May  9 00:01:02 mail sshd[1967]: Received signal 15; terminating.
    May  9 00:01:02 mail userdel[2766]: delete user 'sshd'
    May  9 00:01:34 mail useradd[2978]: new user: name=sshd, UID=102, GID=65534, home=/var/run/sshd, she
    ll=/usr/sbin/nologin
    May  9 00:01:34 mail usermod[2983]: change user 'sshd' password
    May  9 00:01:35 mail chage[2988]: changed password expiry for sshd
    May  9 00:01:35 mail sshd[3028]: Server listening on 0.0.0.0 port 22.
    May  9 00:01:35 mail sshd[3028]: Server listening on :: port 22.
    May  9 00:01:49 mail sshd[3033]: Accepted password for root from 127.0.0.1 port 40437 ssh2
    May  9 00:01:49 mail sshd[3033]: pam_unix(sshd:session): session opened for user root by (uid=0)
    May  9 00:01:53 mail sshd[3033]: Received disconnect from 127.0.0.1: 11: disconnected by user
    May  9 00:01:53 mail sshd[3033]: pam_unix(sshd:session): session closed for user root