Jun 13 02:42:23 localhost polkitd[1038]: Loading rules from directory /etc/polkit-1/rules.d Jun 13 02:42:23 localhost polkitd[1038]: Loading rules from directory /usr/share/polkit-1/rules.d Jun 13 02:42:23 localhost polkitd[1038]: Finished loading, compiling and executing 4 rules Jun 13 02:42:23 localhost polkitd[1038]: Acquired the name org.freedesktop.PolicyKit1 on the system bus Jun 13 02:42:25 localhost useradd[1120]: new group: name=cloud-user, GID=1001 Jun 13 02:42:25 localhost useradd[1120]: new user: name=cloud-user, UID=1001, GID=1001, home=/home/cloud-user, shell=/bin/bash, from=none Jun 13 02:42:25 localhost useradd[1120]: add 'cloud-user' to group 'adm' Jun 13 02:42:25 localhost useradd[1120]: add 'cloud-user' to group 'systemd-journal' Jun 13 02:42:25 localhost useradd[1120]: add 'cloud-user' to shadow group 'adm' Jun 13 02:42:25 localhost useradd[1120]: add 'cloud-user' to shadow group 'systemd-journal' Jun 13 02:42:27 localhost sshd[1134]: Server listening on 0.0.0.0 port 22. Jun 13 02:42:27 localhost sshd[1134]: Server listening on :: port 22. Jun 13 02:42:27 localhost sshd[1233]: Unable to negotiate with 3.222.39.124 port 17110: no matching host key type found. Their offer: ssh-ed25519,ssh-ed25519-cert-v01@openssh.com [preauth] Jun 13 02:42:27 localhost sshd[1169]: Connection closed by 3.222.39.124 port 48715 [preauth] Jun 13 02:42:27 localhost sshd[1134]: Received signal 15; terminating. Jun 13 02:42:27 localhost sshd[1280]: Server listening on 0.0.0.0 port 22. Jun 13 02:42:27 localhost sshd[1280]: Server listening on :: port 22. Jun 13 02:42:28 localhost sshd[1323]: Unable to negotiate with 3.222.39.124 port 40814: no matching host key type found. Their offer: ecdsa-sha2-nistp384,ecdsa-sha2-nistp384-cert-v01@openssh.com [preauth] Jun 13 02:42:28 localhost sshd[1264]: Connection closed by 3.222.39.124 port 34462 [preauth] Jun 13 02:42:28 localhost sshd[1353]: Unable to negotiate with 3.222.39.124 port 45772: no matching host key type found. Their offer: ecdsa-sha2-nistp521,ecdsa-sha2-nistp521-cert-v01@openssh.com [preauth] Jun 13 02:42:28 localhost sshd[1394]: Connection closed by 3.222.39.124 port 51962 [preauth] Jun 13 02:42:28 localhost sshd[1466]: fatal: mm_answer_sign: sign: error in libcrypto Jun 13 02:42:28 localhost sshd[1437]: Connection closed by 3.222.39.124 port 11616 [preauth] Jun 13 02:42:28 localhost sshd[1516]: Unable to negotiate with 3.222.39.124 port 44470: no matching host key type found. Their offer: ssh-dss,ssh-dss-cert-v01@openssh.com [preauth] Jun 13 02:45:18 localhost sshd[4185]: Accepted publickey for zuul from 38.102.83.47 port 43080 ssh2: RSA SHA256:7gq7E0OWmrPdN0CFoCfD84AwMVQIXRl+sxLM/ofbgB4 Jun 13 02:45:18 localhost systemd[4189]: pam_unix(systemd-user:session): session opened for user zuul(uid=1000) by (uid=0) Jun 13 02:45:18 localhost sshd[4185]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Jun 13 02:45:52 localhost sudo[4785]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-wrefubewltxmzwqeahqtjlzuhxaxgfgt ; /usr/bin/python3 Jun 13 02:45:52 localhost sudo[4785]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 13 02:45:53 localhost sudo[4785]: pam_unix(sudo:session): session closed for user root Jun 13 02:45:53 localhost sudo[4833]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-rrmrtrkiatfpavqjqmteufbamndratle ; /usr/bin/python3 Jun 13 02:45:53 localhost sudo[4833]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 13 02:45:54 localhost sudo[4833]: pam_unix(sudo:session): session closed for user root Jun 13 02:45:54 localhost sudo[4876]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-cwfhydhpexrllqziiyqibfqruciedtxf ; /usr/bin/python3 Jun 13 02:45:54 localhost sudo[4876]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 13 02:45:54 localhost sudo[4876]: pam_unix(sudo:session): session closed for user root Jun 13 02:46:10 localhost sudo[5270]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-bjrjdxraflxuppbedmcggikcdzwzvdkn ; /usr/bin/python3 Jun 13 02:46:10 localhost sudo[5270]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 13 02:46:10 localhost sudo[5270]: pam_unix(sudo:session): session closed for user root Jun 13 02:46:11 localhost sudo[5291]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-srvmyrhjatxhcujufflokwjzuyoggjud ; /usr/bin/python3 Jun 13 02:46:11 localhost sudo[5291]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 13 02:46:11 localhost sudo[5291]: pam_unix(sudo:session): session closed for user root Jun 13 02:46:15 localhost sudo[5541]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-acxlvpwuyvhxtnkmyybecwvmurfjudex ; /usr/bin/python3 Jun 13 02:46:15 localhost sudo[5541]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 13 02:46:15 localhost sudo[5541]: pam_unix(sudo:session): session closed for user root Jun 13 02:46:16 localhost sudo[5584]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-wpkzmjsnxyqghioxrymlqdpojymoeusn ; /usr/bin/python3 Jun 13 02:46:16 localhost sudo[5584]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 13 02:46:16 localhost sudo[5584]: pam_unix(sudo:session): session closed for user root Jun 13 02:46:18 localhost sudo[5678]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-kqtqjlhmvphtkdieomoudcuakingpmds ; /usr/bin/python3 Jun 13 02:46:18 localhost sudo[5678]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 13 02:46:18 localhost sudo[5678]: pam_unix(sudo:session): session closed for user root Jun 13 02:46:19 localhost sudo[5721]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-pmygafbawmzgnoiazuogapuftmndnish ; /usr/bin/python3 Jun 13 02:46:19 localhost sudo[5721]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 13 02:46:19 localhost sudo[5721]: pam_unix(sudo:session): session closed for user root Jun 13 02:46:20 localhost sudo[5752]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-nrfybgqcjluqmauaeblhjiahjobotqnl ; /usr/bin/python3 Jun 13 02:46:20 localhost sudo[5752]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 13 02:46:20 localhost sudo[5752]: pam_unix(sudo:session): session closed for user root Jun 13 02:46:43 localhost sudo[5806]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-dfbuymphwqarafqolrykkuxhzdoqlipq ; /usr/bin/python3 Jun 13 02:46:43 localhost sudo[5806]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 13 02:46:43 localhost sudo[5806]: pam_unix(sudo:session): session closed for user root Jun 13 02:47:43 localhost sshd[4198]: Received disconnect from 38.102.83.47 port 43080:11: disconnected by user Jun 13 02:47:43 localhost sshd[4198]: Disconnected from user zuul 38.102.83.47 port 43080 Jun 13 02:47:43 localhost sshd[4185]: pam_unix(sshd:session): session closed for user zuul Jun 13 02:48:21 localhost sshd[5816]: Accepted publickey for zuul from 38.102.83.47 port 40858 ssh2: RSA SHA256:3sZlHnt3oHTSVjZPbaQqBDVJ1duPlSx7FoEwaLn2Nw8 Jun 13 02:48:21 localhost sshd[5816]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Jun 13 02:48:35 localhost sudo[5881]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-vxricdvqxljzyzbanbeyzqhuwbyjtjoo ; OS_CLOUD=vexxhost /usr/bin/python3 Jun 13 02:48:35 localhost sudo[5881]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 13 02:48:35 localhost sudo[5881]: pam_unix(sudo:session): session closed for user root Jun 13 02:48:35 localhost sudo[5924]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-bcgetncnjaoyqapnbljwyjtrexyvvcli ; OS_CLOUD=vexxhost /usr/bin/python3 Jun 13 02:48:35 localhost sudo[5924]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 13 02:48:35 localhost sudo[5924]: pam_unix(sudo:session): session closed for user root Jun 13 02:48:35 localhost sudo[5954]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-dnhdifegvqfanitmzlqmdceqrxuehwco ; OS_CLOUD=vexxhost /usr/bin/python3 Jun 13 02:48:35 localhost sudo[5954]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 13 02:48:36 localhost sudo[5954]: pam_unix(sudo:session): session closed for user root Jun 13 02:49:36 localhost sshd[5819]: Received disconnect from 38.102.83.47 port 40858:11: disconnected by user Jun 13 02:49:36 localhost sshd[5819]: Disconnected from user zuul 38.102.83.47 port 40858 Jun 13 02:49:36 localhost sshd[5816]: pam_unix(sshd:session): session closed for user zuul Jun 13 02:49:42 localhost sshd[6058]: Invalid user admin from 182.152.31.4 port 35160 Jun 13 02:49:42 localhost sshd[6058]: Connection closed by invalid user admin 182.152.31.4 port 35160 [preauth] Jun 13 02:50:15 localhost sshd[6062]: Invalid user orangepi from 182.152.31.4 port 37358 Jun 13 02:50:15 localhost sshd[6062]: Connection closed by invalid user orangepi 182.152.31.4 port 37358 [preauth] Jun 13 02:51:06 localhost sshd[6065]: Accepted publickey for zuul from 38.102.83.47 port 38094 ssh2: RSA SHA256:3sZlHnt3oHTSVjZPbaQqBDVJ1duPlSx7FoEwaLn2Nw8 Jun 13 02:51:06 localhost sshd[6065]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Jun 13 02:51:07 localhost sudo[6114]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-fxpacutrnfrmaquqnyokyefxcxrsgfpb ; OS_CLOUD=vexxhost /usr/bin/python3 Jun 13 02:51:07 localhost sudo[6114]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 13 02:51:07 localhost sudo[6114]: pam_unix(sudo:session): session closed for user root Jun 13 02:51:07 localhost sudo[6157]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-rbwxlllvsrkhkvqjkhdudzfursegqynj ; OS_CLOUD=vexxhost /usr/bin/python3 Jun 13 02:51:07 localhost sudo[6157]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 13 02:51:07 localhost sudo[6157]: pam_unix(sudo:session): session closed for user root Jun 13 02:51:10 localhost sshd[6065]: pam_unix(sshd:session): session closed for user zuul Jun 13 03:01:03 localhost sshd[6196]: Accepted publickey for zuul from 38.102.83.47 port 45208 ssh2: RSA SHA256:3sZlHnt3oHTSVjZPbaQqBDVJ1duPlSx7FoEwaLn2Nw8 Jun 13 03:01:03 localhost sshd[6196]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Jun 13 03:01:03 localhost sudo[6213]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-uszbthkglccqhubebioqapxswkgpuxav ; /usr/bin/python3 Jun 13 03:01:03 localhost sudo[6213]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 13 03:01:03 localhost sudo[6213]: pam_unix(sudo:session): session closed for user root Jun 13 03:01:04 localhost sudo[6232]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-setgnuvrlfeiadyfhshunjmtnyflinrd ; /usr/bin/python3 Jun 13 03:01:04 localhost sudo[6232]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 13 03:01:04 localhost sudo[6232]: pam_unix(sudo:session): session closed for user root Jun 13 03:01:04 localhost sudo[6248]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-hepxxugrdkyxqslhpqywcdimbkotlzhg ; /usr/bin/python3 Jun 13 03:01:04 localhost sudo[6248]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 13 03:01:04 localhost sudo[6248]: pam_unix(sudo:session): session closed for user root Jun 13 03:01:05 localhost sudo[6265]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-wwvoduyxccvrcjulrkdizcnncumxhvym ; /usr/bin/python3 Jun 13 03:01:05 localhost sudo[6265]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 13 03:01:05 localhost sudo[6265]: pam_unix(sudo:session): session closed for user root Jun 13 03:01:05 localhost sudo[6281]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-muksllplxqtyrljlzfmtksoxhmngpwxl ; /usr/bin/python3 Jun 13 03:01:05 localhost sudo[6281]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 13 03:01:05 localhost sudo[6281]: pam_unix(sudo:session): session closed for user root Jun 13 03:01:06 localhost sudo[6297]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-pfvpgqqqenhgfmlyditestjdctrevwqi ; /usr/bin/python3 Jun 13 03:01:06 localhost sudo[6297]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 13 03:01:06 localhost sudo[6297]: pam_unix(sudo:session): session closed for user root Jun 13 03:01:07 localhost sudo[6345]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-bgbbawnrvwujlrscqrengivujjxxznka ; /usr/bin/python3 Jun 13 03:01:07 localhost sudo[6345]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 13 03:01:07 localhost sudo[6345]: pam_unix(sudo:session): session closed for user root Jun 13 03:01:07 localhost sudo[6388]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-tmviccbepmvmjcsyzzpmjqtabpadwgcg ; /usr/bin/python3 Jun 13 03:01:07 localhost sudo[6388]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 13 03:01:07 localhost sudo[6388]: pam_unix(sudo:session): session closed for user root Jun 13 03:01:09 localhost sudo[6418]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-obozbiksxqwvsxkpnyzvflfohlutgsda ; /usr/bin/python3 Jun 13 03:01:09 localhost sudo[6418]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 13 03:01:09 localhost sudo[6418]: pam_unix(sudo:session): session closed for user root Jun 13 03:01:11 localhost sudo[6465]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-nlhoqbhgdtiaaiakncrucgnuidihahvq ; /usr/bin/python3 Jun 13 03:01:11 localhost sudo[6465]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 13 03:01:11 localhost sudo[6465]: pam_unix(sudo:session): session closed for user root Jun 13 03:01:11 localhost sudo[6481]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-rxzwdkzscpynagmmfpctwshswnvklzoh ; /usr/bin/python3 Jun 13 03:01:11 localhost sudo[6481]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 13 03:01:12 localhost sudo[6481]: pam_unix(sudo:session): session closed for user root Jun 13 03:01:12 localhost sudo[6499]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-srjepapeitmozyrblgfowtwlcocayjoq ; /usr/bin/python3 Jun 13 03:01:12 localhost sudo[6499]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 13 03:01:12 localhost sudo[6499]: pam_unix(sudo:session): session closed for user root Jun 13 03:01:12 localhost sudo[6517]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ruljwuxgxuxvlronqtghgjcummvoogsg ; /usr/bin/python3 Jun 13 03:01:12 localhost sudo[6517]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 13 03:01:12 localhost sudo[6517]: pam_unix(sudo:session): session closed for user root Jun 13 03:01:12 localhost sudo[6535]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-vuijkoafcmwqeykdcxuvabuecalocnic ; /usr/bin/python3 Jun 13 03:01:12 localhost sudo[6535]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 13 03:01:12 localhost sudo[6535]: pam_unix(sudo:session): session closed for user root Jun 13 03:01:18 localhost sshd[6196]: pam_unix(sshd:session): session closed for user zuul Jun 13 03:02:19 localhost sshd[6579]: Accepted publickey for zuul from 38.102.83.47 port 43066 ssh2: RSA SHA256:3sZlHnt3oHTSVjZPbaQqBDVJ1duPlSx7FoEwaLn2Nw8 Jun 13 03:02:19 localhost sshd[6579]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Jun 13 03:02:19 localhost sudo[6596]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-gybfgbwqpllfdkuxvrndtzymltqswilt ; /usr/bin/python3 Jun 13 03:02:19 localhost sudo[6596]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 13 03:02:26 localhost sudo[6596]: pam_unix(sudo:session): session closed for user root Jun 13 03:02:27 localhost sudo[6711]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-bgbzxtvtruwlpkmwcgeomltwdgntddie ; /usr/bin/python3 Jun 13 03:02:27 localhost sudo[6711]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 13 03:03:23 localhost sudo[6711]: pam_unix(sudo:session): session closed for user root Jun 13 03:03:23 localhost sudo[9748]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-dqyyvpplxskuxmtpxczugkbhizydztda ; /usr/bin/python3 Jun 13 03:03:23 localhost sudo[9748]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 13 03:03:24 localhost sudo[9748]: pam_unix(sudo:session): session closed for user root Jun 13 03:03:25 localhost sshd[6579]: pam_unix(sshd:session): session closed for user zuul Jun 13 03:03:42 localhost sshd[18542]: Connection closed by 38.102.83.213 port 55114 [preauth] Jun 13 03:03:42 localhost sshd[18540]: Unable to negotiate with 38.102.83.213 port 55160: no matching host key type found. Their offer: sk-ecdsa-sha2-nistp256@openssh.com [preauth] Jun 13 03:03:42 localhost sshd[18541]: Unable to negotiate with 38.102.83.213 port 55170: no matching host key type found. Their offer: sk-ssh-ed25519@openssh.com [preauth] Jun 13 03:03:42 localhost sshd[18544]: Connection closed by 38.102.83.213 port 55128 [preauth] Jun 13 03:03:42 localhost sshd[18543]: Unable to negotiate with 38.102.83.213 port 55144: no matching host key type found. Their offer: ssh-ed25519 [preauth] Jun 13 03:03:46 localhost sshd[18550]: Accepted publickey for zuul from 38.102.83.47 port 45448 ssh2: RSA SHA256:3sZlHnt3oHTSVjZPbaQqBDVJ1duPlSx7FoEwaLn2Nw8 Jun 13 03:03:46 localhost sshd[18550]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Jun 13 03:03:47 localhost sudo[18581]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-spfyblvsbabibcfvhtaxzdkphwcxuqnf ; /usr/bin/python3 Jun 13 03:03:47 localhost sudo[18581]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 13 03:03:47 localhost sudo[18581]: pam_unix(sudo:session): session closed for user root Jun 13 03:03:48 localhost sshd[18550]: pam_unix(sshd:session): session closed for user zuul Jun 13 03:05:32 localhost sshd[18586]: Accepted publickey for zuul from 38.102.83.47 port 55508 ssh2: RSA SHA256:3sZlHnt3oHTSVjZPbaQqBDVJ1duPlSx7FoEwaLn2Nw8 Jun 13 03:05:32 localhost sshd[18586]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Jun 13 03:05:32 localhost sudo[18603]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-xcqvpznlmhjvvesaqnnwmylabpyclynu ; /usr/bin/python3 Jun 13 03:05:32 localhost sudo[18603]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 13 03:05:32 localhost sudo[18603]: pam_unix(sudo:session): session closed for user root Jun 13 03:05:33 localhost sudo[18619]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-tsvddkgptuhjbaammcyywtshvewdcyjm ; /usr/bin/python3 Jun 13 03:05:33 localhost sudo[18619]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 13 03:05:33 localhost sudo[18619]: pam_unix(sudo:session): session closed for user root Jun 13 03:05:34 localhost sudo[18669]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-uuitccjflmigezzrimsvoytzcrvfyhyp ; /usr/bin/python3 Jun 13 03:05:34 localhost sudo[18669]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 13 03:05:34 localhost sudo[18669]: pam_unix(sudo:session): session closed for user root Jun 13 03:05:35 localhost sudo[18712]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-rclbszuqvnjcwdxkrbhaawsukwcqcwsz ; /usr/bin/python3 Jun 13 03:05:35 localhost sudo[18712]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 13 03:05:35 localhost sudo[18712]: pam_unix(sudo:session): session closed for user root Jun 13 03:05:36 localhost sudo[18774]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-dztviykrawsnsohwoozvuxqttbnwcehq ; /usr/bin/python3 Jun 13 03:05:36 localhost sudo[18774]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 13 03:05:36 localhost sudo[18774]: pam_unix(sudo:session): session closed for user root Jun 13 03:05:36 localhost sudo[18817]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-xbtzzjqlnxcdcrofddcvfczpnzfmopit ; /usr/bin/python3 Jun 13 03:05:36 localhost sudo[18817]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 13 03:05:36 localhost sudo[18817]: pam_unix(sudo:session): session closed for user root Jun 13 03:05:38 localhost sudo[18847]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-enhaergmsculoqpufmejbyhjyanntlyh ; /usr/bin/python3 Jun 13 03:05:38 localhost sudo[18847]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 13 03:05:38 localhost sudo[18847]: pam_unix(sudo:session): session closed for user root Jun 13 03:05:43 localhost sshd[18586]: pam_unix(sshd:session): session closed for user zuul Jun 13 03:07:58 localhost sshd[19078]: Accepted publickey for zuul from 38.102.83.213 port 46094 ssh2: RSA SHA256:3sZlHnt3oHTSVjZPbaQqBDVJ1duPlSx7FoEwaLn2Nw8 Jun 13 03:07:58 localhost sshd[19078]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Jun 13 03:12:58 localhost sshd[19081]: Received disconnect from 38.102.83.213 port 46094:11: disconnected by user Jun 13 03:12:58 localhost sshd[19081]: Disconnected from user zuul 38.102.83.213 port 46094 Jun 13 03:12:58 localhost sshd[19078]: pam_unix(sshd:session): session closed for user zuul Jun 13 03:19:17 localhost sshd[19129]: Accepted publickey for zuul from 38.102.83.47 port 43784 ssh2: RSA SHA256:3sZlHnt3oHTSVjZPbaQqBDVJ1duPlSx7FoEwaLn2Nw8 Jun 13 03:19:17 localhost sshd[19129]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Jun 13 03:19:18 localhost sudo[19164]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-efzgruizlzjizwxkukaaudwxouuxqcqa ; /usr/bin/python3 Jun 13 03:19:18 localhost sudo[19164]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 13 03:19:20 localhost sudo[19164]: pam_unix(sudo:session): session closed for user root Jun 13 03:19:21 localhost sudo[19183]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-geolkseidqwgqtqvuxjpshlzbiarvurj ; /usr/bin/python3 Jun 13 03:19:21 localhost sudo[19183]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 13 03:19:49 localhost sudo[19183]: pam_unix(sudo:session): session closed for user root Jun 13 03:19:52 localhost sudo[19341]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-khllvfwxcxhkcibhaucahzvuwtntfjzx ; /usr/bin/python3 Jun 13 03:19:52 localhost sudo[19341]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 13 03:19:57 localhost sudo[19341]: pam_unix(sudo:session): session closed for user root Jun 13 03:19:58 localhost sudo[19541]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-wzsifkhrkdwzgovyvtxtxgjmswvskihj ; /usr/bin/python3 Jun 13 03:19:58 localhost sudo[19541]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 13 03:20:13 localhost sudo[19541]: pam_unix(sudo:session): session closed for user root Jun 13 03:20:15 localhost sudo[19876]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-zkxlmiedowvclzwjkjvuyfbjczlomnec ; /usr/bin/python3 Jun 13 03:20:15 localhost sudo[19876]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 13 03:20:30 localhost sudo[19876]: pam_unix(sudo:session): session closed for user root Jun 13 03:20:30 localhost sudo[20212]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-zvvbxwwgudaoodxgcxwujqhvvrlyhyfy ; /usr/bin/python3 Jun 13 03:20:30 localhost sudo[20212]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 13 03:20:47 localhost sudo[20212]: pam_unix(sudo:session): session closed for user root Jun 13 03:20:49 localhost sudo[20492]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-qihjiihvjnhaysevajxoadxkxizhqbmy ; /usr/bin/python3 Jun 13 03:20:49 localhost sudo[20492]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 13 03:20:51 localhost sudo[20492]: pam_unix(sudo:session): session closed for user root Jun 13 03:20:52 localhost sudo[20511]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-clwlqujdkuuxplbjxuytxgjkosykqwnl ; /usr/bin/python3 Jun 13 03:20:52 localhost sudo[20511]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 13 03:21:12 localhost groupadd[20610]: group added to /etc/group: name=unbound, GID=987 Jun 13 03:21:12 localhost groupadd[20610]: group added to /etc/gshadow: name=unbound Jun 13 03:21:12 localhost groupadd[20610]: new group: name=unbound, GID=987 Jun 13 03:21:12 localhost useradd[20617]: new user: name=unbound, UID=987, GID=987, home=/etc/unbound, shell=/sbin/nologin, from=none Jun 13 03:21:12 localhost groupadd[20630]: group added to /etc/group: name=openvswitch, GID=986 Jun 13 03:21:12 localhost groupadd[20630]: group added to /etc/gshadow: name=openvswitch Jun 13 03:21:12 localhost groupadd[20630]: new group: name=openvswitch, GID=986 Jun 13 03:21:12 localhost useradd[20637]: new user: name=openvswitch, UID=986, GID=986, home=/, shell=/sbin/nologin, from=none Jun 13 03:21:12 localhost groupadd[20645]: group added to /etc/group: name=hugetlbfs, GID=985 Jun 13 03:21:12 localhost groupadd[20645]: group added to /etc/gshadow: name=hugetlbfs Jun 13 03:21:12 localhost groupadd[20645]: new group: name=hugetlbfs, GID=985 Jun 13 03:21:12 localhost usermod[20653]: add 'openvswitch' to group 'hugetlbfs' Jun 13 03:21:12 localhost usermod[20653]: add 'openvswitch' to shadow group 'hugetlbfs' Jun 13 03:21:18 localhost sudo[20511]: pam_unix(sudo:session): session closed for user root Jun 13 03:21:19 localhost sudo[21810]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-acronewsserbjrofbfpkarwqzvgpzjdz ; /usr/bin/python3 Jun 13 03:21:19 localhost sudo[21810]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 13 03:21:39 localhost sudo[21810]: pam_unix(sudo:session): session closed for user root Jun 13 03:21:40 localhost sudo[21830]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-pxkpteusdcfcpgrzhahuwjjtxeyfqkyn ; /usr/bin/python3 Jun 13 03:21:40 localhost sudo[21830]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 13 03:21:40 localhost sudo[21830]: pam_unix(sudo:session): session closed for user root Jun 13 03:21:40 localhost sudo[21878]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-lcrwjycoanbxewziwsswhcawhsypgzek ; /usr/bin/python3 Jun 13 03:21:40 localhost sudo[21878]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 13 03:21:41 localhost sudo[21878]: pam_unix(sudo:session): session closed for user root Jun 13 03:21:41 localhost sudo[21921]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-hovxwgxmudjukyrtasxfcpchgycmpqxv ; /usr/bin/python3 Jun 13 03:21:41 localhost sudo[21921]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 13 03:21:41 localhost sudo[21921]: pam_unix(sudo:session): session closed for user root Jun 13 03:21:42 localhost sudo[21951]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ajwfwfxepvdztjynjdbhygbhaghrfrao ; /usr/bin/python3 Jun 13 03:21:42 localhost sudo[21951]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 13 03:21:42 localhost sudo[21951]: pam_unix(sudo:session): session closed for user root Jun 13 03:21:42 localhost sudo[21972]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-cgxhesynwmojxvrwmscsrexgtekyqcyy ; /usr/bin/python3 Jun 13 03:21:42 localhost sudo[21972]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 13 03:21:42 localhost sudo[21972]: pam_unix(sudo:session): session closed for user root Jun 13 03:21:42 localhost sudo[21992]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-zscqxarpikjxxzrvgkgsnoodndkbnpwt ; /usr/bin/python3 Jun 13 03:21:42 localhost sudo[21992]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 13 03:21:42 localhost sudo[21992]: pam_unix(sudo:session): session closed for user root Jun 13 03:21:43 localhost sudo[22012]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-vabjjozrywtraixtxckafmygknlcciqp ; /usr/bin/python3 Jun 13 03:21:43 localhost sudo[22012]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 13 03:21:43 localhost sudo[22012]: pam_unix(sudo:session): session closed for user root Jun 13 03:21:43 localhost sudo[22032]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-nztafpaqwcilqbjkqjhcbtamjhzdsqpg ; /usr/bin/python3 Jun 13 03:21:43 localhost sudo[22032]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 13 03:21:43 localhost sudo[22032]: pam_unix(sudo:session): session closed for user root Jun 13 03:21:44 localhost sudo[22052]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-zlliotjppwzopspraqfblrreqhdrhcwj ; /usr/bin/python3 Jun 13 03:21:44 localhost sudo[22052]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 13 03:21:45 localhost sudo[22052]: pam_unix(sudo:session): session closed for user root Jun 13 03:21:45 localhost sudo[22225]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-zrrhgqhjkvhlfcsbyhjvtsulhtgtvftg ; /usr/bin/python3 Jun 13 03:21:45 localhost sudo[22225]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 13 03:21:46 localhost sudo[22225]: pam_unix(sudo:session): session closed for user root Jun 13 03:21:46 localhost sudo[22391]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-icbpoqnpglecaeeupyrmfmsrltenjgfy ; /usr/bin/python3 Jun 13 03:21:46 localhost sudo[22391]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 13 03:22:16 localhost sudo[22391]: pam_unix(sudo:session): session closed for user root Jun 13 03:22:43 localhost sudo[23714]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-dxepshmlgedidafqlnysvmdjjmwhgxdk ; /usr/bin/python3 Jun 13 03:22:43 localhost sudo[23714]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 13 03:22:43 localhost sudo[23714]: pam_unix(sudo:session): session closed for user root Jun 13 03:22:44 localhost sudo[23744]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-igulutsqpnbsfnfbhazhdzrcxufmuivt ; /usr/bin/python3 Jun 13 03:22:44 localhost sudo[23744]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 13 03:22:44 localhost sudo[23744]: pam_unix(sudo:session): session closed for user root Jun 13 03:22:46 localhost sudo[23793]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-mynogdbwjkrauarnoxherwdeuobscrxo ; /usr/bin/python3 Jun 13 03:22:46 localhost sudo[23793]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 13 03:22:46 localhost sudo[23793]: pam_unix(sudo:session): session closed for user root Jun 13 03:22:47 localhost sshd[19129]: pam_unix(sshd:session): session closed for user zuul Jun 13 03:22:49 localhost sshd[23811]: Accepted publickey for zuul from 38.102.83.47 port 50734 ssh2: RSA SHA256:3sZlHnt3oHTSVjZPbaQqBDVJ1duPlSx7FoEwaLn2Nw8 Jun 13 03:22:49 localhost sshd[23811]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Jun 13 03:22:51 localhost sshd[23811]: pam_unix(sshd:session): session closed for user zuul Jun 13 03:25:28 localhost sshd[23834]: fatal: Timeout before authentication for 120.48.29.51 port 59808 Jun 13 03:29:23 localhost sshd[23836]: Connection closed by authenticating user root 120.48.29.51 port 52704 [preauth] Jun 13 03:29:24 localhost sshd[23838]: Connection closed by authenticating user root 120.48.29.51 port 47492 [preauth] Jun 13 03:29:29 localhost sshd[23840]: Connection closed by authenticating user root 120.48.29.51 port 47500 [preauth] Jun 13 03:29:31 localhost sshd[23842]: Connection closed by authenticating user root 120.48.29.51 port 47512 [preauth] Jun 13 03:29:40 localhost sshd[23844]: Connection closed by authenticating user root 120.48.29.51 port 41830 [preauth] Jun 13 03:29:41 localhost sshd[23846]: Connection closed by authenticating user root 120.48.29.51 port 41836 [preauth] Jun 13 03:29:45 localhost sshd[23848]: Connection closed by authenticating user root 120.48.29.51 port 33584 [preauth] Jun 13 03:29:47 localhost sshd[23850]: Connection closed by authenticating user root 120.48.29.51 port 33598 [preauth] Jun 13 03:29:52 localhost sshd[23852]: Connection closed by authenticating user root 120.48.29.51 port 33610 [preauth] Jun 13 03:30:18 localhost sshd[23854]: Connection closed by authenticating user root 120.48.29.51 port 33822 [preauth] Jun 13 03:30:27 localhost sshd[23856]: Connection closed by authenticating user root 120.48.29.51 port 46434 [preauth] Jun 13 03:30:30 localhost sshd[23858]: Connection closed by authenticating user root 120.48.29.51 port 33226 [preauth] Jun 13 03:30:32 localhost sshd[23860]: Connection closed by authenticating user root 120.48.29.51 port 33234 [preauth] Jun 13 03:30:43 localhost sshd[23862]: Connection closed by authenticating user root 120.48.29.51 port 53174 [preauth] Jun 13 03:30:49 localhost sshd[23864]: Connection closed by authenticating user root 120.48.29.51 port 48784 [preauth] Jun 13 03:30:50 localhost sshd[23866]: Connection closed by authenticating user root 120.48.29.51 port 48800 [preauth] Jun 13 03:30:55 localhost sshd[23868]: Connection closed by authenticating user root 120.48.29.51 port 48812 [preauth] Jun 13 03:30:55 localhost sshd[23870]: Connection closed by authenticating user root 120.48.29.51 port 54474 [preauth] Jun 13 03:30:57 localhost sshd[23872]: Connection closed by authenticating user root 120.48.29.51 port 54486 [preauth] Jun 13 03:31:00 localhost sshd[23874]: Connection closed by authenticating user root 120.48.29.51 port 54492 [preauth] Jun 13 03:31:02 localhost sshd[23876]: Connection closed by authenticating user root 120.48.29.51 port 54500 [preauth] Jun 13 03:31:04 localhost sshd[23878]: Connection closed by authenticating user root 120.48.29.51 port 50454 [preauth] Jun 13 03:31:08 localhost sshd[23880]: Connection closed by authenticating user root 120.48.29.51 port 50462 [preauth] Jun 13 03:31:35 localhost sshd[23882]: Connection closed by authenticating user root 120.48.29.51 port 50464 [preauth] Jun 13 03:32:16 localhost sshd[23885]: Connection closed by authenticating user root 120.48.29.51 port 42238 [preauth] Jun 13 03:32:21 localhost sshd[23888]: Connection closed by authenticating user root 120.48.29.51 port 36408 [preauth] Jun 13 03:33:12 localhost sshd[23892]: Connection closed by authenticating user root 120.48.29.51 port 38636 [preauth] Jun 13 03:33:12 localhost sshd[23890]: Connection closed by authenticating user root 120.48.29.51 port 34282 [preauth] Jun 13 03:33:27 localhost sshd[23894]: Connection closed by authenticating user root 120.48.29.51 port 58024 [preauth] Jun 13 03:33:29 localhost sshd[23896]: Connection closed by authenticating user root 120.48.29.51 port 57786 [preauth] Jun 13 03:33:34 localhost sshd[23898]: Connection closed by authenticating user root 120.48.29.51 port 57796 [preauth] Jun 13 03:33:36 localhost sshd[23900]: Connection closed by authenticating user root 120.48.29.51 port 58054 [preauth] Jun 13 03:33:48 localhost sshd[23902]: Connection closed by authenticating user root 120.48.29.51 port 58056 [preauth] Jun 13 03:33:51 localhost sshd[23904]: Connection closed by authenticating user root 120.48.29.51 port 45392 [preauth] Jun 13 03:33:53 localhost sshd[23906]: Connection closed by authenticating user root 120.48.29.51 port 36786 [preauth] Jun 13 03:34:09 localhost sshd[23908]: Connection closed by authenticating user root 120.48.29.51 port 36802 [preauth] Jun 13 03:34:11 localhost sshd[23910]: Connection closed by authenticating user root 120.48.29.51 port 42766 [preauth] Jun 13 03:34:30 localhost sshd[23912]: Connection closed by authenticating user root 120.48.29.51 port 46612 [preauth] Jun 13 03:34:32 localhost sshd[23914]: Connection closed by authenticating user root 120.48.29.51 port 48248 [preauth] Jun 13 03:34:36 localhost sshd[23916]: Connection closed by authenticating user root 120.48.29.51 port 44234 [preauth] Jun 13 03:34:39 localhost sshd[23918]: Connection closed by authenticating user root 120.48.29.51 port 44236 [preauth] Jun 13 03:34:46 localhost sshd[23920]: Connection closed by authenticating user root 120.48.29.51 port 44242 [preauth] Jun 13 03:36:51 localhost sshd[23922]: fatal: Timeout before authentication for 120.48.29.51 port 47502 Jun 13 03:39:32 localhost sshd[23928]: Accepted publickey for zuul from 38.102.83.47 port 50404 ssh2: RSA SHA256:3sZlHnt3oHTSVjZPbaQqBDVJ1duPlSx7FoEwaLn2Nw8 Jun 13 03:39:32 localhost sshd[23928]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Jun 13 03:39:32 localhost sudo[23945]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-aotcudgrtlrbvilhshwpzlnixylpmlar ; /usr/bin/python3 Jun 13 03:39:32 localhost sudo[23945]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 13 03:39:33 localhost sudo[23945]: pam_unix(sudo:session): session closed for user root Jun 13 03:39:34 localhost sshd[23928]: pam_unix(sshd:session): session closed for user zuul Jun 13 03:39:43 localhost sshd[23951]: Accepted publickey for zuul from 38.102.83.47 port 37104 ssh2: RSA SHA256:3sZlHnt3oHTSVjZPbaQqBDVJ1duPlSx7FoEwaLn2Nw8 Jun 13 03:39:43 localhost sshd[23951]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Jun 13 03:39:43 localhost sudo[23955]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/rsync --server --sender -lLogDtprze.LsfxCIvu . /var/log