journalctl -xe
Dec 31 08:34:33 Ubuntu-1604-xenial-64-minimal sshd[11402]: Connection closed by 168.187.63.102 port 43415 [preauth]
Dec 31 08:34:35 Ubuntu-1604-xenial-64-minimal sshd[11367]: Failed password for root from 58.218.198.155 port 63815 ssh2
Dec 31 08:34:35 Ubuntu-1604-xenial-64-minimal sshd[11367]: Received disconnect from 58.218.198.155 port 63815:11: [preauth]
Dec 31 08:34:35 Ubuntu-1604-xenial-64-minimal sshd[11367]: Disconnected from 58.218.198.155 port 63815 [preauth]
Dec 31 08:34:35 Ubuntu-1604-xenial-64-minimal sshd[11367]: PAM 2 more authentication failures; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.218.198.155 user=root
Dec 31 08:34:50 Ubuntu-1604-xenial-64-minimal sshd[11470]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.218.198.155 user=root
Dec 31 08:34:52 Ubuntu-1604-xenial-64-minimal sshd[11470]: Failed password for root from 58.218.198.155 port 63107 ssh2
Dec 31 08:34:54 Ubuntu-1604-xenial-64-minimal sshd[11470]: Failed password for root from 58.218.198.155 port 63107 ssh2
Dec 31 08:34:57 Ubuntu-1604-xenial-64-minimal sshd[11470]: Failed password for root from 58.218.198.155 port 63107 ssh2
Dec 31 08:34:57 Ubuntu-1604-xenial-64-minimal sshd[11470]: Received disconnect from 58.218.198.155 port 63107:11: [preauth]
Dec 31 08:34:57 Ubuntu-1604-xenial-64-minimal sshd[11470]: Disconnected from 58.218.198.155 port 63107 [preauth]
Dec 31 08:34:57 Ubuntu-1604-xenial-64-minimal sshd[11470]: PAM 2 more authentication failures; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.218.198.155 user=root
Dec 31 08:35:01 Ubuntu-1604-xenial-64-minimal CRON[11529]: pam_unix(cron:session): session opened for user root by (uid=0)
Dec 31 08:35:01 Ubuntu-1604-xenial-64-minimal CRON[11530]: (root) CMD (php /var/www/html/pterodactyl/artisan schedule:run >> /dev/null 2>&1)
Dec 31 08:35:01 Ubuntu-1604-xenial-64-minimal CRON[11529]: pam_unix(cron:session): session closed for user root
Dec 31 08:35:11 Ubuntu-1604-xenial-64-minimal sudo[11607]: ogp_agent : TTY=pts/0 ; PWD=/usr/share/ogp_agent ; USER=root ; COMMAND=/bin/su -c chown -Rf 1000:1000 '/home/ogp_agent/OGP_User_Files/24';echo $? root
Dec 31 08:35:11 Ubuntu-1604-xenial-64-minimal sudo[11607]: pam_unix(sudo:session): session opened for user root by (uid=0)
Dec 31 08:35:11 Ubuntu-1604-xenial-64-minimal su[11608]: Successful su for root by root
Dec 31 08:35:11 Ubuntu-1604-xenial-64-minimal su[11608]: + ??? root:root
Dec 31 08:35:11 Ubuntu-1604-xenial-64-minimal su[11608]: pam_unix(su:session): session opened for user root by (uid=0)
Dec 31 08:35:11 Ubuntu-1604-xenial-64-minimal su[11608]: pam_systemd(su:session): Cannot create session: Already running in a session
Dec 31 08:35:11 Ubuntu-1604-xenial-64-minimal su[11608]: pam_unix(su:session): session closed for user root
Dec 31 08:35:11 Ubuntu-1604-xenial-64-minimal sudo[11607]: pam_unix(sudo:session): session closed for user root
Dec 31 08:35:11 Ubuntu-1604-xenial-64-minimal sudo[11615]: ogp_agent : TTY=pts/0 ; PWD=/home/ogp_agent/OGP_User_Files/24 ; USER=root ; COMMAND=/bin/su -c chattr -Rf -i 'hlds_run' && chown -Rf 1000:1000 'hlds_run';echo $? root
Dec 31 08:35:11 Ubuntu-1604-xenial-64-minimal sudo[11615]: pam_unix(sudo:session): session opened for user root by (uid=0)
Dec 31 08:35:11 Ubuntu-1604-xenial-64-minimal su[11616]: Successful su for root by root
Dec 31 08:35:11 Ubuntu-1604-xenial-64-minimal su[11616]: + ??? root:root
Dec 31 08:35:11 Ubuntu-1604-xenial-64-minimal su[11616]: pam_unix(su:session): session opened for user root by (uid=0)
Dec 31 08:35:11 Ubuntu-1604-xenial-64-minimal su[11616]: pam_systemd(su:session): Cannot create session: Already running in a session
Dec 31 08:35:11 Ubuntu-1604-xenial-64-minimal su[11616]: pam_unix(su:session): session closed for user root
Dec 31 08:35:11 Ubuntu-1604-xenial-64-minimal sudo[11615]: pam_unix(sudo:session): session closed for user root
Dec 31 08:35:11 Ubuntu-1604-xenial-64-minimal sudo[11624]: ogp_agent : TTY=pts/0 ; PWD=/home/ogp_agent/OGP_User_Files/24 ; USER=root ; COMMAND=/bin/su -c chown -Rf 1000:1000 'hlds_run' && chattr -Rf +i 'hlds_run';echo $? root
Dec 31 08:35:11 Ubuntu-1604-xenial-64-minimal sudo[11624]: pam_unix(sudo:session): session opened for user root by (uid=0)
Dec 31 08:35:11 Ubuntu-1604-xenial-64-minimal su[11625]: Successful su for root by root
Dec 31 08:35:11 Ubuntu-1604-xenial-64-minimal su[11625]: + ??? root:root
Dec 31 08:35:11 Ubuntu-1604-xenial-64-minimal su[11625]: pam_unix(su:session): session opened for user root by (uid=0)
Dec 31 08:35:11 Ubuntu-1604-xenial-64-minimal su[11625]: pam_systemd(su:session): Cannot create session: Already running in a session
Dec 31 08:35:11 Ubuntu-1604-xenial-64-minimal su[11625]: pam_unix(su:session): session closed for user root
Dec 31 08:35:11 Ubuntu-1604-xenial-64-minimal sudo[11624]: pam_unix(sudo:session): session closed for user root
Dec 31 08:35:11 Ubuntu-1604-xenial-64-minimal sudo[11633]: ogp_agent : TTY=pts/0 ; PWD=/home/ogp_agent/OGP_User_Files/24 ; USER=root ; COMMAND=/bin/su -c chattr -Rf -i 'OGP_HOME_000000024_startup_scr.sh' && chown -Rf 1000:1000 'OGP_HOME_
Dec 31 08:35:11 Ubuntu-1604-xenial-64-minimal sudo[11633]: pam_unix(sudo:session): session opened for user root by (uid=0)
Dec 31 08:35:11 Ubuntu-1604-xenial-64-minimal su[11634]: Successful su for root by root
Dec 31 08:35:11 Ubuntu-1604-xenial-64-minimal su[11634]: + ??? root:root
Dec 31 08:35:11 Ubuntu-1604-xenial-64-minimal su[11634]: pam_unix(su:session): session opened for user root by (uid=0)
Dec 31 08:35:11 Ubuntu-1604-xenial-64-minimal su[11634]: pam_systemd(su:session): Cannot create session: Already running in a session
Dec 31 08:35:11 Ubuntu-1604-xenial-64-minimal su[11634]: pam_unix(su:session): session closed for user root
Dec 31 08:35:11 Ubuntu-1604-xenial-64-minimal sudo[11633]: pam_unix(sudo:session): session closed for user root
Dec 31 08:35:11 Ubuntu-1604-xenial-64-minimal sudo[11642]: ogp_agent : TTY=pts/0 ; PWD=/home/ogp_agent/OGP_User_Files/24 ; USER=root ; COMMAND=/bin/su -c chown -Rf 1000:1000 'OGP_HOME_000000024_startup_scr.sh' && chattr -Rf +i 'OGP_HOME_
Dec 31 08:35:11 Ubuntu-1604-xenial-64-minimal sudo[11642]: pam_unix(sudo:session): session opened for user root by (uid=0)
Dec 31 08:35:11 Ubuntu-1604-xenial-64-minimal su[11643]: Successful su for root by root
Dec 31 08:35:11 Ubuntu-1604-xenial-64-minimal su[11643]: + ??? root:root
Dec 31 08:35:11 Ubuntu-1604-xenial-64-minimal su[11643]: pam_unix(su:session): session opened for user root by (uid=0)
Dec 31 08:35:11 Ubuntu-1604-xenial-64-minimal su[11643]: pam_systemd(su:session): Cannot create session: Already running in a session
Dec 31 08:35:11 Ubuntu-1604-xenial-64-minimal su[11643]: pam_unix(su:session): session closed for user root
Dec 31 08:35:11 Ubuntu-1604-xenial-64-minimal sudo[11642]: pam_unix(sudo:session): session closed for user root
Dec 31 08:35:12 Ubuntu-1604-xenial-64-minimal sshd[11587]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.218.198.155 user=root
Dec 31 08:35:14 Ubuntu-1604-xenial-64-minimal sshd[11587]: Failed password for root from 58.218.198.155 port 63737 ssh2
Dec 31 08:35:16 Ubuntu-1604-xenial-64-minimal sshd[11587]: Failed password for root from 58.218.198.155 port 63737 ssh2
Dec 31 08:35:18 Ubuntu-1604-xenial-64-minimal sshd[11587]: Failed password for root from 58.218.198.155 port 63737 ssh2
Dec 31 08:35:18 Ubuntu-1604-xenial-64-minimal sshd[11587]: Received disconnect from 58.218.198.155 port 63737:11: [preauth]
Dec 31 08:35:18 Ubuntu-1604-xenial-64-minimal sshd[11587]: Disconnected from 58.218.198.155 port 63737 [preauth]
Dec 31 08:35:18 Ubuntu-1604-xenial-64-minimal sshd[11587]: PAM 2 more authentication failures; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.218.198.155 user=root