May 24 15:44:00 Service sshd[1371]: Connection closed by 10.20.30.1 port 54622 [preauth]
May 24 15:44:01 Service sshd[1373]: Connection closed by 10.20.30.1 port 54623 [preauth]
May 24 15:44:03 Service sshd[1375]: Connection closed by 10.20.30.1 port 54624 [preauth]
May 24 15:44:09 Service login[1183]: pam_krb5(login:auth): authentication failure; logname=user uid=0 euid=0 tty=/dev/tty1 ruser= rhost=
May 24 15:44:09 Service login[1377]: pam_ecryptfs: Passphrase file wrapped
May 24 15:44:11 Service login[1183]: pam_unix(login:session): session opened for user rodislav by LOGIN(uid=0)
May 24 15:44:11 Service systemd-logind[871]: New session 1 of user rodislav.
May 24 15:44:11 Service systemd: pam_unix(systemd-user:session): session opened for user user by (uid=0)
May 24 15:44:34 Service sudo: pam_krb5(sudo:auth): authentication failure; logname=user uid=1000 euid=0 tty=/dev/tty1 ruser=rodislav rhost=
May 24 15:44:34 Service sudo: user : TTY=tty1 ; PWD=/home/user ; USER=root ; COMMAND=/bin/nano /var/log/auth.log
May 24 15:44:34 Service sudo: pam_unix(sudo:session): session opened for user root by user(uid=0)
May 24 15:44:43 Service sshd[1499]: Accepted publickey for user from 10.20.30.1 port 54625 ssh2: RSA SHA256:888888888888888888888888888888888888888
May 24 15:44:43 Service sshd[1499]: pam_unix(sshd:session): session opened for user user by (uid=0)