Jun 8 02:39:37 localhost polkitd[1035]: Loading rules from directory /etc/polkit-1/rules.d Jun 8 02:39:37 localhost polkitd[1035]: Loading rules from directory /usr/share/polkit-1/rules.d Jun 8 02:39:37 localhost polkitd[1035]: Finished loading, compiling and executing 4 rules Jun 8 02:39:37 localhost polkitd[1035]: Acquired the name org.freedesktop.PolicyKit1 on the system bus Jun 8 02:39:39 localhost useradd[1118]: new group: name=cloud-user, GID=1001 Jun 8 02:39:39 localhost useradd[1118]: new user: name=cloud-user, UID=1001, GID=1001, home=/home/cloud-user, shell=/bin/bash, from=none Jun 8 02:39:39 localhost useradd[1118]: add 'cloud-user' to group 'adm' Jun 8 02:39:39 localhost useradd[1118]: add 'cloud-user' to group 'systemd-journal' Jun 8 02:39:39 localhost useradd[1118]: add 'cloud-user' to shadow group 'adm' Jun 8 02:39:39 localhost useradd[1118]: add 'cloud-user' to shadow group 'systemd-journal' Jun 8 02:39:40 localhost sshd[1132]: Server listening on 0.0.0.0 port 22. Jun 8 02:39:40 localhost sshd[1132]: Server listening on :: port 22. Jun 8 02:39:40 localhost sshd[1132]: Received signal 15; terminating. Jun 8 02:39:40 localhost sshd[1304]: Server listening on 0.0.0.0 port 22. Jun 8 02:39:40 localhost sshd[1304]: Server listening on :: port 22. Jun 8 02:39:47 localhost sshd[3390]: Unable to negotiate with 3.222.39.124 port 45829: no matching host key type found. Their offer: ssh-ed25519,ssh-ed25519-cert-v01@openssh.com [preauth] Jun 8 02:39:47 localhost sshd[3322]: Connection closed by 3.222.39.124 port 4580 [preauth] Jun 8 02:39:47 localhost sshd[3519]: Unable to negotiate with 3.222.39.124 port 37988: no matching host key type found. Their offer: ecdsa-sha2-nistp384,ecdsa-sha2-nistp384-cert-v01@openssh.com [preauth] Jun 8 02:39:47 localhost sshd[3434]: Connection closed by 3.222.39.124 port 19359 [preauth] Jun 8 02:39:47 localhost sshd[3556]: Unable to negotiate with 3.222.39.124 port 37333: no matching host key type found. Their offer: ecdsa-sha2-nistp521,ecdsa-sha2-nistp521-cert-v01@openssh.com [preauth] Jun 8 02:39:47 localhost sshd[3597]: Connection closed by 3.222.39.124 port 25978 [preauth] Jun 8 02:39:47 localhost sshd[3660]: Connection closed by 3.222.39.124 port 59070 [preauth] Jun 8 02:39:47 localhost sshd[3732]: fatal: mm_answer_sign: sign: error in libcrypto Jun 8 02:39:47 localhost sshd[3798]: Unable to negotiate with 3.222.39.124 port 53402: no matching host key type found. Their offer: ssh-dss,ssh-dss-cert-v01@openssh.com [preauth] Jun 8 02:43:13 localhost sshd[4183]: Invalid user admin from 185.156.73.233 port 17898 Jun 8 02:43:13 localhost sshd[4183]: Connection closed by invalid user admin 185.156.73.233 port 17898 [preauth] Jun 8 02:43:25 localhost sshd[4185]: Accepted publickey for zuul from 38.102.83.51 port 54522 ssh2: RSA SHA256:7gq7E0OWmrPdN0CFoCfD84AwMVQIXRl+sxLM/ofbgB4 Jun 8 02:43:25 localhost systemd[4189]: pam_unix(systemd-user:session): session opened for user zuul(uid=1000) by (uid=0) Jun 8 02:43:26 localhost sshd[4185]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Jun 8 02:44:05 localhost sudo[4785]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-luwclvgbrfwoyffsjzwjrzllkmukdvhe ; /usr/bin/python3 Jun 8 02:44:05 localhost sudo[4785]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:44:05 localhost sudo[4785]: pam_unix(sudo:session): session closed for user root Jun 8 02:44:06 localhost sudo[4833]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ceztglejgdoicexlnjdzamludngsnhuu ; /usr/bin/python3 Jun 8 02:44:06 localhost sudo[4833]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:44:06 localhost sudo[4833]: pam_unix(sudo:session): session closed for user root Jun 8 02:44:07 localhost sudo[4876]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-izpviwlmweqnsepmaswrmeamzctuyldx ; /usr/bin/python3 Jun 8 02:44:07 localhost sudo[4876]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:44:07 localhost sudo[4876]: pam_unix(sudo:session): session closed for user root Jun 8 02:44:23 localhost sudo[5270]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-erutajawsrfwehvrllplvmepjzbjbglm ; /usr/bin/python3 Jun 8 02:44:23 localhost sudo[5270]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:44:23 localhost sudo[5270]: pam_unix(sudo:session): session closed for user root Jun 8 02:44:24 localhost sudo[5291]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-jbbynpuyanqvlvmsbothgxvsfiimacpx ; /usr/bin/python3 Jun 8 02:44:24 localhost sudo[5291]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:44:24 localhost sudo[5291]: pam_unix(sudo:session): session closed for user root Jun 8 02:44:28 localhost sudo[5541]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-djgnkhbkhvclkapxrlrfpxxyqrizpllo ; /usr/bin/python3 Jun 8 02:44:28 localhost sudo[5541]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:44:29 localhost sudo[5541]: pam_unix(sudo:session): session closed for user root Jun 8 02:44:29 localhost sudo[5584]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-cojqtcdaewcnxeovilslfquqezfartgu ; /usr/bin/python3 Jun 8 02:44:29 localhost sudo[5584]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:44:29 localhost sudo[5584]: pam_unix(sudo:session): session closed for user root Jun 8 02:44:32 localhost sudo[5678]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-uhecdkxnxtddwalaakqfsgtawwbaeecw ; /usr/bin/python3 Jun 8 02:44:32 localhost sudo[5678]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:44:32 localhost sudo[5678]: pam_unix(sudo:session): session closed for user root Jun 8 02:44:32 localhost sudo[5721]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ufhbexcytqlwvdriqxftatagauvwysgr ; /usr/bin/python3 Jun 8 02:44:32 localhost sudo[5721]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:44:32 localhost sudo[5721]: pam_unix(sudo:session): session closed for user root Jun 8 02:44:33 localhost sudo[5752]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-qhahorccswxntgrktdicrqirgexcipul ; /usr/bin/python3 Jun 8 02:44:33 localhost sudo[5752]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:44:34 localhost sudo[5752]: pam_unix(sudo:session): session closed for user root Jun 8 02:44:55 localhost sudo[5806]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-oldcnvizbafiashvcefnmujfluqgrsvo ; /usr/bin/python3 Jun 8 02:44:55 localhost sudo[5806]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:44:56 localhost sudo[5806]: pam_unix(sudo:session): session closed for user root Jun 8 02:45:56 localhost sshd[4198]: Received disconnect from 38.102.83.51 port 54522:11: disconnected by user Jun 8 02:45:56 localhost sshd[4198]: Disconnected from user zuul 38.102.83.51 port 54522 Jun 8 02:45:56 localhost sshd[4185]: pam_unix(sshd:session): session closed for user zuul Jun 8 02:47:21 localhost sshd[5815]: Accepted publickey for zuul from 38.102.83.51 port 37288 ssh2: RSA SHA256:XSlg08oLD7ugJBR1n8+b/wJsFl9EOE1LCgedxNE8SnE Jun 8 02:47:21 localhost sshd[5815]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Jun 8 02:47:35 localhost sudo[5880]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-tapyohxuovscqivjpttazailjqddioxv ; OS_CLOUD=vexxhost /usr/bin/python3 Jun 8 02:47:35 localhost sudo[5880]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:47:35 localhost sudo[5880]: pam_unix(sudo:session): session closed for user root Jun 8 02:47:35 localhost sudo[5923]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-cwrmfnwvhcfljhvjscgfhuyvssbcnwto ; OS_CLOUD=vexxhost /usr/bin/python3 Jun 8 02:47:35 localhost sudo[5923]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:47:35 localhost sudo[5923]: pam_unix(sudo:session): session closed for user root Jun 8 02:47:36 localhost sudo[5953]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-fnbbtajhtxgrtkswcwuiijznnjtpybgt ; OS_CLOUD=vexxhost /usr/bin/python3 Jun 8 02:47:36 localhost sudo[5953]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:47:36 localhost sudo[5953]: pam_unix(sudo:session): session closed for user root Jun 8 02:48:37 localhost sshd[5818]: Received disconnect from 38.102.83.51 port 37288:11: disconnected by user Jun 8 02:48:37 localhost sshd[5818]: Disconnected from user zuul 38.102.83.51 port 37288 Jun 8 02:48:37 localhost sshd[5815]: pam_unix(sshd:session): session closed for user zuul Jun 8 02:50:44 localhost sshd[6058]: Accepted publickey for zuul from 38.102.83.51 port 35394 ssh2: RSA SHA256:XSlg08oLD7ugJBR1n8+b/wJsFl9EOE1LCgedxNE8SnE Jun 8 02:50:44 localhost sshd[6058]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Jun 8 02:50:45 localhost sudo[6107]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ekumlpshogmjhanwfcbmejfzsioadunk ; OS_CLOUD=vexxhost /usr/bin/python3 Jun 8 02:50:45 localhost sudo[6107]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:50:45 localhost sudo[6107]: pam_unix(sudo:session): session closed for user root Jun 8 02:50:45 localhost sudo[6150]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-mvssxtqzuezqnrqpdvixvyklqjttsfgc ; OS_CLOUD=vexxhost /usr/bin/python3 Jun 8 02:50:45 localhost sudo[6150]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:50:45 localhost sudo[6150]: pam_unix(sudo:session): session closed for user root Jun 8 02:50:52 localhost sshd[6058]: pam_unix(sshd:session): session closed for user zuul Jun 8 02:55:36 localhost sshd[6169]: Connection closed by authenticating user root 185.156.73.233 port 17206 [preauth] Jun 8 02:59:45 localhost sshd[6174]: Accepted publickey for zuul from 38.102.83.51 port 44200 ssh2: RSA SHA256:XSlg08oLD7ugJBR1n8+b/wJsFl9EOE1LCgedxNE8SnE Jun 8 02:59:45 localhost sshd[6174]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Jun 8 02:59:45 localhost sudo[6191]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-rldobdpfgyvxvwejtckmelyjspoqgzdo ; /usr/bin/python3 Jun 8 02:59:45 localhost sudo[6191]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:59:46 localhost sudo[6191]: pam_unix(sudo:session): session closed for user root Jun 8 02:59:47 localhost sudo[6210]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-vpjfhdjyxsguqlgwjomeuawyttaicqlh ; /usr/bin/python3 Jun 8 02:59:47 localhost sudo[6210]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:59:47 localhost sudo[6210]: pam_unix(sudo:session): session closed for user root Jun 8 02:59:47 localhost sudo[6226]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-bxxjcrzxttrecnbdnikwkobodresgudb ; /usr/bin/python3 Jun 8 02:59:47 localhost sudo[6226]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:59:47 localhost sudo[6226]: pam_unix(sudo:session): session closed for user root Jun 8 02:59:47 localhost sudo[6243]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-kxrlybeystpragdegoxyvciezzgtshvc ; /usr/bin/python3 Jun 8 02:59:47 localhost sudo[6243]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:59:47 localhost sudo[6243]: pam_unix(sudo:session): session closed for user root Jun 8 02:59:47 localhost sudo[6259]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-foszvmohjqxoormvrsfozertygglkxsc ; /usr/bin/python3 Jun 8 02:59:47 localhost sudo[6259]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:59:47 localhost sudo[6259]: pam_unix(sudo:session): session closed for user root Jun 8 02:59:49 localhost sudo[6275]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ouvasyrkyxtozmsnprqyvcmkcuxjaswh ; /usr/bin/python3 Jun 8 02:59:49 localhost sudo[6275]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:59:49 localhost sudo[6275]: pam_unix(sudo:session): session closed for user root Jun 8 02:59:50 localhost sudo[6323]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-jhauxtkwyyaacvwnddzjillgfagfqyys ; /usr/bin/python3 Jun 8 02:59:50 localhost sudo[6323]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:59:50 localhost sudo[6323]: pam_unix(sudo:session): session closed for user root Jun 8 02:59:50 localhost sudo[6366]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-baquwiobhbktexkkoswndzohsqmnbxaz ; /usr/bin/python3 Jun 8 02:59:50 localhost sudo[6366]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:59:50 localhost sudo[6366]: pam_unix(sudo:session): session closed for user root Jun 8 02:59:52 localhost sudo[6396]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-dijuoebvyoyjbzxxctvxotpyzvdkhfbk ; /usr/bin/python3 Jun 8 02:59:52 localhost sudo[6396]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:59:52 localhost sudo[6396]: pam_unix(sudo:session): session closed for user root Jun 8 02:59:54 localhost sudo[6442]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-zklioglbetfqxtqcnrtapsuqwzsaglql ; /usr/bin/python3 Jun 8 02:59:54 localhost sudo[6442]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:59:54 localhost sudo[6442]: pam_unix(sudo:session): session closed for user root Jun 8 02:59:55 localhost sudo[6458]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-uolzoqashszrpidnoeisnezbdxvvdppq ; /usr/bin/python3 Jun 8 02:59:55 localhost sudo[6458]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:59:55 localhost sudo[6458]: pam_unix(sudo:session): session closed for user root Jun 8 02:59:55 localhost sudo[6476]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-odqihpawmrojxyjkvyhbskbvwwsxspic ; /usr/bin/python3 Jun 8 02:59:55 localhost sudo[6476]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:59:55 localhost sudo[6476]: pam_unix(sudo:session): session closed for user root Jun 8 02:59:55 localhost sudo[6494]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-viyhkdmktzvujulyozgnvrhxifskcyqq ; /usr/bin/python3 Jun 8 02:59:55 localhost sudo[6494]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:59:55 localhost sudo[6494]: pam_unix(sudo:session): session closed for user root Jun 8 02:59:55 localhost sudo[6512]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-auzuguynjrrtzwapaoihvayannrqfvgp ; /usr/bin/python3 Jun 8 02:59:55 localhost sudo[6512]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:59:56 localhost sudo[6512]: pam_unix(sudo:session): session closed for user root Jun 8 03:00:01 localhost sshd[6174]: pam_unix(sshd:session): session closed for user zuul Jun 8 03:00:54 localhost sshd[6557]: Accepted publickey for zuul from 38.102.83.51 port 45824 ssh2: RSA SHA256:XSlg08oLD7ugJBR1n8+b/wJsFl9EOE1LCgedxNE8SnE Jun 8 03:00:54 localhost sshd[6557]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Jun 8 03:00:54 localhost sudo[6574]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-hburexkpfajmtustmyhzbdpjldtlbplr ; /usr/bin/python3 Jun 8 03:00:54 localhost sudo[6574]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 03:01:15 localhost sudo[6574]: pam_unix(sudo:session): session closed for user root Jun 8 03:01:45 localhost sudo[6672]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-dhifpogpcyrovsxtcxqbwvsgessjspku ; /usr/bin/python3 Jun 8 03:01:45 localhost sudo[6672]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 03:03:18 localhost sudo[6672]: pam_unix(sudo:session): session closed for user root Jun 8 03:03:39 localhost sudo[6789]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-agyjprbahibpraksdkreumnjfkdbqtcy ; /usr/bin/python3 Jun 8 03:03:39 localhost sudo[6789]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 03:04:35 localhost sudo[6789]: pam_unix(sudo:session): session closed for user root Jun 8 03:05:26 localhost sudo[18464]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-lyhengjepvttbqwwivvrgtzwhvjhqojf ; /usr/bin/python3 Jun 8 03:05:26 localhost sudo[18464]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 03:05:27 localhost sudo[18464]: pam_unix(sudo:session): session closed for user root Jun 8 03:05:29 localhost sshd[6557]: pam_unix(sshd:session): session closed for user zuul Jun 8 03:06:14 localhost sshd[18532]: Connection closed by 38.102.83.2 port 52090 [preauth] Jun 8 03:06:14 localhost sshd[18533]: Connection closed by 38.102.83.2 port 52102 [preauth] Jun 8 03:06:14 localhost sshd[18535]: Unable to negotiate with 38.102.83.2 port 52114: no matching host key type found. Their offer: ssh-ed25519 [preauth] Jun 8 03:06:14 localhost sshd[18531]: Unable to negotiate with 38.102.83.2 port 52128: no matching host key type found. Their offer: sk-ecdsa-sha2-nistp256@openssh.com [preauth] Jun 8 03:06:14 localhost sshd[18534]: Unable to negotiate with 38.102.83.2 port 52130: no matching host key type found. Their offer: sk-ssh-ed25519@openssh.com [preauth] Jun 8 03:06:19 localhost sshd[18541]: Accepted publickey for zuul from 38.102.83.51 port 58538 ssh2: RSA SHA256:XSlg08oLD7ugJBR1n8+b/wJsFl9EOE1LCgedxNE8SnE Jun 8 03:06:19 localhost sshd[18541]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Jun 8 03:06:21 localhost sudo[18572]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-xoungachrafrtfkzqeehjwzvtyntawmo ; /usr/bin/python3 Jun 8 03:06:21 localhost sudo[18572]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 03:06:21 localhost sudo[18572]: pam_unix(sudo:session): session closed for user root Jun 8 03:06:22 localhost sshd[18541]: pam_unix(sshd:session): session closed for user zuul Jun 8 03:07:45 localhost sshd[18577]: Accepted publickey for zuul from 38.102.83.51 port 34858 ssh2: RSA SHA256:XSlg08oLD7ugJBR1n8+b/wJsFl9EOE1LCgedxNE8SnE Jun 8 03:07:45 localhost sshd[18577]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Jun 8 03:07:45 localhost sudo[18594]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-wtgowgfcbaciaoroyflrwtpgjivwgkzl ; /usr/bin/python3 Jun 8 03:07:45 localhost sudo[18594]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 03:07:45 localhost sudo[18594]: pam_unix(sudo:session): session closed for user root Jun 8 03:07:46 localhost sudo[18610]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ehjkvlyauvjbxbyhgptfvjjbdjjmleej ; /usr/bin/python3 Jun 8 03:07:46 localhost sudo[18610]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 03:07:46 localhost sudo[18610]: pam_unix(sudo:session): session closed for user root Jun 8 03:07:47 localhost sudo[18660]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-flpdlnwbmjkenkyfsnaemlsoteaatkpn ; /usr/bin/python3 Jun 8 03:07:47 localhost sudo[18660]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 03:07:47 localhost sudo[18660]: pam_unix(sudo:session): session closed for user root Jun 8 03:07:47 localhost sudo[18703]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ngiarvxjtfrdmotykcyxonlocynqwjyd ; /usr/bin/python3 Jun 8 03:07:47 localhost sudo[18703]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 03:07:48 localhost sudo[18703]: pam_unix(sudo:session): session closed for user root Jun 8 03:07:49 localhost sudo[18765]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-emesklnopokawzznnvmzytprvgtnqfnr ; /usr/bin/python3 Jun 8 03:07:49 localhost sudo[18765]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 03:07:49 localhost sudo[18765]: pam_unix(sudo:session): session closed for user root Jun 8 03:07:49 localhost sudo[18808]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-yhhlpwajfiqnalhwwxelrkghyqpeabdz ; /usr/bin/python3 Jun 8 03:07:49 localhost sudo[18808]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 03:07:50 localhost sudo[18808]: pam_unix(sudo:session): session closed for user root Jun 8 03:07:51 localhost sudo[18838]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-lrricqezhidpezvzpwpipsmhiqkxszfj ; /usr/bin/python3 Jun 8 03:07:51 localhost sudo[18838]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 03:07:51 localhost sudo[18838]: pam_unix(sudo:session): session closed for user root Jun 8 03:07:58 localhost sshd[18577]: pam_unix(sshd:session): session closed for user zuul Jun 8 03:09:32 localhost sshd[19070]: Accepted publickey for zuul from 38.102.83.51 port 39814 ssh2: RSA SHA256:XSlg08oLD7ugJBR1n8+b/wJsFl9EOE1LCgedxNE8SnE Jun 8 03:09:32 localhost sshd[19070]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Jun 8 03:09:32 localhost sudo[19087]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-owbpfrlrezqwjoopvmxhqpuoqnlmutgp ; /usr/bin/python3 Jun 8 03:09:32 localhost sudo[19087]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 03:09:33 localhost sudo[19087]: pam_unix(sudo:session): session closed for user root Jun 8 03:09:45 localhost sshd[19070]: pam_unix(sshd:session): session closed for user zuul Jun 8 03:09:53 localhost sshd[19093]: Accepted publickey for zuul from 38.102.83.51 port 58856 ssh2: RSA SHA256:XSlg08oLD7ugJBR1n8+b/wJsFl9EOE1LCgedxNE8SnE Jun 8 03:09:53 localhost sshd[19093]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Jun 8 03:09:54 localhost sudo[19097]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/rsync --server --sender -lLogDtprze.LsfxCIvu . /var/log