Jul 18 15:11:28 boco-audit sshd[18945]: Accepted password for root from 10.209.105.228 port 13899 ssh2
Jul 18 15:11:28 boco-audit sshd[18945]: pam_unix(sshd:session): session opened for user root by (uid=0)
Jul 18 15:29:13 boco-audit sshd[18945]: pam_unix(sshd:session): session closed for user root
Jul 18 15:44:38 boco-audit sshd[21790]: Accepted password for root from 10.209.105.228 port 12543 ssh2
Jul 18 15:44:38 boco-audit sshd[21790]: pam_unix(sshd:session): session opened for user root by (uid=0)
Jul 18 15:46:51 boco-audit sshd[22013]: Accepted password for root from 10.209.105.228 port 13749 ssh2
Jul 18 15:46:51 boco-audit sshd[22013]: pam_unix(sshd:session): session opened for user root by (uid=0)
Jul 18 15:49:36 boco-audit sshd[21790]: pam_unix(sshd:session): session closed for user root
Jul 18 15:53:55 boco-audit sshd[22013]: pam_unix(sshd:session): session closed for user root
Jul 18 17:50:28 boco-audit sshd[32601]: Accepted password for root from 10.209.105.228 port 13611 ssh2
Jul 18 17:50:28 boco-audit sshd[32601]: pam_unix(sshd:session): session opened for user root by (uid=0)
Jul 18 17:51:44 boco-audit sshd[32601]: error: select: Bad file descriptor
Jul 18 17:51:44 boco-audit sshd[32601]: pam_unix(sshd:session): session closed for user root
Jul 18 17:51:47 boco-audit sshd[412]: Accepted password for root from 10.209.105.228 port 13862 ssh2
Jul 18 17:51:47 boco-audit sshd[412]: pam_unix(sshd:session): session opened for user root by (uid=0)
Jul 18 17:51:51 boco-audit sshd[412]: error: select: Bad file descriptor
Jul 18 17:51:51 boco-audit sshd[412]: pam_unix(sshd:session): session closed for user root
Jul 18 17:51:53 boco-audit sshd[467]: Accepted password for root from 10.209.105.228 port 12846 ssh2
Jul 18 17:51:53 boco-audit sshd[467]: pam_unix(sshd:session): session opened for user root by (uid=0)
Jul 18 17:52:00 boco-audit sshd[467]: error: select: Bad file descriptor
Jul 18 17:52:00 boco-audit sshd[467]: pam_unix(sshd:session): session closed for user root
Jul 18 17:52:02 boco-audit sshd[538]: Accepted password for root from 10.209.105.228 port 12786 ssh2
Jul 18 17:52:02 boco-audit sshd[538]: pam_unix(sshd:session): session opened for user root by (uid=0)
Jul 18 18:36:39 boco-audit sshd[2441]: Server listening on :: port 22.
Jul 18 18:36:39 boco-audit sshd[2441]: error: Bind to port 22 on 0.0.0.0 failed: Address already in use.
Jul 18 18:36:43 boco-audit su: pam_unix(su-l:session): session opened for user postgres by (uid=0)
Jul 18 18:36:43 boco-audit su: pam_unix(su-l:session): session closed for user postgres
Jul 19 11:44:54 boco-audit sshd[25015]: Accepted password for root from 10.209.105.228 port 13217 ssh2
Jul 19 11:44:54 boco-audit sshd[25015]: pam_unix(sshd:session): session opened for user root by (uid=0)
Jul 19 11:45:03 boco-audit sshd[25059]: Accepted password for root from 10.209.105.228 port 12656 ssh2
Jul 19 11:45:03 boco-audit sshd[25059]: pam_unix(sshd:session): session opened for user root by (uid=0)
Jul 19 11:45:07 boco-audit sshd[25059]: pam_unix(sshd:session): session closed for user root
Jul 19 11:45:11 boco-audit sshd[25015]: pam_unix(sshd:session): session closed for user root
Jul 19 12:27:26 boco-audit sshd[28660]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=boco-tba  user=guobo
Jul 19 12:27:27 boco-audit sshd[28660]: Failed password for guobo from 10.204.96.48 port 32776 ssh2
Jul 19 12:27:39 boco-audit sshd[28661]: Connection closed by 10.204.96.48
Jul 19 15:04:13 boco-audit sshd[9512]: Accepted password for root from 10.209.105.228 port 13297 ssh2
Jul 19 15:04:13 boco-audit sshd[9512]: pam_unix(sshd:session): session opened for user root by (uid=0)
Jul 19 15:10:55 boco-audit sshd[9512]: pam_unix(sshd:session): session closed for user root
Jul 19 15:14:51 boco-audit sshd[10611]: Accepted password for root from 10.209.105.228 port 13364 ssh2
Jul 19 15:14:51 boco-audit sshd[10611]: pam_unix(sshd:session): session opened for user root by (uid=0)
Jul 19 15:14:53 boco-audit sshd[10611]: subsystem request for sftp