📄 Viewing: /var/log/hacker_cleanup.log
--- Starting security cleanup: Sat Jun 20 03:29:34 IST 2026 ---
Detected malicious access for user: blissinf
[OK] Removed .ssh directory for blissinf.
[OK] User blissinf set to nologin.
[OK] User blissinf account locked.
Detected malicious access for user: cdpatel7
[OK] Removed .ssh directory for cdpatel7.
[OK] User cdpatel7 set to nologin.
[OK] User cdpatel7 account locked.
Detected malicious access for user: dakshent
[OK] Removed .ssh directory for dakshent.
[OK] User dakshent set to nologin.
[OK] User dakshent account locked.
Detected malicious access for user: eemehtns
[OK] Removed .ssh directory for eemehtns.
[OK] User eemehtns set to nologin.
[OK] User eemehtns account locked.
Detected malicious access for user: ghaghret
[OK] Removed .ssh directory for ghaghret.
[OK] User ghaghret set to nologin.
[OK] User ghaghret account locked.
Detected malicious access for user: hotelshu
[OK] Removed .ssh directory for hotelshu.
[OK] User hotelshu set to nologin.
[OK] User hotelshu account locked.
Detected malicious access for user: khamsro
[OK] Removed .ssh directory for khamsro.
[OK] User khamsro set to nologin.
[OK] User khamsro account locked.
Detected malicious access for user: labstock
[OK] Removed .ssh directory for labstock.
[OK] User labstock set to nologin.
[OK] User labstock account locked.
Detected malicious access for user: login
[OK] Removed .ssh directory for login.
[OK] User login set to nologin.
[OK] User login account locked.
Detected malicious access for user: mahalaxm
[OK] Removed .ssh directory for mahalaxm.
[OK] User mahalaxm set to nologin.
[OK] User mahalaxm account locked.
Detected malicious access for user: maruti
[OK] Removed .ssh directory for maruti.
[OK] User maruti set to nologin.
[OK] User maruti account locked.
Detected malicious access for user: navyug
[OK] Removed .ssh directory for navyug.
[OK] User navyug set to nologin.
[OK] User navyug account locked.
Detected malicious access for user: shpprint
[OK] Removed .ssh directory for shpprint.
[OK] User shpprint set to nologin.
[OK] User shpprint account locked.
Detected malicious access for user: softcon
[OK] Removed .ssh directory for softcon.
[OK] User softcon set to nologin.
[OK] User softcon account locked.
Detected malicious access for user: tracps
[OK] Removed .ssh directory for tracps.
[OK] User tracps set to nologin.
[OK] User tracps account locked.
Detected malicious access for user: tusharh
[OK] Removed .ssh directory for tusharh.
[OK] User tusharh set to nologin.
[OK] User tusharh account locked.
--- Cleanup completed: Sat Jun 20 03:29:35 IST 2026 ---
--- Starting security cleanup: Sun Jun 21 03:22:50 IST 2026 ---
Detected malicious access for user: blissinf
[OK] Removed .ssh directory for blissinf.
[OK] User blissinf set to nologin.
[OK] User blissinf account locked.
Detected malicious access for user: cdpatel7
[OK] Removed .ssh directory for cdpatel7.
[OK] User cdpatel7 set to nologin.
[OK] User cdpatel7 account locked.
Detected malicious access for user: dakshent
[OK] Removed .ssh directory for dakshent.
[OK] User dakshent set to nologin.
[OK] User dakshent account locked.
Detected malicious access for user: eemehtns
[OK] Removed .ssh directory for eemehtns.
[OK] User eemehtns set to nologin.
[OK] User eemehtns account locked.
Detected malicious access for user: ghaghret
[OK] Removed .ssh directory for ghaghret.
[OK] User ghaghret set to nologin.
[OK] User ghaghret account locked.
Detected malicious access for user: hotelshu
[OK] Removed .ssh directory for hotelshu.
[OK] User hotelshu set to nologin.
[OK] User hotelshu account locked.
Detected malicious access for user: khamsro
[OK] Removed .ssh directory for khamsro.
[OK] User khamsro set to nologin.
[OK] User khamsro account locked.
Detected malicious access for user: labstock
[OK] Removed .ssh directory for labstock.
[OK] User labstock set to nologin.
[OK] User labstock account locked.
Detected malicious access for user: login
[OK] Removed .ssh directory for login.
[OK] User login set to nologin.
[OK] User login account locked.
Detected malicious access for user: mahalaxm
[OK] Removed .ssh directory for mahalaxm.
[OK] User mahalaxm set to nologin.
[OK] User mahalaxm account locked.
Detected malicious access for user: maruti
[OK] Removed .ssh directory for maruti.
[OK] User maruti set to nologin.
[OK] User maruti account locked.
Detected malicious access for user: navyug
[OK] Removed .ssh directory for navyug.
[OK] User navyug set to nologin.
[OK] User navyug account locked.
Detected malicious access for user: shpprint
[OK] Removed .ssh directory for shpprint.
[OK] User shpprint set to nologin.
[OK] User shpprint account locked.
Detected malicious access for user: softcon
[OK] Removed .ssh directory for softcon.
[OK] User softcon set to nologin.
[OK] User softcon account locked.
Detected malicious access for user: tracps
[OK] Removed .ssh directory for tracps.
[OK] User tracps set to nologin.
[OK] User tracps account locked.
Detected malicious access for user: tusharh
[OK] Removed .ssh directory for tusharh.
[OK] User tusharh set to nologin.
[OK] User tusharh account locked.
--- Cleanup completed: Sun Jun 21 03:22:51 IST 2026 ---
--- Starting security cleanup: Mon Jun 22 03:28:50 IST 2026 ---
Detected malicious access for user: blissinf
[OK] Removed .ssh directory for blissinf.
[OK] User blissinf set to nologin.
[OK] User blissinf account locked.
Detected malicious access for user: cdpatel7
[OK] Removed .ssh directory for cdpatel7.
[OK] User cdpatel7 set to nologin.
[OK] User cdpatel7 account locked.
Detected malicious access for user: dakshent
[OK] Removed .ssh directory for dakshent.
[OK] User dakshent set to nologin.
[OK] User dakshent account locked.
Detected malicious access for user: eemehtns
[OK] Removed .ssh directory for eemehtns.
[OK] User eemehtns set to nologin.
[OK] User eemehtns account locked.
Detected malicious access for user: ghaghret
[OK] Removed .ssh directory for ghaghret.
[OK] User ghaghret set to nologin.
[OK] User ghaghret account locked.
Detected malicious access for user: hotelshu
[OK] Removed .ssh directory for hotelshu.
[OK] User hotelshu set to nologin.
[OK] User hotelshu account locked.
Detected malicious access for user: khamsro
[OK] Removed .ssh directory for khamsro.
[OK] User khamsro set to nologin.
[OK] User khamsro account locked.
Detected malicious access for user: labstock
[OK] Removed .ssh directory for labstock.
[OK] User labstock set to nologin.
[OK] User labstock account locked.
Detected malicious access for user: login
[OK] Removed .ssh directory for login.
[OK] User login set to nologin.
[OK] User login account locked.
Detected malicious access for user: mahalaxm
[OK] Removed .ssh directory for mahalaxm.
[OK] User mahalaxm set to nologin.
[OK] User mahalaxm account locked.
Detected malicious access for user: maruti
[OK] Removed .ssh directory for maruti.
[OK] User maruti set to nologin.
[OK] User maruti account locked.
Detected malicious access for user: navyug
[OK] Removed .ssh directory for navyug.
[OK] User navyug set to nologin.
[OK] User navyug account locked.
Detected malicious access for user: shpprint
[OK] Removed .ssh directory for shpprint.
[OK] User shpprint set to nologin.
[OK] User shpprint account locked.
Detected malicious access for user: softcon
[OK] Removed .ssh directory for softcon.
[OK] User softcon set to nologin.
[OK] User softcon account locked.
Detected malicious access for user: tracps
[OK] Removed .ssh directory for tracps.
[OK] User tracps set to nologin.
[OK] User tracps account locked.
Detected malicious access for user: tusharh
[OK] Removed .ssh directory for tusharh.
[OK] User tusharh set to nologin.
[OK] User tusharh account locked.
--- Cleanup completed: Mon Jun 22 03:28:51 IST 2026 ---
--- Starting security cleanup: Tue Jun 23 03:42:44 IST 2026 ---
--- Cleanup completed: Tue Jun 23 03:42:44 IST 2026 ---
--- Starting security cleanup: Wed Jun 24 03:34:43 IST 2026 ---
--- Cleanup completed: Wed Jun 24 03:34:43 IST 2026 ---
--- Starting security cleanup: Thu Jun 25 03:47:15 IST 2026 ---
--- Cleanup completed: Thu Jun 25 03:47:15 IST 2026 ---
--- Starting security cleanup: Sat Jun 27 03:26:55 IST 2026 ---
--- Cleanup completed: Sat Jun 27 03:26:55 IST 2026 ---
--- Starting security cleanup: Sun Jun 28 03:20:38 IST 2026 ---
--- Cleanup completed: Sun Jun 28 03:20:39 IST 2026 ---
--- Starting security cleanup: Tue Jun 30 03:28:06 IST 2026 ---
--- Cleanup completed: Tue Jun 30 03:28:06 IST 2026 ---
--- Starting security cleanup: Wed Jul 1 03:28:40 IST 2026 ---
--- Cleanup completed: Wed Jul 1 03:28:40 IST 2026 ---
--- Starting security cleanup: Thu Jul 2 03:24:14 IST 2026 ---
--- Cleanup completed: Thu Jul 2 03:24:14 IST 2026 ---
--- Starting security cleanup: Fri Jul 3 03:35:31 IST 2026 ---
--- Cleanup completed: Fri Jul 3 03:35:31 IST 2026 ---
--- Starting security cleanup: Sat Jul 4 03:48:42 IST 2026 ---
--- Cleanup completed: Sat Jul 4 03:48:42 IST 2026 ---
--- Starting security cleanup: Sun Jul 5 03:22:21 IST 2026 ---
--- Cleanup completed: Sun Jul 5 03:22:21 IST 2026 ---
--- Starting security cleanup: Mon Jul 6 03:26:20 IST 2026 ---
--- Cleanup completed: Mon Jul 6 03:26:20 IST 2026 ---
--- Starting security cleanup: Tue Jul 7 03:37:49 IST 2026 ---
--- Cleanup completed: Tue Jul 7 03:37:49 IST 2026 ---
[INFO] Root authorized_keys file does not exist. Skipping.
[OK] System account 'operator' has been locked and set to nologin.
[OK] System account 'mysql' has been locked and set to nologin.
--- Starting security cleanup: Wed Jul 8 03:12:50 IST 2026 ---
--- Cleanup completed: Wed Jul 8 03:12:50 IST 2026 ---
[INFO] Root authorized_keys file does not exist. Skipping.
[OK] System account 'operator' has been locked and set to nologin.
[OK] System account 'mysql' has been locked and set to nologin.
--- Starting security cleanup: Thu Jul 9 03:37:29 IST 2026 ---
--- Cleanup completed: Thu Jul 9 03:37:29 IST 2026 ---
[INFO] Root authorized_keys file does not exist. Skipping.
[OK] System account 'operator' has been locked and set to nologin.
[OK] System account 'mysql' has been locked and set to nologin.
--- Starting security cleanup: Fri Jul 10 03:40:01 IST 2026 ---
--- Cleanup completed: Fri Jul 10 03:40:01 IST 2026 ---
[INFO] Root authorized_keys file does not exist. Skipping.
[OK] System account 'operator' has been locked and set to nologin.
[OK] System account 'mysql' has been locked and set to nologin.
--- Starting security cleanup: Sat Jul 11 03:37:43 IST 2026 ---
--- Cleanup completed: Sat Jul 11 03:37:43 IST 2026 ---
[INFO] Root authorized_keys file does not exist. Skipping.
[OK] System account 'operator' has been locked and set to nologin.
[OK] System account 'mysql' has been locked and set to nologin.
--- Starting security cleanup: Sun Jul 12 03:46:26 IST 2026 ---
--- Cleanup completed: Sun Jul 12 03:46:26 IST 2026 ---
[INFO] Root authorized_keys file does not exist. Skipping.
[OK] System account 'operator' has been locked and set to nologin.
[OK] System account 'mysql' has been locked and set to nologin.
--- Starting security cleanup: Mon Jul 13 03:41:59 IST 2026 ---
--- Cleanup completed: Mon Jul 13 03:41:59 IST 2026 ---
[INFO] Root authorized_keys file does not exist. Skipping.
[OK] System account 'operator' has been locked and set to nologin.
[OK] System account 'mysql' has been locked and set to nologin.
--- Starting security cleanup: Tue Jul 14 03:45:11 IST 2026 ---
--- Cleanup completed: Tue Jul 14 03:45:11 IST 2026 ---
[INFO] Root authorized_keys file does not exist. Skipping.
[OK] System account 'operator' has been locked and set to nologin.
[OK] System account 'mysql' has been locked and set to nologin.
--- Starting security cleanup: Wed Jul 15 03:49:10 IST 2026 ---
--- Cleanup completed: Wed Jul 15 03:49:10 IST 2026 ---
[INFO] Root authorized_keys file does not exist. Skipping.
[OK] System account 'operator' has been locked and set to nologin.
[OK] System account 'mysql' has been locked and set to nologin.
--- Starting security cleanup: Thu Jul 16 03:27:51 IST 2026 ---
--- Cleanup completed: Thu Jul 16 03:27:51 IST 2026 ---
[INFO] Root authorized_keys file does not exist. Skipping.
[OK] System account 'operator' has been locked and set to nologin.
[OK] System account 'mysql' has been locked and set to nologin.
--- Starting security cleanup: Fri Jul 17 03:21:23 IST 2026 ---
--- Cleanup completed: Fri Jul 17 03:21:23 IST 2026 ---
[INFO] Root authorized_keys file does not exist. Skipping.
[OK] System account 'operator' has been locked and set to nologin.
[OK] System account 'mysql' has been locked and set to nologin.
--- Starting security cleanup: Sat Jul 18 03:33:47 IST 2026 ---
--- Cleanup completed: Sat Jul 18 03:33:48 IST 2026 ---
[INFO] Root authorized_keys file does not exist. Skipping.
[OK] System account 'operator' has been locked and set to nologin.
[OK] System account 'mysql' has been locked and set to nologin.
--- Starting security cleanup: Sun Jul 19 03:14:50 IST 2026 ---
--- Cleanup completed: Sun Jul 19 03:14:50 IST 2026 ---
[INFO] Root authorized_keys file does not exist. Skipping.
[OK] System account 'operator' has been locked and set to nologin.
[OK] System account 'mysql' has been locked and set to nologin.
--- Starting security cleanup: Mon Jul 20 03:11:21 IST 2026 ---
--- Cleanup completed: Mon Jul 20 03:11:21 IST 2026 ---
[INFO] Root authorized_keys file does not exist. Skipping.
[OK] System account 'operator' has been locked and set to nologin.
[OK] System account 'mysql' has been locked and set to nologin.
--- Starting security cleanup: Tue Jul 21 03:08:03 IST 2026 ---
--- Cleanup completed: Tue Jul 21 03:08:03 IST 2026 ---
[INFO] Root authorized_keys file does not exist. Skipping.
[OK] System account 'operator' has been locked and set to nologin.
[OK] System account 'mysql' has been locked and set to nologin.
--- Starting security cleanup: Wed Jul 22 03:31:05 IST 2026 ---
--- Cleanup completed: Wed Jul 22 03:31:05 IST 2026 ---
[INFO] Root authorized_keys file does not exist. Skipping.
[OK] System account 'operator' has been locked and set to nologin.
[OK] System account 'mysql' has been locked and set to nologin.
--- Starting security cleanup: Thu Jul 23 03:29:02 IST 2026 ---
--- Cleanup completed: Thu Jul 23 03:29:02 IST 2026 ---
[INFO] Root authorized_keys file does not exist. Skipping.
[OK] System account 'operator' has been locked and set to nologin.
[OK] System account 'mysql' has been locked and set to nologin.
--- Starting security cleanup: Fri Jul 24 03:41:56 IST 2026 ---
--- Cleanup completed: Fri Jul 24 03:41:56 IST 2026 ---
[INFO] Root authorized_keys file does not exist. Skipping.
[OK] System account 'operator' has been locked and set to nologin.
[OK] System account 'mysql' has been locked and set to nologin.
--- Starting security cleanup: Sat Jul 25 03:25:53 IST 2026 ---
--- Cleanup completed: Sat Jul 25 03:25:53 IST 2026 ---
[INFO] Root authorized_keys file does not exist. Skipping.
[OK] System account 'operator' has been locked and set to nologin.
[OK] System account 'mysql' has been locked and set to nologin.
--- Starting security cleanup: Sun Jul 26 03:28:24 IST 2026 ---
--- Cleanup completed: Sun Jul 26 03:28:24 IST 2026 ---
[INFO] Root authorized_keys file does not exist. Skipping.
[OK] System account 'operator' has been locked and set to nologin.
[OK] System account 'mysql' has been locked and set to nologin.
--- Starting security cleanup: Mon Jul 27 03:28:34 IST 2026 ---
--- Cleanup completed: Mon Jul 27 03:28:34 IST 2026 ---
[INFO] Root authorized_keys file does not exist. Skipping.
[OK] System account 'operator' has been locked and set to nologin.
[OK] System account 'mysql' has been locked and set to nologin.
--- Starting security cleanup: Tue Jul 28 03:49:00 IST 2026 ---
--- Cleanup completed: Tue Jul 28 03:49:00 IST 2026 ---
[INFO] Root authorized_keys file does not exist. Skipping.
[OK] System account 'operator' has been locked and set to nologin.
[OK] System account 'mysql' has been locked and set to nologin.
--- Starting security cleanup: Wed Jul 29 03:12:56 IST 2026 ---
--- Cleanup completed: Wed Jul 29 03:12:56 IST 2026 ---
[INFO] Root authorized_keys file does not exist. Skipping.
[OK] System account 'operator' has been locked and set to nologin.
[OK] System account 'mysql' has been locked and set to nologin.
--- Starting security cleanup: Thu Jul 30 03:45:09 IST 2026 ---
--- Cleanup completed: Thu Jul 30 03:45:09 IST 2026 ---
[INFO] Root authorized_keys file does not exist. Skipping.
[OK] System account 'operator' has been locked and set to nologin.
[OK] System account 'mysql' has been locked and set to nologin.
--- Starting security cleanup: Sat Aug 1 03:53:09 IST 2026 ---
--- Cleanup completed: Sat Aug 1 03:53:09 IST 2026 ---
[INFO] Root authorized_keys file does not exist. Skipping.
[OK] System account 'operator' has been locked and set to nologin.
[OK] System account 'mysql' has been locked and set to nologin.
--- Starting security cleanup: Sun Aug 2 03:09:19 IST 2026 ---
--- Cleanup completed: Sun Aug 2 03:09:19 IST 2026 ---
[INFO] Root authorized_keys file does not exist. Skipping.
[OK] System account 'operator' has been locked and set to nologin.
[OK] System account 'mysql' has been locked and set to nologin.
--- Starting security cleanup: Mon Aug 3 03:16:29 IST 2026 ---
--- Cleanup completed: Mon Aug 3 03:16:29 IST 2026 ---
[INFO] Root authorized_keys file does not exist. Skipping.
[OK] System account 'operator' has been locked and set to nologin.
[OK] System account 'mysql' has been locked and set to nologin.
--- Starting security cleanup: Tue Aug 4 03:17:45 IST 2026 ---
--- Cleanup completed: Tue Aug 4 03:17:45 IST 2026 ---
[INFO] Root authorized_keys file does not exist. Skipping.
[OK] System account 'operator' has been locked and set to nologin.
[OK] System account 'mysql' has been locked and set to nologin.
--- Starting security cleanup: Wed Aug 5 03:23:40 IST 2026 ---
--- Cleanup completed: Wed Aug 5 03:23:40 IST 2026 ---
[INFO] Root authorized_keys file does not exist. Skipping.
[OK] System account 'operator' has been locked and set to nologin.
[OK] System account 'mysql' has been locked and set to nologin.
--- Starting security cleanup: Thu Aug 6 03:35:26 IST 2026 ---
--- Cleanup completed: Thu Aug 6 03:35:26 IST 2026 ---
[INFO] Root authorized_keys file does not exist. Skipping.
[OK] System account 'operator' has been locked and set to nologin.
[OK] System account 'mysql' has been locked and set to nologin.
← Back to directory