Eu tenho um vServer com o Ubuntu 16.04 e plesk.
/var/log/auth.log mostra mensagens como abaixo a cada segundo.
Eu não tenho idéia do que está acontecendo aqui, mas parece que o meu servidor tenta abrir uma sessão ssh em outra porta, embora já tenha uma sessão em execução.
> Oct 25 10:38:57 h... sshd[6506]: Accepted publickey for root from
> 79.247... port 52067 ssh2: RSA SHA256:pru... Oct 25 10:38:57 h... sshd[6506]: pam_unix(sshd:session): session opened for user root by
> (uid=0) Oct 25 10:38:57 h... systemd-logind[285]: New session 2373897
> of user root. Oct 25 10:38:57 h... sshd[6506]:
> pam_systemd(sshd:session): Cannot create session: Already running in a
> session Oct 25 10:38:57 h... sshd[6506]: Received disconnect from
> 79.247... port 52067:11: disconnected by user Oct 25 10:38:57 h... sshd[6506]: Disconnected from 79.247... port 52067 Oct 25 10:38:57
> h... sshd[6506]: pam_unix(sshd:session): session closed for user root
> Oct 25 10:38:57 h... systemd-logind[285]: Removed session 2373897. Oct
> 25 10:38:59 h... sshd[6524]: Accepted publickey for root from
> 79.247... port 52068 ssh2: RSA SHA256:pru... Oct 25 10:38:59 h... sshd[6524]: pam_unix(sshd:session): session opened for user root by
> (uid=0) Oct 25 10:38:59 h... systemd-logind[285]: New session 2373898
> of user root. Oct 25 10:38:59 h... sshd[6524]:
> pam_systemd(sshd:session): Cannot create session: Already running in a
> session Oct 25 10:38:59 h... sshd[6524]: Received disconnect from
> 79.247... port 52068:11: disconnected by user Oct 25 10:38:59 h... sshd[6524]: Disconnected from 79.247... port 52068 Oct 25 10:38:59
> h... sshd[6524]: pam_unix(sshd:session): session closed for user root
> Oct 25 10:38:59 h... systemd-logind[285]: Removed session 2373898. Oct
> 25 10:39:01 h... CRON[6565]: pam_unix(cron:session): session opened
> for user root by (uid=0) Oct 25 10:39:01 h... CRON[6564]:
> pam_unix(cron:session): session opened for user root by (uid=0) Oct 25
> 10:39:01 h... sshd[6562]: Accepted publickey for root from 79.247...
> port 52069 ssh2: RSA SHA256:pru... Oct 25 10:39:01 h... sshd[6562]:
> pam_unix(sshd:session): session opened for user root by (uid=0) Oct 25
> 10:39:01 h... systemd-logind[285]: New session 2373904 of user root.
> Oct 25 10:39:01 h... sshd[6562]: pam_systemd(sshd:session): Cannot
> create session: Already running in a session Oct 25 10:39:01 h...
> sshd[6562]: Received disconnect from 79.247... port 52069:11:
> disconnected by user Oct 25 10:39:01 h... sshd[6562]: Disconnected
> from 79.247... port 52069 Oct 25 10:39:01 h... sshd[6562]:
> pam_unix(sshd:session): session closed for user root Oct 25 10:39:01
> h... systemd-logind[285]: Removed session 2373904. Oct 25 10:39:01
> h... CRON[6565]: pam_unix(cron:session): session closed for user root
> Oct 25 10:39:02 h... sshd[6665]: Accepted publickey for root from
> 79.247... port 52070 ssh2: RSA SHA256:pru... Oct 25 10:39:02 h... sshd[6665]: pam_unix(sshd:session): session opened for user root by
> (uid=0) Oct 25 10:39:02 h... systemd-logind[285]: New session 2373945
> of user root. Oct 25 10:39:03 h... sshd[6665]:
> pam_systemd(sshd:session): Cannot create session: Already running in a
> session Oct 25 10:39:03 h... sshd[6665]: Received disconnect from
> 79.247... port 52070:11: disconnected by user Oct 25 10:39:03 h... sshd[6665]: Disconnected from 79.247... port 52070 Oct 25 10:39:03
> h... sshd[6665]: pam_unix(sshd:session): session closed for user root
> Oct 25 10:39:03 h... systemd-logind[285]: Removed session 2373945.