May 20 08:45:52 SCADA sshd[49126]: Connection from 10.28.0.45 port 51977 on 10.2.0.10 port 22 rdomain ""
May 20 08:45:52 SCADA sshd[49126]: Accepted key ED25519 SHA256:JN1+WOJtzM8U+FlsVhTxumTYqtUbk7Mq4JUD4Cef1C8 found at /home/audit-035/.ssh/authorized_keys:3
May 20 08:45:52 SCADA sshd[49126]: Postponed publickey for audit-035 from 10.28.0.45 port 51977 ssh2 [preauth]
May 20 08:45:52 SCADA sshd[49126]: Accepted key ED25519 SHA256:JN1+WOJtzM8U+FlsVhTxumTYqtUbk7Mq4JUD4Cef1C8 found at /home/audit-035/.ssh/authorized_keys:3
May 20 08:45:52 SCADA sshd[49126]: Accepted publickey for audit-035 from 10.28.0.45 port 51977 ssh2: ED25519 SHA256:JN1+WOJtzM8U+FlsVhTxumTYqtUbk7Mq4JUD4Cef1C8
May 20 08:45:52 SCADA sshd[49126]: pam_unix(sshd:session): session opened for user audit-035(uid=1085) by (uid=0)
May 20 08:45:52 SCADA sshd[49126]: User child is on pid 49424
May 20 08:45:52 SCADA sshd[49424]: Starting session: shell on pts/8 for audit-035 from 10.28.0.45 port 51977 id 0
May 20 10:41:19 SCADA sshd[60734]: Connection from 10.28.0.59 port 49554 on 10.2.0.10 port 22 rdomain ""
May 20 10:41:19 SCADA sshd[60734]: Accepted key ED25519 SHA256:oMg74ONiCtNtZ7EoGGIBdClPafcB22ni9Z1is5D9P/A found at /home/audit-049/.ssh/authorized_keys:1
May 20 10:41:19 SCADA sshd[60734]: Postponed publickey for audit-049 from 10.28.0.59 port 49554 ssh2 [preauth]
May 20 10:41:19 SCADA sshd[60734]: Accepted key ED25519 SHA256:oMg74ONiCtNtZ7EoGGIBdClPafcB22ni9Z1is5D9P/A found at /home/audit-049/.ssh/authorized_keys:1
May 20 10:41:19 SCADA sshd[60734]: Accepted publickey for audit-049 from 10.28.0.59 port 49554 ssh2: ED25519 SHA256:oMg74ONiCtNtZ7EoGGIBdClPafcB22ni9Z1is5D9P/A
May 20 10:41:19 SCADA sshd[60734]: pam_unix(sshd:session): session opened for user audit-049(uid=1099) by (uid=0)
May 20 10:41:19 SCADA sshd[60734]: User child is on pid 27590
May 20 10:41:19 SCADA sshd[27590]: Starting session: shell on pts/8 for audit-049 from 10.28.0.59 port 49554 id 0
May 20 11:15:37 SCADA sshd[12054]: Connection from 10.7.0.50 port 46766 on 10.2.0.10 port 22 rdomain ""
May 20 11:15:37 SCADA sshd[12054]: Accepted key SHA256:mxgLqoTdvADlLWRemOGcApu8iPTr4YngflUtGDcOOLg found at /home/maintainer-040/.ssh/authorized_keys:1
May 20 11:15:37 SCADA sshd[12054]: Postponed publickey for maintainer-040 from 10.7.0.50 port 46766 ssh2 [preauth]
May 20 11:15:37 SCADA sshd[12054]: Accepted key SHA256:mxgLqoTdvADlLWRemOGcApu8iPTr4YngflUtGDcOOLg found at /home/maintainer-040/.ssh/authorized_keys:1
May 20 11:15:37 SCADA sshd[12054]: Accepted publickey for maintainer-040 from 10.7.0.50 port 46766 ssh2: SHA256:mxgLqoTdvADlLWRemOGcApu8iPTr4YngflUtGDcOOLg
May 20 11:15:37 SCADA sshd[12054]: pam_unix(sshd:session): session opened for user maintainer-040(uid=1040) by (uid=0)
May 20 11:15:37 SCADA sshd[12054]: User child is on pid 34217
May 20 11:15:37 SCADA sshd[34217]: Starting session: shell on pts/8 for maintainer-040 from 10.7.0.50 port 46766 id 0
May 20 18:18:21 SCADA sshd[11170]: Connection from 10.28.0.34 port 48317 on 10.2.0.10 port 22 rdomain ""
May 20 18:18:21 SCADA sshd[11170]: Accepted key ED25519 SHA256:rkSBan3ORhG74JHiAw8d2Dw9QTmKjU/KbdHH/LaHnkw found at /home/audit-024/.ssh/authorized_keys:2
May 20 18:18:21 SCADA sshd[11170]: Postponed publickey for audit-024 from 10.28.0.34 port 48317 ssh2 [preauth]
May 20 18:18:21 SCADA sshd[11170]: Accepted key ED25519 SHA256:rkSBan3ORhG74JHiAw8d2Dw9QTmKjU/KbdHH/LaHnkw found at /home/audit-024/.ssh/authorized_keys:2
May 20 18:18:21 SCADA sshd[11170]: Accepted publickey for audit-024 from 10.28.0.34 port 48317 ssh2: ED25519 SHA256:rkSBan3ORhG74JHiAw8d2Dw9QTmKjU/KbdHH/LaHnkw
May 20 18:18:21 SCADA sshd[11170]: pam_unix(sshd:session): session opened for user audit-024(uid=1074) by (uid=0)
May 20 18:18:21 SCADA sshd[11170]: User child is on pid 40486
May 20 18:18:21 SCADA sshd[40486]: Starting session: shell on pts/4 for audit-024 from 10.28.0.34 port 48317 id 0
May 21 08:21:37 SCADA sshd[35130]: Connection from 10.7.0.45 port 53074 on 10.2.0.10 port 22 rdomain ""
May 21 08:21:37 SCADA sshd[35130]: Accepted key SHA256:zoy5qPhmH8aVVMTdugqZizJIdY4cgk04pW7suAJ4ths found at /home/maintainer-035/.ssh/authorized_keys:4
May 21 08:21:37 SCADA sshd[35130]: Postponed publickey for maintainer-035 from 10.7.0.45 port 53074 ssh2 [preauth]
May 21 08:21:37 SCADA sshd[35130]: Accepted key SHA256:zoy5qPhmH8aVVMTdugqZizJIdY4cgk04pW7suAJ4ths found at /home/maintainer-035/.ssh/authorized_keys:4
May 21 08:21:37 SCADA sshd[35130]: Accepted publickey for maintainer-035 from 10.7.0.45 port 53074 ssh2: SHA256:zoy5qPhmH8aVVMTdugqZizJIdY4cgk04pW7suAJ4ths
May 21 08:21:37 SCADA sshd[35130]: pam_unix(sshd:session): session opened for user maintainer-035(uid=1035) by (uid=0)
May 21 08:21:37 SCADA sshd[35130]: User child is on pid 48005
May 21 08:21:37 SCADA sshd[48005]: Starting session: shell on pts/7 for maintainer-035 from 10.7.0.45 port 53074 id 0
May 21 08:57:02 SCADA sshd[52097]: Connection from 10.28.0.36 port 52924 on 10.2.0.10 port 22 rdomain ""
May 21 08:57:02 SCADA sshd[52097]: Accepted key ED25519 SHA256:sEyvg0ruGFBjhZyPuo9fc4J1wcpOfxCf1C94GqBvGV8 found at /home/audit-026/.ssh/authorized_keys:3
May 21 08:57:02 SCADA sshd[52097]: Postponed publickey for audit-026 from 10.28.0.36 port 52924 ssh2 [preauth]
May 21 08:57:02 SCADA sshd[52097]: Accepted key ED25519 SHA256:sEyvg0ruGFBjhZyPuo9fc4J1wcpOfxCf1C94GqBvGV8 found at /home/audit-026/.ssh/authorized_keys:3
May 21 08:57:02 SCADA sshd[52097]: Accepted publickey for audit-026 from 10.28.0.36 port 52924 ssh2: ED25519 SHA256:sEyvg0ruGFBjhZyPuo9fc4J1wcpOfxCf1C94GqBvGV8
May 21 08:57:02 SCADA sshd[52097]: pam_unix(sshd:session): session opened for user audit-026(uid=1076) by (uid=0)
May 21 08:57:02 SCADA sshd[52097]: User child is on pid 25293
May 21 08:57:02 SCADA sshd[25293]: Starting session: shell on pts/8 for audit-026 from 10.28.0.36 port 52924 id 0
May 21 09:51:12 SCADA sshd[40800]: Connection from 10.28.0.21 port 52089 on 10.2.0.10 port 22 rdomain ""
May 21 09:51:12 SCADA sshd[40800]: Accepted key ED25519 SHA256:pHABZ/VOrfGIxYo/Lsi2Q/fN1fxuVQoObxKxcWrM5tk found at /home/audit-011/.ssh/authorized_keys:5
May 21 09:51:12 SCADA sshd[40800]: Postponed publickey for audit-011 from 10.28.0.21 port 52089 ssh2 [preauth]
May 21 09:51:12 SCADA sshd[40800]: Accepted key ED25519 SHA256:pHABZ/VOrfGIxYo/Lsi2Q/fN1fxuVQoObxKxcWrM5tk found at /home/audit-011/.ssh/authorized_keys:5
May 21 09:51:12 SCADA sshd[40800]: Accepted publickey for audit-011 from 10.28.0.21 port 52089 ssh2: ED25519 SHA256:pHABZ/VOrfGIxYo/Lsi2Q/fN1fxuVQoObxKxcWrM5tk
May 21 09:51:12 SCADA sshd[40800]: pam_unix(sshd:session): session opened for user audit-011(uid=1061) by (uid=0)
May 21 09:51:12 SCADA sshd[40800]: User child is on pid 37551
May 21 09:51:12 SCADA sshd[37551]: Starting session: shell on pts/3 for audit-011 from 10.28.0.21 port 52089 id 0
May 21 17:06:56 SCADA sshd[62085]: Connection from 10.7.0.11 port 45025 on 10.2.0.10 port 22 rdomain ""
May 21 17:06:56 SCADA sshd[62085]: Accepted key SHA256:AJ+5xX/lSKIqcZi188PtL1mgl2ZLwQuYl2fgOkHEJI4 found at /home/maintainer-001/.ssh/authorized_keys:2
May 21 17:06:56 SCADA sshd[62085]: Postponed publickey for maintainer-001 from 10.7.0.11 port 45025 ssh2 [preauth]
May 21 17:06:56 SCADA sshd[62085]: Accepted key SHA256:AJ+5xX/lSKIqcZi188PtL1mgl2ZLwQuYl2fgOkHEJI4 found at /home/maintainer-001/.ssh/authorized_keys:2
May 21 17:06:56 SCADA sshd[62085]: Accepted publickey for maintainer-001 from 10.7.0.11 port 45025 ssh2: SHA256:AJ+5xX/lSKIqcZi188PtL1mgl2ZLwQuYl2fgOkHEJI4
May 21 17:06:56 SCADA sshd[62085]: pam_unix(sshd:session): session opened for user maintainer-001(uid=1001) by (uid=0)
May 21 17:06:56 SCADA sshd[62085]: User child is on pid 28368
May 21 17:06:56 SCADA sshd[28368]: Starting session: shell on pts/7 for maintainer-001 from 10.7.0.11 port 45025 id 0
May 22 09:17:06 SCADA sshd[48553]: Connection from 10.28.0.22 port 44996 on 10.2.0.10 port 22 rdomain ""
May 22 09:17:06 SCADA sshd[48553]: Accepted key ED25519 SHA256:nnVHO30ecBy/QlYOJk3wOxrUn3HtPW8O5Fz6HL9WZBQ found at /home/audit-012/.ssh/authorized_keys:3
May 22 09:17:06 SCADA sshd[48553]: Postponed publickey for audit-012 from 10.28.0.22 port 44996 ssh2 [preauth]
May 22 09:17:06 SCADA sshd[48553]: Accepted key ED25519 SHA256:nnVHO30ecBy/QlYOJk3wOxrUn3HtPW8O5Fz6HL9WZBQ found at /home/audit-012/.ssh/authorized_keys:3
May 22 09:17:06 SCADA sshd[48553]: Accepted publickey for audit-012 from 10.28.0.22 port 44996 ssh2: ED25519 SHA256:nnVHO30ecBy/QlYOJk3wOxrUn3HtPW8O5Fz6HL9WZBQ
May 22 09:17:06 SCADA sshd[48553]: pam_unix(sshd:session): session opened for user audit-012(uid=1062) by (uid=0)
May 22 09:17:06 SCADA sshd[48553]: User child is on pid 64972
May 22 09:17:06 SCADA sshd[64972]: Starting session: shell on pts/7 for audit-012 from 10.28.0.22 port 44996 id 0
May 22 09:40:05 SCADA sshd[61840]: Connection from 10.28.0.44 port 52891 on 10.2.0.10 port 22 rdomain ""
May 22 09:40:05 SCADA sshd[61840]: Accepted key ED25519 SHA256:A7Tjkcprg13CEthOPk2vBryWD6PMy1QEj5fzg1w3wE8 found at /home/audit-034/.ssh/authorized_keys:5
May 22 09:40:05 SCADA sshd[61840]: Postponed publickey for audit-034 from 10.28.0.44 port 52891 ssh2 [preauth]
May 22 09:40:05 SCADA sshd[61840]: Accepted key ED25519 SHA256:A7Tjkcprg13CEthOPk2vBryWD6PMy1QEj5fzg1w3wE8 found at /home/audit-034/.ssh/authorized_keys:5
May 22 09:40:05 SCADA sshd[61840]: Accepted publickey for audit-034 from 10.28.0.44 port 52891 ssh2: ED25519 SHA256:A7Tjkcprg13CEthOPk2vBryWD6PMy1QEj5fzg1w3wE8
May 22 09:40:05 SCADA sshd[61840]: pam_unix(sshd:session): session opened for user audit-034(uid=1084) by (uid=0)
May 22 09:40:05 SCADA sshd[61840]: User child is on pid 30786
May 22 09:40:05 SCADA sshd[30786]: Starting session: shell on pts/2 for audit-034 from 10.28.0.44 port 52891 id 0
May 22 12:26:56 SCADA sshd[46633]: Connection from 10.7.0.35 port 41004 on 10.2.0.10 port 22 rdomain ""
May 22 12:26:56 SCADA sshd[46633]: Accepted key SHA256:anQVMKwfRaQQf2HStkcVWboTLumKq11Xai0Pc12nr98 found at /home/maintainer-025/.ssh/authorized_keys:2
May 22 12:26:56 SCADA sshd[46633]: Postponed publickey for maintainer-025 from 10.7.0.35 port 41004 ssh2 [preauth]
May 22 12:26:56 SCADA sshd[46633]: Accepted key SHA256:anQVMKwfRaQQf2HStkcVWboTLumKq11Xai0Pc12nr98 found at /home/maintainer-025/.ssh/authorized_keys:2
May 22 12:26:56 SCADA sshd[46633]: Accepted publickey for maintainer-025 from 10.7.0.35 port 41004 ssh2: SHA256:anQVMKwfRaQQf2HStkcVWboTLumKq11Xai0Pc12nr98
May 22 12:26:56 SCADA sshd[46633]: pam_unix(sshd:session): session opened for user maintainer-025(uid=1025) by (uid=0)
May 22 12:26:56 SCADA sshd[46633]: User child is on pid 44778
May 22 12:26:56 SCADA sshd[44778]: Starting session: shell on pts/8 for maintainer-025 from 10.7.0.35 port 41004 id 0
May 22 13:31:17 SCADA sshd[49644]: Connection from 10.7.0.48 port 41582 on 10.2.0.10 port 22 rdomain ""
May 22 13:31:17 SCADA sshd[49644]: Accepted key SHA256:wlcB7LcKyLKk7f5VIKxJ8H074/ma5E4FAfDAZx7Xa1w found at /home/maintainer-038/.ssh/authorized_keys:5
May 22 13:31:17 SCADA sshd[49644]: Postponed publickey for maintainer-038 from 10.7.0.48 port 41582 ssh2 [preauth]
May 22 13:31:17 SCADA sshd[49644]: Accepted key SHA256:wlcB7LcKyLKk7f5VIKxJ8H074/ma5E4FAfDAZx7Xa1w found at /home/maintainer-038/.ssh/authorized_keys:5
May 22 13:31:17 SCADA sshd[49644]: Accepted publickey for maintainer-038 from 10.7.0.48 port 41582 ssh2: SHA256:wlcB7LcKyLKk7f5VIKxJ8H074/ma5E4FAfDAZx7Xa1w
May 22 13:31:17 SCADA sshd[49644]: pam_unix(sshd:session): session opened for user maintainer-038(uid=1038) by (uid=0)
May 22 13:31:17 SCADA sshd[49644]: User child is on pid 15264
May 22 13:31:17 SCADA sshd[15264]: Starting session: shell on pts/5 for maintainer-038 from 10.7.0.48 port 41582 id 0
May 23 09:21:11 SCADA sshd[16613]: Connection from 10.28.0.43 port 41028 on 10.2.0.10 port 22 rdomain ""
May 23 09:21:11 SCADA sshd[16613]: Accepted key ED25519 SHA256:m8BdmDusIvpxg3as3NMiH0+o71ovB5V9tYaB+sp0HRE found at /home/audit-033/.ssh/authorized_keys:3
May 23 09:21:11 SCADA sshd[16613]: Postponed publickey for audit-033 from 10.28.0.43 port 41028 ssh2 [preauth]
May 23 09:21:11 SCADA sshd[16613]: Accepted key ED25519 SHA256:m8BdmDusIvpxg3as3NMiH0+o71ovB5V9tYaB+sp0HRE found at /home/audit-033/.ssh/authorized_keys:3
May 23 09:21:11 SCADA sshd[16613]: Accepted publickey for audit-033 from 10.28.0.43 port 41028 ssh2: ED25519 SHA256:m8BdmDusIvpxg3as3NMiH0+o71ovB5V9tYaB+sp0HRE
May 23 09:21:11 SCADA sshd[16613]: pam_unix(sshd:session): session opened for user audit-033(uid=1083) by (uid=0)
May 23 09:21:11 SCADA sshd[16613]: User child is on pid 19270
May 23 09:21:11 SCADA sshd[19270]: Starting session: shell on pts/3 for audit-033 from 10.28.0.43 port 41028 id 0
May 23 11:59:24 SCADA sshd[43440]: Connection from 10.7.0.15 port 53541 on 10.2.0.10 port 22 rdomain ""
May 23 11:59:24 SCADA sshd[43440]: Accepted key SHA256:vHc0KLYAEKtF/yjIw0cK2f0QFKtpW5O2BSk32G4ynyk found at /home/maintainer-005/.ssh/authorized_keys:3
May 23 11:59:24 SCADA sshd[43440]: Postponed publickey for maintainer-005 from 10.7.0.15 port 53541 ssh2 [preauth]
May 23 11:59:24 SCADA sshd[43440]: Accepted key SHA256:vHc0KLYAEKtF/yjIw0cK2f0QFKtpW5O2BSk32G4ynyk found at /home/maintainer-005/.ssh/authorized_keys:3
May 23 11:59:24 SCADA sshd[43440]: Accepted publickey for maintainer-005 from 10.7.0.15 port 53541 ssh2: SHA256:vHc0KLYAEKtF/yjIw0cK2f0QFKtpW5O2BSk32G4ynyk
May 23 11:59:24 SCADA sshd[43440]: pam_unix(sshd:session): session opened for user maintainer-005(uid=1005) by (uid=0)
May 23 11:59:24 SCADA sshd[43440]: User child is on pid 19190
May 23 11:59:24 SCADA sshd[19190]: Starting session: shell on pts/5 for maintainer-005 from 10.7.0.15 port 53541 id 0
May 24 12:15:09 SCADA sshd[40667]: Connection from 10.28.0.49 port 57457 on 10.2.0.10 port 22 rdomain ""
May 24 12:15:09 SCADA sshd[40667]: Accepted key ED25519 SHA256:eIST/WPwryUKiaT5bDpYdjnoxn27tZ+jOt53ZVankcg found at /home/audit-039/.ssh/authorized_keys:1
May 24 12:15:09 SCADA sshd[40667]: Postponed publickey for audit-039 from 10.28.0.49 port 57457 ssh2 [preauth]
May 24 12:15:09 SCADA sshd[40667]: Accepted key ED25519 SHA256:eIST/WPwryUKiaT5bDpYdjnoxn27tZ+jOt53ZVankcg found at /home/audit-039/.ssh/authorized_keys:1
May 24 12:15:09 SCADA sshd[40667]: Accepted publickey for audit-039 from 10.28.0.49 port 57457 ssh2: ED25519 SHA256:eIST/WPwryUKiaT5bDpYdjnoxn27tZ+jOt53ZVankcg
May 24 12:15:09 SCADA sshd[40667]: pam_unix(sshd:session): session opened for user audit-039(uid=1089) by (uid=0)
May 24 12:15:09 SCADA sshd[40667]: User child is on pid 43706
May 24 12:15:09 SCADA sshd[43706]: Starting session: shell on pts/6 for audit-039 from 10.28.0.49 port 57457 id 0
May 24 14:38:58 SCADA sshd[64409]: Connection from 10.7.0.25 port 49641 on 10.2.0.10 port 22 rdomain ""
May 24 14:38:58 SCADA sshd[64409]: Accepted key SHA256:W2iWkwEajZZIJmDcUlqAJK/E9vR6b9Nda/8w04dHvl8 found at /home/maintainer-015/.ssh/authorized_keys:1
May 24 14:38:58 SCADA sshd[64409]: Postponed publickey for maintainer-015 from 10.7.0.25 port 49641 ssh2 [preauth]
May 24 14:38:58 SCADA sshd[64409]: Accepted key SHA256:W2iWkwEajZZIJmDcUlqAJK/E9vR6b9Nda/8w04dHvl8 found at /home/maintainer-015/.ssh/authorized_keys:1
May 24 14:38:58 SCADA sshd[64409]: Accepted publickey for maintainer-015 from 10.7.0.25 port 49641 ssh2: SHA256:W2iWkwEajZZIJmDcUlqAJK/E9vR6b9Nda/8w04dHvl8
May 24 14:38:58 SCADA sshd[64409]: pam_unix(sshd:session): session opened for user maintainer-015(uid=1015) by (uid=0)
May 24 14:38:58 SCADA sshd[64409]: User child is on pid 41022
May 24 14:38:58 SCADA sshd[41022]: Starting session: shell on pts/2 for maintainer-015 from 10.7.0.25 port 49641 id 0
May 25 05:03:13 SCADA sshd[12745]: Connection from 10.7.0.36 port 55683 on 10.2.0.10 port 22 rdomain ""
May 25 05:03:13 SCADA sshd[12745]: Accepted key SHA256:oHYP9gQuRnY4opHqdhOgAys3/KDRyNfeB5eJLwqCJYs found at /home/maintainer-026/.ssh/authorized_keys:2
May 25 05:03:13 SCADA sshd[12745]: Postponed publickey for maintainer-026 from 10.7.0.36 port 55683 ssh2 [preauth]
May 25 05:03:13 SCADA sshd[12745]: Accepted key SHA256:oHYP9gQuRnY4opHqdhOgAys3/KDRyNfeB5eJLwqCJYs found at /home/maintainer-026/.ssh/authorized_keys:2
May 25 05:03:13 SCADA sshd[12745]: Accepted publickey for maintainer-026 from 10.7.0.36 port 55683 ssh2: SHA256:oHYP9gQuRnY4opHqdhOgAys3/KDRyNfeB5eJLwqCJYs
May 25 05:03:13 SCADA sshd[12745]: pam_unix(sshd:session): session opened for user maintainer-026(uid=1026) by (uid=0)
May 25 05:03:13 SCADA sshd[12745]: User child is on pid 38095
May 25 05:03:13 SCADA sshd[38095]: Starting session: shell on pts/7 for maintainer-026 from 10.7.0.36 port 55683 id 0
May 25 08:21:30 SCADA sshd[11069]: Connection from 10.7.0.57 port 48705 on 10.2.0.10 port 22 rdomain ""
May 25 08:21:30 SCADA sshd[11069]: Accepted key SHA256:Wkz7XI43VubNO+FbV6vY+aR7z7ery80f+aCLXG1g7y4 found at /home/maintainer-047/.ssh/authorized_keys:2
May 25 08:21:30 SCADA sshd[11069]: Postponed publickey for maintainer-047 from 10.7.0.57 port 48705 ssh2 [preauth]
May 25 08:21:30 SCADA sshd[11069]: Accepted key SHA256:Wkz7XI43VubNO+FbV6vY+aR7z7ery80f+aCLXG1g7y4 found at /home/maintainer-047/.ssh/authorized_keys:2
May 25 08:21:30 SCADA sshd[11069]: Accepted publickey for maintainer-047 from 10.7.0.57 port 48705 ssh2: SHA256:Wkz7XI43VubNO+FbV6vY+aR7z7ery80f+aCLXG1g7y4
May 25 08:21:30 SCADA sshd[11069]: pam_unix(sshd:session): session opened for user maintainer-047(uid=1047) by (uid=0)
May 25 08:21:30 SCADA sshd[11069]: User child is on pid 42002
May 25 08:21:30 SCADA sshd[42002]: Starting session: shell on pts/5 for maintainer-047 from 10.7.0.57 port 48705 id 0
May 25 10:45:07 SCADA sshd[39919]: Connection from 10.28.0.31 port 57443 on 10.2.0.10 port 22 rdomain ""
May 25 10:45:07 SCADA sshd[39919]: Accepted key ED25519 SHA256:EyTie7dqkDiY50r8fX5I7RKPA0vrLrmkMv9RJpQCfgg found at /home/audit-021/.ssh/authorized_keys:3
May 25 10:45:07 SCADA sshd[39919]: Postponed publickey for audit-021 from 10.28.0.31 port 57443 ssh2 [preauth]
May 25 10:45:07 SCADA sshd[39919]: Accepted key ED25519 SHA256:EyTie7dqkDiY50r8fX5I7RKPA0vrLrmkMv9RJpQCfgg found at /home/audit-021/.ssh/authorized_keys:3
May 25 10:45:07 SCADA sshd[39919]: Accepted publickey for audit-021 from 10.28.0.31 port 57443 ssh2: ED25519 SHA256:EyTie7dqkDiY50r8fX5I7RKPA0vrLrmkMv9RJpQCfgg
May 25 10:45:07 SCADA sshd[39919]: pam_unix(sshd:session): session opened for user audit-021(uid=1071) by (uid=0)
May 25 10:45:07 SCADA sshd[39919]: User child is on pid 43443
May 25 10:45:07 SCADA sshd[43443]: Starting session: shell on pts/4 for audit-021 from 10.28.0.31 port 57443 id 0
May 25 12:47:20 SCADA sshd[37093]: Connection from 10.28.0.54 port 49067 on 10.2.0.10 port 22 rdomain ""
May 25 12:47:20 SCADA sshd[37093]: Accepted key ED25519 SHA256:5H2gHV25e4PpKPxR1wC9Hsum3pw2hOMGo7sSH33vWWE found at /home/audit-044/.ssh/authorized_keys:5
May 25 12:47:20 SCADA sshd[37093]: Postponed publickey for audit-044 from 10.28.0.54 port 49067 ssh2 [preauth]
May 25 12:47:20 SCADA sshd[37093]: Accepted key ED25519 SHA256:5H2gHV25e4PpKPxR1wC9Hsum3pw2hOMGo7sSH33vWWE found at /home/audit-044/.ssh/authorized_keys:5
May 25 12:47:20 SCADA sshd[37093]: Accepted publickey for audit-044 from 10.28.0.54 port 49067 ssh2: ED25519 SHA256:5H2gHV25e4PpKPxR1wC9Hsum3pw2hOMGo7sSH33vWWE
May 25 12:47:20 SCADA sshd[37093]: pam_unix(sshd:session): session opened for user audit-044(uid=1094) by (uid=0)
May 25 12:47:20 SCADA sshd[37093]: User child is on pid 40779
May 25 12:47:20 SCADA sshd[40779]: Starting session: shell on pts/5 for audit-044 from 10.28.0.54 port 49067 id 0
May 25 13:08:57 SCADA sshd[45675]: Connection from 10.28.0.27 port 47579 on 10.2.0.10 port 22 rdomain ""
May 25 13:08:57 SCADA sshd[45675]: Accepted key ED25519 SHA256:sxlhDB5/NpDk/MKreaFXD+fCNmV6ALR1iYMhHMjUnsI found at /home/audit-017/.ssh/authorized_keys:2
May 25 13:08:57 SCADA sshd[45675]: Postponed publickey for audit-017 from 10.28.0.27 port 47579 ssh2 [preauth]
May 25 13:08:57 SCADA sshd[45675]: Accepted key ED25519 SHA256:sxlhDB5/NpDk/MKreaFXD+fCNmV6ALR1iYMhHMjUnsI found at /home/audit-017/.ssh/authorized_keys:2
May 25 13:08:57 SCADA sshd[45675]: Accepted publickey for audit-017 from 10.28.0.27 port 47579 ssh2: ED25519 SHA256:sxlhDB5/NpDk/MKreaFXD+fCNmV6ALR1iYMhHMjUnsI
May 25 13:08:57 SCADA sshd[45675]: pam_unix(sshd:session): session opened for user audit-017(uid=1067) by (uid=0)
May 25 13:08:57 SCADA sshd[45675]: User child is on pid 45691
May 25 13:08:57 SCADA sshd[45691]: Starting session: shell on pts/4 for audit-017 from 10.28.0.27 port 47579 id 0
May 26 13:55:36 SCADA sshd[36825]: Connection from 10.28.0.37 port 41774 on 10.2.0.10 port 22 rdomain ""
May 26 13:55:36 SCADA sshd[36825]: Accepted key ED25519 SHA256:i5zMv6kC/03fJsWcIsW3/HdvUFH3hwL49Zg/EIrcHwM found at /home/audit-027/.ssh/authorized_keys:3
May 26 13:55:36 SCADA sshd[36825]: Postponed publickey for audit-027 from 10.28.0.37 port 41774 ssh2 [preauth]
May 26 13:55:36 SCADA sshd[36825]: Accepted key ED25519 SHA256:i5zMv6kC/03fJsWcIsW3/HdvUFH3hwL49Zg/EIrcHwM found at /home/audit-027/.ssh/authorized_keys:3
May 26 13:55:36 SCADA sshd[36825]: Accepted publickey for audit-027 from 10.28.0.37 port 41774 ssh2: ED25519 SHA256:i5zMv6kC/03fJsWcIsW3/HdvUFH3hwL49Zg/EIrcHwM
May 26 13:55:36 SCADA sshd[36825]: pam_unix(sshd:session): session opened for user audit-027(uid=1077) by (uid=0)
May 26 13:55:36 SCADA sshd[36825]: User child is on pid 51293
May 26 13:55:36 SCADA sshd[51293]: Starting session: shell on pts/7 for audit-027 from 10.28.0.37 port 41774 id 0
May 26 15:08:50 SCADA sshd[48151]: Connection from 10.7.0.54 port 41971 on 10.2.0.10 port 22 rdomain ""
May 26 15:08:50 SCADA sshd[48151]: Accepted key SHA256:i3fQ/+IpT6FLUx3gP+hg4SQUo/c+/CldATp0DU3Kk1M found at /home/maintainer-044/.ssh/authorized_keys:2
May 26 15:08:50 SCADA sshd[48151]: Postponed publickey for maintainer-044 from 10.7.0.54 port 41971 ssh2 [preauth]
May 26 15:08:50 SCADA sshd[48151]: Accepted key SHA256:i3fQ/+IpT6FLUx3gP+hg4SQUo/c+/CldATp0DU3Kk1M found at /home/maintainer-044/.ssh/authorized_keys:2
May 26 15:08:50 SCADA sshd[48151]: Accepted publickey for maintainer-044 from 10.7.0.54 port 41971 ssh2: SHA256:i3fQ/+IpT6FLUx3gP+hg4SQUo/c+/CldATp0DU3Kk1M
May 26 15:08:50 SCADA sshd[48151]: pam_unix(sshd:session): session opened for user maintainer-044(uid=1044) by (uid=0)
May 26 15:08:50 SCADA sshd[48151]: User child is on pid 53082
May 26 15:08:50 SCADA sshd[53082]: Starting session: shell on pts/8 for maintainer-044 from 10.7.0.54 port 41971 id 0
May 27 10:42:20 SCADA sshd[29309]: Connection from 10.28.0.34 port 46444 on 10.2.0.10 port 22 rdomain ""
May 27 10:42:20 SCADA sshd[29309]: Accepted key ED25519 SHA256:rkSBan3ORhG74JHiAw8d2Dw9QTmKjU/KbdHH/LaHnkw found at /home/audit-024/.ssh/authorized_keys:2
May 27 10:42:20 SCADA sshd[29309]: Postponed publickey for audit-024 from 10.28.0.34 port 46444 ssh2 [preauth]
May 27 10:42:20 SCADA sshd[29309]: Accepted key ED25519 SHA256:rkSBan3ORhG74JHiAw8d2Dw9QTmKjU/KbdHH/LaHnkw found at /home/audit-024/.ssh/authorized_keys:2
May 27 10:42:20 SCADA sshd[29309]: Accepted publickey for audit-024 from 10.28.0.34 port 46444 ssh2: ED25519 SHA256:rkSBan3ORhG74JHiAw8d2Dw9QTmKjU/KbdHH/LaHnkw
May 27 10:42:20 SCADA sshd[29309]: pam_unix(sshd:session): session opened for user audit-024(uid=1074) by (uid=0)
May 27 10:42:20 SCADA sshd[29309]: User child is on pid 44604
May 27 10:42:20 SCADA sshd[44604]: Starting session: shell on pts/5 for audit-024 from 10.28.0.34 port 46444 id 0
May 27 12:23:03 SCADA sshd[46922]: Connection from 10.7.0.12 port 55659 on 10.2.0.10 port 22 rdomain ""
May 27 12:23:03 SCADA sshd[46922]: Accepted key SHA256:d+Bjq9z99VKZvBp0F/t6usNwH0KIU7StHiVGNSStb44 found at /home/maintainer-002/.ssh/authorized_keys:5
May 27 12:23:03 SCADA sshd[46922]: Postponed publickey for maintainer-002 from 10.7.0.12 port 55659 ssh2 [preauth]
May 27 12:23:03 SCADA sshd[46922]: Accepted key SHA256:d+Bjq9z99VKZvBp0F/t6usNwH0KIU7StHiVGNSStb44 found at /home/maintainer-002/.ssh/authorized_keys:5
May 27 12:23:03 SCADA sshd[46922]: Accepted publickey for maintainer-002 from 10.7.0.12 port 55659 ssh2: SHA256:d+Bjq9z99VKZvBp0F/t6usNwH0KIU7StHiVGNSStb44
May 27 12:23:03 SCADA sshd[46922]: pam_unix(sshd:session): session opened for user maintainer-002(uid=1002) by (uid=0)
May 27 12:23:03 SCADA sshd[46922]: User child is on pid 16352
May 27 12:23:03 SCADA sshd[16352]: Starting session: shell on pts/8 for maintainer-002 from 10.7.0.12 port 55659 id 0
May 27 12:39:03 SCADA sshd[10499]: Connection from 10.7.0.16 port 59985 on 10.2.0.10 port 22 rdomain ""
May 27 12:39:03 SCADA sshd[10499]: Accepted key SHA256:7tiT+unEBlVJEblQ8qIB5kMIrmsRQxLQaDAPzcp6h6o found at /home/maintainer-006/.ssh/authorized_keys:2
May 27 12:39:03 SCADA sshd[10499]: Postponed publickey for maintainer-006 from 10.7.0.16 port 59985 ssh2 [preauth]
May 27 12:39:03 SCADA sshd[10499]: Accepted key SHA256:7tiT+unEBlVJEblQ8qIB5kMIrmsRQxLQaDAPzcp6h6o found at /home/maintainer-006/.ssh/authorized_keys:2
May 27 12:39:03 SCADA sshd[10499]: Accepted publickey for maintainer-006 from 10.7.0.16 port 59985 ssh2: SHA256:7tiT+unEBlVJEblQ8qIB5kMIrmsRQxLQaDAPzcp6h6o
May 27 12:39:03 SCADA sshd[10499]: pam_unix(sshd:session): session opened for user maintainer-006(uid=1006) by (uid=0)
May 27 12:39:03 SCADA sshd[10499]: User child is on pid 37981
May 27 12:39:03 SCADA sshd[37981]: Starting session: shell on pts/7 for maintainer-006 from 10.7.0.16 port 59985 id 0
May 28 11:44:33 SCADA sshd[25562]: Connection from 10.28.0.38 port 47151 on 10.2.0.10 port 22 rdomain ""
May 28 11:44:33 SCADA sshd[25562]: Accepted key ED25519 SHA256:CFpMLZfDKqcSW72IvUkw9YFV5fOZMQQPwg9RW337Ld4 found at /home/audit-028/.ssh/authorized_keys:5
May 28 11:44:33 SCADA sshd[25562]: Postponed publickey for audit-028 from 10.28.0.38 port 47151 ssh2 [preauth]
May 28 11:44:33 SCADA sshd[25562]: Accepted key ED25519 SHA256:CFpMLZfDKqcSW72IvUkw9YFV5fOZMQQPwg9RW337Ld4 found at /home/audit-028/.ssh/authorized_keys:5
May 28 11:44:33 SCADA sshd[25562]: Accepted publickey for audit-028 from 10.28.0.38 port 47151 ssh2: ED25519 SHA256:CFpMLZfDKqcSW72IvUkw9YFV5fOZMQQPwg9RW337Ld4
May 28 11:44:33 SCADA sshd[25562]: pam_unix(sshd:session): session opened for user audit-028(uid=1078) by (uid=0)
May 28 11:44:33 SCADA sshd[25562]: User child is on pid 10318
May 28 11:44:33 SCADA sshd[10318]: Starting session: shell on pts/2 for audit-028 from 10.28.0.38 port 47151 id 0
May 28 15:08:06 SCADA sshd[31196]: Connection from 10.7.0.16 port 42290 on 10.2.0.10 port 22 rdomain ""
May 28 15:08:06 SCADA sshd[31196]: Accepted key SHA256:7tiT+unEBlVJEblQ8qIB5kMIrmsRQxLQaDAPzcp6h6o found at /home/maintainer-006/.ssh/authorized_keys:2
May 28 15:08:06 SCADA sshd[31196]: Postponed publickey for maintainer-006 from 10.7.0.16 port 42290 ssh2 [preauth]
May 28 15:08:06 SCADA sshd[31196]: Accepted key SHA256:7tiT+unEBlVJEblQ8qIB5kMIrmsRQxLQaDAPzcp6h6o found at /home/maintainer-006/.ssh/authorized_keys:2
May 28 15:08:06 SCADA sshd[31196]: Accepted publickey for maintainer-006 from 10.7.0.16 port 42290 ssh2: SHA256:7tiT+unEBlVJEblQ8qIB5kMIrmsRQxLQaDAPzcp6h6o
May 28 15:08:06 SCADA sshd[31196]: pam_unix(sshd:session): session opened for user maintainer-006(uid=1006) by (uid=0)
May 28 15:08:06 SCADA sshd[31196]: User child is on pid 29247
May 28 15:08:06 SCADA sshd[29247]: Starting session: shell on pts/8 for maintainer-006 from 10.7.0.16 port 42290 id 0
May 28 15:09:54 SCADA sshd[11515]: Connection from 10.7.0.58 port 49862 on 10.2.0.10 port 22 rdomain ""
May 28 15:09:54 SCADA sshd[11515]: Accepted key SHA256:4/hCR/TIxb6/SN1L+yITVCs9XRA9bFbydF3T59Cq7Tw found at /home/maintainer-048/.ssh/authorized_keys:3
May 28 15:09:54 SCADA sshd[11515]: Postponed publickey for maintainer-048 from 10.7.0.58 port 49862 ssh2 [preauth]
May 28 15:09:54 SCADA sshd[11515]: Accepted key SHA256:4/hCR/TIxb6/SN1L+yITVCs9XRA9bFbydF3T59Cq7Tw found at /home/maintainer-048/.ssh/authorized_keys:3
May 28 15:09:54 SCADA sshd[11515]: Accepted publickey for maintainer-048 from 10.7.0.58 port 49862 ssh2: SHA256:4/hCR/TIxb6/SN1L+yITVCs9XRA9bFbydF3T59Cq7Tw
May 28 15:09:54 SCADA sshd[11515]: pam_unix(sshd:session): session opened for user maintainer-048(uid=1048) by (uid=0)
May 28 15:09:54 SCADA sshd[11515]: User child is on pid 16022
May 28 15:09:54 SCADA sshd[16022]: Starting session: shell on pts/5 for maintainer-048 from 10.7.0.58 port 49862 id 0
May 29 10:45:54 SCADA sshd[10416]: Connection from 10.28.0.46 port 50752 on 10.2.0.10 port 22 rdomain ""
May 29 10:45:54 SCADA sshd[10416]: Accepted key ED25519 SHA256:Lm6X0e6ARLyojcP614hMwvFS5A1v9CbDV2ilVPApVeE found at /home/audit-036/.ssh/authorized_keys:2
May 29 10:45:54 SCADA sshd[10416]: Postponed publickey for audit-036 from 10.28.0.46 port 50752 ssh2 [preauth]
May 29 10:45:54 SCADA sshd[10416]: Accepted key ED25519 SHA256:Lm6X0e6ARLyojcP614hMwvFS5A1v9CbDV2ilVPApVeE found at /home/audit-036/.ssh/authorized_keys:2
May 29 10:45:54 SCADA sshd[10416]: Accepted publickey for audit-036 from 10.28.0.46 port 50752 ssh2: ED25519 SHA256:Lm6X0e6ARLyojcP614hMwvFS5A1v9CbDV2ilVPApVeE
May 29 10:45:54 SCADA sshd[10416]: pam_unix(sshd:session): session opened for user audit-036(uid=1086) by (uid=0)
May 29 10:45:54 SCADA sshd[10416]: User child is on pid 13226
May 29 10:45:54 SCADA sshd[13226]: Starting session: shell on pts/7 for audit-036 from 10.28.0.46 port 50752 id 0
May 29 11:20:36 SCADA sshd[18209]: Connection from 10.7.0.31 port 40340 on 10.2.0.10 port 22 rdomain ""
May 29 11:20:36 SCADA sshd[18209]: Accepted key SHA256:H87b0WkQxeBVHv7EexAeN+UGoJ8wpA6OK0iNsKQ65qc found at /home/maintainer-021/.ssh/authorized_keys:1
May 29 11:20:36 SCADA sshd[18209]: Postponed publickey for maintainer-021 from 10.7.0.31 port 40340 ssh2 [preauth]
May 29 11:20:36 SCADA sshd[18209]: Accepted key SHA256:H87b0WkQxeBVHv7EexAeN+UGoJ8wpA6OK0iNsKQ65qc found at /home/maintainer-021/.ssh/authorized_keys:1
May 29 11:20:36 SCADA sshd[18209]: Accepted publickey for maintainer-021 from 10.7.0.31 port 40340 ssh2: SHA256:H87b0WkQxeBVHv7EexAeN+UGoJ8wpA6OK0iNsKQ65qc
May 29 11:20:36 SCADA sshd[18209]: pam_unix(sshd:session): session opened for user maintainer-021(uid=1021) by (uid=0)
May 29 11:20:36 SCADA sshd[18209]: User child is on pid 14415
May 29 11:20:36 SCADA sshd[14415]: Starting session: shell on pts/5 for maintainer-021 from 10.7.0.31 port 40340 id 0
May 29 15:48:04 SCADA sshd[38359]: Connection from 10.7.0.13 port 56235 on 10.2.0.10 port 22 rdomain ""
May 29 15:48:04 SCADA sshd[38359]: Accepted key SHA256:KFfOHKqzdLIlA+XU1qooG/9HPPyaTJKbLtiVt7qyUsY found at /home/maintainer-003/.ssh/authorized_keys:1
May 29 15:48:04 SCADA sshd[38359]: Postponed publickey for maintainer-003 from 10.7.0.13 port 56235 ssh2 [preauth]
May 29 15:48:04 SCADA sshd[38359]: Accepted key SHA256:KFfOHKqzdLIlA+XU1qooG/9HPPyaTJKbLtiVt7qyUsY found at /home/maintainer-003/.ssh/authorized_keys:1
May 29 15:48:04 SCADA sshd[38359]: Accepted publickey for maintainer-003 from 10.7.0.13 port 56235 ssh2: SHA256:KFfOHKqzdLIlA+XU1qooG/9HPPyaTJKbLtiVt7qyUsY
May 29 15:48:04 SCADA sshd[38359]: pam_unix(sshd:session): session opened for user maintainer-003(uid=1003) by (uid=0)
May 29 15:48:04 SCADA sshd[38359]: User child is on pid 39244
May 29 15:48:04 SCADA sshd[39244]: Starting session: shell on pts/5 for maintainer-003 from 10.7.0.13 port 56235 id 0
May 29 16:22:48 SCADA sshd[43963]: Connection from 10.28.0.59 port 53855 on 10.2.0.10 port 22 rdomain ""
May 29 16:22:48 SCADA sshd[43963]: Accepted key ED25519 SHA256:oMg74ONiCtNtZ7EoGGIBdClPafcB22ni9Z1is5D9P/A found at /home/audit-049/.ssh/authorized_keys:1
May 29 16:22:48 SCADA sshd[43963]: Postponed publickey for audit-049 from 10.28.0.59 port 53855 ssh2 [preauth]
May 29 16:22:48 SCADA sshd[43963]: Accepted key ED25519 SHA256:oMg74ONiCtNtZ7EoGGIBdClPafcB22ni9Z1is5D9P/A found at /home/audit-049/.ssh/authorized_keys:1
May 29 16:22:48 SCADA sshd[43963]: Accepted publickey for audit-049 from 10.28.0.59 port 53855 ssh2: ED25519 SHA256:oMg74ONiCtNtZ7EoGGIBdClPafcB22ni9Z1is5D9P/A
May 29 16:22:48 SCADA sshd[43963]: pam_unix(sshd:session): session opened for user audit-049(uid=1099) by (uid=0)
May 29 16:22:48 SCADA sshd[43963]: User child is on pid 25938
May 29 16:22:48 SCADA sshd[25938]: Starting session: shell on pts/3 for audit-049 from 10.28.0.59 port 53855 id 0
May 29 18:13:24 SCADA sshd[38621]: Connection from 10.28.0.17 port 53615 on 10.2.0.10 port 22 rdomain ""
May 29 18:13:24 SCADA sshd[38621]: Accepted key ED25519 SHA256:S4ZjvTsjQKTte1QVvuahlDab0lXOkslPzVwPMtUTCqY found at /home/audit-007/.ssh/authorized_keys:5
May 29 18:13:24 SCADA sshd[38621]: Postponed publickey for audit-007 from 10.28.0.17 port 53615 ssh2 [preauth]
May 29 18:13:24 SCADA sshd[38621]: Accepted key ED25519 SHA256:S4ZjvTsjQKTte1QVvuahlDab0lXOkslPzVwPMtUTCqY found at /home/audit-007/.ssh/authorized_keys:5
May 29 18:13:24 SCADA sshd[38621]: Accepted publickey for audit-007 from 10.28.0.17 port 53615 ssh2: ED25519 SHA256:S4ZjvTsjQKTte1QVvuahlDab0lXOkslPzVwPMtUTCqY
May 29 18:13:24 SCADA sshd[38621]: pam_unix(sshd:session): session opened for user audit-007(uid=1057) by (uid=0)
May 29 18:13:24 SCADA sshd[38621]: User child is on pid 62363
May 29 18:13:24 SCADA sshd[62363]: Starting session: shell on pts/8 for audit-007 from 10.28.0.17 port 53615 id 0
May 30 11:47:38 SCADA sshd[39007]: Connection from 10.28.0.30 port 47024 on 10.2.0.10 port 22 rdomain ""
May 30 11:47:38 SCADA sshd[39007]: Accepted key ED25519 SHA256:SIh9ESmzXyDbFeIyI3heqEvWJqpU3sWKwJWJFfhSHH0 found at /home/audit-020/.ssh/authorized_keys:4
May 30 11:47:38 SCADA sshd[39007]: Postponed publickey for audit-020 from 10.28.0.30 port 47024 ssh2 [preauth]
May 30 11:47:38 SCADA sshd[39007]: Accepted key ED25519 SHA256:SIh9ESmzXyDbFeIyI3heqEvWJqpU3sWKwJWJFfhSHH0 found at /home/audit-020/.ssh/authorized_keys:4
May 30 11:47:38 SCADA sshd[39007]: Accepted publickey for audit-020 from 10.28.0.30 port 47024 ssh2: ED25519 SHA256:SIh9ESmzXyDbFeIyI3heqEvWJqpU3sWKwJWJFfhSHH0
May 30 11:47:38 SCADA sshd[39007]: pam_unix(sshd:session): session opened for user audit-020(uid=1070) by (uid=0)
May 30 11:47:38 SCADA sshd[39007]: User child is on pid 41003
May 30 11:47:38 SCADA sshd[41003]: Starting session: shell on pts/8 for audit-020 from 10.28.0.30 port 47024 id 0
May 30 16:48:33 SCADA sshd[17681]: Connection from 10.28.0.13 port 47807 on 10.2.0.10 port 22 rdomain ""
May 30 16:48:33 SCADA sshd[17681]: Accepted key ED25519 SHA256:E+lcgLn6B7o0he3Di0ViZ3ZNgWM1ctMTHlkBaHDZko8 found at /home/audit-003/.ssh/authorized_keys:3
May 30 16:48:33 SCADA sshd[17681]: Postponed publickey for audit-003 from 10.28.0.13 port 47807 ssh2 [preauth]
May 30 16:48:33 SCADA sshd[17681]: Accepted key ED25519 SHA256:E+lcgLn6B7o0he3Di0ViZ3ZNgWM1ctMTHlkBaHDZko8 found at /home/audit-003/.ssh/authorized_keys:3
May 30 16:48:33 SCADA sshd[17681]: Accepted publickey for audit-003 from 10.28.0.13 port 47807 ssh2: ED25519 SHA256:E+lcgLn6B7o0he3Di0ViZ3ZNgWM1ctMTHlkBaHDZko8
May 30 16:48:33 SCADA sshd[17681]: pam_unix(sshd:session): session opened for user audit-003(uid=1053) by (uid=0)
May 30 16:48:33 SCADA sshd[17681]: User child is on pid 11843
May 30 16:48:33 SCADA sshd[11843]: Starting session: shell on pts/6 for audit-003 from 10.28.0.13 port 47807 id 0
May 30 17:49:41 SCADA sshd[35423]: Connection from 10.28.0.56 port 46718 on 10.2.0.10 port 22 rdomain ""
May 30 17:49:41 SCADA sshd[35423]: Accepted key ED25519 SHA256:QscbYwYhrEcc0D7tPqDyUmepFDbc6ZbTM96DwZ2imJk found at /home/audit-046/.ssh/authorized_keys:2
May 30 17:49:41 SCADA sshd[35423]: Postponed publickey for audit-046 from 10.28.0.56 port 46718 ssh2 [preauth]
May 30 17:49:41 SCADA sshd[35423]: Accepted key ED25519 SHA256:QscbYwYhrEcc0D7tPqDyUmepFDbc6ZbTM96DwZ2imJk found at /home/audit-046/.ssh/authorized_keys:2
May 30 17:49:41 SCADA sshd[35423]: Accepted publickey for audit-046 from 10.28.0.56 port 46718 ssh2: ED25519 SHA256:QscbYwYhrEcc0D7tPqDyUmepFDbc6ZbTM96DwZ2imJk
May 30 17:49:41 SCADA sshd[35423]: pam_unix(sshd:session): session opened for user audit-046(uid=1096) by (uid=0)
May 30 17:49:41 SCADA sshd[35423]: User child is on pid 36584
May 30 17:49:41 SCADA sshd[36584]: Starting session: shell on pts/2 for audit-046 from 10.28.0.56 port 46718 id 0
May 30 18:42:08 SCADA sshd[16911]: Connection from 10.7.0.41 port 44735 on 10.2.0.10 port 22 rdomain ""
May 30 18:42:08 SCADA sshd[16911]: Accepted key SHA256:C8BnkZ8LTIQeIFs/FkBXM4lrH0+S42m20i+oRGxwPq0 found at /home/maintainer-031/.ssh/authorized_keys:4
May 30 18:42:08 SCADA sshd[16911]: Postponed publickey for maintainer-031 from 10.7.0.41 port 44735 ssh2 [preauth]
May 30 18:42:08 SCADA sshd[16911]: Accepted key SHA256:C8BnkZ8LTIQeIFs/FkBXM4lrH0+S42m20i+oRGxwPq0 found at /home/maintainer-031/.ssh/authorized_keys:4
May 30 18:42:08 SCADA sshd[16911]: Accepted publickey for maintainer-031 from 10.7.0.41 port 44735 ssh2: SHA256:C8BnkZ8LTIQeIFs/FkBXM4lrH0+S42m20i+oRGxwPq0
May 30 18:42:08 SCADA sshd[16911]: pam_unix(sshd:session): session opened for user maintainer-031(uid=1031) by (uid=0)
May 30 18:42:08 SCADA sshd[16911]: User child is on pid 37618
May 30 18:42:08 SCADA sshd[37618]: Starting session: shell on pts/7 for maintainer-031 from 10.7.0.41 port 44735 id 0
May 31 08:48:14 SCADA sshd[61235]: Connection from 10.7.0.16 port 59308 on 10.2.0.10 port 22 rdomain ""
May 31 08:48:14 SCADA sshd[61235]: Accepted key SHA256:7tiT+unEBlVJEblQ8qIB5kMIrmsRQxLQaDAPzcp6h6o found at /home/maintainer-006/.ssh/authorized_keys:2
May 31 08:48:14 SCADA sshd[61235]: Postponed publickey for maintainer-006 from 10.7.0.16 port 59308 ssh2 [preauth]
May 31 08:48:14 SCADA sshd[61235]: Accepted key SHA256:7tiT+unEBlVJEblQ8qIB5kMIrmsRQxLQaDAPzcp6h6o found at /home/maintainer-006/.ssh/authorized_keys:2
May 31 08:48:14 SCADA sshd[61235]: Accepted publickey for maintainer-006 from 10.7.0.16 port 59308 ssh2: SHA256:7tiT+unEBlVJEblQ8qIB5kMIrmsRQxLQaDAPzcp6h6o
May 31 08:48:14 SCADA sshd[61235]: pam_unix(sshd:session): session opened for user maintainer-006(uid=1006) by (uid=0)
May 31 08:48:14 SCADA sshd[61235]: User child is on pid 19824
May 31 08:48:14 SCADA sshd[19824]: Starting session: shell on pts/2 for maintainer-006 from 10.7.0.16 port 59308 id 0
May 31 18:37:39 SCADA sshd[47298]: Connection from 10.28.0.22 port 57878 on 10.2.0.10 port 22 rdomain ""
May 31 18:37:39 SCADA sshd[47298]: Accepted key ED25519 SHA256:nnVHO30ecBy/QlYOJk3wOxrUn3HtPW8O5Fz6HL9WZBQ found at /home/audit-012/.ssh/authorized_keys:3
May 31 18:37:39 SCADA sshd[47298]: Postponed publickey for audit-012 from 10.28.0.22 port 57878 ssh2 [preauth]
May 31 18:37:39 SCADA sshd[47298]: Accepted key ED25519 SHA256:nnVHO30ecBy/QlYOJk3wOxrUn3HtPW8O5Fz6HL9WZBQ found at /home/audit-012/.ssh/authorized_keys:3
May 31 18:37:39 SCADA sshd[47298]: Accepted publickey for audit-012 from 10.28.0.22 port 57878 ssh2: ED25519 SHA256:nnVHO30ecBy/QlYOJk3wOxrUn3HtPW8O5Fz6HL9WZBQ
May 31 18:37:39 SCADA sshd[47298]: pam_unix(sshd:session): session opened for user audit-012(uid=1062) by (uid=0)
May 31 18:37:39 SCADA sshd[47298]: User child is on pid 44576
May 31 18:37:39 SCADA sshd[44576]: Starting session: shell on pts/6 for audit-012 from 10.28.0.22 port 57878 id 0
Jun 01 14:43:19 SCADA sshd[36989]: Connection from 10.28.0.12 port 59445 on 10.2.0.10 port 22 rdomain ""
Jun 01 14:43:19 SCADA sshd[36989]: Accepted key ED25519 SHA256:/lBp766xdSQwMz3W4EKhN8m68jBF/IJtKxCGqYko6JI found at /home/audit-002/.ssh/authorized_keys:2
Jun 01 14:43:19 SCADA sshd[36989]: Postponed publickey for audit-002 from 10.28.0.12 port 59445 ssh2 [preauth]
Jun 01 14:43:19 SCADA sshd[36989]: Accepted key ED25519 SHA256:/lBp766xdSQwMz3W4EKhN8m68jBF/IJtKxCGqYko6JI found at /home/audit-002/.ssh/authorized_keys:2
Jun 01 14:43:19 SCADA sshd[36989]: Accepted publickey for audit-002 from 10.28.0.12 port 59445 ssh2: ED25519 SHA256:/lBp766xdSQwMz3W4EKhN8m68jBF/IJtKxCGqYko6JI
Jun 01 14:43:19 SCADA sshd[36989]: pam_unix(sshd:session): session opened for user audit-002(uid=1052) by (uid=0)
Jun 01 14:43:19 SCADA sshd[36989]: User child is on pid 29774
Jun 01 14:43:19 SCADA sshd[29774]: Starting session: shell on pts/3 for audit-002 from 10.28.0.12 port 59445 id 0
Jun 01 17:35:43 SCADA sshd[60773]: Connection from 10.28.0.29 port 58500 on 10.2.0.10 port 22 rdomain ""
Jun 01 17:35:43 SCADA sshd[60773]: Accepted key ED25519 SHA256:DYGMmppuLyZNqzWtWqJFJ3ekdpR1Cw+qdWhJIAEe9xM found at /home/audit-019/.ssh/authorized_keys:1
Jun 01 17:35:43 SCADA sshd[60773]: Postponed publickey for audit-019 from 10.28.0.29 port 58500 ssh2 [preauth]
Jun 01 17:35:43 SCADA sshd[60773]: Accepted key ED25519 SHA256:DYGMmppuLyZNqzWtWqJFJ3ekdpR1Cw+qdWhJIAEe9xM found at /home/audit-019/.ssh/authorized_keys:1
Jun 01 17:35:43 SCADA sshd[60773]: Accepted publickey for audit-019 from 10.28.0.29 port 58500 ssh2: ED25519 SHA256:DYGMmppuLyZNqzWtWqJFJ3ekdpR1Cw+qdWhJIAEe9xM
Jun 01 17:35:43 SCADA sshd[60773]: pam_unix(sshd:session): session opened for user audit-019(uid=1069) by (uid=0)
Jun 01 17:35:43 SCADA sshd[60773]: User child is on pid 13156
Jun 01 17:35:43 SCADA sshd[13156]: Starting session: shell on pts/6 for audit-019 from 10.28.0.29 port 58500 id 0
Jun 01 18:37:02 SCADA sshd[57603]: Connection from 10.7.0.49 port 51672 on 10.2.0.10 port 22 rdomain ""
Jun 01 18:37:02 SCADA sshd[57603]: Accepted key SHA256:5W28AmHu/l7PTvJcjNo/p5DkTAGUk8+w/T4Unt8df4M found at /home/maintainer-039/.ssh/authorized_keys:5
Jun 01 18:37:02 SCADA sshd[57603]: Postponed publickey for maintainer-039 from 10.7.0.49 port 51672 ssh2 [preauth]
Jun 01 18:37:02 SCADA sshd[57603]: Accepted key SHA256:5W28AmHu/l7PTvJcjNo/p5DkTAGUk8+w/T4Unt8df4M found at /home/maintainer-039/.ssh/authorized_keys:5
Jun 01 18:37:02 SCADA sshd[57603]: Accepted publickey for maintainer-039 from 10.7.0.49 port 51672 ssh2: SHA256:5W28AmHu/l7PTvJcjNo/p5DkTAGUk8+w/T4Unt8df4M
Jun 01 18:37:02 SCADA sshd[57603]: pam_unix(sshd:session): session opened for user maintainer-039(uid=1039) by (uid=0)
Jun 01 18:37:02 SCADA sshd[57603]: User child is on pid 12212
Jun 01 18:37:02 SCADA sshd[12212]: Starting session: shell on pts/4 for maintainer-039 from 10.7.0.49 port 51672 id 0
Jun 02 12:23:09 SCADA sshd[46273]: Connection from 10.7.0.48 port 57386 on 10.2.0.10 port 22 rdomain ""
Jun 02 12:23:09 SCADA sshd[46273]: Accepted key SHA256:wlcB7LcKyLKk7f5VIKxJ8H074/ma5E4FAfDAZx7Xa1w found at /home/maintainer-038/.ssh/authorized_keys:5
Jun 02 12:23:09 SCADA sshd[46273]: Postponed publickey for maintainer-038 from 10.7.0.48 port 57386 ssh2 [preauth]
Jun 02 12:23:09 SCADA sshd[46273]: Accepted key SHA256:wlcB7LcKyLKk7f5VIKxJ8H074/ma5E4FAfDAZx7Xa1w found at /home/maintainer-038/.ssh/authorized_keys:5
Jun 02 12:23:09 SCADA sshd[46273]: Accepted publickey for maintainer-038 from 10.7.0.48 port 57386 ssh2: SHA256:wlcB7LcKyLKk7f5VIKxJ8H074/ma5E4FAfDAZx7Xa1w
Jun 02 12:23:09 SCADA sshd[46273]: pam_unix(sshd:session): session opened for user maintainer-038(uid=1038) by (uid=0)
Jun 02 12:23:09 SCADA sshd[46273]: User child is on pid 43599
Jun 02 12:23:09 SCADA sshd[43599]: Starting session: shell on pts/4 for maintainer-038 from 10.7.0.48 port 57386 id 0
Jun 02 13:54:58 SCADA sshd[39276]: Connection from 10.28.0.42 port 52718 on 10.2.0.10 port 22 rdomain ""
Jun 02 13:54:58 SCADA sshd[39276]: Accepted key ED25519 SHA256:rJRqiY3nc3dYuGhMbbKkTeHECywcVMl8NQZSpgWqJ3Q found at /home/audit-032/.ssh/authorized_keys:3
Jun 02 13:54:58 SCADA sshd[39276]: Postponed publickey for audit-032 from 10.28.0.42 port 52718 ssh2 [preauth]
Jun 02 13:54:58 SCADA sshd[39276]: Accepted key ED25519 SHA256:rJRqiY3nc3dYuGhMbbKkTeHECywcVMl8NQZSpgWqJ3Q found at /home/audit-032/.ssh/authorized_keys:3
Jun 02 13:54:58 SCADA sshd[39276]: Accepted publickey for audit-032 from 10.28.0.42 port 52718 ssh2: ED25519 SHA256:rJRqiY3nc3dYuGhMbbKkTeHECywcVMl8NQZSpgWqJ3Q
Jun 02 13:54:58 SCADA sshd[39276]: pam_unix(sshd:session): session opened for user audit-032(uid=1082) by (uid=0)
Jun 02 13:54:58 SCADA sshd[39276]: User child is on pid 27245
Jun 02 13:54:58 SCADA sshd[27245]: Starting session: shell on pts/7 for audit-032 from 10.28.0.42 port 52718 id 0
Jun 02 14:53:32 SCADA sshd[34979]: Connection from 10.7.0.21 port 48316 on 10.2.0.10 port 22 rdomain ""
Jun 02 14:53:32 SCADA sshd[34979]: Accepted key SHA256:oSfsFeg7+Dy7T0iPDuFauSEk05ej7Ymtu9DpYoNlnC0 found at /home/maintainer-011/.ssh/authorized_keys:5
Jun 02 14:53:32 SCADA sshd[34979]: Postponed publickey for maintainer-011 from 10.7.0.21 port 48316 ssh2 [preauth]
Jun 02 14:53:32 SCADA sshd[34979]: Accepted key SHA256:oSfsFeg7+Dy7T0iPDuFauSEk05ej7Ymtu9DpYoNlnC0 found at /home/maintainer-011/.ssh/authorized_keys:5
Jun 02 14:53:32 SCADA sshd[34979]: Accepted publickey for maintainer-011 from 10.7.0.21 port 48316 ssh2: SHA256:oSfsFeg7+Dy7T0iPDuFauSEk05ej7Ymtu9DpYoNlnC0
Jun 02 14:53:32 SCADA sshd[34979]: pam_unix(sshd:session): session opened for user maintainer-011(uid=1011) by (uid=0)
Jun 02 14:53:32 SCADA sshd[34979]: User child is on pid 55550
Jun 02 14:53:32 SCADA sshd[55550]: Starting session: shell on pts/7 for maintainer-011 from 10.7.0.21 port 48316 id 0
Jun 02 16:39:46 SCADA sshd[10460]: Connection from 10.28.0.47 port 50302 on 10.2.0.10 port 22 rdomain ""
Jun 02 16:39:46 SCADA sshd[10460]: Accepted key ED25519 SHA256:e4NeXea298J5LAKou40E0ryUsJhqwMYRlq6noUNMRpA found at /home/audit-037/.ssh/authorized_keys:3
Jun 02 16:39:46 SCADA sshd[10460]: Postponed publickey for audit-037 from 10.28.0.47 port 50302 ssh2 [preauth]
Jun 02 16:39:46 SCADA sshd[10460]: Accepted key ED25519 SHA256:e4NeXea298J5LAKou40E0ryUsJhqwMYRlq6noUNMRpA found at /home/audit-037/.ssh/authorized_keys:3
Jun 02 16:39:46 SCADA sshd[10460]: Accepted publickey for audit-037 from 10.28.0.47 port 50302 ssh2: ED25519 SHA256:e4NeXea298J5LAKou40E0ryUsJhqwMYRlq6noUNMRpA
Jun 02 16:39:46 SCADA sshd[10460]: pam_unix(sshd:session): session opened for user audit-037(uid=1087) by (uid=0)
Jun 02 16:39:46 SCADA sshd[10460]: User child is on pid 10382
Jun 02 16:39:46 SCADA sshd[10382]: Starting session: shell on pts/3 for audit-037 from 10.28.0.47 port 50302 id 0
Jun 03 08:42:39 SCADA sshd[54848]: Connection from 10.28.0.15 port 41348 on 10.2.0.10 port 22 rdomain ""
Jun 03 08:42:39 SCADA sshd[54848]: Accepted key ED25519 SHA256:enRICBaPEvn8I571VDn7WtwNqIhcZbQ4AaK28TKgNZA found at /home/audit-005/.ssh/authorized_keys:5
Jun 03 08:42:39 SCADA sshd[54848]: Postponed publickey for audit-005 from 10.28.0.15 port 41348 ssh2 [preauth]
Jun 03 08:42:39 SCADA sshd[54848]: Accepted key ED25519 SHA256:enRICBaPEvn8I571VDn7WtwNqIhcZbQ4AaK28TKgNZA found at /home/audit-005/.ssh/authorized_keys:5
Jun 03 08:42:39 SCADA sshd[54848]: Accepted publickey for audit-005 from 10.28.0.15 port 41348 ssh2: ED25519 SHA256:enRICBaPEvn8I571VDn7WtwNqIhcZbQ4AaK28TKgNZA
Jun 03 08:42:39 SCADA sshd[54848]: pam_unix(sshd:session): session opened for user audit-005(uid=1055) by (uid=0)
Jun 03 08:42:39 SCADA sshd[54848]: User child is on pid 47431
Jun 03 08:42:39 SCADA sshd[47431]: Starting session: shell on pts/8 for audit-005 from 10.28.0.15 port 41348 id 0
Jun 03 10:42:16 SCADA sshd[18799]: Connection from 10.28.0.45 port 43476 on 10.2.0.10 port 22 rdomain ""
Jun 03 10:42:16 SCADA sshd[18799]: Accepted key ED25519 SHA256:JN1+WOJtzM8U+FlsVhTxumTYqtUbk7Mq4JUD4Cef1C8 found at /home/audit-035/.ssh/authorized_keys:3
Jun 03 10:42:16 SCADA sshd[18799]: Postponed publickey for audit-035 from 10.28.0.45 port 43476 ssh2 [preauth]
Jun 03 10:42:16 SCADA sshd[18799]: Accepted key ED25519 SHA256:JN1+WOJtzM8U+FlsVhTxumTYqtUbk7Mq4JUD4Cef1C8 found at /home/audit-035/.ssh/authorized_keys:3
Jun 03 10:42:16 SCADA sshd[18799]: Accepted publickey for audit-035 from 10.28.0.45 port 43476 ssh2: ED25519 SHA256:JN1+WOJtzM8U+FlsVhTxumTYqtUbk7Mq4JUD4Cef1C8
Jun 03 10:42:16 SCADA sshd[18799]: pam_unix(sshd:session): session opened for user audit-035(uid=1085) by (uid=0)
Jun 03 10:42:16 SCADA sshd[18799]: User child is on pid 33561
Jun 03 10:42:16 SCADA sshd[33561]: Starting session: shell on pts/3 for audit-035 from 10.28.0.45 port 43476 id 0
Jun 03 13:54:43 SCADA sshd[43654]: Connection from 10.7.0.52 port 44953 on 10.2.0.10 port 22 rdomain ""
Jun 03 13:54:43 SCADA sshd[43654]: Accepted key SHA256:sWXfoxs+6gUZU/5G+hho9z+H8FWp8b1LPS4TkKXWsL0 found at /home/maintainer-042/.ssh/authorized_keys:1
Jun 03 13:54:43 SCADA sshd[43654]: Postponed publickey for maintainer-042 from 10.7.0.52 port 44953 ssh2 [preauth]
Jun 03 13:54:43 SCADA sshd[43654]: Accepted key SHA256:sWXfoxs+6gUZU/5G+hho9z+H8FWp8b1LPS4TkKXWsL0 found at /home/maintainer-042/.ssh/authorized_keys:1
Jun 03 13:54:43 SCADA sshd[43654]: Accepted publickey for maintainer-042 from 10.7.0.52 port 44953 ssh2: SHA256:sWXfoxs+6gUZU/5G+hho9z+H8FWp8b1LPS4TkKXWsL0
Jun 03 13:54:43 SCADA sshd[43654]: pam_unix(sshd:session): session opened for user maintainer-042(uid=1042) by (uid=0)
Jun 03 13:54:43 SCADA sshd[43654]: User child is on pid 23766
Jun 03 13:54:43 SCADA sshd[23766]: Starting session: shell on pts/5 for maintainer-042 from 10.7.0.52 port 44953 id 0
Jun 03 18:46:37 SCADA sshd[43784]: Connection from 10.7.0.57 port 45276 on 10.2.0.10 port 22 rdomain ""
Jun 03 18:46:37 SCADA sshd[43784]: Accepted key SHA256:Wkz7XI43VubNO+FbV6vY+aR7z7ery80f+aCLXG1g7y4 found at /home/maintainer-047/.ssh/authorized_keys:2
Jun 03 18:46:37 SCADA sshd[43784]: Postponed publickey for maintainer-047 from 10.7.0.57 port 45276 ssh2 [preauth]
Jun 03 18:46:37 SCADA sshd[43784]: Accepted key SHA256:Wkz7XI43VubNO+FbV6vY+aR7z7ery80f+aCLXG1g7y4 found at /home/maintainer-047/.ssh/authorized_keys:2
Jun 03 18:46:37 SCADA sshd[43784]: Accepted publickey for maintainer-047 from 10.7.0.57 port 45276 ssh2: SHA256:Wkz7XI43VubNO+FbV6vY+aR7z7ery80f+aCLXG1g7y4
Jun 03 18:46:37 SCADA sshd[43784]: pam_unix(sshd:session): session opened for user maintainer-047(uid=1047) by (uid=0)
Jun 03 18:46:37 SCADA sshd[43784]: User child is on pid 42278
Jun 03 18:46:37 SCADA sshd[42278]: Starting session: shell on pts/6 for maintainer-047 from 10.7.0.57 port 45276 id 0
Jun 04 02:31:57 SCADA sshd[10416]: Connection from 10.7.0.21 port 57086 on 10.2.0.10 port 22 rdomain ""
Jun 04 02:31:57 SCADA sshd[10416]: Accepted key SHA256:oSfsFeg7+Dy7T0iPDuFauSEk05ej7Ymtu9DpYoNlnC0 found at /home/maintainer-011/.ssh/authorized_keys:5
Jun 04 02:31:57 SCADA sshd[10416]: Postponed publickey for maintainer-011 from 10.7.0.21 port 57086 ssh2 [preauth]
Jun 04 02:31:57 SCADA sshd[10416]: Accepted key SHA256:oSfsFeg7+Dy7T0iPDuFauSEk05ej7Ymtu9DpYoNlnC0 found at /home/maintainer-011/.ssh/authorized_keys:5
Jun 04 02:31:57 SCADA sshd[10416]: Accepted publickey for maintainer-011 from 10.7.0.21 port 57086 ssh2: SHA256:oSfsFeg7+Dy7T0iPDuFauSEk05ej7Ymtu9DpYoNlnC0
Jun 04 02:31:57 SCADA sshd[10416]: pam_unix(sshd:session): session opened for user maintainer-011(uid=1011) by (uid=0)
Jun 04 02:31:57 SCADA sshd[10416]: User child is on pid 53440
Jun 04 02:31:57 SCADA sshd[53440]: Starting session: shell on pts/4 for maintainer-011 from 10.7.0.21 port 57086 id 0
Jun 04 09:27:00 SCADA sshd[21887]: Connection from 10.7.0.30 port 43853 on 10.2.0.10 port 22 rdomain ""
Jun 04 09:27:00 SCADA sshd[21887]: Accepted key SHA256:PTUvjdcBKPtoUWbxYFYJWiiC+BG7DwujVEgFpPR73+k found at /home/maintainer-020/.ssh/authorized_keys:4
Jun 04 09:27:00 SCADA sshd[21887]: Postponed publickey for maintainer-020 from 10.7.0.30 port 43853 ssh2 [preauth]
Jun 04 09:27:00 SCADA sshd[21887]: Accepted key SHA256:PTUvjdcBKPtoUWbxYFYJWiiC+BG7DwujVEgFpPR73+k found at /home/maintainer-020/.ssh/authorized_keys:4
Jun 04 09:27:00 SCADA sshd[21887]: Accepted publickey for maintainer-020 from 10.7.0.30 port 43853 ssh2: SHA256:PTUvjdcBKPtoUWbxYFYJWiiC+BG7DwujVEgFpPR73+k
Jun 04 09:27:00 SCADA sshd[21887]: pam_unix(sshd:session): session opened for user maintainer-020(uid=1020) by (uid=0)
Jun 04 09:27:00 SCADA sshd[21887]: User child is on pid 31940
Jun 04 09:27:00 SCADA sshd[31940]: Starting session: shell on pts/5 for maintainer-020 from 10.7.0.30 port 43853 id 0
Jun 04 09:39:17 SCADA sshd[52423]: Connection from 10.28.0.53 port 50574 on 10.2.0.10 port 22 rdomain ""
Jun 04 09:39:17 SCADA sshd[52423]: Accepted key ED25519 SHA256:WdOuOvvmyFr7I1JRTgzZr/di53fxMOcVYF6FPYXeAR4 found at /home/audit-043/.ssh/authorized_keys:1
Jun 04 09:39:17 SCADA sshd[52423]: Postponed publickey for audit-043 from 10.28.0.53 port 50574 ssh2 [preauth]
Jun 04 09:39:17 SCADA sshd[52423]: Accepted key ED25519 SHA256:WdOuOvvmyFr7I1JRTgzZr/di53fxMOcVYF6FPYXeAR4 found at /home/audit-043/.ssh/authorized_keys:1
Jun 04 09:39:17 SCADA sshd[52423]: Accepted publickey for audit-043 from 10.28.0.53 port 50574 ssh2: ED25519 SHA256:WdOuOvvmyFr7I1JRTgzZr/di53fxMOcVYF6FPYXeAR4
Jun 04 09:39:17 SCADA sshd[52423]: pam_unix(sshd:session): session opened for user audit-043(uid=1093) by (uid=0)
Jun 04 09:39:17 SCADA sshd[52423]: User child is on pid 58871
Jun 04 09:39:17 SCADA sshd[58871]: Starting session: shell on pts/4 for audit-043 from 10.28.0.53 port 50574 id 0
Jun 04 16:20:36 SCADA sshd[61585]: Connection from 10.28.0.60 port 44522 on 10.2.0.10 port 22 rdomain ""
Jun 04 16:20:36 SCADA sshd[61585]: Accepted key ED25519 SHA256:kJgz6OU6Kiik29LQD6/VF6sK7OHoM4xaT11qjQxaf+A found at /home/audit-050/.ssh/authorized_keys:2
Jun 04 16:20:36 SCADA sshd[61585]: Postponed publickey for audit-050 from 10.28.0.60 port 44522 ssh2 [preauth]
Jun 04 16:20:36 SCADA sshd[61585]: Accepted key ED25519 SHA256:kJgz6OU6Kiik29LQD6/VF6sK7OHoM4xaT11qjQxaf+A found at /home/audit-050/.ssh/authorized_keys:2
Jun 04 16:20:36 SCADA sshd[61585]: Accepted publickey for audit-050 from 10.28.0.60 port 44522 ssh2: ED25519 SHA256:kJgz6OU6Kiik29LQD6/VF6sK7OHoM4xaT11qjQxaf+A
Jun 04 16:20:36 SCADA sshd[61585]: pam_unix(sshd:session): session opened for user audit-050(uid=1100) by (uid=0)
Jun 04 16:20:36 SCADA sshd[61585]: User child is on pid 63232
Jun 04 16:20:36 SCADA sshd[63232]: Starting session: shell on pts/3 for audit-050 from 10.28.0.60 port 44522 id 0
Jun 04 16:31:36 SCADA sshd[26253]: Connection from 10.7.0.37 port 59266 on 10.2.0.10 port 22 rdomain ""
Jun 04 16:31:36 SCADA sshd[26253]: Accepted key SHA256:gZX7vPkf6b/wgwmVgqnMiJmKgWBzIOPSeTbNNaziOQk found at /home/maintainer-027/.ssh/authorized_keys:3
Jun 04 16:31:36 SCADA sshd[26253]: Postponed publickey for maintainer-027 from 10.7.0.37 port 59266 ssh2 [preauth]
Jun 04 16:31:36 SCADA sshd[26253]: Accepted key SHA256:gZX7vPkf6b/wgwmVgqnMiJmKgWBzIOPSeTbNNaziOQk found at /home/maintainer-027/.ssh/authorized_keys:3
Jun 04 16:31:36 SCADA sshd[26253]: Accepted publickey for maintainer-027 from 10.7.0.37 port 59266 ssh2: SHA256:gZX7vPkf6b/wgwmVgqnMiJmKgWBzIOPSeTbNNaziOQk
Jun 04 16:31:36 SCADA sshd[26253]: pam_unix(sshd:session): session opened for user maintainer-027(uid=1027) by (uid=0)
Jun 04 16:31:36 SCADA sshd[26253]: User child is on pid 25856
Jun 04 16:31:36 SCADA sshd[25856]: Starting session: shell on pts/5 for maintainer-027 from 10.7.0.37 port 59266 id 0
Jun 04 18:00:11 SCADA sshd[28395]: Connection from 10.28.0.13 port 50621 on 10.2.0.10 port 22 rdomain ""
Jun 04 18:00:11 SCADA sshd[28395]: Accepted key ED25519 SHA256:E+lcgLn6B7o0he3Di0ViZ3ZNgWM1ctMTHlkBaHDZko8 found at /home/audit-003/.ssh/authorized_keys:3
Jun 04 18:00:11 SCADA sshd[28395]: Postponed publickey for audit-003 from 10.28.0.13 port 50621 ssh2 [preauth]
Jun 04 18:00:11 SCADA sshd[28395]: Accepted key ED25519 SHA256:E+lcgLn6B7o0he3Di0ViZ3ZNgWM1ctMTHlkBaHDZko8 found at /home/audit-003/.ssh/authorized_keys:3
Jun 04 18:00:11 SCADA sshd[28395]: Accepted publickey for audit-003 from 10.28.0.13 port 50621 ssh2: ED25519 SHA256:E+lcgLn6B7o0he3Di0ViZ3ZNgWM1ctMTHlkBaHDZko8
Jun 04 18:00:11 SCADA sshd[28395]: pam_unix(sshd:session): session opened for user audit-003(uid=1053) by (uid=0)
Jun 04 18:00:11 SCADA sshd[28395]: User child is on pid 30732
Jun 04 18:00:11 SCADA sshd[30732]: Starting session: shell on pts/5 for audit-003 from 10.28.0.13 port 50621 id 0
Jun 05 08:29:10 SCADA sshd[61014]: Connection from 10.28.0.58 port 40877 on 10.2.0.10 port 22 rdomain ""
Jun 05 08:29:10 SCADA sshd[61014]: Accepted key ED25519 SHA256:6k9YOzdcqI5k6Ce7mrMxE2tAlEMAy6PrpPaUdx9Zl7M found at /home/audit-048/.ssh/authorized_keys:4
Jun 05 08:29:10 SCADA sshd[61014]: Postponed publickey for audit-048 from 10.28.0.58 port 40877 ssh2 [preauth]
Jun 05 08:29:10 SCADA sshd[61014]: Accepted key ED25519 SHA256:6k9YOzdcqI5k6Ce7mrMxE2tAlEMAy6PrpPaUdx9Zl7M found at /home/audit-048/.ssh/authorized_keys:4
Jun 05 08:29:10 SCADA sshd[61014]: Accepted publickey for audit-048 from 10.28.0.58 port 40877 ssh2: ED25519 SHA256:6k9YOzdcqI5k6Ce7mrMxE2tAlEMAy6PrpPaUdx9Zl7M
Jun 05 08:29:10 SCADA sshd[61014]: pam_unix(sshd:session): session opened for user audit-048(uid=1098) by (uid=0)
Jun 05 08:29:10 SCADA sshd[61014]: User child is on pid 49915
Jun 05 08:29:10 SCADA sshd[49915]: Starting session: shell on pts/5 for audit-048 from 10.28.0.58 port 40877 id 0
Jun 05 12:30:50 SCADA sshd[22175]: Connection from 10.28.0.26 port 53259 on 10.2.0.10 port 22 rdomain ""
Jun 05 12:30:50 SCADA sshd[22175]: Accepted key ED25519 SHA256:vAwPZwsiG8b81GQLhBBaSOQMH+Mw1J5iuIULaCU4cMc found at /home/audit-016/.ssh/authorized_keys:3
Jun 05 12:30:50 SCADA sshd[22175]: Postponed publickey for audit-016 from 10.28.0.26 port 53259 ssh2 [preauth]
Jun 05 12:30:50 SCADA sshd[22175]: Accepted key ED25519 SHA256:vAwPZwsiG8b81GQLhBBaSOQMH+Mw1J5iuIULaCU4cMc found at /home/audit-016/.ssh/authorized_keys:3
Jun 05 12:30:50 SCADA sshd[22175]: Accepted publickey for audit-016 from 10.28.0.26 port 53259 ssh2: ED25519 SHA256:vAwPZwsiG8b81GQLhBBaSOQMH+Mw1J5iuIULaCU4cMc
Jun 05 12:30:50 SCADA sshd[22175]: pam_unix(sshd:session): session opened for user audit-016(uid=1066) by (uid=0)
Jun 05 12:30:50 SCADA sshd[22175]: User child is on pid 23419
Jun 05 12:30:50 SCADA sshd[23419]: Starting session: shell on pts/4 for audit-016 from 10.28.0.26 port 53259 id 0
Jun 05 14:00:08 SCADA sshd[11668]: Connection from 10.7.0.16 port 52615 on 10.2.0.10 port 22 rdomain ""
Jun 05 14:00:08 SCADA sshd[11668]: Accepted key SHA256:7tiT+unEBlVJEblQ8qIB5kMIrmsRQxLQaDAPzcp6h6o found at /home/maintainer-006/.ssh/authorized_keys:2
Jun 05 14:00:08 SCADA sshd[11668]: Postponed publickey for maintainer-006 from 10.7.0.16 port 52615 ssh2 [preauth]
Jun 05 14:00:08 SCADA sshd[11668]: Accepted key SHA256:7tiT+unEBlVJEblQ8qIB5kMIrmsRQxLQaDAPzcp6h6o found at /home/maintainer-006/.ssh/authorized_keys:2
Jun 05 14:00:08 SCADA sshd[11668]: Accepted publickey for maintainer-006 from 10.7.0.16 port 52615 ssh2: SHA256:7tiT+unEBlVJEblQ8qIB5kMIrmsRQxLQaDAPzcp6h6o
Jun 05 14:00:08 SCADA sshd[11668]: pam_unix(sshd:session): session opened for user maintainer-006(uid=1006) by (uid=0)
Jun 05 14:00:08 SCADA sshd[11668]: User child is on pid 19352
Jun 05 14:00:08 SCADA sshd[19352]: Starting session: shell on pts/5 for maintainer-006 from 10.7.0.16 port 52615 id 0
Jun 06 10:32:02 SCADA sshd[13971]: Connection from 10.7.0.36 port 44297 on 10.2.0.10 port 22 rdomain ""
Jun 06 10:32:02 SCADA sshd[13971]: Accepted key SHA256:oHYP9gQuRnY4opHqdhOgAys3/KDRyNfeB5eJLwqCJYs found at /home/maintainer-026/.ssh/authorized_keys:2
Jun 06 10:32:02 SCADA sshd[13971]: Postponed publickey for maintainer-026 from 10.7.0.36 port 44297 ssh2 [preauth]
Jun 06 10:32:02 SCADA sshd[13971]: Accepted key SHA256:oHYP9gQuRnY4opHqdhOgAys3/KDRyNfeB5eJLwqCJYs found at /home/maintainer-026/.ssh/authorized_keys:2
Jun 06 10:32:02 SCADA sshd[13971]: Accepted publickey for maintainer-026 from 10.7.0.36 port 44297 ssh2: SHA256:oHYP9gQuRnY4opHqdhOgAys3/KDRyNfeB5eJLwqCJYs
Jun 06 10:32:02 SCADA sshd[13971]: pam_unix(sshd:session): session opened for user maintainer-026(uid=1026) by (uid=0)
Jun 06 10:32:02 SCADA sshd[13971]: User child is on pid 40805
Jun 06 10:32:02 SCADA sshd[40805]: Starting session: shell on pts/7 for maintainer-026 from 10.7.0.36 port 44297 id 0
Jun 06 12:54:03 SCADA sshd[32278]: Connection from 10.7.0.26 port 53663 on 10.2.0.10 port 22 rdomain ""
Jun 06 12:54:03 SCADA sshd[32278]: Accepted key SHA256:pnq5TWMmQ4ez/FeQ7+TiX73WENwsCVMOL/wXGefgSlQ found at /home/maintainer-016/.ssh/authorized_keys:5
Jun 06 12:54:03 SCADA sshd[32278]: Postponed publickey for maintainer-016 from 10.7.0.26 port 53663 ssh2 [preauth]
Jun 06 12:54:03 SCADA sshd[32278]: Accepted key SHA256:pnq5TWMmQ4ez/FeQ7+TiX73WENwsCVMOL/wXGefgSlQ found at /home/maintainer-016/.ssh/authorized_keys:5
Jun 06 12:54:03 SCADA sshd[32278]: Accepted publickey for maintainer-016 from 10.7.0.26 port 53663 ssh2: SHA256:pnq5TWMmQ4ez/FeQ7+TiX73WENwsCVMOL/wXGefgSlQ
Jun 06 12:54:03 SCADA sshd[32278]: pam_unix(sshd:session): session opened for user maintainer-016(uid=1016) by (uid=0)
Jun 06 12:54:03 SCADA sshd[32278]: User child is on pid 30435
Jun 06 12:54:03 SCADA sshd[30435]: Starting session: shell on pts/8 for maintainer-016 from 10.7.0.26 port 53663 id 0
Jun 06 17:34:53 SCADA sshd[54145]: Connection from 10.28.0.33 port 51438 on 10.2.0.10 port 22 rdomain ""
Jun 06 17:34:53 SCADA sshd[54145]: Accepted key ED25519 SHA256:Gc5+8GVkPxHZI+wfR98+6tJ92g3qO2vTtO0mperrg9A found at /home/audit-023/.ssh/authorized_keys:4
Jun 06 17:34:53 SCADA sshd[54145]: Postponed publickey for audit-023 from 10.28.0.33 port 51438 ssh2 [preauth]
Jun 06 17:34:53 SCADA sshd[54145]: Accepted key ED25519 SHA256:Gc5+8GVkPxHZI+wfR98+6tJ92g3qO2vTtO0mperrg9A found at /home/audit-023/.ssh/authorized_keys:4
Jun 06 17:34:53 SCADA sshd[54145]: Accepted publickey for audit-023 from 10.28.0.33 port 51438 ssh2: ED25519 SHA256:Gc5+8GVkPxHZI+wfR98+6tJ92g3qO2vTtO0mperrg9A
Jun 06 17:34:53 SCADA sshd[54145]: pam_unix(sshd:session): session opened for user audit-023(uid=1073) by (uid=0)
Jun 06 17:34:53 SCADA sshd[54145]: User child is on pid 26372
Jun 06 17:34:53 SCADA sshd[26372]: Starting session: shell on pts/7 for audit-023 from 10.28.0.33 port 51438 id 0
Jun 07 11:14:42 SCADA sshd[52663]: Connection from 10.7.0.18 port 56415 on 10.2.0.10 port 22 rdomain ""
Jun 07 11:14:42 SCADA sshd[52663]: Accepted key SHA256:98l1iGxZKjZEqNvFtLhBdlFCUKuWAYwuwvPQvU11JXU found at /home/maintainer-008/.ssh/authorized_keys:2
Jun 07 11:14:42 SCADA sshd[52663]: Postponed publickey for maintainer-008 from 10.7.0.18 port 56415 ssh2 [preauth]
Jun 07 11:14:42 SCADA sshd[52663]: Accepted key SHA256:98l1iGxZKjZEqNvFtLhBdlFCUKuWAYwuwvPQvU11JXU found at /home/maintainer-008/.ssh/authorized_keys:2
Jun 07 11:14:42 SCADA sshd[52663]: Accepted publickey for maintainer-008 from 10.7.0.18 port 56415 ssh2: SHA256:98l1iGxZKjZEqNvFtLhBdlFCUKuWAYwuwvPQvU11JXU
Jun 07 11:14:42 SCADA sshd[52663]: pam_unix(sshd:session): session opened for user maintainer-008(uid=1008) by (uid=0)
Jun 07 11:14:42 SCADA sshd[52663]: User child is on pid 15772
Jun 07 11:14:42 SCADA sshd[15772]: Starting session: shell on pts/5 for maintainer-008 from 10.7.0.18 port 56415 id 0
Jun 07 14:09:47 SCADA sshd[12053]: Connection from 10.28.0.38 port 56778 on 10.2.0.10 port 22 rdomain ""
Jun 07 14:09:47 SCADA sshd[12053]: Accepted key ED25519 SHA256:CFpMLZfDKqcSW72IvUkw9YFV5fOZMQQPwg9RW337Ld4 found at /home/audit-028/.ssh/authorized_keys:5
Jun 07 14:09:47 SCADA sshd[12053]: Postponed publickey for audit-028 from 10.28.0.38 port 56778 ssh2 [preauth]
Jun 07 14:09:47 SCADA sshd[12053]: Accepted key ED25519 SHA256:CFpMLZfDKqcSW72IvUkw9YFV5fOZMQQPwg9RW337Ld4 found at /home/audit-028/.ssh/authorized_keys:5
Jun 07 14:09:47 SCADA sshd[12053]: Accepted publickey for audit-028 from 10.28.0.38 port 56778 ssh2: ED25519 SHA256:CFpMLZfDKqcSW72IvUkw9YFV5fOZMQQPwg9RW337Ld4
Jun 07 14:09:47 SCADA sshd[12053]: pam_unix(sshd:session): session opened for user audit-028(uid=1078) by (uid=0)
Jun 07 14:09:47 SCADA sshd[12053]: User child is on pid 61043
Jun 07 14:09:47 SCADA sshd[61043]: Starting session: shell on pts/2 for audit-028 from 10.28.0.38 port 56778 id 0
Jun 07 15:00:43 SCADA sshd[25590]: Connection from 10.28.0.45 port 59985 on 10.2.0.10 port 22 rdomain ""
Jun 07 15:00:43 SCADA sshd[25590]: Accepted key ED25519 SHA256:JN1+WOJtzM8U+FlsVhTxumTYqtUbk7Mq4JUD4Cef1C8 found at /home/audit-035/.ssh/authorized_keys:3
Jun 07 15:00:43 SCADA sshd[25590]: Postponed publickey for audit-035 from 10.28.0.45 port 59985 ssh2 [preauth]
Jun 07 15:00:43 SCADA sshd[25590]: Accepted key ED25519 SHA256:JN1+WOJtzM8U+FlsVhTxumTYqtUbk7Mq4JUD4Cef1C8 found at /home/audit-035/.ssh/authorized_keys:3
Jun 07 15:00:43 SCADA sshd[25590]: Accepted publickey for audit-035 from 10.28.0.45 port 59985 ssh2: ED25519 SHA256:JN1+WOJtzM8U+FlsVhTxumTYqtUbk7Mq4JUD4Cef1C8
Jun 07 15:00:43 SCADA sshd[25590]: pam_unix(sshd:session): session opened for user audit-035(uid=1085) by (uid=0)
Jun 07 15:00:43 SCADA sshd[25590]: User child is on pid 19998
Jun 07 15:00:43 SCADA sshd[19998]: Starting session: shell on pts/6 for audit-035 from 10.28.0.45 port 59985 id 0
Jun 08 14:53:20 SCADA sshd[35983]: Connection from 10.7.0.11 port 59799 on 10.2.0.10 port 22 rdomain ""
Jun 08 14:53:20 SCADA sshd[35983]: Accepted key SHA256:AJ+5xX/lSKIqcZi188PtL1mgl2ZLwQuYl2fgOkHEJI4 found at /home/maintainer-001/.ssh/authorized_keys:2
Jun 08 14:53:20 SCADA sshd[35983]: Postponed publickey for maintainer-001 from 10.7.0.11 port 59799 ssh2 [preauth]
Jun 08 14:53:20 SCADA sshd[35983]: Accepted key SHA256:AJ+5xX/lSKIqcZi188PtL1mgl2ZLwQuYl2fgOkHEJI4 found at /home/maintainer-001/.ssh/authorized_keys:2
Jun 08 14:53:20 SCADA sshd[35983]: Accepted publickey for maintainer-001 from 10.7.0.11 port 59799 ssh2: SHA256:AJ+5xX/lSKIqcZi188PtL1mgl2ZLwQuYl2fgOkHEJI4
Jun 08 14:53:20 SCADA sshd[35983]: pam_unix(sshd:session): session opened for user maintainer-001(uid=1001) by (uid=0)
Jun 08 14:53:20 SCADA sshd[35983]: User child is on pid 31911
Jun 08 14:53:20 SCADA sshd[31911]: Starting session: shell on pts/3 for maintainer-001 from 10.7.0.11 port 59799 id 0
Jun 08 16:43:13 SCADA sshd[38933]: Connection from 10.7.0.13 port 50753 on 10.2.0.10 port 22 rdomain ""
Jun 08 16:43:13 SCADA sshd[38933]: Accepted key SHA256:KFfOHKqzdLIlA+XU1qooG/9HPPyaTJKbLtiVt7qyUsY found at /home/maintainer-003/.ssh/authorized_keys:1
Jun 08 16:43:13 SCADA sshd[38933]: Postponed publickey for maintainer-003 from 10.7.0.13 port 50753 ssh2 [preauth]
Jun 08 16:43:13 SCADA sshd[38933]: Accepted key SHA256:KFfOHKqzdLIlA+XU1qooG/9HPPyaTJKbLtiVt7qyUsY found at /home/maintainer-003/.ssh/authorized_keys:1
Jun 08 16:43:13 SCADA sshd[38933]: Accepted publickey for maintainer-003 from 10.7.0.13 port 50753 ssh2: SHA256:KFfOHKqzdLIlA+XU1qooG/9HPPyaTJKbLtiVt7qyUsY
Jun 08 16:43:13 SCADA sshd[38933]: pam_unix(sshd:session): session opened for user maintainer-003(uid=1003) by (uid=0)
Jun 08 16:43:13 SCADA sshd[38933]: User child is on pid 25397
Jun 08 16:43:13 SCADA sshd[25397]: Starting session: shell on pts/8 for maintainer-003 from 10.7.0.13 port 50753 id 0
Jun 08 18:20:38 SCADA sshd[40003]: Connection from 10.28.0.40 port 45756 on 10.2.0.10 port 22 rdomain ""
Jun 08 18:20:38 SCADA sshd[40003]: Accepted key ED25519 SHA256:kMsIrvWH8QYiNw37IR4FYs63cGZesHXgHfEVuNgDFcs found at /home/audit-030/.ssh/authorized_keys:5
Jun 08 18:20:38 SCADA sshd[40003]: Postponed publickey for audit-030 from 10.28.0.40 port 45756 ssh2 [preauth]
Jun 08 18:20:38 SCADA sshd[40003]: Accepted key ED25519 SHA256:kMsIrvWH8QYiNw37IR4FYs63cGZesHXgHfEVuNgDFcs found at /home/audit-030/.ssh/authorized_keys:5
Jun 08 18:20:38 SCADA sshd[40003]: Accepted publickey for audit-030 from 10.28.0.40 port 45756 ssh2: ED25519 SHA256:kMsIrvWH8QYiNw37IR4FYs63cGZesHXgHfEVuNgDFcs
Jun 08 18:20:38 SCADA sshd[40003]: pam_unix(sshd:session): session opened for user audit-030(uid=1080) by (uid=0)
Jun 08 18:20:38 SCADA sshd[40003]: User child is on pid 62789
Jun 08 18:20:38 SCADA sshd[62789]: Starting session: shell on pts/2 for audit-030 from 10.28.0.40 port 45756 id 0
Jun 09 08:38:42 SCADA sshd[58127]: Connection from 10.7.0.42 port 51863 on 10.2.0.10 port 22 rdomain ""
Jun 09 08:38:42 SCADA sshd[58127]: Accepted key SHA256:YUo0PDZvDLvSV+eQ7hZFktSImRNXEyF8X1t3/2K+6dk found at /home/maintainer-032/.ssh/authorized_keys:2
Jun 09 08:38:42 SCADA sshd[58127]: Postponed publickey for maintainer-032 from 10.7.0.42 port 51863 ssh2 [preauth]
Jun 09 08:38:42 SCADA sshd[58127]: Accepted key SHA256:YUo0PDZvDLvSV+eQ7hZFktSImRNXEyF8X1t3/2K+6dk found at /home/maintainer-032/.ssh/authorized_keys:2
Jun 09 08:38:42 SCADA sshd[58127]: Accepted publickey for maintainer-032 from 10.7.0.42 port 51863 ssh2: SHA256:YUo0PDZvDLvSV+eQ7hZFktSImRNXEyF8X1t3/2K+6dk
Jun 09 08:38:42 SCADA sshd[58127]: pam_unix(sshd:session): session opened for user maintainer-032(uid=1032) by (uid=0)
Jun 09 08:38:42 SCADA sshd[58127]: User child is on pid 29042
Jun 09 08:38:42 SCADA sshd[29042]: Starting session: shell on pts/2 for maintainer-032 from 10.7.0.42 port 51863 id 0
Jun 09 11:23:29 SCADA sshd[55232]: Connection from 10.28.0.44 port 42186 on 10.2.0.10 port 22 rdomain ""
Jun 09 11:23:29 SCADA sshd[55232]: Accepted key ED25519 SHA256:A7Tjkcprg13CEthOPk2vBryWD6PMy1QEj5fzg1w3wE8 found at /home/audit-034/.ssh/authorized_keys:5
Jun 09 11:23:29 SCADA sshd[55232]: Postponed publickey for audit-034 from 10.28.0.44 port 42186 ssh2 [preauth]
Jun 09 11:23:29 SCADA sshd[55232]: Accepted key ED25519 SHA256:A7Tjkcprg13CEthOPk2vBryWD6PMy1QEj5fzg1w3wE8 found at /home/audit-034/.ssh/authorized_keys:5
Jun 09 11:23:29 SCADA sshd[55232]: Accepted publickey for audit-034 from 10.28.0.44 port 42186 ssh2: ED25519 SHA256:A7Tjkcprg13CEthOPk2vBryWD6PMy1QEj5fzg1w3wE8
Jun 09 11:23:29 SCADA sshd[55232]: pam_unix(sshd:session): session opened for user audit-034(uid=1084) by (uid=0)
Jun 09 11:23:29 SCADA sshd[55232]: User child is on pid 50326
Jun 09 11:23:29 SCADA sshd[50326]: Starting session: shell on pts/7 for audit-034 from 10.28.0.44 port 42186 id 0
Jun 09 11:49:14 SCADA sshd[54830]: Connection from 10.28.0.39 port 45262 on 10.2.0.10 port 22 rdomain ""
Jun 09 11:49:14 SCADA sshd[54830]: Accepted key ED25519 SHA256:Sa8XgZ7cpuaxFIKtdLP2ojRZMpuKb0qIehzMo18HNRk found at /home/audit-029/.ssh/authorized_keys:3
Jun 09 11:49:14 SCADA sshd[54830]: Postponed publickey for audit-029 from 10.28.0.39 port 45262 ssh2 [preauth]
Jun 09 11:49:14 SCADA sshd[54830]: Accepted key ED25519 SHA256:Sa8XgZ7cpuaxFIKtdLP2ojRZMpuKb0qIehzMo18HNRk found at /home/audit-029/.ssh/authorized_keys:3
Jun 09 11:49:14 SCADA sshd[54830]: Accepted publickey for audit-029 from 10.28.0.39 port 45262 ssh2: ED25519 SHA256:Sa8XgZ7cpuaxFIKtdLP2ojRZMpuKb0qIehzMo18HNRk
Jun 09 11:49:14 SCADA sshd[54830]: pam_unix(sshd:session): session opened for user audit-029(uid=1079) by (uid=0)
Jun 09 11:49:14 SCADA sshd[54830]: User child is on pid 10797
Jun 09 11:49:14 SCADA sshd[10797]: Starting session: shell on pts/2 for audit-029 from 10.28.0.39 port 45262 id 0
Jun 09 12:27:04 SCADA sshd[61733]: Connection from 10.28.0.52 port 57945 on 10.2.0.10 port 22 rdomain ""
Jun 09 12:27:04 SCADA sshd[61733]: Accepted key ED25519 SHA256:2Vofh4AV1c8fgAs1RiUGIuVJYaxoJoch4JP308+0pEQ found at /home/audit-042/.ssh/authorized_keys:4
Jun 09 12:27:04 SCADA sshd[61733]: Postponed publickey for audit-042 from 10.28.0.52 port 57945 ssh2 [preauth]
Jun 09 12:27:04 SCADA sshd[61733]: Accepted key ED25519 SHA256:2Vofh4AV1c8fgAs1RiUGIuVJYaxoJoch4JP308+0pEQ found at /home/audit-042/.ssh/authorized_keys:4
Jun 09 12:27:04 SCADA sshd[61733]: Accepted publickey for audit-042 from 10.28.0.52 port 57945 ssh2: ED25519 SHA256:2Vofh4AV1c8fgAs1RiUGIuVJYaxoJoch4JP308+0pEQ
Jun 09 12:27:04 SCADA sshd[61733]: pam_unix(sshd:session): session opened for user audit-042(uid=1092) by (uid=0)
Jun 09 12:27:04 SCADA sshd[61733]: User child is on pid 26088
Jun 09 12:27:04 SCADA sshd[26088]: Starting session: shell on pts/7 for audit-042 from 10.28.0.52 port 57945 id 0
Jun 09 14:36:56 SCADA sshd[27564]: Connection from 10.7.0.47 port 46105 on 10.2.0.10 port 22 rdomain ""
Jun 09 14:36:56 SCADA sshd[27564]: Accepted key SHA256:5UOtU/onD4/vPhLf5QnDx8hdLnyW2CdGV7fgXeQbOMY found at /home/maintainer-037/.ssh/authorized_keys:4
Jun 09 14:36:56 SCADA sshd[27564]: Postponed publickey for maintainer-037 from 10.7.0.47 port 46105 ssh2 [preauth]
Jun 09 14:36:56 SCADA sshd[27564]: Accepted key SHA256:5UOtU/onD4/vPhLf5QnDx8hdLnyW2CdGV7fgXeQbOMY found at /home/maintainer-037/.ssh/authorized_keys:4
Jun 09 14:36:56 SCADA sshd[27564]: Accepted publickey for maintainer-037 from 10.7.0.47 port 46105 ssh2: SHA256:5UOtU/onD4/vPhLf5QnDx8hdLnyW2CdGV7fgXeQbOMY
Jun 09 14:36:56 SCADA sshd[27564]: pam_unix(sshd:session): session opened for user maintainer-037(uid=1037) by (uid=0)
Jun 09 14:36:56 SCADA sshd[27564]: User child is on pid 58618
Jun 09 14:36:56 SCADA sshd[58618]: Starting session: shell on pts/4 for maintainer-037 from 10.7.0.47 port 46105 id 0
Jun 10 12:59:22 SCADA sshd[37359]: Connection from 10.28.0.42 port 53030 on 10.2.0.10 port 22 rdomain ""
Jun 10 12:59:22 SCADA sshd[37359]: Accepted key ED25519 SHA256:rJRqiY3nc3dYuGhMbbKkTeHECywcVMl8NQZSpgWqJ3Q found at /home/audit-032/.ssh/authorized_keys:3
Jun 10 12:59:22 SCADA sshd[37359]: Postponed publickey for audit-032 from 10.28.0.42 port 53030 ssh2 [preauth]
Jun 10 12:59:22 SCADA sshd[37359]: Accepted key ED25519 SHA256:rJRqiY3nc3dYuGhMbbKkTeHECywcVMl8NQZSpgWqJ3Q found at /home/audit-032/.ssh/authorized_keys:3
Jun 10 12:59:22 SCADA sshd[37359]: Accepted publickey for audit-032 from 10.28.0.42 port 53030 ssh2: ED25519 SHA256:rJRqiY3nc3dYuGhMbbKkTeHECywcVMl8NQZSpgWqJ3Q
Jun 10 12:59:22 SCADA sshd[37359]: pam_unix(sshd:session): session opened for user audit-032(uid=1082) by (uid=0)
Jun 10 12:59:22 SCADA sshd[37359]: User child is on pid 57621
Jun 10 12:59:22 SCADA sshd[57621]: Starting session: shell on pts/3 for audit-032 from 10.28.0.42 port 53030 id 0
Jun 10 16:03:25 SCADA sshd[53870]: Connection from 10.7.0.28 port 53931 on 10.2.0.10 port 22 rdomain ""
Jun 10 16:03:25 SCADA sshd[53870]: Accepted key SHA256:Y/TFydOTaYLWpnb/LYy3vse0ldW5bRAY3Hhv9z/sDOI found at /home/maintainer-018/.ssh/authorized_keys:4
Jun 10 16:03:25 SCADA sshd[53870]: Postponed publickey for maintainer-018 from 10.7.0.28 port 53931 ssh2 [preauth]
Jun 10 16:03:25 SCADA sshd[53870]: Accepted key SHA256:Y/TFydOTaYLWpnb/LYy3vse0ldW5bRAY3Hhv9z/sDOI found at /home/maintainer-018/.ssh/authorized_keys:4
Jun 10 16:03:25 SCADA sshd[53870]: Accepted publickey for maintainer-018 from 10.7.0.28 port 53931 ssh2: SHA256:Y/TFydOTaYLWpnb/LYy3vse0ldW5bRAY3Hhv9z/sDOI
Jun 10 16:03:25 SCADA sshd[53870]: pam_unix(sshd:session): session opened for user maintainer-018(uid=1018) by (uid=0)
Jun 10 16:03:25 SCADA sshd[53870]: User child is on pid 47225
Jun 10 16:03:25 SCADA sshd[47225]: Starting session: shell on pts/7 for maintainer-018 from 10.7.0.28 port 53931 id 0
Jun 10 16:23:40 SCADA sshd[39549]: Connection from 10.28.0.58 port 55466 on 10.2.0.10 port 22 rdomain ""
Jun 10 16:23:40 SCADA sshd[39549]: Accepted key ED25519 SHA256:6k9YOzdcqI5k6Ce7mrMxE2tAlEMAy6PrpPaUdx9Zl7M found at /home/audit-048/.ssh/authorized_keys:4
Jun 10 16:23:40 SCADA sshd[39549]: Postponed publickey for audit-048 from 10.28.0.58 port 55466 ssh2 [preauth]
Jun 10 16:23:40 SCADA sshd[39549]: Accepted key ED25519 SHA256:6k9YOzdcqI5k6Ce7mrMxE2tAlEMAy6PrpPaUdx9Zl7M found at /home/audit-048/.ssh/authorized_keys:4
Jun 10 16:23:40 SCADA sshd[39549]: Accepted publickey for audit-048 from 10.28.0.58 port 55466 ssh2: ED25519 SHA256:6k9YOzdcqI5k6Ce7mrMxE2tAlEMAy6PrpPaUdx9Zl7M
Jun 10 16:23:40 SCADA sshd[39549]: pam_unix(sshd:session): session opened for user audit-048(uid=1098) by (uid=0)
Jun 10 16:23:40 SCADA sshd[39549]: User child is on pid 55227
Jun 10 16:23:40 SCADA sshd[55227]: Starting session: shell on pts/7 for audit-048 from 10.28.0.58 port 55466 id 0
Jun 10 17:57:11 SCADA sshd[64417]: Connection from 10.7.0.35 port 56856 on 10.2.0.10 port 22 rdomain ""
Jun 10 17:57:11 SCADA sshd[64417]: Accepted key SHA256:anQVMKwfRaQQf2HStkcVWboTLumKq11Xai0Pc12nr98 found at /home/maintainer-025/.ssh/authorized_keys:2
Jun 10 17:57:11 SCADA sshd[64417]: Postponed publickey for maintainer-025 from 10.7.0.35 port 56856 ssh2 [preauth]
Jun 10 17:57:11 SCADA sshd[64417]: Accepted key SHA256:anQVMKwfRaQQf2HStkcVWboTLumKq11Xai0Pc12nr98 found at /home/maintainer-025/.ssh/authorized_keys:2
Jun 10 17:57:11 SCADA sshd[64417]: Accepted publickey for maintainer-025 from 10.7.0.35 port 56856 ssh2: SHA256:anQVMKwfRaQQf2HStkcVWboTLumKq11Xai0Pc12nr98
Jun 10 17:57:11 SCADA sshd[64417]: pam_unix(sshd:session): session opened for user maintainer-025(uid=1025) by (uid=0)
Jun 10 17:57:11 SCADA sshd[64417]: User child is on pid 30960
Jun 10 17:57:11 SCADA sshd[30960]: Starting session: shell on pts/7 for maintainer-025 from 10.7.0.35 port 56856 id 0
Jun 11 04:57:09 SCADA sshd[28598]: Connection from 10.7.0.38 port 46621 on 10.2.0.10 port 22 rdomain ""
Jun 11 04:57:09 SCADA sshd[28598]: Accepted key SHA256:VL8u8bH6/KAhlEJc3y8/Daj0aKGL+Nh/5x/q4b+NVLE found at /home/maintainer-028/.ssh/authorized_keys:3
Jun 11 04:57:09 SCADA sshd[28598]: Postponed publickey for maintainer-028 from 10.7.0.38 port 46621 ssh2 [preauth]
Jun 11 04:57:09 SCADA sshd[28598]: Accepted key SHA256:VL8u8bH6/KAhlEJc3y8/Daj0aKGL+Nh/5x/q4b+NVLE found at /home/maintainer-028/.ssh/authorized_keys:3
Jun 11 04:57:09 SCADA sshd[28598]: Accepted publickey for maintainer-028 from 10.7.0.38 port 46621 ssh2: SHA256:VL8u8bH6/KAhlEJc3y8/Daj0aKGL+Nh/5x/q4b+NVLE
Jun 11 04:57:09 SCADA sshd[28598]: pam_unix(sshd:session): session opened for user maintainer-028(uid=1028) by (uid=0)
Jun 11 04:57:09 SCADA sshd[28598]: User child is on pid 19634
Jun 11 04:57:09 SCADA sshd[19634]: Starting session: shell on pts/2 for maintainer-028 from 10.7.0.38 port 46621 id 0
Jun 11 08:49:51 SCADA sshd[13866]: Connection from 10.28.0.15 port 52039 on 10.2.0.10 port 22 rdomain ""
Jun 11 08:49:51 SCADA sshd[13866]: Accepted key ED25519 SHA256:enRICBaPEvn8I571VDn7WtwNqIhcZbQ4AaK28TKgNZA found at /home/audit-005/.ssh/authorized_keys:5
Jun 11 08:49:51 SCADA sshd[13866]: Postponed publickey for audit-005 from 10.28.0.15 port 52039 ssh2 [preauth]
Jun 11 08:49:51 SCADA sshd[13866]: Accepted key ED25519 SHA256:enRICBaPEvn8I571VDn7WtwNqIhcZbQ4AaK28TKgNZA found at /home/audit-005/.ssh/authorized_keys:5
Jun 11 08:49:51 SCADA sshd[13866]: Accepted publickey for audit-005 from 10.28.0.15 port 52039 ssh2: ED25519 SHA256:enRICBaPEvn8I571VDn7WtwNqIhcZbQ4AaK28TKgNZA
Jun 11 08:49:51 SCADA sshd[13866]: pam_unix(sshd:session): session opened for user audit-005(uid=1055) by (uid=0)
Jun 11 08:49:51 SCADA sshd[13866]: User child is on pid 24300
Jun 11 08:49:51 SCADA sshd[24300]: Starting session: shell on pts/8 for audit-005 from 10.28.0.15 port 52039 id 0
Jun 11 12:38:15 SCADA sshd[35293]: Connection from 10.28.0.41 port 43990 on 10.2.0.10 port 22 rdomain ""
Jun 11 12:38:15 SCADA sshd[35293]: Accepted key ED25519 SHA256:3icUPTi54VdI+HN9f95yEyruDcxiNFB9ibmqJnbtC0k found at /home/audit-031/.ssh/authorized_keys:1
Jun 11 12:38:15 SCADA sshd[35293]: Postponed publickey for audit-031 from 10.28.0.41 port 43990 ssh2 [preauth]
Jun 11 12:38:15 SCADA sshd[35293]: Accepted key ED25519 SHA256:3icUPTi54VdI+HN9f95yEyruDcxiNFB9ibmqJnbtC0k found at /home/audit-031/.ssh/authorized_keys:1
Jun 11 12:38:15 SCADA sshd[35293]: Accepted publickey for audit-031 from 10.28.0.41 port 43990 ssh2: ED25519 SHA256:3icUPTi54VdI+HN9f95yEyruDcxiNFB9ibmqJnbtC0k
Jun 11 12:38:15 SCADA sshd[35293]: pam_unix(sshd:session): session opened for user audit-031(uid=1081) by (uid=0)
Jun 11 12:38:15 SCADA sshd[35293]: User child is on pid 61982
Jun 11 12:38:15 SCADA sshd[61982]: Starting session: shell on pts/6 for audit-031 from 10.28.0.41 port 43990 id 0
Jun 11 14:07:55 SCADA sshd[62038]: Connection from 10.7.0.36 port 57408 on 10.2.0.10 port 22 rdomain ""
Jun 11 14:07:55 SCADA sshd[62038]: Accepted key SHA256:oHYP9gQuRnY4opHqdhOgAys3/KDRyNfeB5eJLwqCJYs found at /home/maintainer-026/.ssh/authorized_keys:2
Jun 11 14:07:55 SCADA sshd[62038]: Postponed publickey for maintainer-026 from 10.7.0.36 port 57408 ssh2 [preauth]
Jun 11 14:07:55 SCADA sshd[62038]: Accepted key SHA256:oHYP9gQuRnY4opHqdhOgAys3/KDRyNfeB5eJLwqCJYs found at /home/maintainer-026/.ssh/authorized_keys:2
Jun 11 14:07:55 SCADA sshd[62038]: Accepted publickey for maintainer-026 from 10.7.0.36 port 57408 ssh2: SHA256:oHYP9gQuRnY4opHqdhOgAys3/KDRyNfeB5eJLwqCJYs
Jun 11 14:07:55 SCADA sshd[62038]: pam_unix(sshd:session): session opened for user maintainer-026(uid=1026) by (uid=0)
Jun 11 14:07:55 SCADA sshd[62038]: User child is on pid 54177
Jun 11 14:07:55 SCADA sshd[54177]: Starting session: shell on pts/3 for maintainer-026 from 10.7.0.36 port 57408 id 0
Jun 12 10:51:19 SCADA sshd[13598]: Connection from 10.28.0.25 port 59839 on 10.2.0.10 port 22 rdomain ""
Jun 12 10:51:19 SCADA sshd[13598]: Accepted key ED25519 SHA256:wmpzT4z94yAyik8/+2FHOdGK9E6jUe4hlrC4bKRId8k found at /home/audit-015/.ssh/authorized_keys:1
Jun 12 10:51:19 SCADA sshd[13598]: Postponed publickey for audit-015 from 10.28.0.25 port 59839 ssh2 [preauth]
Jun 12 10:51:19 SCADA sshd[13598]: Accepted key ED25519 SHA256:wmpzT4z94yAyik8/+2FHOdGK9E6jUe4hlrC4bKRId8k found at /home/audit-015/.ssh/authorized_keys:1
Jun 12 10:51:19 SCADA sshd[13598]: Accepted publickey for audit-015 from 10.28.0.25 port 59839 ssh2: ED25519 SHA256:wmpzT4z94yAyik8/+2FHOdGK9E6jUe4hlrC4bKRId8k
Jun 12 10:51:19 SCADA sshd[13598]: pam_unix(sshd:session): session opened for user audit-015(uid=1065) by (uid=0)
Jun 12 10:51:19 SCADA sshd[13598]: User child is on pid 47990
Jun 12 10:51:19 SCADA sshd[47990]: Starting session: shell on pts/8 for audit-015 from 10.28.0.25 port 59839 id 0
Jun 12 11:53:39 SCADA sshd[25465]: Connection from 10.7.0.59 port 43419 on 10.2.0.10 port 22 rdomain ""
Jun 12 11:53:39 SCADA sshd[25465]: Accepted key SHA256:c/rg99kIyYe6aEyDAgJaiofSFAPWW/zJOm1OLhiXkw0 found at /home/maintainer-049/.ssh/authorized_keys:5
Jun 12 11:53:39 SCADA sshd[25465]: Postponed publickey for maintainer-049 from 10.7.0.59 port 43419 ssh2 [preauth]
Jun 12 11:53:39 SCADA sshd[25465]: Accepted key SHA256:c/rg99kIyYe6aEyDAgJaiofSFAPWW/zJOm1OLhiXkw0 found at /home/maintainer-049/.ssh/authorized_keys:5
Jun 12 11:53:39 SCADA sshd[25465]: Accepted publickey for maintainer-049 from 10.7.0.59 port 43419 ssh2: SHA256:c/rg99kIyYe6aEyDAgJaiofSFAPWW/zJOm1OLhiXkw0
Jun 12 11:53:39 SCADA sshd[25465]: pam_unix(sshd:session): session opened for user maintainer-049(uid=1049) by (uid=0)
Jun 12 11:53:39 SCADA sshd[25465]: User child is on pid 28395
Jun 12 11:53:39 SCADA sshd[28395]: Starting session: shell on pts/3 for maintainer-049 from 10.7.0.59 port 43419 id 0
Jun 12 14:47:03 SCADA sshd[54009]: Connection from 10.28.0.42 port 46390 on 10.2.0.10 port 22 rdomain ""
Jun 12 14:47:03 SCADA sshd[54009]: Accepted key ED25519 SHA256:rJRqiY3nc3dYuGhMbbKkTeHECywcVMl8NQZSpgWqJ3Q found at /home/audit-032/.ssh/authorized_keys:3
Jun 12 14:47:03 SCADA sshd[54009]: Postponed publickey for audit-032 from 10.28.0.42 port 46390 ssh2 [preauth]
Jun 12 14:47:03 SCADA sshd[54009]: Accepted key ED25519 SHA256:rJRqiY3nc3dYuGhMbbKkTeHECywcVMl8NQZSpgWqJ3Q found at /home/audit-032/.ssh/authorized_keys:3
Jun 12 14:47:03 SCADA sshd[54009]: Accepted publickey for audit-032 from 10.28.0.42 port 46390 ssh2: ED25519 SHA256:rJRqiY3nc3dYuGhMbbKkTeHECywcVMl8NQZSpgWqJ3Q
Jun 12 14:47:03 SCADA sshd[54009]: pam_unix(sshd:session): session opened for user audit-032(uid=1082) by (uid=0)
Jun 12 14:47:03 SCADA sshd[54009]: User child is on pid 33697
Jun 12 14:47:03 SCADA sshd[33697]: Starting session: shell on pts/7 for audit-032 from 10.28.0.42 port 46390 id 0
Jun 13 08:40:32 SCADA sshd[35476]: Connection from 10.28.0.39 port 46675 on 10.2.0.10 port 22 rdomain ""
Jun 13 08:40:32 SCADA sshd[35476]: Accepted key ED25519 SHA256:Sa8XgZ7cpuaxFIKtdLP2ojRZMpuKb0qIehzMo18HNRk found at /home/audit-029/.ssh/authorized_keys:3
Jun 13 08:40:32 SCADA sshd[35476]: Postponed publickey for audit-029 from 10.28.0.39 port 46675 ssh2 [preauth]
Jun 13 08:40:32 SCADA sshd[35476]: Accepted key ED25519 SHA256:Sa8XgZ7cpuaxFIKtdLP2ojRZMpuKb0qIehzMo18HNRk found at /home/audit-029/.ssh/authorized_keys:3
Jun 13 08:40:32 SCADA sshd[35476]: Accepted publickey for audit-029 from 10.28.0.39 port 46675 ssh2: ED25519 SHA256:Sa8XgZ7cpuaxFIKtdLP2ojRZMpuKb0qIehzMo18HNRk
Jun 13 08:40:32 SCADA sshd[35476]: pam_unix(sshd:session): session opened for user audit-029(uid=1079) by (uid=0)
Jun 13 08:40:32 SCADA sshd[35476]: User child is on pid 49540
Jun 13 08:40:32 SCADA sshd[49540]: Starting session: shell on pts/8 for audit-029 from 10.28.0.39 port 46675 id 0
Jun 13 09:12:15 SCADA sshd[61748]: Connection from 10.28.0.54 port 43990 on 10.2.0.10 port 22 rdomain ""
Jun 13 09:12:15 SCADA sshd[61748]: Accepted key ED25519 SHA256:5H2gHV25e4PpKPxR1wC9Hsum3pw2hOMGo7sSH33vWWE found at /home/audit-044/.ssh/authorized_keys:5
Jun 13 09:12:15 SCADA sshd[61748]: Postponed publickey for audit-044 from 10.28.0.54 port 43990 ssh2 [preauth]
Jun 13 09:12:15 SCADA sshd[61748]: Accepted key ED25519 SHA256:5H2gHV25e4PpKPxR1wC9Hsum3pw2hOMGo7sSH33vWWE found at /home/audit-044/.ssh/authorized_keys:5
Jun 13 09:12:15 SCADA sshd[61748]: Accepted publickey for audit-044 from 10.28.0.54 port 43990 ssh2: ED25519 SHA256:5H2gHV25e4PpKPxR1wC9Hsum3pw2hOMGo7sSH33vWWE
Jun 13 09:12:15 SCADA sshd[61748]: pam_unix(sshd:session): session opened for user audit-044(uid=1094) by (uid=0)
Jun 13 09:12:15 SCADA sshd[61748]: User child is on pid 55565
Jun 13 09:12:15 SCADA sshd[55565]: Starting session: shell on pts/3 for audit-044 from 10.28.0.54 port 43990 id 0
Jun 13 12:35:01 SCADA sshd[25805]: Connection from 10.28.0.27 port 45839 on 10.2.0.10 port 22 rdomain ""
Jun 13 12:35:01 SCADA sshd[25805]: Accepted key ED25519 SHA256:sxlhDB5/NpDk/MKreaFXD+fCNmV6ALR1iYMhHMjUnsI found at /home/audit-017/.ssh/authorized_keys:2
Jun 13 12:35:01 SCADA sshd[25805]: Postponed publickey for audit-017 from 10.28.0.27 port 45839 ssh2 [preauth]
Jun 13 12:35:01 SCADA sshd[25805]: Accepted key ED25519 SHA256:sxlhDB5/NpDk/MKreaFXD+fCNmV6ALR1iYMhHMjUnsI found at /home/audit-017/.ssh/authorized_keys:2
Jun 13 12:35:01 SCADA sshd[25805]: Accepted publickey for audit-017 from 10.28.0.27 port 45839 ssh2: ED25519 SHA256:sxlhDB5/NpDk/MKreaFXD+fCNmV6ALR1iYMhHMjUnsI
Jun 13 12:35:01 SCADA sshd[25805]: pam_unix(sshd:session): session opened for user audit-017(uid=1067) by (uid=0)
Jun 13 12:35:01 SCADA sshd[25805]: User child is on pid 39532
Jun 13 12:35:01 SCADA sshd[39532]: Starting session: shell on pts/7 for audit-017 from 10.28.0.27 port 45839 id 0
Jun 13 18:57:20 SCADA sshd[31850]: Connection from 10.7.0.51 port 45962 on 10.2.0.10 port 22 rdomain ""
Jun 13 18:57:20 SCADA sshd[31850]: Accepted key SHA256:PauZf6ok6eD8TuV4gBNEjnkA5aLc3uRqlldu8a7rQuM found at /home/maintainer-041/.ssh/authorized_keys:3
Jun 13 18:57:20 SCADA sshd[31850]: Postponed publickey for maintainer-041 from 10.7.0.51 port 45962 ssh2 [preauth]
Jun 13 18:57:20 SCADA sshd[31850]: Accepted key SHA256:PauZf6ok6eD8TuV4gBNEjnkA5aLc3uRqlldu8a7rQuM found at /home/maintainer-041/.ssh/authorized_keys:3
Jun 13 18:57:20 SCADA sshd[31850]: Accepted publickey for maintainer-041 from 10.7.0.51 port 45962 ssh2: SHA256:PauZf6ok6eD8TuV4gBNEjnkA5aLc3uRqlldu8a7rQuM
Jun 13 18:57:20 SCADA sshd[31850]: pam_unix(sshd:session): session opened for user maintainer-041(uid=1041) by (uid=0)
Jun 13 18:57:20 SCADA sshd[31850]: User child is on pid 64150
Jun 13 18:57:20 SCADA sshd[64150]: Starting session: shell on pts/5 for maintainer-041 from 10.7.0.51 port 45962 id 0
Jun 14 08:34:09 SCADA sshd[60447]: Connection from 10.7.0.46 port 55681 on 10.2.0.10 port 22 rdomain ""
Jun 14 08:34:09 SCADA sshd[60447]: Accepted key SHA256:iYEcC+yTDrlQOVFmlr3a7s2X6mmim8nrYdFEiyCXoZo found at /home/maintainer-036/.ssh/authorized_keys:5
Jun 14 08:34:09 SCADA sshd[60447]: Postponed publickey for maintainer-036 from 10.7.0.46 port 55681 ssh2 [preauth]
Jun 14 08:34:09 SCADA sshd[60447]: Accepted key SHA256:iYEcC+yTDrlQOVFmlr3a7s2X6mmim8nrYdFEiyCXoZo found at /home/maintainer-036/.ssh/authorized_keys:5
Jun 14 08:34:09 SCADA sshd[60447]: Accepted publickey for maintainer-036 from 10.7.0.46 port 55681 ssh2: SHA256:iYEcC+yTDrlQOVFmlr3a7s2X6mmim8nrYdFEiyCXoZo
Jun 14 08:34:09 SCADA sshd[60447]: pam_unix(sshd:session): session opened for user maintainer-036(uid=1036) by (uid=0)
Jun 14 08:34:09 SCADA sshd[60447]: User child is on pid 24992
Jun 14 08:34:09 SCADA sshd[24992]: Starting session: shell on pts/6 for maintainer-036 from 10.7.0.46 port 55681 id 0
Jun 14 09:34:26 SCADA sshd[51115]: Connection from 10.28.0.36 port 58560 on 10.2.0.10 port 22 rdomain ""
Jun 14 09:34:26 SCADA sshd[51115]: Accepted key ED25519 SHA256:sEyvg0ruGFBjhZyPuo9fc4J1wcpOfxCf1C94GqBvGV8 found at /home/audit-026/.ssh/authorized_keys:3
Jun 14 09:34:26 SCADA sshd[51115]: Postponed publickey for audit-026 from 10.28.0.36 port 58560 ssh2 [preauth]
Jun 14 09:34:26 SCADA sshd[51115]: Accepted key ED25519 SHA256:sEyvg0ruGFBjhZyPuo9fc4J1wcpOfxCf1C94GqBvGV8 found at /home/audit-026/.ssh/authorized_keys:3
Jun 14 09:34:26 SCADA sshd[51115]: Accepted publickey for audit-026 from 10.28.0.36 port 58560 ssh2: ED25519 SHA256:sEyvg0ruGFBjhZyPuo9fc4J1wcpOfxCf1C94GqBvGV8
Jun 14 09:34:26 SCADA sshd[51115]: pam_unix(sshd:session): session opened for user audit-026(uid=1076) by (uid=0)
Jun 14 09:34:26 SCADA sshd[51115]: User child is on pid 62909
Jun 14 09:34:26 SCADA sshd[62909]: Starting session: shell on pts/3 for audit-026 from 10.28.0.36 port 58560 id 0
Jun 14 11:32:35 SCADA sshd[32436]: Connection from 10.7.0.36 port 44505 on 10.2.0.10 port 22 rdomain ""
Jun 14 11:32:35 SCADA sshd[32436]: Accepted key SHA256:oHYP9gQuRnY4opHqdhOgAys3/KDRyNfeB5eJLwqCJYs found at /home/maintainer-026/.ssh/authorized_keys:2
Jun 14 11:32:35 SCADA sshd[32436]: Postponed publickey for maintainer-026 from 10.7.0.36 port 44505 ssh2 [preauth]
Jun 14 11:32:35 SCADA sshd[32436]: Accepted key SHA256:oHYP9gQuRnY4opHqdhOgAys3/KDRyNfeB5eJLwqCJYs found at /home/maintainer-026/.ssh/authorized_keys:2
Jun 14 11:32:35 SCADA sshd[32436]: Accepted publickey for maintainer-026 from 10.7.0.36 port 44505 ssh2: SHA256:oHYP9gQuRnY4opHqdhOgAys3/KDRyNfeB5eJLwqCJYs
Jun 14 11:32:35 SCADA sshd[32436]: pam_unix(sshd:session): session opened for user maintainer-026(uid=1026) by (uid=0)
Jun 14 11:32:35 SCADA sshd[32436]: User child is on pid 50160
Jun 14 11:32:35 SCADA sshd[50160]: Starting session: shell on pts/3 for maintainer-026 from 10.7.0.36 port 44505 id 0
Jun 14 13:20:12 SCADA sshd[57371]: Connection from 10.28.0.35 port 44238 on 10.2.0.10 port 22 rdomain ""
Jun 14 13:20:12 SCADA sshd[57371]: Accepted key ED25519 SHA256:khD06qx5yynpJLdnmU+1tL0pdZPACP6M4BhmrldkYcs found at /home/audit-025/.ssh/authorized_keys:5
Jun 14 13:20:12 SCADA sshd[57371]: Postponed publickey for audit-025 from 10.28.0.35 port 44238 ssh2 [preauth]
Jun 14 13:20:12 SCADA sshd[57371]: Accepted key ED25519 SHA256:khD06qx5yynpJLdnmU+1tL0pdZPACP6M4BhmrldkYcs found at /home/audit-025/.ssh/authorized_keys:5
Jun 14 13:20:12 SCADA sshd[57371]: Accepted publickey for audit-025 from 10.28.0.35 port 44238 ssh2: ED25519 SHA256:khD06qx5yynpJLdnmU+1tL0pdZPACP6M4BhmrldkYcs
Jun 14 13:20:12 SCADA sshd[57371]: pam_unix(sshd:session): session opened for user audit-025(uid=1075) by (uid=0)
Jun 14 13:20:12 SCADA sshd[57371]: User child is on pid 64464
Jun 14 13:20:12 SCADA sshd[64464]: Starting session: shell on pts/4 for audit-025 from 10.28.0.35 port 44238 id 0
Jun 14 16:09:21 SCADA sshd[44613]: Connection from 10.28.0.49 port 59104 on 10.2.0.10 port 22 rdomain ""
Jun 14 16:09:21 SCADA sshd[44613]: Accepted key ED25519 SHA256:eIST/WPwryUKiaT5bDpYdjnoxn27tZ+jOt53ZVankcg found at /home/audit-039/.ssh/authorized_keys:1
Jun 14 16:09:21 SCADA sshd[44613]: Postponed publickey for audit-039 from 10.28.0.49 port 59104 ssh2 [preauth]
Jun 14 16:09:21 SCADA sshd[44613]: Accepted key ED25519 SHA256:eIST/WPwryUKiaT5bDpYdjnoxn27tZ+jOt53ZVankcg found at /home/audit-039/.ssh/authorized_keys:1
Jun 14 16:09:21 SCADA sshd[44613]: Accepted publickey for audit-039 from 10.28.0.49 port 59104 ssh2: ED25519 SHA256:eIST/WPwryUKiaT5bDpYdjnoxn27tZ+jOt53ZVankcg
Jun 14 16:09:21 SCADA sshd[44613]: pam_unix(sshd:session): session opened for user audit-039(uid=1089) by (uid=0)
Jun 14 16:09:21 SCADA sshd[44613]: User child is on pid 63719
Jun 14 16:09:21 SCADA sshd[63719]: Starting session: shell on pts/6 for audit-039 from 10.28.0.49 port 59104 id 0
Jun 15 01:40:54 SCADA sshd[33793]: Connection from 10.7.0.56 port 55340 on 10.2.0.10 port 22 rdomain ""
Jun 15 01:40:54 SCADA sshd[33793]: Accepted key SHA256:7szGBpPmdvPb5fEf0hAS++zYdWyptSfEAxukT26T6n4 found at /home/maintainer-046/.ssh/authorized_keys:5
Jun 15 01:40:54 SCADA sshd[33793]: Postponed publickey for maintainer-046 from 10.7.0.56 port 55340 ssh2 [preauth]
Jun 15 01:40:54 SCADA sshd[33793]: Accepted key SHA256:7szGBpPmdvPb5fEf0hAS++zYdWyptSfEAxukT26T6n4 found at /home/maintainer-046/.ssh/authorized_keys:5
Jun 15 01:40:54 SCADA sshd[33793]: Accepted publickey for maintainer-046 from 10.7.0.56 port 55340 ssh2: SHA256:7szGBpPmdvPb5fEf0hAS++zYdWyptSfEAxukT26T6n4
Jun 15 01:40:54 SCADA sshd[33793]: pam_unix(sshd:session): session opened for user maintainer-046(uid=1046) by (uid=0)
Jun 15 01:40:54 SCADA sshd[33793]: User child is on pid 18232
Jun 15 01:40:54 SCADA sshd[18232]: Starting session: shell on pts/3 for maintainer-046 from 10.7.0.56 port 55340 id 0
Jun 15 09:54:38 SCADA sshd[35620]: Connection from 10.28.0.31 port 42028 on 10.2.0.10 port 22 rdomain ""
Jun 15 09:54:38 SCADA sshd[35620]: Accepted key ED25519 SHA256:EyTie7dqkDiY50r8fX5I7RKPA0vrLrmkMv9RJpQCfgg found at /home/audit-021/.ssh/authorized_keys:3
Jun 15 09:54:38 SCADA sshd[35620]: Postponed publickey for audit-021 from 10.28.0.31 port 42028 ssh2 [preauth]
Jun 15 09:54:38 SCADA sshd[35620]: Accepted key ED25519 SHA256:EyTie7dqkDiY50r8fX5I7RKPA0vrLrmkMv9RJpQCfgg found at /home/audit-021/.ssh/authorized_keys:3
Jun 15 09:54:38 SCADA sshd[35620]: Accepted publickey for audit-021 from 10.28.0.31 port 42028 ssh2: ED25519 SHA256:EyTie7dqkDiY50r8fX5I7RKPA0vrLrmkMv9RJpQCfgg
Jun 15 09:54:38 SCADA sshd[35620]: pam_unix(sshd:session): session opened for user audit-021(uid=1071) by (uid=0)
Jun 15 09:54:38 SCADA sshd[35620]: User child is on pid 15423
Jun 15 09:54:38 SCADA sshd[15423]: Starting session: shell on pts/4 for audit-021 from 10.28.0.31 port 42028 id 0
Jun 15 15:22:06 SCADA sshd[21216]: Connection from 10.7.0.28 port 55980 on 10.2.0.10 port 22 rdomain ""
Jun 15 15:22:06 SCADA sshd[21216]: Accepted key SHA256:Y/TFydOTaYLWpnb/LYy3vse0ldW5bRAY3Hhv9z/sDOI found at /home/maintainer-018/.ssh/authorized_keys:4
Jun 15 15:22:06 SCADA sshd[21216]: Postponed publickey for maintainer-018 from 10.7.0.28 port 55980 ssh2 [preauth]
Jun 15 15:22:06 SCADA sshd[21216]: Accepted key SHA256:Y/TFydOTaYLWpnb/LYy3vse0ldW5bRAY3Hhv9z/sDOI found at /home/maintainer-018/.ssh/authorized_keys:4
Jun 15 15:22:06 SCADA sshd[21216]: Accepted publickey for maintainer-018 from 10.7.0.28 port 55980 ssh2: SHA256:Y/TFydOTaYLWpnb/LYy3vse0ldW5bRAY3Hhv9z/sDOI
Jun 15 15:22:06 SCADA sshd[21216]: pam_unix(sshd:session): session opened for user maintainer-018(uid=1018) by (uid=0)
Jun 15 15:22:06 SCADA sshd[21216]: User child is on pid 51087
Jun 15 15:22:06 SCADA sshd[51087]: Starting session: shell on pts/7 for maintainer-018 from 10.7.0.28 port 55980 id 0
Jun 15 18:32:21 SCADA sshd[10396]: Connection from 10.7.0.48 port 56755 on 10.2.0.10 port 22 rdomain ""
Jun 15 18:32:21 SCADA sshd[10396]: Accepted key SHA256:wlcB7LcKyLKk7f5VIKxJ8H074/ma5E4FAfDAZx7Xa1w found at /home/maintainer-038/.ssh/authorized_keys:5
Jun 15 18:32:21 SCADA sshd[10396]: Postponed publickey for maintainer-038 from 10.7.0.48 port 56755 ssh2 [preauth]
Jun 15 18:32:21 SCADA sshd[10396]: Accepted key SHA256:wlcB7LcKyLKk7f5VIKxJ8H074/ma5E4FAfDAZx7Xa1w found at /home/maintainer-038/.ssh/authorized_keys:5
Jun 15 18:32:21 SCADA sshd[10396]: Accepted publickey for maintainer-038 from 10.7.0.48 port 56755 ssh2: SHA256:wlcB7LcKyLKk7f5VIKxJ8H074/ma5E4FAfDAZx7Xa1w
Jun 15 18:32:21 SCADA sshd[10396]: pam_unix(sshd:session): session opened for user maintainer-038(uid=1038) by (uid=0)
Jun 15 18:32:21 SCADA sshd[10396]: User child is on pid 41024
Jun 15 18:32:21 SCADA sshd[41024]: Starting session: shell on pts/3 for maintainer-038 from 10.7.0.48 port 56755 id 0
Jun 16 10:45:21 SCADA sshd[12022]: Connection from 10.28.0.19 port 59945 on 10.2.0.10 port 22 rdomain ""
Jun 16 10:45:21 SCADA sshd[12022]: Accepted key ED25519 SHA256:R6HxX7bKd1xkk/Gy/Gi9EvCuC3ELzcFzWJOkGGGpwAY found at /home/audit-009/.ssh/authorized_keys:3
Jun 16 10:45:21 SCADA sshd[12022]: Postponed publickey for audit-009 from 10.28.0.19 port 59945 ssh2 [preauth]
Jun 16 10:45:21 SCADA sshd[12022]: Accepted key ED25519 SHA256:R6HxX7bKd1xkk/Gy/Gi9EvCuC3ELzcFzWJOkGGGpwAY found at /home/audit-009/.ssh/authorized_keys:3
Jun 16 10:45:21 SCADA sshd[12022]: Accepted publickey for audit-009 from 10.28.0.19 port 59945 ssh2: ED25519 SHA256:R6HxX7bKd1xkk/Gy/Gi9EvCuC3ELzcFzWJOkGGGpwAY
Jun 16 10:45:21 SCADA sshd[12022]: pam_unix(sshd:session): session opened for user audit-009(uid=1059) by (uid=0)
Jun 16 10:45:21 SCADA sshd[12022]: User child is on pid 39226
Jun 16 10:45:21 SCADA sshd[39226]: Starting session: shell on pts/4 for audit-009 from 10.28.0.19 port 59945 id 0
Jun 16 12:45:16 SCADA sshd[40861]: Connection from 10.7.0.42 port 40325 on 10.2.0.10 port 22 rdomain ""
Jun 16 12:45:16 SCADA sshd[40861]: Accepted key SHA256:YUo0PDZvDLvSV+eQ7hZFktSImRNXEyF8X1t3/2K+6dk found at /home/maintainer-032/.ssh/authorized_keys:2
Jun 16 12:45:16 SCADA sshd[40861]: Postponed publickey for maintainer-032 from 10.7.0.42 port 40325 ssh2 [preauth]
Jun 16 12:45:16 SCADA sshd[40861]: Accepted key SHA256:YUo0PDZvDLvSV+eQ7hZFktSImRNXEyF8X1t3/2K+6dk found at /home/maintainer-032/.ssh/authorized_keys:2
Jun 16 12:45:16 SCADA sshd[40861]: Accepted publickey for maintainer-032 from 10.7.0.42 port 40325 ssh2: SHA256:YUo0PDZvDLvSV+eQ7hZFktSImRNXEyF8X1t3/2K+6dk
Jun 16 12:45:16 SCADA sshd[40861]: pam_unix(sshd:session): session opened for user maintainer-032(uid=1032) by (uid=0)
Jun 16 12:45:16 SCADA sshd[40861]: User child is on pid 34712
Jun 16 12:45:16 SCADA sshd[34712]: Starting session: shell on pts/2 for maintainer-032 from 10.7.0.42 port 40325 id 0
Jun 16 17:34:19 SCADA sshd[37651]: Connection from 10.7.0.11 port 45242 on 10.2.0.10 port 22 rdomain ""
Jun 16 17:34:19 SCADA sshd[37651]: Accepted key SHA256:AJ+5xX/lSKIqcZi188PtL1mgl2ZLwQuYl2fgOkHEJI4 found at /home/maintainer-001/.ssh/authorized_keys:2
Jun 16 17:34:19 SCADA sshd[37651]: Postponed publickey for maintainer-001 from 10.7.0.11 port 45242 ssh2 [preauth]
Jun 16 17:34:19 SCADA sshd[37651]: Accepted key SHA256:AJ+5xX/lSKIqcZi188PtL1mgl2ZLwQuYl2fgOkHEJI4 found at /home/maintainer-001/.ssh/authorized_keys:2
Jun 16 17:34:19 SCADA sshd[37651]: Accepted publickey for maintainer-001 from 10.7.0.11 port 45242 ssh2: SHA256:AJ+5xX/lSKIqcZi188PtL1mgl2ZLwQuYl2fgOkHEJI4
Jun 16 17:34:19 SCADA sshd[37651]: pam_unix(sshd:session): session opened for user maintainer-001(uid=1001) by (uid=0)
Jun 16 17:34:19 SCADA sshd[37651]: User child is on pid 35119
Jun 16 17:34:19 SCADA sshd[35119]: Starting session: shell on pts/2 for maintainer-001 from 10.7.0.11 port 45242 id 0
Jun 17 09:20:13 SCADA sshd[41252]: Connection from 10.7.0.30 port 50843 on 10.2.0.10 port 22 rdomain ""
Jun 17 09:20:13 SCADA sshd[41252]: Accepted key SHA256:PTUvjdcBKPtoUWbxYFYJWiiC+BG7DwujVEgFpPR73+k found at /home/maintainer-020/.ssh/authorized_keys:4
Jun 17 09:20:13 SCADA sshd[41252]: Postponed publickey for maintainer-020 from 10.7.0.30 port 50843 ssh2 [preauth]
Jun 17 09:20:13 SCADA sshd[41252]: Accepted key SHA256:PTUvjdcBKPtoUWbxYFYJWiiC+BG7DwujVEgFpPR73+k found at /home/maintainer-020/.ssh/authorized_keys:4
Jun 17 09:20:13 SCADA sshd[41252]: Accepted publickey for maintainer-020 from 10.7.0.30 port 50843 ssh2: SHA256:PTUvjdcBKPtoUWbxYFYJWiiC+BG7DwujVEgFpPR73+k
Jun 17 09:20:13 SCADA sshd[41252]: pam_unix(sshd:session): session opened for user maintainer-020(uid=1020) by (uid=0)
Jun 17 09:20:13 SCADA sshd[41252]: User child is on pid 23837
Jun 17 09:20:13 SCADA sshd[23837]: Starting session: shell on pts/4 for maintainer-020 from 10.7.0.30 port 50843 id 0
Jun 17 14:17:39 SCADA sshd[44793]: Connection from 10.28.0.49 port 50259 on 10.2.0.10 port 22 rdomain ""
Jun 17 14:17:39 SCADA sshd[44793]: Accepted key ED25519 SHA256:eIST/WPwryUKiaT5bDpYdjnoxn27tZ+jOt53ZVankcg found at /home/audit-039/.ssh/authorized_keys:1
Jun 17 14:17:39 SCADA sshd[44793]: Postponed publickey for audit-039 from 10.28.0.49 port 50259 ssh2 [preauth]
Jun 17 14:17:39 SCADA sshd[44793]: Accepted key ED25519 SHA256:eIST/WPwryUKiaT5bDpYdjnoxn27tZ+jOt53ZVankcg found at /home/audit-039/.ssh/authorized_keys:1
Jun 17 14:17:39 SCADA sshd[44793]: Accepted publickey for audit-039 from 10.28.0.49 port 50259 ssh2: ED25519 SHA256:eIST/WPwryUKiaT5bDpYdjnoxn27tZ+jOt53ZVankcg
Jun 17 14:17:39 SCADA sshd[44793]: pam_unix(sshd:session): session opened for user audit-039(uid=1089) by (uid=0)
Jun 17 14:17:39 SCADA sshd[44793]: User child is on pid 36619
Jun 17 14:17:39 SCADA sshd[36619]: Starting session: shell on pts/2 for audit-039 from 10.28.0.49 port 50259 id 0
Jun 17 14:45:07 SCADA sshd[63817]: Connection from 10.7.0.43 port 49202 on 10.2.0.10 port 22 rdomain ""
Jun 17 14:45:07 SCADA sshd[63817]: Accepted key SHA256:j7mU3FqIk6iqOaTBxGqLDB+uY0QcchHr8LFchmNqr1M found at /home/maintainer-033/.ssh/authorized_keys:2
Jun 17 14:45:07 SCADA sshd[63817]: Postponed publickey for maintainer-033 from 10.7.0.43 port 49202 ssh2 [preauth]
Jun 17 14:45:07 SCADA sshd[63817]: Accepted key SHA256:j7mU3FqIk6iqOaTBxGqLDB+uY0QcchHr8LFchmNqr1M found at /home/maintainer-033/.ssh/authorized_keys:2
Jun 17 14:45:07 SCADA sshd[63817]: Accepted publickey for maintainer-033 from 10.7.0.43 port 49202 ssh2: SHA256:j7mU3FqIk6iqOaTBxGqLDB+uY0QcchHr8LFchmNqr1M
Jun 17 14:45:07 SCADA sshd[63817]: pam_unix(sshd:session): session opened for user maintainer-033(uid=1033) by (uid=0)
Jun 17 14:45:07 SCADA sshd[63817]: User child is on pid 28723
Jun 17 14:45:07 SCADA sshd[28723]: Starting session: shell on pts/3 for maintainer-033 from 10.7.0.43 port 49202 id 0
Jun 17 15:47:47 SCADA sshd[19251]: Connection from 10.28.0.23 port 50408 on 10.2.0.10 port 22 rdomain ""
Jun 17 15:47:47 SCADA sshd[19251]: Accepted key ED25519 SHA256:q1tMDLj1ZoNiZKWhiXkQihC2YL9UzNkDroxp9DRhFIY found at /home/audit-013/.ssh/authorized_keys:4
Jun 17 15:47:47 SCADA sshd[19251]: Postponed publickey for audit-013 from 10.28.0.23 port 50408 ssh2 [preauth]
Jun 17 15:47:47 SCADA sshd[19251]: Accepted key ED25519 SHA256:q1tMDLj1ZoNiZKWhiXkQihC2YL9UzNkDroxp9DRhFIY found at /home/audit-013/.ssh/authorized_keys:4
Jun 17 15:47:47 SCADA sshd[19251]: Accepted publickey for audit-013 from 10.28.0.23 port 50408 ssh2: ED25519 SHA256:q1tMDLj1ZoNiZKWhiXkQihC2YL9UzNkDroxp9DRhFIY
Jun 17 15:47:47 SCADA sshd[19251]: pam_unix(sshd:session): session opened for user audit-013(uid=1063) by (uid=0)
Jun 17 15:47:47 SCADA sshd[19251]: User child is on pid 45131
Jun 17 15:47:47 SCADA sshd[45131]: Starting session: shell on pts/3 for audit-013 from 10.28.0.23 port 50408 id 0
Jun 18 11:20:50 SCADA sshd[36704]: Connection from 10.28.0.33 port 47198 on 10.2.0.10 port 22 rdomain ""
Jun 18 11:20:50 SCADA sshd[36704]: Accepted key ED25519 SHA256:Gc5+8GVkPxHZI+wfR98+6tJ92g3qO2vTtO0mperrg9A found at /home/audit-023/.ssh/authorized_keys:4
Jun 18 11:20:50 SCADA sshd[36704]: Postponed publickey for audit-023 from 10.28.0.33 port 47198 ssh2 [preauth]
Jun 18 11:20:50 SCADA sshd[36704]: Accepted key ED25519 SHA256:Gc5+8GVkPxHZI+wfR98+6tJ92g3qO2vTtO0mperrg9A found at /home/audit-023/.ssh/authorized_keys:4
Jun 18 11:20:50 SCADA sshd[36704]: Accepted publickey for audit-023 from 10.28.0.33 port 47198 ssh2: ED25519 SHA256:Gc5+8GVkPxHZI+wfR98+6tJ92g3qO2vTtO0mperrg9A
Jun 18 11:20:50 SCADA sshd[36704]: pam_unix(sshd:session): session opened for user audit-023(uid=1073) by (uid=0)
Jun 18 11:20:50 SCADA sshd[36704]: User child is on pid 50060
Jun 18 11:20:50 SCADA sshd[50060]: Starting session: shell on pts/7 for audit-023 from 10.28.0.33 port 47198 id 0
Jun 18 16:52:06 SCADA sshd[55877]: Connection from 10.28.0.45 port 44267 on 10.2.0.10 port 22 rdomain ""
Jun 18 16:52:06 SCADA sshd[55877]: Accepted key ED25519 SHA256:JN1+WOJtzM8U+FlsVhTxumTYqtUbk7Mq4JUD4Cef1C8 found at /home/audit-035/.ssh/authorized_keys:3
Jun 18 16:52:06 SCADA sshd[55877]: Postponed publickey for audit-035 from 10.28.0.45 port 44267 ssh2 [preauth]
Jun 18 16:52:06 SCADA sshd[55877]: Accepted key ED25519 SHA256:JN1+WOJtzM8U+FlsVhTxumTYqtUbk7Mq4JUD4Cef1C8 found at /home/audit-035/.ssh/authorized_keys:3
Jun 18 16:52:06 SCADA sshd[55877]: Accepted publickey for audit-035 from 10.28.0.45 port 44267 ssh2: ED25519 SHA256:JN1+WOJtzM8U+FlsVhTxumTYqtUbk7Mq4JUD4Cef1C8
Jun 18 16:52:06 SCADA sshd[55877]: pam_unix(sshd:session): session opened for user audit-035(uid=1085) by (uid=0)
Jun 18 16:52:06 SCADA sshd[55877]: User child is on pid 40975
Jun 18 16:52:06 SCADA sshd[40975]: Starting session: shell on pts/2 for audit-035 from 10.28.0.45 port 44267 id 0
Jun 18 16:54:37 SCADA sshd[42590]: Connection from 10.7.0.26 port 45691 on 10.2.0.10 port 22 rdomain ""
Jun 18 16:54:37 SCADA sshd[42590]: Accepted key SHA256:pnq5TWMmQ4ez/FeQ7+TiX73WENwsCVMOL/wXGefgSlQ found at /home/maintainer-016/.ssh/authorized_keys:5
Jun 18 16:54:37 SCADA sshd[42590]: Postponed publickey for maintainer-016 from 10.7.0.26 port 45691 ssh2 [preauth]
Jun 18 16:54:37 SCADA sshd[42590]: Accepted key SHA256:pnq5TWMmQ4ez/FeQ7+TiX73WENwsCVMOL/wXGefgSlQ found at /home/maintainer-016/.ssh/authorized_keys:5
Jun 18 16:54:37 SCADA sshd[42590]: Accepted publickey for maintainer-016 from 10.7.0.26 port 45691 ssh2: SHA256:pnq5TWMmQ4ez/FeQ7+TiX73WENwsCVMOL/wXGefgSlQ
Jun 18 16:54:37 SCADA sshd[42590]: pam_unix(sshd:session): session opened for user maintainer-016(uid=1016) by (uid=0)
Jun 18 16:54:37 SCADA sshd[42590]: User child is on pid 16718
Jun 18 16:54:37 SCADA sshd[16718]: Starting session: shell on pts/3 for maintainer-016 from 10.7.0.26 port 45691 id 0
Jun 18 18:00:36 SCADA sshd[11397]: Connection from 10.7.0.39 port 58500 on 10.2.0.10 port 22 rdomain ""
Jun 18 18:00:36 SCADA sshd[11397]: Accepted key SHA256:kf8RIyvPUm70WhCAfHwYrzenv7eR9coEX5AaNySS3Ko found at /home/maintainer-029/.ssh/authorized_keys:3
Jun 18 18:00:36 SCADA sshd[11397]: Postponed publickey for maintainer-029 from 10.7.0.39 port 58500 ssh2 [preauth]
Jun 18 18:00:36 SCADA sshd[11397]: Accepted key SHA256:kf8RIyvPUm70WhCAfHwYrzenv7eR9coEX5AaNySS3Ko found at /home/maintainer-029/.ssh/authorized_keys:3
Jun 18 18:00:36 SCADA sshd[11397]: Accepted publickey for maintainer-029 from 10.7.0.39 port 58500 ssh2: SHA256:kf8RIyvPUm70WhCAfHwYrzenv7eR9coEX5AaNySS3Ko
Jun 18 18:00:36 SCADA sshd[11397]: pam_unix(sshd:session): session opened for user maintainer-029(uid=1029) by (uid=0)
Jun 18 18:00:36 SCADA sshd[11397]: User child is on pid 39977
Jun 18 18:00:36 SCADA sshd[39977]: Starting session: shell on pts/4 for maintainer-029 from 10.7.0.39 port 58500 id 0
Jun 18 21:04:45 SCADA sshd[51483]: Connection from 10.7.0.21 port 50660 on 10.2.0.10 port 22 rdomain ""
Jun 18 21:04:45 SCADA sshd[51483]: Accepted key SHA256:oSfsFeg7+Dy7T0iPDuFauSEk05ej7Ymtu9DpYoNlnC0 found at /home/maintainer-011/.ssh/authorized_keys:5
Jun 18 21:04:45 SCADA sshd[51483]: Postponed publickey for maintainer-011 from 10.7.0.21 port 50660 ssh2 [preauth]
Jun 18 21:04:45 SCADA sshd[51483]: Accepted key SHA256:oSfsFeg7+Dy7T0iPDuFauSEk05ej7Ymtu9DpYoNlnC0 found at /home/maintainer-011/.ssh/authorized_keys:5
Jun 18 21:04:45 SCADA sshd[51483]: Accepted publickey for maintainer-011 from 10.7.0.21 port 50660 ssh2: SHA256:oSfsFeg7+Dy7T0iPDuFauSEk05ej7Ymtu9DpYoNlnC0
Jun 18 21:04:45 SCADA sshd[51483]: pam_unix(sshd:session): session opened for user maintainer-011(uid=1011) by (uid=0)
Jun 18 21:04:45 SCADA sshd[51483]: User child is on pid 45161
Jun 18 21:04:45 SCADA sshd[45161]: Starting session: shell on pts/2 for maintainer-011 from 10.7.0.21 port 50660 id 0