Jun 8 02:39:46 localhost polkitd[1038]: Loading rules from directory /etc/polkit-1/rules.d Jun 8 02:39:46 localhost polkitd[1038]: Loading rules from directory /usr/share/polkit-1/rules.d Jun 8 02:39:46 localhost polkitd[1038]: Finished loading, compiling and executing 4 rules Jun 8 02:39:46 localhost polkitd[1038]: Acquired the name org.freedesktop.PolicyKit1 on the system bus Jun 8 02:39:48 localhost useradd[1121]: new group: name=cloud-user, GID=1001 Jun 8 02:39:48 localhost useradd[1121]: new user: name=cloud-user, UID=1001, GID=1001, home=/home/cloud-user, shell=/bin/bash, from=none Jun 8 02:39:48 localhost useradd[1121]: add 'cloud-user' to group 'adm' Jun 8 02:39:48 localhost useradd[1121]: add 'cloud-user' to group 'systemd-journal' Jun 8 02:39:48 localhost useradd[1121]: add 'cloud-user' to shadow group 'adm' Jun 8 02:39:48 localhost useradd[1121]: add 'cloud-user' to shadow group 'systemd-journal' Jun 8 02:39:49 localhost sshd[1135]: Server listening on 0.0.0.0 port 22. Jun 8 02:39:49 localhost sshd[1135]: Server listening on :: port 22. Jun 8 02:39:50 localhost sshd[1221]: Unable to negotiate with 3.222.39.124 port 29610: no matching host key type found. Their offer: ssh-ed25519,ssh-ed25519-cert-v01@openssh.com [preauth] Jun 8 02:39:50 localhost sshd[1151]: Connection closed by 3.222.39.124 port 55014 [preauth] Jun 8 02:39:50 localhost sshd[1135]: Received signal 15; terminating. Jun 8 02:39:50 localhost sshd[1308]: Server listening on 0.0.0.0 port 22. Jun 8 02:39:50 localhost sshd[1308]: Server listening on :: port 22. Jun 8 02:39:50 localhost sshd[1323]: Unable to negotiate with 3.222.39.124 port 63788: no matching host key type found. Their offer: ecdsa-sha2-nistp384,ecdsa-sha2-nistp384-cert-v01@openssh.com [preauth] Jun 8 02:39:50 localhost sshd[1259]: Connection closed by 3.222.39.124 port 28567 [preauth] Jun 8 02:39:50 localhost sshd[1348]: Unable to negotiate with 3.222.39.124 port 60529: no matching host key type found. Their offer: ecdsa-sha2-nistp521,ecdsa-sha2-nistp521-cert-v01@openssh.com [preauth] Jun 8 02:39:50 localhost sshd[1389]: Connection reset by 3.222.39.124 port 50938 [preauth] Jun 8 02:39:50 localhost sshd[1432]: Connection reset by 3.222.39.124 port 14166 [preauth] Jun 8 02:39:50 localhost sshd[1454]: fatal: mm_answer_sign: sign: error in libcrypto Jun 8 02:39:50 localhost sshd[1493]: Unable to negotiate with 3.222.39.124 port 4073: no matching host key type found. Their offer: ssh-dss,ssh-dss-cert-v01@openssh.com [preauth] Jun 8 02:43:26 localhost sshd[4185]: Accepted publickey for zuul from 38.102.83.51 port 40146 ssh2: RSA SHA256:7gq7E0OWmrPdN0CFoCfD84AwMVQIXRl+sxLM/ofbgB4 Jun 8 02:43:26 localhost systemd[4189]: pam_unix(systemd-user:session): session opened for user zuul(uid=1000) by (uid=0) Jun 8 02:43:27 localhost sshd[4185]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Jun 8 02:44:06 localhost sudo[4785]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-xxmigyrpuiyxwsqrpzuequevtkyzbulh ; /usr/bin/python3 Jun 8 02:44:06 localhost sudo[4785]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:44:06 localhost sudo[4785]: pam_unix(sudo:session): session closed for user root Jun 8 02:44:07 localhost sudo[4833]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-tvuftjmpgzzfdnfyawthmmxnhvrajcpw ; /usr/bin/python3 Jun 8 02:44:07 localhost sudo[4833]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:44:07 localhost sudo[4833]: pam_unix(sudo:session): session closed for user root Jun 8 02:44:08 localhost sudo[4876]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-scxvpgqnbnjkxrofvlmxugplhcfrutmh ; /usr/bin/python3 Jun 8 02:44:08 localhost sudo[4876]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:44:08 localhost sudo[4876]: pam_unix(sudo:session): session closed for user root Jun 8 02:44:23 localhost sudo[5270]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-frzkoggytfqtvszgccfihwerkvobldts ; /usr/bin/python3 Jun 8 02:44:23 localhost sudo[5270]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:44:24 localhost sudo[5270]: pam_unix(sudo:session): session closed for user root Jun 8 02:44:24 localhost sudo[5291]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-yosxgwuolweuymecenhchqkhbmvldfkr ; /usr/bin/python3 Jun 8 02:44:24 localhost sudo[5291]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:44:24 localhost sudo[5291]: pam_unix(sudo:session): session closed for user root Jun 8 02:44:29 localhost sudo[5541]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-fjguyjbibhtnkzjlnmgvdluubuimtjkq ; /usr/bin/python3 Jun 8 02:44:29 localhost sudo[5541]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:44:29 localhost sudo[5541]: pam_unix(sudo:session): session closed for user root Jun 8 02:44:30 localhost sudo[5584]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-obifwqipeapcjsdbeuvoamlivettyfmo ; /usr/bin/python3 Jun 8 02:44:30 localhost sudo[5584]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:44:30 localhost sudo[5584]: pam_unix(sudo:session): session closed for user root Jun 8 02:44:32 localhost sudo[5678]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-rqkxddprtmmtqknuvsaqfhqyykbeosbj ; /usr/bin/python3 Jun 8 02:44:32 localhost sudo[5678]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:44:33 localhost sudo[5678]: pam_unix(sudo:session): session closed for user root Jun 8 02:44:33 localhost sudo[5721]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-nfotaejqdgxvmdwbslfzfcduuoyfskkx ; /usr/bin/python3 Jun 8 02:44:33 localhost sudo[5721]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:44:33 localhost sudo[5721]: pam_unix(sudo:session): session closed for user root Jun 8 02:44:34 localhost sudo[5752]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-qsavitvetgugwnrdmvcnrzyyozfclnos ; /usr/bin/python3 Jun 8 02:44:34 localhost sudo[5752]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:44:34 localhost sudo[5752]: pam_unix(sudo:session): session closed for user root Jun 8 02:44:56 localhost sudo[5806]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-imrfzucfjinbkmbfieczwiltkucduliy ; /usr/bin/python3 Jun 8 02:44:56 localhost sudo[5806]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:44:57 localhost sudo[5806]: pam_unix(sudo:session): session closed for user root Jun 8 02:45:56 localhost sshd[5810]: Invalid user admin from 185.156.73.233 port 27568 Jun 8 02:45:56 localhost sshd[5810]: Connection closed by invalid user admin 185.156.73.233 port 27568 [preauth] Jun 8 02:45:57 localhost sshd[4198]: Received disconnect from 38.102.83.51 port 40146:11: disconnected by user Jun 8 02:45:57 localhost sshd[4198]: Disconnected from user zuul 38.102.83.51 port 40146 Jun 8 02:45:57 localhost sshd[4185]: pam_unix(sshd:session): session closed for user zuul Jun 8 02:49:07 localhost sshd[5817]: Accepted publickey for zuul from 38.102.83.51 port 35574 ssh2: RSA SHA256:XSlg08oLD7ugJBR1n8+b/wJsFl9EOE1LCgedxNE8SnE Jun 8 02:49:07 localhost sshd[5817]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Jun 8 02:49:20 localhost sudo[5882]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-gjhefevzvebmtyjeehlbkiznhazbgjqh ; OS_CLOUD=vexxhost /usr/bin/python3 Jun 8 02:49:20 localhost sudo[5882]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:49:20 localhost sudo[5882]: pam_unix(sudo:session): session closed for user root Jun 8 02:49:21 localhost sudo[5925]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-nbwibxqxuuxftcqltaluakadrmbzesii ; OS_CLOUD=vexxhost /usr/bin/python3 Jun 8 02:49:21 localhost sudo[5925]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:49:21 localhost sudo[5925]: pam_unix(sudo:session): session closed for user root Jun 8 02:49:21 localhost sudo[5955]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-yuczibcyeftnwygehjngloxttcamxmux ; OS_CLOUD=vexxhost /usr/bin/python3 Jun 8 02:49:21 localhost sudo[5955]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:49:22 localhost sudo[5955]: pam_unix(sudo:session): session closed for user root Jun 8 02:50:22 localhost sshd[5820]: Received disconnect from 38.102.83.51 port 35574:11: disconnected by user Jun 8 02:50:22 localhost sshd[5820]: Disconnected from user zuul 38.102.83.51 port 35574 Jun 8 02:50:22 localhost sshd[5817]: pam_unix(sshd:session): session closed for user zuul Jun 8 02:50:49 localhost sshd[6060]: Accepted publickey for zuul from 38.102.83.51 port 48948 ssh2: RSA SHA256:XSlg08oLD7ugJBR1n8+b/wJsFl9EOE1LCgedxNE8SnE Jun 8 02:50:49 localhost sshd[6060]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Jun 8 02:50:49 localhost sudo[6109]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-mclohkwjqspvlixbjbeqmfyvdwlntijz ; OS_CLOUD=vexxhost /usr/bin/python3 Jun 8 02:50:49 localhost sudo[6109]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:50:49 localhost sudo[6109]: pam_unix(sudo:session): session closed for user root Jun 8 02:50:49 localhost sudo[6152]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-snspcduypbmjslywcjfhiwxwzpzvgcqh ; OS_CLOUD=vexxhost /usr/bin/python3 Jun 8 02:50:49 localhost sudo[6152]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:50:49 localhost sudo[6152]: pam_unix(sudo:session): session closed for user root Jun 8 02:50:52 localhost sshd[6060]: pam_unix(sshd:session): session closed for user zuul Jun 8 02:58:15 localhost sshd[6173]: Connection closed by authenticating user root 185.156.73.233 port 43590 [preauth] Jun 8 02:59:46 localhost sshd[6177]: Accepted publickey for zuul from 38.102.83.51 port 38124 ssh2: RSA SHA256:XSlg08oLD7ugJBR1n8+b/wJsFl9EOE1LCgedxNE8SnE Jun 8 02:59:46 localhost sshd[6177]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Jun 8 02:59:46 localhost sudo[6194]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-eyrfregxrpztamuxiyakmlmbllcrmtfv ; /usr/bin/python3 Jun 8 02:59:46 localhost sudo[6194]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:59:46 localhost sudo[6194]: pam_unix(sudo:session): session closed for user root Jun 8 02:59:48 localhost sudo[6213]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-odgvkqpwuqbbgairheaogvnzttwnrhtk ; /usr/bin/python3 Jun 8 02:59:48 localhost sudo[6213]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:59:48 localhost sudo[6213]: pam_unix(sudo:session): session closed for user root Jun 8 02:59:48 localhost sudo[6229]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-lkgkcbqgeyuxsnhhlypwlnngsztyjptc ; /usr/bin/python3 Jun 8 02:59:48 localhost sudo[6229]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:59:48 localhost sudo[6229]: pam_unix(sudo:session): session closed for user root Jun 8 02:59:48 localhost sudo[6245]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-fkrgrxxpjypvdvanvlcfebeeekplspzt ; /usr/bin/python3 Jun 8 02:59:48 localhost sudo[6245]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:59:48 localhost sudo[6245]: pam_unix(sudo:session): session closed for user root Jun 8 02:59:48 localhost sudo[6261]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-cgithcxsauibnkjkaytzlndsniyqpkgg ; /usr/bin/python3 Jun 8 02:59:48 localhost sudo[6261]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:59:49 localhost sudo[6261]: pam_unix(sudo:session): session closed for user root Jun 8 02:59:49 localhost sudo[6277]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ixuwmoawapnlcvijambgsjwquyqnnbnn ; /usr/bin/python3 Jun 8 02:59:49 localhost sudo[6277]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:59:49 localhost sudo[6277]: pam_unix(sudo:session): session closed for user root Jun 8 02:59:51 localhost sudo[6325]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-iuhscoeomuwuccueihwsvyqhtvcplcpe ; /usr/bin/python3 Jun 8 02:59:51 localhost sudo[6325]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:59:51 localhost sudo[6325]: pam_unix(sudo:session): session closed for user root Jun 8 02:59:51 localhost sudo[6368]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-wowidbniqnpexxnrimmgkawlohfbzvlj ; /usr/bin/python3 Jun 8 02:59:51 localhost sudo[6368]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:59:51 localhost sudo[6368]: pam_unix(sudo:session): session closed for user root Jun 8 02:59:53 localhost sudo[6399]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-rehopbngypwdnqijdqiabqwgdhpyzpuo ; /usr/bin/python3 Jun 8 02:59:53 localhost sudo[6399]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:59:53 localhost sudo[6399]: pam_unix(sudo:session): session closed for user root Jun 8 02:59:54 localhost sudo[6447]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-dlouumbxxwgmutmvrokockoxlnoqxmvq ; /usr/bin/python3 Jun 8 02:59:54 localhost sudo[6447]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:59:54 localhost sudo[6447]: pam_unix(sudo:session): session closed for user root Jun 8 02:59:56 localhost sudo[6463]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-qybbakmnnzbjfkfobpenlkydwndjhwcz ; /usr/bin/python3 Jun 8 02:59:56 localhost sudo[6463]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:59:56 localhost sudo[6463]: pam_unix(sudo:session): session closed for user root Jun 8 02:59:56 localhost sudo[6481]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-spknzhbprkbvzgngdcnximxszkevjlbc ; /usr/bin/python3 Jun 8 02:59:56 localhost sudo[6481]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:59:56 localhost sudo[6481]: pam_unix(sudo:session): session closed for user root Jun 8 02:59:56 localhost sudo[6499]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ouuhqyorhpardgzbmiljlawmdhzfcakd ; /usr/bin/python3 Jun 8 02:59:56 localhost sudo[6499]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:59:57 localhost sudo[6499]: pam_unix(sudo:session): session closed for user root Jun 8 02:59:57 localhost sudo[6517]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-kecojubiobljdmirxtwpqcofulctyjiz ; /usr/bin/python3 Jun 8 02:59:57 localhost sudo[6517]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 02:59:57 localhost sudo[6517]: pam_unix(sudo:session): session closed for user root Jun 8 03:00:01 localhost sshd[6177]: pam_unix(sshd:session): session closed for user zuul Jun 8 03:00:19 localhost sshd[6561]: error: kex_exchange_identification: Connection closed by remote host Jun 8 03:00:19 localhost sshd[6561]: Connection closed by 107.155.48.84 port 44550 Jun 8 03:03:04 localhost sshd[6579]: Accepted publickey for zuul from 38.102.83.51 port 36814 ssh2: RSA SHA256:XSlg08oLD7ugJBR1n8+b/wJsFl9EOE1LCgedxNE8SnE Jun 8 03:03:04 localhost sshd[6579]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Jun 8 03:03:04 localhost sudo[6596]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-breikuigjyegydxldfoufrcvlcxinson ; /usr/bin/python3 Jun 8 03:03:04 localhost sudo[6596]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 03:03:28 localhost sudo[6596]: pam_unix(sudo:session): session closed for user root Jun 8 03:04:32 localhost sudo[6711]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-uhepvapjgcgtzzolcaylpwcvcdeuprsc ; /usr/bin/python3 Jun 8 03:04:32 localhost sudo[6711]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 03:05:26 localhost sudo[6711]: pam_unix(sudo:session): session closed for user root Jun 8 03:05:28 localhost sudo[12612]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-tpqaecznbzfuahncdvkveoooazjzasbz ; /usr/bin/python3 Jun 8 03:05:28 localhost sudo[12612]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 03:05:28 localhost sudo[12612]: pam_unix(sudo:session): session closed for user root Jun 8 03:05:29 localhost sshd[6579]: pam_unix(sshd:session): session closed for user zuul Jun 8 03:05:52 localhost sshd[18445]: Received disconnect from 107.155.48.84 port 35402:11: [preauth] Jun 8 03:05:52 localhost sshd[18445]: Disconnected from authenticating user root 107.155.48.84 port 35402 [preauth] Jun 8 03:06:16 localhost sshd[18450]: Connection closed by 38.102.83.2 port 37962 [preauth] Jun 8 03:06:16 localhost sshd[18449]: Unable to negotiate with 38.102.83.2 port 37980: no matching host key type found. Their offer: ssh-ed25519 [preauth] Jun 8 03:06:16 localhost sshd[18451]: Connection closed by 38.102.83.2 port 37978 [preauth] Jun 8 03:06:16 localhost sshd[18448]: Unable to negotiate with 38.102.83.2 port 37986: no matching host key type found. Their offer: sk-ecdsa-sha2-nistp256@openssh.com [preauth] Jun 8 03:06:16 localhost sshd[18447]: Unable to negotiate with 38.102.83.2 port 37998: no matching host key type found. Their offer: sk-ssh-ed25519@openssh.com [preauth] Jun 8 03:06:20 localhost sshd[18457]: Accepted publickey for zuul from 38.102.83.51 port 48866 ssh2: RSA SHA256:XSlg08oLD7ugJBR1n8+b/wJsFl9EOE1LCgedxNE8SnE Jun 8 03:06:20 localhost sshd[18457]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Jun 8 03:06:21 localhost sudo[18488]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ikcmmxlaastjrwucuzghmtiqwuhpfjux ; /usr/bin/python3 Jun 8 03:06:21 localhost sudo[18488]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 03:06:21 localhost sudo[18488]: pam_unix(sudo:session): session closed for user root Jun 8 03:06:22 localhost sshd[18457]: pam_unix(sshd:session): session closed for user zuul Jun 8 03:07:45 localhost sshd[18493]: Accepted publickey for zuul from 38.102.83.51 port 56542 ssh2: RSA SHA256:XSlg08oLD7ugJBR1n8+b/wJsFl9EOE1LCgedxNE8SnE Jun 8 03:07:45 localhost sshd[18493]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Jun 8 03:07:45 localhost sudo[18510]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-beihhvidvidaugytobllaxfuzafhozex ; /usr/bin/python3 Jun 8 03:07:45 localhost sudo[18510]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 03:07:46 localhost sudo[18510]: pam_unix(sudo:session): session closed for user root Jun 8 03:07:46 localhost sudo[18526]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-pnvkesleurponsjzghstwvvzrwztskya ; /usr/bin/python3 Jun 8 03:07:46 localhost sudo[18526]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 03:07:47 localhost sudo[18526]: pam_unix(sudo:session): session closed for user root Jun 8 03:07:48 localhost sudo[18576]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-qmnzhgmoppoqocecredbudjvangobeww ; /usr/bin/python3 Jun 8 03:07:48 localhost sudo[18576]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 03:07:48 localhost sudo[18576]: pam_unix(sudo:session): session closed for user root Jun 8 03:07:48 localhost sudo[18619]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-nmzhlreowqiesnhoxftczozbxwpvnyuv ; /usr/bin/python3 Jun 8 03:07:48 localhost sudo[18619]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 03:07:48 localhost sudo[18619]: pam_unix(sudo:session): session closed for user root Jun 8 03:07:50 localhost sudo[18681]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-pfbhbadtdcalhjyhtinhodrdxumenepz ; /usr/bin/python3 Jun 8 03:07:50 localhost sudo[18681]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 03:07:50 localhost sudo[18681]: pam_unix(sudo:session): session closed for user root Jun 8 03:07:50 localhost sudo[18724]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-ktxzuczbdetbqfpyigmmdfeqcrardaty ; /usr/bin/python3 Jun 8 03:07:50 localhost sudo[18724]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 03:07:50 localhost sudo[18724]: pam_unix(sudo:session): session closed for user root Jun 8 03:07:52 localhost sudo[18754]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-blmmpaknxvyjkezjeulutrlqhmqnyvyi ; /usr/bin/python3 Jun 8 03:07:52 localhost sudo[18754]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 03:07:52 localhost sudo[18754]: pam_unix(sudo:session): session closed for user root Jun 8 03:07:58 localhost sshd[18493]: pam_unix(sshd:session): session closed for user zuul Jun 8 03:09:33 localhost sshd[18986]: Accepted publickey for zuul from 38.102.83.51 port 49656 ssh2: RSA SHA256:XSlg08oLD7ugJBR1n8+b/wJsFl9EOE1LCgedxNE8SnE Jun 8 03:09:33 localhost sshd[18986]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Jun 8 03:09:33 localhost sudo[19003]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/sh -c echo BECOME-SUCCESS-xzokvljuastdbhyjvzyarjrlxencohrv ; /usr/bin/python3 Jun 8 03:09:33 localhost sudo[19003]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000) Jun 8 03:09:34 localhost sudo[19003]: pam_unix(sudo:session): session closed for user root Jun 8 03:09:45 localhost sshd[18986]: pam_unix(sshd:session): session closed for user zuul Jun 8 03:09:59 localhost sshd[19009]: Accepted publickey for zuul from 38.102.83.51 port 51692 ssh2: RSA SHA256:XSlg08oLD7ugJBR1n8+b/wJsFl9EOE1LCgedxNE8SnE Jun 8 03:09:59 localhost sshd[19009]: pam_unix(sshd:session): session opened for user zuul(uid=1000) by (uid=0) Jun 8 03:09:59 localhost sudo[19013]: zuul : PWD=/home/zuul ; USER=root ; COMMAND=/bin/rsync --server --sender -lLogDtprze.LsfxCIvu . /var/log