Jan 15 00:35:59 server-admin sshd[13082]: Accepted password for server-admin from 54.250.249.165 port 65088 ssh2
Jan 15 00:35:59 server-admin sshd[13082]: pam_unix(sshd:session): session opened for user server-admin by (uid=0)
Jan 15 00:35:59 server-admin systemd-logind[1500]: New session 152996 of user server-admin.
Jan 15 16:22:34 server-admin sshd[17926]: Accepted password for server-admin from 54.250.249.165 port 50960 ssh2
Jan 15 16:22:34 server-admin sshd[17926]: pam_unix(sshd:session): session opened for user server-admin by (uid=0)
Jan 15 16:22:34 server-admin systemd-logind[1500]: New session 153388 of user server-admin.
Jan 15 19:55:48 server-admin sshd[18782]: Accepted password for server-admin from 54.250.249.165 port 51464 ssh2
Jan 15 19:55:48 server-admin sshd[18782]: pam_unix(sshd:session): session opened for user server-admin by (uid=0)
Jan 15 19:55:48 server-admin systemd-logind[1500]: New session 153456 of user server-admin.
Jan 15 19:56:29 server-admin sshd[18920]: Accepted password for server-admin from 54.250.249.165 port 51466 ssh2
Jan 15 19:56:29 server-admin sshd[18920]: pam_unix(sshd:session): session opened for user server-admin by (uid=0)
Jan 15 19:56:29 server-admin systemd-logind[1500]: New session 153457 of user server-admin.
Jan 15 19:56:49 server-admin sudo: server-admin : TTY=pts/0 ; PWD=/home/server-admin ; USER=root ; COMMAND=/bin/su
Jan 15 19:56:49 server-admin sudo: pam_unix(sudo:session): session opened for user root by server-admin(uid=0)
Jan 15 19:56:49 server-admin su[19003]: Successful su for root by root
Jan 15 19:56:49 server-admin su[19003]: + /dev/pts/0 root:root
Jan 15 19:56:49 server-admin su[19003]: pam_unix(su:session): session opened for user root by server-admin(uid=0)
Jan 15 19:56:49 server-admin su[19003]: pam_systemd(su:session): Cannot create session: Already running in a session
Jan 15 20:30:29 server-admin sshd[19162]: Accepted password for server-admin from 54.250.249.165 port 51547 ssh2
Jan 15 20:30:29 server-admin sshd[19162]: pam_unix(sshd:session): session opened for user server-admin by (uid=0)
Jan 15 20:30:29 server-admin systemd-logind[1500]: New session 153470 of user server-admin.
Jan 15 20:36:36 server-admin sshd[19263]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.250.249.165  user=root
Jan 15 20:36:38 server-admin sshd[19263]: Failed password for root from 54.250.249.165 port 51556 ssh2
Jan 15 20:36:47 server-admin sshd[19263]: Connection closed by authenticating user root 54.250.249.165 port 51556 [preauth]
Jan 15 20:37:22 server-admin sshd[6101]: Received signal 15; terminating.
Jan 15 20:37:22 server-admin sshd[19280]: Server listening on 0.0.0.0 port 156.
Jan 15 20:37:22 server-admin sshd[19280]: Server listening on :: port 156.
Jan 15 20:37:26 server-admin sshd[19288]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.250.249.165  user=root
Jan 15 20:37:28 server-admin sshd[19288]: Failed password for root from 54.250.249.165 port 51558 ssh2
Jan 15 20:39:08 server-admin sshd[19288]: Accepted password for root from 54.250.249.165 port 51558 ssh2
Jan 15 20:39:08 server-admin sshd[19288]: pam_unix(sshd:session): session opened for user root by (uid=0)
Jan 15 20:39:08 server-admin systemd-logind[1500]: New session 153472 of user root.
Jan 15 20:39:08 server-admin systemd: pam_unix(systemd-user:session): session opened for user root by (uid=0)
Jan 15 21:04:51 server-admin sshd[19486]: Accepted password for server-admin from 54.250.249.165 port 51627 ssh2
Jan 15 21:04:51 server-admin sshd[19486]: pam_unix(sshd:session): session opened for user server-admin by (uid=0)
Jan 15 21:04:51 server-admin systemd-logind[1500]: New session 153482 of user server-admin.
Jan 15 22:16:28 server-admin sshd[20338]: Accepted password for server-admin from 54.250.249.165 port 51801 ssh2
Jan 15 22:16:28 server-admin sshd[20338]: pam_unix(sshd:session): session opened for user server-admin by (uid=0)
Jan 15 22:16:28 server-admin systemd-logind[1500]: New session 153507 of user server-admin.
Jan 15 22:16:40 server-admin sshd[20472]: Accepted password for server-admin from 54.250.249.165 port 51802 ssh2
Jan 15 22:16:40 server-admin sshd[20472]: pam_unix(sshd:session): session opened for user server-admin by (uid=0)
Jan 15 22:16:40 server-admin systemd-logind[1500]: New session 153508 of user server-admin.
Jan 15 22:26:43 server-admin sshd[20631]: Accepted password for server-admin from 54.250.249.165 port 51820 ssh2
Jan 15 22:26:43 server-admin sshd[20631]: pam_unix(sshd:session): session opened for user server-admin by (uid=0)
Jan 15 22:26:43 server-admin systemd-logind[1500]: New session 153513 of user server-admin.
Jan 15 22:26:46 server-admin sshd[20631]: pam_unix(sshd:session): session closed for user server-admin
Jan 15 22:26:46 server-admin systemd-logind[1500]: Removed session 153513.
Jan 15 23:15:32 server-admin sshd[19288]: pam_unix(sshd:session): session closed for user root
Jan 15 23:15:32 server-admin systemd-logind[1500]: Removed session 153472.
Jan 15 23:30:34 server-admin sshd[13082]: pam_unix(sshd:session): session closed for user server-admin
Jan 15 23:30:34 server-admin sshd[14266]: pam_unix(sshd:session): session closed for user server-admin
Jan 15 23:30:34 server-admin systemd-logind[1500]: Removed session 152996.
Jan 15 23:30:34 server-admin sshd[17926]: pam_unix(sshd:session): session closed for user server-admin
Jan 15 23:30:34 server-admin sshd[18782]: pam_unix(sshd:session): session closed for user server-admin
Jan 15 23:30:34 server-admin systemd-logind[1500]: Removed session 153084.
Jan 15 23:30:34 server-admin systemd-logind[1500]: Removed session 153456.
Jan 15 23:30:34 server-admin systemd-logind[1500]: Removed session 153388.