why I can't delete some users?, how to "clean VPS"?
Linux - NewbieThis Linux forum is for members that are new to Linux.
Just starting out and have a question?
If it is not in the man pages or the how-to's this is the place!
Notices
Welcome to LinuxQuestions.org, a friendly and active Linux Community.
You are currently viewing LQ as a guest. By joining our community you will have the ability to post topics, receive our newsletter, use the advanced search, subscribe to threads and access many other special features. Registration is quick, simple and absolutely free. Join our community today!
Note that registered members see fewer ads, and ContentLink is completely disabled once you log in.
If you have any problems with the registration process or your account login, please contact us. If you need to reset your password, click here.
Having a problem logging in? Please visit this page to clear all LQ-related cookies.
Get a virtual cloud desktop with the Linux distro that you want in less than five minutes with Shells! With over 10 pre-installed distros to choose from, the worry-free installation life is here! Whether you are a digital nomad or just looking for flexibility, Shells can put your Linux machine on the device that you want to use.
Exclusive for LQ members, get up to 45% off per month. Click here for more info.
[root@pepsi ~]# killall avahi-autoipd
avahi-autoipd: no process found
[root@pepsi ~]# killall centos
centos: no process found
[root@pepsi ~]# killall systemd-bus-proxy
systemd-bus-proxy: no process found
[root@pepsi ~]# killall tss
tss: no process found
[root@pepsi ~]# killall whbadmin
whbadmin: no process found
[root@pepsi ~]# killall whbhelper
whbhelper: no process found
[root@pepsi ~]# pkill -u avahi-autoipd
[root@pepsi ~]# pkill -u centos
[root@pepsi ~]# pkill -u systemd-bus-proxy
[root@pepsi ~]# pkill -u tss
[root@pepsi ~]# pkill -u whbadmin
[root@pepsi ~]# pkill -u whbhelper
[root@pepsi ~]# userdel -r avahi-autoipd
userdel: avahi-autoipd mail spool (/var/spool/mail/avahi-autoipd) not found
[root@pepsi ~]# userdel -r centos
[root@pepsi ~]# userdel -r systemd-bus-proxy
userdel: systemd-bus-proxy mail spool (/var/spool/mail/systemd-bus-proxy) not found
userdel: / not owned by systemd-bus-proxy, not removing
[root@pepsi ~]# userdel -r tss
userdel: tss mail spool (/var/spool/mail/tss) not found
userdel: /dev/null not owned by tss, not removing
[root@pepsi ~]# userdel -r whbadmin
[root@pepsi ~]# userdel -r whbhelper
[root@pepsi ~]#
why no is possible delete some users??
this is sufficent to "clean VPS" ??
how I can "restore OS to BEFORE of ISP touch" ??
Just what do you try to accomplish with this? Do you think the people who produced the OS are so stupid they put things not needed there? If you want to do it without their help then you get to build your own OS by yourself, look into Linux from scatch as they call it.
New users often get added by postinstall scriptlets. Judging from the output, I suppose this is an RPM-based system. Getting names of the packages that changed /etc/passwd is not as easy as for a DEB-based system, but still possible.
For example, looking for package that put user tss to /etc/passwd gives me trousers:
[root@pepsi ~]# rpm -qi trousers
Name : trousers
Version : 0.3.14
Release : 2.el7
Architecture: x86_64
Install Date: Fri 15 Jun 2018 04:20:51 PM EDT
Group : System Environment/Libraries
Size : 836873
License : BSD
Signature : RSA/SHA256, Thu 10 Aug 2017 04:09:49 PM EDT, Key ID 24c6a8a7f4a80eb5
Source RPM : trousers-0.3.14-2.el7.src.rpm
Build Date : Thu 03 Aug 2017 01:16:08 PM EDT
Build Host : c1bm.rdu2.centos.org
Relocations : (not relocatable)
Packager : CentOS BuildSystem <http://bugs.centos.org>
Vendor : CentOS
URL : http://trousers.sourceforge.net
Summary : TCG's Software Stack v1.2
Description :
TrouSerS is an implementation of the Trusted Computing Group's Software Stack
(TSS) specification. You can use TrouSerS to write applications that make use
of your TPM hardware. TPM hardware can create, store and use RSA keys
securely (without ever being exposed in memory), verify a platform's software
state using cryptographic hashes and more.
[root@pepsi ~]#
Either that or as I said above, not every package cleans up after itself on de-installation and removes all users it installed into the system. So some users may persist long after packages that installed them were removed from system.
DEB-based systems differentiate between 'removing' packages and 'purging' them. The latter means all configuration data associated with the package get removed as well. I don't know of such or similar distinction on RPM-based systems though.
Bear in mind that useradd is not the only mechanism of adding a new user to /etc/passwd. There's also systemd-sysusers, for example (first appeared in systemd 215). Check what this RPM macro does:
Code:
rpm -E %sysusers_create_inline
And a really nasty postinstall scriptlet could just edit /etc/passwd through a combination of cut/grep/sed/awk commands (not that I think such a script would be part of a reputable distribution like CentOS).
Besides, postinstall scriptlets are not the only means to get something changed in system during installation of a package. E.g., recent rpm versions support triggers that can well, trigger different actions in system on package installation. Although this is more relevant for CentOS 8 and recent Fedora releases.
One such trigger (perusing systemd-sysusers as well) can automatically create system users based on files dropped by packages to directory /usr/lib/sysusers.d/. I don't think this mechanism was already in place when RHEL 7 was released. But there could be other mechanisms I'm not aware of.
Do you have the code of that BASH.VPS template? Can you see what it does?
is "SPY users" (they say "template users for VPS managed")
but then who is systemd-bus-proxy ??, who create this "spy" ??
also we find:
Code:
[root@pepsi ~]# cat /root/.ssh/authorized_keys
no-port-forwarding,no-agent-forwarding,no-X11-forwarding,command="echo 'Please login as the user \"centos\" rather than the user \"root\".';echo;sleep 10" ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCamIU4G7K3ghtcdoaROT39WBnmguM86Me9GlEXpl9B5/OGjSX79BQCgd5FCjMI4xEEEQqm5gDK3aXOMGlqf2Ajygcy++8uciN99ASJgYHp75f7E4Pj/R6oXGq2Uz06rpigep5mVRf5TBaZY2kyvIPh1Blbuw+SrIRmX5S+eAuB1rgZJodarJqu2g3dxcCJL1t6DVO6sTls4y9b7NrxzeSuTv3oFf6xvkUv6v3QFrRi2yTn+Zm5YOBvDISAoDmlSL82H1KKEKEbUK412HwUb9uLHZv6E1acocn6ZKQOjjGfSi+YjqT5hiXXOG4tvvWXjhhLU1oXbPYpj8rRIfPljR4d Generated-by-Nova
no-port-forwarding,no-agent-forwarding,no-X11-forwarding,command="echo 'Please login as the user \"centos\" rather than the user \"root\".';echo;sleep 10" ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDyRMW7vRVFrcfFx3wsOWt+zimrJGqT358oDnzcN3ldVsaSpqyitDe1R6C12upH39JNwPl495swdt/N2Cw8CixP4nlcDfvjaRpRHasWEymp6+Tv4EMvOmI5QI5iPPChwyBex69OncAxzjsS+d8TO5L0AIHhrYWA9pHROC1vkn6hKjyewmnGmUA+4Jc0ZwrK2HUvQGJujg88i8M4/474F/J31rVbA3ETJF3w+1/6x+Mj5cjdi6HIuznz9PMYn27Yb+VoM/rpl5xa2FS4+NH6Lr3HCQKJRbwKnx+oqEQ+XbKa5bgaj/nu2wCxThxa/J5ZEUP8eI0wrv3e/jEBi4ZFOSQv Generated-by-Nova
no-port-forwarding,no-agent-forwarding,no-X11-forwarding,command="echo 'Please login as the user \"centos\" rather than the user \"root\".';echo;sleep 10" ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDPIQTEKDTIJp9IoX9FQM6FPE6e1bPC+LEvStSuVQ0SOPHhuXpNh9J8+7qZNsaujd8fO5Xa9q0XmulQMX1UesTieJ/SW6rWJzNO2o0QpFfpW/6/3x7hVad+BIfnpmqO5RZhD2PdnPHmx3geR0XUo8K8dMPM1Q5pB/rhXiaQVv5OSfF6Tbggkl7vKc7QA0Q9lOKM7CKXWMRFOcHFjLA+45MkQqce3dy9GgE0pjGPnUwSfjw7Cy6kWPN4G7F8+4ai5OLx8/DR96kCSiXEiOEaRRkH7r9S53xWzzpwG5Knz8ulcIQ597oQsPMW9QhwIEvCyAoYZQzSbi0/2vI2MxZYK9X1 Generated-by-Nova
[root@pepsi ~]#
... why THREE TIMES SSH for SAME USER???
maybe a "error" in your template BASH.
also we find:
Code:
[root@pepsi ~]# cat /root/.ssh/authorized_keys
no-port-forwarding,no-agent-forwarding,no-X11-forwarding,command="echo 'Please login as the user \"centos\" rather than the user \"root\".';echo;sleep 10" ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCamIU4G7K3ghtcdoaROT39WBnmguM86Me9GlEXpl9B5/OGjSX79BQCgd5FCjMI4xEEEQqm5gDK3aXOMGlqf2Ajygcy++8uciN99ASJgYHp75f7E4Pj/R6oXGq2Uz06rpigep5mVRf5TBaZY2kyvIPh1Blbuw+SrIRmX5S+eAuB1rgZJodarJqu2g3dxcCJL1t6DVO6sTls4y9b7NrxzeSuTv3oFf6xvkUv6v3QFrRi2yTn+Zm5YOBvDISAoDmlSL82H1KKEKEbUK412HwUb9uLHZv6E1acocn6ZKQOjjGfSi+YjqT5hiXXOG4tvvWXjhhLU1oXbPYpj8rRIfPljR4d Generated-by-Nova
no-port-forwarding,no-agent-forwarding,no-X11-forwarding,command="echo 'Please login as the user \"centos\" rather than the user \"root\".';echo;sleep 10" ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDyRMW7vRVFrcfFx3wsOWt+zimrJGqT358oDnzcN3ldVsaSpqyitDe1R6C12upH39JNwPl495swdt/N2Cw8CixP4nlcDfvjaRpRHasWEymp6+Tv4EMvOmI5QI5iPPChwyBex69OncAxzjsS+d8TO5L0AIHhrYWA9pHROC1vkn6hKjyewmnGmUA+4Jc0ZwrK2HUvQGJujg88i8M4/474F/J31rVbA3ETJF3w+1/6x+Mj5cjdi6HIuznz9PMYn27Yb+VoM/rpl5xa2FS4+NH6Lr3HCQKJRbwKnx+oqEQ+XbKa5bgaj/nu2wCxThxa/J5ZEUP8eI0wrv3e/jEBi4ZFOSQv Generated-by-Nova
no-port-forwarding,no-agent-forwarding,no-X11-forwarding,command="echo 'Please login as the user \"centos\" rather than the user \"root\".';echo;sleep 10" ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDPIQTEKDTIJp9IoX9FQM6FPE6e1bPC+LEvStSuVQ0SOPHhuXpNh9J8+7qZNsaujd8fO5Xa9q0XmulQMX1UesTieJ/SW6rWJzNO2o0QpFfpW/6/3x7hVad+BIfnpmqO5RZhD2PdnPHmx3geR0XUo8K8dMPM1Q5pB/rhXiaQVv5OSfF6Tbggkl7vKc7QA0Q9lOKM7CKXWMRFOcHFjLA+45MkQqce3dy9GgE0pjGPnUwSfjw7Cy6kWPN4G7F8+4ai5OLx8/DR96kCSiXEiOEaRRkH7r9S53xWzzpwG5Knz8ulcIQ597oQsPMW9QhwIEvCyAoYZQzSbi0/2vI2MxZYK9X1 Generated-by-Nova
[root@pepsi ~]#
p11-kit-0.23.5-3.el7.x86_64 Fri 15 Jun 2018 04:20:33 PM EDT
p11-kit-trust-0.23.5-3.el7.x86_64 Fri 15 Jun 2018 04:20:35 PM EDT
pam-1.1.8-22.el7.x86_64 Fri 15 Jun 2018 04:20:39 PM EDT
parted-3.1-29.el7.x86_64 Fri 15 Jun 2018 04:21:20 PM EDT
passwd-0.79-4.el7.x86_64 Thu 21 Jan 2016 05:46:09 AM EST
pciutils-libs-3.5.1-3.el7.x86_64 Fri 15 Jun 2018 04:20:35 PM EDT
pcre-8.32-17.el7.x86_64 Fri 15 Jun 2018 04:20:31 PM EDT
perl-5.16.3-295.el7.x86_64 Mon 31 Aug 2020 02:50:26 PM EDT
perl-Carp-1.26-244.el7.noarch Thu 21 Jan 2016 05:58:15 AM EST
perl-constant-1.27-2.el7.noarch Thu 21 Jan 2016 05:58:15 AM EST
perl-Encode-2.51-7.el7.x86_64 Thu 21 Jan 2016 05:58:15 AM EST
perl-Exporter-5.68-3.el7.noarch Thu 21 Jan 2016 05:58:15 AM EST
perl-File-Path-2.09-2.el7.noarch Thu 21 Jan 2016 05:58:15 AM EST
perl-File-Temp-0.23.01-3.el7.noarch Thu 21 Jan 2016 05:58:15 AM EST
perl-Filter-1.49-3.el7.x86_64 Thu 21 Jan 2016 05:58:15 AM EST
perl-Getopt-Long-2.40-3.el7.noarch Fri 15 Jun 2018 04:20:33 PM EDT
perl-HTTP-Tiny-0.033-3.el7.noarch Thu 21 Jan 2016 05:58:14 AM EST
perl-libs-5.16.3-295.el7.x86_64 Mon 31 Aug 2020 02:50:25 PM EDT
perl-macros-5.16.3-292.el7.x86_64 Fri 15 Jun 2018 04:20:33 PM EDT
perl-parent-0.225-244.el7.noarch Thu 21 Jan 2016 05:58:14 AM EST
perl-PathTools-3.40-5.el7.x86_64 Thu 21 Jan 2016 05:58:15 AM EST
perl-Pod-Escapes-1.04-292.el7.noarch Fri 15 Jun 2018 04:21:21 PM EDT
perl-podlators-2.5.1-3.el7.noarch Thu 21 Jan 2016 05:58:14 AM EST
perl-Pod-Perldoc-3.20-4.el7.noarch Thu 21 Jan 2016 05:58:14 AM EST
perl-Pod-Simple-3.28-4.el7.noarch Thu 21 Jan 2016 05:58:15 AM EST
perl-Pod-Usage-1.63-3.el7.noarch Thu 21 Jan 2016 05:58:15 AM EST
perl-Scalar-List-Utils-1.27-248.el7.x86_64 Thu 21 Jan 2016 05:58:15 AM EST
perl-Socket-2.010-4.el7.x86_64 Fri 15 Jun 2018 04:20:33 PM EDT
perl-Storable-2.45-3.el7.x86_64 Thu 21 Jan 2016 05:58:15 AM EST
perl-Text-ParseWords-3.29-4.el7.noarch Thu 21 Jan 2016 05:58:14 AM EST
perl-threads-1.87-4.el7.x86_64 Thu 21 Jan 2016 05:58:15 AM EST
perl-threads-shared-1.43-6.el7.x86_64 Thu 21 Jan 2016 05:58:15 AM EST
perl-Time-HiRes-1.9725-3.el7.x86_64 Thu 21 Jan 2016 05:58:15 AM EST
perl-Time-Local-1.2300-2.el7.noarch Thu 21 Jan 2016 05:58:15 AM EST
pinentry-0.8.1-17.el7.x86_64 Fri 15 Jun 2018 04:20:37 PM EDT
pkgconfig-0.27.1-4.el7.x86_64 Thu 21 Jan 2016 05:45:34 AM EST
plymouth-0.8.9-0.31.20140113.el7.centos.x86_64 Fri 15 Jun 2018 04:20:54 PM EDT
plymouth-core-libs-0.8.9-0.31.20140113.el7.centos.x86_64 Fri 15 Jun 2018 04:20:52 PM EDT
plymouth-scripts-0.8.9-0.31.20140113.el7.centos.x86_64 Fri 15 Jun 2018 04:20:54 PM EDT
policycoreutils-2.5-22.el7.x86_64 Fri 15 Jun 2018 04:20:49 PM EDT
policycoreutils-python-2.5-22.el7.x86_64 Fri 15 Jun 2018 04:20:53 PM EDT
polkit-0.112-14.el7.x86_64 Fri 15 Jun 2018 04:20:53 PM EDT
polkit-pkla-compat-0.1-4.el7.x86_64 Thu 21 Jan 2016 05:45:47 AM EST
popt-1.13-16.el7.x86_64 Thu 21 Jan 2016 05:45:31 AM EST
postfix-2.10.1-6.el7.x86_64 Thu 21 Jan 2016 05:45:56 AM EST
ppp-2.4.5-33.el7.x86_64 Thu 21 Jan 2016 05:45:48 AM EST
procps-ng-3.3.10-17.el7_5.2.x86_64 Fri 15 Jun 2018 04:20:46 PM EDT
psmisc-22.20-16.el7.x86_64 Mon 31 Aug 2020 02:49:36 PM EDT
pth-2.0.7-23.el7.x86_64 Thu 21 Jan 2016 05:45:44 AM EST
pygpgme-0.3-9.el7.x86_64 Thu 21 Jan 2016 05:45:44 AM EST
pyliblzma-0.5.3-11.el7.x86_64 Thu 21 Jan 2016 05:45:41 AM EST
pyserial-2.6-6.el7.noarch Fri 15 Jun 2018 04:20:43 PM EDT
python-2.7.5-68.el7.x86_64 Fri 15 Jun 2018 04:20:40 PM EDT
python2-boto-2.45.0-3.el7.noarch Fri 15 Jun 2018 04:21:20 PM EDT
python2-crypto-2.6.1-15.el7.x86_64 Fri 15 Jun 2018 04:19:42 PM EDT
python2-cryptography-1.7.2-2.el7.x86_64 Fri 15 Jun 2018 04:19:43 PM EDT
python2-jmespath-0.9.0-3.el7.noarch Fri 15 Jun 2018 04:19:43 PM EDT
python2-pyasn1-0.1.9-7.el7.noarch Fri 15 Jun 2018 04:19:41 PM EDT
python2-rsa-3.4.1-1.el7.noarch Fri 15 Jun 2018 04:20:42 PM EDT
python-babel-0.9.6-8.el7.noarch Fri 15 Jun 2018 04:19:42 PM EDT
python-backports-1.0-8.el7.x86_64 Thu 21 Jan 2016 06:39:47 AM EST
python-backports-ssl_match_hostname-3.5.0.1-1.el7.noarch Fri 15 Jun 2018 04:20:42 PM EDT
python-cffi-1.6.0-5.el7.x86_64 Fri 15 Jun 2018 04:19:42 PM EDT
python-chardet-2.2.1-1.el7_1.noarch Thu 21 Jan 2016 06:39:47 AM EST
python-cheetah-2.4.4-5.el7.centos.x86_64 Thu 21 Jan 2016 06:39:48 AM EST
python-configobj-4.7.2-7.el7.noarch Thu 21 Jan 2016 05:45:40 AM EST
python-decorator-3.4.0-3.el7.noarch Thu 21 Jan 2016 05:45:40 AM EST
python-enum34-1.0.4-1.el7.noarch Fri 15 Jun 2018 04:19:43 PM EDT
python-firewall-0.4.4.4-14.el7.noarch Fri 15 Jun 2018 04:20:43 PM EDT
python-gobject-base-3.22.0-1.el7_4.1.x86_64 Fri 15 Jun 2018 04:20:43 PM EDT
python-httplib2-0.9.2-1.el7.noarch Fri 15 Jun 2018 04:19:42 PM EDT
python-idna-2.4-1.el7.noarch Fri 15 Jun 2018 04:19:43 PM EDT
python-iniparse-0.4-9.el7.noarch Thu 21 Jan 2016 05:45:40 AM EST
python-ipaddress-1.0.16-2.el7.noarch Fri 15 Jun 2018 04:19:42 PM EDT
python-IPy-0.75-6.el7.noarch Thu 21 Jan 2016 06:39:48 AM EST
python-jinja2-2.7.2-2.el7.noarch Fri 15 Jun 2018 04:19:43 PM EDT
python-jsonpatch-1.2-4.el7.noarch Fri 15 Jun 2018 04:20:43 PM EDT
python-jsonpointer-1.9-2.el7.noarch Thu 21 Jan 2016 06:39:47 AM EST
python-keyczar-0.71c-2.el7.noarch Fri 15 Jun 2018 04:19:42 PM EDT
python-libs-2.7.5-68.el7.x86_64 Fri 15 Jun 2018 04:20:40 PM EDT
python-linux-procfs-0.4.9-3.el7.noarch Fri 15 Jun 2018 04:20:43 PM EDT
python-markdown-2.4.1-2.el7.noarch Fri 15 Jun 2018 04:21:21 PM EDT
python-markupsafe-0.11-10.el7.x86_64 Fri 15 Jun 2018 04:19:42 PM EDT
python-paramiko-2.1.1-4.el7.noarch Fri 15 Jun 2018 04:19:43 PM EDT
python-perf-3.10.0-862.3.2.el7.x86_64 Fri 15 Jun 2018 04:20:43 PM EDT
python-pillow-2.0.0-19.gitd1c6db8.el7.x86_64 Thu 21 Jan 2016 06:39:47 AM EST
python-ply-3.4-11.el7.noarch Fri 15 Jun 2018 04:19:42 PM EDT
python-prettytable-0.7.2-3.el7.noarch Fri 15 Jun 2018 04:20:43 PM EDT
python-pycparser-2.14-1.el7.noarch Fri 15 Jun 2018 04:19:42 PM EDT
python-pycurl-7.19.0-19.el7.x86_64 Fri 15 Jun 2018 04:20:52 PM EDT
python-pygments-1.4-10.el7.noarch Fri 15 Jun 2018 04:21:21 PM EDT
python-pyudev-0.15-9.el7.noarch Fri 15 Jun 2018 04:20:52 PM EDT
python-requests-2.6.0-1.el7_1.noarch Thu 21 Jan 2016 06:39:48 AM EST
python-schedutils-0.4-6.el7.x86_64 Fri 15 Jun 2018 04:20:43 PM EDT
python-setuptools-0.9.8-7.el7.noarch Fri 15 Jun 2018 04:20:42 PM EDT
python-six-1.9.0-2.el7.noarch Thu 21 Jan 2016 06:39:47 AM EST
python-slip-0.4.0-4.el7.noarch Fri 15 Jun 2018 04:20:43 PM EDT
python-slip-dbus-0.4.0-4.el7.noarch Fri 15 Jun 2018 04:20:43 PM EDT
python-urlgrabber-3.10-8.el7.noarch Fri 15 Jun 2018 04:20:52 PM EDT
python-urllib3-1.10.2-5.el7.noarch Fri 15 Jun 2018 04:21:21 PM EDT
pyxattr-0.5.1-5.el7.x86_64 Thu 21 Jan 2016 05:45:41 AM EST
PyYAML-3.10-11.el7.x86_64 Thu 21 Jan 2016 06:39:47 AM EST
qemu-guest-agent-2.12.0-3.el7.x86_64 Mon 31 Aug 2020 02:49:38 PM EDT
qrencode-libs-3.4.1-3.el7.x86_64 Thu 21 Jan 2016 05:45:45 AM EST
readline-6.2-10.el7.x86_64 Fri 15 Jun 2018 04:20:32 PM EDT
rootfiles-8.1-11.el7.noarch Thu 21 Jan 2016 05:46:09 AM EST
rpm-4.11.3-32.el7.x86_64 Fri 15 Jun 2018 04:20:45 PM EDT
rpm-build-libs-4.11.3-32.el7.x86_64 Fri 15 Jun 2018 04:20:46 PM EDT
rpm-libs-4.11.3-32.el7.x86_64 Fri 15 Jun 2018 04:20:45 PM EDT
rpm-python-4.11.3-32.el7.x86_64 Fri 15 Jun 2018 04:20:46 PM EDT
rsync-3.1.2-4.el7.x86_64 Fri 15 Jun 2018 04:21:19 PM EDT
rsyslog-8.24.0-16.el7_5.4.x86_64 Fri 15 Jun 2018 04:21:08 PM EDT
sed-4.2.2-5.el7.x86_64 Thu 21 Jan 2016 05:45:31 AM EST
selinux-policy-3.13.1-192.el7_5.3.noarch Fri 15 Jun 2018 04:20:51 PM EDT
selinux-policy-targeted-3.13.1-192.el7_5.3.noarch Fri 15 Jun 2018 04:21:10 PM EDT
setools-libs-3.3.8-2.el7.x86_64 Fri 15 Jun 2018 04:20:37 PM EDT
setup-2.8.71-9.el7.noarch Fri 15 Jun 2018 04:20:41 PM EDT
shadow-utils-4.1.5.1-24.el7.x86_64 Fri 15 Jun 2018 04:20:42 PM EDT
shared-mime-info-1.8-4.el7.x86_64 Fri 15 Jun 2018 04:20:41 PM EDT
slang-2.2.4-11.el7.x86_64 Thu 21 Jan 2016 05:45:33 AM EST
snappy-1.1.0-3.el7.x86_64 Thu 21 Jan 2016 05:45:35 AM EST
sqlite-3.7.17-8.el7.x86_64 Thu 21 Jan 2016 05:45:32 AM EST
sshpass-1.06-2.el7.x86_64 Fri 15 Jun 2018 04:19:42 PM EDT
sudo-1.8.19p2-13.el7.x86_64 Fri 15 Jun 2018 04:21:20 PM EDT
systemd-219-57.el7.x86_64 Fri 15 Jun 2018 04:20:49 PM EDT
systemd-libs-219-57.el7.x86_64 Fri 15 Jun 2018 04:20:48 PM EDT
systemd-python-219-57.el7.x86_64 Fri 15 Jun 2018 04:20:51 PM EDT
systemd-sysv-219-57.el7.x86_64 Fri 15 Jun 2018 04:20:49 PM EDT
sysvinit-tools-2.88-14.dsf.el7.x86_64 Thu 21 Jan 2016 05:45:33 AM EST
tar-1.26-34.el7.x86_64 Fri 15 Jun 2018 04:20:37 PM EDT
tcp_wrappers-libs-7.6-77.el7.x86_64 Thu 21 Jan 2016 05:45:33 AM EST
trousers-0.3.14-2.el7.x86_64 Fri 15 Jun 2018 04:20:51 PM EDT
tuned-2.9.0-1.el7.noarch Fri 15 Jun 2018 04:21:08 PM EDT
tzdata-2018e-3.el7.noarch Fri 15 Jun 2018 04:20:25 PM EDT
ustr-1.0.4-16.el7.x86_64 Thu 21 Jan 2016 05:45:35 AM EST
util-linux-2.23.2-52.el7.x86_64 Fri 15 Jun 2018 04:20:46 PM EDT
vim-common-7.4.160-4.el7.x86_64 Fri 15 Jun 2018 04:21:03 PM EDT
vim-enhanced-7.4.160-4.el7.x86_64 Fri 15 Jun 2018 04:21:04 PM EDT
vim-filesystem-7.4.160-4.el7.x86_64 Fri 15 Jun 2018 04:21:02 PM EDT
vim-minimal-7.4.160-4.el7.x86_64 Fri 15 Jun 2018 04:20:37 PM EDT
virt-what-1.18-4.el7.x86_64 Fri 15 Jun 2018 04:20:52 PM EDT
wget-1.14-15.el7_4.1.x86_64 Fri 15 Jun 2018 04:21:21 PM EDT
which-2.20-7.el7.x86_64 Thu 21 Jan 2016 05:45:32 AM EST
wpa_supplicant-2.6-9.el7.x86_64 Fri 15 Jun 2018 04:20:50 PM EDT
xfsprogs-4.5.0-15.el7.x86_64 Fri 15 Jun 2018 04:21:21 PM EDT
xz-5.2.2-1.el7.x86_64 Fri 15 Jun 2018 04:20:33 PM EDT
xz-libs-5.2.2-1.el7.x86_64 Fri 15 Jun 2018 04:20:32 PM EDT
yum-3.4.3-158.el7.centos.noarch Fri 15 Jun 2018 04:20:52 PM EDT
yum-metadata-parser-1.1.4-10.el7.x86_64 Thu 21 Jan 2016 05:45:40 AM EST
yum-plugin-fastestmirror-1.1.31-45.el7.noarch Fri 15 Jun 2018 04:20:52 PM EDT
zlib-1.2.7-18.el7.x86_64 Mon 31 Aug 2020 02:50:22 PM EDT
zlib-devel-1.2.7-18.el7.x86_64 Mon 31 Aug 2020 02:50:22 PM EDT
First of all, could you please edit your post #10 and remove the contents of .ssh/authorized_keys? They are not supposed to be published to a public forum I suppose. This is what you really should be paranoic about.
Why can't you check with your ISP? They surely should know what those users are for.
LinuxQuestions.org is looking for people interested in writing
Editorials, Articles, Reviews, and more. If you'd like to contribute
content, let us know.