Apr 20 10:14:14 ip-172-16-3-10 polkitd[824]: Loading rules from directory /etc/polkit-1/rules.d
Apr 20 10:14:14 ip-172-16-3-10 polkitd[824]: Loading rules from directory /usr/share/polkit-1/rules.d
Apr 20 10:14:14 ip-172-16-3-10 polkitd[824]: Finished loading, compiling and executing 4 rules
Apr 20 10:14:14 ip-172-16-3-10 polkitd[824]: Acquired the name org.freedesktop.PolicyKit1 on the system bus
Apr 20 10:14:15 ip-172-16-3-10 useradd[912]: new group: name=rocky, GID=1000
Apr 20 10:14:15 ip-172-16-3-10 useradd[912]: new user: name=rocky, UID=1000, GID=1000, home=/home/rocky, shell=/bin/bash
Apr 20 10:14:15 ip-172-16-3-10 useradd[912]: add 'rocky' to group 'adm'
Apr 20 10:14:15 ip-172-16-3-10 useradd[912]: add 'rocky' to group 'systemd-journal'
Apr 20 10:14:15 ip-172-16-3-10 useradd[912]: add 'rocky' to shadow group 'adm'
Apr 20 10:14:15 ip-172-16-3-10 useradd[912]: add 'rocky' to shadow group 'systemd-journal'
Apr 20 10:14:16 ip-172-16-3-10 sshd[927]: Server listening on 0.0.0.0 port 22.
Apr 20 10:14:16 ip-172-16-3-10 sshd[927]: Server listening on :: port 22.
Apr 20 10:14:38 ip-172-16-3-10 sshd[4551]: Accepted publickey for rocky from 172.16.0.143 port 51632 ssh2: ED25519 SHA256:OBWBPoDNvbh4mbDy3i6fHnCrYINjEbKbR+Zz4TOtFIo
Apr 20 10:14:39 ip-172-16-3-10 systemd[4556]: pam_unix(systemd-user:session): session opened for user rocky by (uid=0)
Apr 20 10:14:39 ip-172-16-3-10 sshd[4551]: pam_unix(sshd:session): session opened for user rocky by (uid=0)
Apr 20 10:14:43 ip-172-16-3-10 sshd[4586]: Accepted publickey for rocky from 172.16.0.143 port 36838 ssh2: ED25519 SHA256:OBWBPoDNvbh4mbDy3i6fHnCrYINjEbKbR+Zz4TOtFIo
Apr 20 10:14:43 ip-172-16-3-10 sshd[4586]: pam_unix(sshd:session): session opened for user rocky by (uid=0)
Apr 20 10:14:43 ip-172-16-3-10 sshd[4666]: Accepted publickey for rocky from 172.16.0.143 port 36840 ssh2: ED25519 SHA256:OBWBPoDNvbh4mbDy3i6fHnCrYINjEbKbR+Zz4TOtFIo
Apr 20 10:14:43 ip-172-16-3-10 sshd[4666]: pam_unix(sshd:session): session opened for user rocky by (uid=0)
Apr 20 10:14:44 ip-172-16-3-10 sudo[4810]:   rocky : TTY=pts/0 ; PWD=/home/rocky ; USER=root ; COMMAND=/bin/bash /tmp/salt/wait_for_salt.sh
Apr 20 10:14:44 ip-172-16-3-10 sudo[4810]: pam_unix(sudo:session): session opened for user root by rocky(uid=1000)
Apr 20 10:16:02 ip-172-16-3-10 sudo[4810]: pam_unix(sudo:session): session closed for user root
Apr 20 10:16:02 ip-172-16-3-10 sshd[4981]: Accepted publickey for rocky from 172.16.0.143 port 34792 ssh2: ED25519 SHA256:OBWBPoDNvbh4mbDy3i6fHnCrYINjEbKbR+Zz4TOtFIo
Apr 20 10:16:02 ip-172-16-3-10 sshd[4981]: pam_unix(sshd:session): session opened for user rocky by (uid=0)
Apr 20 10:16:02 ip-172-16-3-10 sudo[5057]:   rocky : TTY=pts/0 ; PWD=/home/rocky ; USER=root ; COMMAND=/bin/rm -rf /root/salt
Apr 20 10:16:02 ip-172-16-3-10 sudo[5057]: pam_unix(sudo:session): session opened for user root by rocky(uid=1000)
Apr 20 10:16:02 ip-172-16-3-10 sudo[5057]: pam_unix(sudo:session): session closed for user root
Apr 20 10:16:02 ip-172-16-3-10 sudo[5060]:   rocky : TTY=pts/0 ; PWD=/home/rocky ; USER=root ; COMMAND=/bin/mv /tmp/salt /root
Apr 20 10:16:02 ip-172-16-3-10 sudo[5060]: pam_unix(sudo:session): session opened for user root by rocky(uid=1000)
Apr 20 10:16:02 ip-172-16-3-10 sudo[5060]: pam_unix(sudo:session): session closed for user root
Apr 20 10:16:02 ip-172-16-3-10 sudo[5063]:   rocky : TTY=pts/0 ; PWD=/home/rocky ; USER=root ; COMMAND=/bin/bash /root/salt/first_deployment_highstate.sh
Apr 20 10:16:02 ip-172-16-3-10 sudo[5063]: pam_unix(sudo:session): session opened for user root by rocky(uid=1000)
Apr 20 10:16:09 ip-172-16-3-10 groupadd[5204]: group added to /etc/group: name=admin, GID=988
Apr 20 10:16:09 ip-172-16-3-10 groupadd[5204]: group added to /etc/gshadow: name=admin
Apr 20 10:16:09 ip-172-16-3-10 groupadd[5204]: new group: name=admin, GID=988
Apr 20 10:16:09 ip-172-16-3-10 useradd[5210]: new user: name=admin, UID=1001, GID=988, home=/home/admin, shell=/bin/bash
Apr 20 10:18:37 ip-172-16-3-10 sudo[5063]: pam_unix(sudo:session): session closed for user root
Apr 20 10:29:19 ip-172-16-3-10 sshd[4551]: pam_unix(sshd:session): session closed for user rocky
Apr 20 10:29:19 ip-172-16-3-10 sshd[4586]: pam_unix(sshd:session): session closed for user rocky
Apr 20 10:29:19 ip-172-16-3-10 sshd[4981]: pam_unix(sshd:session): session closed for user rocky
Apr 20 10:29:19 ip-172-16-3-10 sshd[4666]: pam_unix(sshd:session): session closed for user rocky
Apr 20 10:29:29 ip-172-16-3-10 systemd[4559]: pam_unix(systemd-user:session): session closed for user rocky
Apr 20 10:31:09 ip-172-16-3-10 sshd[5636]: Accepted publickey for root from 172.16.3.5 port 46246 ssh2: ED25519 SHA256:6TsFBgFR2thOEHhtyc0UK3XB/EtCMtalKb5UoO8+Zus
Apr 20 10:31:09 ip-172-16-3-10 systemd[5641]: pam_unix(systemd-user:session): session opened for user root by (uid=0)
Apr 20 10:31:09 ip-172-16-3-10 sshd[5636]: pam_unix(sshd:session): session opened for user root by (uid=0)
Apr 20 10:31:09 ip-172-16-3-10 sshd[5636]: pam_unix(sshd:session): session closed for user root
Apr 20 10:31:09 ip-172-16-3-10 sshd[5668]: Accepted publickey for root from 172.16.3.5 port 46252 ssh2: ED25519 SHA256:6TsFBgFR2thOEHhtyc0UK3XB/EtCMtalKb5UoO8+Zus
Apr 20 10:31:09 ip-172-16-3-10 sshd[5668]: pam_unix(sshd:session): session opened for user root by (uid=0)
Apr 20 10:31:09 ip-172-16-3-10 sshd[5668]: pam_unix(sshd:session): session closed for user root
Apr 20 10:31:09 ip-172-16-3-10 sshd[5689]: Accepted publickey for root from 172.16.3.5 port 46256 ssh2: ED25519 SHA256:6TsFBgFR2thOEHhtyc0UK3XB/EtCMtalKb5UoO8+Zus
Apr 20 10:31:09 ip-172-16-3-10 sshd[5689]: pam_unix(sshd:session): session opened for user root by (uid=0)
Apr 20 10:31:09 ip-172-16-3-10 sshd[5689]: pam_unix(sshd:session): session closed for user root
Apr 20 10:31:09 ip-172-16-3-10 sshd[5710]: Accepted publickey for root from 172.16.3.5 port 46272 ssh2: ED25519 SHA256:6TsFBgFR2thOEHhtyc0UK3XB/EtCMtalKb5UoO8+Zus
Apr 20 10:31:09 ip-172-16-3-10 sshd[5710]: pam_unix(sshd:session): session opened for user root by (uid=0)
Apr 20 10:31:10 ip-172-16-3-10 sshd[5710]: pam_unix(sshd:session): session closed for user root
Apr 20 10:31:10 ip-172-16-3-10 sshd[5731]: Accepted publickey for root from 172.16.3.5 port 46284 ssh2: ED25519 SHA256:6TsFBgFR2thOEHhtyc0UK3XB/EtCMtalKb5UoO8+Zus
Apr 20 10:31:10 ip-172-16-3-10 sshd[5731]: pam_unix(sshd:session): session opened for user root by (uid=0)
Apr 20 10:31:10 ip-172-16-3-10 sshd[5731]: pam_unix(sshd:session): session closed for user root
Apr 20 10:31:10 ip-172-16-3-10 sshd[5752]: Accepted publickey for root from 172.16.3.5 port 46288 ssh2: ED25519 SHA256:6TsFBgFR2thOEHhtyc0UK3XB/EtCMtalKb5UoO8+Zus
Apr 20 10:31:10 ip-172-16-3-10 sshd[5752]: pam_unix(sshd:session): session opened for user root by (uid=0)
Apr 20 10:31:10 ip-172-16-3-10 sshd[5752]: pam_unix(sshd:session): session closed for user root
Apr 20 10:31:10 ip-172-16-3-10 sshd[5773]: Accepted publickey for root from 172.16.3.5 port 46300 ssh2: ED25519 SHA256:6TsFBgFR2thOEHhtyc0UK3XB/EtCMtalKb5UoO8+Zus
Apr 20 10:31:10 ip-172-16-3-10 sshd[5773]: pam_unix(sshd:session): session opened for user root by (uid=0)
Apr 20 10:31:10 ip-172-16-3-10 sshd[5773]: pam_unix(sshd:session): session closed for user root
Apr 20 10:31:10 ip-172-16-3-10 sshd[5794]: Accepted publickey for root from 172.16.3.5 port 46312 ssh2: ED25519 SHA256:6TsFBgFR2thOEHhtyc0UK3XB/EtCMtalKb5UoO8+Zus
Apr 20 10:31:10 ip-172-16-3-10 sshd[5794]: pam_unix(sshd:session): session opened for user root by (uid=0)
Apr 20 10:31:10 ip-172-16-3-10 sshd[5794]: pam_unix(sshd:session): session closed for user root
Apr 20 10:31:11 ip-172-16-3-10 sshd[5819]: Accepted publickey for root from 172.16.3.5 port 49296 ssh2: ED25519 SHA256:6TsFBgFR2thOEHhtyc0UK3XB/EtCMtalKb5UoO8+Zus
Apr 20 10:31:11 ip-172-16-3-10 sshd[5819]: pam_unix(sshd:session): session opened for user root by (uid=0)
Apr 20 10:31:11 ip-172-16-3-10 sshd[5819]: pam_unix(sshd:session): session closed for user root
Apr 20 10:31:11 ip-172-16-3-10 sshd[5842]: Accepted publickey for root from 172.16.3.5 port 49312 ssh2: ED25519 SHA256:6TsFBgFR2thOEHhtyc0UK3XB/EtCMtalKb5UoO8+Zus
Apr 20 10:31:11 ip-172-16-3-10 sshd[5842]: pam_unix(sshd:session): session opened for user root by (uid=0)
Apr 20 10:31:11 ip-172-16-3-10 sshd[5842]: pam_unix(sshd:session): session closed for user root
Apr 20 10:31:11 ip-172-16-3-10 sshd[5866]: Accepted publickey for root from 172.16.3.5 port 49320 ssh2: ED25519 SHA256:6TsFBgFR2thOEHhtyc0UK3XB/EtCMtalKb5UoO8+Zus
Apr 20 10:31:11 ip-172-16-3-10 sshd[5866]: pam_unix(sshd:session): session opened for user root by (uid=0)
Apr 20 10:31:11 ip-172-16-3-10 sshd[5866]: pam_unix(sshd:session): session closed for user root
Apr 20 10:31:11 ip-172-16-3-10 sshd[5890]: Accepted publickey for root from 172.16.3.5 port 49324 ssh2: ED25519 SHA256:6TsFBgFR2thOEHhtyc0UK3XB/EtCMtalKb5UoO8+Zus
Apr 20 10:31:11 ip-172-16-3-10 sshd[5890]: pam_unix(sshd:session): session opened for user root by (uid=0)
Apr 20 10:31:11 ip-172-16-3-10 sshd[5890]: pam_unix(sshd:session): session closed for user root
Apr 20 10:31:14 ip-172-16-3-10 sshd[5912]: Accepted publickey for root from 172.16.3.5 port 49332 ssh2: ED25519 SHA256:6TsFBgFR2thOEHhtyc0UK3XB/EtCMtalKb5UoO8+Zus
Apr 20 10:31:14 ip-172-16-3-10 sshd[5912]: pam_unix(sshd:session): session opened for user root by (uid=0)
Apr 20 10:31:14 ip-172-16-3-10 sshd[5912]: pam_unix(sshd:session): session closed for user root
Apr 20 10:31:24 ip-172-16-3-10 systemd[5644]: pam_unix(systemd-user:session): session closed for user root
Apr 20 11:55:54 ip-172-16-3-10 sshd[5991]: Accepted publickey for root from 172.16.3.5 port 58664 ssh2: ED25519 SHA256:6TsFBgFR2thOEHhtyc0UK3XB/EtCMtalKb5UoO8+Zus
Apr 20 11:55:54 ip-172-16-3-10 systemd[5996]: pam_unix(systemd-user:session): session opened for user root by (uid=0)
Apr 20 11:55:55 ip-172-16-3-10 sshd[5991]: pam_unix(sshd:session): session opened for user root by (uid=0)
Apr 20 11:55:55 ip-172-16-3-10 sshd[5991]: pam_unix(sshd:session): session closed for user root
Apr 20 11:55:55 ip-172-16-3-10 sshd[6024]: Accepted publickey for root from 172.16.3.5 port 58666 ssh2: ED25519 SHA256:6TsFBgFR2thOEHhtyc0UK3XB/EtCMtalKb5UoO8+Zus
Apr 20 11:55:55 ip-172-16-3-10 sshd[6024]: pam_unix(sshd:session): session opened for user root by (uid=0)
Apr 20 11:55:55 ip-172-16-3-10 sshd[6024]: pam_unix(sshd:session): session closed for user root
Apr 20 11:55:55 ip-172-16-3-10 sshd[6046]: Accepted publickey for root from 172.16.3.5 port 58668 ssh2: ED25519 SHA256:6TsFBgFR2thOEHhtyc0UK3XB/EtCMtalKb5UoO8+Zus
Apr 20 11:55:55 ip-172-16-3-10 sshd[6046]: pam_unix(sshd:session): session opened for user root by (uid=0)
Apr 20 11:55:55 ip-172-16-3-10 sshd[6046]: pam_unix(sshd:session): session closed for user root
Apr 20 11:55:55 ip-172-16-3-10 sshd[6068]: Accepted publickey for root from 172.16.3.5 port 58672 ssh2: ED25519 SHA256:6TsFBgFR2thOEHhtyc0UK3XB/EtCMtalKb5UoO8+Zus
Apr 20 11:55:55 ip-172-16-3-10 sshd[6068]: pam_unix(sshd:session): session opened for user root by (uid=0)
Apr 20 11:55:55 ip-172-16-3-10 sshd[6068]: pam_unix(sshd:session): session closed for user root
Apr 20 11:55:55 ip-172-16-3-10 sshd[6089]: Accepted publickey for root from 172.16.3.5 port 58684 ssh2: ED25519 SHA256:6TsFBgFR2thOEHhtyc0UK3XB/EtCMtalKb5UoO8+Zus
Apr 20 11:55:55 ip-172-16-3-10 sshd[6089]: pam_unix(sshd:session): session opened for user root by (uid=0)
Apr 20 11:55:55 ip-172-16-3-10 sshd[6089]: pam_unix(sshd:session): session closed for user root
Apr 20 11:55:55 ip-172-16-3-10 sshd[6110]: Accepted publickey for root from 172.16.3.5 port 58688 ssh2: ED25519 SHA256:6TsFBgFR2thOEHhtyc0UK3XB/EtCMtalKb5UoO8+Zus
Apr 20 11:55:55 ip-172-16-3-10 sshd[6110]: pam_unix(sshd:session): session opened for user root by (uid=0)
Apr 20 11:55:56 ip-172-16-3-10 sshd[6110]: pam_unix(sshd:session): session closed for user root
Apr 20 11:55:56 ip-172-16-3-10 sshd[6131]: Accepted publickey for root from 172.16.3.5 port 58690 ssh2: ED25519 SHA256:6TsFBgFR2thOEHhtyc0UK3XB/EtCMtalKb5UoO8+Zus
Apr 20 11:55:56 ip-172-16-3-10 sshd[6131]: pam_unix(sshd:session): session opened for user root by (uid=0)
Apr 20 11:55:56 ip-172-16-3-10 sshd[6131]: pam_unix(sshd:session): session closed for user root
Apr 20 11:55:56 ip-172-16-3-10 sshd[6152]: Accepted publickey for root from 172.16.3.5 port 58706 ssh2: ED25519 SHA256:6TsFBgFR2thOEHhtyc0UK3XB/EtCMtalKb5UoO8+Zus
Apr 20 11:55:56 ip-172-16-3-10 sshd[6152]: pam_unix(sshd:session): session opened for user root by (uid=0)
Apr 20 11:55:56 ip-172-16-3-10 sshd[6152]: pam_unix(sshd:session): session closed for user root
Apr 20 11:55:56 ip-172-16-3-10 sshd[6177]: Accepted publickey for root from 172.16.3.5 port 58722 ssh2: ED25519 SHA256:6TsFBgFR2thOEHhtyc0UK3XB/EtCMtalKb5UoO8+Zus
Apr 20 11:55:56 ip-172-16-3-10 sshd[6177]: pam_unix(sshd:session): session opened for user root by (uid=0)
Apr 20 11:55:56 ip-172-16-3-10 sshd[6177]: pam_unix(sshd:session): session closed for user root
Apr 20 11:55:56 ip-172-16-3-10 sshd[6200]: Accepted publickey for root from 172.16.3.5 port 58732 ssh2: ED25519 SHA256:6TsFBgFR2thOEHhtyc0UK3XB/EtCMtalKb5UoO8+Zus
Apr 20 11:55:56 ip-172-16-3-10 sshd[6200]: pam_unix(sshd:session): session opened for user root by (uid=0)
Apr 20 11:55:56 ip-172-16-3-10 sshd[6200]: pam_unix(sshd:session): session closed for user root
Apr 20 11:56:06 ip-172-16-3-10 systemd[5999]: pam_unix(systemd-user:session): session closed for user root
Apr 20 12:07:59 ip-172-16-3-10 sshd[6243]: Accepted publickey for root from 172.16.3.5 port 35750 ssh2: ED25519 SHA256:6TsFBgFR2thOEHhtyc0UK3XB/EtCMtalKb5UoO8+Zus
Apr 20 12:07:59 ip-172-16-3-10 systemd[6248]: pam_unix(systemd-user:session): session opened for user root by (uid=0)
Apr 20 12:07:59 ip-172-16-3-10 sshd[6243]: pam_unix(sshd:session): session opened for user root by (uid=0)
Apr 20 12:07:59 ip-172-16-3-10 sshd[6243]: pam_unix(sshd:session): session closed for user root
Apr 20 12:07:59 ip-172-16-3-10 sshd[6277]: Accepted publickey for root from 172.16.3.5 port 35756 ssh2: ED25519 SHA256:6TsFBgFR2thOEHhtyc0UK3XB/EtCMtalKb5UoO8+Zus
Apr 20 12:07:59 ip-172-16-3-10 sshd[6277]: pam_unix(sshd:session): session opened for user root by (uid=0)
Apr 20 12:07:59 ip-172-16-3-10 sshd[6277]: pam_unix(sshd:session): session closed for user root
Apr 20 12:07:59 ip-172-16-3-10 sshd[6299]: Accepted publickey for root from 172.16.3.5 port 35768 ssh2: ED25519 SHA256:6TsFBgFR2thOEHhtyc0UK3XB/EtCMtalKb5UoO8+Zus
Apr 20 12:07:59 ip-172-16-3-10 sshd[6299]: pam_unix(sshd:session): session opened for user root by (uid=0)
Apr 20 12:07:59 ip-172-16-3-10 sshd[6299]: pam_unix(sshd:session): session closed for user root
Apr 20 12:07:59 ip-172-16-3-10 sshd[6320]: Accepted publickey for root from 172.16.3.5 port 35774 ssh2: ED25519 SHA256:6TsFBgFR2thOEHhtyc0UK3XB/EtCMtalKb5UoO8+Zus
Apr 20 12:08:00 ip-172-16-3-10 sshd[6320]: pam_unix(sshd:session): session opened for user root by (uid=0)
Apr 20 12:08:00 ip-172-16-3-10 sshd[6320]: pam_unix(sshd:session): session closed for user root
Apr 20 12:08:00 ip-172-16-3-10 sshd[6341]: Accepted publickey for root from 172.16.3.5 port 35784 ssh2: ED25519 SHA256:6TsFBgFR2thOEHhtyc0UK3XB/EtCMtalKb5UoO8+Zus
Apr 20 12:08:00 ip-172-16-3-10 sshd[6341]: pam_unix(sshd:session): session opened for user root by (uid=0)
Apr 20 12:08:00 ip-172-16-3-10 sshd[6341]: pam_unix(sshd:session): session closed for user root
Apr 20 12:08:00 ip-172-16-3-10 sshd[6362]: Accepted publickey for root from 172.16.3.5 port 35794 ssh2: ED25519 SHA256:6TsFBgFR2thOEHhtyc0UK3XB/EtCMtalKb5UoO8+Zus
Apr 20 12:08:00 ip-172-16-3-10 sshd[6362]: pam_unix(sshd:session): session opened for user root by (uid=0)
Apr 20 12:08:00 ip-172-16-3-10 sshd[6362]: pam_unix(sshd:session): session closed for user root
Apr 20 12:08:00 ip-172-16-3-10 sshd[6383]: Accepted publickey for root from 172.16.3.5 port 35806 ssh2: ED25519 SHA256:6TsFBgFR2thOEHhtyc0UK3XB/EtCMtalKb5UoO8+Zus
Apr 20 12:08:00 ip-172-16-3-10 sshd[6383]: pam_unix(sshd:session): session opened for user root by (uid=0)
Apr 20 12:08:00 ip-172-16-3-10 sshd[6383]: pam_unix(sshd:session): session closed for user root
Apr 20 12:08:00 ip-172-16-3-10 sshd[6404]: Accepted publickey for root from 172.16.3.5 port 35814 ssh2: ED25519 SHA256:6TsFBgFR2thOEHhtyc0UK3XB/EtCMtalKb5UoO8+Zus
Apr 20 12:08:00 ip-172-16-3-10 sshd[6404]: pam_unix(sshd:session): session opened for user root by (uid=0)
Apr 20 12:08:00 ip-172-16-3-10 sshd[6404]: pam_unix(sshd:session): session closed for user root
Apr 20 12:08:00 ip-172-16-3-10 sshd[6429]: Accepted publickey for root from 172.16.3.5 port 35824 ssh2: ED25519 SHA256:6TsFBgFR2thOEHhtyc0UK3XB/EtCMtalKb5UoO8+Zus
Apr 20 12:08:00 ip-172-16-3-10 sshd[6429]: pam_unix(sshd:session): session opened for user root by (uid=0)
Apr 20 12:08:00 ip-172-16-3-10 sshd[6429]: pam_unix(sshd:session): session closed for user root
Apr 20 12:08:11 ip-172-16-3-10 systemd[6251]: pam_unix(systemd-user:session): session closed for user root
Apr 20 12:09:20 ip-172-16-3-10 sshd[6459]: Accepted publickey for root from 172.16.3.5 port 37236 ssh2: ED25519 SHA256:6TsFBgFR2thOEHhtyc0UK3XB/EtCMtalKb5UoO8+Zus
Apr 20 12:09:20 ip-172-16-3-10 systemd[6464]: pam_unix(systemd-user:session): session opened for user root by (uid=0)
Apr 20 12:09:20 ip-172-16-3-10 sshd[6459]: pam_unix(sshd:session): session opened for user root by (uid=0)
Apr 20 12:09:20 ip-172-16-3-10 sshd[6459]: pam_unix(sshd:session): session closed for user root
Apr 20 12:09:20 ip-172-16-3-10 sshd[6491]: Accepted publickey for root from 172.16.3.5 port 37240 ssh2: ED25519 SHA256:6TsFBgFR2thOEHhtyc0UK3XB/EtCMtalKb5UoO8+Zus
Apr 20 12:09:20 ip-172-16-3-10 sshd[6491]: pam_unix(sshd:session): session opened for user root by (uid=0)
Apr 20 12:09:21 ip-172-16-3-10 sshd[6491]: pam_unix(sshd:session): session closed for user root
