection closed by authenticating user root 195.178.110.217 port 53866 [preauth]
2026-06-28T04:22:16.230695-05:00 claude-cloud sshd[4042917]: Connection closed by authenticating user root 115.248.8.65 port 50674 [preauth]
2026-06-28T04:22:26.643156-05:00 claude-cloud sshd[4042952]: Invalid user ssh from 91.92.40.237 port 41768
2026-06-28T04:22:26.993565-05:00 claude-cloud sshd[4042952]: Connection closed by invalid user ssh 91.92.40.237 port 41768 [preauth]
2026-06-28T04:22:48.158442-05:00 claude-cloud systemd-logind[853]: New session c4377 of user claude.
2026-06-28T04:22:48.457872-05:00 claude-cloud systemd-logind[853]: Session c4377 logged out. Waiting for processes to exit.
2026-06-28T04:22:48.460047-05:00 claude-cloud systemd-logind[853]: Removed session c4377.
2026-06-28T04:23:39.983479-05:00 claude-cloud sshd[4043166]: Connection closed by authenticating user root 195.178.110.217 port 56914 [preauth]
2026-06-28T04:24:41.732521-05:00 claude-cloud sshd[4043292]: Connection closed by authenticating user root 27.71.230.31 port 36462 [preauth]
2026-06-28T04:25:01.491462-05:00 claude-cloud CRON[4043393]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-28T04:25:01.499163-05:00 claude-cloud CRON[4043393]: pam_unix(cron:session): session closed for user root
2026-06-28T04:25:27.966365-05:00 claude-cloud sshd[4043478]: Connection closed by authenticating user root 45.198.224.46 port 50808 [preauth]
2026-06-28T04:25:39.200344-05:00 claude-cloud sshd[4043512]: Connection closed by authenticating user root 195.178.110.217 port 59930 [preauth]
2026-06-28T04:26:03.069706-05:00 claude-cloud sshd[4043556]: Invalid user frappe from 115.248.8.65 port 50004
2026-06-28T04:26:03.396839-05:00 claude-cloud sshd[4043556]: Connection closed by invalid user frappe 115.248.8.65 port 50004 [preauth]
2026-06-28T04:27:45.873379-05:00 claude-cloud sshd[4043855]: Connection closed by authenticating user root 195.178.110.217 port 34698 [preauth]
2026-06-28T04:27:53.005492-05:00 claude-cloud systemd-logind[853]: New session c4378 of user claude.
2026-06-28T04:27:53.287990-05:00 claude-cloud systemd-logind[853]: Session c4378 logged out. Waiting for processes to exit.
2026-06-28T04:27:53.289856-05:00 claude-cloud systemd-logind[853]: Removed session c4378.
2026-06-28T04:28:00.855924-05:00 claude-cloud sshd[4043910]: Connection closed by authenticating user root 45.148.10.121 port 47280 [preauth]
2026-06-28T04:29:47.832375-05:00 claude-cloud sshd[4044241]: Invalid user huawei from 115.248.8.65 port 55650
2026-06-28T04:29:48.129114-05:00 claude-cloud sshd[4044241]: Connection closed by invalid user huawei 115.248.8.65 port 55650 [preauth]
2026-06-28T04:29:54.469404-05:00 claude-cloud sshd[4044286]: Connection closed by 161.35.47.134 port 56068
2026-06-28T04:30:01.039082-05:00 claude-cloud sshd[4044301]: Connection closed by authenticating user root 195.178.110.217 port 37718 [preauth]
2026-06-28T04:30:38.459765-05:00 claude-cloud sshd[4044388]: Connection closed by authenticating user root 27.71.230.31 port 54822 [preauth]
2026-06-28T04:32:21.834409-05:00 claude-cloud sshd[4044694]: Connection closed by authenticating user root 195.178.110.217 port 40738 [preauth]
2026-06-28T04:32:42.005625-05:00 claude-cloud sshd[4044771]: Invalid user sysadmin from 91.92.40.237 port 47134
2026-06-28T04:32:42.378316-05:00 claude-cloud sshd[4044771]: Connection closed by invalid user sysadmin 91.92.40.237 port 47134 [preauth]
2026-06-28T04:32:57.069566-05:00 claude-cloud systemd-logind[853]: New session c4379 of user claude.
2026-06-28T04:32:57.387556-05:00 claude-cloud systemd-logind[853]: Session c4379 logged out. Waiting for processes to exit.
2026-06-28T04:32:57.389068-05:00 claude-cloud systemd-logind[853]: Removed session c4379.
2026-06-28T04:33:28.554227-05:00 claude-cloud sshd[4044919]: Invalid user ubuntu from 115.248.8.65 port 47180
2026-06-28T04:33:29.234912-05:00 claude-cloud sshd[4044919]: Connection closed by invalid user ubuntu 115.248.8.65 port 47180 [preauth]
2026-06-28T04:34:26.539713-05:00 claude-cloud sshd[4045093]: Invalid user sysadmin from 91.92.40.237 port 48538
2026-06-28T04:34:26.629185-05:00 claude-cloud sshd[4045093]: Connection closed by invalid user sysadmin 91.92.40.237 port 48538 [preauth]
2026-06-28T04:34:59.507410-05:00 claude-cloud sshd[4045190]: Connection closed by authenticating user root 195.178.110.217 port 43752 [preauth]
2026-06-28T04:35:01.518291-05:00 claude-cloud CRON[4045192]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-28T04:35:01.526713-05:00 claude-cloud CRON[4045192]: pam_unix(cron:session): session closed for user root
2026-06-28T04:35:20.320968-05:00 claude-cloud sshd[4045248]: Connection closed by authenticating user root 45.198.224.46 port 35152 [preauth]
2026-06-28T04:36:08.727298-05:00 claude-cloud sshd[4045404]: Invalid user sysadmin from 91.92.40.237 port 35048
2026-06-28T04:36:08.865436-05:00 claude-cloud sshd[4045404]: Connection closed by invalid user sysadmin 91.92.40.237 port 35048 [preauth]
2026-06-28T04:36:21.644949-05:00 claude-cloud sshd[4045445]: Invalid user admin from 2.57.121.25 port 54418
2026-06-28T04:36:21.670337-05:00 claude-cloud sshd[4045445]: Connection closed by invalid user admin 2.57.121.25 port 54418 [preauth]
2026-06-28T04:36:37.151183-05:00 claude-cloud sshd[4045465]: Connection closed by authenticating user root 27.71.230.31 port 46408 [preauth]
2026-06-28T04:37:14.060585-05:00 claude-cloud sshd[4045582]: Invalid user vyos from 115.248.8.65 port 53718
2026-06-28T04:37:14.392913-05:00 claude-cloud sshd[4045582]: Connection closed by invalid user vyos 115.248.8.65 port 53718 [preauth]
2026-06-28T04:37:49.654977-05:00 claude-cloud sshd[4045686]: Invalid user sysadmin from 91.92.40.237 port 46092
2026-06-28T04:37:49.817914-05:00 claude-cloud sshd[4045686]: Connection closed by invalid user sysadmin 91.92.40.237 port 46092 [preauth]
2026-06-28T04:37:50.849003-05:00 claude-cloud sshd[4045691]: Connection closed by authenticating user root 195.178.110.217 port 46782 [preauth]
2026-06-28T04:38:01.028413-05:00 claude-cloud systemd-logind[853]: New session c4380 of user claude.
2026-06-28T04:38:01.344729-05:00 claude-cloud systemd-logind[853]: Session c4380 logged out. Waiting for processes to exit.
2026-06-28T04:38:01.346521-05:00 claude-cloud systemd-logind[853]: Removed session c4380.
2026-06-28T04:39:32.034238-05:00 claude-cloud sshd[4045992]: Invalid user sysadmin from 91.92.40.237 port 43200
2026-06-28T04:39:32.142881-05:00 claude-cloud sshd[4045992]: Connection closed by invalid user sysadmin 91.92.40.237 port 43200 [preauth]
2026-06-28T04:40:59.972184-05:00 claude-cloud sshd[4046244]: Connection closed by authenticating user root 115.248.8.65 port 35272 [preauth]
2026-06-28T04:41:11.714828-05:00 claude-clou2026-06-28T11:07:56.586844-05:00 claude-cloud sshd[4159236]: Invalid user validator from 45.148.10.240 port 40896
2026-06-28T11:07:56.600083-05:00 claude-cloud sshd[4159236]: Connection closed by invalid user validator 45.148.10.240 port 40896 [preauth]
2026-06-28T11:09:03.570556-05:00 claude-cloud sshd[4159400]: Invalid user teste from 115.248.8.65 port 58138
2026-06-28T11:09:04.005581-05:00 claude-cloud sshd[4159400]: Connection closed by invalid user teste 115.248.8.65 port 58138 [preauth]
2026-06-28T11:09:44.776166-05:00 claude-cloud sshd[4159563]: Invalid user node from 45.148.10.240 port 37644
2026-06-28T11:09:44.789895-05:00 claude-cloud sshd[4159563]: Connection closed by invalid user node 45.148.10.240 port 37644 [preauth]
2026-06-28T11:09:58.421664-05:00 claude-cloud systemd-logind[853]: Session c4502 logged out. Waiting for processes to exit.
2026-06-28T11:09:58.424129-05:00 claude-cloud systemd-logind[853]: Removed session c4502.
2026-06-28T11:09:59.328697-05:00 claude-cloud systemd-logind[853]: Session c4499 logged out. Waiting for processes to exit.
2026-06-28T11:09:59.330344-05:00 claude-cloud systemd-logind[853]: Removed session c4499.
2026-06-28T11:10:09.289489-05:00 claude-cloud systemd-logind[853]: New session c4507 of user claude.
2026-06-28T11:10:09.309393-05:00 claude-cloud systemd-logind[853]: New session c4508 of user claude.
2026-06-28T11:10:09.333819-05:00 claude-cloud systemd-logind[853]: Session c4507 logged out. Waiting for processes to exit.
2026-06-28T11:10:09.335553-05:00 claude-cloud systemd-logind[853]: Removed session c4507.
2026-06-28T11:10:10.020596-05:00 claude-cloud systemd-logind[853]: New session c4509 of user claude.
2026-06-28T11:10:10.081812-05:00 claude-cloud systemd-logind[853]: Session c4509 logged out. Waiting for processes to exit.
2026-06-28T11:10:10.083844-05:00 claude-cloud systemd-logind[853]: Removed session c4509.
2026-06-28T11:10:10.615033-05:00 claude-cloud systemd-logind[853]: New session c4510 of user claude.
2026-06-28T11:10:54.321621-05:00 claude-cloud systemd-logind[853]: New session c4511 of user claude.
2026-06-28T11:10:54.868222-05:00 claude-cloud systemd-logind[853]: Session c4511 logged out. Waiting for processes to exit.
2026-06-28T11:10:54.870724-05:00 claude-cloud systemd-logind[853]: Removed session c4511.
2026-06-28T11:11:30.249590-05:00 claude-cloud sshd[4159904]: Invalid user operator from 45.148.10.240 port 59360
2026-06-28T11:11:30.263475-05:00 claude-cloud sshd[4159904]: Connection closed by invalid user operator 45.148.10.240 port 59360 [preauth]
2026-06-28T11:12:44.732019-05:00 claude-cloud sshd[4160133]: Invalid user admin from 115.248.8.65 port 35268
2026-06-28T11:12:45.098102-05:00 claude-cloud sshd[4160133]: Connection closed by invalid user admin 115.248.8.65 port 35268 [preauth]
2026-06-28T11:12:52.018233-05:00 claude-cloud sshd[4160148]: Connection closed by authenticating user root 45.198.224.46 port 42258 [preauth]
2026-06-28T11:12:54.282732-05:00 claude-cloud sshd[4160192]: Invalid user admin from 2.57.121.25 port 9422
2026-06-28T11:12:54.307845-05:00 claude-cloud sshd[4160192]: Connection closed by invalid user admin 2.57.121.25 port 9422 [preauth]
2026-06-28T11:13:12.010003-05:00 claude-cloud sshd[4160226]: Invalid user trader from 45.148.10.240 port 36324
2026-06-28T11:13:12.022033-05:00 claude-cloud sshd[4160226]: Connection closed by invalid user trader 45.148.10.240 port 36324 [preauth]
2026-06-28T11:14:04.051950-05:00 claude-cloud sshd[4160399]: Connection closed by authenticating user root 27.71.230.31 port 39840 [preauth]
2026-06-28T11:14:10.563626-05:00 claude-cloud sshd[4160448]: Connection closed by authenticating user root 186.96.145.241 port 46946 [preauth]
2026-06-28T11:15:01.061539-05:00 claude-cloud CRON[4160615]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-28T11:15:01.070179-05:00 claude-cloud CRON[4160615]: pam_unix(cron:session): session closed for user root
2026-06-28T11:15:04.843180-05:00 claude-cloud sshd[4160628]: Invalid user trading from 45.148.10.240 port 48916
2026-06-28T11:15:04.856093-05:00 claude-cloud sshd[4160628]: Connection closed by invalid user trading 45.148.10.240 port 48916 [preauth]
2026-06-28T11:15:58.143613-05:00 claude-cloud systemd-logind[853]: New session c4512 of user claude.
2026-06-28T11:15:58.668325-05:00 claude-cloud systemd-logind[853]: Session c4512 logged out. Waiting for processes to exit.
2026-06-28T11:15:58.669408-05:00 claude-cloud systemd-logind[853]: Removed session c4512.
2026-06-28T11:16:30.746155-05:00 claude-cloud sshd[4160879]: Connection closed by authenticating user root 115.248.8.65 port 34292 [preauth]
2026-06-28T11:16:52.705744-05:00 claude-cloud sshd[4160968]: Connection closed by 185.247.137.67 port 53589
2026-06-28T11:16:52.819115-05:00 claude-cloud sshd[4160969]: Connection closed by 185.247.137.67 port 39183 [preauth]
2026-06-28T11:17:01.083528-05:00 claude-cloud CRON[4160993]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-28T11:17:01.085354-05:00 claude-cloud sshd[4160991]: Invalid user trader from 45.148.10.240 port 58774
2026-06-28T11:17:01.091929-05:00 claude-cloud CRON[4160993]: pam_unix(cron:session): session closed for user root
2026-06-28T11:17:01.096463-05:00 claude-cloud sshd[4160991]: Connection closed by invalid user trader 45.148.10.240 port 58774 [preauth]
2026-06-28T11:18:44.227263-05:00 claude-cloud sshd[4161307]: Connection closed by 161.35.47.134 port 55106
2026-06-28T11:18:46.443722-05:00 claude-cloud sshd[4161315]: Invalid user trader from 45.148.10.240 port 57886
2026-06-28T11:18:46.456820-05:00 claude-cloud sshd[4161315]: Connection closed by invalid user trader 45.148.10.240 port 57886 [preauth]
2026-06-28T11:19:50.428159-05:00 claude-cloud sshd[4161467]: Connection closed by authenticating user root 27.71.230.31 port 45388 [preauth]
2026-06-28T11:20:16.196199-05:00 claude-cloud sshd[4161568]: Invalid user user from 115.248.8.65 port 33620
2026-06-28T11:20:16.910958-05:00 claude-cloud sshd[4161568]: Connection closed by invalid user user 115.248.8.65 port 33620 [preauth]
2026-06-28T11:20:29.383906-05:00 claude-cloud sshd[4161621]: Invalid user trader from 45.148.10.240 port 55130
2026-06-28T11:20:29.397216-05:00 claude-cloud sshd[4161621]: Connection closed by invalid user trader 45.148.10.240 port 55130 [preauth]
2026-06-28T11:21:02.219661-05:00 claude-cloud systemd-logind[853]: New session c4513 of user claude.
2026-06-28T11:21:02.559465-05:00 claude-cloud systemd-logind[853]: Session c4513 logged out. Waiting for processes to exit.
2026-06-28T11:21:02.560810-05:00 claude-cloud systemd-logind[853]: Removed session c4513.
2026-06-28T11:21:24.672248-05:00 claude-cloud sshd[4161814]: banner exchange: Connection from 20.65.193.121 port 53368: invalid format
2026-06-28T11:21:34.046934-05:00 claude-cloud sshd[4161812]: Connection closed by 20.65.193.121 port 53354 [preauth]
2026-06-28T11:22:15.694212-05:00 claude-cloud sshd[4161947]: Invalid user trading from 45.148.10.240 port 41468
2026-06-28T11:22:15.708034-05:00 claude-cloud sshd[4161947]: Connection closed by invalid user trading 45.148.10.240 port 41468 [preauth]
2026-06-28T11:23:20.509017-05:00 claude-cloud sshd[4162117]: Connection closed by authenticating user root 45.198.224.46 port 44948 [preauth]
2026-06-28T11:23:54.192442-05:00 claude-cloud sshd[4162311]: Connection closed by authenticating user root 115.248.8.65 port 40888 [preauth]
2026-06-28T11:24:00.532335-05:00 claude-cloud sshd[4162333]: Connection closed by authenticating user root 45.148.10.240 port 37570 [preauth]
2026-06-28T11:25:01.106259-05:00 claude-cloud CRON[4162498]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-28T11:25:01.112144-05:00 claude-cloud CRON[4162498]: pam_unix(cron:session): session closed for user root
2026-06-28T11:25:42.077497-05:00 claude-cloud sshd[4162601]: Invalid user shardeum from 45.148.10.240 port 57484
2026-06-28T11:25:42.089428-05:00 claude-cloud sshd[4162601]: Connection closed by invalid user shardeum 45.148.10.240 port 57484 [preauth]
2026-06-28T11:25:54.003009-05:00 claude-cloud sshd[4162618]: Connection closed by authenticating user root 27.71.230.31 port 56874 [preauth]
2026-06-28T11:26:05.745799-05:00 claude-cloud systemd-logind[853]: New session c4514 of user claude.
2026-06-28T11:26:06.047665-05:00 claude-cloud systemd-logind[853]: Session c4514 logged out. Waiting for processes to exit.
2026-06-28T11:26:06.049058-05:00 claude-cloud systemd-logind[853]: Removed session c4514.
2026-06-28T11:27:30.979046-05:00 claude-cloud sshd[4162940]: Connection closed by authenticating user root 45.148.10.240 port 48494 [preauth]
2026-06-28T11:27:39.321910-05:00 claude-cloud sshd[4162949]: Invalid user pi from 115.248.8.65 port 52292
2026-06-28T11:27:39.755335-05:00 claude-cloud sshd[4162949]: Connection closed by invalid user pi 115.248.8.65 port 52292 [preauth]
2026-06-28T11:28:29.727366-05:00 claude-cloud sshd[4163140]: Connection closed by authenticating user root 186.96.145.241 port 39344 [preauth]
2026-06-28T11:29:13.789863-05:00 claude-cloud sshd[4163246]: Received disconnect from 38.137.11.14 port 60213:11: Bye Bye [preauth]
2026-06-28T11:29:13.790255-05:00 claude-cloud sshd[4163246]: Disconnected from authenticating user root 38.137.11.14 port 60213 [preauth]
2026-06-28T11:29:28.281680-05:00 claude-cloud sshd[4163307]: Connection closed by authenticating user root 45.148.10.240 port 52780 [preauth]
2026-06-28T11:31:09.311633-05:00 claude-cloud systemd-logind[853]: New session c4515 of user claude.
2026-06-28T11:31:09.627822-05:00 claude-cloud systemd-logind[853]: Session c4515 logged out. Waiting for processes to exit.
2026-06-28T11:31:09.629100-05:00 claude-cloud systemd-logind[853]: Removed session c4515.
2026-06-28T11:31:20.780946-05:00 claude-cloud sshd[4163664]: Connection closed by authenticating user root 45.148.10.240 port 55902 [preauth]
2026-06-28T11:31:20.857841-05:00 claude-cloud sshd[4163632]: Invalid user httpadmin from 115.248.8.65 port 39636
2026-06-28T11:31:21.223951-05:00 claude-cloud sshd[4163632]: Connection closed by invalid user httpadmin 115.248.8.65 port 39636 [preauth]
2026-06-28T11:31:45.608389-05:00 claude-cloud sshd[4163686]: Connection closed by authenticating user root 27.71.230.31 port 50918 [preauth]
2026-06-28T11:33:09.455396-05:00 claude-cloud sshd[4163992]: Invalid user firedancer from 45.148.10.240 port 59598
2026-06-28T11:33:09.467381-05:00 claude-cloud sshd[4163992]: Connection closed by invalid user firedancer 45.148.10.240 port 59598 [preauth]
2026-06-28T11:33:26.326847-05:00 claude-cloud sshd[4164039]: Connection closed by authenticating user root 45.148.10.239 port 58630 [preauth]
2026-06-28T11:33:53.084295-05:00 claude-cloud sshd[4164179]: Invalid user tai from 2.57.121.112 port 63490
2026-06-28T11:33:53.109999-05:00 claude-cloud sshd[4164179]: Connection closed by invalid user tai 2.57.121.112 port 63490 [preauth]
2026-06-28T11:34:01.902701-05:00 claude-cloud sshd[4164194]: Invalid user teamspeak from 45.198.224.46 port 36884
2026-06-28T11:34:02.811054-05:00 claude-cloud sshd[4164194]: Connection closed by invalid user teamspeak 45.198.224.46 port 36884 [preauth]
2026-06-28T11:35:01.123380-05:00 claude-cloud CRON[4164360]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-28T11:35:01.128922-05:00 claude-cloud CRON[4164360]: pam_unix(cron:session): session closed for user root
2026-06-28T11:35:03.639909-05:00 claude-cloud sshd[4164372]: Invalid user blockchain from 45.148.10.240 port 39404
2026-06-28T11:35:03.651350-05:00 claude-cloud sshd[4164372]: Connection closed by invalid user blockchain 45.148.10.240 port 39404 [preauth]
2026-06-28T11:35:05.952896-05:00 claude-cloud sshd[4164363]: Invalid user admin from 115.248.8.65 port 43170
2026-06-28T11:35:06.558976-05:00 claude-cloud sshd[4164363]: Connection closed by invalid user admin 115.248.8.65 port 43170 [preauth]
2026-06-28T11:36:12.872533-05:00 claude-cloud systemd-logind[853]: New session c4516 of user claude.
2026-06-28T11:36:13.372020-05:00 claude-cloud systemd-logind[853]: Session c4516 logged out. Waiting for processes to exit.
2026-06-28T11:36:13.373618-05:00 claude-cloud systemd-logind[853]: Removed session c4516.
2026-06-28T11:36:50.066757-05:00 claude-cloud sshd[4164707]: Connection closed by authenticating user www-data 45.148.10.240 port 42366 [preauth]
2026-06-28T11:37:39.667907-05:00 claude-cloud sshd[4164821]: Connection closed by authenticating user root 27.71.230.31 port 52004 [preauth]
2026-06-28T11:38:27.540117-05:00 claude-cloud sshd[4165006]: Connection reset by 198.235.24.66 port 62242 [preauth]
2026-06-28T11:38:30.675673-05:00 claude-cloud sshd[4165034]: Invalid user user from 45.148.10.240 port 52460
2026-06-28T11:38:30.688855-05:00 claude-cloud sshd[4165034]: Connection closed by invalid user user 45.148.10.240 port 52460 [preauth]
2026-06-28T11:38:54.575713-05:00 claude-cloud sshd[4165087]: Invalid user teamspeak from 115.248.8.65 port 39120
2026-06-28T11:38:55.225615-05:00 claude-cloud sshd[4165087]: Connection closed by invalid user teamspeak 115.248.8.65 port 39120 [preauth]
2026-06-28T11:39:42.497862-05:00 claude-cloud sshd[4165218]: Invalid user admin from 193.46.255.86 port 38824
2026-06-28T11:39:42.524729-05:00 claude-cloud sshd[4165218]: Connection closed by invalid user admin 193.46.255.86 port 38824 [preauth]
2026-06-28T11:40:16.414325-05:00 claude-cloud sshd[4165346]: Invalid user user from 45.148.10.240 port 36294
2026-06-28T11:40:16.426563-05:00 claude-cloud sshd[4165346]: Connection closed by invalid user user 45.148.10.240 port 36294 [preauth]
2026-06-28T11:41:16.809568-05:00 claude-cloud systemd-logind[853]: New session c4517 of user claude.
2026-06-28T11:41:17.097795-05:00 claude-cloud systemd-logind[853]: Session c4517 logged out. Waiting for processes to exit.
2026-06-28T11:41:17.099831-05:00 claude-cloud systemd-logind[853]: Removed session c4517.
2026-06-28T11:42:07.464791-05:00 claude-cloud sshd[4165662]: Connection closed by authenticating user root 45.148.10.240 port 58724 [preauth]
2026-06-28T11:42:42.517400-05:00 claude-cloud sshd[4165766]: Connection closed by authenticating user root 115.248.8.65 port 49334 [preauth]
2026-06-28T11:42:57.323388-05:00 claude-cloud sshd[4165826]: Received disconnect from 38.137.11.14 port 54247:11: Bye Bye [preauth]
2026-06-28T11:42:57.323585-05:00 claude-cloud sshd[4165826]: Disconnected from authenticating user root 38.137.11.14 port 54247 [preauth]
2026-06-28T11:43:29.603911-05:00 claude-cloud sshd[4165911]: Connection closed by authenticating user root 186.96.145.241 port 31870 [preauth]
2026-06-28T11:43:38.338806-05:00 claude-cloud sshd[4165916]: Connection closed by authenticating user root 27.71.230.31 port 50468 [preauth]
2026-06-28T11:43:53.027947-05:00 claude-cloud sshd[4166001]: Invalid user elround from 45.148.10.240 port 44746
2026-06-28T11:43:53.041409-05:00 claude-cloud sshd[4166001]: Connection closed by invalid user elround 45.148.10.240 port 44746 [preauth]
2026-06-28T11:44:35.492953-05:00 claude-cloud sshd[4166135]: Connection closed by authenticating user root 45.198.224.46 port 45846 [preauth]
2026-06-28T11:45:01.139041-05:00 claude-cloud CRON[4166279]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-28T11:45:01.145451-05:00 claude-cloud CRON[4166279]: pam_unix(cron:session): session closed for user root
2026-06-28T11:45:12.045215-05:00 claude-cloud sshd[4166309]: Received disconnect from 38.137.11.14 port 12581:11: Bye Bye [preauth]
2026-06-28T11:45:12.045717-05:00 claude-cloud sshd[4166309]: Disconnected from authenticating user root 38.137.11.14 port 12581 [preauth]
2026-06-28T11:45:39.685191-05:00 claude-cloud sshd[4166374]: Invalid user elrond from 45.148.10.240 port 58026
2026-06-28T11:45:39.697710-05:00 claude-cloud sshd[4166374]: Connection closed by invalid user elrond 45.148.10.240 port 58026 [preauth]
2026-06-28T11:46:20.522241-05:00 claude-cloud systemd-logind[853]: New session c4518 of user claude.
2026-06-28T11:46:20.944321-05:00 claude-cloud systemd-logind[853]: Session c4518 logged out. Waiting for processes to exit.
2026-06-28T11:46:20.946159-05:00 claude-cloud systemd-logind[853]: Removed session c4518.
2026-06-28T11:46:25.488661-05:00 claude-cloud sshd[4166487]: Connection closed by authenticating user root 115.248.8.65 port 56854 [preauth]
2026-06-28T11:47:15.623128-05:00 claude-cloud sshd[4166685]: Received disconnect from 146.190.112.200 port 51068:11: Bye Bye [preauth]
2026-06-28T11:47:15.623469-05:00 claude-cloud sshd[4166685]: Disconnected from authenticating user root 146.190.112.200 port 51068 [preauth]
2026-06-28T11:47:26.035579-05:00 claude-cloud sshd[4166715]: Received disconnect from 105.96.13.6 port 49752:11: Bye Bye [preauth]
2026-06-28T11:47:26.035816-05:00 claude-cloud sshd[4166715]: Disconnected from authenticating user root 105.96.13.6 port 49752 [preauth]
2026-06-28T11:47:27.422492-05:00 claude-cloud sshd[4166717]: Received disconnect from 38.137.11.14 port 5013:11: Bye Bye [preauth]
2026-06-28T11:47:27.422724-05:00 claude-cloud sshd[4166717]: Disconnected from authenticating user root 38.137.11.14 port 5013 [preauth]
2026-06-28T11:47:36.321269-05:00 claude-cloud sshd[4166739]: Invalid user admin from 45.148.10.240 port 44788
2026-06-28T11:47:36.333597-05:00 claude-cloud sshd[4166739]: Connection closed by invalid user admin 45.148.10.240 port 44788 [preauth]
2026-06-28T11:48:16.400179-05:00 claude-cloud sshd[4166838]: Received disconnect from 36.66.16.233 port 34118:11: Bye Bye [preauth]
2026-06-28T11:48:16.400876-05:00 claude-cloud sshd[4166838]: Disconnected from authenticating user root 36.66.16.233 port 34118 [preauth]
2026-06-28T11:48:26.343158-05:00 claude-cloud sshd[4166883]: banner exchange: Connection from 192.253.248.180 port 62545: invalid format
2026-06-28T11:48:38.862209-05:00 claude-cloud sshd[4166924]: Received disconnect from 131.100.242.102 port 52382:11: Bye Bye [preauth]
2026-06-28T11:48:38.862630-05:00 claude-cloud sshd[4166924]: Disconnected from authenticating user root 131.100.242.102 port 52382 [preauth]
2026-06-28T11:49:26.225119-05:00 claude-cloud sshd[4167085]: Invalid user test from 116.228.233.93 port 35195
2026-06-28T11:49:26.413083-05:00 claude-cloud sshd[4167085]: Received disconnect from 116.228.233.93 port 35195:11: Bye Bye [preauth]
2026-06-28T11:49:26.413435-05:00 claude-cloud sshd[4167085]: Disconnected from invalid user test 116.228.233.93 port 35195 [preauth]
2026-06-28T11:49:26.984066-05:00 claude-cloud sshd[4167096]: Connection closed by authenticating user root 45.148.10.240 port 53256 [preauth]
2026-06-28T11:49:36.103248-05:00 claude-cloud sshd[4167117]: Connection closed by 91.92.40.231 port 38640
2026-06-28T11:49:39.030733-05:00 claude-cloud sshd[4167105]: Connection closed by authenticating user root 27.71.230.31 port 34966 [preauth]
2026-06-28T11:49:42.049190-05:00 claude-cloud sshd[4167128]: Received disconnect from 38.137.11.14 port 44124:11: Bye Bye [preauth]
2026-06-28T11:49:42.049531-05:00 claude-cloud sshd[4167128]: Disconnected from authenticating user root 38.137.11.14 port 44124 [preauth]
2026-06-28T11:49:42.248119-05:00 claude-cloud sshd[4167130]: Received disconnect from 197.248.8.33 port 33100:11: Bye Bye [preauth]
2026-06-28T11:49:42.248389-05:00 claude-cloud sshd[4167130]: Disconnected from authenticating user root 197.248.8.33 port 33100 [preauth]
2026-06-28T11:50:00.441214-05:00 claude-cloud sshd[4167195]: Connection closed by 161.35.47.134 port 60418
2026-06-28T11:50:02.799086-05:00 claude-cloud sshd[4167193]: Connection closed by authenticating user root 115.248.8.65 port 54370 [preauth]
2026-06-28T11:50:56.821763-05:00 claude-cloud sshd[4167379]: Received disconnect from 197.248.8.33 port 53252:11: Bye Bye [preauth]
2026-06-28T11:50:56.822060-05:00 claude-cloud sshd[4167379]: Disconnected from authenticating user root 197.248.8.33 port 53252 [preauth]
2026-06-28T11:51:11.536086-05:00 claude-cloud sshd[4167427]: Received disconnect from 45.78.206.111 port 37374:11: Bye Bye [preauth]
2026-06-28T11:51:11.536210-05:00 claude-cloud sshd[4167427]: Disconnected from authenticating user root 45.78.206.111 port 37374 [preauth]
2026-06-28T11:51:11.536467-05:00 claude-cloud sshd[4167429]: Invalid user user from 45.148.10.240 port 51660
2026-06-28T11:51:11.548948-05:00 claude-cl2026-06-28T15:06:29.690753-05:00 claude-cloud sshd[10660]: Connection closed by authenticating user root 186.96.145.241 port 61768 [preauth]
2026-06-28T15:06:54.893384-05:00 claude-cloud sshd[10769]: banner exchange: Connection from 192.253.248.180 port 63197: invalid format
2026-06-28T15:08:03.779590-05:00 claude-cloud sshd[10936]: Invalid user test2 from 115.248.8.65 port 47030
2026-06-28T15:08:04.126347-05:00 claude-cloud sshd[10936]: Connection closed by invalid user test2 115.248.8.65 port 47030 [preauth]
2026-06-28T15:09:08.757591-05:00 claude-cloud sshd[11147]: Connection reset by authenticating user root 45.148.10.151 port 24026 [preauth]
2026-06-28T15:10:19.895368-05:00 claude-cloud systemd-logind[853]: New session c4572 of user claude.
2026-06-28T15:10:20.406666-05:00 claude-cloud systemd-logind[853]: Session c4572 logged out. Waiting for processes to exit.
2026-06-28T15:10:20.408193-05:00 claude-cloud systemd-logind[853]: Removed session c4572.
2026-06-28T15:11:47.415073-05:00 claude-cloud sshd[11611]: Connection closed by authenticating user root 27.71.230.31 port 40506 [preauth]
2026-06-28T15:11:49.030464-05:00 claude-cloud sshd[11667]: Connection closed by authenticating user root 115.248.8.65 port 36586 [preauth]
2026-06-28T15:14:43.846713-05:00 claude-cloud sshd[12187]: Connection reset by authenticating user root 45.227.254.170 port 2694 [preauth]
2026-06-28T15:15:01.903485-05:00 claude-cloud CRON[12254]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-28T15:15:01.909778-05:00 claude-cloud CRON[12254]: pam_unix(cron:session): session closed for user root
2026-06-28T15:15:23.910674-05:00 claude-cloud systemd-logind[853]: New session c4573 of user claude.
2026-06-28T15:15:24.376955-05:00 claude-cloud systemd-logind[853]: Session c4573 logged out. Waiting for processes to exit.
2026-06-28T15:15:24.378668-05:00 claude-cloud systemd-logind[853]: Removed session c4573.
2026-06-28T15:15:33.631887-05:00 claude-cloud sshd[12339]: Connection closed by authenticating user root 115.248.8.65 port 43346 [preauth]
2026-06-28T15:16:27.009564-05:00 claude-cloud sshd[12485]: Connection closed by authenticating user root 45.198.224.46 port 54850 [preauth]
2026-06-28T15:17:01.920873-05:00 claude-cloud CRON[12615]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-28T15:17:01.928145-05:00 claude-cloud CRON[12615]: pam_unix(cron:session): session closed for user root
2026-06-28T15:17:12.301368-05:00 claude-cloud sshd[12638]: Connection closed by authenticating user root 80.94.92.55 port 59630 [preauth]
2026-06-28T15:18:04.973730-05:00 claude-cloud sshd[12754]: Connection closed by authenticating user root 27.71.230.31 port 60406 [preauth]
2026-06-28T15:18:15.441410-05:00 claude-cloud sshd[12812]: Connection closed by 161.35.47.134 port 35452
2026-06-28T15:19:12.799089-05:00 claude-cloud sshd[12989]: Connection closed by authenticating user root 115.248.8.65 port 55258 [preauth]
2026-06-28T15:19:37.113087-05:00 claude-cloud sshd[13061]: Connection closed by authenticating user root 80.94.92.55 port 34398 [preauth]
2026-06-28T15:20:12.921393-05:00 claude-cloud sshd[13163]: Connection closed by authenticating user root 186.96.145.241 port 53934 [preauth]
2026-06-28T15:20:18.906624-05:00 claude-cloud sshd[13185]: Connection reset by authenticating user root 45.227.254.170 port 31940 [preauth]
2026-06-28T15:20:27.778871-05:00 claude-cloud systemd-logind[853]: New session c4574 of user claude.
2026-06-28T15:20:28.328199-05:00 claude-cloud systemd-logind[853]: Session c4574 logged out. Waiting for processes to exit.
2026-06-28T15:20:28.330867-05:00 claude-cloud systemd-logind[853]: Removed session c4574.
2026-06-28T15:22:20.832823-05:00 claude-cloud sshd[13565]: Connection closed by authenticating user root 80.94.92.55 port 37360 [preauth]
2026-06-28T15:22:59.001514-05:00 claude-cloud sshd[13692]: Connection closed by authenticating user root 115.248.8.65 port 52276 [preauth]
2026-06-28T15:24:48.971180-05:00 claude-cloud sshd[13873]: Connection closed by authenticat2026-06-29T18:19:28.659747-05:00 claude-cloud sshd[320581]: Invalid user tyrus from 2.57.121.112 port 39144
2026-06-29T18:19:28.685148-05:00 claude-cloud sshd[320581]: Connection closed by invalid user tyrus 2.57.121.112 port 39144 [preauth]
2026-06-29T18:19:51.460941-05:00 claude-cloud sshd[320616]: Invalid user ubuntu from 120.48.54.130 port 54118
2026-06-29T18:19:51.616615-05:00 claude-cloud sshd[320616]: Received disconnect from 120.48.54.130 port 54118:11: Bye Bye [preauth]
2026-06-29T18:19:51.616728-05:00 claude-cloud sshd[320616]: Disconnected from invalid user ubuntu 120.48.54.130 port 54118 [preauth]
2026-06-29T18:20:23.904630-05:00 claude-cloud sshd[320661]: Connection reset by authenticating user root 45.148.10.147 port 19482 [preauth]
2026-06-29T18:20:31.970522-05:00 claude-cloud sshd[320678]: Connection closed by authenticating user root 115.248.8.65 port 58498 [preauth]
2026-06-29T18:20:43.924514-05:00 claude-cloud sshd[320677]: Connection closed by authenticating user root 27.71.230.31 port 54234 [preauth]
2026-06-29T18:20:49.330824-05:00 claude-cloud sshd[320708]: Connection closed by authenticating user root 193.46.255.86 port 48840 [preauth]
2026-06-29T18:21:03.329925-05:00 claude-cloud sshd[320746]: Received disconnect from 103.97.101.25 port 40460:11: Bye Bye [preauth]
2026-06-29T18:21:03.332439-05:00 claude-cloud sshd[320746]: Disconnected from authenticating user root 103.97.101.25 port 40460 [preauth]
2026-06-29T18:21:39.976798-05:00 claude-cloud sshd[320790]: Received disconnect from 120.48.54.130 port 35368:11: Bye Bye [preauth]
2026-06-29T18:21:39.977195-05:00 claude-cloud sshd[320790]: Disconnected from authenticating user root 120.48.54.130 port 35368 [preauth]
2026-06-29T18:21:46.985703-05:00 claude-cloud systemd-logind[853]: New session c4982 of user claude.
2026-06-29T18:21:47.254870-05:00 claude-cloud systemd-logind[853]: Session c4982 logged out. Waiting for processes to exit.
2026-06-29T18:21:47.256979-05:00 claude-cloud systemd-logind[853]: Removed session c4982.
2026-06-29T18:22:44.200716-05:00 claude-cloud sshd[320892]: Received disconnect from 103.97.101.25 port 56842:11: Bye Bye [preauth]
2026-06-29T18:22:44.201231-05:00 claude-cloud sshd[320892]: Disconnected from authenticating user root 103.97.101.25 port 56842 [preauth]
2026-06-29T18:23:28.340050-05:00 claude-cloud sshd[320983]: Received disconnect from 120.48.54.130 port 35640:11: Bye Bye [preauth]
2026-06-29T18:23:28.340552-05:00 claude-cloud sshd[320983]: Disconnected from authenticating user root 120.48.54.130 port 35640 [preauth]
2026-06-29T18:24:07.158754-05:00 claude-cloud sshd[321028]: Invalid user admin from 120.236.49.131 port 51902
2026-06-29T18:24:08.974318-05:00 claude-cloud sshd[321028]: Connection closed by invalid user admin 120.236.49.131 port 51902 [preauth]
2026-06-29T18:24:12.015459-05:00 claude-cloud sshd[321033]: Connection closed by authenticating user root 115.248.8.65 port 42450 [preauth]
2026-06-29T18:24:23.851332-05:00 claude-cloud sshd[321062]: Invalid user dep from 103.97.101.25 port 51998
2026-06-29T18:24:24.053151-05:00 claude-cloud sshd[321062]: Received disconnect from 103.97.101.25 port 51998:11: Bye Bye [preauth]
2026-06-29T18:24:24.053362-05:00 claude-cloud sshd[321062]: Disconnected from invalid user dep 103.97.101.25 port 51998 [preauth]
2026-06-29T18:24:46.608573-05:00 claude-cloud sshd[321088]: Invalid user orangepi from 120.236.49.131 port 47574
2026-06-29T18:24:47.309685-05:00 claude-cloud sshd[321088]: Connection closed by invalid user orangepi 120.236.49.131 port 47574 [preauth]
2026-06-29T18:25:02.008185-05:00 claude-cloud CRON[321136]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-29T18:25:02.017931-05:00 claude-cloud CRON[321136]: pam_unix(cron:session): session closed for user root
2026-06-29T18:25:17.225238-05:00 claude-cloud sshd[321145]: Invalid user odoo from 120.48.54.130 port 50640
2026-06-29T18:25:17.384312-05:00 claude-cloud sshd[321145]: Received disconnect from 120.48.54.130 port 50640:11: Bye Bye [preauth]
2026-06-29T18:25:17.384670-05:00 claude-cloud sshd[321145]: Disconnected from invalid user odoo 120.48.54.130 port 50640 [preauth]
2026-06-29T18:25:26.913848-05:00 claude-cloud sshd[321147]: Connection closed by authenticating user root 120.236.49.131 port 43048 [preauth]
2026-06-29T18:26:11.666425-05:00 claude-cloud sshd[321234]: Invalid user user-1 from 103.97.101.25 port 48188
2026-06-29T18:26:11.863859-05:00 claude-cloud sshd[321234]: Received disconnect from 103.97.101.25 port 48188:11: Bye Bye [preauth]
2026-06-29T18:26:11.864113-05:00 claude-cloud sshd[321234]: Disconnected from invalid user user-1 103.97.101.25 port 48188 [preauth]
2026-06-29T18:26:49.703755-05:00 claude-cloud sshd[321269]: Connection closed by authenticating user root 27.71.230.31 port 47530 [preauth]
2026-06-29T18:26:51.264310-05:00 claude-cloud systemd-logind[853]: New session c4983 of user claude.
2026-06-29T18:26:51.525960-05:00 claude-cloud systemd-logind[853]: Session c4983 logged out. Waiting for processes to exit.
2026-06-29T18:26:51.527929-05:00 claude-cloud systemd-logind[853]: Removed session c4983.
2026-06-29T18:27:05.632712-05:00 claude-cloud sshd[321400]: Received disconnect from 120.48.54.130 port 38012:11: Bye Bye [preauth]
2026-06-29T18:27:05.633344-05:00 claude-cloud sshd[321400]: Disconnected from authenticating user root 120.48.54.130 port 38012 [preauth]
2026-06-29T18:27:59.410961-05:00 claude-cloud sshd[321477]: Received disconnect from 103.97.101.25 port 42478:11: Bye Bye [preauth]
2026-06-29T18:27:59.411618-05:00 claude-cloud sshd[321477]: Disconnected from authenticating user root 103.97.101.25 port 42478 [preauth]
2026-06-29T18:28:00.905977-05:00 claude-cloud sshd[321485]: Connection reset by authenticating user root 45.148.10.157 port 45136 [preauth]
2026-06-29T18:28:01.185036-05:00 claude-cloud sshd[321475]: Connection closed by authenticating user root 115.248.8.65 port 39514 [preauth]
2026-06-29T18:28:31.813140-05:00 claude-cloud sshd[321523]: Invalid user centos from 45.198.224.46 port 59516
2026-06-29T18:28:32.515982-05:00 claude-cloud sshd[321523]: Connection closed by invalid user centos 45.198.224.46 port 59516 [preauth]
2026-06-29T18:28:56.063495-05:00 claude-cloud sshd[321574]: Received disconnect from 120.48.54.130 port 59264:11: Bye Bye [preauth]
2026-06-29T18:28:56.063946-05:00 claude-cloud sshd[321574]: Disconnected from authenticating user root 120.48.54.130 port 59264 [preauth]
2026-06-29T18:29:40.952347-05:00 claude-cloud sshd[321645]: Received disconnect from 103.97.101.25 port 39018:11: Bye Bye [preauth]
2026-06-29T18:29:40.952875-05:00 claude-cloud sshd[321645]: Disconnected from authenticating user root 103.97.101.25 port 39018 [preauth]
2026-06-29T18:30:48.275081-05:00 claude-cloud sshd[321744]: Received disconnect from 120.48.54.130 port 33092:11: Bye Bye [preauth]
2026-06-29T18:30:48.275596-05:00 claude-cloud sshd[321744]: Disconnected from authenticating user root 120.48.54.130 port 33092 [preauth]
2026-06-29T18:31:23.517540-05:00 claude-cloud sshd[321801]: Invalid user elastic from 103.97.101.25 port 60530
2026-06-29T18:31:23.711500-05:00 claude-cloud sshd[321801]: Received disconnect from 103.97.101.25 port 60530:11: Bye Bye [preauth]
2026-06-29T18:31:23.711694-05:00 claude-cloud sshd[321801]: Disconnected from invalid user elastic 103.97.101.25 port 60530 [preauth]
2026-06-29T18:31:26.622515-05:00 claude-cloud sshd[321818]: Connection closed by authenticating user root 45.148.10.121 port 57400 [preauth]
2026-06-29T18:31:40.078872-05:00 claude-cloud sshd[321832]: Connection closed by authenticating user root 115.248.8.65 port 42734 [preauth]
2026-06-29T18:32:00.649711-05:00 claude-cloud systemd-logind[853]: New session c4984 of user claude.
2026-06-29T18:32:01.207772-05:00 claude-cloud systemd-logind[853]: Session c4984 logged out. Waiting for processes to exit.
2026-06-29T18:32:01.208597-05:00 claude-cloud systemd-logind[853]: Removed session c4984.
2026-06-29T18:32:47.410190-05:00 claude-cloud sshd[321953]: Received disconnect from 120.48.54.130 port 41154:11: Bye Bye [preauth]
2026-06-29T18:32:47.410712-05:00 claude-cloud sshd[321953]: Disconnected from authenticating user root 120.48.54.130 port 41154 [preauth]
2026-06-29T18:32:53.307244-05:00 claude-cloud sshd[321930]: Connection closed by authenticating user root 27.71.230.31 port 35696 [preauth]
2026-06-29T18:34:39.445039-05:00 claude-cloud sshd[322122]: Received disconnect from 120.48.54.130 port 54980:11: Bye Bye [preauth]
2026-06-29T18:34:39.445724-05:00 claude-cloud sshd[322122]: Disconnected from authenticating user root 120.48.54.130 port 54980 [preauth]
2026-06-29T18:35:01.035411-05:00 claude-cloud CRON[322170]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-29T18:35:01.043425-05:00 claude-cloud CRON[322170]: pam_unix(cron:session): session closed for user root
2026-06-29T18:35:24.191168-05:00 claude-cloud sshd[322182]: Connection closed by authenticating user root 115.248.8.65 port 47484 [preauth]
2026-06-29T18:35:34.866534-05:00 claude-cloud sshd[322220]: Connection reset by authenticating user root 45.148.10.147 port 42154 [preauth]
2026-06-29T18:36:33.536241-05:00 claude-cloud sshd[322309]: Received disconnect from 120.48.54.130 port 46024:11: Bye Bye [preauth]
2026-06-29T18:36:33.536720-05:00 claude-cloud sshd[322309]: Disconnected from authenticating user root 120.48.54.130 port 46024 [preauth]
2026-06-29T18:38:06.825466-05:00 claude-cloud sshd[322511]: Invalid user ubuntu from 45.198.224.46 port 55510
2026-06-29T18:38:07.580174-05:00 claude-cloud sshd[322511]: Connection closed by invalid user ubuntu 45.198.224.46 port 55510 [preauth]
2026-06-29T18:39:00.608234-05:00 claude-cloud sshd[322555]: Connection closed by authenticating user root 27.71.230.31 port 35676 [preauth]
2026-06-29T18:39:09.461318-05:00 claude-cloud sshd[322615]: Connection closed by authenticating user root 115.248.8.65 port 39330 [preauth]
2026-06-29T18:39:56.548479-05:00 claude-cloud sshd[322694]: Connection closed by authenticating user root 167.233.84.171 port 51944 [preauth]
2026-06-29T18:43:06.832001-05:00 claude-cloud sshd[322990]: Connection reset by authenticating user root 45.148.10.147 port 46506 [preauth]
2026-06-29T18:43:14.655171-05:00 claude-cloud sshd[322995]: Connection closed by authenticating user root 115.248.8.65 port 52712 [preauth]
2026-06-29T18:45:01.061997-05:00 claude-cloud CRON[323171]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-29T18:45:01.070517-05:00 claude-cloud CRON[323171]: pam_unix(cron:session): session closed for user root
2026-06-29T18:45:10.432659-05:00 claude-cloud sshd[323123]: Connection closed by authenticating user root 27.71.230.31 port 49628 [preauth]
2026-06-29T18:45:50.995724-05:00 claude-cloud sshd[323228]: Invalid user demo from 101.126.54.245 port 52730
2026-06-29T18:45:51.148423-05:00 claude-cloud sshd[323228]: Received disconnect from 101.126.54.245 port 52730:11: Bye Bye [preauth]
2026-06-29T18:45:51.148836-05:00 claude-cloud sshd[323228]: Disconnected from invalid user demo 101.126.54.245 port 52730 [preauth]
2026-06-29T18:46:46.984856-05:00 claude-cloud sshd[323329]: Received disconnect from 43.156.92.183 port 60182:11: Bye Bye [preauth]
2026-06-29T18:46:46.985410-05:00 claude-cloud sshd[323329]: Disconnected from authenticating user root 43.156.92.183 port 60182 [preauth]
2026-06-29T18:47:13.728735-05:00 claude-cloud sshd[323368]: Connection closed by authenticating user root 115.248.8.65 port 41870 [preauth]
2026-06-29T18:47:48.507102-05:00 claude-cloud sshd[323473]: Connection closed by authenticating user root 45.198.224.46 port 56282 [preauth]
2026-06-29T18:48:54.834456-05:00 claude-cloud sshd[323590]: Connection closed by 161.35.47.134 port 57172
2026-06-29T18:49:40.595360-05:00 claude-cloud sshd[323664]: Invalid user test from 202.29.225.206 port 47308
2026-06-29T18:49:40.784668-05:00 claude-cloud sshd[323664]: Received disconnect from 202.29.225.206 port 47308:11: Bye Bye [preauth]
2026-06-29T18:49:40.785166-05:00 claude-cloud sshd[323664]: Disconnected from invalid user test 202.29.225.206 port 47308 [preauth]
2026-06-29T18:50:40.412119-05:00 claude-cloud sshd[323762]: Connection reset by authenticating user root 45.148.10.147 port 21598 [preauth]
2026-06-29T18:50:41.667494-05:00 claude-cloud sshd[323756]: Connection closed by authenticating user root 115.248.8.65 port 40446 [preauth]
2026-06-29T18:51:09.317097-05:00 claude-cloud sshd[323764]: Connection closed by authenticating user root 27.71.230.31 port 40158 [preauth]
2026-06-29T18:51:53.848353-05:00 claude-cloud sshd[323883]: Invalid user git from 103.187.146.90 port 54384
2026-06-29T18:51:54.019907-05:00 claude-cloud sshd[323883]: Received disconnect from 103.187.146.90 port 54384:11: Bye Bye [preauth]
2026-06-29T18:51:54.020164-05:00 claude-cloud sshd[323883]: Disconnected from invalid user git 103.187.146.90 port 54384 [preauth]
2026-06-29T18:52:39.306130-05:00 claude-cloud sshd[323952]: Received disconnect from 103.241.43.193 port 43568:11: Bye Bye [preauth]
2026-06-29T18:52:39.306409-05:00 claude-cloud sshd[323952]: Disconnected from authenticating user root 103.241.43.193 port 43568 [preauth]
2026-06-29T18:54:07.609021-05:00 claude-cloud systemd-logind[853]: New session c4985 of user claude.
2026-06-29T18:54:07.918210-05:00 claude-cloud systemd-logind[853]: Session c4985 logged out. Waiting for processes to exit.
2026-06-29T18:54:07.919727-05:00 claude-cloud systemd-logind[853]: Removed session c4985.
2026-06-29T18:54:11.235263-05:00 claude-cloud sshd[324098]: Connection closed by authenticating user root 115.248.8.65 port 58744 [preauth]
2026-06-29T18:55:01.082299-05:00 claude-cloud CRON[324187]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-29T18:55:01.089504-05:00 claude-cloud CRON[324187]: pam_unix(cron:session): session closed for user root
2026-06-29T18:55:07.831904-05:00 claude-cloud sshd[324193]: Received disconnect from 87.121.69.138 port 54912:11: disconnected by user [preauth]
2026-06-29T18:55:07.832134-05:00 claude-cloud sshd[324193]: Disconnected from authenticating user root 87.121.69.138 port 54912 [preauth]
2026-06-29T18:55:18.048126-05:00 claude-cloud sshd[324201]: Received disconnect from 122.168.194.41 port 38692:11: Bye Bye [preauth]
2026-06-29T18:55:18.048376-05:00 claude-cloud sshd[324201]: Disconnected from authenticating user root 122.168.194.41 port 38692 [preauth]
2026-06-29T18:56:58.453762-05:00 claude-cloud sshd[324344]: Connection closed by authenticating user root 27.71.230.31 port 44180 [preauth]
2026-06-29T18:57:21.505009-05:00 claude-cloud sshd[324392]: Connection closed by authenticating user root 45.198.224.46 port 45304 [preauth]
2026-06-29T18:57:42.544351-05:00 claude-cloud sshd[324430]: Connection closed by authenticating user root 115.248.8.65 port 33106 [preauth]
2026-06-29T18:58:15.953324-05:00 claude-cloud sshd[324550]: Connection reset by authenticating user root 45.148.10.151 port 40636 [preauth]
2026-06-29T18:59:10.981506-05:00 claude-cloud sshd[324634]: Received disconnect from 43.156.92.183 port 48028:11: Bye Bye [preauth]
2026-06-29T18:59:10.981746-05:00 claude-cloud sshd[324634]: Disconnected from authenticating user root 43.156.92.183 port 48028 [preauth]
2026-06-29T18:59:11.835373-05:00 claude-cloud systemd-logind[853]: New session c4986 of user claude.
2026-06-29T18:59:12.147052-05:00 claude-cloud systemd-logind[853]: Session c4986 logged out. Waiting for processes to exit.
2026-06-29T18:59:12.148898-05:00 claude-cloud systemd-logind[853]: Removed session c4986.
2026-06-29T19:00:15.084384-05:00 claude-cloud sshd[324744]: Invalid user ubuntu from 103.187.146.90 port 45538
2026-06-29T19:00:15.257374-05:00 claude-cloud sshd[324744]: Received disconnect from 103.187.146.90 port 45538:11: Bye Bye [preauth]
2026-06-29T19:00:15.257551-05:00 claude-cloud sshd[324744]: Disconnected from invalid user ubuntu 103.187.146.90 port 45538 [preauth]
2026-06-29T19:00:24.570896-05:00 claude-cloud sshd[324761]: Received disconnect from 202.29.225.206 port 32776:11: Bye Bye [preauth]
2026-06-29T19:00:24.571113-05:00 claude-cloud sshd[324761]: Disconnected from authenticating user root 202.29.225.206 port 32776 [preauth]
2026-06-29T19:00:55.766255-05:00 claude-cloud sshd[324808]: Received disconnect from 103.241.43.193 port 34850:11: Bye Bye [preauth]
2026-06-29T19:00:55.769033-05:00 claude-cloud sshd[324808]: Disconnected from authenticating user root 103.241.43.193 port 34850 [preauth]
2026-06-29T19:00:58.410143-05:00 claude-cloud sshd[324822]: Received disconnect from 122.168.194.41 port 59024:11: Bye Bye [preauth]
2026-06-29T19:00:58.410381-05:00 claude-cloud sshd[324822]: Disconnected from authenticating user root 122.168.194.41 port 59024 [preauth]
2026-06-29T19:01:14.578134-05:00 claude-cloud sshd[324839]: Connection closed by authenticating user root 115.248.8.65 port 48466 [preauth]
2026-06-29T19:01:22.945540-05:00 claude-cloud sshd[324850]: Invalid user test from 43.156.92.183 port 46074
2026-06-29T19:01:23.129532-05:00 claude-cloud sshd[324850]: Received disconnect from 43.156.92.183 port 46074:11: Bye Bye [preauth]
2026-06-29T19:01:23.129725-05:00 claude-cloud sshd[324850]: Disconnected from invalid user test 43.156.92.183 port 46074 [preauth]
2026-06-29T19:02:03.462554-05:00 claude-cloud sshd[324940]: Received disconnect from 103.187.146.90 port 59710:11: Bye Bye [preauth]
2026-06-29T19:02:03.462942-05:00 claude-cloud sshd[324940]: Disconnected from authenticating user root 103.187.146.90 port 59710 [preauth]
2026-06-29T19:02:19.060979-05:00 claude-cloud sshd[324948]: Received disconnect from 202.29.225.206 port 52700:11: Bye Bye [preauth]
2026-06-29T19:02:19.061408-05:00 claude-cloud sshd[324948]: Disconnected from authenticating user root 202.29.225.206 port 52700 [preauth]
2026-06-29T19:02:49.557921-05:00 claude-cloud sshd[324995]: Received disconnect from 103.241.43.193 port 47858:11: Bye Bye [preauth]
2026-06-29T19:02:49.558344-05:00 claude-cloud sshd[324995]: Disconnected from authenticating user root 103.241.43.193 port 47858 [preauth]
2026-06-29T19:02:54.298212-05:00 claude-cloud sshd[324990]: Connection closed by authenticating user root 27.71.230.31 port 44506 [preauth]
2026-06-29T19:03:02.722897-05:00 claude-cloud sshd[325034]: Connection closed by authenticating user root 171.244.61.79 port 47908 [preauth]
2026-06-29T19:03:14.364110-05:00 claude-cloud sshd[325039]: Received disconnect from 122.168.194.41 port 55418:11: Bye Bye [preauth]
2026-06-29T19:03:14.364493-05:00 claude-cloud sshd[325039]: Disconnected from authenticating user root 122.168.194.41 port 55418 [preauth]
2026-06-29T19:03:33.998504-05:00 claude-cloud sshd[325081]: Received disconnect from 43.156.92.183 port 47652:11: Bye Bye [preauth]
2026-06-29T19:03:33.999199-05:00 claude-cloud sshd[325081]: Disconnected from authenticating user root 43.156.92.183 port 47652 [preauth]
2026-06-29T19:03:56.517068-05:00 claude-cloud sshd[325120]: Invalid user test from 103.187.146.90 port 46318
2026-06-29T19:03:56.690210-05:00 claude-cloud sshd[325120]: Received disconnect from 103.187.146.90 port 46318:11: Bye Bye [preauth]
2026-06-29T19:03:56.690511-05:00 claude-cloud sshd[325120]: Disconnected from invalid user test 103.187.146.90 port 46318 [preauth]
2026-06-29T19:04:16.521631-05:00 claude-cloud systemd-logind[853]: New session c4987 of user claude.
2026-06-29T19:04:16.837252-05:00 claude-cloud systemd-logind[853]: Session c4987 logged out. Waiting for processes to exit.
2026-06-29T19:04:16.839646-05:00 claude-cloud systemd-logind[853]: Removed session c4987.
2026-06-29T19:04:30.944046-05:00 claude-cloud sshd[325193]: Received disconnect from 202.29.225.206 port 34600:11: Bye Bye [preauth]
2026-06-29T19:04:30.944510-05:00 claude-cloud sshd[325193]: Disconnected from authenticating user root 202.29.225.206 port 34600 [preauth]
2026-06-29T19:04:43.098891-05:00 claude-cloud sshd[325205]: Invalid user ubnt from 45.148.10.121 port 58928
2026-06-29T19:04:43.112782-05:00 claude-cloud sshd[325205]: Connection closed by invalid user ubnt 45.148.10.121 port 58928 [preauth]
2026-06-29T19:04:45.135215-05:00 claude-cloud sshd[325212]: Invalid user admin from 2.57.121.25 port 17380
2026-06-29T19:04:45.160310-05:00 claude-cloud sshd[325212]: Connection closed by invalid user admin 2.57.121.25 port 17380 [preauth]
2026-06-29T19:04:48.133006-05:00 claude-cloud sshd[325210]: Connection closed by authenticating user root 115.248.8.65 port 59034 [preauth]
2026-06-29T19:04:59.681370-05:00 claude-cloud sshd[325239]: Invalid user postgres from 103.241.43.193 port 38086
2026-06-29T19:04:59.912538-05:00 claude-cloud sshd[325239]: Received disconnect from 103.241.43.193 port 38086:11: Bye Bye [preauth]
2026-06-29T19:04:59.912755-05:00 claude-cloud sshd[325239]: Disconnected from invalid user postgres 103.241.43.193 port 38086 [preauth]
2026-06-29T19:05:01.103637-05:00 claude-cloud CRON[325241]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-29T19:05:01.113518-05:00 claude-cloud CRON[325241]: pam_unix(cron:session): session closed for user root
2026-06-29T19:05:32.675418-05:00 claude-cloud sshd[325290]: Received disconnect from 122.168.194.41 port 34154:11: Bye Bye [preauth]
2026-06-29T19:05:32.675958-05:00 claude-cloud sshd[325290]: Disconnected from authenticating user root 122.168.194.41 port 34154 [preauth]
2026-06-29T19:05:42.809120-05:00 claude-cloud sshd[325316]: Invalid user postgres from 103.187.146.90 port 34078
2026-06-29T19:05:42.988197-05:00 claude-cloud sshd[325316]: Received disconnect from 103.187.146.90 port 34078:11: Bye Bye [preauth]
2026-06-29T19:05:42.988696-05:00 claude-cloud sshd[325316]: Disconnected from invalid user postgres 103.187.146.90 port 34078 [preauth]
2026-06-29T19:05:46.088970-05:00 claude-cloud sshd[325336]: Invalid user git from 43.156.92.183 port 58912
2026-06-29T19:05:46.263711-05:00 claude-cloud sshd[325336]: Received disconnect from 43.156.92.183 port 58912:11: Bye Bye [preauth]
2026-06-29T19:05:46.263969-05:00 claude-cloud sshd[325336]: Disconnected from invalid user git 43.156.92.183 port 58912 [preauth]
2026-06-29T19:05:51.807205-05:00 claude-cloud sshd[325344]: Connection reset by authenticating user root 45.148.10.152 port 14942 [preauth]
2026-06-29T19:06:30.604387-05:00 claude-cloud sshd[325409]: Invalid user postgres from 202.29.225.206 port 60930
2026-06-29T19:06:30.802337-05:00 claude-cloud sshd[325409]: Received disconnect from 202.29.225.206 port 60930:11: Bye Bye [preauth]
2026-06-29T19:06:30.802698-05:00 claude-cloud sshd[325409]: Disconnected from invalid user postgres 202.29.225.206 port 60930 [preauth]
2026-06-29T19:06:52.334530-05:00 claude-cloud sshd[325432]: Received disconnect from 103.241.43.193 port 48568:11: Bye Bye [preauth]
2026-06-29T19:06:52.334956-05:00 claude-cloud sshd[325432]: Disconnected from authenticating user root 103.241.43.193 port 48568 [preauth]
2026-06-29T19:06:59.728971-05:00 claude-cloud sshd[325456]: Invalid user police from 45.198.224.46 port 41628
2026-06-29T19:07:00.368487-05:00 claude-cloud sshd[325456]: Connection closed by invalid user police 45.198.224.46 port 41628 [preauth]
2026-06-29T19:07:24.351037-05:00 claude-cloud sshd[325488]: Received disconnect from 103.187.146.90 port 55180:11: Bye Bye [preauth]
2026-06-29T19:07:24.351401-05:00 claude-cloud sshd[325488]: Disconnected from authenticating user root 103.187.146.90 port 55180 [preauth]
2026-06-29T19:07:46.948242-05:00 claude-cloud sshd[325606]: Received disconnect from 122.168.194.41 port 56402:11: Bye Bye [preauth]
2026-06-29T19:07:46.948932-05:00 claude-cloud sshd[325606]: Disconnected from authenticating user root 122.168.194.41 port 56402 [preauth]
2026-06-29T19:07:50.112753-05:00 claude-cloud sshd[325613]: Received disconnect from 43.156.92.183 port 48192:11: Bye Bye [preauth]
2026-06-29T19:07:50.113023-05:00 claude-cloud sshd[325613]: Disconnected from authenticating user root 43.156.92.183 port 48192 [preauth]
2026-06-29T19:07:55.654738-05:00 claude-cloud sshd[325633]: Invalid user user from 45.148.10.239 port 47250
2026-06-29T19:07:55.668155-05:00 claude-cloud sshd[325633]: Connection closed by invalid user user 45.148.10.239 port 47250 [preauth]
2026-06-29T19:08:12.908537-05:00 claude-cloud sshd[325656]: Connection closed by authenticating user root 115.248.8.65 port 48290 [preauth]
2026-06-29T19:08:13.779390-05:00 claude-cloud sshd[325661]: Received disconnect from 202.29.225.206 port 48404:11: Bye Bye [preauth]
2026-06-29T19:08:13.779608-05:00 claude-cloud sshd[325661]: Disconnected from authenticating user root 202.29.225.206 port 48404 [preauth]
2026-06-29T19:08:38.820146-05:00 claude-cloud sshd[325702]: Received disconnect from 103.241.43.193 port 60750:11: Bye Bye [preauth]
2026-06-29T19:08:38.820373-05:00 claude-cloud sshd[325702]: Disconnected from authenticating user root 103.241.43.193 port 60750 [preauth]
2026-06-29T19:09:12.689150-05:00 claude-cloud sshd[325752]: Invalid user demo from 103.187.146.90 port 55624
2026-06-29T19:09:12.863777-05:00 claude-cloud sshd[325752]: Received disconnect from 103.187.146.90 port 55624:11: Bye Bye [preauth]
2026-06-29T19:09:12.863933-05:00 claude-cloud sshd[325752]: Disconnected from invalid user demo 103.187.146.90 port 55624 [preauth]
2026-06-29T19:09:18.382307-05:00 claude-cloud sshd[325710]: Connection closed by authenticating user root 27.71.230.31 port 59276 [preauth]
2026-06-29T19:09:21.144452-05:00 claude-cloud systemd-logind[853]: New session c4988 of user claude.
2026-06-29T19:09:21.568711-05:00 claude-cloud systemd-logind[853]: Session c4988 logged out. Waiting for processes to exit.
2026-06-29T19:09:21.571088-05:00 claude-cloud systemd-logind[853]: Removed session c4988.
2026-06-29T19:09:44.767723-05:00 claude-cloud sshd[325826]: Connection closed by 161.35.47.134 port 33336
2026-06-29T19:09:56.537826-05:00 claude-cloud sshd[325843]: Received disconnect from 43.156.92.183 port 58172:11: Bye Bye [preauth]
2026-06-29T19:09:56.538047-05:00 claude-cloud sshd[325843]: Disconnected from authenticating user root 43.156.92.183 port 58172 [preauth]
2026-06-29T19:10:07.809963-05:00 claude-cloud sshd[325878]: Invalid user ubuntu from 122.168.194.41 port 36616
2026-06-29T19:10:08.019590-05:00 claude-cloud sshd[325878]: Received disconnect from 122.168.194.41 port 36616:11: Bye Bye [preauth]
2026-06-29T19:10:08.019767-05:00 claude-cloud sshd[325878]: Disconnected from invalid user ubuntu 122.168.194.41 port 36616 [preauth]
2026-06-29T19:10:09.021502-05:00 claude-cloud sshd[325881]: Received disconnect from 202.29.225.206 port 46980:11: Bye Bye [preauth]
2026-06-29T19:10:09.021763-05:00 claude-cloud sshd[325881]: Disconnected from authenticating user root 202.29.225.206 port 46980 [preauth]
2026-06-29T19:10:28.268343-05:00 claude-cloud sshd[325915]: Received disconnect from 103.241.43.193 port 44438:11: Bye Bye [preauth]
2026-06-29T19:10:28.269075-05:00 claude-cloud sshd[325915]: Disconnected from authenticating user root 103.241.43.193 port 44438 [preauth]
2026-06-29T19:10:58.404855-05:00 claude-cloud sshd[325963]: Received disconnect from 103.187.146.90 port 34512:11: Bye Bye [preauth]
2026-06-29T19:10:58.408594-05:00 claude-cloud sshd[325963]: Disconnected from authenticating user root 103.187.146.90 port 34512 [preauth]
2026-06-29T19:11:40.127407-05:00 claude-cloud sshd[326025]: Connection reset by authenticating user root 62.60.130.219 port 30486 [preauth]
2026-06-29T19:11:43.165197-05:00 claude-cloud sshd[326020]: Connection closed by authenticating user root 115.248.8.65 port 42940 [preauth]
2026-06-29T19:11:52.267717-05:00 claude-cloud sshd[326051]: Invalid user ubuntu from 185.242.3.195 port 47034
2026-06-29T19:11:52.275659-05:00 claude-cloud sshd[326051]: Connection closed by invalid user ubuntu 185.242.3.195 port 47034 [preauth]
2026-06-29T19:12:00.805700-05:00 claude-cloud sshd[326072]: Invalid user demo from 202.29.225.206 port 44530
2026-06-29T19:12:01.003204-05:00 claude-cloud sshd[326072]: Received disconnect from 202.29.225.206 port 44530:11: Bye Bye [preauth]
2026-06-29T19:12:01.003530-05:00 claude-cloud sshd[326072]: Disconnected from invalid user demo 202.29.225.206 port 44530 [preauth]
2026-06-29T19:12:03.978659-05:00 claude-cloud sshd[326086]: Invalid user ubuntu from 43.156.92.183 port 38224
2026-06-29T19:12:04.156761-05:00 claude-cloud sshd[326086]: Received disconnect from 43.156.92.183 port 38224:11: Bye Bye [preauth]
2026-06-29T19:12:04.157163-05:00 claude-cloud sshd[326086]: Disconnected from invalid user ubuntu 43.156.92.183 port 38224 [preauth]
2026-06-29T19:12:19.301821-05:00 claude-cloud sshd[326115]: Invalid user git from 103.241.43.193 port 43006
2026-06-29T19:12:19.534269-05:00 claude-cloud sshd[326115]: Received disconnect from 103.241.43.193 port 43006:11: Bye Bye [preauth]
2026-06-29T19:12:19.534622-05:00 claude-cloud sshd[326115]: Disconnected from invalid user git 103.241.43.193 port 43006 [preauth]
2026-06-29T19:12:22.410467-05:00 claude-cloud sshd[326120]: Invalid user git from 122.168.194.41 port 56062
2026-06-29T19:12:22.623693-05:00 claude-cloud sshd[326120]: Received disconnect from 122.168.194.41 port 56062:11: Bye Bye [preauth]
2026-06-29T19:12:22.624119-05:00 claude-cloud sshd[326120]: Disconnected from invalid user git 122.168.194.41 port 56062 [preauth]
2026-06-29T19:12:50.941055-05:00 claude-cloud sshd[326164]: Received disconnect from 103.187.146.90 port 54128:11: Bye Bye [preauth]
2026-06-29T19:12:50.941643-05:00 claude-cloud sshd[326164]: Disconnected from authenticating user root 103.187.146.90 port 54128 [preauth]
2026-06-29T19:12:53.866913-05:00 claude-cloud sshd[326175]: Invalid user ubnt from 193.46.255.86 port 16360
2026-06-29T19:12:53.892348-05:00 claude-cloud sshd[326175]: Connection closed by invalid user ubnt 193.46.255.86 port 16360 [preauth]
2026-06-29T19:13:32.001817-05:00 claude-cloud sshd[326239]: Received disconnect from 198.199.106.159 port 51362:11: disconnected by user [preauth]
2026-06-29T19:13:32.002810-05:00 claude-cloud sshd[326239]: Disconnected from authenticating user root 198.199.106.159 port 51362 [preauth]
2026-06-29T19:13:44.735653-05:00 claude-cloud sshd[326258]: Received disconnect from 202.29.225.206 port 41886:11: Bye Bye [preauth]
2026-06-29T19:13:44.736210-05:00 claude-cloud sshd[326258]: Disconnected from authenticating user root 202.29.225.206 port 41886 [preauth]
2026-06-29T19:14:11.948813-05:00 claude-cloud sshd[326310]: Received disconnect from 43.156.92.183 port 41732:11: Bye Bye [preauth]
2026-06-29T19:14:11.949308-05:00 claude-cloud sshd[326310]: Disconnected from authenticating user root 43.156.92.183 port 41732 [preauth]
2026-06-29T19:14:17.462606-05:00 claude-cloud sshd[326315]: Received disconnect from 103.241.43.193 port 42664:11: Bye Bye [preauth]
2026-06-29T19:14:17.463335-05:00 claude-cloud sshd[326315]: Disconnected from authenticating user root 103.241.43.193 port 42664 [preauth]
2026-06-29T19:14:28.198045-05:00 claude-cloud systemd-logind[853]: New session c4989 of user claude.
2026-06-29T19:14:28.740397-05:00 claude-cloud systemd-logind[853]: Session c4989 logged out. Waiting for processes to exit.
2026-06-29T19:14:28.741841-05:00 claude-cloud systemd-logind[853]: Removed session c4989.
2026-06-29T19:14:30.814677-05:00 claude-cloud sshd[326359]: Received disconnect from 122.168.194.41 port 48824:11: Bye Bye [preauth]
2026-06-29T19:14:30.814914-05:00 claude-cloud sshd[326359]: Disconnected from authenticating user root 122.168.194.41 port 48824 [preauth]
2026-06-29T19:14:45.548789-05:00 claude-cloud sshd[326397]: Invalid user user from 103.187.146.90 port 48628
2026-06-29T19:14:45.722748-05:00 claude-cloud sshd[326397]: Received disconnect from 103.187.146.90 port 48628:11: Bye Bye [preauth]
2026-06-29T19:14:45.723015-05:00 claude-cloud sshd[326397]: Disconnected from invalid user user 103.187.146.90 port 48628 [preauth]
2026-06-29T19:15:01.134395-05:00 claude-cloud CRON[326426]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-29T19:15:01.152343-05:00 claude-cloud CRON[326426]: pam_unix(cron:session): session closed for user root
2026-06-29T19:15:14.467948-05:00 claude-cloud sshd[326435]: Connection closed by authenticating user root 115.248.8.65 port 41242 [preauth]
2026-06-29T19:15:34.332564-05:00 claude-cloud sshd[326476]: Received disconnect from 202.29.225.206 port 56948:11: Bye Bye [preauth]
2026-06-29T19:15:34.333123-05:00 claude-cloud sshd[326476]: Disconnected from authenticating user root 202.29.225.206 port 56948 [preauth]
2026-06-29T19:15:51.122540-05:00 claude-cloud sshd[326399]: Connection closed by authenticating user root 27.71.230.31 port 51780 [preauth]
2026-06-29T19:16:02.633596-05:00 claude-cloud sshd[326532]: Received disconnect from 103.241.43.193 port 56352:11: Bye Bye [preauth]
2026-06-29T19:16:02.634317-05:00 claude-cloud sshd[326532]: Disconnected from authenticating user root 103.241.43.193 port 56352 [preauth]
2026-06-29T19:16:26.308712-05:00 claude-cloud sshd[326562]: Received disconnect from 43.156.92.183 port 39754:11: Bye Bye [preauth]
2026-06-29T19:16:26.309112-05:00 claude-cloud sshd[326562]: Disconnected from authenticating user root 43.156.92.183 port 39754 [preauth]
2026-06-29T19:16:32.491749-05:00 claude-cloud sshd[326573]: Connection closed by authenticating user root 45.198.224.46 port 39774 [preauth]
2026-06-29T19:16:35.979381-05:00 claude-cloud sshd[326587]: Received disconnect from 103.187.146.90 port 46226:11: Bye Bye [preauth]
2026-06-29T19:16:35.979673-05:00 claude-cloud sshd[326587]: Disconnected from authenticating user root 103.187.146.90 port 46226 [preauth]
2026-06-29T19:16:40.137177-05:00 claude-cloud sshd[326589]: Received disconnect from 122.168.194.41 port 55988:11: Bye Bye [preauth]
2026-06-29T19:16:40.137672-05:00 claude-cloud sshd[326589]: Disconnected from authenticating user root 122.168.194.41 port 55988 [preauth]
2026-06-29T19:17:01.160821-05:00 claude-cloud CRON[326649]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-29T19:17:01.169846-05:00 claude-cloud CRON[326649]: pam_unix(cron:session): session closed for user root
2026-06-29T19:17:04.657424-05:00 claude-cloud sshd[326658]: Connection reset by authenticating user root 45.148.10.147 port 63808 [preauth]
2026-06-29T19:17:22.009264-05:00 claude-cloud sshd[326669]: Received disconnect from 202.29.225.206 port 35054:11: Bye Bye [preauth]
2026-06-29T19:17:22.009614-05:00 claude-cloud sshd[326669]: Disconnected from authenticating user root 202.29.225.206 port 35054 [preauth]
2026-06-29T19:17:39.065369-05:00 claude-cloud sshd[326704]: Connection closed by 77.90.185.16 port 65105
2026-06-29T19:18:01.901626-05:00 claude-cloud sshd[326758]: Received disconnect from 103.241.43.193 port 50452:11: Bye Bye [preauth]
2026-06-29T19:18:01.901880-05:00 claude-cloud sshd[326758]: Disconnected from authenticating user root 103.241.43.193 port 50452 [preauth]
2026-06-29T19:18:28.815324-05:00 claude-cloud sshd[326796]: Received disconnect from 103.187.146.90 port 57264:11: Bye Bye [preauth]
2026-06-29T19:18:28.815895-05:00 claude-cloud sshd[326796]: Disconnected from authenticating user root 103.187.146.90 port 57264 [preauth]
2026-06-29T19:18:33.972468-05:00 claude-cloud sshd[326810]: Received disconnect from 149.56.241.206 port 38918:11: disconnected by user [preauth]
2026-06-29T19:18:33.973094-05:00 claude-cloud sshd[326810]: Disconnected from authenticating user root 149.56.241.206 port 38918 [preauth]
2026-06-29T19:18:39.020323-05:00 claude-cloud sshd[326812]: Received disconnect from 43.156.92.183 port 47650:11: Bye Bye [preauth]
2026-06-29T19:18:39.020635-05:00 claude-cloud sshd[326812]: Disconnected from authenticating user root 43.156.92.183 port 47650 [preauth]
2026-06-29T19:18:49.595083-05:00 claude-cloud sshd[326889]: Connection closed by authenticating user root 115.248.8.65 port 40704 [preauth]
2026-06-29T19:18:50.723806-05:00 claude-cloud sshd[326895]: Invalid user postgres from 122.168.194.41 port 45674
2026-06-29T19:18:50.918017-05:00 claude-cloud sshd[326895]: Received disconnect from 122.168.194.41 port 45674:11: Bye Bye [preauth]
2026-06-29T19:18:50.918320-05:00 claude-cloud sshd[326895]: Disconnected from invalid user postgres 122.168.194.41 port 45674 [preauth]
2026-06-29T19:19:13.077817-05:00 claude-cloud sshd[326934]: Received disconnect from 202.29.225.206 port 54432:11: Bye Bye [preauth]
2026-06-29T19:19:13.079012-05:00 claude-cloud sshd[326934]: Disconnected from authenticating user root 202.29.225.206 port 54432 [preauth]
2026-06-29T19:19:42.394902-05:00 claude-cloud systemd-logind[853]: New session c4990 of user claude.
2026-06-29T19:19:42.883663-05:00 claude-cloud systemd-logind[853]: Session c4990 logged out. Waiting for processes to exit.
2026-06-29T19:19:42.886369-05:00 claude-cloud systemd-logind[853]: Removed session c4990.
2026-06-29T19:19:54.312220-05:00 claude-cloud sshd[327027]: Invalid user user from 103.241.43.193 port 59552
2026-06-29T19:19:54.543854-05:00 claude-cloud sshd[327027]: Received disconnect from 103.241.43.193 port 59552:11: Bye Bye [preauth]
2026-06-29T19:19:54.544259-05:00 claude-cloud sshd[327027]: Disconnected from invalid user user 103.241.43.193 port 59552 [preauth]
2026-06-29T19:20:25.935562-05:00 claude-cloud sshd[327066]: Received disconnect from 103.187.146.90 port 36036:11: Bye Bye [preauth]
2026-06-29T19:20:25.935928-05:00 claude-cloud sshd[327066]: Disconnected from authenticating user root 103.187.146.90 port 36036 [preauth]
2026-06-29T19:20:45.872493-05:00 claude-cloud sshd[327114]: Invalid user demo from 43.156.92.183 port 49072
2026-06-29T19:20:46.042156-05:00 claude-cloud sshd[327114]: Received disconnect from 43.156.92.183 port 49072:11: Bye Bye [preauth]
2026-06-29T19:20:46.042367-05:00 claude-cloud sshd[327114]: Disconnected from invalid user demo 43.156.92.183 port 49072 [preauth]
2026-06-29T19:20:56.296375-05:00 claude-cloud sshd[327113]: Connection closed by authenticating user root 27.71.230.31 port 35280 [preauth]
2026-06-29T19:20:57.285454-05:00 claude-cloud sshd[327138]: Invalid user ubuntu from 202.29.225.206 port 51418
2026-06-29T19:20:57.483072-05:00 claude-cloud sshd[327138]: Received disconnect from 202.29.225.206 port 51418:11: Bye Bye [preauth]
2026-06-29T19:20:57.483454-05:00 claude-cloud sshd[327138]: Disconnected from invalid user ubuntu 202.29.225.206 port 51418 [preauth]
2026-06-29T19:20:59.657754-05:00 claude-cloud sshd[327146]: Invalid user demo from 122.168.194.41 port 44044
2026-06-29T19:20:59.872438-05:00 claude-cloud sshd[327146]: Received disconnect from 122.168.194.41 port 44044:11: Bye Bye [preauth]
2026-06-29T19:20:59.872716-05:00 claude-cloud sshd[327146]: Disconnected from invalid user demo 122.168.194.41 port 44044 [preauth]
2026-06-29T19:21:40.549654-05:00 claude-cloud sshd[327225]: Invalid user demo from 103.241.43.193 port 59594
2026-06-29T19:21:40.557208-05:00 claude-cloud sshd[327184]: Connection closed by authenticating user root 141.11.88.121 port 55016 [preauth]
2026-06-29T19:21:40.781904-05:00 claude-cloud sshd[327225]: Received disconnect from 103.241.43.193 port 59594:11: Bye Bye [preauth]
2026-06-29T19:21:40.782112-05:00 claude-cloud sshd[327225]: Disconnected from invalid user demo 103.241.43.193 port 59594 [preauth]
2026-06-29T19:22:00.376188-05:00 claude-cloud sshd[327231]: Connection closed by authenticating user root 141.11.88.121 port 46948 [preauth]
2026-06-29T19:22:05.126984-05:00 claude-cloud sshd[327274]: Connection closed by 161.35.47.134 port 33680
2026-06-29T19:22:12.299098-05:00 claude-cloud sshd[327279]: Received disconnect from 103.187.146.90 port 51064:11: Bye Bye [preauth]
2026-06-29T19:22:12.299893-05:00 claude-cloud sshd[327279]: Disconnected from authenticating user root 103.187.146.90 port 51064 [preauth]
2026-06-29T19:22:21.236132-05:00 claude-cloud sshd[327284]: Connection closed by authenticating user root 115.248.8.65 port 47760 [preauth]
2026-06-29T19:22:23.143154-05:00 claude-cloud sshd[327267]: Connection closed by authenticating user root 141.11.88.121 port 44906 [preauth]
2026-06-29T19:22:27.664624-05:00 claude-cloud sshd[327311]: Connection reset by authenticating user root 45.148.10.157 port 10834 [preauth]
2026-06-29T19:22:45.861559-05:00 claude-cloud sshd[327347]: Invalid user git from 202.29.225.206 port 51992
2026-06-29T19:22:46.051730-05:00 claude-cloud sshd[327347]: Received disconnect from 202.29.225.206 port 51992:11: Bye Bye [preauth]
2026-06-29T19:22:46.051969-05:00 claude-cloud sshd[327347]: Disconnected from invalid user git 202.29.225.206 port 51992 [preauth]
2026-06-29T19:22:47.942529-05:00 claude-cloud sshd[327298]: Connection reset by authenticating user root 141.11.88.121 port 33566 [preauth]
2026-06-29T19:22:54.444265-05:00 claude-cloud sshd[327361]: Received disconnect from 43.156.92.183 port 49458:11: Bye Bye [preauth]
2026-06-29T19:22:54.444536-05:00 claude-cloud sshd[327361]: Disconnected from authenticating user root 43.156.92.183 port 49458 [preauth]
2026-06-29T19:23:22.104090-05:00 claude-cloud sshd[327397]: Invalid user test from 122.168.194.41 port 38802
2026-06-29T19:23:22.324112-05:00 claude-cloud sshd[327397]: Received disconnect from 122.168.194.41 port 38802:11: Bye Bye [preauth]
2026-06-29T19:23:22.324551-05:00 claude-cloud sshd[327397]: Disconnected from invalid user test 122.168.194.41 port 38802 [preauth]
2026-06-29T19:23:35.477785-05:00 claude-cloud sshd[327432]: Invalid user ubuntu from 103.241.43.193 port 40638
2026-06-29T19:23:35.715743-05:00 claude-cloud sshd[327432]: Received disconnect from 103.241.43.193 port 40638:11: Bye Bye [preauth]
2026-06-29T19:23:35.715949-05:00 claude-cloud sshd[327432]: Disconnected from invalid user ubuntu 103.241.43.193 port 40638 [preauth]
2026-06-29T19:24:04.863879-05:00 claude-cloud sshd[327498]: Received disconnect from 103.187.146.90 port 36036:11: Bye Bye [preauth]
2026-06-29T19:24:04.864266-05:00 claude-cloud sshd[327498]: Disconnected from authenticating user root 103.187.146.90 port 36036 [preauth]
2026-06-29T19:24:21.057832-05:00 claude-cloud sshd[327506]: Received disconnect from 101.126.54.245 port 53768:11: Bye Bye [preauth]
2026-06-29T19:24:21.058487-05:00 claude-cloud sshd[327506]: Disconnected from authenticating user root 101.126.54.245 port 53768 [preauth]
2026-06-29T19:24:34.970269-05:00 claude-cloud sshd[327545]: Invalid user user from 202.29.225.206 port 38002
2026-06-29T19:24:35.169301-05:00 claude-cloud sshd[327545]: Received disconnect from 202.29.225.206 port 38002:11: Bye Bye [preauth]
2026-06-29T19:24:35.169495-05:00 claude-cloud sshd[327545]: Disconnected from invalid user user 202.29.225.206 port 38002 [preauth]
2026-06-29T19:24:40.546314-05:00 claude-cloud sshd[327550]: Connection closed by 161.35.47.134 port 56698
2026-06-29T19:24:50.304667-05:00 claude-cloud systemd-logind[853]: New session c4991 of user claude.
2026-06-29T19:24:50.725417-05:00 claude-cloud systemd-logind[853]: Session c4991 logged out. Waiting for processes to exit.
2026-06-29T19:24:50.727347-05:00 claude-cloud systemd-logind[853]: Removed session c4991.
2026-06-29T19:25:01.185239-05:00 claude-cloud CRON[327605]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-29T19:25:01.197530-05:00 claude-cloud CRON[327605]: pam_unix(cron:session): session closed for user root
2026-06-29T19:25:03.843897-05:00 claude-cloud sshd[327611]: Invalid user postgres from 43.156.92.183 port 33792
2026-06-29T19:25:04.011370-05:00 claude-cloud sshd[327611]: Received disconnect from 43.156.92.183 port 33792:11: Bye Bye [preauth]
2026-06-29T19:25:04.011550-05:00 claude-cloud sshd[327611]: Disconnected from invalid user postgres 43.156.92.183 port 33792 [preauth]
2026-06-29T19:25:09.293426-05:00 claude-cloud sshd[327613]: userauth_pubkey: signature algorithm ssh-dss not in PubkeyAcceptedAlgorithms [preauth]
2026-06-29T19:25:09.379618-05:00 claude-cloud sshd[327613]: Received disconnect from 176.65.131.188 port 8236:11: disconnected by user [preauth]
2026-06-29T19:25:09.379793-05:00 claude-cloud sshd[327613]: Disconnected from authenticating user root 176.65.131.188 port 8236 [preauth]
2026-06-29T19:25:24.801976-05:00 claude-cloud sshd[327633]: Invalid user test from 103.241.43.193 port 39314
2026-06-29T19:25:25.037104-05:00 claude-cloud sshd[327633]: Received disconnect from 103.241.43.193 port 39314:11: Bye Bye [preauth]
2026-06-29T19:25:25.037458-05:00 claude-cloud sshd[327633]: Disconnected from invalid user test 103.241.43.193 port 39314 [preauth]
2026-06-29T19:25:39.640623-05:00 claude-cloud sshd[327659]: Received disconnect from 122.168.194.41 port 38578:11: Bye Bye [preauth]
2026-06-29T19:25:39.641110-05:00 claude-cloud sshd[327659]: Disconnected from authenticating user root 122.168.194.41 port 38578 [preauth]
2026-06-29T19:25:59.399754-05:00 claude-cloud sshd[327685]: Connection closed by authenticating user root 115.248.8.65 port 58890 [preauth]
2026-06-29T19:26:01.380851-05:00 claude-cloud sshd[327696]: Invalid user ubuntu from 45.198.224.46 port 44946
2026-06-29T19:26:02.170562-05:00 claude-cloud sshd[327696]: Connection closed by invalid user ubuntu 45.198.224.46 port 44946 [preauth]
2026-06-29T19:26:56.139954-05:00 claude-cloud sshd[327782]: Connection closed by authenticating user root 27.71.230.31 port 37550 [preauth]
2026-06-29T19:27:00.393196-05:00 claude-cloud sshd[327824]: Received disconnect from 101.126.54.245 port 33524:11: Bye Bye [preauth]
2026-06-29T19:27:00.393487-05:00 claude-cloud sshd[327824]: Disconnected from authenticating user root 101.126.54.245 port 33524 [preauth]
2026-06-29T19:27:02.272394-05:00 claude-cloud sshd[327826]: Connection closed by authenticating user root 118.194.249.186 port 38404 [preauth]
2026-06-29T19:27:03.975583-05:00 claude-cloud sshd[327840]: Connection closed by authenticating user root 118.194.249.186 port 49054 [preauth]
2026-06-29T19:27:05.716763-05:00 claude-cloud sshd[327842]: Connection closed by authenticating user root 118.194.249.186 port 52560 [preauth]
2026-06-29T19:27:07.400391-05:00 claude-cloud sshd[327844]: Connection closed by authenticating user root 118.194.249.186 port 59282 [preauth]
2026-06-29T19:27:09.175066-05:00 claude-cloud sshd[327846]: Connection closed by authenticating user root 118.194.249.186 port 59516 [preauth]
2026-06-29T19:27:10.684173-05:00 claude-cloud sshd[327853]: Invalid user user from 43.156.92.183 port 43932
2026-06-29T19:27:10.859424-05:00 claude-cloud sshd[327853]: Received disconnect from 43.156.92.183 port 43932:11: Bye Bye [preauth]
2026-06-29T19:27:10.859626-05:00 claude-cloud sshd[327853]: Disconnected from invalid user user 43.156.92.183 port 43932 [preauth]
2026-06-29T19:27:10.930992-05:00 claude-cloud sshd[327851]: Connection closed by authenticating user root 118.194.249.186 port 40040 [preauth]
2026-06-29T19:27:12.645731-05:00 claude-cloud sshd[327855]: Connection closed by authenticating user root 118.194.249.186 port 49024 [preauth]
2026-06-29T19:27:14.363776-05:00 claude-cloud sshd[327857]: Connection closed by authenticating user root 118.194.249.186 port 54406 [preauth]
2026-06-29T19:27:16.114913-05:00 claude-cloud sshd[327862]: Connection closed by authenticating user root 118.194.249.186 port 53404 [preauth]
2026-06-29T19:27:17.867267-05:00 claude-cloud sshd[327864]: Connection closed by authenticating user root 118.194.249.186 port 37804 [preauth]
2026-06-29T19:27:19.543607-05:00 claude-cloud sshd[327866]: Connection closed by authenticating user root 118.194.249.186 port 47638 [preauth]
2026-06-29T19:27:21.328595-05:00 claude-cloud sshd[327871]: Connection closed by authenticating user root 118.194.249.186 port 51826 [preauth]
2026-06-29T19:27:23.088111-05:00 claude-cloud sshd[327876]: Connection closed by authenticating user root 118.194.249.186 port 36622 [preauth]
2026-06-29T19:27:24.815956-05:00 claude-cloud sshd[327884]: Connection closed by authenticating user root 118.194.249.186 port 48146 [preauth]
2026-06-29T19:27:26.584994-05:00 claude-cloud sshd[327889]: Connection closed by authenticating user root 118.194.249.186 port 59126 [preauth]
2026-06-29T19:27:28.299674-05:00 claude-cloud sshd[327894]: Connection closed by authenticating user root 118.194.249.186 port 38910 [preauth]
2026-06-29T19:27:30.059385-05:00 claude-cloud sshd[327902]: Connection closed by authenticating user root 118.194.249.186 port 48404 [preauth]
2026-06-29T19:27:31.816664-05:00 claude-cloud sshd[327904]: Connection closed by authenticating user root 118.194.249.186 port 58476 [preauth]
2026-06-29T19:27:33.575031-05:00 claude-cloud sshd[327918]: Connection closed by authenticating user root 118.194.249.186 port 41954 [preauth]
2026-06-29T19:27:35.329951-05:00 claude-cloud sshd[327920]: Connection closed by authenticating user root 118.194.249.186 port 50294 [preauth]
2026-06-29T19:27:37.042564-05:00 claude-cloud sshd[327922]: Connection closed by authenticating user root 118.194.249.186 port 54544 [preauth]
2026-06-29T19:27:38.806713-05:00 claude-cloud sshd[327924]: Connection closed by authenticating user root 118.194.249.186 port 59412 [preauth]
2026-06-29T19:27:40.570070-05:00 claude-cloud sshd[327926]: Connection closed by authenticating user root 118.194.249.186 port 42032 [preauth]
2026-06-29T19:27:42.294172-05:00 claude-cloud sshd[327931]: Connection closed by authenticating user root 118.194.249.186 port 54358 [preauth]
2026-06-29T19:27:44.066252-05:00 claude-cloud sshd[327933]: Connection closed by authenticating user root 118.194.249.186 port 33870 [preauth]
2026-06-29T19:27:45.843184-05:00 claude-cloud sshd[327938]: Connection closed by authenticating user root 118.194.249.186 port 42240 [preauth]
2026-06-29T19:27:47.584841-05:00 claude-cloud sshd[327940]: Connection closed by authenticating user root 118.194.249.186 port 52140 [preauth]
2026-06-29T19:27:49.343650-05:00 claude-cloud sshd[327942]: Connection closed by authenticating user root 118.194.249.186 port 57002 [preauth]
2026-06-29T19:27:49.519389-05:00 claude-cloud sshd[327944]: Received disconnect from 122.168.194.41 port 46586:11: Bye Bye [preauth]
2026-06-29T19:27:49.519793-05:00 claude-cloud sshd[327944]: Disconnected from authenticating user root 122.168.194.41 port 46586 [preauth]
2026-06-29T19:27:51.061911-05:00 claude-cloud sshd[327949]: Connection closed by authenticating user root 118.194.249.186 port 39940 [preauth]
2026-06-29T19:27:52.826352-05:00 claude-cloud sshd[327951]: Connection closed by authenticating user root 118.194.249.186 port 49996 [preauth]
2026-06-29T19:27:54.429833-05:00 claude-cloud sshd[327965]: Connection reset by authenticating user root 45.148.10.151 port 23830 [preauth]
2026-06-29T19:27:54.585050-05:00 claude-cloud sshd[327962]: Connection closed by authenticating user root 118.194.249.186 port 60456 [preauth]
2026-06-29T19:27:56.273632-05:00 claude-cloud sshd[327967]: Connection closed by authenticating user root 118.194.249.186 port 37424 [preauth]
2026-06-29T19:27:58.054023-05:00 claude-cloud sshd[327975]: Connection closed by authenticating user root 118.194.249.186 port 44580 [preauth]
2026-06-29T19:27:59.770572-05:00 claude-cloud sshd[327983]: Connection closed by authenticating user root 118.194.249.186 port 54708 [preauth]
2026-06-29T19:28:01.456069-05:00 claude-cloud sshd[327985]: Connection closed by authenticating user root 118.194.249.186 port 57702 [preauth]
2026-06-29T19:28:03.226409-05:00 claude-cloud sshd[327999]: Connection closed by authenticating user root 118.194.249.186 port 53752 [preauth]
2026-06-29T19:28:04.982679-05:00 claude-cloud sshd[328001]: Connection closed by authenticating user root 118.194.249.186 port 33080 [preauth]
2026-06-29T19:28:06.735850-05:00 claude-cloud sshd[328003]: Connection closed by authenticating user root 118.194.249.186 port 40798 [preauth]
2026-06-29T19:28:08.510033-05:00 claude-cloud sshd[328005]: Connection closed by authenticating user root 118.194.249.186 port 44700 [preauth]
2026-06-29T19:28:10.261709-05:00 claude-cloud sshd[328007]: Connection closed by authenticating user root 118.194.249.186 port 53712 [preauth]
2026-06-29T19:28:11.945099-05:00 claude-cloud sshd[328012]: Connection closed by authenticating user root 118.194.249.186 port 60068 [preauth]
2026-06-29T19:28:13.691971-05:00 claude-cloud sshd[328014]: Connection closed by authenticating user root 118.194.249.186 port 37384 [preauth]
2026-06-29T19:28:15.404212-05:00 claude-cloud sshd[328019]: Connection closed by authenticating user root 118.194.249.186 port 47038 [preauth]
2026-06-29T19:28:17.109046-05:00 claude-cloud sshd[328021]: Connection closed by authenticating user root 118.194.249.186 port 58724 [preauth]
2026-06-29T19:28:18.818748-05:00 claude-cloud sshd[328023]: Connection closed by authenticating user root 118.194.249.186 port 34520 [preauth]
2026-06-29T19:28:20.594592-05:00 claude-cloud sshd[328025]: Connection closed by authenticating user root 118.194.249.186 port 42656 [preauth]
2026-06-29T19:28:22.358569-05:00 claude-cloud sshd[328030]: Connection closed by authenticating user root 118.194.249.186 port 50694 [preauth]
2026-06-29T19:28:24.039130-05:00 claude-cloud sshd[328041]: Connection closed by authenticating user root 118.194.249.186 port 58704 [preauth]
2026-06-29T19:28:25.740811-05:00 claude-cloud sshd[328043]: Connection closed by authenticating user root 118.194.249.186 port 33828 [preauth]
2026-06-29T19:28:27.513252-05:00 claude-cloud sshd[328051]: Connection closed by authenticating user root 118.194.249.186 port 35358 [preauth]
2026-06-29T19:28:29.264739-05:00 claude-cloud sshd[328059]: Connection closed by authenticating user root 118.194.249.186 port 53192 [preauth]
2026-06-29T19:28:31.028150-05:00 claude-cloud sshd[328061]: Connection closed by authenticating user root 118.194.249.186 port 34438 [preauth]
2026-06-29T19:28:32.767873-05:00 claude-cloud sshd[328072]: Connection closed by authenticating user root 118.194.249.186 port 40764 [preauth]
2026-06-29T19:28:34.447676-05:00 claude-cloud sshd[328077]: Connection closed by authenticating user root 118.194.249.186 port 50790 [preauth]
2026-06-29T19:28:36.231626-05:00 claude-cloud sshd[328079]: Connection closed by authenticating user root 118.194.249.186 port 54122 [preauth]
2026-06-29T19:28:37.960846-05:00 claude-cloud sshd[328081]: Connection closed by authenticating user root 118.194.249.186 port 60344 [preauth]
2026-06-29T19:28:39.682352-05:00 claude-cloud sshd[328083]: Connection closed by authenticating user root 118.194.249.186 port 41058 [preauth]
2026-06-29T19:28:41.449401-05:00 claude-cloud sshd[328088]: Connection closed by authenticating user root 118.194.249.186 port 46770 [preauth]
2026-06-29T19:28:43.124067-05:00 claude-cloud sshd[328090]: Connection closed by authenticating user root 118.194.249.186 port 50316 [preauth]
2026-06-29T19:28:44.890545-05:00 claude-cloud sshd[328114]: Connection closed by authenticating user root 118.194.249.186 port 54334 [preauth]
2026-06-29T19:28:46.571883-05:00 claude-cloud sshd[328181]: Connection closed by authenticating user root 118.194.249.186 port 35238 [preauth]
2026-06-29T19:28:48.255066-05:00 claude-cloud sshd[328193]: Connection closed by authenticating user root 118.194.249.186 port 39414 [preauth]
2026-06-29T19:28:49.978950-05:00 claude-cloud sshd[328195]: Connection closed by authenticating user root 118.194.249.186 port 40432 [preauth]
2026-06-29T19:28:51.743411-05:00 claude-cloud sshd[328200]: Connection closed by authenticating user root 118.194.249.186 port 42912 [preauth]
2026-06-29T19:28:53.496511-05:00 claude-cloud sshd[328205]: Connection closed by authenticating user root 118.194.249.186 port 49288 [preauth]
2026-06-29T19:28:55.260864-05:00 claude-cloud sshd[328213]: Connection closed by authenticating user root 118.194.249.186 port 57978 [preauth]
2026-06-29T19:28:56.971352-05:00 claude-cloud sshd[328220]: Connection closed by authenticating user root 118.194.249.186 port 39662 [preauth]
2026-06-29T19:28:58.734502-05:00 claude-cloud sshd[328231]: Connection closed by authenticating user root 118.194.249.186 port 40760 [preauth]
2026-06-29T19:29:00.436625-05:00 claude-cloud sshd[328233]: Connection closed by authenticating user root 118.194.249.186 port 49010 [preauth]
2026-06-29T19:29:02.161949-05:00 claude-cloud sshd[328235]: Connection closed by authenticating user root 118.194.249.186 port 48188 [preauth]
2026-06-29T19:29:03.930590-05:00 claude-cloud sshd[328249]: Connection closed by authenticating user root 118.194.249.186 port 49280 [preauth]
2026-06-29T19:29:05.669759-05:00 claude-cloud sshd[328251]: Connection closed by authenticating user root 118.194.249.186 port 53466 [preauth]
2026-06-29T19:29:07.369826-05:00 claude-cloud sshd[328253]: Connection closed by authenticating user root 118.194.249.186 port 54706 [preauth]
2026-06-29T19:29:09.119916-05:00 claude-cloud sshd[328255]: Connection closed by authenticating user root 118.194.249.186 port 55662 [preauth]
2026-06-29T19:29:10.799957-05:00 claude-cloud sshd[328257]: Connection closed by authenticating user root 118.194.249.186 port 52720 [preauth]
2026-06-29T19:29:12.589353-05:00 claude-cloud sshd[328262]: Connection closed by authenticating user root 118.194.249.186 port 59620 [preauth]
2026-06-29T19:29:14.286705-05:00 claude-cloud sshd[328264]: Connection closed by authenticating user root 118.194.249.186 port 39084 [preauth]
2026-06-29T19:29:15.980634-05:00 claude-cloud sshd[328269]: Connection closed by authenticating user root 118.194.249.186 port 45036 [preauth]
2026-06-29T19:29:17.755573-05:00 claude-cloud sshd[328271]: Connection closed by authenticating user root 118.194.249.186 port 50312 [preauth]
2026-06-29T19:29:19.483551-05:00 claude-cloud sshd[328273]: Connection closed by authenticating user root 118.194.249.186 port 33920 [preauth]
2026-06-29T19:29:21.261401-05:00 claude-cloud sshd[328278]: Connection closed by authenticating user root 118.194.249.186 port 35770 [preauth]
2026-06-29T19:29:23.033660-05:00 claude-cloud sshd[328283]: Connection closed by authenticating user root 118.194.249.186 port 41408 [preauth]
2026-06-29T19:29:25.299206-05:00 claude-cloud sshd[328291]: Connection closed by authenticating user root 118.194.249.186 port 35374 [preauth]
2026-06-29T19:29:27.067706-05:00 claude-cloud sshd[328296]: Connection closed by authenticating user root 118.194.249.186 port 46192 [preauth]
2026-06-29T19:29:28.788154-05:00 claude-cloud sshd[328307]: Connection closed by authenticating user root 118.194.249.186 port 58484 [preauth]
2026-06-29T19:29:30.497079-05:00 claude-cloud sshd[328309]: Connection closed by authenticating user root 118.194.249.186 port 36468 [preauth]
2026-06-29T19:29:32.269766-05:00 claude-cloud sshd[328322]: Connection closed by authenticating user root 118.194.249.186 port 37232 [preauth]
2026-06-29T19:29:33.956744-05:00 claude-cloud sshd[328327]: Connection closed by authenticating user root 118.194.249.186 port 45478 [preauth]
2026-06-29T19:29:35.363118-05:00 claude-cloud sshd[328329]: Invalid user user from 118.194.249.186 port 46364
2026-06-29T19:29:35.638050-05:00 claude-cloud sshd[328329]: Connection closed by invalid user user 118.194.249.186 port 46364 [preauth]
2026-06-29T19:29:37.138511-05:00 claude-cloud sshd[328333]: Invalid user user from 118.194.249.186 port 52038
2026-06-29T19:29:37.427154-05:00 claude-cloud sshd[328333]: Connection closed by invalid user user 118.194.249.186 port 52038 [preauth]
2026-06-29T19:29:38.491020-05:00 claude-cloud sshd[328331]: Connection closed by authenticating user root 115.248.8.65 port 34484 [preauth]
2026-06-29T19:29:38.916914-05:00 claude-cloud sshd[328336]: Invalid user user from 118.194.249.186 port 33884
2026-06-29T19:29:39.206134-05:00 claude-cloud sshd[328336]: Connection closed by invalid user user 118.194.249.186 port 33884 [preauth]
2026-06-29T19:29:40.684103-05:00 claude-cloud sshd[328341]: Invalid user user from 118.194.249.186 port 46924
2026-06-29T19:29:40.973988-05:00 claude-cloud sshd[328341]: Connection closed by invalid user user 118.194.249.186 port 46924 [preauth]
2026-06-29T19:29:42.409317-05:00 claude-cloud sshd[328343]: Invalid user user from 118.194.249.186 port 55690
2026-06-29T19:29:42.690602-05:00 claude-cloud sshd[328343]: Connection closed by invalid user user 118.194.249.186 port 55690 [preauth]
2026-06-29T19:29:48.215566-05:00 claude-cloud sshd[328352]: Connection closed by 85.217.149.67 port 46926 [preauth]
2026-06-29T19:29:57.108264-05:00 claude-cloud systemd-logind[853]: New session c4992 of user claude.
2026-06-29T19:29:57.547520-05:00 claude-cloud systemd-logind[853]: Session c4992 logged out. Waiting for processes to exit.
2026-06-29T19:29:57.548885-05:00 claude-cloud systemd-logind[853]: Removed session c4992.
2026-06-29T19:30:00.788164-05:00 claude-cloud sshd[328389]: Invalid user user from 122.168.194.41 port 44022
2026-06-29T19:30:01.011073-05:00 claude-cloud sshd[328389]: Received disconnect from 122.168.194.41 port 44022:11: Bye Bye [preauth]
2026-06-29T19:30:01.011320-05:00 claude-cloud sshd[328389]: Disconnected from invalid user user 122.168.194.41 port 44022 [preauth]
2026-06-29T19:33:07.149441-05:00 claude-cloud sshd[328670]: Connection closed by authenticating user root 27.71.230.31 port 37034 [preauth]
2026-06-29T19:33:18.959845-05:00 claude-cloud sshd[328715]: Connection closed by authenticating user root 115.248.8.65 port 59884 [preauth]
2026-06-29T19:33:21.472097-05:00 claude-cloud sshd[328720]: Connection reset by authenticating user root 45.227.254.170 port 21816 [preauth]
2026-06-29T19:33:25.101088-05:00 claude-cloud sshd[328734]: Connection closed by 92.118.39.71 port 57254
2026-06-29T19:35:01.217520-05:00 claude-cloud CRON[328912]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-29T19:35:01.226170-05:00 claude-cloud CRON[328912]: pam_unix(cron:session): session closed for user root
2026-06-29T19:35:05.602054-05:00 claude-cloud systemd-logind[853]: New session c4993 of user claude.
2026-06-29T19:35:06.060075-05:00 claude-cloud systemd-logind[853]: Session c4993 logged out. Waiting for processes to exit.
2026-06-29T19:35:06.061173-05:00 claude-cloud systemd-logind[853]: Removed session c4993.
2026-06-29T19:35:14.448883-05:00 claude-cloud sshd[328933]: Connection closed by authenticating user root 45.148.10.121 port 52498 [preauth]
2026-06-29T19:35:41.840656-05:00 claude-cloud sshd[328971]: Connection closed by authenticating user root 45.198.224.46 port 33696 [preauth]
2026-06-29T19:36:28.123776-05:00 claude-cloud sshd[329063]: Invalid user devblog from 191.97.12.90 port 56682
2026-06-29T19:36:28.294176-05:00 claude-cloud sshd[329063]: Received disconnect from 191.97.12.90 port 56682:11: Bye Bye [preauth]
2026-06-29T19:36:28.294658-05:00 claude-cloud sshd[329063]: Disconnected from invalid user devblog 191.97.12.90 port 56682 [preauth]
2026-06-29T19:36:43.835626-05:00 claude-cloud sshd[329086]: Connection closed by authenticating user root 92.118.39.71 port 60678 [preauth]
2026-06-29T19:36:50.340122-05:00 claude-cloud sshd[329106]: Connection closed by authenticating user root 115.248.8.65 port 56436 [preauth]
2026-06-29T19:38:32.911081-05:00 claude-cloud sshd[329293]: Invalid user wallace from 2.57.121.112 port 59498
2026-06-29T19:38:32.936685-05:00 claude-cloud sshd[329293]: Connection closed by invalid user wallace 2.57.121.112 port 59498 [preauth]
2026-06-29T19:38:34.975065-05:00 claude-cloud sshd[329295]: Connection closed by authenticating user root 92.118.39.71 port 35484 [preauth]
2026-06-29T19:38:52.174684-05:00 claude-cloud sshd[329382]: Connection reset by authenticating user root 45.148.10.157 port 21538 [preauth]
2026-06-29T19:39:13.551529-05:00 claude-cloud sshd[329329]: Connection closed by authenticating user root 27.71.230.31 port 40632 [preauth]
2026-06-29T19:40:11.666561-05:00 claude-cloud systemd-logind[853]: New session c4994 of user claude.
2026-06-29T19:40:12.156838-05:00 claude-cloud systemd-logind[853]: Session c4994 logged out. Waiting for processes to exit.
2026-06-29T19:40:12.158566-05:00 claude-cloud systemd-logind[853]: Removed session c4994.
2026-06-29T19:40:26.149789-05:00 claude-cloud sshd[329529]: Connection closed by authenticating user root 92.118.39.71 port 38500 [preauth]
2026-06-29T19:40:34.841497-05:00 claude-cloud sshd[329566]: Connection closed by authenticating user root 115.248.8.65 port 33620 [preauth]
2026-06-29T19:41:39.594233-05:00 claude-cloud sshd[329680]: Invalid user user from 118.194.249.186 port 50954
2026-06-29T19:41:39.876181-05:00 claude-cloud sshd[329680]: Connection closed by invalid user user 118.194.249.186 port 50954 [preauth]
2026-06-29T19:41:41.320266-05:00 claude-cloud sshd[329685]: Invalid user user from 118.194.249.186 port 36396
2026-06-29T19:41:41.603692-05:00 claude-cloud sshd[329685]: Connection closed by invalid user user 118.194.249.186 port 36396 [preauth]
2026-06-29T19:41:43.083837-05:00 claude-cloud sshd[329687]: Invalid user user from 118.194.249.186 port 44960
2026-06-29T19:41:43.376163-05:00 claude-cloud sshd[329687]: Connection closed by invalid user user 118.194.249.186 port 44960 [preauth]
2026-06-29T19:41:44.848538-05:00 claude-cloud sshd[329692]: Invalid user user from 118.194.249.186 port 56796
2026-06-29T19:41:45.136004-05:00 claude-cloud sshd[329692]: Connection closed by invalid user user 118.194.249.186 port 56796 [preauth]
2026-06-29T19:41:46.597440-05:00 claude-cloud sshd[329694]: Invalid user user from 118.194.249.186 port 37996
2026-06-29T19:41:46.883061-05:00 claude-cloud sshd[329694]: Connection closed by invalid user user 118.194.249.186 port 37996 [preauth]
2026-06-29T19:42:15.099018-05:00 claude-cloud sshd[329741]: Connection closed by authenticating user root 92.118.39.71 port 41502 [preauth]
2026-06-29T19:42:28.298217-05:00 claude-cloud sshd[329761]: Invalid user savannah from 191.97.12.90 port 46830
2026-06-29T19:42:28.473843-05:00 claude-cloud sshd[329761]: Received disconnect from 191.97.12.90 port 46830:11: Bye Bye [preauth]
2026-06-29T19:42:28.474019-05:00 claude-cloud sshd[329761]: Disconnected from invalid user savannah 191.97.12.90 port 46830 [preauth]
2026-06-29T19:43:27.541361-05:00 claude-cloud sshd[329884]: Connection closed by 161.35.47.134 port 49158
2026-06-29T19:44:01.599563-05:00 claude-cloud sshd[329934]: Connection closed by authenticating user root 92.118.39.71 port 44504 [preauth]
2026-06-29T19:44:12.941255-05:00 claude-cloud sshd[329948]: Connection closed by authenticating user root 115.248.8.65 port 35248 [preauth]
2026-06-29T19:44:16.641848-05:00 claude-cloud sshd[329956]: Connection reset by authenticating user root 45.148.10.152 port 46294 [preauth]
2026-06-29T19:44:21.102347-05:00 claude-cloud sshd[329962]: Invalid user ocw from 191.97.12.90 port 60536
2026-06-29T19:44:21.271234-05:00 claude-cloud sshd[329962]: Received disconnect from 191.97.12.90 port 60536:11: Bye Bye [preauth]
2026-06-29T19:44:21.271437-05:00 claude-cloud sshd[329962]: Disconnected from invalid user ocw 191.97.12.90 port 60536 [preauth]
2026-06-29T19:44:43.099981-05:00 claude-cloud sshd[329998]: Connection closed by authenticating user root 141.11.88.122 port 48672 [preauth]
2026-06-29T19:44:43.409387-05:00 claude-cloud sshd[330003]: Connection closed by authenticating user root 141.11.88.121 port 41376 [preauth]
2026-06-29T19:44:48.486353-05:00 claude-cloud sshd[330018]: Connection closed by authenticating user root 141.11.88.121 port 38932 [preauth]
2026-06-29T19:44:55.070414-05:00 claude-cloud sshd[330029]: Connection closed by authenticating user root 141.11.88.121 port 44960 [preauth]
2026-06-29T19:44:57.596121-05:00 claude-cloud sshd[330027]: Connection closed by authenticating user root 27.71.230.31 port 58690 [preauth]
2026-06-29T19:45:01.239054-05:00 claude-cloud CRON[330061]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-29T19:45:01.244029-05:00 claude-cloud CRON[330061]: pam_unix(cron:session): session closed for user root
2026-06-29T19:45:03.054050-05:00 claude-cloud sshd[330005]: Connection closed by authenticating user root 141.11.88.122 port 41508 [preauth]
2026-06-29T19:45:03.650927-05:00 claude-cloud sshd[330047]: Connection closed by authenticating user root 141.11.88.121 port 38810 [preauth]
2026-06-29T19:45:07.208934-05:00 claude-cloud sshd[330066]: Connection closed by authenticating user root 45.198.224.46 port 53814 [preauth]
2026-06-29T19:45:11.875519-05:00 claude-cloud sshd[330065]: Connection closed by authenticating user root 141.11.88.121 port 39450 [preauth]
2026-06-29T19:45:18.054463-05:00 claude-cloud systemd-logind[853]: New session c4995 of user claude.
2026-06-29T19:45:18.532416-05:00 claude-cloud systemd-logind[853]: Session c4995 logged out. Waiting for processes to exit.
2026-06-29T19:45:18.534109-05:00 claude-cloud systemd-logind[853]: Removed session c4995.
2026-06-29T19:45:22.350136-05:00 claude-cloud sshd[330073]: Connection closed by authenticating user root 141.11.88.121 port 40000 [preauth]
2026-06-29T19:45:28.086766-05:00 claude-cloud sshd[330064]: Connection closed by authenticating user root 141.11.88.122 port 59004 [preauth]
2026-06-29T19:45:40.601261-05:00 claude-cloud sshd[330149]: Connection closed by authenticating user root 92.118.39.71 port 47504 [preauth]
2026-06-29T19:45:40.719510-05:00 claude-cloud sshd[330115]: Connection closed by authenticating user root 141.11.88.121 port 58066 [preauth]
2026-06-29T19:45:56.657703-05:00 claude-cloud sshd[330154]: Connection closed by authenticating user root 141.11.88.121 port 36614 [preauth]
2026-06-29T19:45:57.742476-05:00 claude-cloud sshd[330135]: Connection closed by authenticating user root 141.11.88.122 port 53550 [preauth]
2026-06-29T19:46:03.191682-05:00 claude-cloud sshd[330187]: error: kex_exchange_identification: read: Connection reset by peer
2026-06-29T19:46:03.191939-05:00 claude-cloud sshd[330187]: Connection reset by 141.11.88.122 port 42362
2026-06-29T19:46:05.414320-05:00 claude-cloud sshd[330180]: Connection closed by authenticating user root 141.11.88.121 port 33966 [preauth]
2026-06-29T19:46:07.732476-05:00 claude-cloud sshd[330203]: Invalid user smpp from 191.97.12.90 port 60088
2026-06-29T19:46:07.897264-05:00 claude-cloud sshd[330203]: Received disconnect from 191.97.12.90 port 60088:11: Bye Bye [preauth]
2026-06-29T19:46:07.897699-05:00 claude-cloud sshd[330203]: Disconnected from invalid user smpp 191.97.12.90 port 60088 [preauth]
2026-06-29T19:46:23.457728-05:00 claude-cloud sshd[330202]: Connection closed by authenticating user root 141.11.88.121 port 35030 [preauth]
2026-06-29T19:46:50.625005-05:00 claude-cloud sshd[330224]: Connection closed by authenticating user root 141.11.88.121 port 42796 [preauth]
2026-06-29T19:47:00.271785-05:00 claude-cloud sshd[330253]: Connection closed by authenticating user root 141.11.88.122 port 54474 [preauth]
2026-06-29T19:47:07.756002-05:00 claude-cloud sshd[330306]: Connection closed by authenticating user root 141.11.88.122 port 58430 [preauth]
2026-06-29T19:47:15.053341-05:00 claude-cloud sshd[330322]: Connection closed by authenticating user root 92.118.39.71 port 50476 [preauth]
2026-06-29T19:47:21.661513-05:00 claude-cloud sshd[330276]: Connection reset by authenticating user root 141.11.88.121 port 58120 [preauth]
2026-06-29T19:47:38.242352-05:00 claude-cloud sshd[330314]: Connection closed by authenticating user root 141.11.88.122 port 50164 [preauth]
2026-06-29T19:47:46.839851-05:00 claude-cloud sshd[330389]: Invalid user zzb from 191.97.12.90 port 33774
2026-06-29T19:47:47.016209-05:00 claude-cloud sshd[330389]: Received disconnect from 191.97.12.90 port 33774:11: Bye Bye [preauth]
2026-06-29T19:47:47.016640-05:00 claude-cloud sshd[330389]: Disconnected from invalid user zzb 191.97.12.90 port 33774 [preauth]
2026-06-29T19:47:58.637065-05:00 claude-cloud sshd[330405]: Connection closed by authenticating user root 115.248.8.65 port 55282 [preauth]
2026-06-29T19:48:08.112259-05:00 claude-cloud sshd[330432]: Connection closed by authenticating user root 141.11.88.121 port 47216 [preauth]
2026-06-29T19:48:14.929912-05:00 claude-cloud sshd[330434]: Connection closed by authenticating user root 141.11.88.121 port 56736 [preauth]
2026-06-29T19:48:15.166418-05:00 claude-cloud sshd[330381]: Connection reset by authenticating user root 141.11.88.122 port 53718 [preauth]
2026-06-29T19:48:21.975662-05:00 claude-cloud sshd[330442]: Connection closed by authenticating user root 141.11.88.121 port 43972 [preauth]
2026-06-29T19:48:29.647445-05:00 claude-cloud sshd[330450]: Connection closed by authenticating user root 141.11.88.121 port 35148 [preauth]
2026-06-29T19:48:38.085185-05:00 claude-cloud sshd[330470]: Connection closed by authenticating user root 141.11.88.121 port 59262 [preauth]
2026-06-29T19:48:45.342841-05:00 claude-cloud sshd[330484]: Connection closed by authenticating user root 141.11.88.121 port 33246 [preauth]
2026-06-29T19:48:53.614967-05:00 claude-cloud sshd[330507]: Connection closed by authenticating user root 141.11.88.121 port 54708 [preauth]
2026-06-29T19:48:57.620908-05:00 claude-cloud sshd[330526]: Connection closed by authenticating user root 92.118.39.71 port 53420 [preauth]
2026-06-29T19:49:03.588584-05:00 claude-cloud sshd[330521]: Connection closed by authenticating user root 141.11.88.121 port 59076 [preauth]
2026-06-29T19:49:05.504201-05:00 claude-cloud sshd[330532]: Connection closed by authenticating user root 141.11.88.122 port 52058 [preauth]
2026-06-29T19:49:18.397829-05:00 claude-cloud sshd[330552]: Connection closed by authenticating user root 141.11.88.121 port 37370 [preauth]
2026-06-29T19:49:23.547851-05:00 claude-cloud sshd[330553]: Connection closed by authenticating user root 141.11.88.122 port 50602 [preauth]
2026-06-29T19:49:39.153790-05:00 claude-cloud sshd[330562]: Connection closed by authenticating user root 141.11.88.121 port 48408 [preauth]
2026-06-29T19:49:42.172386-05:00 claude-cloud sshd[330608]: Connection reset by authenticating user root 45.148.10.151 port 64222 [preauth]
2026-06-29T19:49:47.210451-05:00 claude-cloud sshd[330576]: Connection closed by authenticating user root 141.11.88.122 port 56266 [preauth]
2026-06-29T19:49:54.866580-05:00 claude-cloud sshd[330604]: Connection closed by authenticating user root 141.11.88.121 port 41464 [preauth]
2026-06-29T19:50:13.921561-05:00 claude-cloud sshd[330684]: Connection closed by authenticating user root 141.11.88.122 port 44498 [preauth]
2026-06-29T19:50:16.849708-05:00 claude-cloud sshd[330699]: Connection closed by authenticating user root 141.11.88.121 port 57356 [preauth]
2026-06-29T19:50:24.136933-05:00 claude-cloud systemd-logind[853]: New session c4996 of user claude.
2026-06-29T19:50:24.419062-05:00 claude-cloud systemd-logind[853]: Session c4996 logged out. Waiting for processes to exit.
2026-06-29T19:50:24.421389-05:00 claude-cloud systemd-logind[853]: Removed session c4996.
2026-06-29T19:50:30.544116-05:00 claude-cloud sshd[330746]: Connection reset by 141.11.88.122 port 44096 [preauth]
2026-06-29T19:50:41.155396-05:00 claude-cloud sshd[330796]: Connection closed by authenticating user root 92.118.39.71 port 56370 [preauth]
2026-06-29T19:50:43.609785-05:00 claude-cloud sshd[330747]: Connection closed by authenticating user root 141.11.88.121 port 60846 [preauth]
2026-06-29T19:50:53.681222-05:00 claude-cloud sshd[330804]: Connection closed by authenticating user root 141.11.88.121 port 39838 [preauth]
2026-06-29T19:50:57.298003-05:00 claude-cloud sshd[330805]: Connection closed by authenticating user root 27.71.230.31 port 34956 [preauth]
2026-06-29T19:51:03.701678-05:00 claude-cloud sshd[330820]: error: kex_exchange_identification: read: Connection reset by peer
2026-06-29T19:51:03.701947-05:00 claude-cloud sshd[330820]: Connection reset by 141.11.88.121 port 49018
2026-06-29T19:51:27.394004-05:00 claude-cloud sshd[330851]: Connection closed by authenticating user root 141.11.88.122 port 34396 [preauth]
2026-06-29T19:51:40.900064-05:00 claude-cloud sshd[330894]: Connection closed by authenticating user root 115.248.8.65 port 52492 [preauth]
2026-06-29T19:51:49.207906-05:00 claude-cloud sshd[330874]: Connection closed by authenticating user root 141.11.88.122 port 42112 [preauth]
2026-06-29T19:51:51.584974-05:00 claude-cloud sshd[330917]: Connection closed by authenticating user root 141.11.88.121 port 42838 [preauth]
2026-06-29T19:51:57.600680-05:00 claude-cloud sshd[330928]: Connection closed by authenticating user root 141.11.88.121 port 53716 [preauth]
2026-06-29T19:52:04.086790-05:00 claude-cloud sshd[330944]: Connection closed by authenticating user root 141.11.88.121 port 42708 [preauth]
2026-06-29T19:52:09.827989-05:00 claude-cloud sshd[330964]: Connection closed by authenticating user root 141.11.88.121 port 35522 [preauth]
2026-06-29T19:52:17.445348-05:00 claude-cloud sshd[330921]: Connection closed by authenticating user root 141.11.88.122 port 34740 [preauth]
2026-06-29T19:52:19.241692-05:00 claude-cloud sshd[330969]: Connection closed by authenticating user root 141.11.88.121 port 51106 [preauth]
2026-06-29T19:52:24.365528-05:00 claude-cloud sshd[331004]: Connection closed by authenticating user root 92.118.39.71 port 59286 [preauth]
2026-06-29T19:52:27.715215-05:00 claude-cloud sshd[330992]: Connection closed by authenticating user root 141.11.88.121 port 55592 [preauth]
2026-06-29T19:52:39.896009-05:00 claude-cloud sshd[331025]: Connection closed by authenticating user root 141.11.88.121 port 53756 [preauth]
2026-06-29T19:52:51.597775-05:00 claude-cloud sshd[330974]: Connection reset by 141.11.88.122 port 48996 [preauth]
2026-06-29T19:52:54.006928-05:00 claude-cloud sshd[331042]: Connection closed by authenticating user root 141.11.88.121 port 50826 [preauth]
2026-06-29T19:53:04.448349-05:00 claude-cloud sshd[331059]: Connection closed by authenticating user root 141.11.88.121 port 59186 [preauth]
2026-06-29T19:53:18.439530-05:00 claude-cloud sshd[331086]: Connection closed by authenticating user root 141.11.88.121 port 44038 [preauth]
2026-06-29T19:53:36.900318-05:00 claude-cloud sshd[331094]: Connection closed by authenticating user root 141.11.88.121 port 56638 [preauth]
2026-06-29T19:53:48.717288-05:00 claude-cloud sshd[331157]: Invalid user user from 118.194.249.186 port 37806
2026-06-29T19:53:49.004654-05:00 claude-cloud sshd[331157]: Connection closed by invalid user user 118.194.249.186 port 37806 [preauth]
2026-06-29T19:53:50.478078-05:00 claude-cloud sshd[331159]: Invalid user user from 118.194.249.186 port 43084
2026-06-29T19:53:50.767525-05:00 claude-cloud sshd[331159]: Connection closed by invalid user user 118.194.249.186 port 43084 [preauth]
2026-06-29T19:53:51.412270-05:00 claude-cloud sshd[331132]: Connection closed by authenticating user root 141.11.88.122 port 37884 [preauth]
2026-06-29T19:53:52.244931-05:00 claude-cloud sshd[331164]: Invalid user user from 118.194.249.186 port 49816
2026-06-29T19:53:52.533488-05:00 claude-cloud sshd[331164]: Connection closed by invalid user user 118.194.249.186 port 49816 [preauth]
2026-06-29T19:53:54.001649-05:00 claude-cloud sshd[331176]: Invalid user user from 118.194.249.186 port 51448
2026-06-29T19:53:54.289468-05:00 claude-cloud sshd[331176]: Connection closed by invalid user user 118.194.249.186 port 51448 [preauth]
2026-06-29T19:53:55.751892-05:00 claude-cloud sshd[331179]: Invalid user user from 118.194.249.186 port 33274
2026-06-29T19:53:56.038468-05:00 claude-cloud sshd[331179]: Connection closed by invalid user user 118.194.249.186 port 33274 [preauth]
2026-06-29T19:53:57.975845-05:00 claude-cloud sshd[331134]: Connection closed by authenticating user root 141.11.88.121 port 42228 [preauth]
2026-06-29T19:54:12.191431-05:00 claude-cloud sshd[331213]: Connection closed by authenticating user root 92.118.39.71 port 33996 [preauth]
2026-06-29T19:54:13.820657-05:00 claude-cloud sshd[331169]: Connection closed by authenticating user root 141.11.88.122 port 43936 [preauth]
2026-06-29T19:54:15.085132-05:00 claude-cloud sshd[331219]: Received disconnect from 50.7.127.99 port 23228:11: disconnected by user [preauth]
2026-06-29T19:54:15.085400-05:00 claude-cloud sshd[331219]: Disconnected from authenticating user root 50.7.127.99 port 23228 [preauth]
2026-06-29T19:54:26.745737-05:00 claude-cloud sshd[331196]: Connection closed by authenticating user root 141.11.88.121 port 40322 [preauth]
2026-06-29T19:54:30.886916-05:00 claude-cloud sshd[331247]: Invalid user ubuntu from 45.198.224.46 port 47624
2026-06-29T19:54:31.534991-05:00 claude-cloud sshd[331247]: Connection closed by invalid user ubuntu 45.198.224.46 port 47624 [preauth]
2026-06-29T19:54:40.137159-05:00 claude-cloud sshd[331240]: Connection reset by 141.11.88.121 port 47360 [preauth]
2026-06-29T19:54:45.858192-05:00 claude-cloud sshd[331218]: Connection closed by authenticating user root 141.11.88.122 port 52062 [preauth]
2026-06-29T19:55:01.257445-05:00 claude-cloud CRON[331321]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-29T19:55:01.262556-05:00 claude-cloud CRON[331321]: pam_unix(cron:session): session closed for user root
2026-06-29T19:55:06.895227-05:00 claude-cloud sshd[331324]: Connection reset by authenticating user root 45.148.10.141 port 34106 [preauth]
2026-06-29T19:55:09.676753-05:00 claude-cloud sshd[331291]: Connection reset by 141.11.88.122 port 43312 [preauth]
2026-06-29T19:55:16.777634-05:00 claude-cloud sshd[331329]: Invalid user oracle from 115.248.8.65 port 56326
2026-06-29T19:55:17.558616-05:00 claude-cloud sshd[331329]: Connection closed by invalid user oracle 115.248.8.65 port 56326 [preauth]
2026-06-29T19:55:27.821983-05:00 claude-cloud sshd[331340]: Connection closed by authenticating user root 141.11.88.121 port 58338 [preauth]
2026-06-29T19:55:32.891399-05:00 claude-cloud sshd[331354]: Connection closed by authenticating user root 141.11.88.121 port 43024 [preauth]
2026-06-29T19:55:40.204763-05:00 claude-cloud sshd[331374]: Connection closed by authenticating user root 141.11.88.121 port 52544 [preauth]
2026-06-29T19:55:47.070771-05:00 claude-cloud sshd[331379]: Connection closed by authenticating user root 141.11.88.121 port 45404 [preauth]
2026-06-29T19:55:57.125848-05:00 claude-cloud sshd[331401]: Connection closed by authenticating user root 141.11.88.121 port 33646 [preauth]
2026-06-29T19:56:01.815813-05:00 claude-cloud sshd[331434]: Connection closed by authenticating user root 92.118.39.71 port 36954 [preauth]
2026-06-29T19:56:08.119433-05:00 claude-cloud sshd[331426]: Connection closed by authenticating user root 141.11.88.121 port 42326 [preauth]
2026-06-29T19:56:08.871402-05:00 claude-cloud sshd[331409]: Connection closed by authenticating user root 141.11.88.122 port 41430 [preauth]
2026-06-29T19:56:20.452031-05:00 claude-cloud sshd[331448]: Connection closed by authenticating user root 141.11.88.121 port 59558 [preauth]
2026-06-29T19:56:31.036438-05:00 claude-cloud sshd[331461]: Connection closed by authenticating user root 141.11.88.121 port 57654 [preauth]
2026-06-29T19:56:32.873512-05:00 claude-cloud sshd[331449]: Connection closed by authenticating user root 141.11.88.122 port 35666 [preauth]
2026-06-29T19:56:47.731395-05:00 claude-cloud sshd[331484]: Connection closed by authenticating user root 141.11.88.121 port 47688 [preauth]
2026-06-29T19:56:59.069461-05:00 claude-cloud sshd[331497]: Connection closed by authenticating user root 141.11.88.122 port 48208 [preauth]
2026-06-29T19:57:07.242765-05:00 claude-cloud sshd[331508]: Connection closed by authenticating user root 141.11.88.121 port 40816 [preauth]
2026-06-29T19:57:14.008579-05:00 claude-cloud sshd[331506]: Connection closed by authenticating user root 27.71.230.31 port 40412 [preauth]
2026-06-29T19:57:15.071802-05:00 claude-cloud sshd[331570]: Connection closed by authenticating user root 141.11.88.121 port 54156 [preauth]
2026-06-29T19:57:20.610149-05:00 claude-cloud sshd[331535]: Connection reset by 141.11.88.122 port 42358 [preauth]
2026-06-29T19:57:36.518186-05:00 claude-cloud sshd[331578]: Connection closed by authenticating user root 141.11.88.121 port 54238 [preauth]
2026-06-29T19:57:51.385024-05:00 claude-cloud sshd[331644]: Connection closed by authenticating user root 92.118.39.71 port 39860 [preauth]
2026-06-29T19:58:02.983136-05:00 claude-cloud sshd[331616]: Connection closed by authenticating user root 141.11.88.121 port 60620 [preauth]
2026-06-29T19:58:13.563008-05:00 claude-cloud sshd[331668]: Connection closed by authenticating user root 141.11.88.122 port 60868 [preauth]
2026-06-29T19:58:21.673043-05:00 claude-cloud sshd[331681]: Connection reset by 141.11.88.121 port 36926 [preauth]
2026-06-29T19:58:28.699786-05:00 claude-cloud sshd[331690]: Connection closed by authenticating user root 141.11.88.122 port 35208 [preauth]
2026-06-29T19:58:50.219107-05:00 claude-cloud sshd[331716]: Connection closed by authenticating user root 141.11.88.122 port 55384 [preauth]
2026-06-29T19:58:58.697120-05:00 claude-cloud sshd[331758]: Invalid user screenshot from 191.97.12.90 port 36302
2026-06-29T19:58:58.870598-05:00 claude-cloud sshd[331758]: Received disconnect from 191.97.12.90 port 36302:11: Bye Bye [preauth]
2026-06-29T19:58:58.870880-05:00 claude-cloud sshd[331758]: Disconnected from invalid user screenshot 191.97.12.90 port 36302 [preauth]
2026-06-29T19:59:01.808979-05:00 claude-cloud sshd[331757]: Invalid user nick from 115.248.8.65 port 48508
2026-06-29T19:59:02.390755-05:00 claude-cloud sshd[331757]: Connection closed by invalid user nick 115.248.8.65 port 48508 [preauth]
2026-06-29T19:59:05.199770-05:00 claude-cloud sshd[331767]: Connection closed by authenticating user root 141.11.88.121 port 37038 [preauth]
2026-06-29T19:59:10.613012-05:00 claude-cloud sshd[331781]: Connection closed by authenticating user root 141.11.88.121 port 50238 [preauth]
2026-06-29T19:59:17.004114-05:00 claude-cloud sshd[331786]: Connection closed by authenticating user root 141.11.88.121 port 57878 [preauth]
2026-06-29T19:59:18.010405-05:00 claude-cloud sshd[331739]: Connection closed by authenticating user root 141.11.88.122 port 49934 [preauth]
2026-06-29T19:59:23.378143-05:00 claude-cloud sshd[331791]: Connection closed by authenticating user root 141.11.88.121 port 48994 [preauth]
2026-06-29T19:59:32.264922-05:00 claude-cloud sshd[331820]: Connection closed by authenticating user root 141.11.88.121 port 41346 [preauth]
2026-06-29T19:59:34.730413-05:00 claude-cloud sshd[331792]: Connection reset by 141.11.88.122 port 36528 [preauth]
2026-06-29T19:59:39.694211-05:00 claude-cloud sshd[331859]: Connection closed by authenticating user root 92.118.39.71 port 42826 [preauth]
2026-06-29T19:59:45.254465-05:00 claude-cloud sshd[331857]: Connection closed by authenticating user root 141.11.88.121 port 43790 [preauth]
2026-06-29T19:59:57.479351-05:00 claude-cloud sshd[331937]: Connection closed by authenticating user root 141.11.88.121 port 40862 [preauth]
2026-06-29T20:00:09.532090-05:00 claude-cloud sshd[331958]: Connection closed by authenticating user root 141.11.88.121 port 35856 [preauth]
2026-06-29T20:00:14.937463-05:00 claude-cloud sshd[331980]: Received disconnect from 45.148.146.49 port 56116:11: disconnected by user [preauth]
2026-06-29T20:00:14.937718-05:00 claude-cloud sshd[331980]: Disconnected from authenticating user root 45.148.146.49 port 56116 [preauth]
2026-06-29T20:00:24.535805-05:00 claude-cloud sshd[331975]: Connection closed by authenticating user root 141.11.88.121 port 39950 [preauth]
2026-06-29T20:00:33.647171-05:00 claude-cloud sshd[331982]: Connection closed by authenticating user root 141.11.88.122 port 36928 [preauth]
2026-06-29T20:00:34.829194-05:00 claude-cloud sshd[332023]: Connection reset by authenticating user root 45.148.10.151 port 35886 [preauth]
2026-06-29T20:00:45.418007-05:00 claude-cloud sshd[331999]: Connection closed by authenticating user root 141.11.88.121 port 34264 [preauth]
2026-06-29T20:00:53.282732-05:00 claude-cloud sshd[332040]: Invalid user community from 191.97.12.90 port 42350
2026-06-29T20:00:53.472163-05:00 claude-cloud sshd[332040]: Received disconnect from 191.97.12.90 port 42350:11: Bye Bye [preauth]
2026-06-29T20:00:53.472741-05:00 claude-cloud sshd[332040]: Disconnected from invalid user community 191.97.12.90 port 42350 [preauth]
2026-06-29T20:00:55.546790-05:00 claude-cloud sshd[332022]: Connection closed by authenticating user root 141.11.88.122 port 38872 [preauth]
2026-06-29T20:01:07.807445-05:00 claude-cloud sshd[332032]: Connection closed by authenticating user root 141.11.88.121 port 48444 [preauth]
2026-06-29T20:01:25.280113-05:00 claude-cloud sshd[332054]: Connection closed by authenticating user root 141.11.88.122 port 43790 [preauth]
2026-06-29T20:01:30.473426-05:00 claude-cloud sshd[332110]: Connection closed by authenticating user root 92.118.39.71 port 45764 [preauth]
2026-06-29T20:01:33.377347-05:00 claude-cloud sshd[332077]: Connection closed by authenticating user root 141.11.88.121 port 59590 [preauth]
2026-06-29T20:01:45.216841-05:00 claude-cloud sshd[332164]: Connection closed by 203.121.106.56 port 56646 [preauth]
2026-06-29T20:01:48.427363-05:00 claude-cloud sshd[332100]: Connection reset by 141.11.88.122 port 47004 [preauth]
2026-06-29T20:02:01.242807-05:00 claude-cloud sshd[332125]: Connection reset by 141.11.88.121 port 54250 [preauth]
2026-06-29T20:02:42.690730-05:00 claude-cloud sshd[332258]: Invalid user mpg from 191.97.12.90 port 54416
2026-06-29T20:02:42.866470-05:00 claude-cloud sshd[332258]: Received disconnect from 191.97.12.90 port 54416:11: Bye Bye [preauth]
2026-06-29T20:02:42.866949-05:00 claude-cloud sshd[332258]: Disconnected from invalid user mpg 191.97.12.90 port 54416 [preauth]
2026-06-29T20:02:46.486345-05:00 claude-cloud sshd[332251]: Connection closed by authenticating user root 141.11.88.122 port 47186 [preauth]
2026-06-29T20:02:46.664402-05:00 claude-cloud sshd[332264]: Invalid user nexus from 115.248.8.65 port 43022
2026-06-29T20:02:47.068242-05:00 claude-cloud sshd[332264]: Connection closed by invalid user nexus 115.248.8.65 port 43022 [preauth]
2026-06-29T20:02:47.930472-05:00 claude-cloud sshd[332260]: Connection closed by authenticating user root 141.11.88.121 port 50304 [preauth]
2026-06-29T20:02:52.709097-05:00 claude-cloud sshd[332268]: Connection closed by authenticating user root 141.11.88.121 port 58752 [preauth]
2026-06-29T20:02:53.356306-05:00 claude-cloud sshd[332256]: Connection closed by authenticating user root 27.71.230.31 port 42446 [preauth]
2026-06-29T20:02:59.389134-05:00 claude-cloud sshd[332283]: Connection closed by authenticating user root 141.11.88.121 port 35668 [preauth]
2026-06-29T20:03:05.078415-05:00 claude-cloud sshd[332299]: Connection closed by authenticating user root 141.11.88.121 port 54298 [preauth]
2026-06-29T20:03:06.569035-05:00 claude-cloud sshd[332267]: Connection closed by authenticating user root 141.11.88.122 port 37042 [preauth]
2026-06-29T20:03:12.742031-05:00 claude-cloud sshd[332313]: Connection closed by authenticating user root 141.11.88.121 port 38198 [preauth]
2026-06-29T20:03:13.181393-05:00 claude-cloud sshd[332321]: Invalid user admin from 2.57.121.25 port 23092
2026-06-29T20:03:13.208804-05:00 claude-cloud sshd[332321]: Connection closed by invalid user admin 2.57.121.25 port 23092 [preauth]
2026-06-29T20:03:15.448708-05:00 claude-cloud sshd[332326]: Connection closed by authenticating user root 92.118.39.71 port 48678 [preauth]
2026-06-29T20:03:20.170038-05:00 claude-cloud sshd[332320]: Connection closed by authenticating user root 141.11.88.121 port 35954 [preauth]
2026-06-29T20:03:23.613209-05:00 claude-cloud sshd[332343]: Invalid user test from 45.148.10.121 port 46026
2026-06-29T20:03:23.629177-05:00 claude-cloud sshd[332343]: Connection closed by invalid user test 45.148.10.121 port 46026 [preauth]
2026-06-29T20:03:29.098821-05:00 claude-cloud sshd[332315]: Connection closed by authenticating user root 141.11.88.122 port 56588 [preauth]
2026-06-29T20:03:30.015221-05:00 claude-cloud sshd[332332]: Connection closed by authenticating user root 141.11.88.121 port 60366 [preauth]
2026-06-29T20:03:39.027729-05:00 claude-cloud sshd[332358]: Connection closed by authenticating user root 141.11.88.121 port 46468 [preauth]
2026-06-29T20:03:51.567018-05:00 claude-cloud sshd[332373]: Connection closed by authenticating user root 141.11.88.121 port 54412 [preauth]
2026-06-29T20:04:00.113505-05:00 claude-cloud sshd[332419]: Connection closed by authenticating user root 45.198.224.46 port 53020 [preauth]
2026-06-29T20:04:06.180249-05:00 claude-cloud sshd[332402]: Connection closed by authenticating user root 141.11.88.121 port 56024 [preauth]
2026-06-29T20:04:06.217831-05:00 claude-cloud sshd[332357]: Connection closed by authenticating user root 141.11.88.122 port 57140 [preauth]
2026-06-29T20:04:11.142756-05:00 claude-cloud sshd[332456]: error: kex_exchange_identification: read: Connection reset by peer
2026-06-29T20:04:11.143509-05:00 claude-cloud sshd[332456]: Connection reset by 141.11.88.122 port 37464
2026-06-29T20:04:24.675268-05:00 claude-cloud sshd[332455]: Connection closed by authenticating user root 141.11.88.121 port 47386 [preauth]
2026-06-29T20:04:30.722195-05:00 claude-cloud sshd[332504]: Invalid user pje from 191.97.12.90 port 57978
2026-06-29T20:04:30.904522-05:00 claude-cloud sshd[332504]: Received disconnect from 191.97.12.90 port 57978:11: Bye Bye [preauth]
2026-06-29T20:04:30.904945-05:00 claude-cloud sshd[332504]: Disconnected from invalid user pje 191.97.12.90 port 57978 [preauth]
2026-06-29T20:04:45.806781-05:00 claude-cloud sshd[332481]: Connection closed by authenticating user root 141.11.88.121 port 60718 [preauth]
2026-06-29T20:04:47.565933-05:00 claude-cloud sshd[332519]: Connection closed by authenticating user root 193.46.255.86 port 50774 [preauth]
2026-06-29T20:04:57.949053-05:00 claude-cloud sshd[332542]: Connection closed by authenticating user root 92.118.39.71 port 51604 [preauth]
2026-06-29T20:05:01.272705-05:00 claude-cloud CRON[332554]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-29T20:05:01.280359-05:00 claude-cloud CRON[332554]: pam_unix(cron:session): session closed for user root
2026-06-29T20:05:10.205409-05:00 claude-cloud sshd[332518]: Connection closed by authenticating user root 141.11.88.121 port 60426 [preauth]
2026-06-29T20:05:10.305791-05:00 claude-cloud sshd[332535]: Connection closed by authenticating user root 141.11.88.122 port 54920 [preauth]
2026-06-29T20:05:32.454025-05:00 claude-cloud sshd[332561]: Connection closed by authenticating user root 141.11.88.122 port 44446 [preauth]
2026-06-29T20:05:34.955814-05:00 claude-cloud sshd[332560]: Connection reset by authenticating user root 141.11.88.121 port 46442 [preauth]
2026-06-29T20:05:57.799458-05:00 claude-cloud sshd[332647]: Invalid user user from 118.194.249.186 port 57008
2026-06-29T20:05:58.085366-05:00 claude-cloud sshd[332647]: Connection closed by invalid user user 118.194.249.186 port 57008 [preauth]
2026-06-29T20:05:59.560364-05:00 claude-cloud sshd[332655]: Invalid user user from 118.194.249.186 port 38284
2026-06-29T20:05:59.851126-05:00 claude-cloud sshd[332655]: Connection closed by invalid user user 118.194.249.186 port 38284 [preauth]
2026-06-29T20:06:01.324185-05:00 claude-cloud sshd[332657]: Invalid user user from 118.194.249.186 port 45214
2026-06-29T20:06:01.612045-05:00 claude-cloud sshd[332657]: Connection closed by invalid user user 118.194.249.186 port 45214 [preauth]
2026-06-29T20:06:03.087217-05:00 claude-cloud sshd[332671]: Invalid user user from 118.194.249.186 port 46428
2026-06-29T20:06:03.375492-05:00 claude-cloud sshd[332671]: Connection closed by invalid user user 118.194.249.186 port 46428 [preauth]
2026-06-29T20:06:04.116337-05:00 claude-cloud sshd[332603]: Connection closed by authenticating user root 141.11.88.122 port 45614 [preauth]
2026-06-29T20:06:04.842072-05:00 claude-cloud sshd[332673]: Invalid user user from 118.194.249.186 port 51850
2026-06-29T20:06:05.130843-05:00 claude-cloud sshd[332673]: Connection closed by invalid user user 118.194.249.186 port 51850 [preauth]
2026-06-29T20:06:20.067975-05:00 claude-cloud sshd[332687]: Connection closed by authenticating user root 141.11.88.121 port 49342 [preauth]
2026-06-29T20:06:21.178760-05:00 claude-cloud sshd[332694]: Invalid user anthropology from 191.97.12.90 port 55314
2026-06-29T20:06:21.346252-05:00 claude-cloud sshd[332694]: Received disconnect from 191.97.12.90 port 55314:11: Bye Bye [preauth]
2026-06-29T20:06:21.346695-05:00 claude-cloud sshd[332694]: Disconnected from invalid user anthropology 191.97.12.90 port 55314 [preauth]
2026-06-29T20:06:23.737895-05:00 claude-cloud sshd[332693]: Invalid user git from 115.248.8.65 port 33772
2026-06-29T20:06:24.265594-05:00 claude-cloud sshd[332693]: Connection closed by invalid user git 115.248.8.65 port 33772 [preauth]
2026-06-29T20:06:25.719447-05:00 claude-cloud sshd[332692]: Connection closed by authenticating user root 141.11.88.121 port 47838 [preauth]
2026-06-29T20:06:30.079716-05:00 claude-cloud sshd[332675]: Connection reset by 141.11.88.122 port 43450 [preauth]
2026-06-29T20:06:31.615415-05:00 claude-cloud sshd[332712]: Connection closed by authenticating user root 141.11.88.121 port 60562 [preauth]
2026-06-29T20:06:38.605186-05:00 claude-cloud sshd[332747]: Connection closed by authenticating user root 141.11.88.121 port 41714 [preauth]
2026-06-29T20:06:40.687850-05:00 claude-cloud sshd[332750]: Connection closed by authenticating user root 92.118.39.71 port 54526 [preauth]
2026-06-29T20:06:41.602253-05:00 claude-cloud sshd[332756]: Received disconnect from 107.172.88.206 port 44926:11: disconnected by user [preauth]
2026-06-29T20:06:41.602734-05:00 claude-cloud sshd[332756]: Disconnected from authenticating user root 107.172.88.206 port 44926 [preauth]
2026-06-29T20:06:46.667367-05:00 claude-cloud sshd[332749]: Connection closed by authenticating user root 141.11.88.121 port 37202 [preauth]
2026-06-29T20:06:56.034862-05:00 claude-cloud sshd[332761]: Connection closed by authenticating user root 141.11.88.121 port 38372 [preauth]
2026-06-29T20:07:08.403750-05:00 claude-cloud sshd[332782]: Connection closed by authenticating user root 141.11.88.121 port 49510 [preauth]
2026-06-29T20:07:20.451447-05:00 claude-cloud sshd[332802]: Connection closed by authenticating user root 141.11.88.121 port 45024 [preauth]
2026-06-29T20:07:23.660974-05:00 claude-cloud sshd[332803]: Connection closed by authenticating user root 141.11.88.122 port 55000 [preauth]
2026-06-29T20:07:34.737856-05:00 claude-cloud sshd[332815]: Connection closed by authenticating user root 141.11.88.121 port 47142 [preauth]
2026-06-29T20:07:38.934138-05:00 claude-cloud sshd[332826]: Connection closed by authenticating user root 141.11.88.122 port 38646 [preauth]
2026-06-29T20:07:53.680560-05:00 claude-cloud sshd[332864]: Connection closed by authenticating user root 141.11.88.121 port 59792 [preauth]
2026-06-29T20:07:59.348748-05:00 claude-cloud sshd[332866]: Connection closed by authenticating user root 141.11.88.122 port 52448 [preauth]
2026-06-29T20:08:10.089015-05:00 claude-cloud sshd[332902]: Connection closed by authenticating user root 141.11.88.121 port 49174 [preauth]
2026-06-29T20:08:15.569804-05:00 claude-cloud sshd[332915]: Connection closed by 66.132.172.197 port 54204 [preauth]
2026-06-29T20:08:21.746331-05:00 claude-cloud sshd[332943]: Connection closed by authenticating user root 92.118.39.71 port 57436 [preauth]
2026-06-29T20:08:27.163860-05:00 claude-cloud sshd[332935]: Connection closed by authenticating user root 141.11.88.121 port 48088 [preauth]
2026-06-29T20:08:43.490782-05:00 claude-cloud sshd[332960]: Connection closed by authenticating user root 141.11.88.121 port 56356 [preauth]
2026-06-29T20:08:49.477414-05:00 claude-cloud sshd[333002]: Received disconnect from 176.65.136.31 port 33770:11: disconnected by user [preauth]
2026-06-29T20:08:49.477772-05:00 claude-cloud sshd[333002]: Disconnected from authenticating user root 176.65.136.31 port 33770 [preauth]
2026-06-29T20:08:49.788712-05:00 claude-cloud sshd[332917]: Connection closed by authenticating user root 141.11.88.122 port 42346 [preauth]
2026-06-29T20:08:51.039970-05:00 claude-cloud sshd[333007]: error: kex_exchange_identification: read: Connection reset by peer
2026-06-29T20:08:51.040362-05:00 claude-cloud sshd[333007]: Connection reset by 141.11.88.122 port 58476
2026-06-29T20:09:06.060027-05:00 claude-cloud sshd[332995]: Connection closed by authenticating user root 27.71.230.31 port 56846 [preauth]
2026-06-29T20:09:11.648409-05:00 claude-cloud sshd[333000]: Connection reset by authenticating user root 141.11.88.121 port 33534 [preauth]
2026-06-29T20:09:44.248847-05:00 claude-cloud sshd[333078]: Connection closed by authenticating user root 141.11.88.122 port 50034 [preauth]
2026-06-29T20:09:57.136147-05:00 claude-cloud sshd[333183]: Connection closed by authenticating user root 141.11.88.121 port 44642 [preauth]
2026-06-29T20:10:03.173238-05:00 claude-cloud sshd[333199]: Connection closed by authenticating user root 141.11.88.121 port 52162 [preauth]
2026-06-29T20:10:03.442432-05:00 claude-cloud sshd[333132]: Connection closed by authenticating user root 141.11.88.122 port 36282 [preauth]
2026-06-29T20:10:05.247642-05:00 claude-cloud sshd[333215]: Connection closed by authenticating user root 92.118.39.71 port 60342 [preauth]
2026-06-29T20:10:08.165682-05:00 claude-cloud sshd[333211]: Connection closed by authenticating user root 141.11.88.121 port 38006 [preauth]
2026-06-29T20:10:09.466189-05:00 claude-cloud sshd[333218]: Invalid user es from 115.248.8.65 port 50568
2026-06-29T20:10:10.076107-05:00 claude-cloud sshd[333218]: Connection closed by invalid user es 115.248.8.65 port 50568 [preauth]
2026-06-29T20:10:15.163166-05:00 claude-cloud sshd[333221]: Connection closed by authenticating user root 141.11.88.121 port 47440 [preauth]
2026-06-29T20:10:23.395399-05:00 claude-cloud sshd[333214]: Connection closed by authenticating user root 141.11.88.122 port 46626 [preauth]
2026-06-29T20:10:23.952573-05:00 claude-cloud sshd[333229]: Connection closed by authenticating user root 141.11.88.121 port 42284 [preauth]
2026-06-29T20:10:30.951551-05:00 claude-cloud sshd[333245]: Connection closed by authenticating user root 141.11.88.121 port 46392 [preauth]
2026-06-29T20:10:33.428834-05:00 claude-cloud sshd[333243]: Connection closed by authenticating user root 141.11.88.122 port 39082 [preauth]
2026-06-29T20:10:41.858953-05:00 claude-cloud sshd[333265]: Connection closed by authenticating user root 141.11.88.121 port 42806 [preauth]
2026-06-29T20:10:52.152390-05:00 claude-cloud sshd[333277]: Connection closed by authenticating user root 141.11.88.121 port 33334 [preauth]
2026-06-29T20:11:01.535468-05:00 claude-cloud sshd[333301]: Connection closed by authenticating user root 141.11.88.121 port 46340 [preauth]
2026-06-29T20:11:04.110369-05:00 claude-cloud sshd[333273]: Connection reset by 141.11.88.122 port 54946 [preauth]
2026-06-29T20:11:16.418699-05:00 claude-cloud sshd[333333]: Connection closed by authenticating user root 141.11.88.121 port 59832 [preauth]
2026-06-29T20:11:34.478726-05:00 claude-cloud sshd[333344]: Connection closed by authenticating user root 141.11.88.121 port 53550 [preauth]
2026-06-29T20:11:49.959555-05:00 claude-cloud sshd[333382]: Connection closed by authenticating user root 141.11.88.121 port 35260 [preauth]
2026-06-29T20:11:51.328225-05:00 claude-cloud sshd[333423]: Connection closed by authenticating user root 92.118.39.71 port 35010 [preauth]
2026-06-29T20:11:55.457008-05:00 claude-cloud sshd[333434]: Received disconnect from 103.57.224.219 port 27760:11: disconnected by user [preauth]
2026-06-29T20:11:55.457491-05:00 claude-cloud sshd[333434]: Disconnected from authenticating user root 103.57.224.219 port 27760 [preauth]
2026-06-29T20:12:01.264501-05:00 claude-cloud sshd[333417]: Connection closed by authenticating user root 141.11.88.122 port 46748 [preauth]
2026-06-29T20:12:12.122087-05:00 claude-cloud sshd[333422]: Connection closed by authenticating user root 141.11.88.121 port 60314 [preauth]
2026-06-29T20:12:18.631382-05:00 claude-cloud sshd[333459]: Connection closed by authenticating user root 141.11.88.122 port 38272 [preauth]
2026-06-29T20:12:40.814020-05:00 claude-cloud sshd[333467]: Connection closed by authenticating user root 141.11.88.121 port 46704 [preauth]
2026-06-29T20:12:43.617579-05:00 claude-cloud sshd[333525]: error: kex_exchange_identification: read: Connection reset by peer
2026-06-29T20:12:43.618050-05:00 claude-cloud sshd[333525]: Connection reset by 141.11.88.121 port 55738
2026-06-29T20:12:46.736429-05:00 claude-cloud sshd[333472]: Connection closed by authenticating user root 141.11.88.122 port 40250 [preauth]
2026-06-29T20:13:18.268329-05:00 claude-cloud sshd[333529]: Connection reset by 141.11.88.122 port 57088 [preauth]
2026-06-29T20:13:23.128771-05:00 claude-cloud sshd[333577]: Connection closed by authenticating user root 45.198.224.46 port 54294 [preauth]
2026-06-29T20:13:24.875794-05:00 claude-cloud sshd[333579]: Connection closed by authenticating user root 141.11.88.121 port 33208 [preauth]
2026-06-29T20:13:30.679240-05:00 claude-cloud sshd[333602]: Connection closed by authenticating user root 141.11.88.121 port 33182 [preauth]
2026-06-29T20:13:35.359867-05:00 claude-cloud sshd[333622]: Connection closed by authenticating user root 141.11.88.121 port 46326 [preauth]
2026-06-29T20:13:40.193681-05:00 claude-cloud sshd[333630]: Connection closed by authenticating user root 141.11.88.121 port 48686 [preauth]
2026-06-29T20:13:40.537687-05:00 claude-cloud sshd[333632]: Connection closed by authenticating user root 92.118.39.71 port 37924 [preauth]
2026-06-29T20:13:48.607358-05:00 claude-cloud sshd[333637]: Connection closed by authenticating user root 141.11.88.121 port 56130 [preauth]
2026-06-29T20:13:51.252652-05:00 claude-cloud sshd[333657]: Invalid user dd from 115.248.8.65 port 55412
2026-06-29T20:13:51.636864-05:00 claude-cloud sshd[333657]: Connection closed by invalid user dd 115.248.8.65 port 55412 [preauth]
2026-06-29T20:13:57.411334-05:00 claude-cloud sshd[333658]: Connection closed by authenticating user root 141.11.88.121 port 58408 [preauth]
2026-06-29T20:14:07.270087-05:00 claude-cloud sshd[333681]: Connection closed by authenticating user root 141.11.88.121 port 34756 [preauth]
2026-06-29T20:14:09.925039-05:00 claude-cloud sshd[333680]: Connection closed by authenticating user root 141.11.88.122 port 42884 [preauth]
2026-06-29T20:14:15.562433-05:00 claude-cloud sshd[333702]: Connection closed by authenticating user root 141.11.88.121 port 47622 [preauth]
2026-06-29T20:14:27.956101-05:00 claude-cloud sshd[333712]: Connection closed by authenticating user root 141.11.88.121 port 52944 [preauth]
2026-06-29T20:14:32.334249-05:00 claude-cloud sshd[333707]: Connection closed by authenticating user root 141.11.88.122 port 54130 [preauth]
2026-06-29T20:14:41.440515-05:00 claude-cloud sshd[333744]: Connection closed by authenticating user root 141.11.88.121 port 51902 [preauth]
2026-06-29T20:14:51.671835-05:00 claude-cloud sshd[333766]: Connection closed by authenticating user root 141.11.88.122 port 58106 [preauth]
2026-06-29T20:14:58.358685-05:00 claude-cloud sshd[333772]: Connection closed by authenticating user root 141.11.88.121 port 38652 [preauth]
2026-06-29T20:15:00.889334-05:00 claude-cloud sshd[333773]: Connection closed by authenticating user root 27.71.230.31 port 60554 [preauth]
2026-06-29T20:15:01.290635-05:00 claude-cloud CRON[333816]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-29T20:15:01.297464-05:00 claude-cloud CRON[333816]: pam_unix(cron:session): session closed for user root
2026-06-29T20:15:18.980815-05:00 claude-cloud sshd[333806]: Connection closed by authenticating user root 141.11.88.121 port 41838 [preauth]
2026-06-29T20:15:28.430271-05:00 claude-cloud sshd[333785]: Connection reset by 141.11.88.122 port 60442 [preauth]
2026-06-29T20:15:29.407582-05:00 claude-cloud sshd[333873]: Connection closed by authenticating user root 92.118.39.71 port 40798 [preauth]
2026-06-29T20:15:36.727313-05:00 claude-cloud sshd[333842]: Connection closed by authenticating user root 141.11.88.121 port 34528 [preauth]
2026-06-29T20:16:09.467396-05:00 claude-cloud sshd[333887]: Connection closed by authenticating user root 141.11.88.121 port 40562 [preauth]
2026-06-29T20:16:26.968171-05:00 claude-cloud sshd[334005]: Connection reset by 141.11.88.121 port 41376 [preauth]
2026-06-29T20:16:27.070415-05:00 claude-cloud sshd[334032]: Connection closed by 161.35.47.134 port 32856
2026-06-29T20:16:31.144079-05:00 claude-cloud sshd[334006]: Connection closed by authenticating user root 141.11.88.122 port 53268 [preauth]
2026-06-29T20:16:38.496798-05:00 claude-cloud sshd[334053]: Invalid user  from 176.65.139.92 port 56264
2026-06-29T20:16:46.396262-05:00 claude-cloud sshd[334053]: Connection closed by invalid user  176.65.139.92 port 56264 [preauth]
2026-06-29T20:16:49.705871-05:00 claude-cloud sshd[334039]: Connection closed by authenticating user root 141.11.88.122 port 45428 [preauth]
2026-06-29T20:17:01.304524-05:00 claude-cloud CRON[334091]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-29T20:17:01.311027-05:00 claude-cloud CRON[334091]: pam_unix(cron:session): session closed for user root
2026-06-29T20:17:14.838903-05:00 claude-cloud sshd[334103]: Connection closed by authenticating user root 141.11.88.121 port 43280 [preauth]
2026-06-29T20:17:17.777304-05:00 claude-cloud sshd[334064]: Connection closed by authenticating user root 141.11.88.122 port 50658 [preauth]
2026-06-29T20:17:18.305011-05:00 claude-cloud sshd[334113]: Connection closed by authenticating user root 92.118.39.71 port 43724 [preauth]
2026-06-29T20:17:20.637721-05:00 claude-cloud sshd[334111]: Connection closed by authenticating user root 141.11.88.121 port 54312 [preauth]
2026-06-29T20:17:27.084114-05:00 claude-cloud sshd[334119]: Connection closed by authenticating user root 141.11.88.121 port 41082 [preauth]
2026-06-29T20:17:33.478936-05:00 claude-cloud sshd[334145]: Invalid user bitrix from 115.248.8.65 port 37258
2026-06-29T20:17:33.933182-05:00 claude-cloud sshd[334145]: Connection closed by invalid user bitrix 115.248.8.65 port 37258 [preauth]
2026-06-29T20:17:34.043664-05:00 claude-cloud sshd[334137]: Connection closed by authenticating user root 141.11.88.121 port 59316 [preauth]
2026-06-29T20:17:42.880816-05:00 claude-cloud sshd[334159]: Connection closed by authenticating user root 141.11.88.121 port 52090 [preauth]
2026-06-29T20:17:48.369541-05:00 claude-cloud sshd[334115]: Connection reset by 141.11.88.122 port 35178 [preauth]
2026-06-29T20:17:53.010400-05:00 claude-cloud sshd[334184]: Connection closed by authenticating user root 141.11.88.121 port 33982 [preauth]
2026-06-29T20:18:02.413053-05:00 claude-cloud sshd[334217]: Connection closed by authenticating user root 141.11.88.121 port 44842 [preauth]
2026-06-29T20:18:02.713966-05:00 claude-cloud sshd[334241]: Invalid user user from 118.194.249.186 port 44038
2026-06-29T20:18:02.990050-05:00 claude-cloud sshd[334241]: Connection closed by invalid user user 118.194.249.186 port 44038 [preauth]
2026-06-29T20:18:04.489877-05:00 claude-cloud sshd[334247]: Invalid user user from 118.194.249.186 port 44290
2026-06-29T20:18:04.779957-05:00 claude-cloud sshd[334247]: Connection closed by invalid user user 118.194.249.186 port 44290 [preauth]
2026-06-29T20:18:06.247822-05:00 claude-cloud sshd[334250]: Invalid user user from 118.194.249.186 port 51098
2026-06-29T20:18:06.535685-05:00 claude-cloud sshd[334250]: Connection closed by invalid user user 118.194.249.186 port 51098 [preauth]
2026-06-29T20:18:08.008159-05:00 claude-cloud sshd[334252]: Invalid user user from 118.194.249.186 port 59332
2026-06-29T20:18:08.296194-05:00 claude-cloud sshd[334252]: Connection closed by invalid user user 118.194.249.186 port 59332 [preauth]
2026-06-29T20:18:09.769496-05:00 claude-cloud sshd[334254]: Invalid user user from 118.194.249.186 port 36754
2026-06-29T20:18:10.060683-05:00 claude-cloud sshd[334254]: Connection closed by invalid user user 118.194.249.186 port 36754 [preauth]
2026-06-29T20:18:14.167090-05:00 claude-cloud sshd[334246]: Connection closed by authenticating user root 141.11.88.121 port 49948 [preauth]
2026-06-29T20:18:16.306636-05:00 claude-cloud sshd[334267]: Connection closed by 117.50.195.240 port 63698
2026-06-29T20:18:28.181639-05:00 claude-cloud sshd[334266]: Connection closed by authenticating user root 141.11.88.121 port 46590 [preauth]
2026-06-29T20:18:41.932996-05:00 claude-cloud sshd[334295]: Connection closed by authenticating user root 141.11.88.122 port 44942 [preauth]
2026-06-29T20:18:49.862551-05:00 claude-cloud sshd[334288]: Connection closed by authenticating user root 141.11.88.121 port 33766 [preauth]
2026-06-29T20:18:56.666096-05:00 claude-cloud sshd[334315]: Connection closed by authenticating user root 141.11.88.122 port 42066 [preauth]
2026-06-29T20:19:05.539468-05:00 claude-cloud sshd[334323]: Connection closed by authenticating user root 141.11.88.121 port 39870 [preauth]
2026-06-29T20:19:07.232458-05:00 claude-cloud sshd[334362]: Connection closed by authenticating user root 92.118.39.71 port 46630 [preauth]
2026-06-29T20:19:13.453159-05:00 claude-cloud sshd[334361]: Connection closed by authenticating user root 141.11.88.121 port 60626 [preauth]
2026-06-29T20:19:22.966501-05:00 claude-cloud sshd[334341]: Connection closed by authenticating user root 141.11.88.122 port 54732 [preauth]
2026-06-29T20:19:31.562571-05:00 claude-cloud sshd[334375]: Connection closed by authenticating user root 141.11.88.121 port 59460 [preauth]
2026-06-29T20:19:57.280208-05:00 claude-cloud sshd[334389]: Connection closed by authenticating user root 141.11.88.122 port 53284 [preauth]
2026-06-29T20:19:59.454108-05:00 claude-cloud sshd[334418]: Connection reset by authenticating user root 141.11.88.121 port 45268 [preauth]
2026-06-29T20:20:08.356991-05:00 claude-cloud sshd[334464]: error: kex_exchange_identification: read: Connection reset by peer
2026-06-29T20:20:08.357129-05:00 claude-cloud sshd2026-06-30T00:26:34.802667-05:00 claude-cloud sshd[375414]: Invalid user gif from 165.154.235.9 port 36910
2026-06-30T00:26:34.983179-05:00 claude-cloud sshd[375414]: Received disconnect from 165.154.235.9 port 36910:11: Bye Bye [preauth]
2026-06-30T00:26:34.983423-05:00 claude-cloud sshd[375414]: Disconnected from invalid user gif 165.154.235.9 port 36910 [preauth]
2026-06-30T00:26:50.309341-05:00 claude-cloud sshd[375461]: Connection closed by 220.160.56.48 port 47292
2026-06-30T00:26:53.728418-05:00 claude-cloud sshd[375456]: Connection closed by authenticating user root 115.248.8.65 port 41146 [preauth]
2026-06-30T00:28:08.912417-05:00 claude-cloud sshd[375568]: Invalid user suspended from 165.154.235.9 port 58818
2026-06-30T00:28:09.089487-05:00 claude-cloud sshd[375568]: Received disconnect from 165.154.235.9 port 58818:11: Bye Bye [preauth]
2026-06-30T00:28:09.089680-05:00 claude-cloud sshd[375568]: Disconnected from invalid user suspended 165.154.235.9 port 58818 [preauth]
2026-06-30T00:28:44.904633-05:00 claude-cloud sshd[375591]: Connection closed by authenticating user root 27.71.230.31 port 36184 [preauth]
2026-06-30T00:29:19.991659-05:00 claude-cloud sshd[375684]: Connection closed by authenticating user root 45.198.224.46 port 60146 [preauth]
2026-06-30T00:29:41.231376-05:00 claude-cloud systemd-logind[853]: New session c5047 of user claude.
2026-06-30T00:29:41.496163-05:00 claude-cloud systemd-logind[853]: Session c5047 logged out. Waiting for processes to exit.
2026-06-30T00:29:41.498670-05:00 claude-cloud systemd-logind[853]: Removed session c5047.
2026-06-30T00:29:47.709800-05:00 claude-cloud sshd[375738]: Invalid user myspace from 165.154.235.9 port 40774
2026-06-30T00:29:47.886213-05:00 claude-cloud sshd[375738]: Received disconnect from 165.154.235.9 port 40774:11: Bye Bye [preauth]
2026-06-30T00:29:47.886524-05:00 claude-cloud sshd[375738]: Disconnected from invalid user myspace 165.154.235.9 port 40774 [preauth]
2026-06-30T00:30:42.465952-05:00 claude-cloud sshd[375810]: Connection closed by authenticating user root 115.248.8.65 port 52548 [preauth]
2026-06-30T00:30:52.130522-05:00 claude-cloud sshd[375851]: Connection closed by 161.35.47.134 port 33930
2026-06-30T00:31:26.151756-05:00 claude-cloud sshd[375895]: Invalid user classifieds from 165.154.235.9 port 33932
2026-06-30T00:31:26.339354-05:00 claude-cloud sshd[375895]: Received disconnect from 165.154.235.9 port 33932:11: Bye Bye [preauth]
2026-06-30T00:31:26.339715-05:00 claude-cloud sshd[375895]: Disconnected from invalid user classifieds 165.154.235.9 port 33932 [preauth]
2026-06-30T00:32:18.611450-05:00 claude-cloud sshd[375974]: Invalid user admin from 2.57.122.150 port 36160
2026-06-30T00:32:18.637175-05:00 claude-cloud sshd[375974]: Connection closed by invalid user admin 2.57.122.150 port 36160 [preauth]
2026-06-30T00:34:20.492567-05:00 claude-cloud sshd[376158]: Connection closed by authenticating user root 115.248.8.65 port 36766 [preauth]
2026-06-30T00:34:43.292033-05:00 claude-cloud sshd[376169]: Connection closed by authenticating user root 27.71.230.31 port 57240 [preauth]
2026-06-30T00:34:44.689442-05:00 claude-cloud systemd-logind[853]: New session c5048 of user claude.
2026-06-30T00:34:44.955805-05:00 claude-cloud systemd-logind[853]: Session c5048 logged out. Waiting for processes to exit.
2026-06-30T00:34:44.959751-05:00 claude-cloud systemd-logind[853]: Removed session c5048.
2026-06-30T00:35:01.098811-05:00 claude-cloud CRON[376246]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-30T00:35:01.111834-05:00 claude-cloud CRON[376246]: pam_unix(cron:session): session closed for user root
2026-06-30T00:36:46.746213-05:00 claude-cloud sshd[376475]: Connection closed by 161.35.47.134 port 57246
2026-06-30T00:38:06.427629-05:00 claude-cloud sshd[376571]: Connection closed by authenticating user root 115.248.8.65 port 56972 [preauth]
2026-06-30T00:38:31.657870-05:00 claude-cloud sshd[376615]: Connection closed by authenticating user root 45.198.224.46 port 52192 [preauth]
2026-06-30T00:39:05.073504-05:00 claude-cloud sshd[376687]: Connection closed by 203.55.131.4 port 37000 [preauth]
2026-06-30T00:39:49.275495-05:00 claude-cloud systemd-logind[853]: New session c5049 of user claude.
2026-06-30T00:39:49.555568-05:00 claude-cloud systemd-logind[853]: Session c5049 logged out. Waiting for processes to exit.
2026-06-30T00:39:49.557632-05:00 claude-cloud systemd-logind[853]: Removed session c5049.
2026-06-30T00:40:04.662872-05:00 claude-cloud systemd-logind[853]: New session c5050 of user claude.
2026-06-30T00:40:04.705019-05:00 claude-cloud systemd-logind[853]: Session c5050 logged out. Waiting for processes to exit.
2026-06-30T00:40:04.708944-05:00 claude-cloud systemd-logind[853]: Removed session c5050.
2026-06-30T00:40:26.413543-05:00 claude-cloud sshd[376825]: Connection closed by authenticating user root 27.71.230.31 port 36888 [preauth]
2026-06-30T00:40:30.180208-05:00 claude-cloud systemd-logind[853]: New session c5051 of user claude.
2026-06-30T00:40:30.211311-05:00 claude-cloud systemd-logind[853]: Session c5051 logged out. Waiting for processes to exit.
2026-06-30T00:40:30.213434-05:00 claude-cloud systemd-logind[853]: Removed session c5051.
2026-06-30T00:41:00.198157-05:00 claude-cloud systemd-logind[853]: New session c5052 of user claude.
2026-06-30T00:41:00.221555-05:00 claude-cloud systemd-logind[853]: Session c5052 logged out. Waiting for processes to exit.
2026-06-30T00:41:00.222630-05:00 claude-cloud systemd-logind[853]: Removed session c5052.
2026-06-30T00:41:27.445859-05:00 claude-cloud systemd-logind[853]: New session c5053 of user claude.
2026-06-30T00:41:52.458095-05:00 claude-cloud sshd[376998]: Connection closed by authenticating user root 115.248.8.65 port 51176 [preauth]
2026-06-30T00:42:11.638059-05:00 claude-cloud systemd-logind[853]: Session c5053 logged out. Waiting for processes to exit.
2026-06-30T00:42:11.642466-05:00 claude-cloud systemd-logind[853]: Removed session c5053.
2026-06-30T00:42:15.119120-05:00 claude-cloud systemd-logind[853]: New session c5054 of user claude.
2026-06-30T00:42:15.406695-05:00 claude-cloud systemd-logind[853]: Session c5054 logged out. Waiting for processes to exit.
2026-06-30T00:42:15.408215-05:00 claude-cloud systemd-logind[853]: Removed session c5054.
2026-06-30T00:43:17.873552-05:00 claude-cloud systemd-logind[853]: New session c5055 of user claude.
2026-06-30T00:43:21.202834-05:00 claude-cloud systemd-logind[853]: Session c5055 logged out. Waiting for processes to exit.
2026-06-30T00:43:21.204248-05:00 claude-cloud systemd-logind[853]: Removed session c5055.
2026-06-30T00:43:25.169153-05:00 claude-cloud sshd[377147]: Connection closed by 161.35.47.134 port 44872
2026-06-30T00:43:25.258527-05:00 claude-cloud sshd[377146]: Invalid user admin from 2.57.122.150 port 39138
2026-06-30T00:43:25.286696-05:00 claude-cloud sshd[377146]: Connection closed by invalid user admin 2.57.122.150 port 39138 [preauth]
2026-06-30T00:43:37.398805-05:00 claude-cloud systemd-logind[853]: New session c5056 of user claude.
2026-06-30T00:43:37.428470-05:00 claude-cloud systemd-logind[853]: Session c5056 logged out. Waiting for processes to exit.
2026-06-30T00:43:37.430686-05:00 claude-cloud systemd-logind[853]: Removed session c5056.
2026-06-30T00:44:08.973964-05:00 claude-cloud systemd-logind[853]: New session c5057 of user claude.
2026-06-30T00:44:09.006961-05:00 claude-cloud systemd-logind[853]: Session c5057 logged out. Waiting for processes to exit.
2026-06-30T00:44:09.008621-05:00 claude-cloud systemd-logind[853]: Removed session c5057.
2026-06-30T00:44:13.626573-05:00 claude-cloud systemd-logind[853]: New session c5058 of user claude.
2026-06-30T00:44:13.691772-05:00 claude-cloud systemd-logind[853]: Session c5058 logged out. Waiting for processes to exit.
2026-06-30T00:44:13.692966-05:00 claude-cloud systemd-logind[853]: Removed session c5058.
2026-06-30T00:44:13.816639-05:00 claude-cloud sshd[377251]: Accepted publickey for claude from 104.189.115.46 port 65047 ssh2: ED25519 SHA256:EaJCYdZ/laq73Y0xG2DuEon5sDeah/mZfFu2siLMOlw
2026-06-30T00:44:13.822170-05:00 claude-cloud sshd[377251]: pam_unix(sshd:session): session opened for user claude(uid=1000) by claude(uid=0)
2026-06-30T00:44:13.832176-05:00 claude-cloud systemd-logind[853]: New session 2419 of user claude.
2026-06-30T00:44:15.650563-05:00 claude-cloud sshd[377341]: Received disconnect from 104.189.115.46 port 65047:11: disconnected by user
2026-06-30T00:44:15.652056-05:00 claude-cloud sshd[377341]: Disconnected from user claude 104.189.115.46 port 65047
2026-06-30T00:44:15.653351-05:00 claude-cloud sshd[377251]: pam_unix(sshd:session): session closed for user claude
2026-06-30T00:44:15.661954-05:00 claude-cloud systemd-logind[853]: Session 2419 logged out. Waiting for processes to exit.
2026-06-30T00:44:16.472820-05:00 claude-cloud systemd-logind[853]: Removed session 2419.
2026-06-30T00:44:31.211642-05:00 claude-cloud systemd-logind[853]: New session c5059 of user claude.
2026-06-30T00:44:31.570139-05:00 claude-cloud systemd-logind[853]: Session c5059 logged out. Waiting for processes to exit.
2026-06-30T00:44:31.574662-05:00 claude-cloud systemd-logind[853]: Removed session c5059.
2026-06-30T00:44:33.717482-05:00 claude-cloud sshd[377421]: Received disconnect from 188.44.20.33 port 59984:11: disconnected by user [preauth]
2026-06-30T00:44:33.718406-05:00 claude-cloud sshd[377421]: Disconnected from authenticating user root 188.44.20.33 port 59984 [preauth]
2026-06-30T00:44:48.995196-05:00 claude-cloud systemd-logind[853]: New session c5060 of user claude.
2026-06-30T00:44:49.038762-05:00 claude-cloud systemd-logind[853]: Session c5060 logged out. Waiting for processes to exit.
2026-06-30T00:44:49.040474-05:00 claude-cloud systemd-logind[853]: Removed session c5060.
2026-06-30T00:44:51.267763-05:00 claude-cloud systemd-logind[853]: New session c5061 of user claude.
2026-06-30T00:44:51.279752-05:00 claude-cloud systemd-logind[853]: New session c5062 of user claude.
2026-06-30T00:44:51.301381-05:00 claude-cloud systemd-logind[853]: New session c5063 of user claude.
2026-06-30T00:44:51.320413-05:00 claude-cloud systemd-logind[853]: New session c5064 of user claude.
2026-06-30T00:44:53.020048-05:00 claude-cloud systemd-logind[853]: Session c5063 logged out. Waiting for processes to exit.
2026-06-30T00:44:53.023056-05:00 claude-cloud systemd-logind[853]: Session c5062 logged out. Waiting for processes to exit.
2026-06-30T00:44:53.025414-05:00 claude-cloud systemd-logind[853]: Session c5064 logged out. Waiting for processes to exit.
2026-06-30T00:44:53.028667-05:00 claude-cloud systemd-logind[853]: Removed session c5064.
2026-06-30T00:44:53.030873-05:00 claude-cloud systemd-logind[853]: Removed session c5062.
2026-06-30T00:44:53.033386-05:00 claude-cloud systemd-logind[853]: Removed session c5063.
2026-06-30T00:44:53.058760-05:00 claude-cloud systemd-logind[853]: Session c5061 logged out. Waiting for processes to exit.
2026-06-30T00:44:53.061856-05:00 claude-cloud systemd-logind[853]: Removed session c5061.
2026-06-30T00:44:58.582401-05:00 claude-cloud systemd-logind[853]: New session c5065 of user claude.
2026-06-30T00:44:58.945564-05:00 claude-cloud systemd-logind[853]: Session c5065 logged out. Waiting for processes to exit.
2026-06-30T00:44:58.947250-05:00 claude-cloud systemd-logind[853]: Removed session c5065.
2026-06-30T00:45:01.125550-05:00 claude-cloud CRON[377559]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-30T00:45:01.133795-05:00 claude-cloud CRON[377559]: pam_unix(cron:session): session closed for user root
2026-06-30T00:45:11.462662-05:00 claude-cloud systemd-logind[853]: New session c5066 of user claude.
2026-06-30T00:45:11.522923-05:00 claude-cloud systemd-logind[853]: Session c5066 logged out. Waiting for processes to exit.
2026-06-30T00:45:11.525417-05:00 claude-cloud systemd-logind[853]: Removed session c5066.
2026-06-30T00:45:15.952105-05:00 claude-cloud systemd-logind[853]: New session c5067 of user claude.
2026-06-30T00:45:15.969549-05:00 claude-cloud systemd-logind[853]: New session c5068 of user claude.
2026-06-30T00:45:15.995383-05:00 claude-cloud systemd-logind[853]: New session c5069 of user claude.
2026-06-30T00:45:16.009515-05:00 claude-cloud systemd-logind[853]: New session c5070 of user claude.
2026-06-30T00:45:16.013787-05:00 claude-cloud systemd-logind[853]: Session c5067 logged out. Waiting for processes to exit.
2026-06-30T00:45:16.020589-05:00 claude-cloud systemd-logind[853]: Removed session c5067.
2026-06-30T00:45:16.041643-05:00 claude-cloud sudo:   claude : PWD=/home/claude ; USER=root ; COMMAND=/usr/bin/du -hxd1 /var/log
2026-06-30T00:45:16.042914-05:00 claude-cloud sudo: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000)
2026-06-30T00:45:16.054017-05:00 claude-cloud sudo: pam_unix(sudo:session): session closed for user root
2026-06-30T00:45:20.388223-05:00 claude-cloud systemd-logind[853]: Session c5069 logged out. Waiting for processes to exit.
2026-06-30T00:45:20.388954-05:00 claude-cloud systemd-logind[853]: Removed session c5069.
2026-06-30T00:45:24.842055-05:00 claude-cloud systemd-logind[853]: New session c5071 of user claude.
2026-06-30T00:45:24.876154-05:00 claude-cloud systemd-logind[853]: Session c5071 logged out. Waiting for processes to exit.
2026-06-30T00:45:24.877794-05:00 claude-cloud systemd-logind[853]: Removed session c5071.
2026-06-30T00:45:28.878636-05:00 claude-cloud sshd[377778]: Connection closed by authenticating user root 115.248.8.65 port 33332 [preauth]
2026-06-30T00:45:46.042330-05:00 claude-cloud systemd-logind[853]: New session c5072 of user claude.
2026-06-30T00:45:46.072487-05:00 claude-cloud systemd-logind[853]: Session c5072 logged out. Waiting for processes to exit.
2026-06-30T00:45:46.073811-05:00 claude-cloud systemd-logind[853]: Removed session c5072.
2026-06-30T00:45:51.364858-05:00 claude-cloud systemd-logind[853]: Session c5070 logged out. Waiting for processes to exit.
2026-06-30T00:45:51.365345-05:00 claude-cloud systemd-logind[853]: Removed session c5070.
2026-06-30T00:45:51.397585-05:00 claude-cloud sudo:   claude : PWD=/home/claude ; USER=root ; COMMAND=/usr/bin/du -xhd1 /
2026-06-30T00:45:51.404967-05:00 claude-cloud sudo: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000)
2026-06-30T00:46:07.635020-05:00 claude-cloud sshd[378173]: Connection closed by 161.35.47.134 port 52718
2026-06-30T00:46:11.541657-05:00 claude-cloud systemd-logind[853]: New session c5073 of user claude.
2026-06-30T00:46:11.603485-05:00 claude-cloud systemd-logind[853]: Session c5073 logged out. Waiting for processes to exit.
2026-06-30T00:46:11.606239-05:00 claude-cloud systemd-logind[853]: Removed session c5073.
2026-06-30T00:46:15.621434-05:00 claude-cloud sshd[378177]: Connection closed by authenticating user root 27.71.230.31 port 33214 [preauth]
2026-06-30T00:46:21.997846-05:00 claude-cloud systemd-logind[853]: New session c5074 of user claude.
2026-06-30T00:46:22.061849-05:00 claude-cloud systemd-logind[853]: Session c5074 logged out. Waiting for processes to exit.
2026-06-30T00:46:22.065328-05:00 claude-cloud systemd-logind[853]: Removed session c5074.
2026-06-30T00:46:32.424731-05:00 claude-cloud systemd-logind[853]: New session c5075 of user claude.
2026-06-30T00:46:32.445330-05:00 claude-cloud systemd-logind[853]: New session c5076 of user claude.
2026-06-30T00:46:32.754697-05:00 claude-cloud systemd-logind[853]: Session c5076 logged out. Waiting for processes to exit.
2026-06-30T00:46:32.756131-05:00 claude-cloud systemd-logind[853]: Removed session c5076.
2026-06-30T00:46:36.730182-05:00 claude-cloud systemd-logind[853]: Session c5075 logged out. Waiting for processes to exit.
2026-06-30T00:46:36.731759-05:00 claude-cloud systemd-logind[853]: Removed session c5075.
2026-06-30T00:46:42.046027-05:00 claude-cloud sudo: pam_unix(sudo:session): session closed for user root
2026-06-30T00:46:42.067094-05:00 claude-cloud systemd-logind[853]: Session c5068 logged out. Waiting for processes to exit.
2026-06-30T00:46:42.069143-05:00 claude-cloud systemd-logind[853]: Removed session c5068.
2026-06-30T00:46:54.123760-05:00 claude-cloud systemd-logind[853]: New session c5077 of user claude.
2026-06-30T00:46:54.160890-05:00 claude-cloud systemd-logind[853]: Session c5077 logged out. Waiting for processes to exit.
2026-06-30T00:46:54.163184-05:00 claude-cloud systemd-logind[853]: Removed session c5077.
2026-06-30T00:46:57.005354-05:00 claude-cloud systemd-logind[853]: New session c5078 of user claude.
2026-06-30T00:46:57.023693-05:00 claude-cloud systemd-logind[853]: New session c5079 of user claude.
2026-06-30T00:46:57.042518-05:00 claude-cloud systemd-logind[853]: New session c5080 of user claude.
2026-06-30T00:46:57.407364-05:00 claude-cloud systemd-logind[853]: Session c5080 logged out. Waiting for processes to exit.
2026-06-30T00:46:57.409702-05:00 claude-cloud systemd-logind[853]: Removed session c5080.
2026-06-30T00:46:57.518971-05:00 claude-cloud systemd-logind[853]: Session c5079 logged out. Waiting for processes to exit.
2026-06-30T00:46:57.522161-05:00 claude-cloud systemd-logind[853]: Removed session c5079.
2026-06-30T00:46:57.909731-05:00 claude-cloud systemd-logind[853]: Session c5078 logged out. Waiting for processes to exit.
2026-06-30T00:46:57.911654-05:00 claude-cloud systemd-logind[853]: Removed session c5078.
2026-06-30T00:47:04.144480-05:00 claude-cloud systemd-logind[853]: New session c5081 of user claude.
2026-06-30T00:47:04.189700-05:00 claude-cloud systemd-logind[853]: Session c5081 logged out. Waiting for processes to exit.
2026-06-30T00:47:04.192886-05:00 claude-cloud systemd-logind[853]: Removed session c5081.
2026-06-30T00:47:18.747159-05:00 claude-cloud systemd-logind[853]: New session c5082 of user claude.
2026-06-30T00:47:18.761057-05:00 claude-cloud systemd-logind[853]: New session c5083 of user claude.
2026-06-30T00:47:19.505451-05:00 claude-cloud systemd-logind[853]: Session c5082 logged out. Waiting for processes to exit.
2026-06-30T00:47:19.506460-05:00 claude-cloud systemd-logind[853]: Removed session c5082.
2026-06-30T00:47:33.414559-05:00 claude-cloud systemd-logind[853]: Session c5083 logged out. Waiting for processes to exit.
2026-06-30T00:47:33.419556-05:00 claude-cloud systemd-logind[853]: Removed session c5083.
2026-06-30T00:47:52.637702-05:00 claude-cloud systemd-logind[853]: New session c5084 of user claude.
2026-06-30T00:47:52.664693-05:00 claude-cloud systemd-logind[853]: New session c5085 of user claude.
2026-06-30T00:47:52.679542-05:00 claude-cloud systemd-logind[853]: New session c5086 of user claude.
2026-06-30T00:47:52.727077-05:00 claude-cloud systemd-logind[853]: Session c5085 logged out. Waiting for processes to exit.
2026-06-30T00:47:52.728776-05:00 claude-cloud systemd-logind[853]: Removed session c5085.
2026-06-30T00:47:52.753567-05:00 claude-cloud systemd-logind[853]: Session c5084 logged out. Waiting for processes to exit.
2026-06-30T00:47:52.755090-05:00 claude-cloud systemd-logind[853]: Removed session c5084.
2026-06-30T00:47:52.931070-05:00 claude-cloud systemd-logind[853]: Session c5086 logged out. Waiting for processes to exit.
2026-06-30T00:47:52.932853-05:00 claude-cloud systemd-logind[853]: Removed session c5086.
2026-06-30T00:47:53.519721-05:00 claude-cloud systemd-logind[853]: New session c5087 of user claude.
2026-06-30T00:47:53.551314-05:00 claude-cloud systemd-logind[853]: Session c5087 logged out. Waiting for processes to exit.
2026-06-30T00:47:53.553989-05:00 claude-cloud systemd-logind[853]: Removed session c5087.
2026-06-30T00:47:56.782423-05:00 claude-cloud sshd[379068]: Connection closed by authenticating user root 45.198.224.46 port 60148 [preauth]
2026-06-30T00:48:03.388893-05:00 claude-cloud systemd-logind[853]: New session c5088 of user claude.
2026-06-30T00:48:03.416375-05:00 claude-cloud systemd-logind[853]: Session c5088 logged out. Waiting for processes to exit.
2026-06-30T00:48:03.418834-05:00 claude-cloud systemd-logind[853]: Removed session c5088.
2026-06-30T00:48:13.897612-05:00 claude-cloud systemd-logind[853]: New session c5089 of user claude.
2026-06-30T00:48:13.954832-05:00 claude-cloud systemd-logind[853]: New session c5090 of user claude.
2026-06-30T00:48:13.966184-05:00 claude-cloud systemd-logind[853]: New session c5091 of user claude.
2026-06-30T00:48:14.009804-05:00 claude-cloud systemd-logind[853]: Session c5091 logged out. Waiting for processes to exit.
2026-06-30T00:48:14.011797-05:00 claude-cloud systemd-logind[853]: Removed session c5091.
2026-06-30T00:48:14.350890-05:00 claude-cloud systemd-logind[853]: Session c5090 logged out. Waiting for processes to exit.
2026-06-30T00:48:14.352511-05:00 claude-cloud systemd-logind[853]: Removed session c5090.
2026-06-30T00:48:22.140979-05:00 claude-cloud systemd-logind[853]: Session c5089 logged out. Waiting for processes to exit.
2026-06-30T00:48:22.142857-05:00 claude-cloud systemd-logind[853]: Removed session c5089.
2026-06-30T00:48:23.635257-05:00 claude-cloud systemd-logind[853]: New session c5092 of user claude.
2026-06-30T00:48:23.689177-05:00 claude-cloud systemd-logind[853]: Session c5092 logged out. Waiting for processes to exit.
2026-06-30T00:48:23.691028-05:00 claude-cloud systemd-logind[853]: Removed session c5092.
2026-06-30T00:48:51.364155-05:00 claude-cloud systemd-logind[853]: New session c5093 of user claude.
2026-06-30T00:48:51.402141-05:00 claude-cloud systemd-logind[853]: New session c5094 of user claude.
2026-06-30T00:49:02.164666-05:00 claude-cloud systemd-logind[853]: Session c5094 logged out. Waiting for processes to exit.
2026-06-30T00:49:02.165551-05:00 claude-cloud systemd-logind[853]: Removed session c5094.
2026-06-30T00:49:09.521156-05:00 claude-cloud systemd-logind[853]: Session c5093 logged out. Waiting for processes to exit.
2026-06-30T00:49:09.522678-05:00 claude-cloud systemd-logind[853]: Removed session c5093.
2026-06-30T00:49:14.297251-05:00 claude-cloud systemd-logind[853]: New session c5095 of user claude.
2026-06-30T00:49:14.339952-05:00 claude-cloud systemd-logind[853]: Session c5095 logged out. Waiting for processes to exit.
2026-06-30T00:49:14.341883-05:00 claude-cloud systemd-logind[853]: Removed session c5095.
2026-06-30T00:49:16.973521-05:00 claude-cloud sshd[380259]: Connection closed by authenticating user root 115.248.8.65 port 45316 [preauth]
2026-06-30T00:50:02.188320-05:00 claude-cloud systemd-logind[853]: New session c5096 of user claude.
2026-06-30T00:50:02.784141-05:00 claude-cloud systemd-logind[853]: Session c5096 logged out. Waiting for processes to exit.
2026-06-30T00:50:02.785476-05:00 claude-cloud systemd-logind[853]: Removed session c5096.
2026-06-30T00:50:15.243661-05:00 claude-cloud systemd-logind[853]: New session c5097 of user claude.
2026-06-30T00:50:15.295485-05:00 claude-cloud systemd-logind[853]: Session c5097 logged out. Waiting for processes to exit.
2026-06-30T00:50:15.296090-05:00 claude-cloud systemd-logind[853]: Removed session c5097.
2026-06-30T00:50:34.528624-05:00 claude-cloud sshd[380909]: Connection closed by 161.35.47.134 port 42860
2026-06-30T00:50:37.906188-05:00 claude-cloud systemd-logind[853]: New session c5098 of user claude.
2026-06-30T00:50:37.945707-05:00 claude-cloud systemd-logind[853]: Session c5098 logged out. Waiting for processes to exit.
2026-06-30T00:50:37.947058-05:00 claude-cloud systemd-logind[853]: Removed session c5098.
2026-06-30T00:50:50.492214-05:00 claude-cloud systemd-logind[853]: New session c5099 of user claude.
2026-06-30T00:50:50.531715-05:00 claude-cloud systemd-logind[853]: Session c5099 logged out. Waiting for processes to exit.
2026-06-30T00:50:50.533834-05:00 claude-cloud systemd-logind[853]: Removed session c5099.
2026-06-30T00:51:00.996317-05:00 claude-cloud systemd-logind[853]: New session c5100 of user claude.
2026-06-30T00:51:01.338870-05:00 claude-cloud systemd-logind[853]: Session c5100 logged out. Waiting for processes to exit.
2026-06-30T00:51:01.345062-05:00 claude-cloud systemd-logind[853]: Removed session c5100.
2026-06-30T00:51:08.940408-05:00 claude-cloud systemd-logind[853]: New session c5101 of user claude.
2026-06-30T00:51:08.964100-05:00 claude-cloud systemd-logind[853]: Session c5101 logged out. Waiting for processes to exit.
2026-06-30T00:51:08.965945-05:00 claude-cloud systemd-logind[853]: Removed session c5101.
2026-06-30T00:51:12.955884-05:00 claude-cloud systemd-logind[853]: New session c5102 of user claude.
2026-06-30T00:51:12.997251-05:00 claude-cloud systemd-logind[853]: Session c5102 logged out. Waiting for processes to exit.
2026-06-30T00:51:12.998726-05:00 claude-cloud systemd-logind[853]: Removed session c5102.
2026-06-30T00:51:18.646548-05:00 claude-cloud systemd-logind[853]: New session c5103 of user claude.
2026-06-30T00:51:18.683712-05:00 claude-cloud systemd-logind[853]: Session c5103 logged out. Waiting for processes to exit.
2026-06-30T00:51:18.690521-05:00 claude-cloud systemd-logind[853]: Removed session c5103.
2026-06-30T00:51:25.950046-05:00 claude-cloud systemd-logind[853]: New session c5104 of user claude.
2026-06-30T00:51:25.975493-05:00 claude-cloud systemd-logind[853]: New session c5105 of user claude.
2026-06-30T00:51:26.013948-05:00 claude-cloud systemd-logind[853]: Session c5105 logged out. Waiting for processes to exit.
2026-06-30T00:51:26.015511-05:00 claude-cloud systemd-logind[853]: Removed session c5105.
2026-06-30T00:51:26.318598-05:00 claude-cloud systemd-logind[853]: Session c5104 logged out. Waiting for processes to exit.
2026-06-30T00:51:26.320485-05:00 claude-cloud systemd-logind[853]: Removed session c5104.
2026-06-30T00:51:37.813183-05:00 claude-cloud sshd[381234]: Invalid user izabel from 2.57.121.112 port 38386
2026-06-30T00:51:37.839357-05:00 claude-cloud sshd[381234]: Connection closed by invalid user izabel 2.57.121.112 port 38386 [preauth]
2026-06-30T00:51:39.099972-05:00 claude-cloud systemd-logind[853]: New session c5106 of user claude.
2026-06-30T00:51:39.147795-05:00 claude-cloud systemd-logind[853]: Session c5106 logged out. Waiting for processes to exit.
2026-06-30T00:51:39.150696-05:00 claude-cloud systemd-logind[853]: Removed session c5106.
2026-06-30T00:51:57.448663-05:00 claude-cloud systemd-logind[853]: New session c5107 of user claude.
2026-06-30T00:51:58.215727-05:00 claude-cloud systemd-logind[853]: Session c5107 logged out. Waiting for processes to exit.
2026-06-30T00:51:58.218355-05:00 claude-cloud systemd-logind[853]: Removed session c5107.
2026-06-30T00:52:21.529797-05:00 claude-cloud systemd-logind[853]: New session c5108 of user claude.
2026-06-30T00:52:21.548904-05:00 claude-cloud systemd-logind[853]: New session c5109 of user claude.
2026-06-30T00:52:21.571256-05:00 claude-cloud systemd-logind[853]: New session c5110 of user claude.
2026-06-30T00:52:21.756802-05:00 claude-cloud systemd-logind[853]: Session c5108 logged out. Waiting for processes to exit.
2026-06-30T00:52:21.758773-05:00 claude-cloud systemd-logind[853]: Removed session c5108.
2026-06-30T00:52:22.146242-05:00 claude-cloud systemd-logind[853]: Session c5110 logged out. Waiting for processes to exit.
2026-06-30T00:52:22.149253-05:00 claude-cloud systemd-logind[853]: Removed session c5110.
2026-06-30T00:52:22.561998-05:00 claude-cloud systemd-logind[853]: Session c5109 logged out. Waiting for processes to exit.
2026-06-30T00:52:22.562857-05:00 claude-cloud systemd-logind[853]: Removed session c5109.
2026-06-30T00:52:27.506210-05:00 claude-cloud sshd[381539]: Connection closed by authenticating user root 27.71.230.31 port 35228 [preauth]
2026-06-30T00:52:57.696045-05:00 claude-cloud sshd[381748]: Connection closed by authenticating user root 115.248.8.65 port 57756 [preauth]
2026-06-30T00:53:05.027842-05:00 claude-cloud systemd-logind[853]: New session c5111 of user claude.
2026-06-30T00:53:05.496419-05:00 claude-cloud systemd-logind[853]: Session c5111 logged out. Waiting for processes to exit.
2026-06-30T00:53:05.497641-05:00 claude-cloud systemd-logind[853]: Removed session c5111.
2026-06-30T00:53:34.193761-05:00 claude-cloud systemd-logind[853]: New session c5112 of user claude.
2026-06-30T00:53:34.231665-05:00 claude-cloud systemd-logind[853]: Session c5112 logged out. Waiting for processes to exit.
2026-06-30T00:53:34.233516-05:00 claude-cloud systemd-logind[853]: Removed session c5112.
2026-06-30T00:53:48.914810-05:00 claude-cloud sshd[381979]: Invalid user admin from 2.57.121.25 port 23786
2026-06-30T00:53:48.941381-05:00 claude-cloud sshd[381979]: Connection closed by invalid user admin 2.57.121.25 port 23786 [preauth]
2026-06-30T00:55:01.179017-05:00 claude-cloud CRON[382993]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-30T00:55:01.189405-05:00 claude-cloud CRON[382993]: pam_unix(cron:session): session closed for user root
2026-06-30T00:55:06.045824-05:00 claude-cloud systemd-logind[853]: New session c5113 of user claude.
2026-06-30T00:55:06.631068-05:00 claude-cloud systemd-logind[853]: Session c5113 logged out. Waiting for processes to exit.
2026-06-30T00:55:06.632894-05:00 claude-cloud systemd-logind[853]: Removed session c5113.
2026-06-30T00:55:09.098262-05:00 claude-cloud sshd[383081]: Invalid user admin from 2.57.122.150 port 42144
2026-06-30T00:55:09.133380-05:00 claude-cloud sshd[383081]: Connection closed by invalid user admin 2.57.122.150 port 42144 [preauth]
2026-06-30T00:56:24.905618-05:00 claude-cloud sshd[383752]: Connection closed by 144.202.92.17 port 47008 [preauth]
2026-06-30T00:56:43.623948-05:00 claude-cloud sshd[383902]: Connection closed by authenticating user root 115.248.8.65 port 34880 [preauth]
2026-06-30T00:57:12.692846-05:00 claude-cloud sshd[384206]: Connection closed by authenticating user root 45.198.224.46 port 57384 [preauth]
2026-06-30T00:58:08.933379-05:00 claude-cloud sshd[385151]: Connection closed by 203.121.106.56 port 39862 [preauth]
2026-06-30T00:58:17.487440-05:00 claude-cloud sshd[385017]: Connection closed by authenticating user root 27.71.230.31 port 51444 [preauth]
2026-06-30T00:59:15.968188-05:00 claude-cloud systemd-logind[853]: New session c5114 of user claude.
2026-06-30T00:59:16.013906-05:00 claude-cloud systemd-logind[853]: Session c5114 logged out. Waiting for processes to exit.
2026-06-30T00:59:16.015998-05:00 claude-cloud systemd-logind[853]: Removed session c5114.
2026-06-30T01:00:10.391907-05:00 claude-cloud systemd-logind[853]: New session c5115 of user claude.
2026-06-30T01:00:10.984145-05:00 claude-cloud systemd-logind[853]: Session c5115 logged out. Waiting for processes to exit.
2026-06-30T01:00:10.986301-05:00 claude-cloud systemd-logind[853]: Removed session c5115.
2026-06-30T01:00:13.399985-05:00 claude-cloud sshd[386775]: Received disconnect from 23.94.23.226 port 41280:11: disconnected by user [preauth]
2026-06-30T01:00:13.400630-05:00 claude-cloud sshd[386775]: Disconnected from authenticating user root 23.94.23.226 port 41280 [preauth]
2026-06-30T01:00:27.814959-05:00 claude-cloud sshd[386835]: Connection closed by authenticating user root 115.248.8.65 port 34682 [preauth]
2026-06-30T01:02:00.852009-05:00 claude-cloud sshd[388631]: error: kex_exchange_identification: read: Connection reset by peer
2026-06-30T01:02:00.855463-05:00 claude-cloud sshd[388631]: Connection reset by 135.232.216.67 port 61440
2026-06-30T01:03:04.725487-05:00 claude-cloud systemd-logind[853]: New session c5116 of user claude.
2026-06-30T01:03:04.743906-05:00 claude-cloud systemd-logind[853]: New session c5117 of user claude.
2026-06-30T01:03:04.757225-05:00 claude-cloud systemd-logind[853]: New session c5118 of user claude.
2026-06-30T01:03:04.772371-05:00 claude-cloud systemd-logind[853]: New session c5119 of user claude.
2026-06-30T01:03:04.930627-05:00 claude-cloud systemd-logind[853]: Session c5116 logged out. Waiting for processes to exit.
2026-06-30T01:03:04.936542-05:00 claude-cloud systemd-logind[853]: Removed session c5116.
2026-06-30T01:03:05.095642-05:00 claude-cloud systemd-logind[853]: Session c5119 logged out. Waiting for processes to exit.
2026-06-30T01:03:05.097592-05:00 claude-cloud systemd-logind[853]: Removed session c5119.
2026-06-30T01:03:05.283970-05:00 claude-cloud systemd-logind[853]: Session c5118 logged out. Waiting for processes to exit.
2026-06-30T01:03:05.286722-05:00 claude-cloud systemd-logind[853]: Removed session c5118.
2026-06-30T01:03:42.339020-05:00 claude-cloud systemd-logind[853]: New session c5120 of user claude.
2026-06-30T01:03:42.354564-05:00 claude-cloud systemd-logind[853]: New session c5121 of user claude.
2026-06-30T01:03:42.362447-05:00 claude-cloud systemd-logind[853]: New session c5122 of user claude.
2026-06-30T01:03:42.367485-05:00 claude-cloud systemd-logind[853]: New session c5123 of user claude.
2026-06-30T01:03:42.394190-05:00 claude-cloud systemd-logind[853]: Session c5120 logged out. Waiting for processes to exit.
2026-06-30T01:03:42.397331-05:00 claude-cloud systemd-logind[853]: Removed session c5120.
2026-06-30T01:03:42.528677-05:00 claude-cloud systemd-logind[853]: Session c5123 logged out. Waiting for processes to exit.
2026-06-30T01:03:42.530186-05:00 claude-cloud systemd-logind[853]: Removed session c5123.
2026-06-30T01:03:42.706838-05:00 claude-cloud systemd-logind[853]: Session c5121 logged out. Waiting for processes to exit.
2026-06-30T01:03:42.708897-05:00 claude-cloud systemd-logind[853]: Removed session c5121.
2026-06-30T01:03:42.869765-05:00 claude-cloud systemd-logind[853]: Session c5122 logged out. Waiting for processes to exit.
2026-06-30T01:03:42.871987-05:00 claude-cloud systemd-logind[853]: Removed session c5122.
2026-06-30T01:03:52.095880-05:00 claude-cloud sshd[390381]: Received disconnect from 192.250.227.24 port 38084:11: disconnected by user [preauth]
2026-06-30T01:03:52.096339-05:00 claude-cloud sshd[390381]: Disconnected from authenticating user root 192.250.227.24 port 38084 [preauth]
2026-06-30T01:03:55.969151-05:00 claude-cloud sshd[390395]: Connection closed by 111.70.1.128 port 41680
2026-06-30T01:04:06.767826-05:00 claude-cloud sshd[390407]: Connection closed by authenticating user root 115.248.8.65 port 35554 [preauth]
2026-06-30T01:04:26.802057-05:00 claude-cloud systemd-logind[853]: New session c5124 of user claude.
2026-06-30T01:04:26.858635-05:00 claude-cloud systemd-logind[853]: Session c5124 logged out. Waiting for processes to exit.
2026-06-30T01:04:26.860636-05:00 claude-cloud systemd-logind[853]: Removed session c5124.
2026-06-30T01:04:28.322935-05:00 claude-cloud sshd[390383]: Connection closed by authenticating user root 27.71.230.31 port 60696 [preauth]
2026-06-30T01:04:48.103765-05:00 claude-cloud systemd-logind[853]: New session c5125 of user claude.
2026-06-30T01:04:48.121399-05:00 claude-cloud systemd-logind[853]: New session c5126 of user claude.
2026-06-30T01:04:48.622962-05:00 claude-cloud systemd-logind[853]: New session c5127 of user claude.
2026-06-30T01:04:48.646692-05:00 claude-cloud systemd-logind[853]: Session c5126 logged out. Waiting for processes to exit.
2026-06-30T01:04:48.647968-05:00 claude-cloud systemd-logind[853]: Removed session c5126.
2026-06-30T01:04:48.706804-05:00 claude-cloud systemd-logind[853]: Session c5127 logged out. Waiting for processes to exit.
2026-06-30T01:04:48.708135-05:00 claude-cloud systemd-logind[853]: Removed session c5127.
2026-06-30T01:04:49.660141-05:00 claude-cloud systemd-logind[853]: Session c5125 logged out. Waiting for processes to exit.
2026-06-30T01:04:49.664413-05:00 claude-cloud systemd-logind[853]: Removed session c5125.
2026-06-30T01:05:01.206037-05:00 claude-cloud CRON[390627]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-30T01:05:01.211894-05:00 claude-cloud CRON[390627]: pam_unix(cron:session): session closed for user root
2026-06-30T01:05:14.354991-05:00 claude-cloud systemd-logind[853]: New session c5128 of user claude.
2026-06-30T01:05:14.868039-05:00 claude-cloud systemd-logind[853]: Session c5128 logged out. Waiting for processes to exit.
2026-06-30T01:05:14.872470-05:00 claude-cloud systemd-logind[853]: Removed session c5128.
2026-06-30T01:05:54.340463-05:00 claude-cloud systemd-logind[853]: Session c5117 logged out. Waiting for processes to exit.
2026-06-30T01:05:54.342074-05:00 claude-cloud systemd-logind[853]: Removed session c5117.
2026-06-30T01:06:17.636007-05:00 claude-cloud sshd[390874]: Invalid user admin from 2.57.122.150 port 45166
2026-06-30T01:06:17.664800-05:00 claude-cloud sshd[390874]: Connection closed by invalid user admin 2.57.122.150 port 45166 [preauth]
2026-06-30T01:06:32.650132-05:00 claude-cloud sshd[390908]: Connection closed by authenticating user root 45.198.224.46 port 49294 [preauth]
2026-06-30T01:07:43.642522-05:00 claude-cloud systemd-logind[853]: New session c5129 of user claude.
2026-06-30T01:07:45.865438-05:00 claude-cloud systemd-logind[853]: Session c5129 logged out. Waiting for processes to exit.
2026-06-30T01:07:45.868670-05:00 claude-cloud systemd-logind[853]: Removed session c5129.
2026-06-30T01:07:47.833938-05:00 claude-cloud sshd[391216]: Connection closed by 161.35.47.134 port 40084
2026-06-30T01:07:54.179779-05:00 claude-cloud sshd[391220]: Connection closed by authenticating user root 115.248.8.65 port 51546 [preauth]
2026-06-30T01:07:54.370567-05:00 claude-cloud systemd-logind[853]: New session c5130 of user claude.
2026-06-30T01:07:55.430675-05:00 claude-cloud systemd-logind[853]: Session c5130 logged out. Waiting for processes to exit.
2026-06-30T01:07:55.431430-05:00 claude-cloud systemd-logind[853]: Removed session c5130.
2026-06-30T01:08:04.343547-05:00 claude-cloud systemd-logind[853]: New session c5131 of user claude.
2026-06-30T01:08:06.934052-05:00 claude-cloud systemd-logind[853]: Session c5131 logged out. Waiting for processes to exit.
2026-06-30T01:08:06.935724-05:00 claude-cloud systemd-logind[853]: Removed session c5131.
2026-06-30T01:08:36.424909-05:00 claude-cloud systemd-logind[853]: New session c5132 of user claude.
2026-06-30T01:08:36.526418-05:00 claude-cloud systemd-logind[853]: Session c5132 logged out. Waiting for processes to exit.
2026-06-30T01:08:36.527873-05:00 claude-cloud systemd-logind[853]: Removed session c5132.
2026-06-30T01:10:18.144041-05:00 claude-cloud systemd-logind[853]: New session c5133 of user claude.
2026-06-30T01:10:18.572770-05:00 claude-cloud systemd-logind[853]: Session c5133 logged out. Waiting for processes to exit.
2026-06-30T01:10:18.574154-05:00 claude-cloud systemd-logind[853]: Removed session c5133.
2026-06-30T01:10:19.125729-05:00 claude-cloud sshd[391802]: Connection closed by authenticating user root 27.71.230.31 port 46412 [preauth]
2026-06-30T01:11:40.253024-05:00 claude-cloud sshd[392151]: Connection closed by authenticating user root 115.248.8.65 port 54990 [preauth]
2026-06-30T01:14:37.038548-05:00 claude-cloud sshd[392698]: Invalid user wangxin5 from 185.242.3.195 port 37520
2026-06-30T01:14:37.047117-05:00 claude-cloud sshd[392698]: Connection closed by invalid user wangxin5 185.242.3.195 port 37520 [preauth]
2026-06-30T01:15:01.224764-05:00 claude-cloud CRON[392761]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-30T01:15:01.231638-05:00 claude-cloud CRON[392761]: pam_unix(cron:session): session closed for user root
2026-06-30T01:15:02.950842-05:00 claude-cloud sshd[392774]: Invalid user admin from 193.46.255.86 port 15788
2026-06-30T01:15:02.975983-05:00 claude-cloud sshd[392774]: Connection closed by invalid user admin 193.46.255.86 port 15788 [preauth]
2026-06-30T01:15:21.108232-05:00 claude-cloud sshd[392815]: Connection closed by authenticating user root 115.248.8.65 port 54972 [preauth]
2026-06-30T01:15:21.955826-05:00 claude-cloud systemd-logind[853]: New session c5134 of user claude.
2026-06-30T01:15:22.265756-05:00 claude-cloud systemd-logind[853]: Session c5134 logged out. Waiting for processes to exit.
2026-06-30T01:15:22.267791-05:00 claude-cloud systemd-logind[853]: Removed session c5134.
2026-06-30T01:15:55.083956-05:00 claude-cloud sshd[392949]: Invalid user ubuntu from 45.198.224.46 port 46802
2026-06-30T01:15:55.807915-05:00 claude-cloud sshd[392949]: Connection closed by invalid user ubuntu 45.198.224.46 port 46802 [preauth]
2026-06-30T01:16:58.853091-05:00 claude-cloud sshd[392902]: Connection closed by authenticating user root 27.71.230.31 port 50738 [preauth]
2026-06-30T01:17:01.239745-05:00 claude-cloud CRON[393137]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-30T01:17:01.247526-05:00 claude-cloud CRON[393137]: pam_unix(cron:session): session closed for user root
2026-06-30T01:18:26.343187-05:00 claude-cloud sshd[393516]: Invalid user admin from 2.57.122.150 port 48194
2026-06-30T01:18:26.369051-05:00 claude-cloud sshd[393516]: Connection closed by invalid user admin 2.57.122.150 port 48194 [preauth]
2026-06-30T01:19:04.352226-05:00 claude-cloud sshd[393605]: Connection closed by authenticating user root 115.248.8.65 port 55878 [preauth]
2026-06-30T01:20:25.559191-05:00 claude-cloud systemd-logind[853]: New session c5135 of user claude.
2026-06-30T01:20:25.854562-05:00 claude-cloud systemd-logind[853]: Session c5135 logged out. Waiting for processes to exit.
2026-06-30T01:20:25.856725-05:00 claude-cloud systemd-logind[853]: Removed session c5135.
2026-06-30T01:21:45.246933-05:00 claude-cloud sshd[394071]: Connection closed by authenticating user root 27.71.230.31 port 54192 [preauth]
2026-06-30T01:22:53.058675-05:00 claude-cloud sshd[394299]: Connection closed by authenticating user root 115.248.8.65 port 45732 [preauth]
2026-06-30T01:24:58.177484-05:00 claude-cloud sshd[394686]: Invalid user test3 from 45.198.224.46 port 33194
2026-06-30T01:24:58.785378-05:00 claude-cloud sshd[394686]: Connection closed by invalid user test3 45.198.224.46 port 33194 [preauth]
2026-06-30T01:25:01.260056-05:00 claude-cloud CRON[394701]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-30T01:25:01.265323-05:00 claude-cloud CRON[394701]: pam_unix(cron:session): session closed for user root
2026-06-30T01:25:29.201581-05:00 claude-cloud systemd-logind[853]: New session c5136 of user claude.
2026-06-30T01:25:29.527576-05:00 claude-cloud systemd-logind[853]: Session c5136 logged out. Waiting for processes to exit.
2026-06-30T01:25:29.529566-05:00 claude-cloud systemd-logind[853]: Removed session c5136.
2026-06-30T01:26:32.034491-05:00 claude-cloud sshd[394961]: Connection closed by authenticating user root 115.248.8.65 port 38280 [preauth]
2026-06-30T01:27:39.622864-05:00 claude-cloud sshd[395138]: Connection closed by authenticating user root 27.71.230.31 port 36092 [preauth]
2026-06-30T01:29:49.826706-05:00 claude-cloud sshd[395633]: Connection closed by 161.35.47.134 port 40290
2026-06-30T01:30:17.888429-05:00 claude-cloud sshd[395688]: Connection closed by authenticating user root 115.248.8.65 port 40132 [preauth]
2026-06-30T01:30:32.803624-05:00 claude-cloud systemd-logind[853]: New session c5137 of user claude.
2026-06-30T01:30:33.144551-05:00 claude-cloud systemd-logind[853]: Session c5137 logged out. Waiting for processes to exit.
2026-06-30T01:30:33.146914-05:00 claude-cloud systemd-logind[853]: Removed session c5137.
2026-06-30T01:32:49.980902-05:00 claude-cloud sshd[396173]: Received disconnect from 80.211.131.36 port 43760:11: Bye Bye [preauth]
2026-06-30T01:32:49.981802-05:00 claude-cloud sshd[396173]: Disconnected from authenticating user root 80.211.131.36 port 43760 [preauth]
2026-06-30T01:33:34.905570-05:00 claude-cloud sshd[396265]: Connection closed by authenticating user root 27.71.230.31 port 44144 [preauth]
2026-06-30T01:33:57.254896-05:00 claude-cloud sshd[396351]: userauth_pubkey: signature algorithm ssh-dss not in PubkeyAcceptedAlgorithms [preauth]
2026-06-30T01:33:57.612796-05:00 claude-cloud sshd[396351]: Received disconnect from 86.111.176.100 port 55018:11: disconnected by user [preauth]
2026-06-30T01:33:57.612953-05:00 claude-cloud sshd[396351]: Disconnected from authenticating user root 86.111.176.100 port 55018 [preauth]
2026-06-30T01:34:05.362241-05:00 claude-cloud sshd[396377]: Connection closed by authenticating user root 115.248.8.65 port 35650 [preauth]
2026-06-30T01:34:06.973310-05:00 claude-cloud sshd[396385]: Connection closed by authenticating user root 45.198.224.46 port 44550 [preauth]
2026-06-30T01:35:01.275908-05:00 claude-cloud CRON[396566]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-30T01:35:01.283217-05:00 claude-cloud CRON[396566]: pam_unix(cron:session): session closed for user root
2026-06-30T01:35:18.468628-05:00 claude-cloud sshd[396619]: Connection closed by 161.35.47.134 port 52470
2026-06-30T01:35:36.377222-05:00 claude-cloud systemd-logind[853]: New session c5138 of user claude.
2026-06-30T01:35:36.718588-05:00 claude-cloud systemd-logind[853]: Session c5138 logged out. Waiting for processes to exit.
2026-06-30T01:35:36.720070-05:00 claude-cloud systemd-logind[853]: Removed session c5138.
2026-06-30T01:36:03.231862-05:00 claude-cloud sshd[396752]: Received disconnect from 206.189.51.81 port 54512:11: Bye Bye [preauth]
2026-06-30T01:36:03.235380-05:00 claude-cloud sshd[396752]: Disconnected from authenticating user root 206.189.51.81 port 54512 [preauth]
2026-06-30T01:37:43.011773-05:00 claude-cloud sshd[397038]: Connection closed by authenticating user root 115.248.8.65 port 38580 [preauth]
2026-06-30T01:39:42.466208-05:00 claude-cloud sshd[397474]: Received disconnect from 80.211.131.36 port 40268:11: Bye Bye [preauth]
2026-06-30T01:39:42.467127-05:00 claude-cloud sshd[397474]: Disconnected from authenticating user root 80.211.131.36 port 40268 [preauth]
2026-06-30T01:39:57.052399-05:00 claude-cloud sshd[397391]: Connection closed by authenticating user root 27.71.230.31 port 46238 [preauth]
2026-06-30T01:40:40.044369-05:00 claude-cloud systemd-logind[853]: New session c5139 of user claude.
2026-06-30T01:40:40.335471-05:00 claude-cloud systemd-logind[853]: Session c5139 logged out. Waiting for processes to exit.
2026-06-30T01:40:40.337596-05:00 claude-cloud systemd-logind[853]: Removed session c5139.
2026-06-30T01:41:26.640422-05:00 claude-cloud sshd[397799]: Connection closed by authenticating user root 115.248.8.65 port 54366 [preauth]
2026-06-30T01:41:38.412518-05:00 claude-cloud sshd[397847]: Received disconnect from 80.211.131.36 port 44184:11: Bye Bye [preauth]
2026-06-30T01:41:38.412919-05:00 claude-cloud sshd[397847]: Disconnected from authenticating user root 80.211.131.36 port 44184 [preauth]
2026-06-30T01:41:53.051441-05:00 claude-cloud sshd[397886]: Received disconnect from 206.189.51.81 port 49630:11: Bye Bye [preauth]
2026-06-30T01:41:53.052048-05:00 claude-cloud sshd[397886]: Disconnected from authenticating user root 206.189.51.81 port 49630 [preauth]
2026-06-30T01:43:29.939515-05:00 claude-cloud sshd[398158]: Received disconnect from 80.211.131.36 port 60372:11: Bye Bye [preauth]
2026-06-30T01:43:29.940157-05:00 claude-cloud sshd[398158]: Disconnected from authenticating user root 80.211.131.36 port 60372 [preauth]
2026-06-30T01:43:43.015316-05:00 claude-cloud sshd[398206]: Connection closed by authenticating user root 45.198.224.46 port 46276 [preauth]
2026-06-30T01:45:01.294681-05:00 claude-cloud CRON[398444]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-30T01:45:01.300146-05:00 claude-cloud CRON[398444]: pam_unix(cron:session): session closed for user root
2026-06-30T01:45:05.904415-05:00 claude-cloud sshd[398443]: Connection closed by authenticating user root 115.248.8.65 port 40338 [preauth]
2026-06-30T01:45:25.719009-05:00 claude-cloud sshd[398499]: Received disconnect from 80.211.131.36 port 48754:11: Bye Bye [preauth]
2026-06-30T01:45:25.719444-05:00 claude-cloud sshd[398499]: Disconnected from authenticating user root 80.211.131.36 port 48754 [preauth]
2026-06-30T01:45:36.953878-05:00 claude-cloud sshd[398539]: Received disconnect from 206.189.51.81 port 35644:11: Bye Bye [preauth]
2026-06-30T01:45:36.954142-05:00 claude-cloud sshd[398539]: Disconnected from authenticating user root 206.189.51.81 port 35644 [preauth]
2026-06-30T01:45:43.521160-05:00 claude-cloud systemd-logind[853]: New session c5140 of user claude.
2026-06-30T01:45:43.791447-05:00 claude-cloud systemd-logind[853]: Session c5140 logged out. Waiting for processes to exit.
2026-06-30T01:45:43.793261-05:00 claude-cloud systemd-logind[853]: Removed session c5140.
2026-06-30T01:46:10.541456-05:00 claude-cloud sshd[398622]: Connection closed by authenticating user root 27.71.230.31 port 51686 [preauth]
2026-06-30T01:47:19.341550-05:00 claude-cloud sshd[398854]: Received disconnect from 80.211.131.36 port 51542:11: Bye Bye [preauth]
2026-06-30T01:47:19.342191-05:00 claude-cloud sshd[398854]: Disconnected from authenticating user root 80.211.131.36 port 51542 [preauth]
2026-06-30T01:48:50.392109-05:00 claude-cloud sshd[399188]: Connection closed by authenticating user root 115.248.8.65 port 57636 [preauth]
2026-06-30T01:49:06.486905-05:00 claude-cloud sshd[399245]: Received disconnect from 80.211.131.36 port 51408:11: Bye Bye [preauth]
2026-06-30T01:49:06.487205-05:00 claude-cloud sshd[399245]: Disconnected from authenticating user root 80.211.131.36 port 51408 [preauth]
2026-06-30T01:50:46.982845-05:00 claude-cloud systemd-logind[853]: New session c5141 of user claude.
2026-06-30T01:50:47.274890-05:00 claude-cloud systemd-logind[853]: Session c5141 logged out. Waiting for processes to exit.
2026-06-30T01:50:47.278192-05:00 claude-cloud systemd-logind[853]: Removed session c5141.
2026-06-30T01:50:54.479483-05:00 claude-cloud sshd[399588]: Received disconnect from 80.211.131.36 port 59104:11: Bye Bye [preauth]
2026-06-30T01:50:54.479853-05:00 claude-cloud sshd[399588]: Disconnected from authenticating user root 80.211.131.36 port 59104 [preauth]
2026-06-30T01:51:47.574910-05:00 claude-cloud sshd[399737]: Invalid user admin from 2.57.121.25 port 45330
2026-06-30T01:51:47.601893-05:00 claude-cloud sshd[399737]: Connection closed by invalid user admin 2.57.121.25 port 45330 [preauth]
2026-06-30T01:52:32.655033-05:00 claude-cloud sshd[399846]: Connection closed by authenticating user root 115.248.8.65 port 54284 [preauth]
2026-06-30T01:52:46.179296-05:00 claude-cloud sshd[399906]: Received disconnect from 80.211.131.36 port 40246:11: Bye Bye [preauth]
2026-06-30T01:52:46.179636-05:00 claude-cloud sshd[399906]: Disconnected from authenticating user root 80.211.131.36 port 40246 [preauth]
2026-06-30T01:53:18.838313-05:00 claude-cloud sshd[400013]: Invalid user ubuntu from 45.198.224.46 port 37974
2026-06-30T01:53:19.677124-05:00 claude-cloud sshd[400013]: Connection closed by invalid user ubuntu 45.198.224.46 port 37974 [preauth]
2026-06-30T01:53:19.864600-05:00 claude-cloud sshd[400025]: Connection closed by 195.123.210.209 port 57036 [preauth]
2026-06-30T01:53:29.582354-05:00 claude-cloud sshd[400062]: Connection closed by 31.13.213.232 port 51134 [preauth]
2026-06-30T01:53:30.512730-05:00 claude-cloud sshd[400064]: Received disconnect from 203.190.153.90 port 49982:11: Bye Bye [preauth]
2026-06-30T01:53:30.512987-05:00 claude-cloud sshd[400064]: Disconnected from authenticating user root 203.190.153.90 port 49982 [preauth]
2026-06-30T01:53:44.965134-05:00 claude-cloud sshd[400098]: Connection closed by authenticating user root 167.233.84.171 port 60288 [preauth]
2026-06-30T01:54:36.366212-05:00 claude-cloud sshd[400251]: Received disconnect from 80.211.131.36 port 41536:11: Bye Bye [preauth]
2026-06-30T01:54:36.367131-05:00 claude-cloud sshd[400251]: Disconnected from authenticating user root 80.211.131.36 port 41536 [preauth]
2026-06-30T01:54:40.739343-05:00 claude-cloud sshd[400086]: Connection closed by authenticating user root 27.71.230.31 port 50952 [preauth]
2026-06-30T01:55:01.314185-05:00 claude-cloud CRON[400340]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-30T01:55:01.319794-05:00 claude-cloud CRON[400340]: pam_unix(cron:session): session closed for user root
2026-06-30T01:55:50.673713-05:00 claude-cloud systemd-logind[853]: New session c5142 of user claude.
2026-06-30T01:55:50.958997-05:00 claude-cloud systemd-logind[853]: Session c5142 logged out. Waiting for processes to exit.
2026-06-30T01:55:50.961374-05:00 claude-cloud systemd-logind[853]: Removed session c5142.
2026-06-30T01:56:06.267989-05:00 claude-cloud sshd[400538]: Connection closed by authenticating user root 115.248.8.65 port 33092 [preauth]
2026-06-30T01:56:24.171563-05:00 claude-cloud sshd[400591]: Received disconnect from 80.211.131.36 port 48974:11: Bye Bye [preauth]
2026-06-30T01:56:24.171910-05:00 claude-cloud sshd[400591]: Disconnected from authenticating user root 80.211.131.36 port 48974 [preauth]
2026-06-30T01:56:26.310887-05:00 claude-cloud sshd[400595]: Received disconnect from 206.189.51.81 port 33148:11: Bye Bye [preauth]
2026-06-30T01:56:26.311137-05:00 claude-cloud sshd[400595]: Disconnected from authenticating user root 206.189.51.81 port 33148 [preauth]
2026-06-30T01:56:36.747200-05:00 claude-cloud sshd[400635]: Received disconnect from 38.242.209.160 port 42210:11: Bye Bye [preauth]
2026-06-30T01:56:36.747856-05:00 claude-cloud sshd[400635]: Disconnected from authenticating user root 38.242.209.160 port 42210 [preauth]
2026-06-30T01:56:51.679233-05:00 claude-cloud sshd[400689]: Received disconnect from 103.143.238.100 port 33514:11: Bye Bye [preauth]
2026-06-30T01:56:51.679693-05:00 claude-cloud sshd[400689]: Disconnected from authenticating user root 103.143.238.100 port 33514 [preauth]
2026-06-30T01:58:17.479561-05:00 claude-cloud sshd[400934]: Received disconnect from 80.211.131.36 port 37706:11: Bye Bye [preauth]
2026-06-30T01:58:17.480133-05:00 claude-cloud sshd[400934]: Disconnected from authenticating user root 80.211.131.36 port 37706 [preauth]
2026-06-30T01:59:51.219322-05:00 claude-cloud sshd[401265]: Connection closed by authenticating user root 115.248.8.65 port 39018 [preauth]
2026-06-30T01:59:53.681542-05:00 claude-cloud sshd[401172]: Connection closed by authenticating user root 27.71.230.31 port 45432 [preauth]
2026-06-30T02:00:04.792615-05:00 claude-cloud sshd[401341]: userauth_pubkey: signature algorithm ssh-dss not in PubkeyAcceptedAlgorithms [preauth]
2026-06-30T02:00:04.960602-05:00 claude-cloud sshd[401341]: Received disconnect from 23.94.104.251 port 43830:11: disconnected by user [preauth]
2026-06-30T02:00:04.960906-05:00 claude-cloud sshd[401341]: Disconnected from authenticating user root 23.94.104.251 port 43830 [preauth]
2026-06-30T02:00:09.123730-05:00 claude-cloud sshd[401356]: Received disconnect from 206.189.51.81 port 59418:11: Bye Bye [preauth]
2026-06-30T02:00:09.124124-05:00 claude-cloud sshd[401356]: Disconnected from authenticating user root 206.189.51.81 port 59418 [preauth]
2026-06-30T02:00:11.204434-05:00 claude-cloud sshd[401368]: Received disconnect from 80.211.131.36 port 58174:11: Bye Bye [preauth]
2026-06-30T02:00:11.204665-05:00 claude-cloud sshd[401368]: Disconnected from authenticating user root 80.211.131.36 port 58174 [preauth]
2026-06-30T02:00:54.161335-05:00 claude-cloud systemd-logind[853]: New session c5143 of user claude.
2026-06-30T02:00:54.459851-05:00 claude-cloud systemd-logind[853]: Session c5143 logged out. Waiting for processes to exit.
2026-06-30T02:00:54.462419-05:00 claude-cloud systemd-logind[853]: Removed session c5143.
2026-06-30T02:01:00.803413-05:00 claude-cloud sshd[401522]: Connection closed by 91.92.40.231 port 46146
2026-06-30T02:02:00.921391-05:00 claude-cloud sshd[401710]: Received disconnect from 80.211.131.36 port 48204:11: Bye Bye [preauth]
2026-06-30T02:02:00.921619-05:00 claude-cloud sshd[401710]: Disconnected from authenticating user root 80.211.131.36 port 48204 [preauth]
2026-06-30T02:02:26.866153-05:00 claude-cloud sshd[401733]: error: kex_exchange_identification: read: Connection reset by peer
2026-06-30T02:02:26.866615-05:00 claude-cloud sshd[401733]: Connection reset by 222.108.109.37 port 41634
2026-06-30T02:03:03.874445-05:00 claude-cloud sshd[401878]: Invalid user oracle from 45.198.224.46 port 48908
2026-06-30T02:03:04.547539-05:00 claude-cloud sshd[401878]: Connection closed by invalid user oracle 45.198.224.46 port 48908 [preauth]
2026-06-30T02:03:39.016876-05:00 claude-cloud sshd[401971]: Connection closed by authenticating user root 115.248.8.65 port 41492 [preauth]
2026-06-30T02:03:42.590679-05:00 claude-cloud sshd[401997]: Received disconnect from 206.189.51.81 port 52768:11: Bye Bye [preauth]
2026-06-30T02:03:42.591190-05:00 claude-cloud sshd[401997]: Disconnected from authenticating user root 206.189.51.81 port 52768 [preauth]
2026-06-30T02:03:51.044261-05:00 claude-cloud sshd[402031]: Received disconnect from 80.211.131.36 port 32792:11: Bye Bye [preauth]
2026-06-30T02:03:51.044855-05:00 claude-cloud sshd[402031]: Disconnected from authenticating user root 80.211.131.36 port 32792 [preauth]
2026-06-30T02:04:16.271600-05:00 claude-cloud sshd[402121]: Connection closed by authenticating user root 91.92.40.231 port 56276 [preauth]
2026-06-30T02:05:01.330405-05:00 claude-cloud CRON[402252]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-30T02:05:01.336074-05:00 claude-cloud CRON[402252]: pam_unix(cron:session): session closed for user root
2026-06-30T02:05:57.855065-05:00 claude-cloud systemd-logind[853]: New session c5144 of user claude.
2026-06-30T02:05:58.141579-05:00 claude-cloud systemd-logind[853]: Session c5144 logged out. Waiting for processes to exit.
2026-06-30T02:05:58.144091-05:00 claude-cloud systemd-logind[853]: Removed session c5144.
2026-06-30T02:06:12.440190-05:00 claude-cloud sshd[402467]: Received disconnect from 38.242.209.160 port 41994:11: Bye Bye [preauth]
2026-06-30T02:06:12.440817-05:00 claude-cloud sshd[402467]: Disconnected from authenticating user root 38.242.209.160 port 41994 [preauth]
2026-06-30T02:06:22.630749-05:00 claude-cloud sshd[402514]: Connection closed by authenticating user root 91.92.40.231 port 57928 [preauth]
2026-06-30T02:06:30.199567-05:00 claude-cloud sshd[402552]: Connection reset by authenticating user root 45.148.10.152 port 57596 [preauth]
2026-06-30T02:06:30.824134-05:00 claude-cloud sshd[402554]: Invalid user user from 193.46.255.86 port 48714
2026-06-30T02:06:30.849248-05:00 claude-cloud sshd[402554]: Connection closed by invalid user user 193.46.255.86 port 48714 [preauth]
2026-06-30T02:06:40.807222-05:00 claude-cloud sshd[402576]: Received disconnect from 103.143.238.100 port 58564:11: Bye Bye [preauth]
2026-06-30T02:06:40.807672-05:00 claude-cloud sshd[402576]: Disconnected from authenticating user root 103.143.238.100 port 58564 [preauth]
2026-06-30T02:06:47.718562-05:00 claude-cloud sshd[402592]: Received disconnect from 203.190.153.90 port 39580:11: Bye Bye [preauth]
2026-06-30T02:06:47.719267-05:00 claude-cloud sshd[402592]: Disconnected from authenticating user root 203.190.153.90 port 39580 [preauth]
2026-06-30T02:07:13.144382-05:00 claude-cloud sshd[402660]: banner exchange: Connection from 164.92.75.217 port 43056: invalid format
2026-06-30T02:07:13.580337-05:00 claude-cloud sshd[402661]: banner exchange: Connection from 164.92.75.217 port 43068: invalid format
2026-06-30T02:07:19.980637-05:00 claude-cloud sshd[402669]: Connection closed by authenticating user root 115.248.8.65 port 46764 [preauth]
2026-06-30T02:08:38.398357-05:00 claude-cloud sshd[402933]: Connection closed by authenticating user root 91.92.40.231 port 44334 [preauth]
2026-06-30T02:08:45.876647-05:00 claude-cloud sshd[402952]: Received disconnect from 38.242.209.160 port 55134:11: Bye Bye [preauth]
2026-06-30T02:08:45.877020-05:00 claude-cloud sshd[402952]: Disconnected from authenticating user root 38.242.209.160 port 55134 [preauth]
2026-06-30T02:08:48.170454-05:00 claude-cloud sshd[402958]: Received disconnect from 103.143.238.100 port 40648:11: Bye Bye [preauth]
2026-06-30T02:08:48.170956-05:00 claude-cloud sshd[402958]: Disconnected from authenticating user root 103.143.238.100 port 40648 [preauth]
2026-06-30T02:09:07.605883-05:00 claude-cloud sshd[403022]: Received disconnect from 203.190.153.90 port 44198:11: Bye Bye [preauth]
2026-06-30T02:09:07.606217-05:00 claude-cloud sshd[403022]: Disconnected from authenticating user root 203.190.153.90 port 44198 [preauth]
2026-06-30T02:09:19.012766-05:00 claude-cloud sshd[403046]: Invalid user jaylah from 2.57.121.112 port 58090
2026-06-30T02:09:19.038240-05:00 claude-cloud sshd[403046]: Connection closed by invalid user jaylah 2.57.121.112 port 58090 [preauth]
2026-06-30T02:10:53.619752-05:00 claude-cloud sshd[403376]: Connection closed by authenticating user root 91.92.40.231 port 57128 [preauth]
2026-06-30T02:10:58.041925-05:00 claude-cloud sshd[403422]: Received disconnect from 206.189.51.81 port 55240:11: Bye Bye [preauth]
2026-06-30T02:10:58.042669-05:00 claude-cloud sshd[403422]: Disconnected from authenticating user root 206.189.51.81 port 55240 [preauth]
2026-06-30T02:10:58.766139-05:00 claude-cloud sshd[403420]: Received disconnect from 103.143.238.100 port 50942:11: Bye Bye [preauth]
2026-06-30T02:10:58.768580-05:00 claude-cloud sshd[403420]: Disconnected from authenticating user root 103.143.238.100 port 50942 [preauth]
2026-06-30T02:11:01.327118-05:00 claude-cloud systemd-logind[853]: New session c5145 of user claude.
2026-06-30T02:11:01.609058-05:00 claude-cloud systemd-logind[853]: Session c5145 logged out. Waiting for processes to exit.
2026-06-30T02:11:01.610449-05:00 claude-cloud systemd-logind[853]: Removed session c5145.
2026-06-30T02:11:08.345690-05:00 claude-cloud sshd[403454]: Connection closed by authenticating user root 115.248.8.65 port 39328 [preauth]
2026-06-30T02:11:17.652602-05:00 claude-cloud sshd[403487]: Received disconnect from 38.242.209.160 port 40360:11: Bye Bye [preauth]
2026-06-30T02:11:17.653180-05:00 claude-cloud sshd[403487]: Disconnected from authenticating user root 38.242.209.160 port 40360 [preauth]
2026-06-30T02:11:30.586748-05:00 claude-cloud sshd[403529]: Received disconnect from 203.190.153.90 port 33764:11: Bye Bye [preauth]
2026-06-30T02:11:30.588673-05:00 claude-cloud sshd[403529]: Disconnected from authenticating user root 203.190.153.90 port 33764 [preauth]
2026-06-30T02:11:35.576173-05:00 claude-cloud sshd[403502]: Connection closed by authenticating user root 27.71.230.31 port 39026 [preauth]
2026-06-30T02:12:43.217023-05:00 claude-cloud sshd[403724]: Invalid user ubuntu from 45.198.224.46 port 58276
2026-06-30T02:12:43.881227-05:00 claude-cloud sshd[403724]: Connection closed by invalid user ubuntu 45.198.224.46 port 58276 [preauth]
2026-06-30T02:12:47.226235-05:00 claude-cloud sshd[403741]: Connection reset by authenticating user root 45.148.10.141 port 20164 [preauth]
2026-06-30T02:13:08.798271-05:00 claude-cloud sshd[403805]: Received disconnect from 103.143.238.100 port 33020:11: Bye Bye [preauth]
2026-06-30T02:13:08.798927-05:00 claude-cloud sshd[403805]: Disconnected from authenticating user root 103.143.238.100 port 33020 [preauth]
2026-06-30T02:13:19.036233-05:00 claude-cloud sshd[403849]: Connection closed by authenticating user root 91.92.40.231 port 53804 [preauth]
2026-06-30T02:13:49.417623-05:00 claude-cloud sshd[403955]: Received disconnect from 38.242.209.160 port 39578:11: Bye Bye [preauth]
2026-06-30T02:13:49.418175-05:00 claude-cloud sshd[403955]: Disconnected from authenticating user root 38.242.209.160 port 39578 [preauth]
2026-06-30T02:13:53.953110-05:00 claude-cloud sshd[403964]: Received disconnect from 203.190.153.90 port 49590:11: Bye Bye [preauth]
2026-06-30T02:13:53.953589-05:00 claude-cloud sshd[403964]: Disconnected from authenticating user root 203.190.153.90 port 49590 [preauth]
2026-06-30T02:14:35.473012-05:00 claude-cloud sshd[404090]: Received disconnect from 206.189.51.81 port 49854:11: Bye Bye [preauth]
2026-06-30T02:14:35.473790-05:00 claude-cloud sshd[404090]: Disconnected from authenticating user root 206.189.51.81 port 49854 [preauth]
2026-06-30T02:14:55.586836-05:00 claude-cloud sshd[404130]: Connection closed by authenticating user root 115.248.8.65 port 48890 [preauth]
2026-06-30T02:15:01.349112-05:00 claude-cloud CRON[404170]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-30T02:15:01.354517-05:00 claude-cloud CRON[404170]: pam_unix(cron:session): session closed for user root
2026-06-30T02:15:13.315848-05:00 claude-cloud sshd[404196]: Received disconnect from 103.143.238.100 port 43326:11: Bye Bye [preauth]
2026-06-30T02:15:13.316228-05:00 claude-cloud sshd[404196]: Disconnected from authenticating user root 103.143.238.100 port 43326 [preauth]
2026-06-30T02:15:37.940534-05:00 claude-cloud sshd[404281]: Connection closed by authenticating user root 91.92.40.231 port 49920 [preauth]
2026-06-30T02:16:04.885611-05:00 claude-cloud systemd-logind[853]: New session c5146 of user claude.
2026-06-30T02:16:05.236136-05:00 claude-cloud systemd-logind[853]: Session c5146 logged out. Waiting for processes to exit.
2026-06-30T02:16:05.237427-05:00 claude-cloud systemd-logind[853]: Removed session c5146.
2026-06-30T02:16:11.791794-05:00 claude-cloud sshd[404444]: Received disconnect from 203.190.153.90 port 51024:11: Bye Bye [preauth]
2026-06-30T02:16:11.792254-05:00 claude-cloud sshd[404444]: Disconnected from authenticating user root 203.190.153.90 port 51024 [preauth]
2026-06-30T02:16:25.626951-05:00 claude-cloud sshd[404476]: Received disconnect from 38.242.209.160 port 41262:11: Bye Bye [preauth]
2026-06-30T02:16:25.627418-05:00 claude-cloud sshd[404476]: Disconnected from authenticating user root 38.242.209.160 port 41262 [preauth]
2026-06-30T02:17:01.362523-05:00 claude-cloud CRON[404588]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-30T02:17:01.367678-05:00 claude-cloud CRON[404588]: pam_unix(cron:session): session closed for user root
2026-06-30T02:17:18.569600-05:00 claude-cloud sshd[404631]: Received disconnect from 103.143.238.100 port 53626:11: Bye Bye [preauth]
2026-06-30T02:17:18.570129-05:00 claude-cloud sshd[404631]: Disconnected from authenticating user root 103.143.238.100 port 53626 [preauth]
2026-06-30T02:17:30.978162-05:00 claude-cloud sshd[404625]: Connection closed by authenticating user root 27.71.230.31 port 51680 [preauth]
2026-06-30T02:17:50.042889-05:00 claude-cloud sshd[404729]: Connection closed by authenticating user root 91.92.40.231 port 40690 [preauth]
2026-06-30T02:18:22.119124-05:00 claude-cloud sshd[404841]: Connection reset by authenticating user root 45.148.10.151 port 60132 [preauth]
2026-06-30T02:18:30.904215-05:00 claude-cloud sshd[404875]: Received disconnect from 203.190.153.90 port 38148:11: Bye Bye [preauth]
2026-06-30T02:18:30.905096-05:00 claude-cloud sshd[404875]: Disconnected from authenticating user root 203.190.153.90 port 38148 [preauth]
2026-06-30T02:18:37.909063-05:00 claude-cloud sshd[404884]: Connection closed by authenticating user root 115.248.8.65 port 54158 [preauth]
2026-06-30T02:18:56.160965-05:00 claude-cloud sshd[404939]: Received disconnect from 38.242.209.160 port 55782:11: Bye Bye [preauth]
2026-06-30T02:18:56.161405-05:00 claude-cloud sshd[404939]: Disconnected from authenticating user root 38.242.209.160 port 55782 [preauth]
2026-06-30T02:19:24.384807-05:00 claude-cloud sshd[405018]: Received disconnect from 103.143.238.100 port 35690:11: Bye Bye [preauth]
2026-06-30T02:19:24.385125-05:00 claude-cloud sshd[405018]: Disconnected from authenticating user root 103.143.238.100 port 35690 [preauth]
2026-06-30T02:20:06.517810-05:00 claude-cloud sshd[405209]: Connection closed by authenticating user root 91.92.40.231 port 51168 [preauth]
2026-06-30T02:20:51.789091-05:00 claude-cloud sshd[405347]: Received disconnect from 203.190.153.90 port 55072:11: Bye Bye [preauth]
2026-06-30T02:20:51.789687-05:00 claude-cloud sshd[405347]: Disconnected from authenticating user root 203.190.153.90 port 55072 [preauth]
2026-06-30T02:21:08.587831-05:00 claude-cloud systemd-logind[853]: New session c5147 of user claude.
2026-06-30T02:21:08.875506-05:00 claude-cloud systemd-logind[853]: Session c5147 logged out. Waiting for processes to exit.
2026-06-30T02:21:08.877253-05:00 claude-cloud systemd-logind[853]: Removed session c5147.
2026-06-30T02:21:28.282115-05:00 claude-cloud sshd[405464]: Received disconnect from 103.143.238.100 port 46020:11: Bye Bye [preauth]
2026-06-30T02:21:28.282837-05:00 claude-cloud sshd[405464]: Disconnected from authenticating user root 103.143.238.100 port 46020 [preauth]
2026-06-30T02:22:22.751927-05:00 claude-cloud sshd[405608]: Connection closed by authenticating user root 115.248.8.65 port 49414 [preauth]
2026-06-30T02:22:23.277014-05:00 claude-cloud sshd[405610]: Connection closed by authenticating user root 45.198.224.46 port 50588 [preauth]
2026-06-30T02:22:23.304409-05:00 claude-cloud sshd[405625]: Invalid user admin from 91.92.40.231 port 60666
2026-06-30T02:22:23.383028-05:00 claude-cloud sshd[405625]: Connection closed by invalid user admin 91.92.40.231 port 60666 [preauth]
2026-06-30T02:23:09.023246-05:00 claude-cloud sshd[405774]: Received disconnect from 203.190.153.90 port 40780:11: Bye Bye [preauth]
2026-06-30T02:23:09.023712-05:00 claude-cloud sshd[405774]: Disconnected from authenticating user root 203.190.153.90 port 40780 [preauth]
2026-06-30T02:23:17.907219-05:00 claude-cloud sshd[405776]: Connection closed by authenticating user root 27.71.230.31 port 47596 [preauth]
2026-06-30T02:23:35.041498-05:00 claude-cloud sshd[405847]: Received disconnect from 103.143.238.100 port 56312:11: Bye Bye [preauth]
2026-06-30T02:23:35.041699-05:00 claude-cloud sshd[405847]: Disconnected from authenticating user root 103.143.238.100 port 56312 [preauth]
2026-06-30T02:23:56.070901-05:00 claude-cloud sshd[405914]: Connection reset by authenticating user root 45.148.10.141 port 20468 [preauth]
2026-06-30T02:24:01.824743-05:00 claude-cloud sshd[405945]: Received disconnect from 38.242.209.160 port 49564:11: Bye Bye [preauth]
2026-06-30T02:24:01.825070-05:00 claude-cloud sshd[405945]: Disconnected from authenticating user root 38.242.209.160 port 49564 [preauth]
2026-06-30T02:24:49.575323-05:00 claude-cloud sshd[406065]: Invalid user admin from 91.92.40.231 port 38862
2026-06-30T02:24:49.723517-05:00 claude-cloud sshd[406065]: Connection closed by invalid user admin 91.92.40.231 port 38862 [preauth]
2026-06-30T02:25:01.378596-05:00 claude-cloud CRON[406107]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-30T02:25:01.385124-05:00 claude-cloud CRON[406107]: pam_unix(cron:session): session closed for user root
2026-06-30T02:25:27.643372-05:00 claude-cloud sshd[406187]: Received disconnect from 203.190.153.90 port 34208:11: Bye Bye [preauth]
2026-06-30T02:25:27.643946-05:00 claude-cloud sshd[406187]: Disconnected from authenticating user root 203.190.153.90 port 34208 [preauth]
2026-06-30T02:25:43.184800-05:00 claude-cloud sshd[406234]: Received disconnect from 103.143.238.100 port 38404:11: Bye Bye [preauth]
2026-06-30T02:25:43.185446-05:00 claude-cloud sshd[406234]: Disconnected from authenticating user root 103.143.238.100 port 38404 [preauth]
2026-06-30T02:26:03.884947-05:00 claude-cloud sshd[406312]: Connection closed by authenticating user root 115.248.8.65 port 43576 [preauth]
2026-06-30T02:26:12.240124-05:00 claude-cloud systemd-logind[853]: New session c5148 of user claude.
2026-06-30T02:26:12.513929-05:00 claude-cloud systemd-logind[853]: Session c5148 logged out. Waiting for processes to exit.
2026-06-30T02:26:12.515773-05:00 claude-cloud systemd-logind[853]: Removed session c5148.
2026-06-30T02:26:37.843882-05:00 claude-cloud sshd[406420]: Received disconnect from 38.242.209.160 port 52944:11: Bye Bye [preauth]
2026-06-30T02:26:37.844440-05:00 claude-cloud sshd[406420]: Disconnected from authenticating user root 38.242.209.160 port 52944 [preauth]
2026-06-30T02:27:11.361184-05:00 claude-cloud sshd[406509]: Connection closed by 161.35.47.134 port 38310
2026-06-30T02:27:19.877730-05:00 claude-cloud sshd[406532]: Invalid user admin from 91.92.40.231 port 51606
2026-06-30T02:27:20.012004-05:00 claude-cloud sshd[406532]: Connection closed by invalid user admin 91.92.40.231 port 51606 [preauth]
2026-06-30T02:27:41.982813-05:00 claude-cloud sshd[406612]: Received disconnect from 203.190.153.90 port 35286:11: Bye Bye [preauth]
2026-06-30T02:27:41.983345-05:00 claude-cloud sshd[406612]: Disconnected from authenticating user root 203.190.153.90 port 35286 [preauth]
2026-06-30T02:27:47.312082-05:00 claude-cloud sshd[406640]: Received disconnect from 103.143.238.100 port 48718:11: Bye Bye [preauth]
2026-06-30T02:27:47.313657-05:00 claude-cloud sshd[406640]: Disconnected from authenticating user root 103.143.238.100 port 48718 [preauth]
2026-06-30T02:27:54.830992-05:00 claude-cloud sshd[406659]: Received disconnect from 172.96.182.111 port 32854:11: Bye Bye [preauth]
2026-06-30T02:27:54.831490-05:00 claude-cloud sshd[406659]: Disconnected from authenticating user root 172.96.182.111 port 32854 [preauth]
2026-06-30T02:28:20.342498-05:00 claude-cloud sshd[406742]: userauth_pubkey: signature algorithm ssh-dss not in PubkeyAcceptedAlgorithms [preauth]
2026-06-30T02:28:20.478587-05:00 claude-cloud sshd[406742]: Received disconnect from 178.73.210.62 port 53334:11: disconnected by user [preauth]
2026-06-30T02:28:20.478814-05:00 claude-cloud sshd[406742]: Disconnected from authenticating user root 178.73.210.62 port 53334 [preauth]
2026-06-30T02:29:16.485656-05:00 claude-cloud sshd[406895]: Invalid user test from 43.156.24.132 port 56264
2026-06-30T02:29:16.651981-05:00 claude-cloud sshd[406895]: Received disconnect from 43.156.24.132 port 56264:11: Bye Bye [preauth]
2026-06-30T02:29:16.652766-05:00 claude-cloud sshd[406895]: Disconnected from invalid user test 43.156.24.132 port 56264 [preauth]
2026-06-30T02:29:23.257436-05:00 claude-cloud sshd[406914]: Connection reset by authenticating user root 45.148.10.147 port 34662 [preauth]
2026-06-30T02:29:45.759337-05:00 claude-cloud sshd[406971]: Connection closed by authenticating user root 115.248.8.65 port 42980 [preauth]
2026-06-30T02:29:53.645350-05:00 claude-cloud sshd[407033]: Received disconnect from 103.143.238.100 port 59044:11: Bye Bye [preauth]
2026-06-30T02:29:53.645808-05:00 claude-cloud sshd[407033]: Disconnected from authenticating user root 103.143.238.100 port 59044 [preauth]
2026-06-30T02:30:01.602883-05:00 claude-cloud sshd[407072]: Invalid user admin from 91.92.40.231 port 43310
2026-06-30T02:30:01.753679-05:00 claude-cloud sshd[407072]: Connection closed by invalid user admin 91.92.40.231 port 43310 [preauth]
2026-06-30T02:30:02.206807-05:00 claude-cloud sshd[407070]: Received disconnect from 203.190.153.90 port 52132:11: Bye Bye [preauth]
2026-06-30T02:30:02.207137-05:00 claude-cloud sshd[407070]: Disconnected from authenticating user root 203.190.153.90 port 52132 [preauth]
2026-06-30T02:30:40.415704-05:00 claude-cloud sshd[407170]: Received disconnect from 103.97.101.25 port 58144:11: Bye Bye [preauth]
2026-06-30T02:30:40.416257-05:00 claude-cloud sshd[407170]: Disconnected from authenticating user root 103.97.101.25 port 58144 [preauth]
2026-06-30T02:30:42.713781-05:00 claude-cloud sshd[407182]: Received disconnect from 45.86.86.162 port 37482:11: disconnected by user [preauth]
2026-06-30T02:30:42.714382-05:00 claude-cloud sshd[407182]: Disconnected from authenticating user root 45.86.86.162 port 37482 [preauth]
2026-06-30T02:30:53.979406-05:00 claude-cloud sshd[407274]: Invalid user ubuntu from 170.0.62.246 port 33518
2026-06-30T02:30:54.184711-05:00 claude-cloud sshd[407274]: Received disconnect from 170.0.62.246 port 33518:11: Bye Bye [preauth]
2026-06-30T02:30:54.185118-05:00 claude-cloud sshd[407274]: Disconnected from invalid user ubuntu 170.0.62.246 port 33518 [preauth]
2026-06-30T02:31:16.003986-05:00 claude-cloud systemd-logind[853]: New session c5149 of user claude.
2026-06-30T02:31:16.427418-05:00 claude-cloud systemd-logind[853]: Session c5149 logged out. Waiting for processes to exit.
2026-06-30T02:31:16.428934-05:00 claude-cloud systemd-logind[853]: Removed session c5149.
2026-06-30T02:31:45.742123-05:00 claude-cloud sshd[407433]: Received disconnect from 38.242.209.160 port 45414:11: Bye Bye [preauth]
2026-06-30T02:31:45.742813-05:00 claude-cloud sshd[407433]: Disconnected from authenticating user root 38.242.209.160 port 45414 [preauth]
2026-06-30T02:32:01.684574-05:00 claude-cloud sshd[407479]: Invalid user ubuntu from 45.198.224.46 port 46972
2026-06-30T02:32:02.016072-05:00 claude-cloud sshd[407481]: Received disconnect from 103.143.238.100 port 41140:11: Bye Bye [preauth]
2026-06-30T02:32:02.016345-05:00 claude-cloud sshd[407481]: Disconnected from authenticating user root 103.143.238.100 port 41140 [preauth]
2026-06-30T02:32:02.467214-05:00 claude-cloud sshd[407479]: Connection closed by invalid user ubuntu 45.198.224.46 port 46972 [preauth]
2026-06-30T02:32:22.381788-05:00 claude-cloud sshd[407552]: Received disconnect from 203.190.153.90 port 39140:11: Bye Bye [preauth]
2026-06-30T02:32:22.382251-05:00 claude-cloud sshd[407552]: Disconnected from authenticating user root 203.190.153.90 port 39140 [preauth]
2026-06-30T02:32:48.088806-05:00 claude-cloud sshd[407649]: Invalid user admin from 91.92.40.231 port 52882
2026-06-30T02:32:48.105540-05:00 claude-cloud sshd[407649]: Connection closed by invalid user admin 91.92.40.231 port 52882 [preauth]
2026-06-30T02:33:31.169382-05:00 claude-cloud sshd[407747]: Connection closed by authenticating user root 115.248.8.65 port 60278 [preauth]
2026-06-30T02:34:08.335449-05:00 claude-cloud sshd[407871]: Received disconnect from 103.143.238.100 port 51466:11: Bye Bye [preauth]
2026-06-30T02:34:08.335840-05:00 claude-cloud sshd[407871]: Disconnected from authenticating user root 103.143.238.100 port 51466 [preauth]
2026-06-30T02:34:21.332072-05:00 claude-cloud sshd[407904]: Received disconnect from 38.242.209.160 port 38482:11: Bye Bye [preauth]
2026-06-30T02:34:21.332454-05:00 claude-cloud sshd[407904]: Disconnected from authenticating user root 38.242.209.160 port 38482 [preauth]
2026-06-30T02:34:40.302525-05:00 claude-cloud sshd[407984]: Received disconnect from 203.190.153.90 port 34164:11: Bye Bye [preauth]
2026-06-30T02:34:40.303130-05:00 claude-cloud sshd[407984]: Disconnected from authenticating user root 203.190.153.90 port 34164 [preauth]
2026-06-30T02:34:52.873686-05:00 claude-cloud sshd[408027]: Connection reset by authenticating user root 45.148.10.151 port 14070 [preauth]
2026-06-30T02:34:53.372969-05:00 claude-cloud sshd[408025]: Received disconnect from 117.50.199.249 port 39356:11: Bye Bye [preauth]
2026-06-30T02:34:53.373380-05:00 claude-cloud sshd[408025]: Disconnected from authenticating user root 117.50.199.249 port 39356 [preauth]
2026-06-30T02:35:01.396932-05:00 claude-cloud CRON[408066]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-30T02:35:01.402697-05:00 claude-cloud CRON[408066]: pam_unix(cron:session): session closed for user root
2026-06-30T02:35:06.346008-05:00 claude-cloud sshd[408058]: Connection closed by authenticating user root 27.71.230.31 port 45484 [preauth]
2026-06-30T02:35:46.907703-05:00 claude-cloud sshd[408175]: Received disconnect from 14.103.112.35 port 53982:11: Bye Bye [preauth]
2026-06-30T02:35:46.908528-05:00 claude-cloud sshd[408175]: Disconnected from authenticating user root 14.103.112.35 port 53982 [preauth]
2026-06-30T02:36:19.755434-05:00 claude-cloud systemd-logind[853]: New session c5150 of user claude.
2026-06-30T02:36:20.163488-05:00 claude-cloud systemd-logind[853]: Session c5150 logged out. Waiting for processes to exit.
2026-06-30T02:36:20.165347-05:00 claude-cloud systemd-logind[853]: Removed session c5150.
2026-06-30T02:36:50.502550-05:00 claude-cloud sshd[408381]: Invalid user  from 64.62.197.80 port 47783
2026-06-30T02:36:53.819874-05:00 claude-cloud sshd[408381]: Connection closed by invalid user  64.62.197.80 port 47783 [preauth]
2026-06-30T02:36:56.111211-05:00 claude-cloud sshd[408409]: Received disconnect from 14.103.117.116 port 53870:11: Bye Bye [preauth]
2026-06-30T02:36:56.111926-05:00 claude-cloud sshd[408409]: Disconnected from authenticating user root 14.103.117.116 port 53870 [preauth]
2026-06-30T02:37:01.606112-05:00 claude-cloud sshd[408442]: Received disconnect from 203.190.153.90 port 51608:11: Bye Bye [preauth]
2026-06-30T02:37:01.606561-05:00 claude-cloud sshd[408442]: Disconnected from authenticating user root 203.190.153.90 port 51608 [preauth]
2026-06-30T02:37:02.255974-05:00 claude-cloud sshd[408444]: Received disconnect from 38.242.209.160 port 37664:11: Bye Bye [preauth]
2026-06-30T02:37:02.256197-05:00 claude-cloud sshd[408444]: Disconnected from authenticating user root 38.242.209.160 port 37664 [preauth]
2026-06-30T02:37:11.402566-05:00 claude-cloud sshd[408460]: Connection closed by authenticating user root 115.248.8.65 port 48542 [preauth]
2026-06-30T02:37:44.469240-05:00 claude-cloud sshd[408555]: Received disconnect from 117.72.212.5 port 43340:11: Bye Bye [preauth]
2026-06-30T02:37:44.470068-05:00 claude-cloud sshd[408555]: Disconnected from authenticating user root 117.72.212.5 port 43340 [preauth]
2026-06-30T02:39:09.933853-05:00 claude-cloud sshd[408795]: Connection reset by 14.103.112.35 port 51290 [preauth]
2026-06-30T02:39:30.404581-05:00 claude-cloud sshd[408846]: Received disconnect from 14.103.112.35 port 55696:11: Bye Bye [preauth]
2026-06-30T02:39:30.404975-05:00 claude-cloud sshd[408846]: Disconnected from authenticating user root 14.103.112.35 port 55696 [preauth]
2026-06-30T02:39:39.584135-05:00 claude-cloud sshd[408891]: Received disconnect from 38.242.209.160 port 38900:11: Bye Bye [preauth]
2026-06-30T02:39:39.584588-05:00 claude-cloud sshd[408891]: Disconnected from authenticating user root 38.242.209.160 port 38900 [preauth]
2026-06-30T02:39:53.090698-05:00 claude-cloud sshd[408928]: Invalid user ansible from 85.24.223.224 port 60914
2026-06-30T02:39:53.128403-05:00 claude-cloud sshd[408928]: Received disconnect from 85.24.223.224 port 60914:11: Bye Bye [preauth]
2026-06-30T02:39:53.128821-05:00 claude-cloud sshd[408928]: Disconnected from invalid user ansible 85.24.223.224 port 60914 [preauth]
2026-06-30T02:40:26.496272-05:00 claude-cloud sshd[409018]: Connection reset by authenticating user root 45.227.254.170 port 30952 [preauth]
2026-06-30T02:40:32.595866-05:00 claude-cloud sshd[409043]: Received disconnect from 176.65.131.188 port 26028:11: disconnected by user [preauth]
2026-06-30T02:40:32.596209-05:00 claude-cloud sshd[409043]: Disconnected from authenticating user root 176.65.131.188 port 26028 [preauth]
2026-06-30T02:40:54.845934-05:00 claude-cloud sshd[409161]: Connection closed by authenticating user root 115.248.8.65 port 36690 [preauth]
2026-06-30T02:40:58.784793-05:00 claude-cloud sshd[408991]: Connection closed by 14.103.112.35 port 41898 [preauth]
2026-06-30T02:41:06.145782-05:00 claude-cloud sshd[409204]: Connection reset by 14.103.112.35 port 40766 [preauth]
2026-06-30T02:41:23.438679-05:00 claude-cloud systemd-logind[853]: New session c5151 of user claude.
2026-06-30T02:41:23.764049-05:00 claude-cloud systemd-logind[853]: Session c5151 logged out. Waiting for processes to exit.
2026-06-30T02:41:23.765475-05:00 claude-cloud systemd-logind[853]: Removed session c5151.
2026-06-30T02:41:24.326505-05:00 claude-cloud sshd[409256]: Invalid user robin from 45.198.224.46 port 59790
2026-06-30T02:41:25.009624-05:00 claude-cloud sshd[409256]: Connection closed by invalid user robin 45.198.224.46 port 59790 [preauth]
2026-06-30T02:41:27.778630-05:00 claude-cloud sshd[409174]: Connection closed by authenticating user root 27.71.230.31 port 44020 [preauth]
2026-06-30T02:41:31.546482-05:00 claude-cloud sshd[409255]: Connection closed by 14.103.112.35 port 40746 [preauth]
2026-06-30T02:41:34.947084-05:00 claude-cloud sshd[409316]: Invalid user ubuntu from 43.156.24.132 port 53698
2026-06-30T02:41:35.113745-05:00 claude-cloud sshd[409316]: Received disconnect from 43.156.24.132 port 53698:11: Bye Bye [preauth]
2026-06-30T02:41:35.114159-05:00 claude-cloud sshd[409316]: Disconnected from invalid user ubuntu 43.156.24.132 port 53698 [preauth]
2026-06-30T02:41:35.212249-05:00 claude-cloud sshd[409318]: Received disconnect from 172.96.182.111 port 46554:11: Bye Bye [preauth]
2026-06-30T02:41:35.212657-05:00 claude-cloud sshd[409318]: Disconnected from authenticating user root 172.96.182.111 port 46554 [preauth]
2026-06-30T02:41:43.166010-05:00 claude-cloud sshd[409333]: Received disconnect from 170.0.62.246 port 56768:11: Bye Bye [preauth]
2026-06-30T02:41:43.166839-05:00 claude-cloud sshd[409333]: Disconnected from authenticating user root 170.0.62.246 port 56768 [preauth]
2026-06-30T02:41:50.432269-05:00 claude-cloud sshd[409342]: Connection reset by 14.103.112.35 port 41970 [preauth]
2026-06-30T02:41:59.251111-05:00 claude-cloud sshd[409384]: Invalid user user from 103.97.101.25 port 47414
2026-06-30T02:41:59.450169-05:00 claude-cloud sshd[409384]: Received disconnect from 103.97.101.25 port 47414:11: Bye Bye [preauth]
2026-06-30T02:41:59.450478-05:00 claude-cloud sshd[409384]: Disconnected from invalid user user 103.97.101.25 port 47414 [preauth]
2026-06-30T02:42:26.980619-05:00 claude-cloud sshd[409452]: Received disconnect from 117.50.199.249 port 59882:11: Bye Bye [preauth]
2026-06-30T02:42:26.981033-05:00 claude-cloud sshd[409452]: Disconnected from authenticating user root 117.50.199.249 port 59882 [preauth]
2026-06-30T02:42:31.451052-05:00 claude-cloud sshd[409413]: Connection closed by 14.103.112.35 port 49694 [preauth]
2026-06-30T02:42:48.520991-05:00 claude-cloud sshd[409532]: error: kex_exchange_identification: read: Connection reset by peer
2026-06-30T02:42:48.521319-05:00 claude-cloud sshd[409532]: Connection reset by 14.103.112.35 port 58168
2026-06-30T02:43:20.282745-05:00 claude-cloud sshd[409615]: Received disconnect from 172.96.182.111 port 53048:11: Bye Bye [preauth]
2026-06-30T02:43:20.283343-05:00 claude-cloud sshd[409615]: Disconnected from authenticating user root 172.96.182.111 port 53048 [preauth]
2026-06-30T02:43:23.441127-05:00 claude-cloud sshd[409627]: Received disconnect from 43.156.24.132 port 44128:11: Bye Bye [preauth]
2026-06-30T02:43:23.441394-05:00 claude-cloud sshd[409627]: Disconnected from authenticating user root 43.156.24.132 port 44128 [preauth]
2026-06-30T02:43:34.937159-05:00 claude-cloud sshd[409666]: Received disconnect from 85.24.223.224 port 47996:11: Bye Bye [preauth]
2026-06-30T02:43:34.937661-05:00 claude-cloud sshd[409666]: Disconnected from authenticating user root 85.24.223.224 port 47996 [preauth]
2026-06-30T02:43:44.500956-05:00 claude-cloud sshd[409689]: Invalid user postgres from 14.103.112.35 port 50232
2026-06-30T02:43:45.535198-05:00 claude-cloud sshd[409689]: Received disconnect from 14.103.112.35 port 50232:11: Bye Bye [preauth]
2026-06-30T02:43:45.535821-05:00 claude-cloud sshd[409689]: Disconnected from invalid user postgres 14.103.112.35 port 50232 [preauth]
2026-06-30T02:43:47.256763-05:00 claude-cloud sshd[409701]: Received disconnect from 103.97.101.25 port 56076:11: Bye Bye [preauth]
2026-06-30T02:43:47.257176-05:00 claude-cloud sshd[409701]: Disconnected from authenticating user root 103.97.101.25 port 56076 [preauth]
2026-06-30T02:44:11.580372-05:00 claude-cloud sshd[409769]: Received disconnect from 170.0.62.246 port 35786:11: Bye Bye [preauth]
2026-06-30T02:44:11.581068-05:00 claude-cloud sshd[409769]: Disconnected from authenticating user root 170.0.62.246 port 35786 [preauth]
2026-06-30T02:44:15.415163-05:00 claude-cloud sshd[409762]: Connection closed by 14.103.112.35 port 53074 [preauth]
2026-06-30T02:44:21.710724-05:00 claude-cloud sshd[409797]: Received disconnect from 117.72.212.5 port 43616:11: Bye Bye [preauth]
2026-06-30T02:44:21.711146-05:00 claude-cloud sshd[409797]: Disconnected from authenticating user root 117.72.212.5 port 43616 [preauth]
2026-06-30T02:44:25.138734-05:00 claude-cloud sshd[409556]: Connection closed by 14.103.112.35 port 43852 [preauth]
2026-06-30T02:44:37.269957-05:00 claude-cloud sshd[409858]: Invalid user test from 91.92.40.231 port 56832
2026-06-30T02:44:37.331254-05:00 claude-cloud sshd[409858]: Connection closed by invalid user test 91.92.40.231 port 56832 [preauth]
2026-06-30T02:44:39.865470-05:00 claude-cloud sshd[409846]: Connection closed by authenticating user root 115.248.8.65 port 60428 [preauth]
2026-06-30T02:44:53.813732-05:00 claude-cloud sshd[409614]: Connection closed by 14.103.112.35 port 39834 [preauth]
2026-06-30T02:44:58.714424-05:00 claude-cloud sshd[409902]: Connection closed by 117.50.199.249 port 41002 [preauth]
2026-06-30T02:45:01.416664-05:00 claude-cloud CRON[409947]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-30T02:45:01.422731-05:00 claude-cloud CRON[409947]: pam_unix(cron:session): session closed for user root
2026-06-30T02:45:06.067547-05:00 claude-cloud sshd[409950]: Received disconnect from 172.96.182.111 port 59576:11: Bye Bye [preauth]
2026-06-30T02:45:06.068008-05:00 claude-cloud sshd[409950]: Disconnected from authenticating user root 172.96.182.111 port 59576 [preauth]
2026-06-30T02:45:11.284347-05:00 claude-cloud sshd[409965]: Received disconnect from 43.156.24.132 port 60508:11: Bye Bye [preauth]
2026-06-30T02:45:11.284820-05:00 claude-cloud sshd[409965]: Disconnected from authenticating user root 43.156.24.132 port 60508 [preauth]
2026-06-30T02:45:28.490878-05:00 claude-cloud sshd[410019]: Invalid user ansible from 103.97.101.25 port 42386
2026-06-30T02:45:28.686363-05:00 claude-cloud sshd[410019]: Received disconnect from 103.97.101.25 port 42386:11: Bye Bye [preauth]
2026-06-30T02:45:28.687744-05:00 claude-cloud sshd[410019]: Disconnected from invalid user ansible 103.97.101.25 port 42386 [preauth]
2026-06-30T02:45:54.313435-05:00 claude-cloud sshd[410084]: Connection reset by authenticating user root 45.227.254.170 port 54886 [preauth]
2026-06-30T02:46:00.928075-05:00 claude-cloud sshd[410113]: Connection closed by authenticating user root 185.242.3.195 port 45846 [preauth]
2026-06-30T02:46:26.984965-05:00 claude-cloud systemd-logind[853]: New session c5152 of user claude.
2026-06-30T02:46:27.341440-05:00 claude-cloud systemd-logind[853]: Session c5152 logged out. Waiting for processes to exit.
2026-06-30T02:46:27.343523-05:00 claude-cloud systemd-logind[853]: Removed session c5152.
2026-06-30T02:46:34.238197-05:00 claude-cloud sshd[410217]: Received disconnect from 170.0.62.246 port 42776:11: Bye Bye [preauth]
2026-06-30T02:46:34.238507-05:00 claude-cloud sshd[410217]: Disconnected from authenticating user root 170.0.62.246 port 42776 [preauth]
2026-06-30T02:46:40.215477-05:00 claude-cloud sshd[410232]: Received disconnect from 117.72.212.5 port 43770:11: Bye Bye [preauth]
2026-06-30T02:46:40.215895-05:00 claude-cloud sshd[410232]: Disconnected from authenticating user root 117.72.212.5 port 43770 [preauth]
2026-06-30T02:46:43.939756-05:00 claude-cloud sshd[410264]: Received disconnect from 85.24.223.224 port 53026:11: Bye Bye [preauth]
2026-06-30T02:46:43.940006-05:00 claude-cloud sshd[410264]: Disconnected from authenticating user root 85.24.223.224 port 53026 [preauth]
2026-06-30T02:46:44.465631-05:00 claude-cloud sshd[410261]: Invalid user test from 172.96.182.111 port 37832
2026-06-30T02:46:44.640479-05:00 claude-cloud sshd[410261]: Received disconnect from 172.96.182.111 port 37832:11: Bye Bye [preauth]
2026-06-30T02:46:44.640703-05:00 claude-cloud sshd[410261]: Disconnected from invalid user test 172.96.182.111 port 37832 [preauth]
2026-06-30T02:46:52.960640-05:00 claude-cloud sshd[410282]: Received disconnect from 43.156.24.132 port 35642:11: Bye Bye [preauth]
2026-06-30T02:46:52.961035-05:00 claude-cloud sshd[410282]: Disconnected from authenticating user root 43.156.24.132 port 35642 [preauth]
2026-06-30T02:46:56.672764-05:00 claude-cloud sshd[410277]: Connection closed by authenticating user root 27.71.230.31 port 52980 [preauth]
2026-06-30T02:47:10.435084-05:00 claude-cloud sshd[410333]: Received disconnect from 103.97.101.25 port 53234:11: Bye Bye [preauth]
2026-06-30T02:47:10.435480-05:00 claude-cloud sshd[410333]: Disconnected from authenticating user root 103.97.101.25 port 53234 [preauth]
2026-06-30T02:48:09.871043-05:00 claude-cloud sshd[410498]: Invalid user test from 91.92.40.231 port 51050
2026-06-30T02:48:09.887060-05:00 claude-cloud sshd[410498]: Connection closed by invalid user test 91.92.40.231 port 51050 [preauth]
2026-06-30T02:48:17.533268-05:00 claude-cloud sshd[410503]: Connection closed by authenticating user root 115.248.8.65 port 38704 [preauth]
2026-06-30T02:48:24.513187-05:00 claude-cloud sshd[410526]: Invalid user test from 14.103.117.116 port 55880
2026-06-30T02:48:25.340687-05:00 claude-cloud sshd[410526]: Received disconnect from 14.103.117.116 port 55880:11: Bye Bye [preauth]
2026-06-30T02:48:25.341044-05:00 claude-cloud sshd[410526]: Disconnected from invalid user test 14.103.117.116 port 55880 [preauth]
2026-06-30T02:48:29.937728-05:00 claude-cloud sshd[410562]: Invalid user ubuntu from 172.96.182.111 port 44362
2026-06-30T02:48:30.104637-05:00 claude-cloud sshd[410562]: Received disconnect from 172.96.182.111 port 44362:11: Bye Bye [preauth]
2026-06-30T02:48:30.104821-05:00 claude-cloud sshd[410562]: Disconnected from invalid user ubuntu 172.96.182.111 port 44362 [preauth]
2026-06-30T02:48:36.601232-05:00 claude-cloud sshd[410575]: Received disconnect from 43.156.24.132 port 38428:11: Bye Bye [preauth]
2026-06-30T02:48:36.601595-05:00 claude-cloud sshd[410575]: Disconnected from authenticating user root 43.156.24.132 port 38428 [preauth]
2026-06-30T02:48:42.787525-05:00 claude-cloud sshd[410564]: Connection closed by 117.50.199.249 port 51044 [preauth]
2026-06-30T02:48:49.689786-05:00 claude-cloud sshd[410620]: Received disconnect from 103.97.101.25 port 47974:11: Bye Bye [preauth]
2026-06-30T02:48:49.690125-05:00 claude-cloud sshd[410620]: Disconnected from authenticating user root 103.97.101.25 port 47974 [preauth]
2026-06-30T02:48:59.259573-05:00 claude-cloud sshd[410654]: Invalid user ubuntu from 170.0.62.246 port 35902
2026-06-30T02:48:59.459892-05:00 claude-cloud sshd[410654]: Received disconnect from 170.0.62.246 port 35902:11: Bye Bye [preauth]
2026-06-30T02:48:59.460170-05:00 claude-cloud sshd[410654]: Disconnected from invalid user ubuntu 170.0.62.246 port 35902 [preauth]
2026-06-30T02:49:00.963408-05:00 claude-cloud sshd[410669]: Invalid user oracle from 117.72.212.5 port 43926
2026-06-30T02:49:01.101430-05:00 claude-cloud sshd[410669]: Received disconnect from 117.72.212.5 port 43926:11: Bye Bye [preauth]
2026-06-30T02:49:01.101671-05:00 claude-cloud sshd[410669]: Disconnected from invalid user oracle 117.72.212.5 port 43926 [preauth]
2026-06-30T02:49:39.609046-05:00 claude-cloud sshd[410764]: Invalid user admin from 2.57.121.25 port 5726
2026-06-30T02:49:39.635461-05:00 claude-cloud sshd[410764]: Connection closed by invalid user admin 2.57.121.25 port 5726 [preauth]
2026-06-30T02:49:44.347602-05:00 claude-cloud sshd[410779]: Connection closed by 161.35.47.134 port 57154
2026-06-30T02:49:48.708301-05:00 claude-cloud sshd[410787]: Received disconnect from 117.50.199.249 port 57534:11: Bye Bye [preauth]
2026-06-30T02:49:48.708560-05:00 claude-cloud sshd[410787]: Disconnected from authenticating user root 117.50.199.249 port 57534 [preauth]
2026-06-30T02:49:49.782784-05:00 claude-cloud sshd[410794]: Received disconnect from 85.24.223.224 port 52982:11: Bye Bye [preauth]
2026-06-30T02:49:49.783064-05:00 claude-cloud sshd[410794]: Disconnected from authenticating user root 85.24.223.224 port 52982 [preauth]
2026-06-30T02:49:55.765248-05:00 claude-cloud sshd[410788]: Connection closed by 14.103.117.116 port 40716 [preauth]
2026-06-30T02:50:05.879742-05:00 claude-cloud sshd[410845]: Received disconnect from 172.96.182.111 port 50834:11: Bye Bye [preauth]
2026-06-30T02:50:05.879969-05:00 claude-cloud sshd[410845]: Disconnected from authenticating user root 172.96.182.111 port 50834 [preauth]
2026-06-30T02:50:22.372183-05:00 claude-cloud sshd[410891]: Received disconnect from 43.156.24.132 port 55328:11: Bye Bye [preauth]
2026-06-30T02:50:22.372563-05:00 claude-cloud sshd[410891]: Disconnected from authenticating user root 43.156.24.132 port 55328 [preauth]
2026-06-30T02:50:32.024306-05:00 claude-cloud sshd[410928]: Received disconnect from 103.97.101.25 port 59044:11: Bye Bye [preauth]
2026-06-30T02:50:32.024739-05:00 claude-cloud sshd[410928]: Disconnected from authenticating user root 103.97.101.25 port 59044 [preauth]
2026-06-30T02:50:54.382055-05:00 claude-cloud sshd[411047]: Connection closed by authenticating user root 45.198.224.46 port 59064 [preauth]
2026-06-30T02:51:20.590584-05:00 claude-cloud sshd[411126]: Received disconnect from 117.72.212.5 port 44088:11: Bye Bye [preauth]
2026-06-30T02:51:20.593225-05:00 claude-cloud sshd[411126]: Disconnected from authenticating user root 117.72.212.5 port 44088 [preauth]
2026-06-30T02:51:24.193664-05:00 claude-cloud sshd[411138]: Received disconnect from 170.0.62.246 port 51592:11: Bye Bye [preauth]
2026-06-30T02:51:24.194486-05:00 claude-cloud sshd[411138]: Disconnected from authenticating user root 170.0.62.246 port 51592 [preauth]
2026-06-30T02:51:28.880557-05:00 claude-cloud sshd[411168]: Connection reset by authenticating user root 62.60.130.219 port 64650 [preauth]
2026-06-30T02:51:30.730766-05:00 claude-cloud systemd-logind[853]: New session c5153 of user claude.
2026-06-30T02:51:31.163590-05:00 claude-cloud systemd-logind[853]: Session c5153 logged out. Waiting for processes to exit.
2026-06-30T02:51:31.167569-05:00 claude-cloud systemd-logind[853]: Removed session c5153.
2026-06-30T02:51:39.239217-05:00 claude-cloud sshd[411201]: Invalid user ubuntu from 172.96.182.111 port 57318
2026-06-30T02:51:39.405367-05:00 claude-cloud sshd[411201]: Received disconnect from 172.96.182.111 port 57318:11: Bye Bye [preauth]
2026-06-30T02:51:39.405764-05:00 claude-cloud sshd[411201]: Disconnected from invalid user ubuntu 172.96.182.111 port 57318 [preauth]
2026-06-30T02:51:59.271605-05:00 claude-cloud sshd[411262]: Invalid user test from 91.92.40.231 port 55412
2026-06-30T02:51:59.287413-05:00 claude-cloud sshd[411262]: Connection closed by invalid user test 91.92.40.231 port 55412 [preauth]
2026-06-30T02:52:02.318743-05:00 claude-cloud sshd[411260]: Connection closed by authenticating user root 115.248.8.65 port 39030 [preauth]
2026-06-30T02:52:03.310724-05:00 claude-cloud sshd[411272]: Invalid user centos from 43.156.24.132 port 51296
2026-06-30T02:52:03.479196-05:00 claude-cloud sshd[411272]: Received disconnect from 43.156.24.132 port 51296:11: Bye Bye [preauth]
2026-06-30T02:52:03.479411-05:00 claude-cloud sshd[411272]: Disconnected from invalid user centos 43.156.24.132 port 51296 [preauth]
2026-06-30T02:52:08.700350-05:00 claude-cloud sshd[411287]: Received disconnect from 103.97.101.25 port 46438:11: Bye Bye [preauth]
2026-06-30T02:52:08.700561-05:00 claude-cloud sshd[411287]: Disconnected from authenticating user root 103.97.101.25 port 46438 [preauth]
2026-06-30T02:52:36.657026-05:00 claude-cloud sshd[411358]: Received disconnect from 14.103.117.116 port 37486:11: Bye Bye [preauth]
2026-06-30T02:52:36.657472-05:00 claude-cloud sshd[411358]: Disconnected from authenticating user root 14.103.117.116 port 37486 [preauth]
2026-06-30T02:52:53.783850-05:00 claude-cloud sshd[411383]: Connection closed by authenticating user root 27.71.230.31 port 49732 [preauth]
2026-06-30T02:52:55.276251-05:00 claude-cloud sshd[411422]: Received disconnect from 85.24.223.224 port 35128:11: Bye Bye [preauth]
2026-06-30T02:52:55.276557-05:00 claude-cloud sshd[411422]: Disconnected from authenticating user root 85.24.223.224 port 35128 [preauth]
2026-06-30T02:53:08.324731-05:00 claude-cloud sshd[411474]: Invalid user centos from 172.96.182.111 port 35616
2026-06-30T02:53:08.499603-05:00 claude-cloud sshd[411474]: Received disconnect from 172.96.182.111 port 35616:11: Bye Bye [preauth]
2026-06-30T02:53:08.499834-05:00 claude-cloud sshd[411474]: Disconnected from invalid user centos 172.96.182.111 port 35616 [preauth]
2026-06-30T02:53:30.594483-05:00 claude-cloud sshd[411535]: Invalid user github from 117.72.212.5 port 44232
2026-06-30T02:53:30.748046-05:00 claude-cloud sshd[411535]: Received disconnect from 117.72.212.5 port 44232:11: Bye Bye [preauth]
2026-06-30T02:53:30.748540-05:00 claude-cloud sshd[411535]: Disconnected from invalid user github 117.72.212.5 port 44232 [preauth]
2026-06-30T02:53:38.572349-05:00 claude-cloud sshd[411560]: Invalid user test from 170.0.62.246 port 46362
2026-06-30T02:53:38.775869-05:00 claude-cloud sshd[411560]: Received disconnect from 170.0.62.246 port 46362:11: Bye Bye [preauth]
2026-06-30T02:53:38.776209-05:00 claude-cloud sshd[411560]: Disconnected from invalid user test 170.0.62.246 port 46362 [preauth]
2026-06-30T02:53:43.062603-05:00 claude-cloud sshd[411565]: Received disconnect from 43.156.24.132 port 32900:11: Bye Bye [preauth]
2026-06-30T02:53:43.062792-05:00 claude-cloud sshd[411565]: Disconnected from authenticating user root 43.156.24.132 port 32900 [preauth]
2026-06-30T02:53:44.121444-05:00 claude-cloud sshd[411574]: Invalid user user2 from 103.97.101.25 port 59906
2026-06-30T02:53:44.316481-05:00 claude-cloud sshd[411574]: Received disconnect from 103.97.101.25 port 59906:11: Bye Bye [preauth]
2026-06-30T02:53:44.316668-05:00 claude-cloud sshd[411574]: Disconnected from invalid user user2 103.97.101.25 port 59906 [preauth]
2026-06-30T02:54:43.013595-05:00 claude-cloud sshd[411730]: Received disconnect from 172.96.182.111 port 42116:11: Bye Bye [preauth]
2026-06-30T02:54:43.013890-05:00 claude-cloud sshd[411730]: Disconnected from authenticating user root 172.96.182.111 port 42116 [preauth]
2026-06-30T02:55:01.432594-05:00 claude-cloud CRON[411805]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-30T02:55:01.437445-05:00 claude-cloud CRON[411805]: pam_unix(cron:session): session closed for user root
2026-06-30T02:55:22.464602-05:00 claude-cloud sshd[411856]: Received disconnect from 103.97.101.25 port 39678:11: Bye Bye [preauth]
2026-06-30T02:55:22.464778-05:00 claude-cloud sshd[411856]: Disconnected from authenticating user root 103.97.101.25 port 39678 [preauth]
2026-06-30T02:55:32.293386-05:00 claude-cloud sshd[411889]: Invalid user ubuntu from 43.156.24.132 port 50208
2026-06-30T02:55:32.460264-05:00 claude-cloud sshd[411889]: Received disconnect from 43.156.24.132 port 50208:11: Bye Bye [preauth]
2026-06-30T02:55:32.460630-05:00 claude-cloud sshd[411889]: Disconnected from invalid user ubuntu 43.156.24.132 port 50208 [preauth]
2026-06-30T02:55:41.407982-05:00 claude-cloud sshd[411914]: Received disconnect from 117.72.212.5 port 44382:11: Bye Bye [preauth]
2026-06-30T02:55:41.408330-05:00 claude-cloud sshd[411914]: Disconnected from authenticating user root 117.72.212.5 port 44382 [preauth]
2026-06-30T02:55:46.831489-05:00 claude-cloud sshd[411919]: Connection closed by authenticating user root 115.248.8.65 port 58618 [preauth]
2026-06-30T02:55:50.063664-05:00 claude-cloud sshd[411945]: Invalid user test from 91.92.40.231 port 56538
2026-06-30T02:55:50.078330-05:00 claude-cloud sshd[411945]: Connection closed by invalid user test 91.92.40.231 port 56538 [preauth]
2026-06-30T02:55:56.047833-05:00 claude-cloud sshd[411955]: Invalid user centos from 170.0.62.246 port 46866
2026-06-30T02:55:56.248301-05:00 claude-cloud sshd[411955]: Received disconnect from 170.0.62.246 port 46866:11: Bye Bye [preauth]
2026-06-30T02:55:56.248474-05:00 claude-cloud sshd[411955]: Disconnected from invalid user centos 170.0.62.246 port 46866 [preauth]
2026-06-30T02:56:12.822626-05:00 claude-cloud sshd[412010]: Received disconnect from 85.24.223.224 port 45698:11: Bye Bye [preauth]
2026-06-30T02:56:12.823024-05:00 claude-cloud sshd[412010]: Disconnected from authenticating user root 85.24.223.224 port 45698 [preauth]
2026-06-30T02:56:18.976473-05:00 claude-cloud sshd[412019]: Received disconnect from 172.96.182.111 port 48636:11: Bye Bye [preauth]
2026-06-30T02:56:18.980647-05:00 claude-cloud sshd[412019]: Disconnected from authenticating user root 172.96.182.111 port 48636 [preauth]
2026-06-30T02:56:34.626517-05:00 claude-cloud systemd-logind[853]: New session c5154 of user claude.
2026-06-30T02:56:34.927370-05:00 claude-cloud systemd-logind[853]: Session c5154 logged out. Waiting for processes to exit.
2026-06-30T02:56:34.928959-05:00 claude-cloud systemd-logind[853]: Removed session c5154.
2026-06-30T02:56:58.733589-05:00 claude-cloud sshd[412167]: Connection reset by authenticating user root 45.148.10.141 port 39576 [preauth]
2026-06-30T02:57:03.088860-05:00 claude-cloud sshd[412176]: Received disconnect from 103.97.101.25 port 36436:11: Bye Bye [preauth]
2026-06-30T02:57:03.089260-05:00 claude-cloud sshd[412176]: Disconnected from authenticating user root 103.97.101.25 port 36436 [preauth]
2026-06-30T02:57:18.581321-05:00 claude-cloud sshd[412211]: Received disconnect from 43.156.24.132 port 41094:11: Bye Bye [preauth]
2026-06-30T02:57:18.582011-05:00 claude-cloud sshd[412211]: Disconnected from authenticating user root 43.156.24.132 port 41094 [preauth]
2026-06-30T02:57:42.771100-05:00 claude-cloud sshd[412288]: Invalid user admin1 from 193.46.255.86 port 21510
2026-06-30T02:57:42.797022-05:00 claude-cloud sshd[412288]: Connection closed by invalid user admin1 193.46.255.86 port 21510 [preauth]
2026-06-30T02:57:50.263339-05:00 claude-cloud sshd[412304]: Received disconnect from 117.72.212.5 port 44544:11: Bye Bye [preauth]
2026-06-30T02:57:50.264100-05:00 claude-cloud sshd[412304]: Disconnected from authenticating user root 117.72.212.5 port 44544 [preauth]
2026-06-30T02:57:55.966242-05:00 claude-cloud sshd[412316]: Received disconnect from 172.96.182.111 port 55174:11: Bye Bye [preauth]
2026-06-30T02:57:55.967045-05:00 claude-cloud sshd[412316]: Disconnected from authenticating user root 172.96.182.111 port 55174 [preauth]
2026-06-30T02:58:09.941820-05:00 claude-cloud sshd[412367]: Received disconnect from 170.0.62.246 port 60664:11: Bye Bye [preauth]
2026-06-30T02:58:09.942305-05:00 claude-cloud sshd[412367]: Disconnected from authenticating user root 170.0.62.246 port 60664 [preauth]
2026-06-30T02:58:12.149354-05:00 claude-cloud sshd[412353]: Connection closed by 14.103.117.116 port 43972 [preauth]
2026-06-30T02:58:45.043637-05:00 claude-cloud sshd[412479]: Received disconnect from 103.97.101.25 port 49460:11: Bye Bye [preauth]
2026-06-30T02:58:45.044393-05:00 claude-cloud sshd[412479]: Disconnected from authenticating user root 103.97.101.25 port 49460 [preauth]
2026-06-30T02:58:49.653556-05:00 claude-cloud sshd[412452]: Connection closed by authenticating user root 27.71.230.31 port 60488 [preauth]
2026-06-30T02:59:02.629833-05:00 claude-cloud sshd[412537]: Received disconnect from 43.156.24.132 port 53756:11: Bye Bye [preauth]
2026-06-30T02:59:02.630430-05:00 claude-cloud sshd[412537]: Disconnected from authenticating user root 43.156.24.132 port 53756 [preauth]
2026-06-30T02:59:28.656425-05:00 claude-cloud sshd[412589]: Connection closed by authenticating user root 115.248.8.65 port 49408 [preauth]
2026-06-30T02:59:32.991666-05:00 claude-cloud sshd[412622]: Received disconnect from 172.96.182.111 port 33450:11: Bye Bye [preauth]
2026-06-30T02:59:32.991932-05:00 claude-cloud sshd[412622]: Disconnected from authenticating user root 172.96.182.111 port 33450 [preauth]
2026-06-30T02:59:36.484385-05:00 claude-cloud sshd[412627]: Received disconnect from 14.103.117.116 port 52150:11: Bye Bye [preauth]
2026-06-30T02:59:36.484725-05:00 claude-cloud sshd[412627]: Disconnected from authenticating user root 14.103.117.116 port 52150 [preauth]
2026-06-30T02:59:57.515903-05:00 claude-cloud sshd[412697]: Invalid user test from 91.92.40.231 port 40142
2026-06-30T02:59:57.530697-05:00 claude-cloud sshd[412697]: Connection closed by invalid user test 91.92.40.231 port 40142 [preauth]
2026-06-30T02:59:58.747294-05:00 claude-cloud sshd[412695]: Invalid user ubuntu from 117.72.212.5 port 44698
2026-06-30T02:59:58.896651-05:00 claude-cloud sshd[412695]: Received disconnect from 117.72.212.5 port 44698:11: Bye Bye [preauth]
2026-06-30T02:59:58.896940-05:00 claude-cloud sshd[412695]: Disconnected from invalid user ubuntu 117.72.212.5 port 44698 [preauth]
2026-06-30T03:00:24.337326-05:00 claude-cloud sshd[412763]: Invalid user git from 45.198.224.46 port 41158
2026-06-30T03:00:24.983749-05:00 claude-cloud sshd[412763]: Connection closed by invalid user git 45.198.224.46 port 41158 [preauth]
2026-06-30T03:00:25.376253-05:00 claude-cloud sshd[412765]: Received disconnect from 170.0.62.246 port 38868:11: Bye Bye [preauth]
2026-06-30T03:00:25.376640-05:00 claude-cloud sshd[412765]: Disconnected from authenticating user root 170.0.62.246 port 38868 [preauth]
2026-06-30T03:00:25.778185-05:00 claude-cloud sshd[412767]: Invalid user oracle from 103.97.101.25 port 56426
2026-06-30T03:00:25.974087-05:00 claude-cloud sshd[412767]: Received disconnect from 103.97.101.25 port 56426:11: Bye Bye [preauth]
2026-06-30T03:00:25.974385-05:00 claude-cloud sshd[412767]: Disconnected from invalid user oracle 103.97.101.25 port 56426 [preauth]
2026-06-30T03:00:48.329624-05:00 claude-cloud sshd[412898]: Received disconnect from 43.156.24.132 port 36758:11: Bye Bye [preauth]
2026-06-30T03:00:48.330238-05:00 claude-cloud sshd[412898]: Disconnected from authenticating user root 43.156.24.132 port 36758 [preauth]
2026-06-30T03:00:58.114588-05:00 claude-cloud sshd[412927]: Received disconnect from 14.103.117.116 port 42862:11: Bye Bye [preauth]
2026-06-30T03:00:58.117683-05:00 claude-cloud sshd[412927]: Disconnected from authenticating user root 14.103.117.116 port 42862 [preauth]
2026-06-30T03:01:12.859613-05:00 claude-cloud sshd[412979]: Received disconnect from 172.96.182.111 port 39958:11: Bye Bye [preauth]
2026-06-30T03:01:12.859895-05:00 claude-cloud sshd[412979]: Disconnected from authenticating user root 172.96.182.111 port 39958 [preauth]
2026-06-30T03:01:38.135593-05:00 claude-cloud systemd-logind[853]: New session c5155 of user claude.
2026-06-30T03:01:38.440722-05:00 claude-cloud systemd-logind[853]: Session c5155 logged out. Waiting for processes to exit.
2026-06-30T03:01:38.443085-05:00 claude-cloud systemd-logind[853]: Removed session c5155.
2026-06-30T03:02:10.863262-05:00 claude-cloud sshd[413148]: Received disconnect from 103.97.101.25 port 39854:11: Bye Bye [preauth]
2026-06-30T03:02:10.863683-05:00 claude-cloud sshd[413148]: Disconnected from authenticating user root 103.97.101.25 port 39854 [preauth]
2026-06-30T03:02:12.855954-05:00 claude-cloud sshd[413153]: Invalid user ubuntu from 117.72.212.5 port 44852
2026-06-30T03:02:12.993421-05:00 claude-cloud sshd[413153]: Received disconnect from 117.72.212.5 port 44852:11: Bye Bye [preauth]
2026-06-30T03:02:12.993739-05:00 claude-cloud sshd[413153]: Disconnected from invalid user ubuntu 117.72.212.5 port 44852 [preauth]
2026-06-30T03:02:25.423992-05:00 claude-cloud sshd[413187]: Received disconnect from 85.24.223.224 port 40456:11: Bye Bye [preauth]
2026-06-30T03:02:25.424717-05:00 claude-cloud sshd[413187]: Disconnected from authenticating user root 85.24.223.224 port 40456 [preauth]
2026-06-30T03:02:28.268650-05:00 claude-cloud sshd[413200]: Connection reset by authenticating user root 45.148.10.151 port 41204 [preauth]
2026-06-30T03:02:34.496720-05:00 claude-cloud sshd[413221]: Received disconnect from 43.156.24.132 port 55178:11: Bye Bye [preauth]
2026-06-30T03:02:34.497235-05:00 claude-cloud sshd[413221]: Disconnected from authenticating user root 43.156.24.132 port 55178 [preauth]
2026-06-30T03:02:50.237617-05:00 claude-cloud sshd[413277]: Received disconnect from 170.0.62.246 port 48408:11: Bye Bye [preauth]
2026-06-30T03:02:50.238361-05:00 claude-cloud sshd[413277]: Disconnected from authenticating user root 170.0.62.246 port 48408 [preauth]
2026-06-30T03:02:54.562701-05:00 claude-cloud sshd[413282]: Received disconnect from 205.185.125.209 port 51264:11: disconnected by user [preauth]
2026-06-30T03:02:54.562944-05:00 claude-cloud sshd[413282]: Disconnected from authenticating user root 205.185.125.209 port 51264 [preauth]
2026-06-30T03:02:54.649882-05:00 claude-cloud sshd[413284]: Received disconnect from 172.96.182.111 port 46450:11: Bye Bye [preauth]
2026-06-30T03:02:54.650350-05:00 claude-cloud sshd[413284]: Disconnected from authenticating user root 172.96.182.111 port 46450 [preauth]
2026-06-30T03:03:09.056852-05:00 claude-cloud sshd[413328]: Connection closed by authenticating user root 115.248.8.65 port 46408 [preauth]
2026-06-30T03:03:54.234387-05:00 claude-cloud sshd[413466]: Received disconnect from 103.97.101.25 port 43444:11: Bye Bye [preauth]
2026-06-30T03:03:54.234974-05:00 claude-cloud sshd[413466]: Disconnected from authenticating user root 103.97.101.25 port 43444 [preauth]
2026-06-30T03:04:19.371332-05:00 claude-cloud sshd[413533]: Received disconnect from 43.156.24.132 port 39454:11: Bye Bye [preauth]
2026-06-30T03:04:19.371693-05:00 claude-cloud sshd[413533]: Disconnected from authenticating user root 43.156.24.132 port 39454 [preauth]
2026-06-30T03:04:31.437425-05:00 claude-cloud sshd[413583]: Received disconnect from 117.72.212.5 port 45002:11: Bye Bye [preauth]
2026-06-30T03:04:31.437895-05:00 claude-cloud sshd[413583]: Disconnected from authenticating user root 117.72.212.5 port 45002 [preauth]
2026-06-30T03:04:36.335119-05:00 claude-cloud sshd[413598]: Invalid user test from 91.92.40.231 port 53374
2026-06-30T03:04:36.351768-05:00 claude-cloud sshd[413598]: Connection closed by invalid user test 91.92.40.231 port 53374 [preauth]
2026-06-30T03:04:41.931089-05:00 claude-cloud sshd[413586]: Connection closed by authenticating user root 27.71.230.31 port 35314 [preauth]
2026-06-30T03:05:01.448432-05:00 claude-cloud CRON[413688]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-30T03:05:01.454100-05:00 claude-cloud CRON[413688]: pam_unix(cron:session): session closed for user root
2026-06-30T03:05:08.048612-05:00 claude-cloud sshd[413701]: Received disconnect from 170.0.62.246 port 47958:11: Bye Bye [preauth]
2026-06-30T03:05:08.049574-05:00 claude-cloud sshd[413701]: Disconnected from authenticating user root 170.0.62.246 port 47958 [preauth]
2026-06-30T03:05:13.333691-05:00 claude-cloud sshd[413716]: Connection reset by 14.103.117.116 port 39458 [preauth]
2026-06-30T03:05:36.268531-05:00 claude-cloud sshd[413784]: Received disconnect from 85.24.223.224 port 54588:11: Bye Bye [preauth]
2026-06-30T03:05:36.270167-05:00 claude-cloud sshd[413784]: Disconnected from authenticating user root 85.24.223.224 port 54588 [preauth]
2026-06-30T03:06:13.382910-05:00 claude-cloud sshd[413886]: Connection closed by authenticating user root 45.148.10.239 port 47344 [preauth]
2026-06-30T03:06:41.713270-05:00 claude-cloud systemd-logind[853]: New session c5156 of user claude.
2026-06-30T03:06:41.991480-05:00 claude-cloud systemd-logind[853]: Session c5156 logged out. Waiting for processes to exit.
2026-06-30T03:06:41.994058-05:00 claude-cloud systemd-logind[853]: Removed session c5156.
2026-06-30T03:06:49.242867-05:00 claude-cloud sshd[414003]: Received disconnect from 117.72.212.5 port 45152:11: Bye Bye [preauth]
2026-06-30T03:06:49.243337-05:00 claude-cloud sshd[414003]: Disconnected from authenticating user root 117.72.212.5 port 45152 [preauth]
2026-06-30T03:06:53.558993-05:00 claude-cloud sshd[414015]: Invalid user photo from 115.248.8.65 port 32830
2026-06-30T03:06:54.147410-05:00 claude-cloud sshd[414015]: Connection closed by invalid user photo 115.248.8.65 port 32830 [preauth]
2026-06-30T03:07:28.193862-05:00 claude-cloud sshd[414119]: Received disconnect from 170.0.62.246 port 55704:11: Bye Bye [preauth]
2026-06-30T03:07:28.194195-05:00 claude-cloud sshd[414119]: Disconnected from authenticating user root 170.0.62.246 port 55704 [preauth]
2026-06-30T03:07:57.123936-05:00 claude-cloud sshd[414196]: Connection reset by authenticating user root 45.148.10.151 port 56208 [preauth]
2026-06-30T03:08:16.520063-05:00 claude-cloud sshd[414245]: Connection closed by 141.11.88.11 port 14210
2026-06-30T03:08:38.402202-05:00 claude-cloud sshd[414310]: Connection closed by authenticating user root 141.11.88.11 port 40822 [preauth]
2026-06-30T03:09:06.619760-05:00 claude-cloud sshd[414404]: Invalid user userftp from 117.72.212.5 port 45300
2026-06-30T03:09:06.784983-05:00 claude-cloud sshd[414404]: Received disconnect from 117.72.212.5 port 45300:11: Bye Bye [preauth]
2026-06-30T03:09:06.785447-05:00 claude-cloud sshd[414404]: Disconnected from invalid user userftp 117.72.212.5 port 45300 [preauth]
2026-06-30T03:09:33.970162-05:00 claude-cloud sshd[414487]: Invalid user test from 91.92.40.231 port 59370
2026-06-30T03:09:33.988657-05:00 claude-cloud sshd[414487]: Connection closed by invalid user test 91.92.40.231 port 59370 [preauth]
2026-06-30T03:09:51.961445-05:00 claude-cloud sshd[414529]: Received disconnect from 170.0.62.246 port 35476:11: Bye Bye [preauth]
2026-06-30T03:09:51.961942-05:00 claude-cloud sshd[414529]: Disconnected from authenticating user root 170.0.62.246 port 35476 [preauth]
2026-06-30T03:10:01.197013-05:00 claude-cloud sshd[414550]: Connection closed by authenticating user root 45.198.224.46 port 44360 [preauth]
2026-06-30T03:10:01.464840-05:00 claude-cloud CRON[414568]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-30T03:10:01.469226-05:00 claude-cloud CRON[414568]: pam_unix(cron:session): session closed for user root
2026-06-30T03:10:38.768371-05:00 claude-cloud sshd[414648]: Connection closed by authenticating user root 27.71.230.31 port 49118 [preauth]
2026-06-30T03:10:39.991564-05:00 claude-cloud sshd[414661]: Invalid user oracle from 115.248.8.65 port 37972
2026-06-30T03:10:40.657320-05:00 claude-cloud sshd[414661]: Connection closed by invalid user oracle 115.248.8.65 port 37972 [preauth]
2026-06-30T03:11:19.281801-05:00 claude-cloud sshd[414785]: Invalid user ftpuser from 117.72.212.5 port 45448
2026-06-30T03:11:19.796995-05:00 claude-cloud sshd[414785]: Received disconnect from 117.72.212.5 port 45448:11: Bye Bye [preauth]
2026-06-30T03:11:19.797249-05:00 claude-cloud sshd[414785]: Disconnected from invalid user ftpuser 117.72.212.5 port 45448 [preauth]
2026-06-30T03:11:45.279194-05:00 claude-cloud systemd-logind[853]: New session c5157 of user claude.
2026-06-30T03:11:45.552273-05:00 claude-cloud systemd-logind[853]: Session c5157 logged out. Waiting for processes to exit.
2026-06-30T03:11:45.554107-05:00 claude-cloud systemd-logind[853]: Removed session c5157.
2026-06-30T03:12:08.433465-05:00 claude-cloud sshd[415012]: Received disconnect from 170.0.62.246 port 59666:11: Bye Bye [preauth]
2026-06-30T03:12:08.433790-05:00 claude-cloud sshd[415012]: Disconnected from authenticating user root 170.0.62.246 port 59666 [preauth]
2026-06-30T03:13:20.341022-05:00 claude-cloud sshd[415203]: Connection closed by 161.35.47.134 port 50566
2026-06-30T03:13:23.817003-05:00 claude-cloud sshd[415214]: Connection reset by authenticating user root 45.227.254.170 port 30414 [preauth]
2026-06-30T03:13:32.755625-05:00 claude-cloud sshd[415247]: Received disconnect from 117.72.212.5 port 45600:11: Bye Bye [preauth]
2026-06-30T03:13:32.756040-05:00 claude-cloud sshd[415247]: Disconnected from authenticating user root 117.72.212.5 port 45600 [preauth]
2026-06-30T03:14:16.652395-05:00 claude-cloud sshd[415375]: Invalid user test from 91.92.40.231 port 40396
2026-06-30T03:14:16.667100-05:00 claude-cloud sshd[415375]: Connection closed by invalid user test 91.92.40.231 port 40396 [preauth]
2026-06-30T03:14:17.898733-05:00 claude-cloud sshd[415373]: Invalid user moxa from 115.248.8.65 port 34060
2026-06-30T03:14:18.234663-05:00 claude-cloud sshd[415373]: Connection closed by invalid user moxa 115.248.8.65 port 34060 [preauth]
2026-06-30T03:14:58.883139-05:00 claude-cloud sshd[415510]: Invalid user oracle from 85.24.223.224 port 49640
2026-06-30T03:14:58.921269-05:00 claude-cloud sshd[415510]: Received disconnect from 85.24.223.224 port 49640:11: Bye Bye [preauth]
2026-06-30T03:14:58.921793-05:00 claude-cloud sshd[415510]: Disconnected from invalid user oracle 85.24.223.224 port 49640 [preauth]
2026-06-30T03:15:01.479789-05:00 claude-cloud CRON[415512]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-30T03:15:01.486844-05:00 claude-cloud CRON[415512]: pam_unix(cron:session): session closed for user root
2026-06-30T03:16:31.267916-05:00 claude-cloud sshd[415775]: Connection closed by 161.35.47.134 port 33794
2026-06-30T03:16:39.620498-05:00 claude-cloud sshd[415747]: Connection closed by authenticating user root 27.71.230.31 port 42718 [preauth]
2026-06-30T03:16:48.783847-05:00 claude-cloud systemd-logind[853]: New session c5158 of user claude.
2026-06-30T03:16:49.101041-05:00 claude-cloud systemd-logind[853]: Session c5158 logged out. Waiting for processes to exit.
2026-06-30T03:16:49.102607-05:00 claude-cloud systemd-logind[853]: Removed session c5158.
2026-06-30T03:17:01.494296-05:00 claude-cloud CRON[415861]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-30T03:17:01.503947-05:00 claude-cloud CRON[415861]: pam_unix(cron:session): session closed for user root
2026-06-30T03:18:05.827828-05:00 claude-cloud sshd[416042]: Invalid user miner from 115.248.8.65 port 43630
2026-06-30T03:18:06.260142-05:00 claude-cloud sshd[416054]: Invalid user user2 from 85.24.223.224 port 53302
2026-06-30T03:18:06.286636-05:00 claude-cloud sshd[416042]: Connection closed by invalid user miner 115.248.8.65 port 43630 [preauth]
2026-06-30T03:18:06.305096-05:00 claude-cloud sshd[416054]: Received disconnect from 85.24.223.224 port 53302:11: Bye Bye [preauth]
2026-06-30T03:18:06.305571-05:00 claude-cloud sshd[416054]: Disconnected from invalid user user2 85.24.223.224 port 53302 [preauth]
2026-06-30T03:18:51.897670-05:00 claude-cloud sshd[416174]: Connection reset by authenticating user root 45.227.254.170 port 16336 [preauth]
2026-06-30T03:19:17.787405-05:00 claude-cloud sshd[416246]: Connection closed by 36.41.186.9 port 46858
2026-06-30T03:19:21.546230-05:00 claude-cloud sshd[416263]: Invalid user user from 91.92.40.231 port 43928
2026-06-30T03:19:21.562007-05:00 claude-cloud sshd[416263]: Connection closed by invalid user user 91.92.40.231 port 43928 [preauth]
2026-06-30T03:19:22.988825-05:00 claude-cloud sshd[416250]: Connection closed by authenticating user root 36.41.186.9 port 47376 [preauth]
2026-06-30T03:19:29.207153-05:00 claude-cloud sshd[416272]: Invalid user guest from 45.198.224.46 port 34818
2026-06-30T03:19:29.896214-05:00 claude-cloud sshd[416272]: Connection closed by invalid user guest 45.198.224.46 port 34818 [preauth]
2026-06-30T03:20:49.475228-05:00 claude-cloud sshd[416520]: Connection closed by 45.148.10.121 port 50444 [preauth]
2026-06-30T03:21:16.506222-05:00 claude-cloud sshd[416593]: Received disconnect from 85.24.223.224 port 59928:11: Bye Bye [preauth]
2026-06-30T03:21:16.506743-05:00 claude-cloud sshd[416593]: Disconnected from authenticating user root 85.24.223.224 port 59928 [preauth]
2026-06-30T03:21:50.257985-05:00 claude-cloud sshd[416748]: Invalid user install from 115.248.8.65 port 60556
2026-06-30T03:21:51.099497-05:00 claude-cloud sshd[416748]: Connection closed by invalid user install 115.248.8.65 port 60556 [preauth]
2026-06-30T03:21:53.088722-05:00 claude-cloud systemd-logind[853]: New session c5159 of user claude.
2026-06-30T03:21:53.474527-05:00 claude-cloud systemd-logind[853]: Session c5159 logged out. Waiting for processes to exit.
2026-06-30T03:21:53.476072-05:00 claude-cloud systemd-logind[853]: Removed session c5159.
2026-06-30T03:22:34.533387-05:00 claude-cloud sshd[416837]: Connection closed by authenticating user root 27.71.230.31 port 39712 [preauth]
2026-06-30T03:24:17.650470-05:00 claude-cloud sshd[417183]: Connection reset by authenticating user root 45.227.254.170 port 39078 [preauth]
2026-06-30T03:24:22.219911-05:00 claude-cloud sshd[417199]: Received disconnect from 85.24.223.224 port 46678:11: Bye Bye [preauth]
2026-06-30T03:24:22.220200-05:00 claude-cloud sshd[417199]: Disconnected from authenticating user root 85.24.223.224 port 46678 [preauth]
2026-06-30T03:24:50.694133-05:00 claude-cloud sshd[417284]: Invalid user user from 91.92.40.231 port 49264
2026-06-30T03:24:50.718984-05:00 claude-cloud sshd[417284]: Connection closed by invalid user user 91.92.40.231 port 49264 [preauth]
2026-06-30T03:25:01.517589-05:00 claude-cloud CRON[417318]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-30T03:25:01.523605-05:00 claude-cloud CRON[417318]: pam_unix(cron:session): session closed for user root
2026-06-30T03:25:29.747793-05:00 claude-cloud sshd[417375]: Invalid user ftpuser from 115.248.8.65 port 38604
2026-06-30T03:25:30.473848-05:00 claude-cloud sshd[417375]: Connection closed by invalid user ftpuser 115.248.8.65 port 38604 [preauth]
2026-06-30T03:26:44.524776-05:00 claude-cloud sshd[417613]: Invalid user jazzmine from 2.57.121.112 port 21806
2026-06-30T03:26:44.550787-05:00 claude-cloud sshd[417613]: Connection closed by invalid user jazzmine 2.57.121.112 port 21806 [preauth]
2026-06-30T03:26:56.770523-05:00 claude-cloud systemd-logind[853]: New session c5160 of user claude.
2026-06-30T03:26:57.063652-05:00 claude-cloud systemd-logind[853]: Session c5160 logged out. Waiting for processes to exit.
2026-06-30T03:26:57.065169-05:00 claude-cloud systemd-logind[853]: Removed session c5160.
2026-06-30T03:28:18.417253-05:00 claude-cloud sshd[417882]: Connection closed by authenticating user root 27.71.230.31 port 55476 [preauth]
2026-06-30T03:29:08.034619-05:00 claude-cloud sshd[418020]: Connection closed by authenticating user root 45.198.224.46 port 43572 [preauth]
2026-06-30T03:29:14.604849-05:00 claude-cloud sshd[418041]: Invalid user ftp from 115.248.8.65 port 33948
2026-06-30T03:29:15.034438-05:00 claude-cloud sshd[418041]: Connection closed by invalid user ftp 115.248.8.65 port 33948 [preauth]
2026-06-30T03:29:52.150520-05:00 claude-cloud sshd[418163]: Connection reset by authenticating user root 45.148.10.147 port 27660 [preauth]
2026-06-30T03:30:25.494852-05:00 claude-cloud sshd[418251]: Invalid user user from 91.92.40.231 port 51982
2026-06-30T03:30:25.511271-05:00 claude-cloud sshd[418251]: Connection closed by invalid user user 91.92.40.231 port 51982 [preauth]
2026-06-30T03:30:54.669217-05:00 claude-cloud sshd[418337]: Connection closed by 161.35.47.134 port 40842
2026-06-30T03:32:00.312510-05:00 claude-cloud systemd-logind[853]: New session c5161 of user claude.
2026-06-30T03:32:00.629521-05:00 claude-cloud systemd-logind[853]: Session c5161 logged out. Waiting for processes to exit.
2026-06-30T03:32:00.630950-05:00 claude-cloud systemd-logind[853]: Removed session c5161.
2026-06-30T03:32:53.718414-05:00 claude-cloud sshd[418738]: Invalid user fa from 115.248.8.65 port 47970
2026-06-30T03:32:54.182964-05:00 claude-cloud sshd[418738]: Connection closed by invalid user fa 115.248.8.65 port 47970 [preauth]
2026-06-30T03:34:16.808728-05:00 claude-cloud sshd[418954]: Connection closed by authenticating user root 27.71.230.31 port 36616 [preauth]
2026-06-30T03:35:01.538369-05:00 claude-cloud CRON[419118]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-30T03:35:01.545208-05:00 claude-cloud CRON[419118]: pam_unix(cron:session): session closed for user root
2026-06-30T03:35:23.923229-05:00 claude-cloud sshd[419169]: Connection reset by authenticating user root 45.148.10.147 port 21346 [preauth]
2026-06-30T03:36:03.621787-05:00 claude-cloud sshd[419302]: Invalid user user from 91.92.40.231 port 60498
2026-06-30T03:36:03.639577-05:00 claude-cloud sshd[419302]: Connection closed by invalid user user 91.92.40.231 port 60498 [preauth]
2026-06-30T03:36:38.890915-05:00 claude-cloud sshd[419389]: Invalid user deployer from 115.248.8.65 port 59260
2026-06-30T03:36:39.357551-05:00 claude-cloud sshd[419389]: Connection closed by invalid user deployer 115.248.8.65 port 59260 [preauth]
2026-06-30T03:36:56.481583-05:00 claude-cloud sshd[419439]: Connection closed by 51.158.205.203 port 61000
2026-06-30T03:37:04.029874-05:00 claude-cloud systemd-logind[853]: New session c5162 of user claude.
2026-06-30T03:37:04.324666-05:00 claude-cloud systemd-logind[853]: Session c5162 logged out. Waiting for processes to exit.
2026-06-30T03:37:04.326024-05:00 claude-cloud systemd-logind[853]: Removed session c5162.
2026-06-30T03:38:33.820610-05:00 claude-cloud sshd[419729]: Connection closed by authenticating user root 45.198.224.46 port 54286 [preauth]
2026-06-30T03:40:14.159560-05:00 claude-cloud sshd[419979]: Connection closed by authenticating user root 27.71.230.31 port 33248 [preauth]
2026-06-30T03:40:23.925009-05:00 claude-cloud sshd[420040]: Invalid user deploy from 115.248.8.65 port 59660
2026-06-30T03:40:24.330163-05:00 claude-cloud sshd[420040]: Connection closed by invalid user deploy 115.248.8.65 port 59660 [preauth]
2026-06-30T03:40:58.566888-05:00 claude-cloud sshd[420148]: Connection reset by authenticating user root 45.148.10.152 port 10686 [preauth]
2026-06-30T03:41:42.844043-05:00 claude-cloud sshd[420269]: Invalid user user from 91.92.40.231 port 42398
2026-06-30T03:41:42.859982-05:00 claude-cloud sshd[420269]: Connection closed by invalid user user 91.92.40.231 port 42398 [preauth]
2026-06-30T03:42:07.740991-05:00 claude-cloud systemd-logind[853]: New session c5163 of user claude.
2026-06-30T03:42:08.043940-05:00 claude-cloud systemd-logind[853]: Session c5163 logged out. Waiting for processes to exit.
2026-06-30T03:42:08.045225-05:00 claude-cloud systemd-logind[853]: Removed session c5163.
2026-06-30T03:43:49.029172-05:00 claude-cloud sshd[420699]: Unable to negotiate with 51.158.205.203 port 53028: no matching host key type found. Their offer: sk-ecdsa-sha2-nistp256@openssh.com [preauth]
2026-06-30T03:43:49.270142-05:00 claude-cloud sshd[420702]: Connection closed by 51.158.205.203 port 52998 [preauth]
2026-06-30T03:43:49.451037-05:00 claude-cloud sshd[420701]: Connection closed by 51.158.205.203 port 53000 [preauth]
2026-06-30T03:43:49.645163-05:00 claude-cloud sshd[420703]: Connection closed by 51.158.205.203 port 53016 [preauth]
2026-06-30T03:43:49.666606-05:00 claude-cloud sshd[420700]: Unable to negotiate with 51.158.205.203 port 53044: no matching host key type found. Their offer: sk-ssh-ed25519@openssh.com [preauth]
2026-06-30T03:44:09.617890-05:00 claude-cloud sshd[420759]: Invalid user debian from 115.248.8.65 port 46698
2026-06-30T03:44:10.329228-05:00 claude-cloud sshd[420759]: Connection closed by invalid user debian 115.248.8.65 port 46698 [preauth]
2026-06-30T03:45:01.556730-05:00 claude-cloud CRON[420915]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-30T03:45:01.562541-05:00 claude-cloud CRON[420915]: pam_unix(cron:session): session closed for user root
2026-06-30T03:45:59.217779-05:00 claude-cloud sshd[421058]: Connection closed by authenticating user root 27.71.230.31 port 54776 [preauth]
2026-06-30T03:46:09.237463-05:00 claude-cloud sshd[421117]: userauth_pubkey: signature algorithm ssh-dss not in PubkeyAcceptedAlgorithms [preauth]
2026-06-30T03:46:09.347355-05:00 claude-cloud sshd[421117]: Received disconnect from 176.65.131.192 port 49928:11: disconnected by user [preauth]
2026-06-30T03:46:09.347638-05:00 claude-cloud sshd[421117]: Disconnected from authenticating user root 176.65.131.192 port 49928 [preauth]
2026-06-30T03:46:29.123271-05:00 claude-cloud sshd[421181]: Connection reset by authenticating user root 45.227.254.170 port 41026 [preauth]
2026-06-30T03:47:11.354383-05:00 claude-cloud systemd-logind[853]: New session c5164 of user claude.
2026-06-30T03:47:11.668230-05:00 claude-cloud systemd-logind[853]: Session c5164 logged out. Waiting for processes to exit.
2026-06-30T03:47:11.670872-05:00 claude-cloud systemd-logind[853]: Removed session c5164.
2026-06-30T03:47:15.227861-05:00 claude-cloud sshd[421307]: Invalid user user from 91.92.40.231 port 33072
2026-06-30T03:47:15.247972-05:00 claude-cloud sshd[421307]: Connection closed by invalid user user 91.92.40.231 port 33072 [preauth]
2026-06-30T03:47:25.714781-05:00 claude-cloud sshd[421330]: Invalid user admin from 2.57.121.25 port 36750
2026-06-30T03:47:25.740910-05:00 claude-cloud sshd[421330]: Connection closed by invalid user admin 2.57.121.25 port 36750 [preauth]
2026-06-30T03:47:55.983898-05:00 claude-cloud sshd[421421]: Invalid user cacti from 115.248.8.65 port 47594
2026-06-30T03:47:56.712702-05:00 claude-cloud sshd[421421]: Connection closed by invalid user cacti 115.248.8.65 port 47594 [preauth]
2026-06-30T03:48:02.985200-05:00 claude-cloud sshd[421455]: Invalid user john from 45.198.224.46 port 38196
2026-06-30T03:48:03.579212-05:00 claude-cloud sshd[421455]: Connection closed by invalid user john 45.198.224.46 port 38196 [preauth]
2026-06-30T03:49:04.251641-05:00 claude-cloud sshd[421625]: Connection closed by authenticating user root 193.46.255.86 port 27962 [preauth]
2026-06-30T03:49:54.870715-05:00 claude-cloud sshd[421771]: Connection closed by 161.35.47.134 port 45968
2026-06-30T03:51:31.556921-05:00 claude-cloud sshd[422036]: Invalid user amssys from 115.248.8.65 port 44534
2026-06-30T03:51:32.036619-05:00 claude-cloud sshd[422036]: Connection closed by invalid user amssys 115.248.8.65 port 44534 [preauth]
2026-06-30T03:51:59.143566-05:00 claude-cloud sshd[422142]: Connection reset by authenticating user root 45.148.10.157 port 46314 [preauth]
2026-06-30T03:52:04.758954-05:00 claude-cloud sshd[422107]: Connection closed by authenticating user root 27.71.230.31 port 44152 [preauth]
2026-06-30T03:52:09.658681-05:00 claude-cloud sshd[422168]: Invalid user admin from 45.148.10.121 port 58526
2026-06-30T03:52:09.673901-05:00 claude-cloud sshd[422168]: Connection closed by invalid user admin 45.148.10.121 port 58526 [preauth]
2026-06-30T03:52:14.927078-05:00 claude-cloud systemd-logind[853]: New session c5165 of user claude.
2026-06-30T03:52:15.217511-05:00 claude-cloud systemd-logind[853]: Session c5165 logged out. Waiting for processes to exit.
2026-06-30T03:52:15.218623-05:00 claude-cloud systemd-logind[853]: Removed session c5165.
2026-06-30T03:52:47.048550-05:00 claude-cloud sshd[422347]: Invalid user user from 91.92.40.231 port 34928
2026-06-30T03:52:47.064990-05:00 claude-cloud sshd[422347]: Connection closed by invalid user user 91.92.40.231 port 34928 [preauth]
2026-06-30T03:53:53.737683-05:00 claude-cloud sshd[422524]: Connection closed by 161.35.47.134 port 58518
2026-06-30T03:55:01.583410-05:00 claude-cloud CRON[422736]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-30T03:55:01.587213-05:00 claude-cloud CRON[422736]: pam_unix(cron:session): session closed for user root
2026-06-30T03:55:17.611975-05:00 claude-cloud sshd[422765]: Invalid user test from 115.248.8.65 port 35384
2026-06-30T03:55:18.273209-05:00 claude-cloud sshd[422765]: Connection closed by invalid user test 115.248.8.65 port 35384 [preauth]
2026-06-30T03:57:18.504598-05:00 claude-cloud systemd-logind[853]: New session c5166 of user claude.
2026-06-30T03:57:18.857594-05:00 claude-cloud systemd-logind[853]: Session c5166 logged out. Waiting for processes to exit.
2026-06-30T03:57:18.859232-05:00 claude-cloud systemd-logind[853]: Removed session c5166.
2026-06-30T03:57:30.593106-05:00 claude-cloud sshd[423161]: Connection reset by authenticating user root 45.148.10.151 port 42448 [preauth]
2026-06-30T03:57:36.978950-05:00 claude-cloud sshd[423170]: Connection closed by authenticating user root 45.198.224.46 port 51754 [preauth]
2026-06-30T03:58:01.103233-05:00 claude-cloud sshd[423191]: Connection closed by authenticating user root 27.71.230.31 port 60208 [preauth]
2026-06-30T03:58:22.508754-05:00 claude-cloud sshd[423304]: Invalid user user from 91.92.40.231 port 36138
2026-06-30T03:58:22.524745-05:00 claude-cloud sshd[423304]: Connection closed by invalid user user 91.92.40.231 port 36138 [preauth]
2026-06-30T03:58:54.361097-05:00 claude-cloud sshd[423404]: Invalid user tester from 115.248.8.65 port 40822
2026-06-30T03:58:54.708038-05:00 claude-cloud sshd[423404]: Connection closed by invalid user tester 115.248.8.65 port 40822 [preauth]
2026-06-30T04:02:22.226124-05:00 claude-cloud systemd-logind[853]: New session c5167 of user claude.
2026-06-30T04:02:22.526061-05:00 claude-cloud systemd-logind[853]: Session c5167 logged out. Waiting for processes to exit.
2026-06-30T04:02:22.528188-05:00 claude-cloud systemd-logind[853]: Removed session c5167.
2026-06-30T04:02:39.462932-05:00 claude-cloud sshd[424042]: Invalid user scanner from 115.248.8.65 port 54390
2026-06-30T04:02:39.904701-05:00 claude-cloud sshd[424042]: Connection closed by invalid user scanner 115.248.8.65 port 54390 [preauth]
2026-06-30T04:03:02.176957-05:00 claude-cloud sshd[424183]: Connection reset by authenticating user root 45.148.10.152 port 57406 [preauth]
2026-06-30T04:03:44.459712-05:00 claude-cloud sshd[424297]: Invalid user ubuntu from 91.92.40.231 port 45872
2026-06-30T04:03:44.478474-05:00 claude-cloud sshd[424297]: Connection closed by invalid user ubuntu 91.92.40.231 port 45872 [preauth]
2026-06-30T04:03:47.496417-05:00 claude-cloud sshd[424269]: Connection closed by authenticating user root 27.71.230.31 port 58394 [preauth]
2026-06-30T04:05:01.600129-05:00 claude-cloud CRON[424531]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-30T04:05:01.606366-05:00 claude-cloud CRON[424531]: pam_unix(cron:session): session closed for user root
2026-06-30T04:06:15.753902-05:00 claude-cloud sshd[424726]: Received disconnect from 64.98.83.243 port 45638:11: Bye Bye [preauth]
2026-06-30T04:06:15.754950-05:00 claude-cloud sshd[424726]: Disconnected from authenticating user root 64.98.83.243 port 45638 [preauth]
2026-06-30T04:06:24.110523-05:00 claude-cloud sshd[424739]: Invalid user rust from 115.248.8.65 port 47282
2026-06-30T04:06:24.556532-05:00 claude-cloud sshd[424739]: Connection closed by invalid user rust 115.248.8.65 port 47282 [preauth]
2026-06-30T04:07:07.768536-05:00 claude-cloud sshd[424879]: Connection closed by authenticating user root 45.198.224.46 port 34166 [preauth]
2026-06-30T04:07:25.758622-05:00 claude-cloud systemd-logind[853]: New session c5168 of user claude.
2026-06-30T04:07:26.041646-05:00 claude-cloud systemd-logind[853]: Session c5168 logged out. Waiting for processes to exit.
2026-06-30T04:07:26.043833-05:00 claude-cloud systemd-logind[853]: Removed session c5168.
2026-06-30T04:08:37.203632-05:00 claude-cloud sshd[425139]: Connection reset by authenticating user root 45.148.10.141 port 60782 [preauth]
2026-06-30T04:09:02.617546-05:00 claude-cloud sshd[425225]: Invalid user ubuntu from 91.92.40.231 port 47182
2026-06-30T04:09:02.634923-05:00 claude-cloud sshd[425225]: Connection closed by invalid user ubuntu 91.92.40.231 port 47182 [preauth]
2026-06-30T04:09:48.724672-05:00 claude-cloud sshd[425321]: Connection closed by authenticating user root 27.71.230.31 port 58752 [preauth]
2026-06-30T04:10:03.098072-05:00 claude-cloud sshd[425385]: Connection closed by authenticating user root 115.248.8.65 port 42522 [preauth]
2026-06-30T04:12:29.292260-05:00 claude-cloud systemd-logind[853]: New session c5169 of user claude.
2026-06-30T04:12:29.610766-05:00 claude-cloud systemd-logind[853]: Session c5169 logged out. Waiting for processes to exit.
2026-06-30T04:12:29.612063-05:00 claude-cloud systemd-logind[853]: Removed session c5169.
2026-06-30T04:13:50.384861-05:00 claude-cloud sshd[426105]: Connection closed by authenticating user root 115.248.8.65 port 39564 [preauth]
2026-06-30T04:14:11.207937-05:00 claude-cloud sshd[426179]: Connection reset by authenticating user root 45.148.10.151 port 19658 [preauth]
2026-06-30T04:14:20.003349-05:00 claude-cloud sshd[426199]: Invalid user ubuntu from 91.92.40.231 port 36974
2026-06-30T04:14:20.019673-05:00 claude-cloud sshd[426199]: Connection closed by invalid user ubuntu 91.92.40.231 port 36974 [preauth]
2026-06-30T04:14:26.863084-05:00 claude-cloud sshd[426212]: Invalid user test from 64.98.83.243 port 51550
2026-06-30T04:14:26.971576-05:00 claude-cloud sshd[426212]: Received disconnect from 64.98.83.243 port 51550:11: Bye Bye [preauth]
2026-06-30T04:14:26.971754-05:00 claude-cloud sshd[426212]: Disconnected from invalid user test 64.98.83.243 port 51550 [preauth]
2026-06-30T04:15:01.625616-05:00 claude-cloud CRON[426331]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-30T04:15:01.631373-05:00 claude-cloud CRON[426331]: pam_unix(cron:session): session closed for user root
2026-06-30T04:15:57.836072-05:00 claude-cloud sshd[426409]: Connection closed by authenticating user root 27.71.230.31 port 56158 [preauth]
2026-06-30T04:16:04.777378-05:00 claude-cloud sshd[426523]: Received disconnect from 64.98.83.243 port 58968:11: Bye Bye [preauth]
2026-06-30T04:16:04.777604-05:00 claude-cloud sshd[426523]: Disconnected from authenticating user root 64.98.83.243 port 58968 [preauth]
2026-06-30T04:16:42.535884-05:00 claude-cloud sshd[426618]: Invalid user cs from 45.198.224.46 port 49786
2026-06-30T04:16:43.242388-05:00 claude-cloud sshd[426618]: Connection closed by invalid user cs 45.198.224.46 port 49786 [preauth]
2026-06-30T04:17:01.640633-05:00 claude-cloud CRON[426676]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-30T04:17:01.647835-05:00 claude-cloud CRON[426676]: pam_unix(cron:session): session closed for user root
2026-06-30T04:17:33.186069-05:00 claude-cloud systemd-logind[853]: New session c5170 of user claude.
2026-06-30T04:17:33.485248-05:00 claude-cloud systemd-logind[853]: Session c5170 logged out. Waiting for processes to exit.
2026-06-30T04:17:33.486703-05:00 claude-cloud systemd-logind[853]: Removed session c5170.
2026-06-30T04:17:33.510032-05:00 claude-cloud sshd[426772]: Connection closed by authenticating user root 185.242.3.195 port 38654 [preauth]
2026-06-30T04:17:35.036778-05:00 claude-cloud sshd[426748]: Connection closed by authenticating user root 115.248.8.65 port 46044 [preauth]
2026-06-30T04:17:47.429685-05:00 claude-cloud sshd[426826]: Invalid user demo from 64.98.83.243 port 51304
2026-06-30T04:17:47.542740-05:00 claude-cloud sshd[426826]: Received disconnect from 64.98.83.243 port 51304:11: Bye Bye [preauth]
2026-06-30T04:17:47.542991-05:00 claude-cloud sshd[426826]: Disconnected from invalid user demo 64.98.83.243 port 51304 [preauth]
2026-06-30T04:19:29.928333-05:00 claude-cloud sshd[427104]: Received disconnect from 64.98.83.243 port 54448:11: Bye Bye [preauth]
2026-06-30T04:19:29.929028-05:00 claude-cloud sshd[427104]: Disconnected from authenticating user root 64.98.83.243 port 54448 [preauth]
2026-06-30T04:19:36.191420-05:00 claude-cloud sshd[427132]: Invalid user ubuntu from 91.92.40.231 port 49226
2026-06-30T04:19:36.207512-05:00 claude-cloud sshd[427132]: Connection closed by invalid user ubuntu 91.92.40.231 port 49226 [preauth]
2026-06-30T04:19:43.636194-05:00 claude-cloud sshd[427153]: Connection reset by authenticating user root 45.227.254.170 port 17636 [preauth]
2026-06-30T04:21:07.859242-05:00 claude-cloud sshd[427402]: Received disconnect from 64.98.83.243 port 47540:11: Bye Bye [preauth]
2026-06-30T04:21:07.859930-05:00 claude-cloud sshd[427402]: Disconnected from authenticating user root 64.98.83.243 port 47540 [preauth]
2026-06-30T04:21:12.963073-05:00 claude-cloud sshd[427404]: Connection closed by authenticating user root 115.248.8.65 port 55926 [preauth]
2026-06-30T04:21:36.191183-05:00 claude-cloud sshd[427440]: Connection closed by authenticating user root 27.71.230.31 port 38330 [preauth]
2026-06-30T04:22:36.751499-05:00 claude-cloud systemd-logind[853]: New session c5171 of user claude.
2026-06-30T04:22:37.060810-05:00 claude-cloud systemd-logind[853]: Session c5171 logged out. Waiting for processes to exit.
2026-06-30T04:22:37.063906-05:00 claude-cloud systemd-logind[853]: Removed session c5171.
2026-06-30T04:22:39.705737-05:00 claude-cloud sshd[427674]: Invalid user username from 64.98.83.243 port 47346
2026-06-30T04:22:39.815860-05:00 claude-cloud sshd[427674]: Received disconnect from 64.98.83.243 port 47346:11: Bye Bye [preauth]
2026-06-30T04:22:39.816075-05:00 claude-cloud sshd[427674]: Disconnected from invalid user username 64.98.83.243 port 47346 [preauth]
2026-06-30T04:23:06.399043-05:00 claude-cloud sshd[427751]: banner exchange: Connection from 3.132.26.232 port 18474: invalid format
2026-06-30T04:23:52.524558-05:00 claude-cloud sshd[427940]: Invalid user admin from 34.38.145.239 port 20212
2026-06-30T04:23:52.543464-05:00 claude-cloud sshd[427940]: Connection closed by invalid user admin 34.38.145.239 port 20212 [preauth]
2026-06-30T04:23:55.854258-05:00 claude-cloud sshd[427950]: Connection closed by 104.199.71.189 port 50268
2026-06-30T04:23:58.234353-05:00 claude-cloud sshd[427938]: Connection closed by 34.38.145.239 port 20198 [preauth]
2026-06-30T04:24:14.688746-05:00 claude-cloud sshd[428007]: Received disconnect from 64.98.83.243 port 35460:11: Bye Bye [preauth]
2026-06-30T04:24:14.689057-05:00 claude-cloud sshd[428007]: Disconnected from authenticating user root 64.98.83.243 port 35460 [preauth]
2026-06-30T04:24:17.967094-05:00 claude-cloud sshd[428016]: Connection closed by 3.132.26.232 port 57700 [preauth]
2026-06-30T04:24:58.708140-05:00 claude-cloud sshd[428110]: Connection closed by authenticating user root 115.248.8.65 port 58572 [preauth]
2026-06-30T04:25:01.658573-05:00 claude-cloud CRON[428144]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-30T04:25:01.668119-05:00 claude-cloud CRON[428144]: pam_unix(cron:session): session closed for user root
2026-06-30T04:25:08.495987-05:00 claude-cloud sshd[428157]: Invalid user ubuntu from 91.92.40.231 port 34600
2026-06-30T04:25:08.512344-05:00 claude-cloud sshd[428157]: Connection closed by invalid user ubuntu 91.92.40.231 port 34600 [preauth]
2026-06-30T04:25:17.205763-05:00 claude-cloud sshd[428182]: Connection reset by authenticating user root 45.148.10.157 port 8400 [preauth]
2026-06-30T04:25:50.652883-05:00 claude-cloud sshd[428302]: Invalid user deploy from 64.98.83.243 port 35428
2026-06-30T04:25:50.762411-05:00 claude-cloud sshd[428302]: Received disconnect from 64.98.83.243 port 35428:11: Bye Bye [preauth]
2026-06-30T04:25:50.762817-05:00 claude-cloud sshd[428302]: Disconnected from invalid user deploy 64.98.83.243 port 35428 [preauth]
2026-06-30T04:26:08.781256-05:00 claude-cloud sshd[428362]: Connection closed by authenticating user root 45.198.224.46 port 36910 [preauth]
2026-06-30T04:27:24.146951-05:00 claude-cloud sshd[428558]: Received disconnect from 64.98.83.243 port 41706:11: Bye Bye [preauth]
2026-06-30T04:27:24.147577-05:00 claude-cloud sshd[428558]: Disconnected from authenticating user root 64.98.83.243 port 41706 [preauth]
2026-06-30T04:27:40.347426-05:00 claude-cloud systemd-logind[853]: New session c5172 of user claude.
2026-06-30T04:27:40.664055-05:00 claude-cloud systemd-logind[853]: Session c5172 logged out. Waiting for processes to exit.
2026-06-30T04:27:40.665300-05:00 claude-cloud systemd-logind[853]: Removed session c5172.
2026-06-30T04:28:18.863395-05:00 claude-cloud sshd[428560]: Connection closed by authenticating user root 27.71.230.31 port 44792 [preauth]
2026-06-30T04:28:46.053262-05:00 claude-cloud sshd[428824]: Connection closed by authenticating user root 115.248.8.65 port 34968 [preauth]
2026-06-30T04:28:58.068234-05:00 claude-cloud sshd[428865]: Received disconnect from 64.98.83.243 port 59702:11: Bye Bye [preauth]
2026-06-30T04:28:58.068676-05:00 claude-cloud sshd[428865]: Disconnected from authenticating user root 64.98.83.243 port 59702 [preauth]
2026-06-30T04:30:23.237818-05:00 claude-cloud sshd[429129]: Connection closed by 161.35.47.134 port 43380
2026-06-30T04:30:35.816373-05:00 claude-cloud sshd[429177]: Invalid user ubuntu from 91.92.40.231 port 37046
2026-06-30T04:30:35.831631-05:00 claude-cloud sshd[429177]: Connection closed by invalid user ubuntu 91.92.40.231 port 37046 [preauth]
2026-06-30T04:30:39.618090-05:00 claude-cloud sshd[429189]: Received disconnect from 64.98.83.243 port 37982:11: Bye Bye [preauth]
2026-06-30T04:30:39.618494-05:00 claude-cloud sshd[429189]: Disconnected from authenticating user root 64.98.83.243 port 37982 [preauth]
2026-06-30T04:30:52.025346-05:00 claude-cloud sshd[429218]: Connection reset by authenticating user root 62.60.130.219 port 65318 [preauth]
2026-06-30T04:32:25.763438-05:00 claude-cloud sshd[429508]: Invalid user postgres from 64.98.83.243 port 43350
2026-06-30T04:32:25.875157-05:00 claude-cloud sshd[429508]: Received disconnect from 64.98.83.243 port 43350:11: Bye Bye [preauth]
2026-06-30T04:32:25.875591-05:00 claude-cloud sshd[429508]: Disconnected from invalid user postgres 64.98.83.243 port 43350 [preauth]
2026-06-30T04:32:27.464215-05:00 claude-cloud sshd[429499]: Connection closed by authenticating user root 115.248.8.65 port 39624 [preauth]
2026-06-30T04:32:30.615836-05:00 claude-cloud sshd[429534]: Invalid user AdminGPON from 45.148.10.121 port 32978
2026-06-30T04:32:30.628745-05:00 claude-cloud sshd[429534]: Connection closed by invalid user AdminGPON 45.148.10.121 port 32978 [preauth]
2026-06-30T04:32:44.012885-05:00 claude-cloud systemd-logind[853]: New session c5173 of user claude.
2026-06-30T04:32:44.320534-05:00 claude-cloud systemd-logind[853]: Session c5173 logged out. Waiting for processes to exit.
2026-06-30T04:32:44.322297-05:00 claude-cloud systemd-logind[853]: Removed session c5173.
2026-06-30T04:34:04.962706-05:00 claude-cloud sshd[429819]: Received disconnect from 64.98.83.243 port 43878:11: Bye Bye [preauth]
2026-06-30T04:34:04.963178-05:00 claude-cloud sshd[429819]: Disconnected from authenticating user root 64.98.83.243 port 43878 [preauth]
2026-06-30T04:34:14.392349-05:00 claude-cloud sshd[429679]: Connection closed by authenticating user root 27.71.230.31 port 54012 [preauth]
2026-06-30T04:35:01.678191-05:00 claude-cloud CRON[430059]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-30T04:35:01.684845-05:00 claude-cloud CRON[430059]: pam_unix(cron:session): session closed for user root
2026-06-30T04:35:31.879190-05:00 claude-cloud sshd[430130]: Connection closed by authenticating user root 45.198.224.46 port 48238 [preauth]
2026-06-30T04:35:41.163448-05:00 claude-cloud sshd[430168]: Invalid user testuser from 64.98.83.243 port 46108
2026-06-30T04:35:41.278298-05:00 claude-cloud sshd[430168]: Received disconnect from 64.98.83.243 port 46108:11: Bye Bye [preauth]
2026-06-30T04:35:41.278842-05:00 claude-cloud sshd[430168]: Disconnected from invalid user testuser 64.98.83.243 port 46108 [preauth]
2026-06-30T04:36:14.897457-05:00 claude-cloud sshd[430271]: Invalid user ubuntu from 91.92.40.231 port 38226
2026-06-30T04:36:14.912645-05:00 claude-cloud sshd[430271]: Connection closed by invalid user ubuntu 91.92.40.231 port 38226 [preauth]
2026-06-30T04:36:15.117111-05:00 claude-cloud sshd[430256]: Connection closed by authenticating user root 115.248.8.65 port 49750 [preauth]
2026-06-30T04:36:27.566730-05:00 claude-cloud sshd[430297]: Connection reset by authenticating user root 45.148.10.157 port 11306 [preauth]
2026-06-30T04:36:32.642727-05:00 claude-cloud sshd[430317]: Received disconnect from 168.197.250.14 port 38214:11: disconnected by user [preauth]
2026-06-30T04:36:32.643381-05:00 claude-cloud sshd[430317]: Disconnected from authenticating user root 168.197.250.14 port 38214 [preauth]
2026-06-30T04:37:12.574003-05:00 claude-cloud sshd[430463]: Received disconnect from 210.245.20.230 port 33516:11: Bye Bye [preauth]
2026-06-30T04:37:12.574872-05:00 claude-cloud sshd[430463]: Disconnected from authenticating user root 210.245.20.230 port 33516 [preauth]
2026-06-30T04:37:48.577231-05:00 claude-cloud systemd-logind[853]: New session c5174 of user claude.
2026-06-30T04:37:48.876249-05:00 claude-cloud systemd-logind[853]: Session c5174 logged out. Waiting for processes to exit.
2026-06-30T04:37:48.878473-05:00 claude-cloud systemd-logind[853]: Removed session c5174.
2026-06-30T04:39:53.267924-05:00 claude-cloud sshd[430932]: Connection closed by authenticating user root 115.248.8.65 port 40064 [preauth]
2026-06-30T04:40:25.413966-05:00 claude-cloud sshd[431027]: Invalid user admin from 193.46.255.86 port 46546
2026-06-30T04:40:25.439417-05:00 claude-cloud sshd[431027]: Connection closed by invalid user admin 193.46.255.86 port 46546 [preauth]
2026-06-30T04:41:20.183170-05:00 claude-cloud sshd[431197]: Received disconnect from 210.245.20.230 port 50886:11: Bye Bye [preauth]
2026-06-30T04:41:20.183802-05:00 claude-cloud sshd[431197]: Disconnected from authenticating user root 210.245.20.230 port 50886 [preauth]
2026-06-30T04:41:47.350238-05:00 claude-cloud sshd[431301]: Invalid user ubuntu from 91.92.40.231 port 50410
2026-06-30T04:41:47.365388-05:00 claude-cloud sshd[431301]: Connection closed by invalid user ubuntu 91.92.40.231 port 50410 [preauth]
2026-06-30T04:41:57.190127-05:00 claude-cloud sshd[431328]: Received disconnect from 176.65.131.192 port 41788:11: disconnected by user [preauth]
2026-06-30T04:41:57.190405-05:00 claude-cloud sshd[431328]: Disconnected from authenticating user root 176.65.131.192 port 41788 [preauth]
2026-06-30T04:42:03.495405-05:00 claude-cloud sshd[431342]: Connection reset by authenticating user root 45.148.10.147 port 18632 [preauth]
2026-06-30T04:42:52.353965-05:00 claude-cloud systemd-logind[853]: New session c5175 of user claude.
2026-06-30T04:42:52.625195-05:00 claude-cloud systemd-logind[853]: Session c5175 logged out. Waiting for processes to exit.
2026-06-30T04:42:52.627798-05:00 claude-cloud systemd-logind[853]: Removed session c5175.
2026-06-30T04:43:09.459351-05:00 claude-cloud sshd[431551]: Received disconnect from 210.245.20.230 port 56484:11: Bye Bye [preauth]
2026-06-30T04:43:09.460008-05:00 claude-cloud sshd[431551]: Disconnected from authenticating user root 210.245.20.230 port 56484 [preauth]
2026-06-30T04:43:38.258246-05:00 claude-cloud sshd[431619]: Connection closed by authenticating user root 115.248.8.65 port 41548 [preauth]
2026-06-30T04:44:02.275834-05:00 claude-cloud sshd[431717]: Invalid user kaylene from 2.57.121.112 port 52250
2026-06-30T04:44:02.301610-05:00 claude-cloud sshd[431717]: Connection closed by invalid user kaylene 2.57.121.112 port 52250 [preauth]
2026-06-30T04:44:59.854892-05:00 claude-cloud sshd[431947]: Invalid user admin from 2.57.121.25 port 7052
2026-06-30T04:44:59.880752-05:00 claude-cloud sshd[431947]: Connection closed by invalid user admin 2.57.121.25 port 7052 [preauth]
2026-06-30T04:45:01.281910-05:00 claude-cloud sshd[431946]: Invalid user sophie from 45.198.224.46 port 40982
2026-06-30T04:45:01.696129-05:00 claude-cloud CRON[431955]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-30T04:45:01.702952-05:00 claude-cloud CRON[431955]: pam_unix(cron:session): session closed for user root
2026-06-30T04:45:01.839138-05:00 claude-cloud sshd[431946]: Connection closed by invalid user sophie 45.198.224.46 port 40982 [preauth]
2026-06-30T04:45:02.119790-05:00 claude-cloud sshd[431953]: Received disconnect from 210.245.20.230 port 33858:11: Bye Bye [preauth]
2026-06-30T04:45:02.120067-05:00 claude-cloud sshd[431953]: Disconnected from authenticating user root 210.245.20.230 port 33858 [preauth]
2026-06-30T04:45:30.536060-05:00 claude-cloud sshd[431994]: Connection closed by authenticating user root 27.71.230.31 port 39330 [preauth]
2026-06-30T04:46:13.958118-05:00 claude-cloud sshd[432172]: Connection closed by authenticating user root 167.233.84.171 port 45170 [preauth]
2026-06-30T04:46:52.083776-05:00 claude-cloud sshd[432290]: Received disconnect from 210.245.20.230 port 39474:11: Bye Bye [preauth]
2026-06-30T04:46:52.084761-05:00 claude-cloud sshd[432290]: Disconnected from authenticating user root 210.245.20.230 port 39474 [preauth]
2026-06-30T04:47:21.976885-05:00 claude-cloud sshd[432361]: Connection closed by authenticating user root 115.248.8.65 port 55218 [preauth]
2026-06-30T04:47:36.952689-05:00 claude-cloud sshd[432421]: Invalid user guest from 91.92.40.231 port 41006
2026-06-30T04:47:36.968742-05:00 claude-cloud sshd[432421]: Connection closed by invalid user guest 91.92.40.231 port 41006 [preauth]
2026-06-30T04:47:38.570110-05:00 claude-cloud sshd[432423]: Connection closed by 161.35.47.134 port 50350
2026-06-30T04:47:41.876435-05:00 claude-cloud sshd[432437]: Connection reset by authenticating user root 45.148.10.152 port 47270 [preauth]
2026-06-30T04:47:56.141725-05:00 claude-cloud systemd-logind[853]: New session c5176 of user claude.
2026-06-30T04:47:56.425552-05:00 claude-cloud systemd-logind[853]: Session c5176 logged out. Waiting for processes to exit.
2026-06-30T04:47:56.427907-05:00 claude-cloud systemd-logind[853]: Removed session c5176.
2026-06-30T04:48:42.813971-05:00 claude-cloud sshd[432634]: Received disconnect from 210.245.20.230 port 45138:11: Bye Bye [preauth]
2026-06-30T04:48:42.814509-05:00 claude-cloud sshd[432634]: Disconnected from authenticating user root 210.245.20.230 port 45138 [preauth]
2026-06-30T04:50:33.952341-05:00 claude-cloud sshd[432945]: Received disconnect from 210.245.20.230 port 50758:11: Bye Bye [preauth]
2026-06-30T04:50:33.952834-05:00 claude-cloud sshd[432945]: Disconnected from authenticating user root 210.245.20.230 port 50758 [preauth]
2026-06-30T04:50:59.120513-05:00 claude-cloud sshd[433029]: Connection closed by authenticating user root 115.248.8.65 port 54378 [preauth]
2026-06-30T04:52:23.374521-05:00 claude-cloud sshd[433287]: Received disconnect from 210.245.20.230 port 56364:11: Bye Bye [preauth]
2026-06-30T04:52:23.375047-05:00 claude-cloud sshd[433287]: Disconnected from authenticating user root 210.245.20.230 port 56364 [preauth]
2026-06-30T04:52:59.788731-05:00 claude-cloud systemd-logind[853]: New session c5177 of user claude.
2026-06-30T04:53:00.128957-05:00 claude-cloud systemd-logind[853]: Session c5177 logged out. Waiting for processes to exit.
2026-06-30T04:53:00.130921-05:00 claude-cloud systemd-logind[853]: Removed session c5177.
2026-06-30T04:53:23.352321-05:00 claude-cloud sshd[433502]: Connection reset by authenticating user root 62.60.130.219 port 3048 [preauth]
2026-06-30T04:53:28.045493-05:00 claude-cloud sshd[433517]: Invalid user guest from 91.92.40.231 port 56688
2026-06-30T04:53:28.061352-05:00 claude-cloud sshd[433517]: Connection closed by invalid user guest 91.92.40.231 port 56688 [preauth]
2026-06-30T04:54:08.570932-05:00 claude-cloud sshd[433632]: Received disconnect from 210.245.20.230 port 33736:11: Bye Bye [preauth]
2026-06-30T04:54:08.571369-05:00 claude-cloud sshd[433632]: Disconnected from authenticating user root 210.245.20.230 port 33736 [preauth]
2026-06-30T04:54:29.233739-05:00 claude-cloud sshd[433686]: Invalid user ubuntu from 45.198.224.46 port 37488
2026-06-30T04:54:29.869645-05:00 claude-cloud sshd[433686]: Connection closed by invalid user ubuntu 45.198.224.46 port 37488 [preauth]
2026-06-30T04:54:42.482855-05:00 claude-cloud sshd[433719]: Connection closed by authenticating user root 115.248.8.65 port 48236 [preauth]
2026-06-30T04:55:01.715712-05:00 claude-cloud CRON[433865]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-30T04:55:01.721417-05:00 claude-cloud CRON[433865]: pam_unix(cron:session): session closed for user root
2026-06-30T04:55:56.329618-05:00 claude-cloud sshd[434017]: Received disconnect from 210.245.20.230 port 39358:11: Bye Bye [preauth]
2026-06-30T04:55:56.333199-05:00 claude-cloud sshd[434017]: Disconnected from authenticating user root 210.245.20.230 port 39358 [preauth]
2026-06-30T04:57:22.129727-05:00 claude-cloud sshd[434229]: Connection closed by authenticating user root 27.71.230.31 port 45666 [preauth]
2026-06-30T04:57:47.636491-05:00 claude-cloud sshd[434345]: Received disconnect from 210.245.20.230 port 44932:11: Bye Bye [preauth]
2026-06-30T04:57:47.636824-05:00 claude-cloud sshd[434345]: Disconnected from authenticating user root 210.245.20.230 port 44932 [preauth]
2026-06-30T04:58:03.722823-05:00 claude-cloud systemd-logind[853]: New session c5178 of user claude.
2026-06-30T04:58:04.044506-05:00 claude-cloud systemd-logind[853]: Session c5178 logged out. Waiting for processes to exit.
2026-06-30T04:58:04.047159-05:00 claude-cloud systemd-logind[853]: Removed session c5178.
2026-06-30T04:58:29.664784-05:00 claude-cloud sshd[434480]: Connection closed by authenticating user root 115.248.8.65 port 32792 [preauth]
2026-06-30T04:59:03.054624-05:00 claude-cloud sshd[434604]: Connection reset by authenticating user root 45.148.10.151 port 19072 [preauth]
2026-06-30T04:59:36.832844-05:00 claude-cloud sshd[434697]: Received disconnect from 210.245.20.230 port 50678:11: Bye Bye [preauth]
2026-06-30T04:59:36.833680-05:00 claude-cloud sshd[434697]: Disconnected from authenticating user root 210.245.20.230 port 50678 [preauth]
2026-06-30T04:59:45.112770-05:00 claude-cloud sshd[434728]: Invalid user guest from 91.92.40.231 port 36656
2026-06-30T04:59:45.130050-05:00 claude-cloud sshd[434728]: Connection closed by invalid user guest 91.92.40.231 port 36656 [preauth]
2026-06-30T05:01:25.168484-05:00 claude-cloud sshd[435028]: Received disconnect from 210.245.20.230 port 56370:11: Bye Bye [preauth]
2026-06-30T05:01:25.169545-05:00 claude-cloud sshd[435028]: Disconnected from authenticating user root 210.245.20.230 port 56370 [preauth]
2026-06-30T05:02:16.985989-05:00 claude-cloud sshd[435169]: Connection closed by authenticating user root 115.248.8.65 port 43046 [preauth]
2026-06-30T05:02:58.328244-05:00 claude-cloud sshd[435319]: Connection closed by 161.35.47.134 port 54422
2026-06-30T05:03:04.575724-05:00 claude-cloud sshd[435304]: Connection closed by authenticating user root 27.71.230.31 port 50170 [preauth]
2026-06-30T05:03:07.629788-05:00 claude-cloud systemd-logind[853]: New session c5179 of user claude.
2026-06-30T05:03:07.993602-05:00 claude-cloud systemd-logind[853]: Session c5179 logged out. Waiting for processes to exit.
2026-06-30T05:03:07.995405-05:00 claude-cloud systemd-logind[853]: Removed session c5179.
2026-06-30T05:03:18.221234-05:00 claude-cloud sshd[435384]: Received disconnect from 210.245.20.230 port 34176:11: Bye Bye [preauth]
2026-06-30T05:03:18.221794-05:00 claude-cloud sshd[435384]: Disconnected from authenticating user root 210.245.20.230 port 34176 [preauth]
2026-06-30T05:03:47.773240-05:00 claude-cloud sshd[435457]: Invalid user usuario from 45.198.224.46 port 57806
2026-06-30T05:03:48.510498-05:00 claude-cloud sshd[435457]: Connection closed by invalid user usuario 45.198.224.46 port 57806 [preauth]
2026-06-30T05:05:01.734841-05:00 claude-cloud CRON[435733]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-30T05:05:01.739373-05:00 claude-cloud CRON[435733]: pam_unix(cron:session): session closed for user root
2026-06-30T05:05:08.585763-05:00 claude-cloud sshd[435762]: Received disconnect from 210.245.20.230 port 40868:11: Bye Bye [preauth]
2026-06-30T05:05:08.586018-05:00 claude-cloud sshd[435762]: Disconnected from authenticating user root 210.245.20.230 port 40868 [preauth]
2026-06-30T05:05:58.002040-05:00 claude-cloud sshd[435882]: Connection closed by authenticating user root 115.248.8.65 port 39162 [preauth]
2026-06-30T05:06:11.090174-05:00 claude-cloud sshd[435944]: Invalid user guest from 91.92.40.231 port 38718
2026-06-30T05:06:11.109910-05:00 claude-cloud sshd[435944]: Connection closed by invalid user guest 91.92.40.231 port 38718 [preauth]
2026-06-30T05:07:16.023509-05:00 claude-cloud sshd[436125]: Connection closed by authenticating user root 45.148.10.121 port 43984 [preauth]
2026-06-30T05:08:11.313875-05:00 claude-cloud systemd-logind[853]: New session c5180 of user claude.
2026-06-30T05:08:11.602668-05:00 claude-cloud systemd-logind[853]: Session c5180 logged out. Waiting for processes to exit.
2026-06-30T05:08:11.604960-05:00 claude-cloud systemd-logind[853]: Removed session c5180.
2026-06-30T05:08:55.688912-05:00 claude-cloud sshd[436410]: Connection closed by authenticating user root 27.71.230.31 port 49618 [preauth]
2026-06-30T05:09:38.646577-05:00 claude-cloud sshd[436538]: Connection closed by authenticating user root 115.248.8.65 port 58394 [preauth]
2026-06-30T05:12:21.083028-05:00 claude-cloud sshd[437024]: Invalid user guest from 91.92.40.231 port 53480
2026-06-30T05:12:21.098443-05:00 claude-cloud sshd[437024]: Connection closed by invalid user guest 91.92.40.231 port 53480 [preauth]
2026-06-30T05:13:15.494415-05:00 claude-cloud systemd-logind[853]: New session c5181 of user claude.
2026-06-30T05:13:15.820038-05:00 claude-cloud systemd-logind[853]: Session c5181 logged out. Waiting for processes to exit.
2026-06-30T05:13:15.823472-05:00 claude-cloud systemd-logind[853]: Removed session c5181.
2026-06-30T05:13:23.269995-05:00 claude-cloud sshd[437203]: Connection closed by authenticating user root 115.248.8.65 port 59580 [preauth]
2026-06-30T05:13:23.313830-05:00 claude-cloud sshd[437212]: Invalid user ubuntu from 45.198.224.46 port 33496
2026-06-30T05:13:23.906818-05:00 claude-cloud sshd[437212]: Connection closed by invalid user ubuntu 45.198.224.46 port 33496 [preauth]
2026-06-30T05:15:01.755085-05:00 claude-cloud CRON[437525]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-30T05:15:01.763294-05:00 claude-cloud CRON[437525]: pam_unix(cron:session): session closed for user root
2026-06-30T05:15:18.541965-05:00 claude-cloud sshd[437480]: Connection closed by authenticating user root 27.71.230.31 port 40048 [preauth]
2026-06-30T05:17:01.599717-05:00 claude-cloud sshd[437899]: Connection closed by authenticating user root 115.248.8.65 port 37814 [preauth]
2026-06-30T05:17:01.776896-05:00 claude-cloud CRON[437931]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-30T05:17:01.783658-05:00 claude-cloud CRON[437931]: pam_unix(cron:session): session closed for user root
2026-06-30T05:18:19.217380-05:00 claude-cloud systemd-logind[853]: New session c5182 of user claude.
2026-06-30T05:18:19.486514-05:00 claude-cloud systemd-logind[853]: Session c5182 logged out. Waiting for processes to exit.
2026-06-30T05:18:19.487408-05:00 claude-cloud systemd-logind[853]: Removed session c5182.
2026-06-30T05:18:31.250918-05:00 claude-cloud sshd[438189]: Invalid user guest from 91.92.40.231 port 60054
2026-06-30T05:18:31.265975-05:00 claude-cloud sshd[438189]: Connection closed by invalid user guest 91.92.40.231 port 60054 [preauth]
2026-06-30T05:20:45.732573-05:00 claude-cloud sshd[438573]: Connection closed by authenticating user root 115.248.8.65 port 33144 [preauth]
2026-06-30T05:20:50.646180-05:00 claude-cloud sshd[438568]: Connection closed by authenticating user root 27.71.230.31 port 52850 [preauth]
2026-06-30T05:21:50.756995-05:00 claude-cloud sshd[438780]: userauth_pubkey: signature algorithm ssh-dss not in PubkeyAcceptedAlgorithms [preauth]
2026-06-30T05:21:50.946640-05:00 claude-cloud sshd[438780]: Received disconnect from 64.31.53.170 port 49846:11: disconnected by user [preauth]
2026-06-30T05:21:50.946976-05:00 claude-cloud sshd[438780]: Disconnected from authenticating user root 64.31.53.170 port 49846 [preauth]
2026-06-30T05:22:47.477964-05:00 claude-cloud sshd[438927]: Invalid user ubuntu from 45.198.224.46 port 59320
2026-06-30T05:22:48.168753-05:00 claude-cloud sshd[438927]: Connection closed by invalid user ubuntu 45.198.224.46 port 59320 [preauth]
2026-06-30T05:23:22.701089-05:00 claude-cloud systemd-logind[853]: New session c5183 of user claude.
2026-06-30T05:23:23.048371-05:00 claude-cloud systemd-logind[853]: Session c5183 logged out. Waiting for processes to exit.
2026-06-30T05:23:23.049650-05:00 claude-cloud systemd-logind[853]: Removed session c5183.
2026-06-30T05:23:56.073080-05:00 claude-cloud sshd[439131]: error: kex_exchange_identification: read: Connection reset by peer
2026-06-30T05:23:56.073797-05:00 claude-cloud sshd[439131]: Connection reset by 141.11.88.122 port 50548
2026-06-30T05:24:27.083503-05:00 claude-cloud sshd[439232]: Connection closed by authenticating user root 115.248.8.65 port 53190 [preauth]
2026-06-30T05:24:52.569726-05:00 claude-cloud sshd[439312]: Invalid user guest from 91.92.40.231 port 35386
2026-06-30T05:24:52.587499-05:00 claude-cloud sshd[439312]: Connection closed by invalid user guest 91.92.40.231 port 35386 [preauth]
2026-06-30T05:25:01.796402-05:00 claude-cloud CRON[439340]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-30T05:25:01.802871-05:00 claude-cloud CRON[439340]: pam_unix(cron:session): session closed for user root
2026-06-30T05:26:51.867881-05:00 claude-cloud sshd[439675]: Connection closed by authenticating user root 27.71.230.31 port 55660 [preauth]
2026-06-30T05:27:48.612836-05:00 claude-cloud sshd[439873]: Received disconnect from 103.149.26.43 port 59062:11: disconnected by user [preauth]
2026-06-30T05:27:48.613489-05:00 claude-cloud sshd[439873]: Disconnected from authenticating user root 103.149.26.43 port 59062 [preauth]
2026-06-30T05:28:07.032735-05:00 claude-cloud sshd[439918]: Connection closed by authenticating user root 115.248.8.65 port 42366 [preauth]
2026-06-30T05:28:26.216146-05:00 claude-cloud systemd-logind[853]: New session c5184 of user claude.
2026-06-30T05:28:26.540751-05:00 claude-cloud systemd-logind[853]: Session c5184 logged out. Waiting for processes to exit.
2026-06-30T05:28:26.542245-05:00 claude-cloud systemd-logind[853]: Removed session c5184.
2026-06-30T05:30:20.485213-05:00 claude-cloud sshd[440313]: Connection closed by 185.235.198.56 port 21486
2026-06-30T05:30:26.631986-05:00 claude-cloud sshd[440325]: error: maximum authentication attempts exceeded for root from 193.163.187.75 port 41386 ssh2 [preauth]
2026-06-30T05:30:26.632833-05:00 claude-cloud sshd[440325]: Disconnecting authenticating user root 193.163.187.75 port 41386: Too many authentication failures [preauth]
2026-06-30T05:30:28.816035-05:00 claude-cloud sshd[440337]: error: maximum authentication attempts exceeded for root from 193.163.187.75 port 41534 ssh2 [preauth]
2026-06-30T05:30:28.816338-05:00 claude-cloud sshd[440337]: Disconnecting authenticating user root 193.163.187.75 port 41534: Too many authentication failures [preauth]
2026-06-30T05:30:32.213505-05:00 claude-cloud sshd[440345]: error: maximum authentication attempts exceeded for root from 193.163.187.75 port 41662 ssh2 [preauth]
2026-06-30T05:30:32.213847-05:00 claude-cloud sshd[440345]: Disconnecting authenticating user root 193.163.187.75 port 41662: Too many authentication failures [preauth]
2026-06-30T05:30:34.563140-05:00 claude-cloud sshd[440365]: Received disconnect from 193.163.187.75 port 41874:11: disconnected by user [preauth]
2026-06-30T05:30:34.563404-05:00 claude-cloud sshd[440365]: Disconnected from authenticating user root 193.163.187.75 port 41874 [preauth]
2026-06-30T05:30:36.533825-05:00 claude-cloud sshd[440370]: Invalid user admin from 193.163.187.75 port 42010
2026-06-30T05:30:36.758893-05:00 claude-cloud sshd[440370]: error: maximum authentication attempts exceeded for invalid user admin from 193.163.187.75 port 42010 ssh2 [preauth]
2026-06-30T05:30:36.759105-05:00 claude-cloud sshd[440370]: Disconnecting invalid user admin 193.163.187.75 port 42010: Too many authentication failures [preauth]
2026-06-30T05:31:35.586672-05:00 claude-cloud sshd[440557]: Invalid user ftpuser from 193.46.255.86 port 41872
2026-06-30T05:31:35.612855-05:00 claude-cloud sshd[440557]: Connection closed by invalid user ftpuser 193.46.255.86 port 41872 [preauth]
2026-06-30T05:31:48.579738-05:00 claude-cloud sshd[440600]: Connection closed by authenticating user root 115.248.8.65 port 53296 [preauth]
2026-06-30T05:31:48.988057-05:00 claude-cloud sshd[440609]: Invalid user guest from 91.92.40.231 port 36322
2026-06-30T05:31:49.005948-05:00 claude-cloud sshd[440609]: Connection closed by invalid user guest 91.92.40.231 port 36322 [preauth]
2026-06-30T05:32:15.749386-05:00 claude-cloud sshd[440677]: Invalid user ubuntu from 45.198.224.46 port 50170
2026-06-30T05:32:16.648482-05:00 claude-cloud sshd[440677]: Connection closed by invalid user ubuntu 45.198.224.46 port 50170 [preauth]
2026-06-30T05:32:44.997553-05:00 claude-cloud sshd[440735]: Connection closed by authenticating user root 27.71.230.31 port 47666 [preauth]
2026-06-30T05:33:25.464013-05:00 claude-cloud sshd[440859]: Received disconnect from 51.79.99.235 port 40736:11: disconnected by user [preauth]
2026-06-30T05:33:25.464444-05:00 claude-cloud sshd[440859]: Disconnected from authenticating user root 51.79.99.235 port 40736 [preauth]
2026-06-30T05:33:30.132947-05:00 claude-cloud systemd-logind[853]: New session c5185 of user claude.
2026-06-30T05:33:30.514638-05:00 claude-cloud systemd-logind[853]: Session c5185 logged out. Waiting for processes to exit.
2026-06-30T05:33:30.517293-05:00 claude-cloud systemd-logind[853]: Removed session c5185.
2026-06-30T05:35:01.815023-05:00 claude-cloud CRON[441169]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-30T05:35:01.821051-05:00 claude-cloud CRON[441169]: pam_unix(cron:session): session closed for user root
2026-06-30T05:35:28.450638-05:00 claude-cloud sshd[441216]: Connection closed by authenticating user root 115.248.8.65 port 38084 [preauth]
2026-06-30T05:38:33.803902-05:00 claude-cloud systemd-logind[853]: New session c5186 of user claude.
2026-06-30T05:38:34.130091-05:00 claude-cloud systemd-logind[853]: Session c5186 logged out. Waiting for processes to exit.
2026-06-30T05:38:34.131412-05:00 claude-cloud systemd-logind[853]: Removed session c5186.
2026-06-30T05:38:34.433300-05:00 claude-cloud sshd[441815]: Connection closed by authenticating user root 27.71.230.31 port 57846 [preauth]
2026-06-30T05:39:04.976989-05:00 claude-cloud sshd[441953]: Invalid user oracle from 91.92.40.231 port 51310
2026-06-30T05:39:04.992982-05:00 claude-cloud sshd[441953]: Connection closed by invalid user oracle 91.92.40.231 port 51310 [preauth]
2026-06-30T05:39:13.643901-05:00 claude-cloud sshd[441968]: Connection closed by authenticating user root 115.248.8.65 port 33216 [preauth]
2026-06-30T05:41:08.224700-05:00 claude-cloud sshd[442317]: Invalid user user from 45.148.10.121 port 46154
2026-06-30T05:41:08.237808-05:00 claude-cloud sshd[442317]: Connection closed by invalid user user 45.148.10.121 port 46154 [preauth]
2026-06-30T05:41:21.351448-05:00 claude-cloud sshd[442342]: Connection reset by 205.210.31.78 port 61308 [preauth]
2026-06-30T05:41:59.357663-05:00 claude-cloud sshd[442457]: Connection closed by authenticating user root 45.198.224.46 port 53470 [preauth]
2026-06-30T05:42:41.900021-05:00 claude-cloud sshd[442601]: Invalid user admin from 2.57.121.25 port 47718
2026-06-30T05:42:41.926004-05:00 claude-cloud sshd[442601]: Connection closed by invalid user admin 2.57.121.25 port 47718 [preauth]
2026-06-30T05:42:51.335444-05:00 claude-cloud sshd[442613]: Received disconnect from 43.160.246.215 port 52268:11: Bye Bye [preauth]
2026-06-30T05:42:51.335870-05:00 claude-cloud sshd[442613]: Disconnected from authenticating user root 43.160.246.215 port 52268 [preauth]
2026-06-30T05:42:58.109445-05:00 claude-cloud sshd[442626]: Connection closed by authenticating user root 115.248.8.65 port 46198 [preauth]
2026-06-30T05:43:37.573212-05:00 claude-cloud systemd-logind[853]: New session c5187 of user claude.
2026-06-30T05:43:37.897492-05:00 claude-cloud systemd-logind[853]: Session c5187 logged out. Waiting for processes to exit.
2026-06-30T05:43:37.900717-05:00 claude-cloud systemd-logind[853]: Removed session c5187.
2026-06-30T05:44:27.364923-05:00 claude-cloud sshd[442869]: Connection closed by authenticating user root 27.71.230.31 port 38190 [preauth]
2026-06-30T05:45:01.835775-05:00 claude-cloud CRON[443017]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-30T05:45:01.843897-05:00 claude-cloud CRON[443017]: pam_unix(cron:session): session closed for user root
2026-06-30T05:46:34.837457-05:00 claude-cloud sshd[443322]: Connection closed by authenticating user root 115.248.8.65 port 37240 [preauth]
2026-06-30T05:46:36.129767-05:00 claude-cloud sshd[443359]: Invalid user oracle from 91.92.40.231 port 58566
2026-06-30T05:46:36.145610-05:00 claude-cloud sshd[443359]: Connection closed by invalid user oracle 91.92.40.231 port 58566 [preauth]
2026-06-30T05:48:31.266786-05:00 claude-cloud sshd[443677]: Invalid user zabbix from 185.242.3.195 port 33670
2026-06-30T05:48:31.273336-05:00 claude-cloud sshd[443677]: Connection closed by invalid user zabbix 185.242.3.195 port 33670 [preauth]
2026-06-30T05:48:41.192867-05:00 claude-cloud systemd-logind[853]: New session c5188 of user claude.
2026-06-30T05:48:41.474676-05:00 claude-cloud systemd-logind[853]: Session c5188 logged out. Waiting for processes to exit.
2026-06-30T05:48:41.476999-05:00 claude-cloud systemd-logind[853]: Removed session c5188.
2026-06-30T05:49:21.868934-05:00 claude-cloud sshd[443832]: Received disconnect from 43.160.246.215 port 40448:11: Bye Bye [preauth]
2026-06-30T05:49:21.869877-05:00 claude-cloud sshd[443832]: Disconnected from authenticating user root 43.160.246.215 port 40448 [preauth]
2026-06-30T05:50:17.089047-05:00 claude-cloud sshd[443978]: Connection closed by authenticating user root 27.71.230.31 port 37248 [preauth]
2026-06-30T05:50:21.409686-05:00 claude-cloud sshd[444000]: Connection closed by authenticating user root 115.248.8.65 port 52936 [preauth]
2026-06-30T05:51:36.955476-05:00 claude-cloud sshd[444227]: Connection closed by authenticating user root 45.198.224.46 port 53206 [preauth]
2026-06-30T05:51:46.512081-05:00 claude-cloud sshd[444274]: userauth_pubkey: signature algorithm ssh-dss not in PubkeyAcceptedAlgorithms [preauth]
2026-06-30T05:51:46.619001-05:00 claude-cloud sshd[444274]: Received disconnect from 148.113.190.153 port 49676:11: disconnected by user [preauth]
2026-06-30T05:51:46.619351-05:00 claude-cloud sshd[444274]: Disconnected from authenticating user root 148.113.190.153 port 49676 [preauth]
2026-06-30T05:52:33.209812-05:00 claude-cloud sshd[444391]: Received disconnect from 43.160.246.215 port 51766:11: Bye Bye [preauth]
2026-06-30T05:52:33.210899-05:00 claude-cloud sshd[444391]: Disconnected from authenticating user root 43.160.246.215 port 51766 [preauth]
2026-06-30T05:53:44.935980-05:00 claude-cloud systemd-logind[853]: New session c5189 of user claude.
2026-06-30T05:53:45.219843-05:00 claude-cloud systemd-logind[853]: Session c5189 logged out. Waiting for processes to exit.
2026-06-30T05:53:45.222006-05:00 claude-cloud systemd-logind[853]: Removed session c5189.
2026-06-30T05:54:11.940055-05:00 claude-cloud sshd[444693]: Connection closed by authenticating user root 115.248.8.65 port 57708 [preauth]
2026-06-30T05:54:31.818825-05:00 claude-cloud sshd[444760]: Invalid user oracle from 91.92.40.231 port 57620
2026-06-30T05:54:31.839917-05:00 claude-cloud sshd[444760]: Connection closed by invalid user oracle 91.92.40.231 port 57620 [preauth]
2026-06-30T05:55:01.862251-05:00 claude-cloud CRON[444842]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-30T05:55:01.870232-05:00 claude-cloud CRON[444842]: pam_unix(cron:session): session closed for user root
2026-06-30T05:56:05.773955-05:00 claude-cloud sshd[444984]: Connection closed by authenticating user root 27.71.230.31 port 52268 [preauth]
2026-06-30T05:56:06.449101-05:00 claude-cloud sshd[445051]: Received disconnect from 43.160.246.215 port 53548:11: Bye Bye [preauth]
2026-06-30T05:56:06.449671-05:00 claude-cloud sshd[445051]: Disconnected from authenticating user root 43.160.246.215 port 53548 [preauth]
2026-06-30T05:56:40.911047-05:00 claude-cloud sshd[445145]: Connection closed by 203.121.106.56 port 24020 [preauth]
2026-06-30T05:57:57.855845-05:00 claude-cloud sshd[445389]: Connection closed by authenticating user root 115.248.8.65 port 49980 [preauth]
2026-06-30T05:58:48.524060-05:00 claude-cloud systemd-logind[853]: New session c5190 of user claude.
2026-06-30T05:58:48.808337-05:00 claude-cloud systemd-logind[853]: Session c5190 logged out. Waiting for processes to exit.
2026-06-30T05:58:48.810446-05:00 claude-cloud systemd-logind[853]: Removed session c5190.
2026-06-30T05:59:25.250191-05:00 claude-cloud sshd[445679]: Received disconnect from 43.160.246.215 port 60352:11: Bye Bye [preauth]
2026-06-30T05:59:25.250874-05:00 claude-cloud sshd[445679]: Disconnected from authenticating user root 43.160.246.215 port 60352 [preauth]
2026-06-30T06:01:19.365110-05:00 claude-cloud sshd[446017]: Connection closed by authenticating user root 45.198.224.46 port 34568 [preauth]
2026-06-30T06:01:22.054838-05:00 claude-cloud sshd[446026]: Invalid user keasia from 2.57.121.112 port 41698
2026-06-30T06:01:22.080618-05:00 claude-cloud sshd[446026]: Connection closed by invalid user keasia 2.57.121.112 port 41698 [preauth]
2026-06-30T06:01:44.546397-05:00 claude-cloud sshd[446087]: Connection closed by authenticating user root 115.248.8.65 port 43546 [preauth]
2026-06-30T06:01:47.840216-05:00 claude-cloud sshd[446089]: Connection closed by authenticating user root 27.71.230.31 port 35014 [preauth]
2026-06-30T06:02:38.392838-05:00 claude-cloud sshd[446237]: Invalid user oracle from 91.92.40.231 port 41504
2026-06-30T06:02:38.409797-05:00 claude-cloud sshd[446237]: Connection closed by invalid user oracle 91.92.40.231 port 41504 [preauth]
2026-06-30T06:03:01.003418-05:00 claude-cloud sshd[446312]: Received disconnect from 43.160.246.215 port 44340:11: Bye Bye [preauth]
2026-06-30T06:03:01.003827-05:00 claude-cloud sshd[446312]: Disconnected from authenticating user root 43.160.246.215 port 44340 [preauth]
2026-06-30T06:03:52.635994-05:00 claude-cloud systemd-logind[853]: New session c5191 of user claude.
2026-06-30T06:03:52.964696-05:00 claude-cloud systemd-logind[853]: Session c5191 logged out. Waiting for processes to exit.
2026-06-30T06:03:52.966870-05:00 claude-cloud systemd-logind[853]: Removed session c5191.
2026-06-30T06:04:12.737409-05:00 claude-cloud sshd[446525]: error: kex_exchange_identification: read: Connection reset by peer
2026-06-30T06:04:12.738162-05:00 claude-cloud sshd[446525]: Connection reset by 141.11.88.122 port 35922
2026-06-30T06:05:01.886512-05:00 claude-cloud CRON[446682]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-30T06:05:01.894955-05:00 claude-cloud CRON[446682]: pam_unix(cron:session): session closed for user root
2026-06-30T06:05:19.585525-05:00 claude-cloud sshd[446711]: Connection closed by authenticating user root 115.248.8.65 port 48114 [preauth]
2026-06-30T06:06:08.778815-05:00 claude-cloud sshd[446883]: Received disconnect from 195.26.87.217 port 43838:11: disconnected by user [preauth]
2026-06-30T06:06:08.779208-05:00 claude-cloud sshd[446883]: Disconnected from authenticating user root 195.26.87.217 port 43838 [preauth]
2026-06-30T06:07:46.403146-05:00 claude-cloud sshd[447175]: Connection closed by authenticating user root 27.71.230.31 port 56016 [preauth]
2026-06-30T06:08:56.208421-05:00 claude-cloud systemd-logind[853]: New session c5192 of user claude.
2026-06-30T06:08:56.550489-05:00 claude-cloud systemd-logind[853]: Session c5192 logged out. Waiting for processes to exit.
2026-06-30T06:08:56.552859-05:00 claude-cloud systemd-logind[853]: Removed session c5192.
2026-06-30T06:09:03.428184-05:00 claude-cloud sshd[447435]: Connection closed by authenticating user root 115.248.8.65 port 51866 [preauth]
2026-06-30T06:09:49.710223-05:00 claude-cloud sshd[447570]: Received disconnect from 43.160.246.215 port 60388:11: Bye Bye [preauth]
2026-06-30T06:09:49.711873-05:00 claude-cloud sshd[447570]: Disconnected from authenticating user root 43.160.246.215 port 60388 [preauth]
2026-06-30T06:10:40.589188-05:00 claude-cloud sshd[447732]: Invalid user oracle from 91.92.40.231 port 57266
2026-06-30T06:10:40.608128-05:00 claude-cloud sshd[447732]: Connection closed by invalid user oracle 91.92.40.231 port 57266 [preauth]
2026-06-30T06:11:13.196308-05:00 claude-cloud sshd[447827]: Invalid user ubnt from 45.198.224.46 port 48046
2026-06-30T06:11:14.170123-05:00 claude-cloud sshd[447827]: Connection closed by invalid user ubnt 45.198.224.46 port 48046 [preauth]
2026-06-30T06:12:41.199036-05:00 claude-cloud sshd[448072]: Connection closed by authenticating user root 115.248.8.65 port 42606 [preauth]
2026-06-30T06:13:41.390185-05:00 claude-cloud sshd[448207]: Connection closed by authenticating user root 27.71.230.31 port 58234 [preauth]
2026-06-30T06:13:59.825790-05:00 claude-cloud systemd-logind[853]: New session c5193 of user claude.
2026-06-30T06:14:00.203093-05:00 claude-cloud systemd-logind[853]: Session c5193 logged out. Waiting for processes to exit.
2026-06-30T06:14:00.204719-05:00 claude-cloud systemd-logind[853]: Removed session c5193.
2026-06-30T06:14:29.662206-05:00 claude-cloud sshd[448403]: Connection closed by authenticating user root 45.148.10.121 port 44726 [preauth]
2026-06-30T06:15:01.907148-05:00 claude-cloud CRON[448532]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-30T06:15:01.914228-05:00 claude-cloud CRON[448532]: pam_unix(cron:session): session closed for user root
2026-06-30T06:16:25.293573-05:00 claude-cloud sshd[448734]: Connection closed by authenticating user root 115.248.8.65 port 58410 [preauth]
2026-06-30T06:17:01.923619-05:00 claude-cloud CRON[448919]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-30T06:17:01.929873-05:00 claude-cloud CRON[448919]: pam_unix(cron:session): session closed for user root
2026-06-30T06:17:23.863094-05:00 claude-cloud systemd-logind[853]: Session c3849 logged out. Waiting for processes to exit.
2026-06-30T06:17:23.864813-05:00 claude-cloud systemd-logind[853]: Session c3851 logged out. Waiting for processes to exit.
2026-06-30T06:17:23.867125-05:00 claude-cloud systemd-logind[853]: Removed session c3849.
2026-06-30T06:17:23.872598-05:00 claude-cloud systemd-logind[853]: Removed session c3851.
2026-06-30T06:19:03.550478-05:00 claude-cloud systemd-logind[853]: New session c5194 of user claude.
2026-06-30T06:19:03.905618-05:00 claude-cloud systemd-logind[853]: Session c5194 logged out. Waiting for processes to exit.
2026-06-30T06:19:03.907510-05:00 claude-cloud systemd-logind[853]: Removed session c5194.
2026-06-30T06:19:16.492895-05:00 claude-cloud sshd[449318]: Invalid user oracle from 91.92.40.231 port 58508
2026-06-30T06:19:16.509582-05:00 claude-cloud sshd[449318]: Connection closed by invalid user oracle 91.92.40.231 port 58508 [preauth]
2026-06-30T06:19:23.700584-05:00 claude-cloud sshd[449316]: Connection closed by authenticating user root 27.71.230.31 port 51454 [preauth]
2026-06-30T06:20:06.712828-05:00 claude-cloud sshd[449470]: Received disconnect from 43.160.246.215 port 48826:11: Bye Bye [preauth]
2026-06-30T06:20:06.713265-05:00 claude-cloud sshd[449470]: Disconnected from authenticating user root 43.160.246.215 port 48826 [preauth]
2026-06-30T06:20:10.649171-05:00 claude-cloud sshd[449477]: Connection closed by authenticating user root 115.248.8.65 port 38752 [preauth]
2026-06-30T06:20:49.114651-05:00 claude-cloud sshd[449597]: Invalid user internet from 45.198.224.46 port 48088
2026-06-30T06:20:49.807381-05:00 claude-cloud sshd[449597]: Connection closed by invalid user internet 45.198.224.46 port 48088 [preauth]
2026-06-30T06:22:46.961983-05:00 claude-cloud sshd[449926]: Invalid user admin from 193.46.255.86 port 38268
2026-06-30T06:22:46.989185-05:00 claude-cloud sshd[449926]: Connection closed by invalid user admin 193.46.255.86 port 38268 [preauth]
2026-06-30T06:23:41.217515-05:00 claude-cloud sshd[450068]: Received disconnect from 43.160.246.215 port 40368:11: Bye Bye [preauth]
2026-06-30T06:23:41.218827-05:00 claude-cloud sshd[450068]: Disconnected from authenticating user root 43.160.246.215 port 40368 [preauth]
2026-06-30T06:23:57.123662-05:00 claude-cloud sshd[450094]: Connection closed by authenticating user root 115.248.8.65 port 51512 [preauth]
2026-06-30T06:24:07.233386-05:00 claude-cloud systemd-logind[853]: New session c5195 of user claude.
2026-06-30T06:24:07.594527-05:00 claude-cloud systemd-logind[853]: Session c5195 logged out. Waiting for processes to exit.
2026-06-30T06:24:07.596642-05:00 claude-cloud systemd-logind[853]: Removed session c5195.
2026-06-30T06:25:01.941099-05:00 claude-cloud CRON[450318]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-30T06:25:01.942206-05:00 claude-cloud CRON[450319]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-30T06:25:01.949464-05:00 claude-cloud CRON[450319]: pam_unix(cron:session): session closed for user root
2026-06-30T06:25:02.064648-05:00 claude-cloud CRON[450318]: pam_unix(cron:session): session closed for user root
2026-06-30T06:25:21.263804-05:00 claude-cloud sshd[450350]: Connection closed by authenticating user root 27.71.230.31 port 52024 [preauth]
2026-06-30T06:27:02.385441-05:00 claude-cloud sshd[450726]: Received disconnect from 43.160.246.215 port 42186:11: Bye Bye [preauth]
2026-06-30T06:27:02.386103-05:00 claude-cloud sshd[450726]: Disconnected from authenticating user root 43.160.246.215 port 42186 [preauth]
2026-06-30T06:27:44.456311-05:00 claude-cloud sshd[450832]: Connection closed by authenticating user root 115.248.8.65 port 48444 [preauth]
2026-06-30T06:27:48.909478-05:00 claude-cloud sshd[450854]: Invalid user oracle from 91.92.40.231 port 33122
2026-06-30T06:27:48.925631-05:00 claude-cloud sshd[450854]: Connection closed by invalid user oracle 91.92.40.231 port 33122 [preauth]
2026-06-30T06:27:57.302171-05:00 claude-cloud sshd[450874]: Received disconnect from 141.11.88.122 port 34370:11: Bye Bye [preauth]
2026-06-30T06:27:57.302773-05:00 claude-cloud sshd[450874]: Disconnected from 141.11.88.122 port 34370 [preauth]
2026-06-30T06:29:11.151426-05:00 claude-cloud systemd-logind[853]: New session c5196 of user claude.
2026-06-30T06:29:11.488590-05:00 claude-cloud systemd-logind[853]: Session c5196 logged out. Waiting for processes to exit.
2026-06-30T06:29:11.490525-05:00 claude-cloud systemd-logind[853]: Removed session c5196.
2026-06-30T06:30:30.483661-05:00 claude-cloud sshd[451299]: Connection closed by authenticating user root 45.198.224.46 port 36474 [preauth]
2026-06-30T06:30:32.174149-05:00 claude-cloud sshd[451319]: Received disconnect from 43.160.246.215 port 51234:11: Bye Bye [preauth]
2026-06-30T06:30:32.174840-05:00 claude-cloud sshd[451319]: Disconnected from authenticating user root 43.160.246.215 port 51234 [preauth]
2026-06-30T06:31:23.470514-05:00 claude-cloud sshd[451457]: Connection closed by authenticating user root 115.248.8.65 port 56502 [preauth]
2026-06-30T06:31:25.625496-05:00 claude-cloud sshd[451374]: Connection closed by authenticating user root 27.71.230.31 port 39330 [preauth]
2026-06-30T06:33:54.326816-05:00 claude-cloud sshd[451875]: Received disconnect from 43.160.246.215 port 52426:11: Bye Bye [preauth]
2026-06-30T06:33:54.328023-05:00 claude-cloud sshd[451875]: Disconnected from authenticating user root 43.160.246.215 port 52426 [preauth]
2026-06-30T06:34:14.786150-05:00 claude-cloud systemd-logind[853]: New session c5197 of user claude.
2026-06-30T06:34:15.096402-05:00 claude-cloud systemd-logind[853]: Session c5197 logged out. Waiting for processes to exit.
2026-06-30T06:34:15.098531-05:00 claude-cloud systemd-logind[853]: Removed session c5197.
2026-06-30T06:35:01.079593-05:00 claude-cloud CRON[452086]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-30T06:35:01.091223-05:00 claude-cloud CRON[452086]: pam_unix(cron:session): session closed for user root
2026-06-30T06:35:05.728689-05:00 claude-cloud sshd[452089]: Connection closed by authenticating user root 115.248.8.65 port 33010 [preauth]
2026-06-30T06:36:35.509803-05:00 claude-cloud sshd[452454]: Invalid user oracle from 91.92.40.231 port 35852
2026-06-30T06:36:35.525247-05:00 claude-cloud sshd[452454]: Connection closed by invalid user oracle 91.92.40.231 port 35852 [preauth]
2026-06-30T06:37:01.819942-05:00 claude-cloud sshd[452497]: Connection closed by authenticating user root 27.71.230.31 port 58368 [preauth]
2026-06-30T06:38:50.530801-05:00 claude-cloud sshd[452872]: Connection closed by authenticating user root 115.248.8.65 port 33262 [preauth]
2026-06-30T06:39:18.381560-05:00 claude-cloud systemd-logind[853]: New session c5198 of user claude.
2026-06-30T06:39:18.759237-05:00 claude-cloud systemd-logind[853]: Session c5198 logged out. Waiting for processes to exit.
2026-06-30T06:39:18.760871-05:00 claude-cloud systemd-logind[853]: Removed session c5198.
2026-06-30T06:40:07.348900-05:00 claude-cloud sshd[453107]: Invalid user ubuntu from 45.198.224.46 port 59498
2026-06-30T06:40:08.010247-05:00 claude-cloud sshd[453107]: Connection closed by invalid user ubuntu 45.198.224.46 port 59498 [preauth]
2026-06-30T06:40:18.355671-05:00 claude-cloud sshd[453145]: Invalid user admin from 2.57.121.25 port 13818
2026-06-30T06:40:18.382234-05:00 claude-cloud sshd[453145]: Connection closed by invalid user admin 2.57.121.25 port 13818 [preauth]
2026-06-30T06:42:32.284076-05:00 claude-cloud sshd[453492]: Connection closed by authenticating user root 115.248.8.65 port 33102 [preauth]
2026-06-30T06:43:03.037556-05:00 claude-cloud sshd[453500]: Connection closed by authenticating user root 27.71.230.31 port 38606 [preauth]
2026-06-30T06:44:22.366865-05:00 claude-cloud systemd-logind[853]: New session c5199 of user claude.
2026-06-30T06:44:22.697703-05:00 claude-cloud systemd-logind[853]: Session c5199 logged out. Waiting for processes to exit.
2026-06-30T06:44:22.700198-05:00 claude-cloud systemd-logind[853]: Removed session c5199.
2026-06-30T06:44:48.593496-05:00 claude-cloud sshd[453891]: Invalid user oracle from 91.92.40.231 port 57080
2026-06-30T06:44:48.609739-05:00 claude-cloud sshd[453891]: Connection closed by invalid user oracle 91.92.40.231 port 57080 [preauth]
2026-06-30T06:45:01.107684-05:00 claude-cloud CRON[453935]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-30T06:45:01.116473-05:00 claude-cloud CRON[453935]: pam_unix(cron:session): session closed for user root
2026-06-30T06:46:18.202745-05:00 claude-cloud sshd[454141]: Connection closed by authenticating user root 115.248.8.65 port 34272 [preauth]
2026-06-30T06:47:32.169596-05:00 claude-cloud sshd[454335]: Invalid user ubnt from 45.148.10.121 port 51568
2026-06-30T06:47:32.182463-05:00 claude-cloud sshd[454335]: Connection closed by invalid user ubnt 45.148.10.121 port 51568 [preauth]
2026-06-30T06:48:25.699831-05:00 claude-cloud sshd[454533]: Connection closed by authenticating user root 27.71.230.31 port 41010 [preauth]
2026-06-30T06:49:26.065394-05:00 claude-cloud systemd-logind[853]: New session c5200 of user claude.
2026-06-30T06:49:26.356755-05:00 claude-cloud systemd-logind[853]: Session c5200 logged out. Waiting for processes to exit.
2026-06-30T06:49:26.358523-05:00 claude-cloud systemd-logind[853]: Removed session c5200.
2026-06-30T06:49:41.869683-05:00 claude-cloud sshd[454755]: Connection closed by authenticating user root 45.198.224.46 port 55728 [preauth]
2026-06-30T06:50:02.882330-05:00 claude-cloud sshd[454820]: Connection closed by authenticating user root 115.248.8.65 port 34058 [preauth]
2026-06-30T06:53:14.523482-05:00 claude-cloud sshd[455350]: Invalid user postgres from 91.92.40.231 port 39210
2026-06-30T06:53:14.543591-05:00 claude-cloud sshd[455350]: Connection closed by invalid user postgres 91.92.40.231 port 39210 [preauth]
2026-06-30T06:53:40.141511-05:00 claude-cloud sshd[455411]: Connection closed by authenticating user root 115.248.8.65 port 48184 [preauth]
2026-06-30T06:54:28.995626-05:00 claude-cloud sshd[455518]: Connection closed by authenticating user root 27.71.230.31 port 59308 [preauth]
2026-06-30T06:54:29.855893-05:00 claude-cloud systemd-logind[853]: New session c5201 of user claude.
2026-06-30T06:54:30.244907-05:00 claude-cloud systemd-logind[853]: Session c5201 logged out. Waiting for processes to exit.
2026-06-30T06:54:30.247458-05:00 claude-cloud systemd-logind[853]: Removed session c5201.
2026-06-30T06:55:01.130065-05:00 claude-cloud CRON[455663]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-30T06:55:01.136818-05:00 claude-cloud CRON[455663]: pam_unix(cron:session): session closed for user root
2026-06-30T06:57:25.450133-05:00 claude-cloud sshd[456036]: Connection closed by authenticating user root 115.248.8.65 port 44314 [preauth]
2026-06-30T06:59:13.707867-05:00 claude-cloud sshd[456397]: Invalid user oracle from 45.198.224.46 port 37422
2026-06-30T06:59:14.313146-05:00 claude-cloud sshd[456397]: Connection closed by invalid user oracle 45.198.224.46 port 37422 [preauth]
2026-06-30T06:59:33.548068-05:00 claude-cloud systemd-logind[853]: New session c5202 of user claude.
2026-06-30T06:59:33.902579-05:00 claude-cloud systemd-logind[853]: Session c5202 logged out. Waiting for processes to exit.
2026-06-30T06:59:33.905159-05:00 claude-cloud systemd-logind[853]: Removed session c5202.
2026-06-30T07:00:10.975294-05:00 claude-cloud sshd[456558]: Connection closed by authenticating user root 27.71.230.31 port 52218 [preauth]
2026-06-30T07:01:14.336891-05:00 claude-cloud sshd[456742]: Connection closed by authenticating user root 115.248.8.65 port 33010 [preauth]
2026-06-30T07:01:51.413099-05:00 claude-cloud sshd[456865]: Invalid user postgres from 91.92.40.231 port 42354
2026-06-30T07:01:51.428436-05:00 claude-cloud sshd[456865]: Connection closed by invalid user postgres 91.92.40.231 port 42354 [preauth]
2026-06-30T07:04:05.175334-05:00 claude-cloud sshd[457228]: Received disconnect from 45.86.86.162 port 53652:11: disconnected by user [preauth]
2026-06-30T07:04:05.176209-05:00 claude-cloud sshd[457228]: Disconnected from authenticating user root 45.86.86.162 port 53652 [preauth]
2026-06-30T07:04:37.198033-05:00 claude-cloud systemd-logind[853]: New session c5203 of user claude.
2026-06-30T07:04:37.543194-05:00 claude-cloud systemd-logind[853]: Session c5203 logged out. Waiting for processes to exit.
2026-06-30T07:04:37.545400-05:00 claude-cloud systemd-logind[853]: Removed session c5203.
2026-06-30T07:04:50.114451-05:00 claude-cloud sshd[457345]: Connection closed by authenticating user root 115.248.8.65 port 55772 [preauth]
2026-06-30T07:05:01.153310-05:00 claude-cloud CRON[457398]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-30T07:05:01.159255-05:00 claude-cloud CRON[457398]: pam_unix(cron:session): session closed for user root
2026-06-30T07:06:04.385905-05:00 claude-cloud sshd[457538]: Connection closed by authenticating user root 27.71.230.31 port 48480 [preauth]
2026-06-30T07:08:34.324698-05:00 claude-cloud sshd[458028]: Connection closed by authenticating user root 115.248.8.65 port 33300 [preauth]
2026-06-30T07:08:54.774463-05:00 claude-cloud sshd[458078]: Connection closed by authenticating user root 45.198.224.46 port 48618 [preauth]
2026-06-30T07:09:40.874199-05:00 claude-cloud systemd-logind[853]: New session c5204 of user claude.
2026-06-30T07:09:41.194876-05:00 claude-cloud systemd-logind[853]: Session c5204 logged out. Waiting for processes to exit.
2026-06-30T07:09:41.197789-05:00 claude-cloud systemd-logind[853]: Removed session c5204.
2026-06-30T07:11:11.848446-05:00 claude-cloud sshd[458482]: Invalid user postgres from 91.92.40.231 port 48926
2026-06-30T07:11:11.864090-05:00 claude-cloud sshd[458482]: Connection closed by invalid user postgres 91.92.40.231 port 48926 [preauth]
2026-06-30T07:12:04.820577-05:00 claude-cloud sshd[458589]: Connection closed by authenticating user root 27.71.230.31 port 49268 [preauth]
2026-06-30T07:12:18.926755-05:00 claude-cloud sshd[458664]: Connection closed by authenticating user root 115.248.8.65 port 43108 [preauth]
2026-06-30T07:13:53.062645-05:00 claude-cloud sshd[458929]: Invalid user oracle from 193.46.255.86 port 13032
2026-06-30T07:13:53.088923-05:00 claude-cloud sshd[458929]: Connection closed by invalid user oracle 193.46.255.86 port 13032 [preauth]
2026-06-30T07:14:44.492194-05:00 claude-cloud systemd-logind[853]: New session c5205 of user claude.
2026-06-30T07:14:44.793298-05:00 claude-cloud systemd-logind[853]: Session c5205 logged out. Waiting for processes to exit.
2026-06-30T07:14:44.795070-05:00 claude-cloud systemd-logind[853]: Removed session c5205.
2026-06-30T07:15:01.171476-05:00 claude-cloud CRON[459127]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-30T07:15:01.177390-05:00 claude-cloud CRON[459127]: pam_unix(cron:session): session closed for user root
2026-06-30T07:15:56.297631-05:00 claude-cloud sshd[459265]: Connection closed by authenticating user root 115.248.8.65 port 45820 [preauth]
2026-06-30T07:17:01.186135-05:00 claude-cloud CRON[459455]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-30T07:17:01.191824-05:00 claude-cloud CRON[459455]: pam_unix(cron:session): session closed for user root
2026-06-30T07:17:37.892157-05:00 claude-cloud sshd[459554]: Connection closed by authenticating user root 45.148.10.121 port 39334 [preauth]
2026-06-30T07:18:06.739927-05:00 claude-cloud sshd[459534]: Connection closed by authenticating user root 27.71.230.31 port 58696 [preauth]
2026-06-30T07:18:30.502739-05:00 claude-cloud sshd[459699]: Connection closed by authenticating user root 45.198.224.46 port 54012 [preauth]
2026-06-30T07:18:31.636823-05:00 claude-cloud sshd[459717]: Invalid user keren from 2.57.121.112 port 22326
2026-06-30T07:18:31.662325-05:00 claude-cloud sshd[459717]: Connection closed by invalid user keren 2.57.121.112 port 22326 [preauth]
2026-06-30T07:19:33.506819-05:00 claude-cloud sshd[459949]: Invalid user nagios from 185.242.3.195 port 46106
2026-06-30T07:19:33.515408-05:00 claude-cloud sshd[459949]: Connection closed by invalid user nagios 185.242.3.195 port 46106 [preauth]
2026-06-30T07:19:44.707347-05:00 claude-cloud sshd[459966]: Connection closed by authenticating user root 115.248.8.65 port 38642 [preauth]
2026-06-30T07:19:48.034614-05:00 claude-cloud systemd-logind[853]: New session c5206 of user claude.
2026-06-30T07:19:48.374017-05:00 claude-cloud systemd-logind[853]: Session c5206 logged out. Waiting for processes to exit.
2026-06-30T07:19:48.376774-05:00 claude-cloud systemd-logind[853]: Removed session c5206.
2026-06-30T07:20:05.875877-05:00 claude-cloud sshd[460045]: Invalid user postgres from 91.92.40.231 port 48042
2026-06-30T07:20:05.891980-05:00 claude-cloud sshd[460045]: Connection closed by invalid user postgres 91.92.40.231 port 48042 [preauth]
2026-06-30T07:23:24.832145-05:00 claude-cloud sshd[460604]: Invalid user oracle from 115.248.8.65 port 60130
2026-06-30T07:23:25.332020-05:00 claude-cloud sshd[460604]: Connection closed by invalid user oracle 115.248.8.65 port 60130 [preauth]
2026-06-30T07:23:32.245178-05:00 claude-cloud sshd[460605]: Connection closed by authenticating user root 27.71.230.31 port 37536 [preauth]
2026-06-30T07:24:51.781404-05:00 claude-cloud systemd-logind[853]: New session c5207 of user claude.
2026-06-30T07:24:52.129019-05:00 claude-cloud systemd-logind[853]: Session c5207 logged out. Waiting for processes to exit.
2026-06-30T07:24:52.130020-05:00 claude-cloud systemd-logind[853]: Removed session c5207.
2026-06-30T07:25:01.202236-05:00 claude-cloud CRON[460923]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-30T07:25:01.216128-05:00 claude-cloud CRON[460923]: pam_unix(cron:session): session closed for user root
2026-06-30T07:25:24.631650-05:00 claude-cloud sshd[460968]: Received disconnect from 172.245.225.106 port 56352:11: disconnected by user [preauth]
2026-06-30T07:25:24.632186-05:00 claude-cloud sshd[460968]: Disconnected from authenticating user root 172.245.225.106 port 56352 [preauth]
2026-06-30T07:27:14.226230-05:00 claude-cloud sshd[461289]: Invalid user oracle from 115.248.8.65 port 39986
2026-06-30T07:27:15.018230-05:00 claude-cloud sshd[461289]: Connection closed by invalid user oracle 115.248.8.65 port 39986 [preauth]
2026-06-30T07:28:06.680454-05:00 claude-cloud sshd[461426]: Connection closed by authenticating user root 45.198.224.46 port 52826 [preauth]
2026-06-30T07:29:29.071250-05:00 claude-cloud sshd[461715]: Connection closed by authenticating user root 27.71.230.31 port 55348 [preauth]
2026-06-30T07:29:42.566211-05:00 claude-cloud sshd[461785]: Received disconnect from 210.210.155.71 port 33192:11: disconnected by user [preauth]
2026-06-30T07:29:42.566841-05:00 claude-cloud sshd[461785]: Disconnected from authenticating user root 210.210.155.71 port 33192 [preauth]
2026-06-30T07:29:50.930742-05:00 claude-cloud sshd[461810]: Invalid user postgres from 91.92.40.231 port 35450
2026-06-30T07:29:50.946626-05:00 claude-cloud sshd[461810]: Connection closed by invalid user postgres 91.92.40.231 port 35450 [preauth]
2026-06-30T07:29:55.575971-05:00 claude-cloud systemd-logind[853]: New session c5208 of user claude.
2026-06-30T07:29:55.865095-05:00 claude-cloud systemd-logind[853]: Session c5208 logged out. Waiting for processes to exit.
2026-06-30T07:29:55.867350-05:00 claude-cloud systemd-logind[853]: Removed session c5208.
2026-06-30T07:30:51.710921-05:00 claude-cloud sshd[461996]: Received disconnect from 185.233.3.95 port 35078:11: Bye Bye [preauth]
2026-06-30T07:30:51.711409-05:00 claude-cloud sshd[461996]: Disconnected from authenticating user root 185.233.3.95 port 35078 [preauth]
2026-06-30T07:31:02.313528-05:00 claude-cloud sshd[462018]: Invalid user oracle from 115.248.8.65 port 41790
2026-06-30T07:31:03.056713-05:00 claude-cloud sshd[462018]: Connection closed by invalid user oracle 115.248.8.65 port 41790 [preauth]
2026-06-30T07:31:45.303874-05:00 claude-cloud sshd[462165]: Received disconnect from 103.57.224.219 port 55118:11: disconnected by user [preauth]
2026-06-30T07:31:45.304517-05:00 claude-cloud sshd[462165]: Disconnected from authenticating user root 103.57.224.219 port 55118 [preauth]
2026-06-30T07:34:40.654224-05:00 claude-cloud sshd[462660]: Invalid user nginx from 115.248.8.65 port 51640
2026-06-30T07:34:41.096013-05:00 claude-cloud sshd[462660]: Connection closed by invalid user nginx 115.248.8.65 port 51640 [preauth]
2026-06-30T07:34:59.206939-05:00 claude-cloud systemd-logind[853]: New session c5209 of user claude.
2026-06-30T07:34:59.545414-05:00 claude-cloud systemd-logind[853]: Session c5209 logged out. Waiting for processes to exit.
2026-06-30T07:34:59.548088-05:00 claude-cloud systemd-logind[853]: Removed session c5209.
2026-06-30T07:35:01.229939-05:00 claude-cloud CRON[462747]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-30T07:35:01.237912-05:00 claude-cloud CRON[462747]: pam_unix(cron:session): session closed for user root
2026-06-30T07:35:01.309683-05:00 claude-cloud sshd[462745]: Received disconnect from 132.145.213.106 port 54492:11: Bye Bye [preauth]
2026-06-30T07:35:01.309979-05:00 claude-cloud sshd[462745]: Disconnected from authenticating user root 132.145.213.106 port 54492 [preauth]
2026-06-30T07:35:22.492037-05:00 claude-cloud sshd[462782]: Connection closed by authenticating user root 27.71.230.31 port 35752 [preauth]
2026-06-30T07:37:42.964262-05:00 claude-cloud sshd[463191]: Connection closed by authenticating user root 45.198.224.46 port 35156 [preauth]
2026-06-30T07:37:50.294432-05:00 claude-cloud sshd[463223]: Invalid user admin from 2.57.121.25 port 43198
2026-06-30T07:37:50.324462-05:00 claude-cloud sshd[463223]: Connection closed by invalid user admin 2.57.121.25 port 43198 [preauth]
2026-06-30T07:38:27.787529-05:00 claude-cloud sshd[463325]: Invalid user manager from 115.248.8.65 port 56062
2026-06-30T07:38:28.134773-05:00 claude-cloud sshd[463325]: Connection closed by invalid user manager 115.248.8.65 port 56062 [preauth]
2026-06-30T07:38:57.268555-05:00 claude-cloud sshd[463439]: Invalid user postgres from 91.92.40.231 port 51532
2026-06-30T07:38:57.285382-05:00 claude-cloud sshd[463439]: Connection closed by invalid user postgres 91.92.40.231 port 51532 [preauth]
2026-06-30T07:40:03.124298-05:00 claude-cloud systemd-logind[853]: New session c5210 of user claude.
2026-06-30T07:40:03.577759-05:00 claude-cloud systemd-logind[853]: Session c5210 logged out. Waiting for processes to exit.
2026-06-30T07:40:03.579102-05:00 claude-cloud systemd-logind[853]: Removed session c5210.
2026-06-30T07:41:10.357501-05:00 claude-cloud sshd[463855]: Connection closed by authenticating user root 27.71.230.31 port 56920 [preauth]
2026-06-30T07:42:14.627634-05:00 claude-cloud sshd[464049]: Invalid user jan from 115.248.8.65 port 48166
2026-06-30T07:42:15.187681-05:00 claude-cloud sshd[464049]: Connection closed by invalid user jan 115.248.8.65 port 48166 [preauth]
2026-06-30T07:43:08.343651-05:00 claude-cloud sshd[464222]: Received disconnect from 185.233.3.95 port 59628:11: Bye Bye [preauth]
2026-06-30T07:43:08.344386-05:00 claude-cloud sshd[464222]: Disconnected from authenticating user root 185.233.3.95 port 59628 [preauth]
2026-06-30T07:44:07.920860-05:00 claude-cloud sshd[464396]: Received disconnect from 132.145.213.106 port 39888:11: Bye Bye [preauth]
2026-06-30T07:44:07.921517-05:00 claude-cloud sshd[464396]: Disconnected from authenticating user root 132.145.213.106 port 39888 [preauth]
2026-06-30T07:44:43.896757-05:00 claude-cloud sshd[464487]: Received disconnect from 74.48.105.66 port 45624:11: disconnected by user [preauth]
2026-06-30T07:44:43.897210-05:00 claude-cloud sshd[464487]: Disconnected from authenticating user root 74.48.105.66 port 45624 [preauth]
2026-06-30T07:45:01.248697-05:00 claude-cloud CRON[464543]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-30T07:45:01.254925-05:00 claude-cloud CRON[464543]: pam_unix(cron:session): session closed for user root
2026-06-30T07:45:06.863626-05:00 claude-cloud systemd-logind[853]: New session c5211 of user claude.
2026-06-30T07:45:07.242073-05:00 claude-cloud systemd-logind[853]: Session c5211 logged out. Waiting for processes to exit.
2026-06-30T07:45:07.244012-05:00 claude-cloud systemd-logind[853]: Removed session c5211.
2026-06-30T07:45:54.219642-05:00 claude-cloud sshd[464703]: Invalid user hacluster from 115.248.8.65 port 43102
2026-06-30T07:45:54.692072-05:00 claude-cloud sshd[464703]: Connection closed by invalid user hacluster 115.248.8.65 port 43102 [preauth]
2026-06-30T07:46:15.783944-05:00 claude-cloud sshd[464779]: Received disconnect from 185.233.3.95 port 48828:11: Bye Bye [preauth]
2026-06-30T07:46:15.784776-05:00 claude-cloud sshd[464779]: Disconnected from authenticating user root 185.233.3.95 port 48828 [preauth]
2026-06-30T07:46:20.522351-05:00 claude-cloud sshd[464791]: Received disconnect from 132.145.213.106 port 39266:11: Bye Bye [preauth]
2026-06-30T07:46:20.523130-05:00 claude-cloud sshd[464791]: Disconnected from authenticating user root 132.145.213.106 port 39266 [preauth]
2026-06-30T07:46:28.305733-05:00 claude-cloud sshd[464820]: Received disconnect from 180.247.179.206 port 41852:11: Bye Bye [preauth]
2026-06-30T07:46:28.306105-05:00 claude-cloud sshd[464820]: Disconnected from authenticating user root 180.247.179.206 port 41852 [preauth]
2026-06-30T07:47:06.158127-05:00 claude-cloud sshd[464876]: Connection closed by authenticating user root 27.71.230.31 port 49634 [preauth]
2026-06-30T07:47:13.751659-05:00 claude-cloud sshd[464925]: Connection closed by authenticating user root 45.198.224.46 port 47788 [preauth]
2026-06-30T07:47:36.931883-05:00 claude-cloud sshd[465020]: Invalid user postgres from 91.92.40.231 port 33172
2026-06-30T07:47:36.947238-05:00 claude-cloud sshd[465020]: Connection closed by invalid user postgres 91.92.40.231 port 33172 [preauth]
2026-06-30T07:47:55.859333-05:00 claude-cloud sshd[465083]: Invalid user test from 45.148.10.121 port 34280
2026-06-30T07:47:55.873228-05:00 claude-cloud sshd[465083]: Connection closed by invalid user test 45.148.10.121 port 34280 [preauth]
2026-06-30T07:48:27.844767-05:00 claude-cloud sshd[465174]: Received disconnect from 132.145.213.106 port 57438:11: Bye Bye [preauth]
2026-06-30T07:48:27.845656-05:00 claude-cloud sshd[465174]: Disconnected from authenticating user root 132.145.213.106 port 57438 [preauth]
2026-06-30T07:49:38.788844-05:00 claude-cloud sshd[465363]: Received disconnect from 185.233.3.95 port 46258:11: Bye Bye [preauth]
2026-06-30T07:49:38.789643-05:00 claude-cloud sshd[465363]: Disconnected from authenticating user root 185.233.3.95 port 46258 [preauth]
2026-06-30T07:49:42.220855-05:00 claude-cloud sshd[465365]: Invalid user git from 115.248.8.65 port 37278
2026-06-30T07:49:42.804213-05:00 claude-cloud sshd[465365]: Connection closed by invalid user git 115.248.8.65 port 37278 [preauth]
2026-06-30T07:50:31.207584-05:00 claude-cloud sshd[465588]: Received disconnect from 132.145.213.106 port 46774:11: Bye Bye [preauth]
2026-06-30T07:50:31.208008-05:00 claude-cloud sshd[465588]: Disconnected from authenticating user root 132.145.213.106 port 46774 [preauth]
2026-06-30T07:52:27.858868-05:00 claude-cloud sshd[465677]: Connection closed by 118.145.225.50 port 43772 [preauth]
2026-06-30T07:52:33.839147-05:00 claude-cloud sshd[465947]: Received disconnect from 132.145.213.106 port 44462:11: Bye Bye [preauth]
2026-06-30T07:52:33.839655-05:00 claude-cloud sshd[465947]: Disconnected from authenticating user root 132.145.213.106 port 44462 [preauth]
2026-06-30T07:52:50.190469-05:00 claude-cloud sshd[465974]: Connection closed by authenticating user root 27.71.230.31 port 43886 [preauth]
2026-06-30T07:52:52.558792-05:00 claude-cloud sshd[465999]: Invalid user lighthouse from 185.233.3.95 port 56834
2026-06-30T07:52:52.644498-05:00 claude-cloud sshd[465999]: Received disconnect from 185.233.3.95 port 56834:11: Bye Bye [preauth]
2026-06-30T07:52:52.644830-05:00 claude-cloud sshd[465999]: Disconnected from invalid user lighthouse 185.233.3.95 port 56834 [preauth]
2026-06-30T07:53:01.493952-05:00 claude-cloud sshd[465979]: Connection closed by 167.94.146.50 port 36462 [preauth]
2026-06-30T07:53:27.926986-05:00 claude-cloud sshd[466089]: Invalid user frappe from 115.248.8.65 port 52390
2026-06-30T07:53:28.310373-05:00 claude-cloud sshd[466089]: Connection closed by invalid user frappe 115.248.8.65 port 52390 [preauth]
2026-06-30T07:54:36.175410-05:00 claude-cloud sshd[466295]: Received disconnect from 132.145.213.106 port 56704:11: Bye Bye [preauth]
2026-06-30T07:54:36.176006-05:00 claude-cloud sshd[466295]: Disconnected from authenticating user root 132.145.213.106 port 56704 [preauth]
2026-06-30T07:55:01.266367-05:00 claude-cloud CRON[466385]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-30T07:55:01.272130-05:00 claude-cloud CRON[466385]: pam_unix(cron:session): session closed for user root
2026-06-30T07:56:14.474082-05:00 claude-cloud sshd[466594]: Received disconnect from 185.233.3.95 port 39868:11: Bye Bye [preauth]
2026-06-30T07:56:14.477910-05:00 claude-cloud sshd[466594]: Disconnected from authenticating user root 185.233.3.95 port 39868 [preauth]
2026-06-30T07:56:33.658347-05:00 claude-cloud sshd[466647]: Invalid user postgres from 91.92.40.231 port 48324
2026-06-30T07:56:33.674779-05:00 claude-cloud sshd[466647]: Connection closed by invalid user postgres 91.92.40.231 port 48324 [preauth]
2026-06-30T07:56:38.539636-05:00 claude-cloud sshd[466657]: Received disconnect from 132.145.213.106 port 48528:11: Bye Bye [preauth]
2026-06-30T07:56:38.540074-05:00 claude-cloud sshd[466657]: Disconnected from authenticating user root 132.145.213.106 port 48528 [preauth]
2026-06-30T07:56:47.388786-05:00 claude-cloud sshd[466679]: Invalid user test1 from 45.198.224.46 port 47572
2026-06-30T07:56:48.090959-05:00 claude-cloud sshd[466679]: Connection closed by invalid user test1 45.198.224.46 port 47572 [preauth]
2026-06-30T07:57:07.825665-05:00 claude-cloud sshd[466742]: Invalid user es from 115.248.8.65 port 47010
2026-06-30T07:57:08.095162-05:00 claude-cloud sshd[466742]: Connection closed by invalid user es 115.248.8.65 port 47010 [preauth]
2026-06-30T07:58:39.199119-05:00 claude-cloud sshd[467011]: Received disconnect from 132.145.213.106 port 36060:11: Bye Bye [preauth]
2026-06-30T07:58:39.200150-05:00 claude-cloud sshd[467011]: Disconnected from authenticating user root 132.145.213.106 port 36060 [preauth]
2026-06-30T07:58:56.015588-05:00 claude-cloud sshd[466994]: Connection closed by authenticating user root 27.71.230.31 port 39166 [preauth]
2026-06-30T07:59:04.762612-05:00 claude-cloud sshd[467077]: Received disconnect from 180.247.179.206 port 54868:11: Bye Bye [preauth]
2026-06-30T07:59:04.763065-05:00 claude-cloud sshd[467077]: Disconnected from authenticating user root 180.247.179.206 port 54868 [preauth]
2026-06-30T08:00:04.141533-05:00 claude-cloud sshd[467274]: Received disconnect from 62.210.199.83 port 14962:11: disconnected by user [preauth]
2026-06-30T08:00:04.141891-05:00 claude-cloud sshd[467274]: Disconnected from authenticating user root 62.210.199.83 port 14962 [preauth]
2026-06-30T08:00:41.996442-05:00 claude-cloud sshd[467379]: Received disconnect from 132.145.213.106 port 56738:11: Bye Bye [preauth]
2026-06-30T08:00:41.996826-05:00 claude-cloud sshd[467379]: Disconnected from authenticating user root 132.145.213.106 port 56738 [preauth]
2026-06-30T08:00:52.015037-05:00 claude-cloud sshd[467629]: Invalid user cloud from 115.248.8.65 port 44210
2026-06-30T08:00:52.390151-05:00 claude-cloud sshd[467629]: Connection closed by invalid user cloud 115.248.8.65 port 44210 [preauth]
2026-06-30T08:01:31.359744-05:00 claude-cloud sshd[467765]: Received disconnect from 180.247.179.206 port 34476:11: Bye Bye [preauth]
2026-06-30T08:01:31.360392-05:00 claude-cloud sshd[467765]: Disconnected from authenticating user root 180.247.179.206 port 34476 [preauth]
2026-06-30T08:02:44.887893-05:00 claude-cloud sshd[467986]: Invalid user user4 from 132.145.213.106 port 54778
2026-06-30T08:02:44.990373-05:00 claude-cloud sshd[467986]: Received disconnect from 132.145.213.106 port 54778:11: Bye Bye [preauth]
2026-06-30T08:02:44.990566-05:00 claude-cloud sshd[467986]: Disconnected from invalid user user4 132.145.213.106 port 54778 [preauth]
2026-06-30T08:02:45.144473-05:00 claude-cloud sshd[467988]: Received disconnect from 185.233.3.95 port 42472:11: Bye Bye [preauth]
2026-06-30T08:02:45.144914-05:00 claude-cloud sshd[467988]: Disconnected from authenticating user root 185.233.3.95 port 42472 [preauth]
2026-06-30T08:04:18.828778-05:00 claude-cloud sshd[468257]: Received disconnect from 180.247.179.206 port 43266:11: Bye Bye [preauth]
2026-06-30T08:04:18.829877-05:00 claude-cloud sshd[468257]: Disconnected from authenticating user root 180.247.179.206 port 43266 [preauth]
2026-06-30T08:04:35.993627-05:00 claude-cloud sshd[468298]: Invalid user client from 115.248.8.65 port 47244
2026-06-30T08:04:36.436880-05:00 claude-cloud sshd[468298]: Connection closed by invalid user client 115.248.8.65 port 47244 [preauth]
2026-06-30T08:04:40.660366-05:00 claude-cloud sshd[468279]: Connection closed by authenticating user root 27.71.230.31 port 37096 [preauth]
2026-06-30T08:04:45.848233-05:00 claude-cloud sshd[468357]: Invalid user ubnt from 193.46.255.86 port 34138
2026-06-30T08:04:45.895132-05:00 claude-cloud sshd[468357]: Connection closed by invalid user ubnt 193.46.255.86 port 34138 [preauth]
2026-06-30T08:04:46.975441-05:00 claude-cloud sshd[468359]: Received disconnect from 132.145.213.106 port 33706:11: Bye Bye [preauth]
2026-06-30T08:04:46.975907-05:00 claude-cloud sshd[468359]: Disconnected from authenticating user root 132.145.213.106 port 33706 [preauth]
2026-06-30T08:05:01.287585-05:00 claude-cloud CRON[468399]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-30T08:05:01.292654-05:00 claude-cloud CRON[468399]: pam_unix(cron:session): session closed for user root
2026-06-30T08:05:59.407896-05:00 claude-cloud sshd[468546]: Invalid user user4 from 185.233.3.95 port 57766
2026-06-30T08:05:59.505074-05:00 claude-cloud sshd[468546]: Received disconnect from 185.233.3.95 port 57766:11: Bye Bye [preauth]
2026-06-30T08:05:59.505500-05:00 claude-cloud sshd[468546]: Disconnected from invalid user user4 185.233.3.95 port 57766 [preauth]
2026-06-30T08:06:13.684266-05:00 claude-cloud sshd[468583]: Invalid user pi from 45.198.224.46 port 35684
2026-06-30T08:06:14.295210-05:00 claude-cloud sshd[468583]: Connection closed by invalid user pi 45.198.224.46 port 35684 [preauth]
2026-06-30T08:06:19.916458-05:00 claude-cloud sshd[468607]: Invalid user postgres from 91.92.40.231 port 39562
2026-06-30T08:06:19.931602-05:00 claude-cloud sshd[468607]: Connection closed by invalid user postgres 91.92.40.231 port 39562 [preauth]
2026-06-30T08:06:36.741109-05:00 claude-cloud sshd[468676]: Received disconnect from 180.247.179.206 port 58296:11: Bye Bye [preauth]
2026-06-30T08:06:36.741721-05:00 claude-cloud sshd[468676]: Disconnected from authenticating user root 180.247.179.206 port 58296 [preauth]
2026-06-30T08:06:49.810967-05:00 claude-cloud sshd[468723]: Received disconnect from 132.145.213.106 port 42860:11: Bye Bye [preauth]
2026-06-30T08:06:49.811369-05:00 claude-cloud sshd[468723]: Disconnected from authenticating user root 132.145.213.106 port 42860 [preauth]
2026-06-30T08:08:16.197617-05:00 claude-cloud sshd[468936]: Invalid user bot from 115.248.8.65 port 36006
2026-06-30T08:08:17.060611-05:00 claude-cloud sshd[468936]: Connection closed by invalid user bot 115.248.8.65 port 36006 [preauth]
2026-06-30T08:08:50.542092-05:00 claude-cloud sshd[469055]: Received disconnect from 132.145.213.106 port 55226:11: Bye Bye [preauth]
2026-06-30T08:08:50.542420-05:00 claude-cloud sshd[469055]: Disconnected from authenticating user root 132.145.213.106 port 55226 [preauth]
2026-06-30T08:08:52.512609-05:00 claude-cloud sshd[469071]: Received disconnect from 180.247.179.206 port 34098:11: Bye Bye [preauth]
2026-06-30T08:08:52.513040-05:00 claude-cloud sshd[469071]: Disconnected from authenticating user root 180.247.179.206 port 34098 [preauth]
2026-06-30T08:09:17.966119-05:00 claude-cloud sshd[469156]: Received disconnect from 185.233.3.95 port 42642:11: Bye Bye [preauth]
2026-06-30T08:09:17.966500-05:00 claude-cloud sshd[469156]: Disconnected from authenticating user root 185.233.3.95 port 42642 [preauth]
2026-06-30T08:10:22.337929-05:00 claude-cloud sshd[469289]: Connection closed by authenticating user root 27.71.230.31 port 49514 [preauth]
2026-06-30T08:10:51.153895-05:00 claude-cloud sshd[469468]: Invalid user lighthouse from 132.145.213.106 port 36430
2026-06-30T08:10:51.266063-05:00 claude-cloud sshd[469468]: Received disconnect from 132.145.213.106 port 36430:11: Bye Bye [preauth]
2026-06-30T08:10:51.266250-05:00 claude-cloud sshd[469468]: Disconnected from invalid user lighthouse 132.145.213.106 port 36430 [preauth]
2026-06-30T08:10:59.022494-05:00 claude-cloud sshd[469487]: Received disconnect from 180.247.179.206 port 43728:11: Bye Bye [preauth]
2026-06-30T08:10:59.023005-05:00 claude-cloud sshd[469487]: Disconnected from authenticating user root 180.247.179.206 port 43728 [preauth]
2026-06-30T08:12:01.932822-05:00 claude-cloud sshd[469667]: Invalid user ansible from 115.248.8.65 port 47158
2026-06-30T08:12:02.230608-05:00 claude-cloud sshd[469667]: Connection closed by invalid user ansible 115.248.8.65 port 47158 [preauth]
2026-06-30T08:12:32.256811-05:00 claude-cloud sshd[469755]: Received disconnect from 185.233.3.95 port 43096:11: Bye Bye [preauth]
2026-06-30T08:12:32.257569-05:00 claude-cloud sshd[469755]: Disconnected from authenticating user root 185.233.3.95 port 43096 [preauth]
2026-06-30T08:13:06.315564-05:00 claude-cloud sshd[469859]: Received disconnect from 180.247.179.206 port 46764:11: Bye Bye [preauth]
2026-06-30T08:13:06.316191-05:00 claude-cloud sshd[469859]: Disconnected from authenticating user root 180.247.179.206 port 46764 [preauth]
2026-06-30T08:15:01.306075-05:00 claude-cloud CRON[470205]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-30T08:15:01.312818-05:00 claude-cloud CRON[470205]: pam_unix(cron:session): session closed for user root
2026-06-30T08:15:18.863107-05:00 claude-cloud sshd[470253]: Received disconnect from 180.247.179.206 port 48988:11: Bye Bye [preauth]
2026-06-30T08:15:18.864069-05:00 claude-cloud sshd[470253]: Disconnected from authenticating user root 180.247.179.206 port 48988 [preauth]
2026-06-30T08:15:29.742509-05:00 claude-cloud sshd[470280]: Invalid user pi from 91.92.40.231 port 51824
2026-06-30T08:15:29.759490-05:00 claude-cloud sshd[470280]: Connection closed by invalid user pi 91.92.40.231 port 51824 [preauth]
2026-06-30T08:15:37.072476-05:00 claude-cloud sshd[470295]: Connection closed by authenticating user root 45.198.224.46 port 57596 [preauth]
2026-06-30T08:15:47.633783-05:00 claude-cloud sshd[470322]: Invalid user vpn from 115.248.8.65 port 57978
2026-06-30T08:15:48.011771-05:00 claude-cloud sshd[470322]: Connection closed by invalid user vpn 115.248.8.65 port 57978 [preauth]
2026-06-30T08:15:57.771390-05:00 claude-cloud sshd[470376]: Received disconnect from 185.233.3.95 port 53642:11: Bye Bye [preauth]
2026-06-30T08:15:57.775581-05:00 claude-cloud sshd[470376]: Disconnected from authenticating user root 185.233.3.95 port 53642 [preauth]
2026-06-30T08:16:07.624944-05:00 claude-cloud sshd[470395]: Connection closed by authenticating user root 27.71.230.31 port 54216 [preauth]
2026-06-30T08:17:01.331363-05:00 claude-cloud CRON[470565]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-30T08:17:01.337302-05:00 claude-cloud CRON[470565]: pam_unix(cron:session): session closed for user root
2026-06-30T08:17:29.231699-05:00 claude-cloud sshd[470634]: Received disconnect from 180.247.179.206 port 41184:11: Bye Bye [preauth]
2026-06-30T08:17:29.232161-05:00 claude-cloud sshd[470634]: Disconnected from authenticating user root 180.247.179.206 port 41184 [preauth]
2026-06-30T08:17:49.366245-05:00 claude-cloud sshd[470697]: Connection closed by authenticating user root 45.148.10.121 port 42944 [preauth]
2026-06-30T08:19:03.501447-05:00 claude-cloud sshd[470925]: Received disconnect from 185.233.3.95 port 50868:11: Bye Bye [preauth]
2026-06-30T08:19:03.502181-05:00 claude-cloud sshd[470925]: Disconnected from authenticating user root 185.233.3.95 port 50868 [preauth]
2026-06-30T08:19:30.658947-05:00 claude-cloud sshd[470988]: Invalid user ubuntu from 115.248.8.65 port 52602
2026-06-30T08:19:31.093977-05:00 claude-cloud sshd[470988]: Connection closed by invalid user ubuntu 115.248.8.65 port 52602 [preauth]
2026-06-30T08:19:36.443790-05:00 claude-cloud sshd[471017]: Received disconnect from 180.247.179.206 port 51176:11: Bye Bye [preauth]
2026-06-30T08:19:36.444268-05:00 claude-cloud sshd[471017]: Disconnected from authenticating user root 180.247.179.206 port 51176 [preauth]
2026-06-30T08:21:46.644525-05:00 claude-cloud sshd[472171]: Received disconnect from 180.247.179.206 port 58590:11: Bye Bye [preauth]
2026-06-30T08:21:46.653578-05:00 claude-cloud sshd[472171]: Disconnected from authenticating user root 180.247.179.206 port 58590 [preauth]
2026-06-30T08:21:54.165571-05:00 claude-cloud sshd[472196]: Connection closed by authenticating user root 27.71.230.31 port 49014 [preauth]
2026-06-30T08:22:19.395611-05:00 claude-cloud sshd[472501]: Received disconnect from 185.233.3.95 port 49702:11: Bye Bye [preauth]
2026-06-30T08:22:19.395962-05:00 claude-cloud sshd[472501]: Disconnected from authenticating user root 185.233.3.95 port 49702 [preauth]
2026-06-30T08:23:14.591733-05:00 claude-cloud sshd[472873]: Connection closed by authenticating user root 115.248.8.65 port 47994 [preauth]
2026-06-30T08:23:52.619241-05:00 claude-cloud sshd[473349]: Received disconnect from 180.247.179.206 port 38036:11: Bye Bye [preauth]
2026-06-30T08:23:52.619983-05:00 claude-cloud sshd[473349]: Disconnected from authenticating user root 180.247.179.206 port 38036 [preauth]
2026-06-30T08:24:53.069581-05:00 claude-cloud sshd[474186]: Invalid user pi from 91.92.40.231 port 42880
2026-06-30T08:24:53.088025-05:00 claude-cloud sshd[474186]: Connection closed by invalid user pi 91.92.40.231 port 42880 [preauth]
2026-06-30T08:25:01.363546-05:00 claude-cloud CRON[474442]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-30T08:25:01.371846-05:00 claude-cloud CRON[474442]: pam_unix(cron:session): session closed for user root
2026-06-30T08:25:02.256702-05:00 claude-cloud sshd[474337]: Connection closed by authenticating user root 45.198.224.46 port 60120 [preauth]
2026-06-30T08:25:34.005128-05:00 claude-cloud sshd[474892]: Received disconnect from 185.233.3.95 port 40692:11: Bye Bye [preauth]
2026-06-30T08:25:34.006448-05:00 claude-cloud sshd[474892]: Disconnected from authenticating user root 185.233.3.95 port 40692 [preauth]
2026-06-30T08:26:03.836777-05:00 claude-cloud sshd[475338]: Received disconnect from 180.247.179.206 port 49096:11: Bye Bye [preauth]
2026-06-30T08:26:03.837386-05:00 claude-cloud sshd[475338]: Disconnected from authenticating user root 180.247.179.206 port 49096 [preauth]
2026-06-30T08:26:53.678092-05:00 claude-cloud sshd[476031]: Connection closed by authenticating user root 115.248.8.65 port 37360 [preauth]
2026-06-30T08:27:47.536477-05:00 claude-cloud sshd[477276]: Connection closed by authenticating user root 27.71.230.31 port 57086 [preauth]
2026-06-30T08:28:15.073788-05:00 claude-cloud sshd[477975]: Received disconnect from 180.247.179.206 port 58096:11: Bye Bye [preauth]
2026-06-30T08:28:15.075435-05:00 claude-cloud sshd[477975]: Disconnected from authenticating user root 180.247.179.206 port 58096 [preauth]
2026-06-30T08:30:40.309374-05:00 claude-cloud sshd[480049]: Connection closed by authenticating user root 115.248.8.65 port 36616 [preauth]
2026-06-30T08:33:30.209814-05:00 claude-cloud sshd[482189]: Connection closed by authenticating user root 27.71.230.31 port 39718 [preauth]
2026-06-30T08:34:21.602248-05:00 claude-cloud sshd[483276]: Connection closed by authenticating user root 115.248.8.65 port 49450 [preauth]
2026-06-30T08:34:31.217690-05:00 claude-cloud sshd[483546]: Connection closed by authenticating user www-data 45.198.224.46 port 59048 [preauth]
2026-06-30T08:35:00.988412-05:00 claude-cloud sshd[484279]: Invalid user pi from 91.92.40.231 port 50390
2026-06-30T08:35:01.012251-05:00 claude-cloud sshd[484279]: Connection closed by invalid user pi 91.92.40.231 port 50390 [preauth]
2026-06-30T08:35:01.395714-05:00 claude-cloud CRON[484282]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-30T08:35:01.410058-05:00 claude-cloud CRON[484282]: pam_unix(cron:session): session closed for user root
2026-06-30T08:35:08.272778-05:00 claude-cloud sshd[484521]: Invalid user admin from 2.57.121.25 port 42218
2026-06-30T08:35:08.299413-05:00 claude-cloud sshd[484521]: Connection closed by invalid user admin 2.57.121.25 port 42218 [preauth]
2026-06-30T08:35:26.737132-05:00 claude-cloud sshd[484842]: Invalid user leena from 2.57.121.112 port 13706
2026-06-30T08:35:26.763595-05:00 claude-cloud sshd[484842]: Connection closed by invalid user leena 2.57.121.112 port 13706 [preauth]
2026-06-30T08:38:04.642035-05:00 claude-cloud sshd[487124]: Connection closed by authenticating user root 115.248.8.65 port 47382 [preauth]
2026-06-30T08:39:29.272447-05:00 claude-cloud sshd[487692]: Connection closed by authenticating user root 27.71.230.31 port 45866 [preauth]
2026-06-30T08:41:48.007538-05:00 claude-cloud sshd[488928]: Connection closed by authenticating user root 115.248.8.65 port 52508 [preauth]
2026-06-30T08:43:55.945244-05:00 claude-cloud sshd[489383]: Connection closed by authenticating user root 45.198.224.46 port 35954 [preauth]
2026-06-30T08:45:01.428403-05:00 claude-cloud CRON[489569]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-30T08:45:01.436243-05:00 claude-cloud CRON[489569]: pam_unix(cron:session): session closed for user root
2026-06-30T08:45:15.076837-05:00 claude-cloud sshd[489573]: Connection closed by authenticating user root 27.71.230.31 port 42360 [preauth]
2026-06-30T08:45:19.179549-05:00 claude-cloud sshd[489623]: Received disconnect from 179.61.232.245 port 54036:11: disconnected by user [preauth]
2026-06-30T08:45:19.180270-05:00 claude-cloud sshd[489623]: Disconnected from authenticating user root 179.61.232.245 port 54036 [preauth]
2026-06-30T08:45:26.033610-05:00 claude-cloud sshd[489632]: Connection closed by authenticating user root 115.248.8.65 port 42028 [preauth]
2026-06-30T08:45:31.065089-05:00 claude-cloud sshd[489652]: Invalid user pi from 91.92.40.231 port 48638
2026-06-30T08:45:31.081788-05:00 claude-cloud sshd[489652]: Connection closed by invalid user pi 91.92.40.231 port 48638 [preauth]
2026-06-30T08:46:34.004025-05:00 claude-cloud sshd[489828]: Connection closed by 66.132.224.234 port 56688 [preauth]
2026-06-30T08:47:55.658847-05:00 claude-cloud sshd[490405]: Connection closed by authenticating user root 45.148.10.121 port 32838 [preauth]
2026-06-30T08:49:09.907730-05:00 claude-cloud sshd[491504]: Connection closed by authenticating user root 115.248.8.65 port 53058 [preauth]
2026-06-30T08:51:13.844322-05:00 claude-cloud sshd[493195]: Connection closed by authenticating user root 27.71.230.31 port 44876 [preauth]
2026-06-30T08:51:33.670820-05:00 claude-cloud sshd[493499]: Connection closed by authenticating user root 185.242.3.195 port 45324 [preauth]
2026-06-30T08:53:22.668802-05:00 claude-cloud sshd[493630]: Connection closed by authenticating user root 115.248.8.65 port 54538 [preauth]
2026-06-30T08:53:37.040300-05:00 claude-cloud sshd[493811]: Connection closed by authenticating user root 45.198.224.46 port 58244 [preauth]
2026-06-30T08:55:03.550064-05:00 claude-cloud CRON[494003]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-30T08:55:04.829816-05:00 claude-cloud CRON[494003]: pam_unix(cron:session): session closed for user root
2026-06-30T08:55:43.100527-05:00 claude-cloud sshd[494050]: ssh_dispatch_run_fatal: Connection from 193.46.255.86 port 60074: Broken pipe [preauth]
2026-06-30T09:05:09.634919-05:00 claude-cloud sshd[494187]: ssh_dispatch_run_fatal: Connection from 115.248.8.65 port 48714: Broken pipe [preauth]
2026-06-30T09:05:09.644475-05:00 claude-cloud CRON[494555]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-30T09:05:09.659532-05:00 claude-cloud CRON[494555]: pam_unix(cron:session): session closed for user root
2026-06-30T09:05:11.949230-05:00 claude-cloud sshd[494484]: Connection closed by authenticating user root 45.198.224.46 port 39818 [preauth]
2026-06-30T09:05:20.712572-05:00 claude-cloud sshd[494477]: Connection closed by authenticating user root 27.71.230.31 port 57918 [preauth]
2026-06-30T09:08:32.286236-05:00 claude-cloud sshd[497229]: Connection closed by authenticating user root 27.71.230.31 port 38214 [preauth]
2026-06-30T09:12:42.832322-05:00 claude-cloud sshd[497958]: Connection closed by authenticating user root 45.198.224.46 port 47250 [preauth]
2026-06-30T09:14:24.783083-05:00 claude-cloud sshd[498305]: Connection closed by authenticating user root 27.71.230.31 port 35148 [preauth]
2026-06-30T09:15:01.473441-05:00 claude-cloud CRON[498447]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-30T09:15:01.479010-05:00 claude-cloud CRON[498447]: pam_unix(cron:session): session closed for user root
2026-06-30T09:15:23.640559-05:00 claude-cloud systemd-logind[853]: New session c5212 of user claude.
2026-06-30T09:15:23.985593-05:00 claude-cloud systemd-logind[853]: Session c5212 logged out. Waiting for processes to exit.
2026-06-30T09:15:23.988373-05:00 claude-cloud systemd-logind[853]: Removed session c5212.
2026-06-30T09:16:42.469092-05:00 claude-cloud sshd[498773]: Connection closed by 115.190.138.119 port 59292
2026-06-30T09:17:01.487240-05:00 claude-cloud CRON[498828]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-30T09:17:01.494709-05:00 claude-cloud CRON[498828]: pam_unix(cron:session): session closed for user root
2026-06-30T09:18:36.408614-05:00 claude-cloud sshd[499127]: Received disconnect from 185.28.37.194 port 37890:11: disconnected by user [preauth]
2026-06-30T09:18:36.409246-05:00 claude-cloud sshd[499127]: Disconnected from authenticating user root 185.28.37.194 port 37890 [preauth]
2026-06-30T09:20:09.282107-05:00 claude-cloud sshd[499393]: Invalid user admin from 45.148.10.121 port 54302
2026-06-30T09:20:09.296914-05:00 claude-cloud sshd[499393]: Connection closed by invalid user admin 45.148.10.121 port 54302 [preauth]
2026-06-30T09:20:17.493878-05:00 claude-cloud sshd[499374]: Connection closed by authenticating user root 27.71.230.31 port 59662 [preauth]
2026-06-30T09:20:28.724404-05:00 claude-cloud systemd-logind[853]: New session c5213 of user claude.
2026-06-30T09:20:28.971099-05:00 claude-cloud systemd-logind[853]: Session c5213 logged out. Waiting for processes to exit.
2026-06-30T09:20:28.973580-05:00 claude-cloud systemd-logind[853]: Removed session c5213.
2026-06-30T09:20:37.202859-05:00 claude-cloud sshd[499493]: Invalid user total from 103.38.182.49 port 46672
2026-06-30T09:20:37.379989-05:00 claude-cloud sshd[499493]: Received disconnect from 103.38.182.49 port 46672:11: Bye Bye [preauth]
2026-06-30T09:20:37.380476-05:00 claude-cloud sshd[499493]: Disconnected from invalid user total 103.38.182.49 port 46672 [preauth]
2026-06-30T09:22:21.233646-05:00 claude-cloud sshd[499810]: Invalid user oracle from 45.198.224.46 port 54328
2026-06-30T09:22:22.103263-05:00 claude-cloud sshd[499810]: Connection closed by invalid user oracle 45.198.224.46 port 54328 [preauth]
2026-06-30T09:25:01.504609-05:00 claude-cloud CRON[500341]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-30T09:25:01.513798-05:00 claude-cloud CRON[500341]: pam_unix(cron:session): session closed for user root
2026-06-30T09:25:33.156844-05:00 claude-cloud systemd-logind[853]: New session c5214 of user claude.
2026-06-30T09:25:33.440258-05:00 claude-cloud systemd-logind[853]: Session c5214 logged out. Waiting for processes to exit.
2026-06-30T09:25:33.442195-05:00 claude-cloud systemd-logind[853]: Removed session c5214.
2026-06-30T09:25:51.111726-05:00 claude-cloud sshd[500517]: Connection closed by authenticating user root 27.71.230.31 port 38108 [preauth]
2026-06-30T09:29:22.576042-05:00 claude-cloud sshd[501137]: Invalid user answers from 103.38.182.49 port 53800
2026-06-30T09:29:22.735724-05:00 claude-cloud sshd[501137]: Received disconnect from 103.38.182.49 port 53800:11: Bye Bye [preauth]
2026-06-30T09:29:22.735944-05:00 claude-cloud sshd[501137]: Disconnected from invalid user answers 103.38.182.49 port 53800 [preauth]
2026-06-30T09:30:38.458459-05:00 claude-cloud systemd-logind[853]: New session c5215 of user claude.
2026-06-30T09:30:38.753116-05:00 claude-cloud systemd-logind[853]: Session c5215 logged out. Waiting for processes to exit.
2026-06-30T09:30:38.755047-05:00 claude-cloud systemd-logind[853]: Removed session c5215.
2026-06-30T09:31:34.006811-05:00 claude-cloud sshd[501510]: Invalid user cam1 from 103.38.182.49 port 59140
2026-06-30T09:31:34.176707-05:00 claude-cloud sshd[501510]: Received disconnect from 103.38.182.49 port 59140:11: Bye Bye [preauth]
2026-06-30T09:31:34.177061-05:00 claude-cloud sshd[501510]: Disconnected from invalid user cam1 103.38.182.49 port 59140 [preauth]
2026-06-30T09:31:34.936271-05:00 claude-cloud sshd[501508]: Invalid user tester from 45.198.224.46 port 58202
2026-06-30T09:31:35.602489-05:00 claude-cloud sshd[501508]: Connection closed by invalid user tester 45.198.224.46 port 58202 [preauth]
2026-06-30T09:31:42.519841-05:00 claude-cloud sshd[501519]: Connection closed by authenticating user root 27.71.230.31 port 41154 [preauth]
2026-06-30T09:32:22.779516-05:00 claude-cloud sshd[501679]: Invalid user admin from 2.57.121.25 port 45060
2026-06-30T09:32:22.805095-05:00 claude-cloud sshd[501679]: Connection closed by invalid user admin 2.57.121.25 port 45060 [preauth]
2026-06-30T09:33:40.701239-05:00 claude-cloud sshd[501878]: Invalid user gazeta from 103.38.182.49 port 44036
2026-06-30T09:33:40.860614-05:00 claude-cloud sshd[501878]: Received disconnect from 103.38.182.49 port 44036:11: Bye Bye [preauth]
2026-06-30T09:33:40.860972-05:00 claude-cloud sshd[501878]: Disconnected from invalid user gazeta 103.38.182.49 port 44036 [preauth]
2026-06-30T09:35:01.525620-05:00 claude-cloud CRON[502196]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-30T09:35:01.532044-05:00 claude-cloud CRON[502196]: pam_unix(cron:session): session closed for user root
2026-06-30T09:35:22.128705-05:00 claude-cloud sshd[502253]: Received disconnect from 103.112.62.144 port 48278:11: disconnected by user [preauth]
2026-06-30T09:35:22.129361-05:00 claude-cloud sshd[502253]: Disconnected from authenticating user root 103.112.62.144 port 48278 [preauth]
2026-06-30T09:35:33.646892-05:00 claude-cloud sshd[502282]: Invalid user pv from 103.38.182.49 port 36796
2026-06-30T09:35:33.825974-05:00 claude-cloud sshd[502282]: Received disconnect from 103.38.182.49 port 36796:11: Bye Bye [preauth]
2026-06-30T09:35:33.826104-05:00 claude-cloud sshd[502282]: Disconnected from invalid user pv 103.38.182.49 port 36796 [preauth]
2026-06-30T09:35:43.964512-05:00 claude-cloud systemd-logind[853]: New session c5216 of user claude.
2026-06-30T09:35:44.314058-05:00 claude-cloud systemd-logind[853]: Session c5216 logged out. Waiting for processes to exit.
2026-06-30T09:35:44.315334-05:00 claude-cloud systemd-logind[853]: Removed session c5216.
2026-06-30T09:37:08.211708-05:00 claude-cloud systemd-logind[853]: New session c5217 of user claude.
2026-06-30T09:37:08.236431-05:00 claude-cloud systemd-logind[853]: New session c5218 of user claude.
2026-06-30T09:37:08.290566-05:00 claude-cloud systemd-logind[853]: Session c5218 logged out. Waiting for processes to exit.
2026-06-30T09:37:08.295651-05:00 claude-cloud systemd-logind[853]: Removed session c5218.
2026-06-30T09:37:09.040104-05:00 claude-cloud systemd-logind[853]: New session c5219 of user claude.
2026-06-30T09:37:09.102107-05:00 claude-cloud systemd-logind[853]: Session c5219 logged out. Waiting for processes to exit.
2026-06-30T09:37:09.104080-05:00 claude-cloud systemd-logind[853]: Removed session c5219.
2026-06-30T09:37:09.787949-05:00 claude-cloud systemd-logind[853]: New session c5220 of user claude.
2026-06-30T09:37:10.854913-05:00 claude-cloud systemd-logind[853]: Session c5220 logged out. Waiting for processes to exit.
2026-06-30T09:37:10.856523-05:00 claude-cloud systemd-logind[853]: Removed session c5220.
2026-06-30T09:37:12.749109-05:00 claude-cloud systemd-logind[853]: New session c5221 of user claude.
2026-06-30T09:37:12.878899-05:00 claude-cloud systemd-logind[853]: Removed session c2896.
2026-06-30T09:37:12.887786-05:00 claude-cloud systemd-logind[853]: Session c5221 logged out. Waiting for processes to exit.
2026-06-30T09:37:13.620175-05:00 claude-cloud systemd-logind[853]: New session c5222 of user claude.
2026-06-30T09:37:25.168581-05:00 claude-cloud sshd[502719]: Connection closed by authenticating user root 27.71.230.31 port 49862 [preauth]
2026-06-30T09:37:29.377513-05:00 claude-cloud sshd[502743]: Invalid user perfil from 103.38.182.49 port 41738
2026-06-30T09:37:29.534799-05:00 claude-cloud sshd[502743]: Received disconnect from 103.38.182.49 port 41738:11: Bye Bye [preauth]
2026-06-30T09:37:29.535055-05:00 claude-cloud sshd[502743]: Disconnected from invalid user perfil 103.38.182.49 port 41738 [preauth]
2026-06-30T09:38:29.184506-05:00 claude-cloud sshd[503243]: Connection reset by 104.206.128.38 port 57478 [preauth]
2026-06-30T09:39:27.396044-05:00 claude-cloud sshd[503836]: Invalid user jl from 103.38.182.49 port 57368
2026-06-30T09:39:27.563478-05:00 claude-cloud sshd[503836]: Received disconnect from 103.38.182.49 port 57368:11: Bye Bye [preauth]
2026-06-30T09:39:27.563783-05:00 claude-cloud sshd[503836]: Disconnected from invalid user jl 103.38.182.49 port 57368 [preauth]
2026-06-30T09:40:37.127042-05:00 claude-cloud sshd[504083]: Invalid user shutinggu3 from 45.198.224.46 port 33614
2026-06-30T09:40:38.262112-05:00 claude-cloud sshd[504083]: Connection closed by invalid user shutinggu3 45.198.224.46 port 33614 [preauth]
2026-06-30T09:40:48.548565-05:00 claude-cloud systemd-logind[853]: New session c5223 of user claude.
2026-06-30T09:40:48.874802-05:00 claude-cloud systemd-logind[853]: Session c5223 logged out. Waiting for processes to exit.
2026-06-30T09:40:48.877245-05:00 claude-cloud systemd-logind[853]: Removed session c5223.
2026-06-30T09:41:18.304371-05:00 claude-cloud sshd[504292]: Invalid user franchise from 103.38.182.49 port 41658
2026-06-30T09:41:18.474383-05:00 claude-cloud sshd[504292]: Received disconnect from 103.38.182.49 port 41658:11: Bye Bye [preauth]
2026-06-30T09:41:18.474765-05:00 claude-cloud sshd[504292]: Disconnected from invalid user franchise 103.38.182.49 port 41658 [preauth]
2026-06-30T09:43:14.660566-05:00 claude-cloud sshd[504642]: Invalid user biurokarier from 103.38.182.49 port 59464
2026-06-30T09:43:14.822931-05:00 claude-cloud sshd[504642]: Received disconnect from 103.38.182.49 port 59464:11: Bye Bye [preauth]
2026-06-30T09:43:14.823344-05:00 claude-cloud sshd[504642]: Disconnected from invalid user biurokarier 103.38.182.49 port 59464 [preauth]
2026-06-30T09:43:23.542112-05:00 claude-cloud sshd[504608]: Connection closed by authenticating user root 27.71.230.31 port 51392 [preauth]
2026-06-30T09:45:01.545657-05:00 claude-cloud CRON[505089]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-30T09:45:01.553264-05:00 claude-cloud CRON[505089]: pam_unix(cron:session): session closed for user root
2026-06-30T09:45:14.215493-05:00 claude-cloud sshd[505130]: Invalid user wtest from 103.38.182.49 port 47454
2026-06-30T09:45:14.382704-05:00 claude-cloud sshd[505130]: Received disconnect from 103.38.182.49 port 47454:11: Bye Bye [preauth]
2026-06-30T09:45:14.383045-05:00 claude-cloud sshd[505130]: Disconnected from invalid user wtest 103.38.182.49 port 47454 [preauth]
2026-06-30T09:45:53.256673-05:00 claude-cloud systemd-logind[853]: New session c5224 of user claude.
2026-06-30T09:45:53.567631-05:00 claude-cloud systemd-logind[853]: Session c5224 logged out. Waiting for processes to exit.
2026-06-30T09:45:53.569915-05:00 claude-cloud systemd-logind[853]: Removed session c5224.
2026-06-30T09:46:07.725118-05:00 claude-cloud sshd[505402]: Invalid user testuser from 193.46.255.86 port 13774
2026-06-30T09:46:07.752411-05:00 claude-cloud sshd[505402]: Connection closed by invalid user testuser 193.46.255.86 port 13774 [preauth]
2026-06-30T09:47:10.898774-05:00 claude-cloud sshd[505598]: Invalid user zmail from 103.38.182.49 port 45166
2026-06-30T09:47:11.080069-05:00 claude-cloud sshd[505598]: Received disconnect from 103.38.182.49 port 45166:11: Bye Bye [preauth]
2026-06-30T09:47:11.080494-05:00 claude-cloud sshd[505598]: Disconnected from invalid user zmail 103.38.182.49 port 45166 [preauth]
2026-06-30T09:49:08.280404-05:00 claude-cloud sshd[505934]: Connection closed by authenticating user root 27.71.230.31 port 41314 [preauth]
2026-06-30T09:49:13.215827-05:00 claude-cloud sshd[505972]: Invalid user usuarios from 103.38.182.49 port 41544
2026-06-30T09:49:13.383033-05:00 claude-cloud sshd[505972]: Received disconnect from 103.38.182.49 port 41544:11: Bye Bye [preauth]
2026-06-30T09:49:13.383687-05:00 claude-cloud sshd[505972]: Disconnected from invalid user usuarios 103.38.182.49 port 41544 [preauth]
2026-06-30T09:50:10.274229-05:00 claude-cloud sshd[506135]: Connection closed by authenticating user root 45.198.224.46 port 55222 [preauth]
2026-06-30T09:50:58.464021-05:00 claude-cloud systemd-logind[853]: New session c5225 of user claude.
2026-06-30T09:50:58.777939-05:00 claude-cloud systemd-logind[853]: Session c5225 logged out. Waiting for processes to exit.
2026-06-30T09:50:58.780848-05:00 claude-cloud systemd-logind[853]: Removed session c5225.
2026-06-30T09:51:09.352040-05:00 claude-cloud sshd[506339]: Invalid user certificate from 103.38.182.49 port 44502
2026-06-30T09:51:09.514325-05:00 claude-cloud sshd[506339]: Received disconnect from 103.38.182.49 port 44502:11: Bye Bye [preauth]
2026-06-30T09:51:09.514581-05:00 claude-cloud sshd[506339]: Disconnected from invalid user certificate 103.38.182.49 port 44502 [preauth]
2026-06-30T09:52:07.179236-05:00 claude-cloud sshd[506503]: Invalid user malina from 2.57.121.112 port 33300
2026-06-30T09:52:07.204764-05:00 claude-cloud sshd[506503]: Connection closed by invalid user malina 2.57.121.112 port 33300 [preauth]
2026-06-30T09:52:09.056997-05:00 claude-cloud sshd[506512]: Invalid user admin from 45.148.10.121 port 34642
2026-06-30T09:52:09.070247-05:00 claude-cloud sshd[506512]: Connection closed by invalid user admin 45.148.10.121 port 34642 [preauth]
2026-06-30T09:53:01.157619-05:00 claude-cloud sshd[506679]: Invalid user forestdnszones from 103.38.182.49 port 39164
2026-06-30T09:53:01.323397-05:00 claude-cloud sshd[506679]: Received disconnect from 103.38.182.49 port 39164:11: Bye Bye [preauth]
2026-06-30T09:53:01.323582-05:00 claude-cloud sshd[506679]: Disconnected from invalid user forestdnszones 103.38.182.49 port 39164 [preauth]
2026-06-30T09:54:53.535745-05:00 claude-cloud sshd[507072]: Invalid user sensor from 103.38.182.49 port 51622
2026-06-30T09:54:53.721093-05:00 claude-cloud sshd[507072]: Received disconnect from 103.38.182.49 port 51622:11: Bye Bye [preauth]
2026-06-30T09:54:53.721462-05:00 claude-cloud sshd[507072]: Disconnected from invalid user sensor 103.38.182.49 port 51622 [preauth]
2026-06-30T09:55:01.565519-05:00 claude-cloud CRON[507091]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-30T09:55:01.573188-05:00 claude-cloud CRON[507091]: pam_unix(cron:session): session closed for user root
2026-06-30T09:55:16.475712-05:00 claude-cloud sshd[507052]: Connection closed by authenticating user root 27.71.230.31 port 57886 [preauth]
2026-06-30T09:56:00.036895-05:00 claude-cloud sshd[507246]: Connection closed by 64.89.160.135 port 58000
2026-06-30T09:56:03.254009-05:00 claude-cloud systemd-logind[853]: New session c5226 of user claude.
2026-06-30T09:56:03.627366-05:00 claude-cloud systemd-logind[853]: Session c5226 logged out. Waiting for processes to exit.
2026-06-30T09:56:03.629013-05:00 claude-cloud systemd-logind[853]: Removed session c5226.
2026-06-30T09:56:53.372135-05:00 claude-cloud sshd[507426]: Invalid user person from 103.38.182.49 port 35298
2026-06-30T09:56:53.540676-05:00 claude-cloud sshd[507426]: Received disconnect from 103.38.182.49 port 35298:11: Bye Bye [preauth]
2026-06-30T09:56:53.540903-05:00 claude-cloud sshd[507426]: Disconnected from invalid user person 103.38.182.49 port 35298 [preauth]
2026-06-30T09:58:47.378823-05:00 claude-cloud sshd[507743]: Invalid user mobileapps from 103.38.182.49 port 53248
2026-06-30T09:58:47.543041-05:00 claude-cloud sshd[507743]: Received disconnect from 103.38.182.49 port 53248:11: Bye Bye [preauth]
2026-06-30T09:58:47.543480-05:00 claude-cloud sshd[507743]: Disconnected from invalid user mobileapps 103.38.182.49 port 53248 [preauth]
2026-06-30T09:59:43.780120-05:00 claude-cloud sshd[507882]: Connection closed by authenticating user root 45.198.224.46 port 49858 [preauth]
2026-06-30T10:00:46.220003-05:00 claude-cloud sshd[508081]: Invalid user ru from 103.38.182.49 port 48926
2026-06-30T10:00:46.393845-05:00 claude-cloud sshd[508081]: Received disconnect from 103.38.182.49 port 48926:11: Bye Bye [preauth]
2026-06-30T10:00:46.394083-05:00 claude-cloud sshd[508081]: Disconnected from invalid user ru 103.38.182.49 port 48926 [preauth]
2026-06-30T10:00:47.833721-05:00 claude-cloud sshd[508052]: Connection closed by authenticating user root 27.71.230.31 port 35290 [preauth]
2026-06-30T10:01:07.938179-05:00 claude-cloud systemd-logind[853]: New session c5227 of user claude.
2026-06-30T10:01:08.237457-05:00 claude-cloud systemd-logind[853]: Session c5227 logged out. Waiting for processes to exit.
2026-06-30T10:01:08.238781-05:00 claude-cloud systemd-logind[853]: Removed session c5227.
2026-06-30T10:01:24.449924-05:00 claude-cloud sshd[508195]: Invalid user admin from 125.20.210.182 port 37498
2026-06-30T10:01:24.721261-05:00 claude-cloud sshd[508195]: Connection closed by invalid user admin 125.20.210.182 port 37498 [preauth]
2026-06-30T10:02:50.258231-05:00 claude-cloud sshd[508453]: Invalid user lan from 103.38.182.49 port 50124
2026-06-30T10:02:50.421759-05:00 claude-cloud sshd[508453]: Received disconnect from 103.38.182.49 port 50124:11: Bye Bye [preauth]
2026-06-30T10:02:50.422228-05:00 claude-cloud sshd[508453]: Disconnected from invalid user lan 103.38.182.49 port 50124 [preauth]
2026-06-30T10:04:52.686789-05:00 claude-cloud sshd[508888]: Invalid user sjc from 103.38.182.49 port 49556
2026-06-30T10:04:52.853632-05:00 claude-cloud sshd[508888]: Received disconnect from 103.38.182.49 port 49556:11: Bye Bye [preauth]
2026-06-30T10:04:52.853956-05:00 claude-cloud sshd[508888]: Disconnected from invalid user sjc 103.38.182.49 port 49556 [preauth]
2026-06-30T10:05:01.585262-05:00 claude-cloud CRON[508908]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-30T10:05:01.591824-05:00 claude-cloud CRON[508908]: pam_unix(cron:session): session closed for user root
2026-06-30T10:06:13.430206-05:00 claude-cloud systemd-logind[853]: New session c5228 of user claude.
2026-06-30T10:06:13.739897-05:00 claude-cloud systemd-logind[853]: Session c5228 logged out. Waiting for processes to exit.
2026-06-30T10:06:13.741748-05:00 claude-cloud systemd-logind[853]: Removed session c5228.
2026-06-30T10:06:45.948828-05:00 claude-cloud sshd[509170]: Connection closed by authenticating user root 27.71.230.31 port 58988 [preauth]
2026-06-30T10:09:33.815620-05:00 claude-cloud sshd[509718]: Invalid user ubuntu from 45.198.224.46 port 40910
2026-06-30T10:09:34.467882-05:00 claude-cloud sshd[509718]: Connection closed by invalid user ubuntu 45.198.224.46 port 40910 [preauth]
2026-06-30T10:09:49.252364-05:00 claude-cloud sshd[509747]: Invalid user orangepi from 125.20.210.182 port 42600
2026-06-30T10:09:50.100057-05:00 claude-cloud sshd[509747]: Connection closed by invalid user orangepi 125.20.210.182 port 42600 [preauth]
2026-06-30T10:11:20.514083-05:00 claude-cloud systemd-logind[853]: New session c5229 of user claude.
2026-06-30T10:11:20.843489-05:00 claude-cloud systemd-logind[853]: Session c5229 logged out. Waiting for processes to exit.
2026-06-30T10:11:20.845710-05:00 claude-cloud systemd-logind[853]: Removed session c5229.
2026-06-30T10:12:48.997839-05:00 claude-cloud sshd[510218]: Connection closed by authenticating user root 27.71.230.31 port 40302 [preauth]
2026-06-30T10:15:01.603610-05:00 claude-cloud CRON[510734]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-30T10:15:01.610372-05:00 claude-cloud CRON[510734]: pam_unix(cron:session): session closed for user root
2026-06-30T10:16:28.883487-05:00 claude-cloud systemd-logind[853]: New session c5230 of user claude.
2026-06-30T10:16:29.219167-05:00 claude-cloud systemd-logind[853]: Session c5230 logged out. Waiting for processes to exit.
2026-06-30T10:16:29.220929-05:00 claude-cloud systemd-logind[853]: Removed session c5230.
2026-06-30T10:17:01.618229-05:00 claude-cloud CRON[511104]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-30T10:17:01.623843-05:00 claude-cloud CRON[511104]: pam_unix(cron:session): session closed for user root
2026-06-30T10:18:48.648642-05:00 claude-cloud sshd[511366]: Connection closed by authenticating user root 125.20.210.182 port 60340 [preauth]
2026-06-30T10:19:11.220971-05:00 claude-cloud sshd[511457]: Connection closed by authenticating user root 45.198.224.46 port 59712 [preauth]
2026-06-30T10:21:35.054601-05:00 claude-cloud systemd-logind[853]: New session c5231 of user claude.
2026-06-30T10:21:35.405459-05:00 claude-cloud systemd-logind[853]: Session c5231 logged out. Waiting for processes to exit.
2026-06-30T10:21:35.407364-05:00 claude-cloud systemd-logind[853]: Removed session c5231.
2026-06-30T10:23:06.896514-05:00 claude-cloud sshd[512191]: Invalid user dis from 185.242.3.195 port 59556
2026-06-30T10:23:06.904057-05:00 claude-cloud sshd[512191]: Connection closed by invalid user dis 185.242.3.195 port 59556 [preauth]
2026-06-30T10:23:57.852216-05:00 claude-cloud sshd[512335]: Received disconnect from 23.95.20.168 port 35824:11: disconnected by user [preauth]
2026-06-30T10:23:57.853158-05:00 claude-cloud sshd[512335]: Disconnected from authenticating user root 23.95.20.168 port 35824 [preauth]
2026-06-30T10:24:25.179892-05:00 claude-cloud sshd[512362]: Connection closed by authenticating user root 27.71.230.31 port 41760 [preauth]
2026-06-30T10:25:01.635468-05:00 claude-cloud CRON[512519]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-30T10:25:01.642950-05:00 claude-cloud CRON[512519]: pam_unix(cron:session): session closed for user root
2026-06-30T10:26:41.018363-05:00 claude-cloud systemd-logind[853]: New session c5232 of user claude.
2026-06-30T10:26:41.353802-05:00 claude-cloud systemd-logind[853]: Session c5232 logged out. Waiting for processes to exit.
2026-06-30T10:26:41.354938-05:00 claude-cloud systemd-logind[853]: Removed session c5232.
2026-06-30T10:27:10.339042-05:00 claude-cloud sshd[512941]: Connection closed by authenticating user root 125.20.210.182 port 43616 [preauth]
2026-06-30T10:28:50.471211-05:00 claude-cloud sshd[513264]: Invalid user jinyutian from 45.198.224.46 port 42480
2026-06-30T10:28:51.016843-05:00 claude-cloud sshd[513264]: Connection closed by invalid user jinyutian 45.198.224.46 port 42480 [preauth]
2026-06-30T10:29:32.376002-05:00 claude-cloud sshd[513384]: Invalid user admin from 2.57.121.25 port 17236
2026-06-30T10:29:32.401249-05:00 claude-cloud sshd[513384]: Connection closed by invalid user admin 2.57.121.25 port 17236 [preauth]
2026-06-30T10:30:10.380678-05:00 claude-cloud sshd[513483]: Connection closed by authenticating user root 27.71.230.31 port 33310 [preauth]
2026-06-30T10:31:46.641238-05:00 claude-cloud systemd-logind[853]: New session c5233 of user claude.
2026-06-30T10:31:46.923710-05:00 claude-cloud systemd-logind[853]: Session c5233 logged out. Waiting for processes to exit.
2026-06-30T10:31:46.925001-05:00 claude-cloud systemd-logind[853]: Removed session c5233.
2026-06-30T10:31:53.438807-05:00 claude-cloud sshd[513843]: Received disconnect from 93.77.187.140 port 44430:11: Bye Bye [preauth]
2026-06-30T10:31:53.439363-05:00 claude-cloud sshd[513843]: Disconnected from authenticating user root 93.77.187.140 port 44430 [preauth]
2026-06-30T10:35:01.655438-05:00 claude-cloud CRON[514401]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-30T10:35:01.660862-05:00 claude-cloud CRON[514401]: pam_unix(cron:session): session closed for user root
2026-06-30T10:36:05.907385-05:00 claude-cloud sshd[514620]: Connection closed by authenticating user root 27.71.230.31 port 58408 [preauth]
2026-06-30T10:36:06.020096-05:00 claude-cloud sshd[514629]: Connection closed by authenticating user root 125.20.210.182 port 50712 [preauth]
2026-06-30T10:36:49.269961-05:00 claude-cloud sshd[514765]: Invalid user admin from 193.46.255.86 port 34844
2026-06-30T10:36:49.296160-05:00 claude-cloud sshd[514765]: Connection closed by invalid user admin 193.46.255.86 port 34844 [preauth]
2026-06-30T10:36:51.702944-05:00 claude-cloud systemd-logind[853]: New session c5234 of user claude.
2026-06-30T10:36:52.031134-05:00 claude-cloud systemd-logind[853]: Session c5234 logged out. Waiting for processes to exit.
2026-06-30T10:36:52.032841-05:00 claude-cloud systemd-logind[853]: Removed session c5234.
2026-06-30T10:38:24.632364-05:00 claude-cloud sshd[515070]: Invalid user ubuntu from 45.198.224.46 port 50212
2026-06-30T10:38:25.510182-05:00 claude-cloud sshd[515070]: Connection closed by invalid user ubuntu 45.198.224.46 port 50212 [preauth]
2026-06-30T10:39:03.939232-05:00 claude-cloud sshd[515188]: Received disconnect from 175.110.112.8 port 42052:11: disconnected by user [preauth]
2026-06-30T10:39:03.940232-05:00 claude-cloud sshd[515188]: Disconnected from authenticating user root 175.110.112.8 port 42052 [preauth]
2026-06-30T10:41:29.433039-05:00 claude-cloud sshd[515653]: Connection closed by 4.240.8.92 port 56302
2026-06-30T10:41:58.010186-05:00 claude-cloud systemd-logind[853]: New session c5235 of user claude.
2026-06-30T10:41:58.296365-05:00 claude-cloud systemd-logind[853]: Session c5235 logged out. Waiting for processes to exit.
2026-06-30T10:41:58.299356-05:00 claude-cloud systemd-logind[853]: Removed session c5235.
2026-06-30T10:42:00.840363-05:00 claude-cloud sshd[515691]: Connection closed by authenticating user root 27.71.230.31 port 52812 [preauth]
2026-06-30T10:43:11.245636-05:00 claude-cloud sshd[515951]: Received disconnect from 42.200.78.166 port 40727:11: Bye Bye [preauth]
2026-06-30T10:43:11.246004-05:00 claude-cloud sshd[515951]: Disconnected from authenticating user root 42.200.78.166 port 40727 [preauth]
2026-06-30T10:44:07.703388-05:00 claude-cloud sshd[516138]: Connection closed by 170.130.187.22 port 51347
2026-06-30T10:44:20.553816-05:00 claude-cloud sshd[516156]: Connection closed by authenticating user root 125.20.210.182 port 33728 [preauth]
2026-06-30T10:45:01.672934-05:00 claude-cloud CRON[516308]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-30T10:45:01.678813-05:00 claude-cloud CRON[516308]: pam_unix(cron:session): session closed for user root
2026-06-30T10:45:09.375664-05:00 claude-cloud sshd[516318]: Received disconnect from 93.77.187.140 port 39980:11: Bye Bye [preauth]
2026-06-30T10:45:09.375976-05:00 claude-cloud sshd[516318]: Disconnected from authenticating user root 93.77.187.140 port 39980 [preauth]
2026-06-30T10:46:53.555093-05:00 claude-cloud sshd[516710]: Received disconnect from 93.77.187.140 port 44428:11: Bye Bye [preauth]
2026-06-30T10:46:53.555734-05:00 claude-cloud sshd[516710]: Disconnected from authenticating user root 93.77.187.140 port 44428 [preauth]
2026-06-30T10:47:04.535999-05:00 claude-cloud systemd-logind[853]: New session c5236 of user claude.
2026-06-30T10:47:04.824398-05:00 claude-cloud systemd-logind[853]: Session c5236 logged out. Waiting for processes to exit.
2026-06-30T10:47:04.826206-05:00 claude-cloud systemd-logind[853]: Removed session c5236.
2026-06-30T10:47:34.701730-05:00 claude-cloud sshd[516818]: Received disconnect from 42.200.78.166 port 64439:11: Bye Bye [preauth]
2026-06-30T10:47:34.702607-05:00 claude-cloud sshd[516818]: Disconnected from authenticating user root 42.200.78.166 port 64439 [preauth]
2026-06-30T10:47:47.783257-05:00 claude-cloud sshd[516820]: Connection closed by authenticating user root 27.71.230.31 port 57198 [preauth]
2026-06-30T10:48:05.195982-05:00 claude-cloud sshd[516928]: Invalid user data from 45.198.224.46 port 48208
2026-06-30T10:48:06.084247-05:00 claude-cloud sshd[516928]: Connection closed by invalid user data 45.198.224.46 port 48208 [preauth]
2026-06-30T10:48:37.516066-05:00 claude-cloud sshd[517024]: Received disconnect from 93.77.187.140 port 42392:11: Bye Bye [preauth]
2026-06-30T10:48:37.517054-05:00 claude-cloud sshd[517024]: Disconnected from authenticating user root 93.77.187.140 port 42392 [preauth]
2026-06-30T10:49:28.795302-05:00 claude-cloud sshd[517176]: Received disconnect from 42.200.78.166 port 58157:11: Bye Bye [preauth]
2026-06-30T10:49:28.795692-05:00 claude-cloud sshd[517176]: Disconnected from authenticating user root 42.200.78.166 port 58157 [preauth]
2026-06-30T10:50:22.442651-05:00 claude-cloud sshd[517349]: Received disconnect from 93.77.187.140 port 39898:11: Bye Bye [preauth]
2026-06-30T10:50:22.442914-05:00 claude-cloud sshd[517349]: Disconnected from authenticating user root 93.77.187.140 port 39898 [preauth]
2026-06-30T10:51:23.318388-05:00 claude-cloud sshd[517506]: Received disconnect from 42.200.78.166 port 42838:11: Bye Bye [preauth]
2026-06-30T10:51:23.321932-05:00 claude-cloud sshd[517506]: Disconnected from authenticating user root 42.200.78.166 port 42838 [preauth]
2026-06-30T10:52:05.838415-05:00 claude-cloud sshd[517621]: Received disconnect from 93.77.187.140 port 60160:11: Bye Bye [preauth]
2026-06-30T10:52:05.839029-05:00 claude-cloud sshd[517621]: Disconnected from authenticating user root 93.77.187.140 port 60160 [preauth]
2026-06-30T10:52:10.139132-05:00 claude-cloud systemd-logind[853]: New session c5237 of user claude.
2026-06-30T10:52:10.517798-05:00 claude-cloud systemd-logind[853]: Session c5237 logged out. Waiting for processes to exit.
2026-06-30T10:52:10.520159-05:00 claude-cloud systemd-logind[853]: Removed session c5237.
2026-06-30T10:52:37.035107-05:00 claude-cloud sshd[517715]: Connection closed by authenticating user root 125.20.210.182 port 37322 [preauth]
2026-06-30T10:53:24.004097-05:00 claude-cloud sshd[517867]: Received disconnect from 42.200.78.166 port 60300:11: Bye Bye [preauth]
2026-06-30T10:53:24.005089-05:00 claude-cloud sshd[517867]: Disconnected from authenticating user root 42.200.78.166 port 60300 [preauth]
2026-06-30T10:53:43.115846-05:00 claude-cloud sshd[517878]: Connection closed by authenticating user root 27.71.230.31 port 41148 [preauth]
2026-06-30T10:53:47.938071-05:00 claude-cloud sshd[517949]: Received disconnect from 93.77.187.140 port 54608:11: Bye Bye [preauth]
2026-06-30T10:53:47.938497-05:00 claude-cloud sshd[517949]: Disconnected from authenticating user root 93.77.187.140 port 54608 [preauth]
2026-06-30T10:55:01.692502-05:00 claude-cloud CRON[518143]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-30T10:55:01.699459-05:00 claude-cloud CRON[518143]: pam_unix(cron:session): session closed for user root
2026-06-30T10:55:09.688168-05:00 claude-cloud sshd[518146]: Connection closed by 54.235.13.138 port 27618 [preauth]
2026-06-30T10:55:22.308449-05:00 claude-cloud sshd[518218]: Received disconnect from 42.200.78.166 port 54020:11: Bye Bye [preauth]
2026-06-30T10:55:22.308872-05:00 claude-cloud sshd[518218]: Disconnected from authenticating user root 42.200.78.166 port 54020 [preauth]
2026-06-30T10:55:25.752485-05:00 claude-cloud sshd[518229]: Received disconnect from 93.77.187.140 port 51544:11: Bye Bye [preauth]
2026-06-30T10:55:25.752867-05:00 claude-cloud sshd[518229]: Disconnected from authenticating user root 93.77.187.140 port 51544 [preauth]
2026-06-30T10:55:59.794332-05:00 claude-cloud sshd[518383]: Connection closed by 203.121.106.56 port 63264 [preauth]
2026-06-30T10:57:01.286315-05:00 claude-cloud sshd[518551]: Received disconnect from 93.77.187.140 port 56274:11: Bye Bye [preauth]
2026-06-30T10:57:01.286993-05:00 claude-cloud sshd[518551]: Disconnected from authenticating user root 93.77.187.140 port 56274 [preauth]
2026-06-30T10:57:15.768673-05:00 claude-cloud systemd-logind[853]: New session c5238 of user claude.
2026-06-30T10:57:16.127209-05:00 claude-cloud systemd-logind[853]: Session c5238 logged out. Waiting for processes to exit.
2026-06-30T10:57:16.128737-05:00 claude-cloud systemd-logind[853]: Removed session c5238.
2026-06-30T10:57:20.335513-05:00 claude-cloud sshd[518617]: Received disconnect from 42.200.78.166 port 38707:11: Bye Bye [preauth]
2026-06-30T10:57:20.335968-05:00 claude-cloud sshd[518617]: Disconnected from authenticating user root 42.200.78.166 port 38707 [preauth]
2026-06-30T10:57:36.807203-05:00 claude-cloud sshd[518648]: Connection closed by authenticating user root 45.198.224.46 port 46800 [preauth]
2026-06-30T10:58:39.657610-05:00 claude-cloud sshd[518835]: Received disconnect from 93.77.187.140 port 57544:11: Bye Bye [preauth]
2026-06-30T10:58:39.658161-05:00 claude-cloud sshd[518835]: Disconnected from authenticating user root 93.77.187.140 port 57544 [preauth]
2026-06-30T10:59:24.146740-05:00 claude-cloud sshd[518981]: Received disconnect from 42.200.78.166 port 56166:11: Bye Bye [preauth]
2026-06-30T10:59:24.147778-05:00 claude-cloud sshd[518981]: Disconnected from authenticating user root 42.200.78.166 port 56166 [preauth]
2026-06-30T10:59:26.864238-05:00 claude-cloud sshd[518946]: Connection closed by authenticating user root 27.71.230.31 port 60864 [preauth]
2026-06-30T10:59:37.378660-05:00 claude-cloud sshd[518997]: Received disconnect from 107.173.122.15 port 35020:11: disconnected by user [preauth]
2026-06-30T10:59:37.378988-05:00 claude-cloud sshd[518997]: Disconnected from authenticating user root 107.173.122.15 port 35020 [preauth]
2026-06-30T11:00:20.156945-05:00 claude-cloud sshd[519209]: Received disconnect from 93.77.187.140 port 38238:11: Bye Bye [preauth]
2026-06-30T11:00:20.157404-05:00 claude-cloud sshd[519209]: Disconnected from authenticating user root 93.77.187.140 port 38238 [preauth]
2026-06-30T11:00:30.193881-05:00 claude-cloud sshd[519225]: Connection closed by authenticating user root 125.20.210.182 port 38148 [preauth]
2026-06-30T11:01:58.678748-05:00 claude-cloud sshd[519520]: Received disconnect from 93.77.187.140 port 51434:11: Bye Bye [preauth]
2026-06-30T11:01:58.679652-05:00 claude-cloud sshd[519520]: Disconnected from authenticating user root 93.77.187.140 port 51434 [preauth]
2026-06-30T11:02:23.728905-05:00 claude-cloud systemd-logind[853]: New session c5239 of user claude.
2026-06-30T11:02:24.041492-05:00 claude-cloud systemd-logind[853]: Session c5239 logged out. Waiting for processes to exit.
2026-06-30T11:02:24.044960-05:00 claude-cloud systemd-logind[853]: Removed session c5239.
2026-06-30T11:03:31.236901-05:00 claude-cloud sshd[519784]: Connection closed by 152.32.252.233 port 39416
2026-06-30T11:03:31.781161-05:00 claude-cloud sshd[519785]: Connection closed by 152.32.252.233 port 39430 [preauth]
2026-06-30T11:03:33.052544-05:00 claude-cloud sshd[519787]: Unable to negotiate with 152.32.252.233 port 39440: no matching host key type found. Their offer: ssh-rsa [preauth]
2026-06-30T11:03:42.014570-05:00 claude-cloud sshd[519813]: Received disconnect from 93.77.187.140 port 41540:11: Bye Bye [preauth]
2026-06-30T11:03:42.014905-05:00 claude-cloud sshd[519813]: Disconnected from authenticating user root 93.77.187.140 port 41540 [preauth]
2026-06-30T11:04:02.727812-05:00 claude-cloud sshd[519888]: Connection closed by 45.148.10.240 port 54734
2026-06-30T11:05:01.710867-05:00 claude-cloud CRON[520053]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-30T11:05:01.717317-05:00 claude-cloud CRON[520053]: pam_unix(cron:session): session closed for user root
2026-06-30T11:05:28.024731-05:00 claude-cloud sshd[520133]: Received disconnect from 93.77.187.140 port 55562:11: Bye Bye [preauth]
2026-06-30T11:05:28.025439-05:00 claude-cloud sshd[520133]: Disconnected from authenticating user root 93.77.187.140 port 55562 [preauth]
2026-06-30T11:05:41.026355-05:00 claude-cloud sshd[520149]: Invalid user eth-docker from 45.148.10.240 port 53542
2026-06-30T11:05:41.074835-05:00 claude-cloud sshd[520149]: Connection closed by invalid user eth-docker 45.148.10.240 port 53542 [preauth]
2026-06-30T11:05:48.529013-05:00 claude-cloud sshd[520063]: Connection closed by authenticating user root 27.71.230.31 port 51834 [preauth]
2026-06-30T11:06:17.643210-05:00 claude-cloud sshd[520279]: Connection reset by authenticating user root 45.148.10.147 port 44586 [preauth]
2026-06-30T11:07:15.534007-05:00 claude-cloud sshd[520505]: Received disconnect from 93.77.187.140 port 38122:11: Bye Bye [preauth]
2026-06-30T11:07:15.534389-05:00 claude-cloud sshd[520505]: Disconnected from authenticating user root 93.77.187.140 port 38122 [preauth]
2026-06-30T11:07:19.186235-05:00 claude-cloud sshd[520510]: Invalid user admin from 45.198.224.46 port 44870
2026-06-30T11:07:19.978319-05:00 claude-cloud sshd[520510]: Connection closed by invalid user admin 45.198.224.46 port 44870 [preauth]
2026-06-30T11:07:28.923910-05:00 claude-cloud systemd-logind[853]: New session c5240 of user claude.
2026-06-30T11:07:29.284213-05:00 claude-cloud systemd-logind[853]: Session c5240 logged out. Waiting for processes to exit.
2026-06-30T11:07:29.285949-05:00 claude-cloud systemd-logind[853]: Removed session c5240.
2026-06-30T11:07:34.396435-05:00 claude-cloud sshd[520567]: Invalid user ethdocker from 45.148.10.240 port 55402
2026-06-30T11:07:34.409116-05:00 claude-cloud sshd[520567]: Connection closed by invalid user ethdocker 45.148.10.240 port 55402 [preauth]
2026-06-30T11:08:36.388735-05:00 claude-cloud sshd[520735]: Invalid user pricilla from 2.57.121.112 port 24330
2026-06-30T11:08:36.415235-05:00 claude-cloud sshd[520735]: Connection closed by invalid user pricilla 2.57.121.112 port 24330 [preauth]
2026-06-30T11:08:41.249558-05:00 claude-cloud sshd[520725]: Invalid user test from 125.20.210.182 port 36334
2026-06-30T11:08:43.791843-05:00 claude-cloud sshd[520725]: Connection closed by invalid user test 125.20.210.182 port 36334 [preauth]
2026-06-30T11:09:18.475236-05:00 claude-cloud sshd[520876]: Invalid user sol from 45.148.10.240 port 54870
2026-06-30T11:09:18.488048-05:00 claude-cloud sshd[520876]: Connection closed by invalid user sol 45.148.10.240 port 54870 [preauth]
2026-06-30T11:11:05.515888-05:00 claude-cloud sshd[521173]: Invalid user sol from 45.148.10.240 port 51416
2026-06-30T11:11:05.530167-05:00 claude-cloud sshd[521173]: Connection closed by invalid user sol 45.148.10.240 port 51416 [preauth]
2026-06-30T11:11:10.205932-05:00 claude-cloud sshd[521150]: Connection closed by authenticating user root 27.71.230.31 port 60038 [preauth]
2026-06-30T11:12:34.044556-05:00 claude-cloud systemd-logind[853]: New session c5241 of user claude.
2026-06-30T11:12:34.361466-05:00 claude-cloud systemd-logind[853]: Session c5241 logged out. Waiting for processes to exit.
2026-06-30T11:12:34.364025-05:00 claude-cloud systemd-logind[853]: Removed session c5241.
2026-06-30T11:12:38.550243-05:00 claude-cloud sshd[521489]: Connection reset by authenticating user root 45.148.10.152 port 49016 [preauth]
2026-06-30T11:12:48.118778-05:00 claude-cloud sshd[521565]: Invalid user sol from 45.148.10.240 port 43580
2026-06-30T11:12:48.132881-05:00 claude-cloud sshd[521565]: Connection closed by invalid user sol 45.148.10.240 port 43580 [preauth]
2026-06-30T11:15:01.729806-05:00 claude-cloud CRON[522070]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-30T11:15:01.736203-05:00 claude-cloud CRON[522070]: pam_unix(cron:session): session closed for user root
2026-06-30T11:16:48.315076-05:00 claude-cloud sshd[522419]: Connection closed by authenticating user root 45.198.224.46 port 37340 [preauth]
2026-06-30T11:16:57.368695-05:00 claude-cloud sshd[522340]: Connection closed by authenticating user root 27.71.230.31 port 41260 [preauth]
2026-06-30T11:16:59.292639-05:00 claude-cloud sshd[522469]: Invalid user user from 125.20.210.182 port 42244
2026-06-30T11:16:59.517850-05:00 claude-cloud sshd[522469]: Connection closed by invalid user user 125.20.210.182 port 42244 [preauth]
2026-06-30T11:17:01.744865-05:00 claude-cloud CRON[522478]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-30T11:17:01.751308-05:00 claude-cloud CRON[522478]: pam_unix(cron:session): session closed for user root
2026-06-30T11:17:39.164759-05:00 claude-cloud systemd-logind[853]: New session c5242 of user claude.
2026-06-30T11:17:39.444774-05:00 claude-cloud systemd-logind[853]: Session c5242 logged out. Waiting for processes to exit.
2026-06-30T11:17:39.446004-05:00 claude-cloud systemd-logind[853]: Removed session c5242.
2026-06-30T11:18:19.647339-05:00 claude-cloud sshd[522708]: Connection reset by authenticating user root 45.148.10.151 port 45100 [preauth]
2026-06-30T11:21:33.379104-05:00 claude-cloud systemd-logind[853]: Session c5222 logged out. Waiting for processes to exit.
2026-06-30T11:21:33.381034-05:00 claude-cloud systemd-logind[853]: Session c5217 logged out. Waiting for processes to exit.
2026-06-30T11:21:33.382243-05:00 claude-cloud systemd-logind[853]: Removed session c5217.
2026-06-30T11:21:33.383587-05:00 claude-cloud systemd-logind[853]: Removed session c5222.
2026-06-30T11:21:53.784332-05:00 claude-cloud systemd-logind[853]: New session c5243 of user claude.
2026-06-30T11:21:53.807656-05:00 claude-cloud systemd-logind[853]: New session c5244 of user claude.
2026-06-30T11:21:53.851615-05:00 claude-cloud systemd-logind[853]: Session c5243 logged out. Waiting for processes to exit.
2026-06-30T11:21:53.856337-05:00 claude-cloud systemd-logind[853]: Removed session c5243.
2026-06-30T11:22:14.790405-05:00 claude-cloud systemd-logind[853]: New session c5245 of user claude.
2026-06-30T11:22:14.845172-05:00 claude-cloud systemd-logind[853]: Session c5245 logged out. Waiting for processes to exit.
2026-06-30T11:22:14.847832-05:00 claude-cloud systemd-logind[853]: Removed session c5245.
2026-06-30T11:22:16.668756-05:00 claude-cloud systemd-logind[853]: New session c5246 of user claude.
2026-06-30T11:23:02.813792-05:00 claude-cloud sshd[523608]: Invalid user ubuntu from 45.148.10.240 port 38468
2026-06-30T11:23:02.826138-05:00 claude-cloud sshd[523608]: Connection closed by invalid user ubuntu 45.148.10.240 port 38468 [preauth]
2026-06-30T11:23:07.158592-05:00 claude-cloud systemd-logind[853]: New session c5247 of user claude.
2026-06-30T11:23:07.564933-05:00 claude-cloud systemd-logind[853]: Session c5247 logged out. Waiting for processes to exit.
2026-06-30T11:23:07.566350-05:00 claude-cloud systemd-logind[853]: Removed session c5247.
2026-06-30T11:23:33.542965-05:00 claude-cloud sshd[523703]: Received disconnect from 195.62.32.180 port 42324:11: disconnected by user [preauth]
2026-06-30T11:23:33.543644-05:00 claude-cloud sshd[523703]: Disconnected from authenticating user root 195.62.32.180 port 42324 [preauth]
2026-06-30T11:23:57.598496-05:00 claude-cloud sshd[523780]: Connection reset by authenticating user root 45.148.10.152 port 50368 [preauth]
2026-06-30T11:24:51.283950-05:00 claude-cloud sshd[523954]: Invalid user ubuntu from 45.148.10.240 port 51948
2026-06-30T11:24:51.296347-05:00 claude-cloud sshd[523954]: Connection closed by invalid user ubuntu 45.148.10.240 port 51948 [preauth]
2026-06-30T11:25:01.761206-05:00 claude-cloud CRON[523972]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-30T11:25:01.767774-05:00 claude-cloud CRON[523972]: pam_unix(cron:session): session closed for user root
2026-06-30T11:25:14.377078-05:00 claude-cloud sshd[524002]: Invalid user jenkins from 120.48.154.88 port 57126
2026-06-30T11:25:14.553919-05:00 claude-cloud sshd[524002]: Received disconnect from 120.48.154.88 port 57126:11: Bye Bye [preauth]
2026-06-30T11:25:14.554247-05:00 claude-cloud sshd[524002]: Disconnected from invalid user jenkins 120.48.154.88 port 57126 [preauth]
2026-06-30T11:25:47.791795-05:00 claude-cloud sshd[524081]: Connection closed by authenticating user root 125.20.210.182 port 43944 [preauth]
2026-06-30T11:26:21.594402-05:00 claude-cloud sshd[524215]: Invalid user ubuntu from 45.198.224.46 port 57590
2026-06-30T11:26:22.175071-05:00 claude-cloud sshd[524215]: Connection closed by invalid user ubuntu 45.198.224.46 port 57590 [preauth]
2026-06-30T11:26:31.747372-05:00 claude-cloud sshd[524246]: Invalid user ubuntu from 45.148.10.240 port 38464
2026-06-30T11:26:31.759185-05:00 claude-cloud sshd[524246]: Connection closed by invalid user ubuntu 45.148.10.240 port 38464 [preauth]
2026-06-30T11:26:42.504035-05:00 claude-cloud sshd[524271]: Invalid user admin from 2.57.121.25 port 59996
2026-06-30T11:26:42.529921-05:00 claude-cloud sshd[524271]: Connection closed by invalid user admin 2.57.121.25 port 59996 [preauth]
2026-06-30T11:27:37.748930-05:00 claude-cloud sshd[524497]: Invalid user admin from 193.46.255.86 port 37678
2026-06-30T11:27:37.775665-05:00 claude-cloud sshd[524497]: Connection closed by invalid user admin 193.46.255.86 port 37678 [preauth]
2026-06-30T11:28:09.797220-05:00 claude-cloud sshd[524581]: Invalid user ubuntu from 45.148.10.240 port 40652
2026-06-30T11:28:09.809629-05:00 claude-cloud sshd[524581]: Connection closed by invalid user ubuntu 45.148.10.240 port 40652 [preauth]
2026-06-30T11:28:37.505492-05:00 claude-cloud sshd[524659]: Connection closed by authenticating user root 27.71.230.31 port 47608 [preauth]
2026-06-30T11:29:32.168662-05:00 claude-cloud sshd[525065]: Connection reset by authenticating user root 45.227.254.170 port 34094 [preauth]
2026-06-30T11:29:49.682557-05:00 claude-cloud sshd[525131]: Invalid user ubuntu from 45.148.10.240 port 42624
2026-06-30T11:29:49.696482-05:00 claude-cloud sshd[525131]: Connection closed by invalid user ubuntu 45.148.10.240 port 42624 [preauth]
2026-06-30T11:30:07.000796-05:00 claude-cloud systemd-logind[853]: Session c5246 logged out. Waiting for processes to exit.
2026-06-30T11:30:07.015595-05:00 claude-cloud systemd-logind[853]: Removed session c5246.
2026-06-30T11:30:11.688548-05:00 claude-cloud systemd-logind[853]: Session c5244 logged out. Waiting for processes to exit.
2026-06-30T11:30:11.690866-05:00 claude-cloud systemd-logind[853]: Removed session c5244.
2026-06-30T11:30:19.846941-05:00 claude-cloud systemd-logind[853]: New session c5248 of user claude.
2026-06-30T11:30:19.881190-05:00 claude-cloud systemd-logind[853]: Session c5248 logged out. Waiting for processes to exit.
2026-06-30T11:30:19.882356-05:00 claude-cloud systemd-logind[853]: Removed session c5248.
2026-06-30T11:30:21.718713-05:00 claude-cloud systemd-logind[853]: New session c5249 of user claude.
2026-06-30T11:30:21.734921-05:00 claude-cloud systemd-logind[853]: New session c5250 of user claude.
2026-06-30T11:30:21.758624-05:00 claude-cloud systemd-logind[853]: Session c5249 logged out. Waiting for processes to exit.
2026-06-30T11:30:21.762265-05:00 claude-cloud systemd-logind[853]: Removed session c5249.
2026-06-30T11:30:24.624690-05:00 claude-cloud systemd-logind[853]: New session c5251 of user claude.
2026-06-30T11:30:24.679260-05:00 claude-cloud systemd-logind[853]: Session c5251 logged out. Waiting for processes to exit.
2026-06-30T11:30:24.680513-05:00 claude-cloud systemd-logind[853]: Removed session c5251.
2026-06-30T11:30:24.814003-05:00 claude-cloud systemd-logind[853]: New session c5252 of user claude.
2026-06-30T11:30:24.852746-05:00 claude-cloud systemd-logind[853]: Session c5252 logged out. Waiting for processes to exit.
2026-06-30T11:30:24.855149-05:00 claude-cloud systemd-logind[853]: Removed session c5252.
2026-06-30T11:30:32.531108-05:00 claude-cloud systemd-logind[853]: New session c5253 of user claude.
2026-06-30T11:30:32.925964-05:00 claude-cloud systemd-logind[853]: New session c5254 of user claude.
2026-06-30T11:30:33.211155-05:00 claude-cloud systemd-logind[853]: Session c5254 logged out. Waiting for processes to exit.
2026-06-30T11:30:33.212748-05:00 claude-cloud systemd-logind[853]: Removed session c5254.
2026-06-30T11:32:06.260146-05:00 claude-cloud systemd-logind[853]: Session c5250 logged out. Waiting for processes to exit.
2026-06-30T11:32:06.261394-05:00 claude-cloud systemd-logind[853]: Session c5253 logged out. Waiting for processes to exit.
2026-06-30T11:32:06.263554-05:00 claude-cloud systemd-logind[853]: Removed session c5250.
2026-06-30T11:32:06.265363-05:00 claude-cloud systemd-logind[853]: Removed session c5253.
2026-06-30T11:33:24.143198-05:00 claude-cloud systemd-logind[853]: New session c5255 of user claude.
2026-06-30T11:33:24.168408-05:00 claude-cloud systemd-logind[853]: New session c5256 of user claude.
2026-06-30T11:33:24.208574-05:00 claude-cloud systemd-logind[853]: Session c5256 logged out. Waiting for processes to exit.
2026-06-30T11:33:24.211303-05:00 claude-cloud systemd-logind[853]: Removed session c5256.
2026-06-30T11:33:25.231897-05:00 claude-cloud systemd-logind[853]: New session c5257 of user claude.
2026-06-30T11:33:25.285534-05:00 claude-cloud systemd-logind[853]: Session c5257 logged out. Waiting for processes to exit.
2026-06-30T11:33:25.287816-05:00 claude-cloud systemd-logind[853]: Removed session c5257.
2026-06-30T11:33:26.251510-05:00 claude-cloud systemd-logind[853]: New session c5258 of user claude.
2026-06-30T11:34:11.289702-05:00 claude-cloud sshd[526064]: Connection closed by authenticating user root 27.71.230.31 port 45002 [preauth]
2026-06-30T11:34:17.238116-05:00 claude-cloud sshd[526084]: Invalid user admin from 125.20.210.182 port 58512
2026-06-30T11:34:17.717620-05:00 claude-cloud sshd[526110]: Received disconnect from 152.32.182.41 port 49154:11: Bye Bye [preauth]
2026-06-30T11:34:17.717929-05:00 claude-cloud sshd[526110]: Disconnected from authenticating user root 152.32.182.41 port 49154 [preauth]
2026-06-30T11:34:18.506852-05:00 claude-cloud sshd[526084]: Connection closed by invalid user admin 125.20.210.182 port 58512 [preauth]
2026-06-30T11:35:01.777449-05:00 claude-cloud CRON[526250]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-30T11:35:01.783450-05:00 claude-cloud CRON[526250]: pam_unix(cron:session): session closed for user root
2026-06-30T11:35:04.428222-05:00 claude-cloud sshd[526253]: Connection reset by authenticating user root 62.60.130.219 port 60732 [preauth]
2026-06-30T11:35:41.868715-05:00 claude-cloud systemd-logind[853]: New session c5259 of user claude.
2026-06-30T11:35:42.231096-05:00 claude-cloud systemd-logind[853]: Session c5259 logged out. Waiting for processes to exit.
2026-06-30T11:35:42.234359-05:00 claude-cloud systemd-logind[853]: Removed session c5259.
2026-06-30T11:36:04.651816-05:00 claude-cloud sshd[526413]: Invalid user testuser from 45.198.224.46 port 40702
2026-06-30T11:36:05.482522-05:00 claude-cloud sshd[526413]: Connection closed by invalid user testuser 45.198.224.46 port 40702 [preauth]
2026-06-30T11:36:50.323413-05:00 claude-cloud sshd[526631]: Connection closed by 165.232.122.132 port 18439
2026-06-30T11:37:11.330264-05:00 claude-cloud sshd[526635]: Connection closed by 207.154.243.117 port 3178 [preauth]
2026-06-30T11:37:19.246704-05:00 claude-cloud sshd[526698]: Received disconnect from 120.48.154.88 port 44986:11: Bye Bye [preauth]
2026-06-30T11:37:19.247506-05:00 claude-cloud sshd[526698]: Disconnected from authenticating user root 120.48.154.88 port 44986 [preauth]
2026-06-30T11:37:25.562450-05:00 claude-cloud sshd[526459]: error: kex_exchange_identification: read: Connection reset by peer
2026-06-30T11:37:25.562930-05:00 claude-cloud sshd[526459]: Connection reset by 120.48.154.88 port 54724
2026-06-30T11:38:39.057244-05:00 claude-cloud sshd[526913]: Received disconnect from 152.32.182.41 port 50246:11: Bye Bye [preauth]
2026-06-30T11:38:39.060039-05:00 claude-cloud sshd[526913]: Disconnected from authenticating user root 152.32.182.41 port 50246 [preauth]
2026-06-30T11:40:03.484995-05:00 claude-cloud sshd[527172]: Received disconnect from 120.48.154.88 port 43760:11: Bye Bye [preauth]
2026-06-30T11:40:03.485639-05:00 claude-cloud sshd[527172]: Disconnected from authenticating user root 120.48.154.88 port 43760 [preauth]
2026-06-30T11:40:11.635381-05:00 claude-cloud sshd[527150]: Connection closed by authenticating user root 27.71.230.31 port 56808 [preauth]
2026-06-30T11:40:11.834202-05:00 claude-cloud sshd[527208]: Invalid user test from 152.32.182.41 port 59878
2026-06-30T11:40:11.942128-05:00 claude-cloud sshd[527208]: Received disconnect from 152.32.182.41 port 59878:11: Bye Bye [preauth]
2026-06-30T11:40:11.942416-05:00 claude-cloud sshd[527208]: Disconnected from invalid user test 152.32.182.41 port 59878 [preauth]
2026-06-30T11:40:19.804011-05:00 claude-cloud sshd[527233]: Invalid user solana from 45.148.10.240 port 52424
2026-06-30T11:40:19.818148-05:00 claude-cloud sshd[527233]: Connection closed by invalid user solana 45.148.10.240 port 52424 [preauth]
2026-06-30T11:40:35.997759-05:00 claude-cloud sshd[527274]: Connection reset by authenticating user root 45.148.10.141 port 45002 [preauth]
2026-06-30T11:40:47.328585-05:00 claude-cloud systemd-logind[853]: New session c5260 of user claude.
2026-06-30T11:40:47.641622-05:00 claude-cloud systemd-logind[853]: Session c5260 logged out. Waiting for processes to exit.
2026-06-30T11:40:47.643100-05:00 claude-cloud systemd-logind[853]: Removed session c5260.
2026-06-30T11:41:04.233841-05:00 claude-cloud sshd[527365]: Invalid user ubuntu from 120.48.154.88 port 43972
2026-06-30T11:41:04.407253-05:00 claude-cloud sshd[527365]: Received disconnect from 120.48.154.88 port 43972:11: Bye Bye [preauth]
2026-06-30T11:41:04.407652-05:00 claude-cloud sshd[527365]: Disconnected from invalid user ubuntu 120.48.154.88 port 43972 [preauth]
2026-06-30T11:41:22.808090-05:00 claude-cloud sshd[527434]: Invalid user devops from 4.240.8.92 port 51082
2026-06-30T11:41:22.934970-05:00 claude-cloud sshd[527434]: Connection closed by invalid user devops 4.240.8.92 port 51082 [preauth]
2026-06-30T11:41:23.640535-05:00 claude-cloud sshd[527436]: Invalid user oracle from 4.240.8.92 port 51086
2026-06-30T11:41:23.773935-05:00 claude-cloud sshd[527436]: Connection closed by invalid user oracle 4.240.8.92 port 51086 [preauth]
2026-06-30T11:41:24.507962-05:00 claude-cloud sshd[527440]: Invalid user vyos from 4.240.8.92 port 51090
2026-06-30T11:41:24.648401-05:00 claude-cloud sshd[527440]: Connection closed by invalid user vyos 4.240.8.92 port 51090 [preauth]
2026-06-30T11:41:25.459421-05:00 claude-cloud sshd[527442]: Connection closed by authenticating user root 4.240.8.92 port 35698 [preauth]
2026-06-30T11:41:26.122481-05:00 claude-cloud sshd[527444]: Invalid user pi from 4.240.8.92 port 35710
2026-06-30T11:41:26.250006-05:00 claude-cloud sshd[527444]: Connection closed by invalid user pi 4.240.8.92 port 35710 [preauth]
2026-06-30T11:41:27.037171-05:00 claude-cloud sshd[527453]: Connection closed by authenticating user root 4.240.8.92 port 35718 [preauth]
2026-06-30T11:41:27.727601-05:00 claude-cloud sshd[527455]: Invalid user kafka from 4.240.8.92 port 35726
2026-06-30T11:41:27.861888-05:00 claude-cloud sshd[527455]: Connection closed by invalid user kafka 4.240.8.92 port 35726 [preauth]
2026-06-30T11:41:42.839160-05:00 claude-cloud sshd[527494]: Received disconnect from 152.32.182.41 port 35534:11: Bye Bye [preauth]
2026-06-30T11:41:42.839623-05:00 claude-cloud sshd[527494]: Disconnected from authenticating user root 152.32.182.41 port 35534 [preauth]
2026-06-30T11:41:58.764906-05:00 claude-cloud sshd[527544]: Invalid user postgres from 45.148.10.240 port 37904
2026-06-30T11:41:58.778237-05:00 claude-cloud sshd[527544]: Connection closed by invalid user postgres 45.148.10.240 port 37904 [preauth]
2026-06-30T11:42:04.364179-05:00 claude-cloud sshd[527556]: Received disconnect from 120.48.154.88 port 46536:11: Bye Bye [preauth]
2026-06-30T11:42:04.364500-05:00 claude-cloud sshd[527556]: Disconnected from authenticating user root 120.48.154.88 port 46536 [preauth]
2026-06-30T11:42:27.211610-05:00 claude-cloud sshd[527623]: Invalid user cirros from 125.20.210.182 port 54834
2026-06-30T11:42:27.467099-05:00 claude-cloud sshd[527623]: Connection closed by invalid user cirros 125.20.210.182 port 54834 [preauth]
2026-06-30T11:43:18.394879-05:00 claude-cloud sshd[527785]: Received disconnect from 152.32.182.41 port 55124:11: Bye Bye [preauth]
2026-06-30T11:43:18.395484-05:00 claude-cloud sshd[527785]: Disconnected from authenticating user root 152.32.182.41 port 55124 [preauth]
2026-06-30T11:43:44.684996-05:00 claude-cloud sshd[527858]: Connection closed by authenticating user root 45.148.10.240 port 38914 [preauth]
2026-06-30T11:44:51.001433-05:00 claude-cloud sshd[528060]: Received disconnect from 152.32.182.41 port 59800:11: Bye Bye [preauth]
2026-06-30T11:44:51.001975-05:00 claude-cloud sshd[528060]: Disconnected from authenticating user root 152.32.182.41 port 59800 [preauth]
2026-06-30T11:45:01.793868-05:00 claude-cloud CRON[528085]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-30T11:45:01.800157-05:00 claude-cloud CRON[528085]: pam_unix(cron:session): session closed for user root
2026-06-30T11:45:30.736834-05:00 claude-cloud sshd[528171]: Connection closed by authenticating user root 45.148.10.240 port 41640 [preauth]
2026-06-30T11:45:40.926247-05:00 claude-cloud sshd[528190]: Invalid user web from 45.198.224.46 port 55258
2026-06-30T11:45:42.205006-05:00 claude-cloud sshd[528190]: Connection closed by invalid user web 45.198.224.46 port 55258 [preauth]
2026-06-30T11:45:48.922658-05:00 claude-cloud sshd[528195]: Connection closed by authenticating user root 27.71.230.31 port 36394 [preauth]
2026-06-30T11:45:53.046906-05:00 claude-cloud systemd-logind[853]: New session c5261 of user claude.
2026-06-30T11:45:53.385686-05:00 claude-cloud systemd-logind[853]: Session c5261 logged out. Waiting for processes to exit.
2026-06-30T11:45:53.387140-05:00 claude-cloud systemd-logind[853]: Removed session c5261.
2026-06-30T11:46:09.263376-05:00 claude-cloud sshd[528270]: Connection reset by authenticating user root 45.148.10.147 port 24766 [preauth]
2026-06-30T11:46:17.785358-05:00 claude-cloud sshd[528304]: Invalid user username from 152.32.182.41 port 47234
2026-06-30T11:46:17.898712-05:00 claude-cloud sshd[528304]: Received disconnect from 152.32.182.41 port 47234:11: Bye Bye [preauth]
2026-06-30T11:46:17.899011-05:00 claude-cloud sshd[528304]: Disconnected from invalid user username 152.32.182.41 port 47234 [preauth]
2026-06-30T11:47:10.663098-05:00 claude-cloud sshd[528468]: Connection closed by authenticating user root 45.148.10.240 port 52958 [preauth]
2026-06-30T11:47:40.602745-05:00 claude-cloud sshd[528538]: Invalid user demo from 152.32.182.41 port 50954
2026-06-30T11:47:40.793103-05:00 claude-cloud sshd[528538]: Received disconnect from 152.32.182.41 port 50954:11: Bye Bye [preauth]
2026-06-30T11:47:40.793332-05:00 claude-cloud sshd[528538]: Disconnected from invalid user demo 152.32.182.41 port 50954 [preauth]
2026-06-30T11:48:30.095727-05:00 claude-cloud sshd[528748]: Connection reset by 198.235.24.206 port 59406 [preauth]
2026-06-30T11:48:57.541677-05:00 claude-cloud sshd[528838]: Connection closed by authenticating user root 45.148.10.240 port 50126 [preauth]
2026-06-30T11:49:07.380549-05:00 claude-cloud sshd[528861]: Received disconnect from 152.32.182.41 port 49472:11: Bye Bye [preauth]
2026-06-30T11:49:07.380812-05:00 claude-cloud sshd[528861]: Disconnected from authenticating user root 152.32.182.41 port 49472 [preauth]
2026-06-30T11:50:39.406136-05:00 claude-cloud sshd[529127]: Received disconnect from 152.32.182.41 port 49660:11: Bye Bye [preauth]
2026-06-30T11:50:39.407094-05:00 claude-cloud sshd[529127]: Disconnected from authenticating user root 152.32.182.41 port 49660 [preauth]
2026-06-30T11:50:51.640870-05:00 claude-cloud sshd[529165]: Invalid user solana from 45.148.10.240 port 35582
2026-06-30T11:50:51.653604-05:00 claude-cloud sshd[529165]: Connection closed by invalid user solana 45.148.10.240 port 35582 [preauth]
2026-06-30T11:50:57.560478-05:00 claude-cloud sshd[529167]: Connection closed by authenticating user root 125.20.210.182 port 35214 [preauth]
2026-06-30T11:50:58.824328-05:00 claude-cloud systemd-logind[853]: New session c5262 of user claude.
2026-06-30T11:50:59.090906-05:00 claude-cloud systemd-logind[853]: Session c5262 logged out. Waiting for processes to exit.
2026-06-30T11:50:59.093658-05:00 claude-cloud systemd-logind[853]: Removed session c5262.
2026-06-30T11:51:35.926591-05:00 claude-cloud sshd[529298]: Connection reset by authenticating user root 45.148.10.152 port 17876 [preauth]
2026-06-30T11:52:08.029184-05:00 claude-cloud sshd[529397]: Received disconnect from 152.32.182.41 port 45092:11: Bye Bye [preauth]
2026-06-30T11:52:08.029838-05:00 claude-cloud sshd[529397]: Disconnected from authenticating user root 152.32.182.41 port 45092 [preauth]
2026-06-30T11:52:12.330893-05:00 claude-cloud sshd[529283]: Connection closed by authenticating user root 27.71.230.31 port 35910 [preauth]
2026-06-30T11:52:37.205559-05:00 claude-cloud sshd[529482]: Invalid user solana from 45.148.10.240 port 38324
2026-06-30T11:52:37.217518-05:00 claude-cloud sshd[529482]: Connection closed by invalid user solana 45.148.10.240 port 38324 [preauth]
2026-06-30T11:53:36.397853-05:00 claude-cloud sshd[529651]: Received disconnect from 152.32.182.41 port 36620:11: Bye Bye [preauth]
2026-06-30T11:53:36.398615-05:00 claude-cloud sshd[529651]: Disconnected from authenticating user root 152.32.182.41 port 36620 [preauth]
2026-06-30T11:54:20.349326-05:00 claude-cloud sshd[529800]: Invalid user defi from 45.148.10.240 port 50264
2026-06-30T11:54:20.362434-05:00 claude-cloud sshd[529800]: Connection closed by invalid user defi 45.148.10.240 port 50264 [preauth]
2026-06-30T11:55:01.813361-05:00 claude-cloud CRON[529903]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-30T11:55:01.821114-05:00 claude-cloud CRON[529903]: pam_unix(cron:session): session closed for user root
2026-06-30T11:55:03.902821-05:00 claude-cloud sshd[529909]: Connection closed by authenticating user root 185.242.3.195 port 47468 [preauth]
2026-06-30T11:55:08.642378-05:00 claude-cloud sshd[529921]: Received disconnect from 152.32.182.41 port 58048:11: Bye Bye [preauth]
2026-06-30T11:55:08.643121-05:00 claude-cloud sshd[529921]: Disconnected from authenticating user root 152.32.182.41 port 58048 [preauth]
2026-06-30T11:55:11.767807-05:00 claude-cloud sshd[529923]: Invalid user guest from 45.198.224.46 port 41972
2026-06-30T11:55:12.808672-05:00 claude-cloud sshd[529923]: Connection closed by invalid user guest 45.198.224.46 port 41972 [preauth]
2026-06-30T11:56:04.002556-05:00 claude-cloud systemd-logind[853]: New session c5263 of user claude.
2026-06-30T11:56:04.293025-05:00 claude-cloud systemd-logind[853]: Session c5263 logged out. Waiting for processes to exit.
2026-06-30T11:56:04.294436-05:00 claude-cloud systemd-logind[853]: Removed session c5263.
2026-06-30T11:56:05.968195-05:00 claude-cloud sshd[530100]: Invalid user geth from 45.148.10.240 port 58804
2026-06-30T11:56:05.981537-05:00 claude-cloud sshd[530100]: Connection closed by invalid user geth 45.148.10.240 port 58804 [preauth]
2026-06-30T11:56:44.356597-05:00 claude-cloud sshd[530213]: Received disconnect from 152.32.182.41 port 56002:11: Bye Bye [preauth]
2026-06-30T11:56:44.357447-05:00 claude-cloud sshd[530213]: Disconnected from authenticating user root 152.32.182.41 port 56002 [preauth]
2026-06-30T11:57:01.954742-05:00 claude-cloud sshd[530258]: Connection reset by authenticating user root 45.148.10.141 port 17644 [preauth]
2026-06-30T11:57:27.037937-05:00 claude-cloud sshd[530315]: Connection closed by authenticating user root 27.71.230.31 port 52908 [preauth]
2026-06-30T11:57:52.718791-05:00 claude-cloud sshd[530487]: Invalid user ethereum from 45.148.10.240 port 50276
2026-06-30T11:57:52.733260-05:00 claude-cloud sshd[530487]: Connection closed by invalid user ethereum 45.148.10.240 port 50276 [preauth]
2026-06-30T11:58:17.199826-05:00 claude-cloud sshd[530547]: Invalid user ubuntu from 152.32.182.41 port 44152
2026-06-30T11:58:17.314504-05:00 claude-cloud sshd[530547]: Received disconnect from 152.32.182.41 port 44152:11: Bye Bye [preauth]
2026-06-30T11:58:17.314947-05:00 claude-cloud sshd[530547]: Disconnected from invalid user ubuntu 152.32.182.41 port 44152 [preauth]
2026-06-30T11:59:03.427596-05:00 claude-cloud sshd[530657]: Connection closed by authenticating user root 125.20.210.182 port 35414 [preauth]
2026-06-30T11:59:32.067831-05:00 claude-cloud sshd[530751]: Invalid user eth from 45.148.10.240 port 34122
2026-06-30T11:59:32.080823-05:00 claude-cloud sshd[530751]: Connection closed by invalid user eth 45.148.10.240 port 34122 [preauth]
2026-06-30T12:01:09.432098-05:00 claude-cloud systemd-logind[853]: New session c5264 of user claude.
2026-06-30T12:01:09.698880-05:00 claude-cloud systemd-logind[853]: Session c5264 logged out. Waiting for processes to exit.
2026-06-30T12:01:09.701458-05:00 claude-cloud systemd-logind[853]: Removed session c5264.
2026-06-30T12:01:09.888592-05:00 claude-cloud sshd[531064]: Invalid user eth-docker from 45.148.10.240 port 45730
2026-06-30T12:01:09.902435-05:00 claude-cloud sshd[531064]: Connection closed by invalid user eth-docker 45.148.10.240 port 45730 [preauth]
2026-06-30T12:02:26.722506-05:00 claude-cloud sshd[531309]: Connection reset by authenticating user root 45.148.10.157 port 55330 [preauth]
2026-06-30T12:02:58.089496-05:00 claude-cloud sshd[531392]: Invalid user eth from 45.148.10.240 port 37430
2026-06-30T12:02:58.102104-05:00 claude-cloud sshd[531392]: Connection closed by invalid user eth 45.148.10.240 port 37430 [preauth]
2026-06-30T12:03:20.894690-05:00 claude-cloud sshd[531414]: Connection closed by authenticating user root 27.71.230.31 port 57638 [preauth]
2026-06-30T12:04:42.197880-05:00 claude-cloud sshd[531678]: Connection closed by authenticating user root 45.198.224.46 port 48708 [preauth]
2026-06-30T12:04:48.943899-05:00 claude-cloud sshd[531717]: Invalid user eth from 45.148.10.240 port 50996
2026-06-30T12:04:48.956385-05:00 claude-cloud sshd[531717]: Connection closed by invalid user eth 45.148.10.240 port 50996 [preauth]
2026-06-30T12:05:01.833073-05:00 claude-cloud CRON[531743]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-30T12:05:01.840906-05:00 claude-cloud CRON[531743]: pam_unix(cron:session): session closed for user root
2026-06-30T12:06:14.517901-05:00 claude-cloud systemd-logind[853]: New session c5265 of user claude.
2026-06-30T12:06:14.796034-05:00 claude-cloud systemd-logind[853]: Session c5265 logged out. Waiting for processes to exit.
2026-06-30T12:06:14.797849-05:00 claude-cloud systemd-logind[853]: Removed session c5265.
2026-06-30T12:06:33.630450-05:00 claude-cloud sshd[532016]: Invalid user sol from 45.148.10.240 port 43904
2026-06-30T12:06:33.644534-05:00 claude-cloud sshd[532016]: Connection closed by invalid user sol 45.148.10.240 port 43904 [preauth]
2026-06-30T12:07:01.494606-05:00 claude-cloud sshd[532089]: Invalid user admin from 125.20.210.182 port 36502
2026-06-30T12:07:01.841345-05:00 claude-cloud sshd[532089]: Connection closed by invalid user admin 125.20.210.182 port 36502 [preauth]
2026-06-30T12:08:00.460109-05:00 claude-cloud sshd[532334]: Connection reset by authenticating user root 45.148.10.151 port 50304 [preauth]
2026-06-30T12:08:22.724378-05:00 claude-cloud sshd[532403]: Connection closed by authenticating user claude 45.148.10.240 port 57522 [preauth]
2026-06-30T12:09:19.970904-05:00 claude-cloud sshd[532506]: Connection closed by authenticating user root 27.71.230.31 port 48806 [preauth]
2026-06-30T12:10:12.047442-05:00 claude-cloud sshd[532748]: Invalid user validator from 45.148.10.240 port 44084
2026-06-30T12:10:12.059677-05:00 claude-cloud sshd[532748]: Connection closed by invalid user validator 45.148.10.240 port 44084 [preauth]
2026-06-30T12:11:19.355821-05:00 claude-cloud systemd-logind[853]: New session c5266 of user claude.
2026-06-30T12:11:19.701809-05:00 claude-cloud systemd-logind[853]: Session c5266 logged out. Waiting for processes to exit.
2026-06-30T12:11:19.703541-05:00 claude-cloud systemd-logind[853]: Removed session c5266.
2026-06-30T12:11:55.401239-05:00 claude-cloud sshd[533076]: Invalid user node from 45.148.10.240 port 43546
2026-06-30T12:11:55.414647-05:00 claude-cloud sshd[533076]: Connection closed by invalid user node 45.148.10.240 port 43546 [preauth]
2026-06-30T12:13:34.671052-05:00 claude-cloud sshd[533343]: Invalid user operator from 45.148.10.240 port 48026
2026-06-30T12:13:34.682507-05:00 claude-cloud sshd[533343]: Connection closed by invalid user operator 45.148.10.240 port 48026 [preauth]
2026-06-30T12:13:36.799071-05:00 claude-cloud sshd[533348]: Connection reset by authenticating user root 45.227.254.170 port 15686 [preauth]
2026-06-30T12:14:09.722841-05:00 claude-cloud sshd[533443]: Invalid user ubuntu from 45.198.224.46 port 37014
2026-06-30T12:14:10.495624-05:00 claude-cloud sshd[533443]: Connection closed by invalid user ubuntu 45.198.224.46 port 37014 [preauth]
2026-06-30T12:15:01.854969-05:00 claude-cloud CRON[533606]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-30T12:15:01.865186-05:00 claude-cloud CRON[533606]: pam_unix(cron:session): session closed for user root
2026-06-30T12:15:05.614545-05:00 claude-cloud sshd[533550]: Connection closed by authenticating user root 27.71.230.31 port 48674 [preauth]
2026-06-30T12:15:19.657963-05:00 claude-cloud sshd[533643]: Connection closed by authenticating user root 125.20.210.182 port 60456 [preauth]
2026-06-30T12:15:20.093805-05:00 claude-cloud sshd[533673]: Invalid user trader from 45.148.10.240 port 41714
2026-06-30T12:15:20.109447-05:00 claude-cloud sshd[533673]: Connection closed by invalid user trader 45.148.10.240 port 41714 [preauth]
2026-06-30T12:16:24.414948-05:00 claude-cloud systemd-logind[853]: New session c5267 of user claude.
2026-06-30T12:16:24.788400-05:00 claude-cloud systemd-logind[853]: Session c5267 logged out. Waiting for processes to exit.
2026-06-30T12:16:24.791434-05:00 claude-cloud systemd-logind[853]: Removed session c5267.
2026-06-30T12:17:01.874047-05:00 claude-cloud CRON[533960]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-30T12:17:01.885663-05:00 claude-cloud CRON[533960]: pam_unix(cron:session): session closed for user root
2026-06-30T12:17:08.128235-05:00 claude-cloud sshd[533977]: Invalid user trading from 45.148.10.240 port 39178
2026-06-30T12:17:08.140527-05:00 claude-cloud sshd[533977]: Connection closed by invalid user trading 45.148.10.240 port 39178 [preauth]
2026-06-30T12:18:23.212774-05:00 claude-cloud sshd[534269]: Connection closed by authenticating user root 193.46.255.86 port 65300 [preauth]
2026-06-30T12:18:52.185931-05:00 claude-cloud sshd[534345]: Invalid user trader from 45.148.10.240 port 39792
2026-06-30T12:18:52.199012-05:00 claude-cloud sshd[534345]: Connection closed by invalid user trader 45.148.10.240 port 39792 [preauth]
2026-06-30T12:19:07.378330-05:00 claude-cloud sshd[534377]: Connection reset by authenticating user root 45.148.10.157 port 51126 [preauth]
2026-06-30T12:20:40.554956-05:00 claude-cloud sshd[534680]: Invalid user trader from 45.148.10.240 port 51632
2026-06-30T12:20:40.567221-05:00 claude-cloud sshd[534680]: Connection closed by invalid user trader 45.148.10.240 port 51632 [preauth]
2026-06-30T12:20:44.630014-05:00 claude-cloud sshd[534651]: Connection closed by authenticating user root 27.71.230.31 port 59522 [preauth]
2026-06-30T12:21:29.402356-05:00 claude-cloud systemd-logind[853]: New session c5268 of user claude.
2026-06-30T12:21:29.825903-05:00 claude-cloud systemd-logind[853]: Session c5268 logged out. Waiting for processes to exit.
2026-06-30T12:21:29.827428-05:00 claude-cloud systemd-logind[853]: Removed session c5268.
2026-06-30T12:22:34.219636-05:00 claude-cloud sshd[535005]: Invalid user trader from 45.148.10.240 port 45322
2026-06-30T12:22:34.231871-05:00 claude-cloud sshd[535005]: Connection closed by invalid user trader 45.148.10.240 port 45322 [preauth]
2026-06-30T12:23:38.758598-05:00 claude-cloud sshd[535174]: Connection closed by authenticating user root 45.198.224.46 port 33630 [preauth]
2026-06-30T12:23:44.069580-05:00 claude-cloud sshd[535225]: Invalid user admin from 2.57.121.25 port 31156
2026-06-30T12:23:44.095881-05:00 claude-cloud sshd[535225]: Connection closed by invalid user admin 2.57.121.25 port 31156 [preauth]
2026-06-30T12:23:44.580042-05:00 claude-cloud sshd[535199]: Invalid user rpc from 125.20.210.182 port 38714
2026-06-30T12:23:45.428076-05:00 claude-cloud sshd[535199]: Connection closed by invalid user rpc 125.20.210.182 port 38714 [preauth]
2026-06-30T12:24:16.828604-05:00 claude-cloud sshd[535322]: Invalid user trading from 45.148.10.240 port 60558
2026-06-30T12:24:16.842365-05:00 claude-cloud sshd[535322]: Connection closed by invalid user trading 45.148.10.240 port 60558 [preauth]
2026-06-30T12:24:44.167050-05:00 claude-cloud sshd[535393]: Connection reset by authenticating user root 45.148.10.141 port 19156 [preauth]
2026-06-30T12:24:54.434973-05:00 claude-cloud sshd[535425]: Invalid user ryanne from 2.57.121.112 port 44896
2026-06-30T12:24:54.461121-05:00 claude-cloud sshd[535425]: Connection closed by invalid user ryanne 2.57.121.112 port 44896 [preauth]
2026-06-30T12:25:01.898827-05:00 claude-cloud CRON[535436]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-30T12:25:01.906025-05:00 claude-cloud CRON[535436]: pam_unix(cron:session): session closed for user root
2026-06-30T12:25:55.966421-05:00 claude-cloud sshd[535602]: Connection closed by authenticating user root 45.148.10.240 port 38350 [preauth]
2026-06-30T12:26:34.448264-05:00 claude-cloud systemd-logind[853]: New session c5269 of user claude.
2026-06-30T12:26:34.808630-05:00 claude-cloud systemd-logind[853]: Session c5269 logged out. Waiting for processes to exit.
2026-06-30T12:26:34.811212-05:00 claude-cloud systemd-logind[853]: Removed session c5269.
2026-06-30T12:27:06.386651-05:00 claude-cloud sshd[535659]: Connection closed by authenticating user root 27.71.230.31 port 60142 [preauth]
2026-06-30T12:27:41.038835-05:00 claude-cloud sshd[535922]: Invalid user shardeum from 45.148.10.240 port 50984
2026-06-30T12:27:41.051544-05:00 claude-cloud sshd[535922]: Connection closed by invalid user shardeum 45.148.10.240 port 50984 [preauth]
2026-06-30T12:29:29.116871-05:00 claude-cloud sshd[536312]: Connection closed by authenticating user root 45.148.10.240 port 50438 [preauth]
2026-06-30T12:30:18.247060-05:00 claude-cloud sshd[536454]: Connection reset by authenticating user root 45.148.10.157 port 48628 [preauth]
2026-06-30T12:31:13.046849-05:00 claude-cloud sshd[536620]: Connection closed by authenticating user root 45.148.10.240 port 37176 [preauth]
2026-06-30T12:31:39.512843-05:00 claude-cloud systemd-logind[853]: New session c5270 of user claude.
2026-06-30T12:31:39.834011-05:00 claude-cloud systemd-logind[853]: Session c5270 logged out. Waiting for processes to exit.
2026-06-30T12:31:39.835761-05:00 claude-cloud systemd-logind[853]: Removed session c5270.
2026-06-30T12:32:11.708988-05:00 claude-cloud sshd[536768]: Connection closed by authenticating user root 125.20.210.182 port 37154 [preauth]
2026-06-30T12:32:56.178549-05:00 claude-cloud sshd[536924]: Connection closed by authenticating user root 45.198.224.46 port 36364 [preauth]
2026-06-30T12:33:00.848098-05:00 claude-cloud sshd[536942]: Connection closed by authenticating user root 45.148.10.240 port 56146 [preauth]
2026-06-30T12:33:01.508679-05:00 claude-cloud sshd[536763]: Connection closed by authenticating user root 27.71.230.31 port 38564 [preauth]
2026-06-30T12:34:59.336974-05:00 claude-cloud sshd[537280]: Invalid user firedancer from 45.148.10.240 port 41470
2026-06-30T12:34:59.351227-05:00 claude-cloud sshd[537280]: Connection closed by invalid user firedancer 45.148.10.240 port 41470 [preauth]
2026-06-30T12:35:01.918002-05:00 claude-cloud CRON[537289]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-30T12:35:01.926226-05:00 claude-cloud CRON[537289]: pam_unix(cron:session): session closed for user root
2026-06-30T12:35:56.006259-05:00 claude-cloud sshd[537456]: Connection reset by authenticating user root 62.60.130.219 port 17754 [preauth]
2026-06-30T12:36:44.789458-05:00 claude-cloud systemd-logind[853]: New session c5271 of user claude.
2026-06-30T12:36:45.136447-05:00 claude-cloud systemd-logind[853]: Session c5271 logged out. Waiting for processes to exit.
2026-06-30T12:36:45.138625-05:00 claude-cloud systemd-logind[853]: Removed session c5271.
2026-06-30T12:36:50.033958-05:00 claude-cloud sshd[537677]: Invalid user blockchain from 45.148.10.240 port 49274
2026-06-30T12:36:50.046518-05:00 claude-cloud sshd[537677]: Connection closed by invalid user blockchain 45.148.10.240 port 49274 [preauth]
2026-06-30T12:37:36.523781-05:00 claude-cloud sshd[537804]: Connection closed by 77.90.185.16 port 65105
2026-06-30T12:37:45.973759-05:00 claude-cloud sshd[537826]: Received disconnect from 158.69.227.40 port 51172:11: disconnected by user [preauth]
2026-06-30T12:37:45.974086-05:00 claude-cloud sshd[537826]: Disconnected from authenticating user root 158.69.227.40 port 51172 [preauth]
2026-06-30T12:37:53.020754-05:00 claude-cloud sshd[537824]: Invalid user  from 213.177.179.62 port 47510
2026-06-30T12:37:54.437570-05:00 claude-cloud sshd[537824]: Connection closed by invalid user  213.177.179.62 port 47510 [preauth]
2026-06-30T12:38:06.692323-05:00 claude-cloud sshd[537862]: Connection closed by authenticating user root 27.71.230.31 port 55542 [preauth]
2026-06-30T12:38:31.063700-05:00 claude-cloud sshd[537957]: Connection closed by authenticating user www-data 45.148.10.240 port 46136 [preauth]
2026-06-30T12:40:13.950226-05:00 claude-cloud sshd[538487]: Invalid user user from 45.148.10.240 port 55112
2026-06-30T12:40:13.963395-05:00 claude-cloud sshd[538487]: Connection closed by invalid user user 45.148.10.240 port 55112 [preauth]
2026-06-30T12:40:44.847614-05:00 claude-cloud sshd[538727]: Connection closed by authenticating user root 125.20.210.182 port 46342 [preauth]
2026-06-30T12:41:29.602427-05:00 claude-cloud sshd[538987]: Connection reset by authenticating user root 45.148.10.141 port 26740 [preauth]
2026-06-30T12:41:49.474156-05:00 claude-cloud systemd-logind[853]: New session c5272 of user claude.
2026-06-30T12:41:49.869862-05:00 claude-cloud systemd-logind[853]: Session c5272 logged out. Waiting for processes to exit.
2026-06-30T12:41:49.871776-05:00 claude-cloud systemd-logind[853]: Removed session c5272.
2026-06-30T12:42:00.891126-05:00 claude-cloud sshd[539250]: Invalid user user from 45.148.10.240 port 41330
2026-06-30T12:42:00.903003-05:00 claude-cloud sshd[539250]: Connection closed by invalid user user 45.148.10.240 port 41330 [preauth]
2026-06-30T12:42:24.957479-05:00 claude-cloud sshd[539321]: Connection closed by authenticating user root 45.198.224.46 port 42946 [preauth]
2026-06-30T12:43:41.818033-05:00 claude-cloud sshd[539671]: Connection closed by authenticating user root 45.148.10.240 port 60438 [preauth]
2026-06-30T12:43:55.342798-05:00 claude-cloud sshd[539676]: Connection closed by authenticating user root 27.71.230.31 port 56420 [preauth]
2026-06-30T12:44:07.380910-05:00 claude-cloud sshd[539764]: Invalid user or from 89.124.96.90 port 52372
2026-06-30T12:44:07.399491-05:00 claude-cloud sshd[539764]: Received disconnect from 89.124.96.90 port 52372:11: Bye Bye [preauth]
2026-06-30T12:44:07.399787-05:00 claude-cloud sshd[539764]: Disconnected from invalid user or 89.124.96.90 port 52372 [preauth]
2026-06-30T12:44:20.385607-05:00 claude-cloud sshd[539869]: Received disconnect from 185.89.249.3 port 56918:11: disconnected by user [preauth]
2026-06-30T12:44:20.386361-05:00 claude-cloud sshd[539869]: Disconnected from authenticating user root 185.89.249.3 port 56918 [preauth]
2026-06-30T12:44:45.717038-05:00 claude-cloud sshd[539967]: Invalid user lit from 168.167.72.132 port 40896
2026-06-30T12:44:45.906752-05:00 claude-cloud sshd[539967]: Received disconnect from 168.167.72.132 port 40896:11: Bye Bye [preauth]
2026-06-30T12:44:45.907156-05:00 claude-cloud sshd[539967]: Disconnected from invalid user lit 168.167.72.132 port 40896 [preauth]
2026-06-30T12:45:01.937997-05:00 claude-cloud CRON[540057]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-30T12:45:01.944839-05:00 claude-cloud CRON[540057]: pam_unix(cron:session): session closed for user root
2026-06-30T12:45:22.745468-05:00 claude-cloud sshd[540147]: Invalid user elround from 45.148.10.240 port 47078
2026-06-30T12:45:22.758690-05:00 claude-cloud sshd[540147]: Connection closed by invalid user elround 45.148.10.240 port 47078 [preauth]
2026-06-30T12:46:19.410990-05:00 claude-cloud sshd[540425]: Invalid user app4 from 119.47.90.19 port 55866
2026-06-30T12:46:19.584804-05:00 claude-cloud sshd[540425]: Received disconnect from 119.47.90.19 port 55866:11: Bye Bye [preauth]
2026-06-30T12:46:19.585226-05:00 claude-cloud sshd[540425]: Disconnected from invalid user app4 119.47.90.19 port 55866 [preauth]
2026-06-30T12:46:54.643744-05:00 claude-cloud systemd-logind[853]: New session c5273 of user claude.
2026-06-30T12:46:54.935106-05:00 claude-cloud systemd-logind[853]: Session c5273 logged out. Waiting for processes to exit.
2026-06-30T12:46:54.936762-05:00 claude-cloud systemd-logind[853]: Removed session c5273.
2026-06-30T12:47:05.774713-05:00 claude-cloud sshd[540680]: Connection reset by authenticating user root 45.148.10.152 port 50270 [preauth]
2026-06-30T12:47:16.241862-05:00 claude-cloud sshd[540791]: Invalid user elrond from 45.148.10.240 port 57056
2026-06-30T12:47:16.253915-05:00 claude-cloud sshd[540791]: Connection closed by invalid user elrond 45.148.10.240 port 57056 [preauth]
2026-06-30T12:48:11.801494-05:00 claude-cloud sshd[541019]: Connection closed by authenticating user root 8.152.217.58 port 58172 [preauth]
2026-06-30T12:48:20.869858-05:00 claude-cloud sshd[541106]: Invalid user lit from 202.145.0.61 port 47926
2026-06-30T12:48:21.046156-05:00 claude-cloud sshd[541106]: Received disconnect from 202.145.0.61 port 47926:11: Bye Bye [preauth]
2026-06-30T12:48:21.046676-05:00 claude-cloud sshd[541106]: Disconnected from invalid user lit 202.145.0.61 port 47926 [preauth]
2026-06-30T12:48:21.872927-05:00 claude-cloud sshd[541108]: Invalid user lit from 139.59.231.23 port 48300
2026-06-30T12:48:22.052176-05:00 claude-cloud sshd[541108]: Received disconnect from 139.59.231.23 port 48300:11: Bye Bye [preauth]
2026-06-30T12:48:22.052434-05:00 claude-cloud sshd[541108]: Disconnected from invalid user lit 139.59.231.23 port 48300 [preauth]
2026-06-30T12:48:42.453119-05:00 claude-cloud sshd[541222]: Connection closed by authenticating user root 125.20.210.182 port 39404 [preauth]
2026-06-30T12:48:55.661893-05:00 claude-cloud sshd[541274]: Invalid user lit from 43.255.118.11 port 49514
2026-06-30T12:48:55.837195-05:00 claude-cloud sshd[541274]: Received disconnect from 43.255.118.11 port 49514:11: Bye Bye [preauth]
2026-06-30T12:48:55.837533-05:00 claude-cloud sshd[541274]: Disconnected from invalid user lit 43.255.118.11 port 49514 [preauth]
2026-06-30T12:49:12.885990-05:00 claude-cloud sshd[541341]: Invalid user admin from 45.148.10.240 port 50866
2026-06-30T12:49:12.899798-05:00 claude-cloud sshd[541341]: Connection closed by invalid user admin 45.148.10.240 port 50866 [preauth]
2026-06-30T12:49:47.443257-05:00 claude-cloud sshd[541460]: Connection closed by authenticating user root 27.71.230.31 port 60300 [preauth]
2026-06-30T12:50:58.339142-05:00 claude-cloud sshd[559148]: Connection closed by authenticating user root 45.148.10.240 port 35958 [preauth]
2026-06-30T12:51:51.526116-05:00 claude-cloud sshd[559417]: Connection closed by authenticating user root 45.198.224.46 port 53576 [preauth]
2026-06-30T12:51:59.383442-05:00 claude-cloud systemd-logind[853]: New session c5274 of user claude.
2026-06-30T12:51:59.662892-05:00 claude-cloud systemd-logind[853]: Session c5274 logged out. Waiting for processes to exit.
2026-06-30T12:51:59.664590-05:00 claude-cloud systemd-logind[853]: Removed session c5274.
2026-06-30T12:52:41.738999-05:00 claude-cloud sshd[559865]: Connection reset by authenticating user root 45.227.254.170 port 40374 [preauth]
2026-06-30T12:52:45.361129-05:00 claude-cloud sshd[559903]: Invalid user user from 45.148.10.240 port 45978
2026-06-30T12:52:45.381405-05:00 claude-cloud sshd[559903]: Connection closed by invalid user user 45.148.10.240 port 45978 [preauth]
2026-06-30T12:54:32.912679-05:00 claude-cloud sshd[560998]: Invalid user user from 45.148.10.240 port 54274
2026-06-30T12:54:32.925207-05:00 claude-cloud sshd[560998]: Connection closed by invalid user user 45.148.10.240 port 54274 [preauth]
2026-06-30T12:55:01.956242-05:00 claude-cloud CRON[561114]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-30T12:55:01.962973-05:00 claude-cloud CRON[561114]: pam_unix(cron:session): session closed for user root
2026-06-30T12:55:28.532687-05:00 claude-cloud sshd[561445]: Connection closed by authenticating user root 27.71.230.31 port 39874 [preauth]
2026-06-30T12:56:15.177607-05:00 claude-cloud sshd[561597]: Invalid user miner from 45.148.10.240 port 39688
2026-06-30T12:56:15.191340-05:00 claude-cloud sshd[561597]: Connection closed by invalid user miner 45.148.10.240 port 39688 [preauth]
2026-06-30T12:56:54.674393-05:00 claude-cloud sshd[561754]: Invalid user rsm from 43.255.118.11 port 41784
2026-06-30T12:56:54.855128-05:00 claude-cloud sshd[561754]: Received disconnect from 43.255.118.11 port 41784:11: Bye Bye [preauth]
2026-06-30T12:56:54.855573-05:00 claude-cloud sshd[561754]: Disconnected from invalid user rsm 43.255.118.11 port 41784 [preauth]
2026-06-30T12:57:03.205017-05:00 claude-cloud sshd[561765]: Invalid user user1 from 125.20.210.182 port 39830
2026-06-30T12:57:04.456058-05:00 claude-cloud sshd[561777]: Invalid user alma from 119.47.90.19 port 51748
2026-06-30T12:57:04.596724-05:00 claude-cloud sshd[561765]: Connection closed by invalid user user1 125.20.210.182 port 39830 [preauth]
2026-06-30T12:57:04.632625-05:00 claude-cloud sshd[561777]: Received disconnect from 119.47.90.19 port 51748:11: Bye Bye [preauth]
2026-06-30T12:57:04.632946-05:00 claude-cloud sshd[561777]: Disconnected from invalid user alma 119.47.90.19 port 51748 [preauth]
2026-06-30T12:57:05.068119-05:00 claude-cloud systemd-logind[853]: New session c5275 of user claude.
2026-06-30T12:57:05.408994-05:00 claude-cloud systemd-logind[853]: Session c5275 logged out. Waiting for processes to exit.
2026-06-30T12:57:05.410742-05:00 claude-cloud systemd-logind[853]: Removed session c5275.
2026-06-30T12:57:15.258229-05:00 claude-cloud sshd[561818]: Invalid user nature from 202.145.0.61 port 36450
2026-06-30T12:57:15.433969-05:00 claude-cloud sshd[561818]: Received disconnect from 202.145.0.61 port 36450:11: Bye Bye [preauth]
2026-06-30T12:57:15.434238-05:00 claude-cloud sshd[561818]: Disconnected from invalid user nature 202.145.0.61 port 36450 [preauth]
2026-06-30T12:57:42.930127-05:00 claude-cloud sshd[561968]: Invalid user zf from 168.167.72.132 port 40897
2026-06-30T12:57:43.133667-05:00 claude-cloud sshd[561968]: Received disconnect from 168.167.72.132 port 40897:11: Bye Bye [preauth]
2026-06-30T12:57:43.134021-05:00 claude-cloud sshd[561968]: Disconnected from invalid user zf 168.167.72.132 port 40897 [preauth]
2026-06-30T12:57:51.694211-05:00 claude-cloud sshd[562037]: Connection closed by authenticating user root 45.148.10.240 port 60286 [preauth]
2026-06-30T12:57:52.946507-05:00 claude-cloud sshd[562041]: Invalid user tan from 139.59.231.23 port 39152
2026-06-30T12:57:53.120367-05:00 claude-cloud sshd[562041]: Received disconnect from 139.59.231.23 port 39152:11: Bye Bye [preauth]
2026-06-30T12:57:53.120716-05:00 claude-cloud sshd[562041]: Disconnected from invalid user tan 139.59.231.23 port 39152 [preauth]
2026-06-30T12:58:14.357205-05:00 claude-cloud sshd[562122]: Connection reset by authenticating user root 45.148.10.151 port 62718 [preauth]
2026-06-30T12:58:22.702894-05:00 claude-cloud sshd[562180]: Invalid user admin from 152.32.174.171 port 55042
2026-06-30T12:58:22.906456-05:00 claude-cloud sshd[562180]: Connection closed by invalid user admin 152.32.174.171 port 55042 [preauth]
2026-06-30T12:59:17.509927-05:00 claude-cloud sshd[562386]: Invalid user fis from 202.145.0.61 port 43838
2026-06-30T12:59:17.678533-05:00 claude-cloud sshd[562386]: Received disconnect from 202.145.0.61 port 43838:11: Bye Bye [preauth]
2026-06-30T12:59:17.678902-05:00 claude-cloud sshd[562386]: Disconnected from invalid user fis 202.145.0.61 port 43838 [preauth]
2026-06-30T12:59:28.919902-05:00 claude-cloud sshd[562446]: Invalid user images from 119.47.90.19 port 48388
2026-06-30T12:59:29.098193-05:00 claude-cloud sshd[562446]: Received disconnect from 119.47.90.19 port 48388:11: Bye Bye [preauth]
2026-06-30T12:59:29.098377-05:00 claude-cloud sshd[562446]: Disconnected from invalid user images 119.47.90.19 port 48388 [preauth]
2026-06-30T12:59:29.431724-05:00 claude-cloud sshd[562448]: Invalid user pubsub from 43.255.118.11 port 54878
2026-06-30T12:59:29.609621-05:00 claude-cloud sshd[562448]: Received disconnect from 43.255.118.11 port 54878:11: Bye Bye [preauth]
2026-06-30T12:59:29.609920-05:00 claude-cloud sshd[562448]: Disconnected from invalid user pubsub 43.255.118.11 port 54878 [preauth]
2026-06-30T12:59:43.061670-05:00 claude-cloud sshd[562522]: Invalid user git from 45.148.10.240 port 59086
2026-06-30T12:59:43.075449-05:00 claude-cloud sshd[562522]: Connection closed by invalid user git 45.148.10.240 port 59086 [preauth]
2026-06-30T12:59:48.317352-05:00 claude-cloud sshd[562601]: Invalid user eso from 139.59.231.23 port 45786
2026-06-30T12:59:48.492408-05:00 claude-cloud sshd[562601]: Received disconnect from 139.59.231.23 port 45786:11: Bye Bye [preauth]
2026-06-30T12:59:48.492702-05:00 claude-cloud sshd[562601]: Disconnected from invalid user eso 139.59.231.23 port 45786 [preauth]
2026-06-30T12:59:57.154412-05:00 claude-cloud sshd[562744]: Invalid user columbo from 168.167.72.132 port 40898
2026-06-30T12:59:57.349814-05:00 claude-cloud sshd[562744]: Received disconnect from 168.167.72.132 port 40898:11: Bye Bye [preauth]
2026-06-30T12:59:57.350094-05:00 claude-cloud sshd[562744]: Disconnected from invalid user columbo 168.167.72.132 port 40898 [preauth]
2026-06-30T13:01:21.225530-05:00 claude-cloud sshd[563188]: Invalid user cheetah from 202.145.0.61 port 51224
2026-06-30T13:01:21.396021-05:00 claude-cloud sshd[563188]: Received disconnect from 202.145.0.61 port 51224:11: Bye Bye [preauth]
2026-06-30T13:01:21.396240-05:00 claude-cloud sshd[563188]: Disconnected from invalid user cheetah 202.145.0.61 port 51224 [preauth]
2026-06-30T13:01:27.480631-05:00 claude-cloud sshd[563203]: Connection closed by authenticating user root 45.198.224.46 port 35794 [preauth]
2026-06-30T13:01:29.933408-05:00 claude-cloud sshd[563168]: Connection closed by authenticating user root 27.71.230.31 port 54868 [preauth]
2026-06-30T13:01:37.873694-05:00 claude-cloud sshd[563225]: Connection closed by authenticating user root 45.148.10.240 port 52780 [preauth]
2026-06-30T13:01:48.288852-05:00 claude-cloud sshd[563284]: Invalid user nature from 139.59.231.23 port 52460
2026-06-30T13:01:48.456488-05:00 claude-cloud sshd[563284]: Received disconnect from 139.59.231.23 port 52460:11: Bye Bye [preauth]
2026-06-30T13:01:48.456937-05:00 claude-cloud sshd[563284]: Disconnected from invalid user nature 139.59.231.23 port 52460 [preauth]
2026-06-30T13:01:49.264691-05:00 claude-cloud sshd[563286]: Invalid user baze from 43.255.118.11 port 39544
2026-06-30T13:01:49.449567-05:00 claude-cloud sshd[563286]: Received disconnect from 43.255.118.11 port 39544:11: Bye Bye [preauth]
2026-06-30T13:01:49.449824-05:00 claude-cloud sshd[563286]: Disconnected from invalid user baze 43.255.118.11 port 39544 [preauth]
2026-06-30T13:01:50.536536-05:00 claude-cloud sshd[563307]: Invalid user simpeg from 119.47.90.19 port 46452
2026-06-30T13:01:50.710864-05:00 claude-cloud sshd[563307]: Received disconnect from 119.47.90.19 port 46452:11: Bye Bye [preauth]
2026-06-30T13:01:50.711327-05:00 claude-cloud sshd[563307]: Disconnected from invalid user simpeg 119.47.90.19 port 46452 [preauth]
2026-06-30T13:02:10.223078-05:00 claude-cloud systemd-logind[853]: New session c5276 of user claude.
2026-06-30T13:02:10.318869-05:00 claude-cloud sshd[563344]: Invalid user res from 168.167.72.132 port 40899
2026-06-30T13:02:10.511899-05:00 claude-cloud sshd[563344]: Received disconnect from 168.167.72.132 port 40899:11: Bye Bye [preauth]
2026-06-30T13:02:10.512450-05:00 claude-cloud sshd[563344]: Disconnected from invalid user res 168.167.72.132 port 40899 [preauth]
2026-06-30T13:02:10.597145-05:00 claude-cloud systemd-logind[853]: Session c5276 logged out. Waiting for processes to exit.
2026-06-30T13:02:10.599694-05:00 claude-cloud systemd-logind[853]: Removed session c5276.
2026-06-30T13:03:12.470516-05:00 claude-cloud sshd[563585]: Invalid user compras from 202.145.0.61 port 58606
2026-06-30T13:03:12.643639-05:00 claude-cloud sshd[563585]: Received disconnect from 202.145.0.61 port 58606:11: Bye Bye [preauth]
2026-06-30T13:03:12.643926-05:00 claude-cloud sshd[563585]: Disconnected from invalid user compras 202.145.0.61 port 58606 [preauth]
2026-06-30T13:03:27.231744-05:00 claude-cloud sshd[563635]: Invalid user partners from 89.124.96.90 port 51878
2026-06-30T13:03:27.253982-05:00 claude-cloud sshd[563635]: Received disconnect from 89.124.96.90 port 51878:11: Bye Bye [preauth]
2026-06-30T13:03:27.254221-05:00 claude-cloud sshd[563635]: Disconnected from invalid user partners 89.124.96.90 port 51878 [preauth]
2026-06-30T13:03:28.030566-05:00 claude-cloud sshd[563637]: Invalid user admin from 45.148.10.240 port 42978
2026-06-30T13:03:28.044320-05:00 claude-cloud sshd[563637]: Connection closed by invalid user admin 45.148.10.240 port 42978 [preauth]
2026-06-30T13:03:35.495924-05:00 claude-cloud sshd[563654]: Invalid user rsm from 139.59.231.23 port 59062
2026-06-30T13:03:35.663701-05:00 claude-cloud sshd[563654]: Received disconnect from 139.59.231.23 port 59062:11: Bye Bye [preauth]
2026-06-30T13:03:35.664137-05:00 claude-cloud sshd[563654]: Disconnected from invalid user rsm 139.59.231.23 port 59062 [preauth]
2026-06-30T13:03:52.901072-05:00 claude-cloud sshd[563728]: Connection reset by authenticating user root 45.227.254.170 port 55320 [preauth]
2026-06-30T13:03:58.388220-05:00 claude-cloud sshd[563742]: Invalid user kdftp from 119.47.90.19 port 50014
2026-06-30T13:03:58.564382-05:00 claude-cloud sshd[563742]: Received disconnect from 119.47.90.19 port 50014:11: Bye Bye [preauth]
2026-06-30T13:03:58.564534-05:00 claude-cloud sshd[563742]: Disconnected from invalid user kdftp 119.47.90.19 port 50014 [preauth]
2026-06-30T13:03:58.814179-05:00 claude-cloud sshd[563744]: Invalid user zf from 43.255.118.11 port 52272
2026-06-30T13:03:58.990031-05:00 claude-cloud sshd[563744]: Received disconnect from 43.255.118.11 port 52272:11: Bye Bye [preauth]
2026-06-30T13:03:58.990178-05:00 claude-cloud sshd[563744]: Disconnected from invalid user zf 43.255.118.11 port 52272 [preauth]
2026-06-30T13:04:08.657769-05:00 claude-cloud sshd[563767]: Invalid user fis from 168.167.72.132 port 40900
2026-06-30T13:04:08.851817-05:00 claude-cloud sshd[563767]: Received disconnect from 168.167.72.132 port 40900:11: Bye Bye [preauth]
2026-06-30T13:04:08.852177-05:00 claude-cloud sshd[563767]: Disconnected from invalid user fis 168.167.72.132 port 40900 [preauth]
2026-06-30T13:05:01.979004-05:00 claude-cloud CRON[564056]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-30T13:05:01.985433-05:00 claude-cloud CRON[564056]: pam_unix(cron:session): session closed for user root
2026-06-30T13:05:05.068715-05:00 claude-cloud sshd[564066]: Invalid user know from 202.145.0.61 port 37750
2026-06-30T13:05:05.238201-05:00 claude-cloud sshd[564066]: Received disconnect from 202.145.0.61 port 37750:11: Bye Bye [preauth]
2026-06-30T13:05:05.238436-05:00 claude-cloud sshd[564066]: Disconnected from invalid user know 202.145.0.61 port 37750 [preauth]
2026-06-30T13:05:15.252053-05:00 claude-cloud sshd[564085]: Connection closed by authenticating user root 125.20.210.182 port 37992 [preauth]
2026-06-30T13:05:18.138204-05:00 claude-cloud sshd[564128]: Invalid user ubuntu from 45.148.10.240 port 38472
2026-06-30T13:05:18.151534-05:00 claude-cloud sshd[564128]: Connection closed by invalid user ubuntu 45.148.10.240 port 38472 [preauth]
2026-06-30T13:05:21.270087-05:00 claude-cloud sshd[564136]: Invalid user res from 139.59.231.23 port 37422
2026-06-30T13:05:21.437183-05:00 claude-cloud sshd[564136]: Received disconnect from 139.59.231.23 port 37422:11: Bye Bye [preauth]
2026-06-30T13:05:21.437629-05:00 claude-cloud sshd[564136]: Disconnected from invalid user res 139.59.231.23 port 37422 [preauth]
2026-06-30T13:05:32.468537-05:00 claude-cloud sshd[564150]: Connection closed by 66.240.223.240 port 43486 [preauth]
2026-06-30T13:06:08.421957-05:00 claude-cloud sshd[564319]: Invalid user compras from 168.167.72.132 port 40901
2026-06-30T13:06:08.612254-05:00 claude-cloud sshd[564319]: Received disconnect from 168.167.72.132 port 40901:11: Bye Bye [preauth]
2026-06-30T13:06:08.612451-05:00 claude-cloud sshd[564319]: Disconnected from invalid user compras 168.167.72.132 port 40901 [preauth]
2026-06-30T13:06:09.974072-05:00 claude-cloud sshd[564326]: Invalid user casino from 43.255.118.11 port 36828
2026-06-30T13:06:10.155457-05:00 claude-cloud sshd[564326]: Received disconnect from 43.255.118.11 port 36828:11: Bye Bye [preauth]
2026-06-30T13:06:10.155704-05:00 claude-cloud sshd[564326]: Disconnected from invalid user casino 43.255.118.11 port 36828 [preauth]
2026-06-30T13:06:10.705006-05:00 claude-cloud sshd[564333]: Invalid user sw from 119.47.90.19 port 48926
2026-06-30T13:06:10.883959-05:00 claude-cloud sshd[564333]: Received disconnect from 119.47.90.19 port 48926:11: Bye Bye [preauth]
2026-06-30T13:06:10.884265-05:00 claude-cloud sshd[564333]: Disconnected from invalid user sw 119.47.90.19 port 48926 [preauth]
2026-06-30T13:06:47.819384-05:00 claude-cloud sshd[564464]: Invalid user antivirus from 89.124.96.90 port 59760
2026-06-30T13:06:47.841565-05:00 claude-cloud sshd[564464]: Received disconnect from 89.124.96.90 port 59760:11: Bye Bye [preauth]
2026-06-30T13:06:47.841797-05:00 claude-cloud sshd[564464]: Disconnected from invalid user antivirus 89.124.96.90 port 59760 [preauth]
2026-06-30T13:06:59.879116-05:00 claude-cloud sshd[564522]: Invalid user res from 202.145.0.61 port 45128
2026-06-30T13:07:00.050902-05:00 claude-cloud sshd[564522]: Received disconnect from 202.145.0.61 port 45128:11: Bye Bye [preauth]
2026-06-30T13:07:00.051111-05:00 claude-cloud sshd[564522]: Disconnected from invalid user res 202.145.0.61 port 45128 [preauth]
2026-06-30T13:07:09.136270-05:00 claude-cloud sshd[564567]: Invalid user suzuki from 139.59.231.23 port 44084
2026-06-30T13:07:09.304836-05:00 claude-cloud sshd[564567]: Received disconnect from 139.59.231.23 port 44084:11: Bye Bye [preauth]
2026-06-30T13:07:09.305101-05:00 claude-cloud sshd[564567]: Disconnected from invalid user suzuki 139.59.231.23 port 44084 [preauth]
2026-06-30T13:07:11.331681-05:00 claude-cloud sshd[564589]: Invalid user ari from 45.148.10.240 port 53672
2026-06-30T13:07:11.344376-05:00 claude-cloud sshd[564589]: Connection closed by invalid user ari 45.148.10.240 port 53672 [preauth]
2026-06-30T13:07:15.112402-05:00 claude-cloud systemd-logind[853]: New session c5277 of user claude.
2026-06-30T13:07:15.412063-05:00 claude-cloud systemd-logind[853]: Session c5277 logged out. Waiting for processes to exit.
2026-06-30T13:07:15.414271-05:00 claude-cloud systemd-logind[853]: Removed session c5277.
2026-06-30T13:07:22.171239-05:00 claude-cloud sshd[564524]: Connection closed by authenticating user root 27.71.230.31 port 56256 [preauth]
2026-06-30T13:08:21.392486-05:00 claude-cloud sshd[564935]: Invalid user suzuki from 43.255.118.11 port 49596
2026-06-30T13:08:21.564208-05:00 claude-cloud sshd[564935]: Received disconnect from 43.255.118.11 port 49596:11: Bye Bye [preauth]
2026-06-30T13:08:21.564464-05:00 claude-cloud sshd[564935]: Disconnected from invalid user suzuki 43.255.118.11 port 49596 [preauth]
2026-06-30T13:08:52.301915-05:00 claude-cloud sshd[565048]: Invalid user gauss from 139.59.231.23 port 50662
2026-06-30T13:08:52.478075-05:00 claude-cloud sshd[565048]: Received disconnect from 139.59.231.23 port 50662:11: Bye Bye [preauth]
2026-06-30T13:08:52.478528-05:00 claude-cloud sshd[565048]: Disconnected from invalid user gauss 139.59.231.23 port 50662 [preauth]
2026-06-30T13:08:52.524018-05:00 claude-cloud sshd[565053]: Invalid user sedu from 45.148.10.240 port 35618
2026-06-30T13:08:52.537555-05:00 claude-cloud sshd[565053]: Connection closed by invalid user sedu 45.148.10.240 port 35618 [preauth]
2026-06-30T13:08:53.382618-05:00 claude-cloud sshd[565052]: Invalid user columbo from 202.145.0.61 port 52578
2026-06-30T13:08:53.555263-05:00 claude-cloud sshd[565052]: Received disconnect from 202.145.0.61 port 52578:11: Bye Bye [preauth]
2026-06-30T13:08:53.555563-05:00 claude-cloud sshd[565052]: Disconnected from invalid user columbo 202.145.0.61 port 52578 [preauth]
2026-06-30T13:09:14.188506-05:00 claude-cloud sshd[565106]: Invalid user admin from 193.46.255.86 port 9762
2026-06-30T13:09:14.214964-05:00 claude-cloud sshd[565106]: Connection closed by invalid user admin 193.46.255.86 port 9762 [preauth]
2026-06-30T13:09:25.180484-05:00 claude-cloud sshd[565148]: Connection reset by authenticating user root 45.148.10.141 port 46990 [preauth]
2026-06-30T13:09:41.701337-05:00 claude-cloud sshd[565233]: Invalid user orangepi from 152.32.174.171 port 58090
2026-06-30T13:09:41.914325-05:00 claude-cloud sshd[565233]: Connection closed by invalid user orangepi 152.32.174.171 port 58090 [preauth]
2026-06-30T13:10:03.211021-05:00 claude-cloud sshd[565385]: Invalid user devphp from 89.124.96.90 port 39378
2026-06-30T13:10:03.223599-05:00 claude-cloud sshd[565385]: Received disconnect from 89.124.96.90 port 39378:11: Bye Bye [preauth]
2026-06-30T13:10:03.223748-05:00 claude-cloud sshd[565385]: Disconnected from invalid user devphp 89.124.96.90 port 39378 [preauth]
2026-06-30T13:10:31.177639-05:00 claude-cloud sshd[565509]: Invalid user solana123 from 45.148.10.240 port 46686
2026-06-30T13:10:31.190164-05:00 claude-cloud sshd[565509]: Connection closed by invalid user solana123 45.148.10.240 port 46686 [preauth]
2026-06-30T13:10:32.800381-05:00 claude-cloud sshd[565511]: Invalid user eso from 43.255.118.11 port 34154
2026-06-30T13:10:32.981336-05:00 claude-cloud sshd[565511]: Received disconnect from 43.255.118.11 port 34154:11: Bye Bye [preauth]
2026-06-30T13:10:32.981684-05:00 claude-cloud sshd[565511]: Disconnected from invalid user eso 43.255.118.11 port 34154 [preauth]
2026-06-30T13:10:33.308026-05:00 claude-cloud sshd[565513]: Invalid user columbo from 139.59.231.23 port 57234
2026-06-30T13:10:33.478396-05:00 claude-cloud sshd[565513]: Received disconnect from 139.59.231.23 port 57234:11: Bye Bye [preauth]
2026-06-30T13:10:33.478712-05:00 claude-cloud sshd[565513]: Disconnected from invalid user columbo 139.59.231.23 port 57234 [preauth]
2026-06-30T13:10:46.291004-05:00 claude-cloud sshd[565541]: Invalid user eso from 202.145.0.61 port 59952
2026-06-30T13:10:46.467703-05:00 claude-cloud sshd[565541]: Received disconnect from 202.145.0.61 port 59952:11: Bye Bye [preauth]
2026-06-30T13:10:46.468044-05:00 claude-cloud sshd[565541]: Disconnected from invalid user eso 202.145.0.61 port 59952 [preauth]
2026-06-30T13:10:56.573180-05:00 claude-cloud sshd[565576]: Connection closed by authenticating user root 45.198.224.46 port 34006 [preauth]
2026-06-30T13:12:17.519370-05:00 claude-cloud sshd[566566]: Invalid user sol123 from 45.148.10.240 port 52710
2026-06-30T13:12:17.531063-05:00 claude-cloud sshd[566566]: Connection closed by invalid user sol123 45.148.10.240 port 52710 [preauth]
2026-06-30T13:12:20.254486-05:00 claude-cloud systemd-logind[853]: New session c5278 of user claude.
2026-06-30T13:12:20.543222-05:00 claude-cloud systemd-logind[853]: Session c5278 logged out. Waiting for processes to exit.
2026-06-30T13:12:20.544591-05:00 claude-cloud systemd-logind[853]: Removed session c5278.
2026-06-30T13:12:26.031871-05:00 claude-cloud sshd[566645]: Invalid user pubsub from 139.59.231.23 port 35626
2026-06-30T13:12:26.215899-05:00 claude-cloud sshd[566645]: Received disconnect from 139.59.231.23 port 35626:11: Bye Bye [preauth]
2026-06-30T13:12:26.216101-05:00 claude-cloud sshd[566645]: Disconnected from invalid user pubsub 139.59.231.23 port 35626 [preauth]
2026-06-30T13:12:51.634210-05:00 claude-cloud sshd[567005]: Invalid user astra from 43.255.118.11 port 47008
2026-06-30T13:12:51.808568-05:00 claude-cloud sshd[567005]: Received disconnect from 43.255.118.11 port 47008:11: Bye Bye [preauth]
2026-06-30T13:12:51.809095-05:00 claude-cloud sshd[567005]: Disconnected from invalid user astra 43.255.118.11 port 47008 [preauth]
2026-06-30T13:12:55.716718-05:00 claude-cloud sshd[567021]: Invalid user pubsub from 202.145.0.61 port 39116
2026-06-30T13:12:55.893410-05:00 claude-cloud sshd[567021]: Received disconnect from 202.145.0.61 port 39116:11: Bye Bye [preauth]
2026-06-30T13:12:55.893676-05:00 claude-cloud sshd[567021]: Disconnected from invalid user pubsub 202.145.0.61 port 39116 [preauth]
2026-06-30T13:13:01.881817-05:00 claude-cloud sshd[567010]: Connection closed by authenticating user root 27.71.230.31 port 34762 [preauth]
2026-06-30T13:13:20.283801-05:00 claude-cloud sshd[567157]: Connection closed by authenticating user root 125.20.210.182 port 37226 [preauth]
2026-06-30T13:14:09.211720-05:00 claude-cloud sshd[567515]: Invalid user sol from 45.148.10.240 port 57926
2026-06-30T13:14:09.225376-05:00 claude-cloud sshd[567515]: Connection closed by invalid user sol 45.148.10.240 port 57926 [preauth]
2026-06-30T13:14:19.020353-05:00 claude-cloud sshd[567542]: Invalid user banana from 139.59.231.23 port 42250
2026-06-30T13:14:19.205558-05:00 claude-cloud sshd[567542]: Received disconnect from 139.59.231.23 port 42250:11: Bye Bye [preauth]
2026-06-30T13:14:19.205855-05:00 claude-cloud sshd[567542]: Disconnected from invalid user banana 139.59.231.23 port 42250 [preauth]
2026-06-30T13:14:58.067249-05:00 claude-cloud sshd[567736]: Invalid user gauss from 202.145.0.61 port 46498
2026-06-30T13:14:58.237572-05:00 claude-cloud sshd[567736]: Received disconnect from 202.145.0.61 port 46498:11: Bye Bye [preauth]
2026-06-30T13:14:58.237938-05:00 claude-cloud sshd[567736]: Disconnected from invalid user gauss 202.145.0.61 port 46498 [preauth]
2026-06-30T13:15:01.999590-05:00 claude-cloud CRON[567745]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-30T13:15:02.007541-05:00 claude-cloud CRON[567745]: pam_unix(cron:session): session closed for user root
2026-06-30T13:15:03.377838-05:00 claude-cloud sshd[567748]: Connection reset by authenticating user root 45.148.10.152 port 12614 [preauth]
2026-06-30T13:15:10.080458-05:00 claude-cloud sshd[567770]: Invalid user cheetah from 43.255.118.11 port 59898
2026-06-30T13:15:10.259414-05:00 claude-cloud sshd[567770]: Received disconnect from 43.255.118.11 port 59898:11: Bye Bye [preauth]
2026-06-30T13:15:10.259609-05:00 claude-cloud sshd[567770]: Disconnected from invalid user cheetah 43.255.118.11 port 59898 [preauth]
2026-06-30T13:15:55.544886-05:00 claude-cloud sshd[567915]: Invalid user sol from 45.148.10.240 port 58182
2026-06-30T13:15:55.558196-05:00 claude-cloud sshd[567915]: Connection closed by invalid user sol 45.148.10.240 port 58182 [preauth]
2026-06-30T13:16:05.440785-05:00 claude-cloud sshd[567936]: Invalid user fis from 139.59.231.23 port 48916
2026-06-30T13:16:05.612961-05:00 claude-cloud sshd[567936]: Received disconnect from 139.59.231.23 port 48916:11: Bye Bye [preauth]
2026-06-30T13:16:05.613391-05:00 claude-cloud sshd[567936]: Disconnected from invalid user fis 139.59.231.23 port 48916 [preauth]
2026-06-30T13:16:34.929420-05:00 claude-cloud sshd[568021]: Invalid user suzuki from 168.167.72.132 port 40906
2026-06-30T13:16:35.121940-05:00 claude-cloud sshd[568021]: Received disconnect from 168.167.72.132 port 40906:11: Bye Bye [preauth]
2026-06-30T13:16:35.122466-05:00 claude-cloud sshd[568021]: Disconnected from invalid user suzuki 168.167.72.132 port 40906 [preauth]
2026-06-30T13:16:45.914339-05:00 claude-cloud sshd[568084]: Invalid user bach from 89.124.96.90 port 48892
2026-06-30T13:16:45.930220-05:00 claude-cloud sshd[568084]: Received disconnect from 89.124.96.90 port 48892:11: Bye Bye [preauth]
2026-06-30T13:16:45.930463-05:00 claude-cloud sshd[568084]: Disconnected from invalid user bach 89.124.96.90 port 48892 [preauth]
2026-06-30T13:16:54.290827-05:00 claude-cloud sshd[568110]: Invalid user zf from 202.145.0.61 port 53874
2026-06-30T13:16:54.462553-05:00 claude-cloud sshd[568110]: Received disconnect from 202.145.0.61 port 53874:11: Bye Bye [preauth]
2026-06-30T13:16:54.462956-05:00 claude-cloud sshd[568110]: Disconnected from invalid user zf 202.145.0.61 port 53874 [preauth]
2026-06-30T13:17:01.019406-05:00 claude-cloud CRON[568128]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-30T13:17:01.027576-05:00 claude-cloud CRON[568128]: pam_unix(cron:session): session closed for user root
2026-06-30T13:17:25.109969-05:00 claude-cloud systemd-logind[853]: New session c5279 of user claude.
2026-06-30T13:17:25.419100-05:00 claude-cloud systemd-logind[853]: Session c5279 logged out. Waiting for processes to exit.
2026-06-30T13:17:25.419550-05:00 claude-cloud systemd-logind[853]: Removed session c5279.
2026-06-30T13:17:26.528585-05:00 claude-cloud sshd[568204]: Invalid user tim from 119.47.90.19 port 59748
2026-06-30T13:17:26.710596-05:00 claude-cloud sshd[568204]: Received disconnect from 119.47.90.19 port 59748:11: Bye Bye [preauth]
2026-06-30T13:17:26.710815-05:00 claude-cloud sshd[568204]: Disconnected from invalid user tim 119.47.90.19 port 59748 [preauth]
2026-06-30T13:17:41.895932-05:00 claude-cloud sshd[568242]: Invalid user fis from 43.255.118.11 port 44696
2026-06-30T13:17:42.080337-05:00 claude-cloud sshd[568242]: Received disconnect from 43.255.118.11 port 44696:11: Bye Bye [preauth]
2026-06-30T13:17:42.080681-05:00 claude-cloud sshd[568242]: Disconnected from invalid user fis 43.255.118.11 port 44696 [preauth]
2026-06-30T13:17:46.509648-05:00 claude-cloud sshd[568285]: Invalid user binance from 45.148.10.240 port 43322
2026-06-30T13:17:46.523014-05:00 claude-cloud sshd[568285]: Connection closed by invalid user binance 45.148.10.240 port 43322 [preauth]
2026-06-30T13:17:49.029731-05:00 claude-cloud sshd[568289]: Invalid user qs from 139.59.231.23 port 55502
2026-06-30T13:17:49.199135-05:00 claude-cloud sshd[568289]: Received disconnect from 139.59.231.23 port 55502:11: Bye Bye [preauth]
2026-06-30T13:17:49.199594-05:00 claude-cloud sshd[568289]: Disconnected from invalid user qs 139.59.231.23 port 55502 [preauth]
2026-06-30T13:18:39.479762-05:00 claude-cloud sshd[568665]: Invalid user qs from 168.167.72.132 port 40907
2026-06-30T13:18:39.673033-05:00 claude-cloud sshd[568665]: Received disconnect from 168.167.72.132 port 40907:11: Bye Bye [preauth]
2026-06-30T13:18:39.673329-05:00 claude-cloud sshd[568665]: Disconnected from invalid user qs 168.167.72.132 port 40907 [preauth]
2026-06-30T13:18:48.410747-05:00 claude-cloud sshd[568745]: Received disconnect from 212.192.240.126 port 7810:11: disconnected by user [preauth]
2026-06-30T13:18:48.411071-05:00 claude-cloud sshd[568745]: Disconnected from authenticating user root 212.192.240.126 port 7810 [preauth]
2026-06-30T13:18:49.382637-05:00 claude-cloud sshd[568748]: Invalid user suzuki from 202.145.0.61 port 33022
2026-06-30T13:18:49.561725-05:00 claude-cloud sshd[568748]: Received disconnect from 202.145.0.61 port 33022:11: Bye Bye [preauth]
2026-06-30T13:18:49.562116-05:00 claude-cloud sshd[568748]: Disconnected from invalid user suzuki 202.145.0.61 port 33022 [preauth]
2026-06-30T13:19:36.664964-05:00 claude-cloud sshd[569004]: Invalid user casino from 139.59.231.23 port 33866
2026-06-30T13:19:36.830022-05:00 claude-cloud sshd[569004]: Received disconnect from 139.59.231.23 port 33866:11: Bye Bye [preauth]
2026-06-30T13:19:36.830359-05:00 claude-cloud sshd[569004]: Disconnected from invalid user casino 139.59.231.23 port 33866 [preauth]
2026-06-30T13:19:38.582395-05:00 claude-cloud sshd[568658]: Connection closed by authenticating user root 27.71.230.31 port 38090 [preauth]
2026-06-30T13:19:39.349177-05:00 claude-cloud sshd[569019]: Invalid user verify from 119.47.90.19 port 56320
2026-06-30T13:19:39.522603-05:00 claude-cloud sshd[569019]: Received disconnect from 119.47.90.19 port 56320:11: Bye Bye [preauth]
2026-06-30T13:19:39.522851-05:00 claude-cloud sshd[569019]: Disconnected from invalid user verify 119.47.90.19 port 56320 [preauth]
2026-06-30T13:19:43.913068-05:00 claude-cloud sshd[569055]: Invalid user okx from 45.148.10.240 port 34762
2026-06-30T13:19:43.925833-05:00 claude-cloud sshd[569055]: Connection closed by invalid user okx 45.148.10.240 port 34762 [preauth]
2026-06-30T13:19:48.814023-05:00 claude-cloud sshd[569084]: Invalid user dsi from 89.124.96.90 port 54184
2026-06-30T13:19:48.833383-05:00 claude-cloud sshd[569084]: Received disconnect from 89.124.96.90 port 54184:11: Bye Bye [preauth]
2026-06-30T13:19:48.833808-05:00 claude-cloud sshd[569084]: Disconnected from invalid user dsi 89.124.96.90 port 54184 [preauth]
2026-06-30T13:20:14.578572-05:00 claude-cloud sshd[569230]: Invalid user compras from 43.255.118.11 port 57728
2026-06-30T13:20:14.753105-05:00 claude-cloud sshd[569230]: Received disconnect from 43.255.118.11 port 57728:11: Bye Bye [preauth]
2026-06-30T13:20:14.753494-05:00 claude-cloud sshd[569230]: Disconnected from invalid user compras 43.255.118.11 port 57728 [preauth]
2026-06-30T13:20:19.959860-05:00 claude-cloud sshd[569243]: Invalid user caojinzhou from 45.198.224.46 port 44642
2026-06-30T13:20:20.799731-05:00 claude-cloud sshd[569243]: Connection closed by invalid user caojinzhou 45.198.224.46 port 44642 [preauth]
2026-06-30T13:20:43.491126-05:00 claude-cloud sshd[569412]: Connection reset by authenticating user root 45.148.10.157 port 57154 [preauth]
2026-06-30T13:20:43.774157-05:00 claude-cloud sshd[569401]: Invalid user tan from 202.145.0.61 port 40398
2026-06-30T13:20:43.947175-05:00 claude-cloud sshd[569401]: Received disconnect from 202.145.0.61 port 40398:11: Bye Bye [preauth]
2026-06-30T13:20:43.947505-05:00 claude-cloud sshd[569401]: Disconnected from invalid user tan 202.145.0.61 port 40398 [preauth]
2026-06-30T13:20:44.360259-05:00 claude-cloud sshd[569410]: Invalid user pubsub from 168.167.72.132 port 40908
2026-06-30T13:20:44.574554-05:00 claude-cloud sshd[569410]: Received disconnect from 168.167.72.132 port 40908:11: Bye Bye [preauth]
2026-06-30T13:20:44.574859-05:00 claude-cloud sshd[569410]: Disconnected from invalid user pubsub 168.167.72.132 port 40908 [preauth]
2026-06-30T13:20:47.158125-05:00 claude-cloud sshd[569493]: Invalid user admin from 2.57.121.25 port 63650
2026-06-30T13:20:47.184151-05:00 claude-cloud sshd[569493]: Connection closed by invalid user admin 2.57.121.25 port 63650 [preauth]
2026-06-30T13:21:18.988126-05:00 claude-cloud sshd[569629]: Invalid user know from 139.59.231.23 port 40464
2026-06-30T13:21:19.153409-05:00 claude-cloud sshd[569629]: Received disconnect from 139.59.231.23 port 40464:11: Bye Bye [preauth]
2026-06-30T13:21:19.153665-05:00 claude-cloud sshd[569629]: Disconnected from invalid user know 139.59.231.23 port 40464 [preauth]
2026-06-30T13:21:30.900400-05:00 claude-cloud sshd[569700]: Invalid user bot from 45.148.10.240 port 37128
2026-06-30T13:21:30.913738-05:00 claude-cloud sshd[569700]: Connection closed by invalid user bot 45.148.10.240 port 37128 [preauth]
2026-06-30T13:21:36.130466-05:00 claude-cloud sshd[569742]: Connection closed by authenticating user nobody 125.20.210.182 port 35744 [preauth]
2026-06-30T13:21:50.126182-05:00 claude-cloud sshd[569826]: Invalid user languages from 119.47.90.19 port 57692
2026-06-30T13:21:50.298043-05:00 claude-cloud sshd[569826]: Received disconnect from 119.47.90.19 port 57692:11: Bye Bye [preauth]
2026-06-30T13:21:50.301439-05:00 claude-cloud sshd[569826]: Disconnected from invalid user languages 119.47.90.19 port 57692 [preauth]
2026-06-30T13:21:55.936032-05:00 claude-cloud sshd[569868]: Connection closed by authenticating user root 152.32.174.171 port 33142 [preauth]
2026-06-30T13:22:23.694423-05:00 claude-cloud sshd[570232]: Invalid user res from 43.255.118.11 port 42262
2026-06-30T13:22:23.867207-05:00 claude-cloud sshd[570232]: Received disconnect from 43.255.118.11 port 42262:11: Bye Bye [preauth]
2026-06-30T13:22:23.867479-05:00 claude-cloud sshd[570232]: Disconnected from invalid user res 43.255.118.11 port 42262 [preauth]
2026-06-30T13:22:29.700267-05:00 claude-cloud systemd-logind[853]: New session c5280 of user claude.
2026-06-30T13:22:30.058746-05:00 claude-cloud systemd-logind[853]: Session c5280 logged out. Waiting for processes to exit.
2026-06-30T13:22:30.060115-05:00 claude-cloud systemd-logind[853]: Removed session c5280.
2026-06-30T13:22:31.691838-05:00 claude-cloud sshd[570307]: Invalid user baze from 202.145.0.61 port 47776
2026-06-30T13:22:31.863249-05:00 claude-cloud sshd[570307]: Received disconnect from 202.145.0.61 port 47776:11: Bye Bye [preauth]
2026-06-30T13:22:31.863483-05:00 claude-cloud sshd[570307]: Disconnected from invalid user baze 202.145.0.61 port 47776 [preauth]
2026-06-30T13:22:46.484955-05:00 claude-cloud sshd[570480]: Invalid user tan from 168.167.72.132 port 40909
2026-06-30T13:22:46.701608-05:00 claude-cloud sshd[570480]: Received disconnect from 168.167.72.132 port 40909:11: Bye Bye [preauth]
2026-06-30T13:22:46.701935-05:00 claude-cloud sshd[570480]: Disconnected from invalid user tan 168.167.72.132 port 40909 [preauth]
2026-06-30T13:22:57.384487-05:00 claude-cloud sshd[570555]: Invalid user zf from 139.59.231.23 port 47006
2026-06-30T13:22:57.558563-05:00 claude-cloud sshd[570555]: Received disconnect from 139.59.231.23 port 47006:11: Bye Bye [preauth]
2026-06-30T13:22:57.558930-05:00 claude-cloud sshd[570555]: Disconnected from invalid user zf 139.59.231.23 port 47006 [preauth]
2026-06-30T13:23:04.015370-05:00 claude-cloud sshd[570588]: Invalid user magellan from 89.124.96.90 port 42428
2026-06-30T13:23:04.030478-05:00 claude-cloud sshd[570588]: Received disconnect from 89.124.96.90 port 42428:11: Bye Bye [preauth]
2026-06-30T13:23:04.030720-05:00 claude-cloud sshd[570588]: Disconnected from invalid user magellan 89.124.96.90 port 42428 [preauth]
2026-06-30T13:23:09.043038-05:00 claude-cloud sshd[570600]: Invalid user telegram from 45.148.10.240 port 51298
2026-06-30T13:23:09.056144-05:00 claude-cloud sshd[570600]: Connection closed by invalid user telegram 45.148.10.240 port 51298 [preauth]
2026-06-30T13:24:03.455467-05:00 claude-cloud sshd[570891]: Invalid user webct from 119.47.90.19 port 54748
2026-06-30T13:24:03.632314-05:00 claude-cloud sshd[570891]: Received disconnect from 119.47.90.19 port 54748:11: Bye Bye [preauth]
2026-06-30T13:24:03.632570-05:00 claude-cloud sshd[570891]: Disconnected from invalid user webct 119.47.90.19 port 54748 [preauth]
2026-06-30T13:24:14.137675-05:00 claude-cloud sshd[570923]: Received disconnect from 172.110.221.82 port 10400:11: disconnected by user [preauth]
2026-06-30T13:24:14.138569-05:00 claude-cloud sshd[570923]: Disconnected from authenticating user root 172.110.221.82 port 10400 [preauth]
2026-06-30T13:24:24.533177-05:00 claude-cloud sshd[570958]: Invalid user rsm from 202.145.0.61 port 55152
2026-06-30T13:24:24.707940-05:00 claude-cloud sshd[570958]: Received disconnect from 202.145.0.61 port 55152:11: Bye Bye [preauth]
2026-06-30T13:24:24.708216-05:00 claude-cloud sshd[570958]: Disconnected from invalid user rsm 202.145.0.61 port 55152 [preauth]
2026-06-30T13:24:35.339741-05:00 claude-cloud sshd[570961]: Connection closed by authenticating user root 27.71.230.31 port 49386 [preauth]
2026-06-30T13:24:39.578156-05:00 claude-cloud sshd[571107]: Invalid user baze from 139.59.231.23 port 53558
2026-06-30T13:24:39.750500-05:00 claude-cloud sshd[571107]: Received disconnect from 139.59.231.23 port 53558:11: Bye Bye [preauth]
2026-06-30T13:24:39.750692-05:00 claude-cloud sshd[571107]: Disconnected from invalid user baze 139.59.231.23 port 53558 [preauth]
2026-06-30T13:24:40.332584-05:00 claude-cloud sshd[571111]: Invalid user tan from 43.255.118.11 port 55114
2026-06-30T13:24:40.506011-05:00 claude-cloud sshd[571111]: Received disconnect from 43.255.118.11 port 55114:11: Bye Bye [preauth]
2026-06-30T13:24:40.506445-05:00 claude-cloud sshd[571111]: Disconnected from invalid user tan 43.255.118.11 port 55114 [preauth]
2026-06-30T13:24:53.343040-05:00 claude-cloud sshd[571249]: Invalid user jito from 45.148.10.240 port 60412
2026-06-30T13:24:53.356056-05:00 claude-cloud sshd[571249]: Connection closed by invalid user jito 45.148.10.240 port 60412 [preauth]
2026-06-30T13:24:55.948320-05:00 claude-cloud sshd[571256]: Invalid user casino from 168.167.72.132 port 40910
2026-06-30T13:24:56.137234-05:00 claude-cloud sshd[571256]: Received disconnect from 168.167.72.132 port 40910:11: Bye Bye [preauth]
2026-06-30T13:24:56.137447-05:00 claude-cloud sshd[571256]: Disconnected from invalid user casino 168.167.72.132 port 40910 [preauth]
2026-06-30T13:25:01.037877-05:00 claude-cloud CRON[571414]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-30T13:25:01.046264-05:00 claude-cloud CRON[571414]: pam_unix(cron:session): session closed for user root
2026-06-30T13:26:15.711611-05:00 claude-cloud sshd[572494]: Invalid user groupon from 89.124.96.90 port 35204
2026-06-30T13:26:15.726669-05:00 claude-cloud sshd[572494]: Received disconnect from 89.124.96.90 port 35204:11: Bye Bye [preauth]
2026-06-30T13:26:15.729385-05:00 claude-cloud sshd[572494]: Disconnected from invalid user groupon 89.124.96.90 port 35204 [preauth]
2026-06-30T13:26:17.870267-05:00 claude-cloud sshd[572524]: Invalid user his from 119.47.90.19 port 59374
2026-06-30T13:26:18.046515-05:00 claude-cloud sshd[572524]: Received disconnect from 119.47.90.19 port 59374:11: Bye Bye [preauth]
2026-06-30T13:26:18.046935-05:00 claude-cloud sshd[572524]: Disconnected from invalid user his 119.47.90.19 port 59374 [preauth]
2026-06-30T13:26:18.798697-05:00 claude-cloud sshd[572554]: Connection reset by authenticating user root 45.148.10.152 port 45126 [preauth]
2026-06-30T13:26:27.117669-05:00 claude-cloud sshd[572640]: Invalid user banana from 202.145.0.61 port 34308
2026-06-30T13:26:27.292920-05:00 claude-cloud sshd[572640]: Received disconnect from 202.145.0.61 port 34308:11: Bye Bye [preauth]
2026-06-30T13:26:27.293322-05:00 claude-cloud sshd[572640]: Disconnected from invalid user banana 202.145.0.61 port 34308 [preauth]
2026-06-30T13:26:30.511667-05:00 claude-cloud sshd[572654]: Invalid user cheetah from 139.59.231.23 port 60136
2026-06-30T13:26:30.680447-05:00 claude-cloud sshd[572654]: Received disconnect from 139.59.231.23 port 60136:11: Bye Bye [preauth]
2026-06-30T13:26:30.680667-05:00 claude-cloud sshd[572654]: Disconnected from invalid user cheetah 139.59.231.23 port 60136 [preauth]
2026-06-30T13:26:45.344486-05:00 claude-cloud sshd[572790]: Invalid user firedancer from 45.148.10.240 port 48900
2026-06-30T13:26:45.359976-05:00 claude-cloud sshd[572790]: Connection closed by invalid user firedancer 45.148.10.240 port 48900 [preauth]
2026-06-30T13:26:47.109604-05:00 claude-cloud sshd[572800]: Invalid user ubuntu from 185.242.3.195 port 42938
2026-06-30T13:26:47.116973-05:00 claude-cloud sshd[572800]: Connection closed by invalid user ubuntu 185.242.3.195 port 42938 [preauth]
2026-06-30T13:27:15.988528-05:00 claude-cloud sshd[573074]: Invalid user banana from 43.255.118.11 port 39958
2026-06-30T13:27:16.162519-05:00 claude-cloud sshd[573074]: Received disconnect from 43.255.118.11 port 39958:11: Bye Bye [preauth]
2026-06-30T13:27:16.162916-05:00 claude-cloud sshd[573074]: Disconnected from invalid user banana 43.255.118.11 port 39958 [preauth]
2026-06-30T13:27:34.627597-05:00 claude-cloud systemd-logind[853]: New session c5281 of user claude.
2026-06-30T13:27:34.964680-05:00 claude-cloud systemd-logind[853]: Session c5281 logged out. Waiting for processes to exit.
2026-06-30T13:27:34.965953-05:00 claude-cloud systemd-logind[853]: Removed session c5281.
2026-06-30T13:28:17.394331-05:00 claude-cloud sshd[573460]: Invalid user astra from 139.59.231.23 port 38482
2026-06-30T13:28:17.557356-05:00 claude-cloud sshd[573460]: Received disconnect from 139.59.231.23 port 38482:11: Bye Bye [preauth]
2026-06-30T13:28:17.557610-05:00 claude-cloud sshd[573460]: Disconnected from invalid user astra 139.59.231.23 port 38482 [preauth]
2026-06-30T13:28:24.293305-05:00 claude-cloud sshd[573485]: Invalid user qs from 202.145.0.61 port 41690
2026-06-30T13:28:24.463056-05:00 claude-cloud sshd[573485]: Received disconnect from 202.145.0.61 port 41690:11: Bye Bye [preauth]
2026-06-30T13:28:24.463338-05:00 claude-cloud sshd[573485]: Disconnected from invalid user qs 202.145.0.61 port 41690 [preauth]
2026-06-30T13:28:29.520607-05:00 claude-cloud sshd[573512]: Connection closed by authenticating user root 45.148.10.240 port 47756 [preauth]
2026-06-30T13:29:24.855784-05:00 claude-cloud sshd[573793]: Invalid user track from 89.124.96.90 port 38064
2026-06-30T13:29:24.872043-05:00 claude-cloud sshd[573793]: Received disconnect from 89.124.96.90 port 38064:11: Bye Bye [preauth]
2026-06-30T13:29:24.872232-05:00 claude-cloud sshd[573793]: Disconnected from invalid user track 89.124.96.90 port 38064 [preauth]
2026-06-30T13:29:33.081473-05:00 claude-cloud sshd[573826]: Invalid user nature from 43.255.118.11 port 52814
2026-06-30T13:29:33.261052-05:00 claude-cloud sshd[573826]: Received disconnect from 43.255.118.11 port 52814:11: Bye Bye [preauth]
2026-06-30T13:29:33.261476-05:00 claude-cloud sshd[573826]: Disconnected from invalid user nature 43.255.118.11 port 52814 [preauth]
2026-06-30T13:29:41.315320-05:00 claude-cloud sshd[573835]: Invalid user ubuntu from 45.198.224.46 port 50330
2026-06-30T13:29:41.921400-05:00 claude-cloud sshd[573835]: Connection closed by invalid user ubuntu 45.198.224.46 port 50330 [preauth]
2026-06-30T13:30:00.275214-05:00 claude-cloud sshd[573957]: Invalid user compras from 139.59.231.23 port 45036
2026-06-30T13:30:00.290193-05:00 claude-cloud sshd[573926]: Invalid user kali from 125.20.210.182 port 54878
2026-06-30T13:30:00.449572-05:00 claude-cloud sshd[573957]: Received disconnect from 139.59.231.23 port 45036:11: Bye Bye [preauth]
2026-06-30T13:30:00.449828-05:00 claude-cloud sshd[573957]: Disconnected from invalid user compras 139.59.231.23 port 45036 [preauth]
2026-06-30T13:30:00.646376-05:00 claude-cloud sshd[573926]: Connection closed by invalid user kali 125.20.210.182 port 54878 [preauth]
2026-06-30T13:30:16.474928-05:00 claude-cloud sshd[574036]: Invalid user bitcoin from 45.148.10.240 port 34330
2026-06-30T13:30:16.487081-05:00 claude-cloud sshd[574036]: Connection closed by invalid user bitcoin 45.148.10.240 port 34330 [preauth]
2026-06-30T13:30:22.272225-05:00 claude-cloud sshd[574056]: Invalid user casino from 202.145.0.61 port 49068
2026-06-30T13:30:22.445200-05:00 claude-cloud sshd[574056]: Received disconnect from 202.145.0.61 port 49068:11: Bye Bye [preauth]
2026-06-30T13:30:22.445442-05:00 claude-cloud sshd[574056]: Disconnected from invalid user casino 202.145.0.61 port 49068 [preauth]
2026-06-30T13:30:27.909144-05:00 claude-cloud sshd[574024]: Connection closed by authenticating user root 27.71.230.31 port 34724 [preauth]
2026-06-30T13:31:52.465058-05:00 claude-cloud sshd[574594]: Invalid user columbo from 43.255.118.11 port 37468
2026-06-30T13:31:52.641496-05:00 claude-cloud sshd[574594]: Received disconnect from 43.255.118.11 port 37468:11: Bye Bye [preauth]
2026-06-30T13:31:52.641670-05:00 claude-cloud sshd[574594]: Disconnected from invalid user columbo 43.255.118.11 port 37468 [preauth]
2026-06-30T13:31:53.090315-05:00 claude-cloud sshd[574602]: Connection reset by authenticating user root 45.148.10.141 port 65158 [preauth]
2026-06-30T13:32:13.997886-05:00 claude-cloud sshd[574957]: Invalid user pool from 45.148.10.240 port 60686
2026-06-30T13:32:14.010225-05:00 claude-cloud sshd[574957]: Connection closed by invalid user pool 45.148.10.240 port 60686 [preauth]
2026-06-30T13:32:21.043568-05:00 claude-cloud sshd[575050]: Invalid user astra from 202.145.0.61 port 56452
2026-06-30T13:32:21.212300-05:00 claude-cloud sshd[575050]: Received disconnect from 202.145.0.61 port 56452:11: Bye Bye [preauth]
2026-06-30T13:32:21.212598-05:00 claude-cloud sshd[575050]: Disconnected from invalid user astra 202.145.0.61 port 56452 [preauth]
2026-06-30T13:32:36.131981-05:00 claude-cloud sshd[575230]: Invalid user tara from 89.124.96.90 port 56068
2026-06-30T13:32:36.150687-05:00 claude-cloud sshd[575230]: Received disconnect from 89.124.96.90 port 56068:11: Bye Bye [preauth]
2026-06-30T13:32:36.150929-05:00 claude-cloud sshd[575230]: Disconnected from invalid user tara 89.124.96.90 port 56068 [preauth]
2026-06-30T13:32:39.616991-05:00 claude-cloud systemd-logind[853]: New session c5282 of user claude.
2026-06-30T13:32:39.960258-05:00 claude-cloud systemd-logind[853]: Session c5282 logged out. Waiting for processes to exit.
2026-06-30T13:32:39.961665-05:00 claude-cloud systemd-logind[853]: Removed session c5282.
2026-06-30T13:34:04.243065-05:00 claude-cloud sshd[577147]: Connection closed by authenticating user root 152.32.174.171 port 58022 [preauth]
2026-06-30T13:34:07.133919-05:00 claude-cloud sshd[577654]: Invalid user miner from 45.148.10.240 port 59188
2026-06-30T13:34:07.145356-05:00 claude-cloud sshd[577654]: Connection closed by invalid user miner 45.148.10.240 port 59188 [preauth]
2026-06-30T13:34:18.678438-05:00 claude-cloud sshd[577983]: Invalid user gauss from 43.255.118.11 port 50406
2026-06-30T13:34:18.853691-05:00 claude-cloud sshd[577983]: Received disconnect from 43.255.118.11 port 50406:11: Bye Bye [preauth]
2026-06-30T13:34:18.853959-05:00 claude-cloud sshd[577983]: Disconnected from invalid user gauss 43.255.118.11 port 50406 [preauth]
2026-06-30T13:35:01.056850-05:00 claude-cloud CRON[579398]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-30T13:35:01.061791-05:00 claude-cloud CRON[579398]: pam_unix(cron:session): session closed for user root
2026-06-30T13:35:31.012594-05:00 claude-cloud sshd[579740]: Invalid user eso from 168.167.72.132 port 40915
2026-06-30T13:35:31.223581-05:00 claude-cloud sshd[579740]: Received disconnect from 168.167.72.132 port 40915:11: Bye Bye [preauth]
2026-06-30T13:35:31.223813-05:00 claude-cloud sshd[579740]: Disconnected from invalid user eso 168.167.72.132 port 40915 [preauth]
2026-06-30T13:35:49.863545-05:00 claude-cloud sshd[579895]: Invalid user ibkr from 45.148.10.240 port 58272
2026-06-30T13:35:49.875952-05:00 claude-cloud sshd[579895]: Connection closed by invalid user ibkr 45.148.10.240 port 58272 [preauth]
2026-06-30T13:36:27.811591-05:00 claude-cloud sshd[580329]: Invalid user qs from 43.255.118.11 port 34940
2026-06-30T13:36:27.989646-05:00 claude-cloud sshd[580329]: Received disconnect from 43.255.118.11 port 34940:11: Bye Bye [preauth]
2026-06-30T13:36:27.989959-05:00 claude-cloud sshd[580329]: Disconnected from invalid user qs 43.255.118.11 port 34940 [preauth]
2026-06-30T13:36:54.791997-05:00 claude-cloud sshd[580866]: Received disconnect from 91.208.197.64 port 42714:11: disconnected by user [preauth]
2026-06-30T13:36:54.792556-05:00 claude-cloud sshd[580866]: Disconnected from authenticating user root 91.208.197.64 port 42714 [preauth]
2026-06-30T13:37:27.037608-05:00 claude-cloud sshd[581471]: Connection reset by authenticating user root 45.148.10.157 port 47024 [preauth]
2026-06-30T13:37:28.203586-05:00 claude-cloud sshd[581473]: Invalid user radon from 119.47.90.19 port 44790
2026-06-30T13:37:28.383129-05:00 claude-cloud sshd[581473]: Received disconnect from 119.47.90.19 port 44790:11: Bye Bye [preauth]
2026-06-30T13:37:28.383479-05:00 claude-cloud sshd[581473]: Disconnected from invalid user radon 119.47.90.19 port 44790 [preauth]
2026-06-30T13:37:34.377712-05:00 claude-cloud sshd[581651]: Invalid user ibkrpro from 45.148.10.240 port 50038
2026-06-30T13:37:34.390076-05:00 claude-cloud sshd[581651]: Connection closed by invalid user ibkrpro 45.148.10.240 port 50038 [preauth]
2026-06-30T13:37:44.683803-05:00 claude-cloud systemd-logind[853]: New session c5283 of user claude.
2026-06-30T13:37:44.982726-05:00 claude-cloud systemd-logind[853]: Session c5283 logged out. Waiting for processes to exit.
2026-06-30T13:37:44.984368-05:00 claude-cloud systemd-logind[853]: Removed session c5283.
2026-06-30T13:38:12.760749-05:00 claude-cloud sshd[582596]: Invalid user linaro from 125.20.210.182 port 58268
2026-06-30T13:38:13.804698-05:00 claude-cloud sshd[582596]: Connection closed by invalid user linaro 125.20.210.182 port 58268 [preauth]
2026-06-30T13:38:43.097136-05:00 claude-cloud sshd[583356]: Invalid user know from 43.255.118.11 port 47736
2026-06-30T13:38:43.271947-05:00 claude-cloud sshd[583356]: Received disconnect from 43.255.118.11 port 47736:11: Bye Bye [preauth]
2026-06-30T13:38:43.272366-05:00 claude-cloud sshd[583356]: Disconnected from invalid user know 43.255.118.11 port 47736 [preauth]
2026-06-30T13:39:04.720245-05:00 claude-cloud sshd[583848]: Invalid user auriga from 89.124.96.90 port 37130
2026-06-30T13:39:04.733366-05:00 claude-cloud sshd[583848]: Received disconnect from 89.124.96.90 port 37130:11: Bye Bye [preauth]
2026-06-30T13:39:04.733665-05:00 claude-cloud sshd[583848]: Disconnected from invalid user auriga 89.124.96.90 port 37130 [preauth]
2026-06-30T13:39:06.785485-05:00 claude-cloud sshd[583800]: Invalid user hadoop from 45.198.224.46 port 32790
2026-06-30T13:39:07.623205-05:00 claude-cloud sshd[583800]: Connection closed by invalid user hadoop 45.198.224.46 port 32790 [preauth]
2026-06-30T13:39:26.077510-05:00 claude-cloud sshd[584409]: Connection closed by authenticating user root 45.148.10.240 port 46560 [preauth]
2026-06-30T13:41:07.767839-05:00 claude-cloud sshd[585272]: Invalid user scarlet from 2.57.121.112 port 4890
2026-06-30T13:41:07.797649-05:00 claude-cloud sshd[585272]: Connection closed by invalid user scarlet 2.57.121.112 port 4890 [preauth]
2026-06-30T13:41:10.369091-05:00 claude-cloud sshd[585380]: Connection closed by authenticating user root 45.148.10.240 port 49350 [preauth]
2026-06-30T13:42:10.299096-05:00 claude-cloud sshd[586087]: Connection closed by authenticating user root 27.71.230.31 port 37402 [preauth]
2026-06-30T13:42:16.512520-05:00 claude-cloud sshd[586194]: Invalid user hod from 89.124.96.90 port 60496
2026-06-30T13:42:16.530018-05:00 claude-cloud sshd[586194]: Received disconnect from 89.124.96.90 port 60496:11: Bye Bye [preauth]
2026-06-30T13:42:16.531441-05:00 claude-cloud sshd[586194]: Disconnected from invalid user hod 89.124.96.90 port 60496 [preauth]
2026-06-30T13:42:49.378029-05:00 claude-cloud systemd-logind[853]: New session c5284 of user claude.
2026-06-30T13:42:50.030300-05:00 claude-cloud systemd-logind[853]: Session c5284 logged out. Waiting for processes to exit.
2026-06-30T13:42:50.032885-05:00 claude-cloud systemd-logind[853]: Removed session c5284.
2026-06-30T13:42:53.775963-05:00 claude-cloud sshd[586822]: Invalid user broker from 45.148.10.240 port 49168
2026-06-30T13:42:53.789429-05:00 claude-cloud sshd[586822]: Connection closed by invalid user broker 45.148.10.240 port 49168 [preauth]
2026-06-30T13:43:02.594798-05:00 claude-cloud sshd[586853]: Connection reset by authenticating user root 62.60.130.219 port 15082 [preauth]
2026-06-30T13:44:46.180556-05:00 claude-cloud sshd[588050]: Invalid user recorder from 45.148.10.240 port 40574
2026-06-30T13:44:46.193332-05:00 claude-cloud sshd[588050]: Connection closed by invalid user recorder 45.148.10.240 port 40574 [preauth]
2026-06-30T13:45:01.109029-05:00 claude-cloud CRON[588265]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-30T13:45:01.119148-05:00 claude-cloud CRON[588265]: pam_unix(cron:session): session closed for user root
2026-06-30T13:45:31.332027-05:00 claude-cloud sshd[589063]: Invalid user hkbnpatch from 89.124.96.90 port 48600
2026-06-30T13:45:31.346506-05:00 claude-cloud sshd[589063]: Received disconnect from 89.124.96.90 port 48600:11: Bye Bye [preauth]
2026-06-30T13:45:31.346724-05:00 claude-cloud sshd[589063]: Disconnected from invalid user hkbnpatch 89.124.96.90 port 48600 [preauth]
2026-06-30T13:45:38.043229-05:00 claude-cloud sshd[589516]: Connection closed by authenticating user root 152.32.174.171 port 41206 [preauth]
2026-06-30T13:45:53.949920-05:00 claude-cloud sshd[589727]: Connection closed by authenticating user root 125.20.210.182 port 52948 [preauth]
2026-06-30T13:46:41.235170-05:00 claude-cloud sshd[592231]: Invalid user dvr from 45.148.10.240 port 34656
2026-06-30T13:46:41.245781-05:00 claude-cloud sshd[592231]: Connection closed by invalid user dvr 45.148.10.240 port 34656 [preauth]
2026-06-30T13:47:54.636909-05:00 claude-cloud systemd-logind[853]: New session c5285 of user claude.
2026-06-30T13:47:54.990635-05:00 claude-cloud systemd-logind[853]: Session c5285 logged out. Waiting for processes to exit.
2026-06-30T13:47:54.992973-05:00 claude-cloud systemd-logind[853]: Removed session c5285.
2026-06-30T13:48:00.348158-05:00 claude-cloud sshd[593489]: Connection closed by authenticating user root 27.71.230.31 port 36444 [preauth]
2026-06-30T13:48:22.211453-05:00 claude-cloud sshd[594098]: Connection closed by authenticating user root 45.198.224.46 port 38332 [preauth]
2026-06-30T13:48:27.774022-05:00 claude-cloud sshd[594262]: Invalid user cadami from 45.148.10.240 port 52982
2026-06-30T13:48:27.786198-05:00 claude-cloud sshd[594262]: Connection closed by invalid user cadami 45.148.10.240 port 52982 [preauth]
2026-06-30T13:48:28.397007-05:00 claude-cloud sshd[594266]: Connection reset by authenticating user root 45.148.10.151 port 11136 [preauth]
2026-06-30T13:48:43.998187-05:00 claude-cloud sshd[594463]: Invalid user proj from 89.124.96.90 port 40644
2026-06-30T13:48:44.017637-05:00 claude-cloud sshd[594463]: Received disconnect from 89.124.96.90 port 40644:11: Bye Bye [preauth]
2026-06-30T13:48:44.017993-05:00 claude-cloud sshd[594463]: Disconnected from invalid user proj 89.124.96.90 port 40644 [preauth]
2026-06-30T13:50:16.223611-05:00 claude-cloud sshd[596339]: Invalid user radar from 45.148.10.240 port 38630
2026-06-30T13:50:16.236598-05:00 claude-cloud sshd[596339]: Connection closed by invalid user radar 45.148.10.240 port 38630 [preauth]
2026-06-30T13:51:56.197882-05:00 claude-cloud sshd[597760]: Invalid user site from 89.124.96.90 port 59016
2026-06-30T13:51:56.212935-05:00 claude-cloud sshd[597760]: Received disconnect from 89.124.96.90 port 59016:11: Bye Bye [preauth]
2026-06-30T13:51:56.213195-05:00 claude-cloud sshd[597760]: Disconnected from invalid user site 89.124.96.90 port 59016 [preauth]
2026-06-30T13:52:08.985427-05:00 claude-cloud sshd[597797]: Invalid user was from 45.148.10.240 port 44862
2026-06-30T13:52:08.997755-05:00 claude-cloud sshd[597797]: Connection closed by invalid user was 45.148.10.240 port 44862 [preauth]
2026-06-30T13:52:59.698518-05:00 claude-cloud systemd-logind[853]: New session c5286 of user claude.
2026-06-30T13:53:00.235688-05:00 claude-cloud systemd-logind[853]: Session c5286 logged out. Waiting for processes to exit.
2026-06-30T13:53:00.235940-05:00 claude-cloud systemd-logind[853]: Removed session c5286.
2026-06-30T13:53:41.247459-05:00 claude-cloud sshd[598566]: Connection closed by authenticating user root 27.71.230.31 port 44108 [preauth]
2026-06-30T13:53:53.519182-05:00 claude-cloud sshd[598996]: Invalid user wadmin from 45.148.10.240 port 43674
2026-06-30T13:53:53.532590-05:00 claude-cloud sshd[598996]: Connection closed by invalid user wadmin 45.148.10.240 port 43674 [preauth]
2026-06-30T13:53:57.802972-05:00 claude-cloud sshd[599138]: Connection reset by authenticating user root 45.148.10.141 port 60490 [preauth]
2026-06-30T13:54:21.727065-05:00 claude-cloud sshd[599624]: Connection closed by 120.76.158.232 port 46882
2026-06-30T13:54:26.910927-05:00 claude-cloud sshd[599599]: Connection closed by authenticating user root 125.20.210.182 port 52520 [preauth]
2026-06-30T13:55:01.134325-05:00 claude-cloud CRON[599870]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-30T13:55:01.141208-05:00 claude-cloud CRON[599870]: pam_unix(cron:session): session closed for user root
2026-06-30T13:55:09.965992-05:00 claude-cloud sshd[599902]: Invalid user origen-www from 89.124.96.90 port 44420
2026-06-30T13:55:09.986816-05:00 claude-cloud sshd[599902]: Received disconnect from 89.124.96.90 port 44420:11: Bye Bye [preauth]
2026-06-30T13:55:09.987034-05:00 claude-cloud sshd[599902]: Disconnected from invalid user origen-www 89.124.96.90 port 44420 [preauth]
2026-06-30T13:55:35.146719-05:00 claude-cloud sshd[600000]: Invalid user ladmin from 45.148.10.240 port 55608
2026-06-30T13:55:35.159642-05:00 claude-cloud sshd[600000]: Connection closed by invalid user ladmin 45.148.10.240 port 55608 [preauth]
2026-06-30T13:57:25.064309-05:00 claude-cloud sshd[600396]: Invalid user bob from 45.148.10.240 port 52658
2026-06-30T13:57:25.076971-05:00 claude-cloud sshd[600396]: Connection closed by invalid user bob 45.148.10.240 port 52658 [preauth]
2026-06-30T13:57:37.975955-05:00 claude-cloud sshd[600426]: Connection closed by authenticating user root 45.198.224.46 port 53726 [preauth]
2026-06-30T13:57:45.099705-05:00 claude-cloud sshd[600454]: Connection closed by authenticating user root 152.32.174.171 port 48804 [preauth]
2026-06-30T13:58:04.459287-05:00 claude-cloud systemd-logind[853]: New session c5287 of user claude.
2026-06-30T13:58:04.950560-05:00 claude-cloud systemd-logind[853]: Session c5287 logged out. Waiting for processes to exit.
2026-06-30T13:58:04.952382-05:00 claude-cloud systemd-logind[853]: Removed session c5287.
2026-06-30T13:58:11.996998-05:00 claude-cloud sshd[600538]: Received disconnect from 217.156.65.251 port 35816:11: disconnected by user [preauth]
2026-06-30T13:58:11.997508-05:00 claude-cloud sshd[600538]: Disconnected from authenticating user root 217.156.65.251 port 35816 [preauth]
2026-06-30T13:58:44.633144-05:00 claude-cloud sshd[600698]: Received disconnect from 195.116.145.127 port 53152:11: Bye Bye [preauth]
2026-06-30T13:58:44.633966-05:00 claude-cloud sshd[600698]: Disconnected from authenticating user root 195.116.145.127 port 53152 [preauth]
2026-06-30T13:59:15.485120-05:00 claude-cloud sshd[600826]: Invalid user grid from 45.148.10.240 port 51712
2026-06-30T13:59:15.498842-05:00 claude-cloud sshd[600826]: Connection closed by invalid user grid 45.148.10.240 port 51712 [preauth]
2026-06-30T13:59:25.092754-05:00 claude-cloud sshd[600856]: Connection reset by authenticating user root 45.148.10.151 port 33156 [preauth]
2026-06-30T13:59:34.893984-05:00 claude-cloud sshd[600858]: Connection closed by authenticating user root 27.71.230.31 port 49714 [preauth]
2026-06-30T13:59:45.354856-05:00 claude-cloud sshd[601032]: Invalid user debian from 193.46.255.86 port 62926
2026-06-30T13:59:45.380494-05:00 claude-cloud sshd[601032]: Connection closed by invalid user debian 193.46.255.86 port 62926 [preauth]
2026-06-30T14:01:01.568734-05:00 claude-cloud sshd[601610]: Invalid user bank from 45.148.10.240 port 55994
2026-06-30T14:01:01.583158-05:00 claude-cloud sshd[601610]: Connection closed by invalid user bank 45.148.10.240 port 55994 [preauth]
2026-06-30T14:01:30.764312-05:00 claude-cloud sshd[601797]: Received disconnect from 106.13.181.42 port 55118:11: Bye Bye [preauth]
2026-06-30T14:01:30.764676-05:00 claude-cloud sshd[601797]: Disconnected from authenticating user root 106.13.181.42 port 55118 [preauth]
2026-06-30T14:02:14.734010-05:00 claude-cloud sshd[602638]: Invalid user ubuntu2 from 82.39.86.153 port 40576
2026-06-30T14:02:14.753199-05:00 claude-cloud sshd[602638]: Received disconnect from 82.39.86.153 port 40576:11: Bye Bye [preauth]
2026-06-30T14:02:14.753406-05:00 claude-cloud sshd[602638]: Disconnected from invalid user ubuntu2 82.39.86.153 port 40576 [preauth]
2026-06-30T14:02:34.004737-05:00 claude-cloud sshd[602823]: Connection closed by authenticating user root 125.20.210.182 port 51016 [preauth]
2026-06-30T14:02:51.578358-05:00 claude-cloud sshd[603018]: Invalid user banking from 45.148.10.240 port 59700
2026-06-30T14:02:51.591973-05:00 claude-cloud sshd[603018]: Connection closed by invalid user banking 45.148.10.240 port 59700 [preauth]
2026-06-30T14:03:10.238842-05:00 claude-cloud systemd-logind[853]: New session c5288 of user claude.
2026-06-30T14:03:10.748688-05:00 claude-cloud systemd-logind[853]: Session c5288 logged out. Waiting for processes to exit.
2026-06-30T14:03:10.751197-05:00 claude-cloud systemd-logind[853]: Removed session c5288.
2026-06-30T14:04:48.477912-05:00 claude-cloud sshd[603762]: Invalid user broker from 45.148.10.240 port 41872
2026-06-30T14:04:48.490999-05:00 claude-cloud sshd[603762]: Connection closed by invalid user broker 45.148.10.240 port 41872 [preauth]
2026-06-30T14:05:01.156813-05:00 claude-cloud CRON[603823]: pam_unix(cron:session): session opened for user root(uid=0) by root(uid=0)
2026-06-30T14:05:01.164381-05:00 claude-cloud CRON[603823]: pam_unix(cron:session): session closed for user root
2026-06-30T14:05:27.381214-05:00 claude-cloud sshd[603843]: Connection closed by authenticating user root 27.71.230.31 port 40784 [preauth]
2026-06-30T14:06:18.746869-05:00 claude-cloud sshd[604128]: Received disconnect from 195.116.145.127 port 56606:11: Bye Bye [preauth]
2026-06-30T14:06:18.747177-05:00 claude-cloud sshd[604128]: Disconnected from authenticating user root 195.116.145.127 port 56606 [preauth]
2026-06-30T14:06:25.313949-05:00 claude-cloud sshd[604161]: Received disconnect from 61.72.55.130 port 37808:11: Bye Bye [preauth]
2026-06-30T14:06:25.315699-05:00 claude-cloud sshd[604161]: Disconnected from authenticating user root 61.72.55.130 port 37808 [preauth]
2026-06-30T14:06:33.861349-05:00 claude-cloud sshd[604191]: Invalid user broker from 45.148.10.240 port 56090
2026-06-30T14:06:33.873994-05:00 claude-cloud sshd[604191]: Connection closed by invalid user broker 45.148.10.240 port 56090 [preauth]
2026-06-30T14:06:43.953688-05:00 claude-cloud sshd[604200]: Connection closed by 106.13.181.42 port 48556 [preauth]
2026-06-30T14:06:54.289096-05:00 claude-cloud sshd[604262]: Connection closed by authenticating user root 45.198.224.46 port 48678 [preauth]
2026-06-30T14:07:38.457990-05:00 claude-cloud sshd[604379]: Received disconnect from 222.107.156.227 port 18166:11: Bye Bye [preauth]
2026-06-30T14:07:38.459479-05:00 claude-cloud sshd[604379]: Disconnected from authenticating user root 222.107.156.227 port 18166 [preauth]