@fiona - forgot to include journal log from the time this occurred.
Jun 25 09:35:26 NODE4 pmxcfs[2048]: [status] notice: received log
Jun 25 09:35:26 NODE4 sshd[580845]: Accepted publickey for root from x.x.x.18 port 33370 ssh2: RSA SHA256:aeJdRRu5IP1SizlPkvvFMe/xFzUknqu33DRyG9UhKuA
Jun 25 09:35:26 NODE4 sshd[580845]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Jun 25 09:35:26 NODE4 systemd[1]: Created slice user-0.slice - User Slice of UID 0.
Jun 25 09:35:26 NODE4 systemd[1]: Starting
user-runtime-dir@0.service - User Runtime Directory /run/user/0...
Jun 25 09:35:26 NODE4 systemd-logind[1708]: New session 1109 of user root.
Jun 25 09:35:26 NODE4 systemd[1]: Finished
user-runtime-dir@0.service - User Runtime Directory /run/user/0.
Jun 25 09:35:26 NODE4 systemd[1]: Starting
user@0.service - User Manager for UID 0...
Jun 25 09:35:26 NODE4 (systemd)[580848]: pam_unix(systemd-user:session): session opened for user root(uid=0) by (uid=0)
Jun 25 09:35:26 NODE4 systemd[580848]: Queued start job for default target default.target.
Jun 25 09:35:26 NODE4 systemd[580848]: Created slice app.slice - User Application Slice.
Jun 25 09:35:26 NODE4 systemd[580848]: Reached target paths.target - Paths.
Jun 25 09:35:26 NODE4 systemd[580848]: Reached target timers.target - Timers.
Jun 25 09:35:26 NODE4 systemd[580848]: Listening on dirmngr.socket - GnuPG network certificate management daemon.
Jun 25 09:35:26 NODE4 systemd[580848]: Listening on gpg-agent-browser.socket - GnuPG cryptographic agent and passphrase cache (access for web browsers).
Jun 25 09:35:26 NODE4 systemd[580848]: Listening on gpg-agent-extra.socket - GnuPG cryptographic agent and passphrase cache (restricted).
Jun 25 09:35:26 NODE4 systemd[580848]: Listening on gpg-agent-ssh.socket - GnuPG cryptographic agent (ssh-agent emulation).
Jun 25 09:35:26 NODE4 systemd[580848]: Listening on gpg-agent.socket - GnuPG cryptographic agent and passphrase cache.
Jun 25 09:35:26 NODE4 systemd[580848]: Reached target sockets.target - Sockets.
Jun 25 09:35:26 NODE4 systemd[580848]: Reached target basic.target - Basic System.
Jun 25 09:35:26 NODE4 systemd[580848]: Reached target default.target - Main User Target.
Jun 25 09:35:26 NODE4 systemd[580848]: Startup finished in 227ms.
Jun 25 09:35:26 NODE4 systemd[1]: Started
user@0.service - User Manager for UID 0.
Jun 25 09:35:26 NODE4 systemd[1]: Started session-1109.scope - Session 1109 of User root.
Jun 25 09:35:26 NODE4 sshd[580845]: pam_env(sshd:session): deprecated reading of user environment enabled
Jun 25 09:35:26 NODE4 sshd[580845]: Received disconnect from x.x.x.18 port 33370:11: disconnected by user
Jun 25 09:35:26 NODE4 sshd[580845]: Disconnected from user root x.x.x.18 port 33370
Jun 25 09:35:26 NODE4 sshd[580845]: pam_unix(sshd:session): session closed for user root
Jun 25 09:35:26 NODE4 systemd[1]: session-1109.scope: Deactivated successfully.
Jun 25 09:35:26 NODE4 systemd-logind[1708]: Session 1109 logged out. Waiting for processes to exit.
Jun 25 09:35:26 NODE4 systemd-logind[1708]: Removed session 1109.
Jun 25 09:35:26 NODE4 sshd[580869]: Accepted publickey for root from x.x.x.18 port 33376 ssh2: RSA SHA256:aeJdRRu5IP1SizlPkvvFMe/xFzUknqu33DRyG9UhKuA
Jun 25 09:35:26 NODE4 sshd[580869]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Jun 25 09:35:26 NODE4 systemd-logind[1708]: New session 1111 of user root.
Jun 25 09:35:26 NODE4 systemd[1]: Started session-1111.scope - Session 1111 of User root.
Jun 25 09:35:26 NODE4 sshd[580869]: pam_env(sshd:session): deprecated reading of user environment enabled
Jun 25 09:35:27 NODE4 qm[580875]: <root@pam> starting task UPID:NODE4:0008DD0C:147BB0DB:667AD5AF:qmstart:106:root@pam:
Jun 25 09:35:27 NODE4 qm[580876]: start VM 106: UPID:NODE4:0008DD0C:147BB0DB:667AD5AF:qmstart:106:root@pam:
Jun 25 09:35:34 NODE4 kernel: rbd20: p1 p2 < p5 >
Jun 25 09:35:34 NODE4 kernel: rbd: rbd20: capacity 137438953472 features 0x3d
Jun 25 09:35:34 NODE4 systemd[1]: Started 106.scope.
Jun 25 09:35:35 NODE4 kernel: tap106i0: entered promiscuous mode
Jun 25 09:35:35 NODE4 kernel: vmbr0v2020: port 3(fwpr106p0) entered blocking state
Jun 25 09:35:35 NODE4 kernel: vmbr0v2020: port 3(fwpr106p0) entered disabled state
Jun 25 09:35:35 NODE4 kernel: fwpr106p0: entered allmulticast mode
Jun 25 09:35:35 NODE4 kernel: fwpr106p0: entered promiscuous mode
Jun 25 09:35:35 NODE4 kernel: vmbr0v2020: port 3(fwpr106p0) entered blocking state
Jun 25 09:35:35 NODE4 kernel: vmbr0v2020: port 3(fwpr106p0) entered forwarding state
Jun 25 09:35:35 NODE4 kernel: fwbr106i0: port 1(fwln106i0) entered blocking state
Jun 25 09:35:35 NODE4 kernel: fwbr106i0: port 1(fwln106i0) entered disabled state
Jun 25 09:35:35 NODE4 kernel: fwln106i0: entered allmulticast mode
Jun 25 09:35:35 NODE4 kernel: fwln106i0: entered promiscuous mode
Jun 25 09:35:35 NODE4 kernel: fwbr106i0: port 1(fwln106i0) entered blocking state
Jun 25 09:35:35 NODE4 kernel: fwbr106i0: port 1(fwln106i0) entered forwarding state
Jun 25 09:35:35 NODE4 kernel: fwbr106i0: port 2(tap106i0) entered blocking state
Jun 25 09:35:35 NODE4 kernel: fwbr106i0: port 2(tap106i0) entered disabled state
Jun 25 09:35:35 NODE4 kernel: tap106i0: entered allmulticast mode
Jun 25 09:35:35 NODE4 kernel: fwbr106i0: port 2(tap106i0) entered blocking state
Jun 25 09:35:35 NODE4 kernel: fwbr106i0: port 2(tap106i0) entered forwarding state
Jun 25 09:35:36 NODE4 kernel: tap106i1: entered promiscuous mode
Jun 25 09:35:36 NODE4 kernel: vmbr0: port 3(tap106i1) entered blocking state
Jun 25 09:35:36 NODE4 kernel: vmbr0: port 3(tap106i1) entered disabled state
Jun 25 09:35:36 NODE4 kernel: tap106i1: entered allmulticast mode
Jun 25 09:35:36 NODE4 kernel: vmbr0: port 3(tap106i1) entered blocking state
Jun 25 09:35:36 NODE4 kernel: vmbr0: port 3(tap106i1) entered forwarding state
Jun 25 09:35:36 NODE4 qm[580875]: <root@pam> end task UPID:NODE4:0008DD0C:147BB0DB:667AD5AF:qmstart:106:root@pam: OK
Jun 25 09:35:36 NODE4 sshd[580869]: Received disconnect from x.x.x.18 port 33376:11: disconnected by user
Jun 25 09:35:36 NODE4 sshd[580869]: Disconnected from user root x.x.x.18 port 33376
Jun 25 09:35:36 NODE4 sshd[580869]: pam_unix(sshd:session): session closed for user root
Jun 25 09:35:36 NODE4 systemd[1]: session-1111.scope: Deactivated successfully.
Jun 25 09:35:36 NODE4 systemd-logind[1708]: Session 1111 logged out. Waiting for processes to exit.
Jun 25 09:35:36 NODE4 systemd-logind[1708]: Removed session 1111.
Jun 25 09:35:36 NODE4 sshd[581309]: Accepted publickey for root from x.x.x.18 port 49484 ssh2: RSA SHA256:aeJdRRu5IP1SizlPkvvFMe/xFzUknqu33DRyG9UhKuA
Jun 25 09:35:36 NODE4 sshd[581309]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Jun 25 09:35:36 NODE4 systemd-logind[1708]: New session 1112 of user root.
Jun 25 09:35:36 NODE4 systemd[1]: Started session-1112.scope - Session 1112 of User root.
Jun 25 09:35:36 NODE4 sshd[581309]: pam_env(sshd:session): deprecated reading of user environment enabled
Jun 25 09:35:49 NODE4 pmxcfs[2048]: [status] notice: received log
Jun 25 09:35:53 NODE4 qm[581315]: VM 106 qmp command failed - VM 106 qmp command 'query-status' failed - got timeout
Jun 25 09:35:57 NODE4 pvedaemon[517917]: VM 106 qmp command failed - VM 106 qmp command 'query-proxmox-support' failed - unable to connect to VM 106 qmp socket - timeout after 5>
Jun 25 09:35:57 NODE4 pvedaemon[511154]: VM 106 qmp command failed - VM 106 qmp command 'query-proxmox-support' failed - unable to connect to VM 106 qmp socket - timeout after 5>
Jun 25 09:35:57 NODE4 pmxcfs[2048]: [status] notice: received log
Jun 25 09:35:57 NODE4 sshd[581422]: Accepted publickey for root from x.x.x.13 port 39376 ssh2: RSA SHA256
NqPAVatqUQeBGMm1In5Heq4ZBgQWqJOe80HO5hOqus
Jun 25 09:35:57 NODE4 sshd[581422]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Jun 25 09:35:57 NODE4 systemd-logind[1708]: New session 1113 of user root.
Jun 25 09:35:57 NODE4 systemd[1]: Started session-1113.scope - Session 1113 of User root.
Jun 25 09:35:57 NODE4 sshd[581422]: pam_env(sshd:session): deprecated reading of user environment enabled
Jun 25 09:35:58 NODE4 sshd[581309]: Received disconnect from x.x.x.18 port 49484:11: disconnected by user
Jun 25 09:35:58 NODE4 sshd[581309]: Disconnected from user root x.x.x.18 port 49484
Jun 25 09:35:58 NODE4 sshd[581309]: pam_unix(sshd:session): session closed for user root
Jun 25 09:35:58 NODE4 systemd[1]: session-1112.scope: Deactivated successfully.
Jun 25 09:35:58 NODE4 systemd[1]: session-1112.scope: Consumed 1.454s CPU time.
Jun 25 09:35:58 NODE4 systemd-logind[1708]: Session 1112 logged out. Waiting for processes to exit.
Jun 25 09:35:58 NODE4 systemd-logind[1708]: Removed session 1112.
Jun 25 09:35:59 NODE4 sshd[581454]: Accepted publickey for root from x.x.x.18 port 47724 ssh2: RSA SHA256:aeJdRRu5IP1SizlPkvvFMe/xFzUknqu33DRyG9UhKuA
Jun 25 09:35:59 NODE4 sshd[581454]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Jun 25 09:35:59 NODE4 systemd-logind[1708]: New session 1114 of user root.
Jun 25 09:35:59 NODE4 systemd[1]: Started session-1114.scope - Session 1114 of User root.
Jun 25 09:35:59 NODE4 sshd[581454]: pam_env(sshd:session): deprecated reading of user environment enabled
Jun 25 09:35:59 NODE4 sshd[581454]: Received disconnect from x.x.x.18 port 47724:11: disconnected by user
Jun 25 09:35:59 NODE4 sshd[581454]: Disconnected from user root x.x.x.18 port 47724
Jun 25 09:35:59 NODE4 sshd[581454]: pam_unix(sshd:session): session closed for user root
Jun 25 09:35:59 NODE4 systemd-logind[1708]: Session 1114 logged out. Waiting for processes to exit.
Jun 25 09:35:59 NODE4 systemd[1]: session-1114.scope: Deactivated successfully.
Jun 25 09:35:59 NODE4 systemd-logind[1708]: Removed session 1114.
Jun 25 09:36:00 NODE4 sshd[581461]: Accepted publickey for root from x.x.x.18 port 47732 ssh2: RSA SHA256:aeJdRRu5IP1SizlPkvvFMe/xFzUknqu33DRyG9UhKuA
Jun 25 09:36:00 NODE4 sshd[581461]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Jun 25 09:36:00 NODE4 systemd-logind[1708]: New session 1115 of user root.
Jun 25 09:36:00 NODE4 systemd[1]: Started session-1115.scope - Session 1115 of User root.
Jun 25 09:36:00 NODE4 sshd[581461]: pam_env(sshd:session): deprecated reading of user environment enabled
Jun 25 09:36:01 NODE4 sshd[581461]: Received disconnect from x.x.x.18 port 47732:11: disconnected by user
Jun 25 09:36:01 NODE4 sshd[581461]: Disconnected from user root x.x.x.18 port 47732
Jun 25 09:36:01 NODE4 sshd[581461]: pam_unix(sshd:session): session closed for user root
Jun 25 09:36:01 NODE4 systemd[1]: session-1115.scope: Deactivated successfully.
Jun 25 09:36:01 NODE4 systemd-logind[1708]: Session 1115 logged out. Waiting for processes to exit.
Jun 25 09:36:01 NODE4 systemd-logind[1708]: Removed session 1115.
Jun 25 09:36:01 NODE4 pmxcfs[2048]: [status] notice: received log