[root@vps76346 log]# more /var/log/secure-20171022
Oct 16 03:19:56 vps76346 atd[6870]: pam_unix(atd:session): session opened for user root by (uid=0)
Oct 16 03:20:12 vps76346 atd[6870]: pam_unix(atd:session): session closed for user root
Oct 17 03:20:12 vps76346 atd[20341]: pam_unix(atd:session): session opened for user root by (uid=0)
Oct 17 03:20:20 vps76346 atd[20341]: pam_unix(atd:session): session closed for user root
Oct 17 12:34:17 vps76346 sshd[18641]: Accepted password for root from 124.217.240.181 port 65210 ssh2
Oct 17 12:34:17 vps76346 sshd[18641]: pam_unix(sshd:session): session opened for user root by (uid=0)
Oct 17 15:05:16 vps76346 sshd[18641]: pam_unix(sshd:session): session closed for user root
Oct 17 16:42:27 vps76346 sshd[3173]: Accepted password for root from 124.217.240.181 port 52740 ssh2
Oct 17 16:42:27 vps76346 sshd[3173]: pam_unix(sshd:session): session opened for user root by (uid=0)
Oct 17 16:51:01 vps76346 sshd[3173]: pam_unix(sshd:session): session closed for user root
Oct 17 16:51:08 vps76346 sshd[4009]: Accepted password for root from 124.217.240.181 port 53048 ssh2
Oct 17 16:51:08 vps76346 sshd[4009]: pam_unix(sshd:session): session opened for user root by (uid=0)
Oct 17 17:09:38 vps76346 sshd[4009]: pam_unix(sshd:session): session closed for user root
Oct 18 04:20:21 vps76346 atd[16579]: pam_unix(atd:session): session opened for user root by (uid=0)
Oct 18 04:20:41 vps76346 atd[16579]: pam_unix(atd:session): session closed for user root
Oct 19 03:20:41 vps76346 atd[15710]: pam_unix(atd:session): session opened for user root by (uid=0)
Oct 19 03:20:46 vps76346 atd[15710]: pam_unix(atd:session): session closed for user root
Oct 20 03:20:46 vps76346 atd[19943]: pam_unix(atd:session): session opened for user root by (uid=0)
Oct 20 03:20:52 vps76346 atd[19943]: pam_unix(atd:session): session closed for user root
Oct 21 02:45:43 vps76346 useradd[13530]: failed adding user 'cpanelsolr', exit code: 9
Oct 21 02:46:21 vps76346 runuser: pam_unix(runuser:session): session opened for user cpanelsolr by (uid=0)
Oct 21 02:46:40 vps76346 runuser: pam_unix(runuser:session): session closed for user cpanelsolr
Oct 21 03:20:52 vps76346 atd[16532]: pam_unix(atd:session): session opened for user root by (uid=0)
Oct 21 03:21:01 vps76346 atd[16532]: pam_unix(atd:session): session closed for user root
Oct 21 18:18:23 vps76346 suexec[9776]: uid: (500/phhealthco) gid: (502/phhealthco) cmd: redirect.cgi
Oct 21 23:08:04 vps76346 suexec[27684]: uid: (500/phhealthco) gid: (502/phhealthco) cmd: redirect.cgi
Oct 22 03:21:01 vps76346 atd[12019]: pam_unix(atd:session): session opened for user root by (uid=0)
Oct 22 03:21:06 vps76346 atd[12019]: pam_unix(atd:session): session closed for user root
[root@vps76346 log]#
[root@vps76346 log]#
[root@vps76346 log]# more /var/log/secure
Oct 23 03:21:06 vps76346 atd[3899]: pam_unix(atd:session): session opened for user root by (uid=0)
Oct 23 03:21:15 vps76346 atd[3899]: pam_unix(atd:session): session closed for user root
Oct 23 23:23:28 vps76346 suexec[13950]: uid: (500/phhealthco) gid: (502/phhealthco) cmd: redirect.cgi
Oct 24 03:21:15 vps76346 atd[29419]: pam_unix(atd:session): session opened for user root by (uid=0)
Oct 24 03:21:25 vps76346 atd[29419]: pam_unix(atd:session): session closed for user root
Oct 24 09:42:29 vps76346 suexec[21794]: uid: (500/phhealthco) gid: (502/phhealthco) cmd: redirect.cgi
Oct 24 09:43:24 vps76346 sshd[21849]: Accepted password for root from 111.90.136.153 port 52711 ssh2
Oct 24 09:43:24 vps76346 sshd[21849]: pam_unix(sshd:session): session opened for user root by (uid=0)