Sep 9 06:25:02 ip-172-31-5-39 CRON[4577]: pam_unix(cron:session): session closed for user root Sep 9 06:39:01 ip-172-31-5-39 CRON[4791]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 9 06:39:01 ip-172-31-5-39 CRON[4791]: pam_unix(cron:session): session closed for user root Sep 9 06:47:01 ip-172-31-5-39 CRON[4911]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 9 06:47:01 ip-172-31-5-39 CRON[4911]: pam_unix(cron:session): session closed for user root Sep 9 07:09:01 ip-172-31-5-39 CRON[4945]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 9 07:09:02 ip-172-31-5-39 CRON[4945]: pam_unix(cron:session): session closed for user root Sep 9 07:17:01 ip-172-31-5-39 CRON[5000]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 9 07:17:01 ip-172-31-5-39 CRON[5000]: pam_unix(cron:session): session closed for user root Sep 9 07:39:01 ip-172-31-5-39 CRON[5015]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 9 07:39:01 ip-172-31-5-39 CRON[5015]: pam_unix(cron:session): session closed for user root Sep 9 08:09:01 ip-172-31-5-39 CRON[5082]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 9 08:09:01 ip-172-31-5-39 CRON[5082]: pam_unix(cron:session): session closed for user root Sep 9 08:17:01 ip-172-31-5-39 CRON[5149]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 9 08:17:01 ip-172-31-5-39 CRON[5149]: pam_unix(cron:session): session closed for user root Sep 9 08:39:01 ip-172-31-5-39 CRON[5164]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 9 08:39:01 ip-172-31-5-39 CRON[5164]: pam_unix(cron:session): session closed for user root Sep 9 09:09:01 ip-172-31-5-39 CRON[5231]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 9 09:09:01 ip-172-31-5-39 CRON[5231]: pam_unix(cron:session): session closed for user root Sep 9 09:17:01 ip-172-31-5-39 CRON[5286]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 9 09:17:01 ip-172-31-5-39 CRON[5286]: pam_unix(cron:session): session closed for user root Sep 9 09:39:01 ip-172-31-5-39 CRON[5301]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 9 09:39:01 ip-172-31-5-39 CRON[5301]: pam_unix(cron:session): session closed for user root Sep 9 10:09:01 ip-172-31-5-39 CRON[5368]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 9 10:09:01 ip-172-31-5-39 CRON[5368]: pam_unix(cron:session): session closed for user root Sep 9 10:17:01 ip-172-31-5-39 CRON[5423]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 9 10:17:01 ip-172-31-5-39 CRON[5423]: pam_unix(cron:session): session closed for user root Sep 9 10:39:01 ip-172-31-5-39 CRON[5438]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 9 10:39:01 ip-172-31-5-39 CRON[5438]: pam_unix(cron:session): session closed for user root Sep 9 11:09:01 ip-172-31-5-39 CRON[5505]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 9 11:09:01 ip-172-31-5-39 CRON[5505]: pam_unix(cron:session): session closed for user root Sep 9 11:17:01 ip-172-31-5-39 CRON[5572]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 9 11:17:01 ip-172-31-5-39 CRON[5572]: pam_unix(cron:session): session closed for user root Sep 9 11:39:01 ip-172-31-5-39 CRON[5575]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 9 11:39:01 ip-172-31-5-39 CRON[5575]: pam_unix(cron:session): session closed for user root Sep 9 12:09:01 ip-172-31-5-39 CRON[5654]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 9 12:09:02 ip-172-31-5-39 CRON[5654]: pam_unix(cron:session): session closed for user root Sep 9 12:17:01 ip-172-31-5-39 CRON[5709]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 9 12:17:01 ip-172-31-5-39 CRON[5709]: pam_unix(cron:session): session closed for user root Sep 9 12:39:01 ip-172-31-5-39 CRON[5724]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 9 12:39:01 ip-172-31-5-39 CRON[5724]: pam_unix(cron:session): session closed for user root Sep 9 13:09:01 ip-172-31-5-39 CRON[5791]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 9 13:09:01 ip-172-31-5-39 CRON[5791]: pam_unix(cron:session): session closed for user root Sep 9 13:17:01 ip-172-31-5-39 CRON[5846]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 9 13:17:01 ip-172-31-5-39 CRON[5846]: pam_unix(cron:session): session closed for user root Sep 9 13:39:01 ip-172-31-5-39 CRON[5861]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 9 13:39:01 ip-172-31-5-39 CRON[5861]: pam_unix(cron:session): session closed for user root Sep 9 14:09:01 ip-172-31-5-39 CRON[5928]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 9 14:09:01 ip-172-31-5-39 CRON[5928]: pam_unix(cron:session): session closed for user root Sep 9 14:17:01 ip-172-31-5-39 CRON[5983]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 9 14:17:01 ip-172-31-5-39 CRON[5983]: pam_unix(cron:session): session closed for user root Sep 9 14:39:01 ip-172-31-5-39 CRON[5998]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 9 14:39:01 ip-172-31-5-39 CRON[5998]: pam_unix(cron:session): session closed for user root Sep 9 14:51:01 ip-172-31-5-39 CRON[6065]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 9 14:51:01 ip-172-31-5-39 CRON[6065]: pam_unix(cron:session): session closed for user root Sep 9 15:09:01 ip-172-31-5-39 CRON[6080]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 9 15:09:01 ip-172-31-5-39 CRON[6080]: pam_unix(cron:session): session closed for user root Sep 9 15:17:01 ip-172-31-5-39 CRON[6135]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 9 15:17:01 ip-172-31-5-39 CRON[6135]: pam_unix(cron:session): session closed for user root Sep 9 15:39:01 ip-172-31-5-39 CRON[6150]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 9 15:39:01 ip-172-31-5-39 CRON[6150]: pam_unix(cron:session): session closed for user root Sep 9 16:09:01 ip-172-31-5-39 CRON[6217]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 9 16:09:01 ip-172-31-5-39 CRON[6217]: pam_unix(cron:session): session closed for user root Sep 9 16:17:01 ip-172-31-5-39 CRON[6272]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 9 16:17:01 ip-172-31-5-39 CRON[6272]: pam_unix(cron:session): session closed for user root Sep 9 16:39:01 ip-172-31-5-39 CRON[6287]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 9 16:39:01 ip-172-31-5-39 CRON[6287]: pam_unix(cron:session): session closed for user root Sep 9 17:09:01 ip-172-31-5-39 CRON[6401]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 9 17:09:01 ip-172-31-5-39 CRON[6401]: pam_unix(cron:session): session closed for user root Sep 9 17:17:02 ip-172-31-5-39 CRON[6456]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 9 17:17:02 ip-172-31-5-39 CRON[6456]: pam_unix(cron:session): session closed for user root Sep 9 17:39:01 ip-172-31-5-39 CRON[6471]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 9 17:39:01 ip-172-31-5-39 CRON[6471]: pam_unix(cron:session): session closed for user root Sep 9 18:09:01 ip-172-31-5-39 CRON[6538]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 9 18:09:01 ip-172-31-5-39 CRON[6538]: pam_unix(cron:session): session closed for user root Sep 9 18:17:01 ip-172-31-5-39 CRON[6605]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 9 18:17:01 ip-172-31-5-39 CRON[6605]: pam_unix(cron:session): session closed for user root Sep 9 18:39:01 ip-172-31-5-39 CRON[6608]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 9 18:39:01 ip-172-31-5-39 CRON[6608]: pam_unix(cron:session): session closed for user root Sep 9 19:09:01 ip-172-31-5-39 CRON[6675]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 9 19:09:01 ip-172-31-5-39 CRON[6675]: pam_unix(cron:session): session closed for user root Sep 9 19:17:01 ip-172-31-5-39 CRON[6742]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 9 19:17:01 ip-172-31-5-39 CRON[6742]: pam_unix(cron:session): session closed for user root Sep 9 19:39:01 ip-172-31-5-39 CRON[6757]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 9 19:39:01 ip-172-31-5-39 CRON[6757]: pam_unix(cron:session): session closed for user root Sep 9 20:09:01 ip-172-31-5-39 CRON[6829]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 9 20:09:01 ip-172-31-5-39 CRON[6829]: pam_unix(cron:session): session closed for user root Sep 9 20:17:01 ip-172-31-5-39 CRON[6884]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 9 20:17:01 ip-172-31-5-39 CRON[6884]: pam_unix(cron:session): session closed for user root Sep 9 20:39:01 ip-172-31-5-39 CRON[6899]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 9 20:39:01 ip-172-31-5-39 CRON[6899]: pam_unix(cron:session): session closed for user root Sep 9 21:09:01 ip-172-31-5-39 CRON[6966]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 9 21:09:01 ip-172-31-5-39 CRON[6966]: pam_unix(cron:session): session closed for user root Sep 9 21:17:01 ip-172-31-5-39 CRON[7021]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 9 21:17:01 ip-172-31-5-39 CRON[7021]: pam_unix(cron:session): session closed for user root Sep 9 21:39:01 ip-172-31-5-39 CRON[7036]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 9 21:39:01 ip-172-31-5-39 CRON[7036]: pam_unix(cron:session): session closed for user root Sep 9 22:09:01 ip-172-31-5-39 CRON[7103]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 9 22:09:01 ip-172-31-5-39 CRON[7103]: pam_unix(cron:session): session closed for user root Sep 9 22:17:01 ip-172-31-5-39 CRON[7158]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 9 22:17:01 ip-172-31-5-39 CRON[7158]: pam_unix(cron:session): session closed for user root Sep 9 22:39:01 ip-172-31-5-39 CRON[7173]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 9 22:39:02 ip-172-31-5-39 CRON[7173]: pam_unix(cron:session): session closed for user root Sep 9 23:09:01 ip-172-31-5-39 CRON[7240]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 9 23:09:01 ip-172-31-5-39 CRON[7240]: pam_unix(cron:session): session closed for user root Sep 9 23:17:01 ip-172-31-5-39 CRON[7307]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 9 23:17:01 ip-172-31-5-39 CRON[7307]: pam_unix(cron:session): session closed for user root Sep 9 23:39:01 ip-172-31-5-39 CRON[7322]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 9 23:39:01 ip-172-31-5-39 CRON[7322]: pam_unix(cron:session): session closed for user root Sep 10 00:09:01 ip-172-31-5-39 CRON[7389]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 10 00:09:01 ip-172-31-5-39 CRON[7389]: pam_unix(cron:session): session closed for user root Sep 10 00:17:01 ip-172-31-5-39 CRON[7444]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 10 00:17:01 ip-172-31-5-39 CRON[7444]: pam_unix(cron:session): session closed for user root Sep 10 00:39:01 ip-172-31-5-39 CRON[7459]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 10 00:39:01 ip-172-31-5-39 CRON[7459]: pam_unix(cron:session): session closed for user root Sep 10 01:09:01 ip-172-31-5-39 CRON[7526]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 10 01:09:01 ip-172-31-5-39 CRON[7526]: pam_unix(cron:session): session closed for user root Sep 10 01:17:01 ip-172-31-5-39 CRON[7593]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 10 01:17:01 ip-172-31-5-39 CRON[7593]: pam_unix(cron:session): session closed for user root Sep 10 01:39:01 ip-172-31-5-39 CRON[7608]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 10 01:39:01 ip-172-31-5-39 CRON[7608]: pam_unix(cron:session): session closed for user root Sep 10 02:09:01 ip-172-31-5-39 CRON[7675]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 10 02:09:01 ip-172-31-5-39 CRON[7675]: pam_unix(cron:session): session closed for user root Sep 10 02:17:01 ip-172-31-5-39 CRON[7730]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 10 02:17:01 ip-172-31-5-39 CRON[7730]: pam_unix(cron:session): session closed for user root Sep 10 02:39:01 ip-172-31-5-39 CRON[7745]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 10 02:39:01 ip-172-31-5-39 CRON[7745]: pam_unix(cron:session): session closed for user root Sep 10 03:09:01 ip-172-31-5-39 CRON[7812]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 10 03:09:01 ip-172-31-5-39 CRON[7812]: pam_unix(cron:session): session closed for user root Sep 10 03:17:01 ip-172-31-5-39 CRON[7867]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 10 03:17:01 ip-172-31-5-39 CRON[7867]: pam_unix(cron:session): session closed for user root Sep 10 03:39:01 ip-172-31-5-39 CRON[7882]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 10 03:39:02 ip-172-31-5-39 CRON[7882]: pam_unix(cron:session): session closed for user root Sep 10 04:09:01 ip-172-31-5-39 CRON[7949]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 10 04:09:01 ip-172-31-5-39 CRON[7949]: pam_unix(cron:session): session closed for user root Sep 10 04:17:01 ip-172-31-5-39 CRON[8004]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 10 04:17:01 ip-172-31-5-39 CRON[8004]: pam_unix(cron:session): session closed for user root Sep 10 04:39:01 ip-172-31-5-39 CRON[8019]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 10 04:39:01 ip-172-31-5-39 CRON[8019]: pam_unix(cron:session): session closed for user root Sep 10 05:09:01 ip-172-31-5-39 CRON[8086]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 10 05:09:01 ip-172-31-5-39 CRON[8086]: pam_unix(cron:session): session closed for user root Sep 10 05:17:01 ip-172-31-5-39 CRON[8153]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 10 05:17:01 ip-172-31-5-39 CRON[8153]: pam_unix(cron:session): session closed for user root Sep 10 05:39:01 ip-172-31-5-39 CRON[8423]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 10 05:39:01 ip-172-31-5-39 CRON[8423]: pam_unix(cron:session): session closed for user root Sep 10 06:09:01 ip-172-31-5-39 CRON[8502]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 10 06:09:01 ip-172-31-5-39 CRON[8502]: pam_unix(cron:session): session closed for user root Sep 10 06:17:01 ip-172-31-5-39 CRON[8557]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 10 06:17:01 ip-172-31-5-39 CRON[8557]: pam_unix(cron:session): session closed for user root Sep 10 06:25:01 ip-172-31-5-39 CRON[8560]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 10 06:25:02 ip-172-31-5-39 CRON[8560]: pam_unix(cron:session): session closed for user root Sep 10 06:39:01 ip-172-31-5-39 CRON[8816]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 10 06:39:01 ip-172-31-5-39 CRON[8816]: pam_unix(cron:session): session closed for user root Sep 10 07:09:01 ip-172-31-5-39 CRON[8930]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 10 07:09:01 ip-172-31-5-39 CRON[8930]: pam_unix(cron:session): session closed for user root Sep 10 07:17:01 ip-172-31-5-39 CRON[8985]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 10 07:17:01 ip-172-31-5-39 CRON[8985]: pam_unix(cron:session): session closed for user root Sep 10 07:39:01 ip-172-31-5-39 CRON[9000]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 10 07:39:01 ip-172-31-5-39 CRON[9000]: pam_unix(cron:session): session closed for user root Sep 10 08:09:01 ip-172-31-5-39 CRON[9067]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 10 08:09:02 ip-172-31-5-39 CRON[9067]: pam_unix(cron:session): session closed for user root Sep 10 08:17:01 ip-172-31-5-39 CRON[9134]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 10 08:17:01 ip-172-31-5-39 CRON[9134]: pam_unix(cron:session): session closed for user root Sep 10 08:39:01 ip-172-31-5-39 CRON[9149]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 10 08:39:01 ip-172-31-5-39 CRON[9149]: pam_unix(cron:session): session closed for user root Sep 10 09:09:01 ip-172-31-5-39 CRON[9216]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 10 09:09:01 ip-172-31-5-39 CRON[9216]: pam_unix(cron:session): session closed for user root Sep 10 09:17:01 ip-172-31-5-39 CRON[9271]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 10 09:17:01 ip-172-31-5-39 CRON[9271]: pam_unix(cron:session): session closed for user root Sep 10 09:39:01 ip-172-31-5-39 CRON[9286]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 10 09:39:01 ip-172-31-5-39 CRON[9286]: pam_unix(cron:session): session closed for user root Sep 10 10:09:01 ip-172-31-5-39 CRON[9353]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 10 10:09:01 ip-172-31-5-39 CRON[9353]: pam_unix(cron:session): session closed for user root Sep 10 10:17:01 ip-172-31-5-39 CRON[9420]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 10 10:17:01 ip-172-31-5-39 CRON[9420]: pam_unix(cron:session): session closed for user root Sep 10 10:39:01 ip-172-31-5-39 CRON[9435]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 10 10:39:01 ip-172-31-5-39 CRON[9435]: pam_unix(cron:session): session closed for user root Sep 10 11:09:01 ip-172-31-5-39 CRON[9502]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 10 11:09:01 ip-172-31-5-39 CRON[9502]: pam_unix(cron:session): session closed for user root Sep 10 11:17:01 ip-172-31-5-39 CRON[9557]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 10 11:17:01 ip-172-31-5-39 CRON[9557]: pam_unix(cron:session): session closed for user root Sep 10 11:39:01 ip-172-31-5-39 CRON[9572]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 10 11:39:01 ip-172-31-5-39 CRON[9572]: pam_unix(cron:session): session closed for user root Sep 10 12:09:01 ip-172-31-5-39 CRON[9639]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 10 12:09:01 ip-172-31-5-39 CRON[9639]: pam_unix(cron:session): session closed for user root Sep 10 12:17:01 ip-172-31-5-39 CRON[9694]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 10 12:17:01 ip-172-31-5-39 CRON[9694]: pam_unix(cron:session): session closed for user root Sep 10 12:39:01 ip-172-31-5-39 CRON[9709]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 10 12:39:01 ip-172-31-5-39 CRON[9709]: pam_unix(cron:session): session closed for user root Sep 10 12:53:10 ip-172-31-5-39 sshd[9767]: Accepted publickey for ubuntu from 177.103.176.199 port 59137 ssh2: RSA SHA256:3/91sXvgrhpGwm6BHY9O8YSerXhFGNxSkZn2QEniijY Sep 10 12:53:10 ip-172-31-5-39 sshd[9767]: pam_unix(sshd:session): session opened for user ubuntu by (uid=0) Sep 10 12:53:10 ip-172-31-5-39 systemd: pam_unix(systemd-user:session): session opened for user ubuntu by (uid=0) Sep 10 12:53:10 ip-172-31-5-39 systemd-logind[1121]: New session 354 of user ubuntu. Sep 10 13:04:00 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/moodle/admin/cli ; USER=root ; COMMAND=/bin/mkdir /usr/local/moodledata Sep 10 13:04:00 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 13:04:00 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 13:04:13 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/usr/local ; USER=root ; COMMAND=/bin/mv moodledata moodledata1 Sep 10 13:04:13 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 13:04:13 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 13:04:18 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/usr/local ; USER=root ; COMMAND=/bin/mkdir moodledata Sep 10 13:04:18 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 13:04:18 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 13:04:25 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/usr/local ; USER=root ; COMMAND=/bin/mv moodledata1 moodledata Sep 10 13:04:25 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 13:04:25 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 13:04:37 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/usr/local/moodledata ; USER=root ; COMMAND=/bin/mv moodledata1/ moodledatateste Sep 10 13:04:37 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 13:04:37 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 13:04:47 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/usr/local ; USER=root ; COMMAND=/bin/chown www-data:www-data moodledata -R Sep 10 13:04:47 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 13:04:47 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 13:05:11 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/usr/local/moodledata ; USER=root ; COMMAND=/usr/bin/vim /var/www/html/moodle/config.php Sep 10 13:05:11 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 13:05:19 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 13:07:11 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/usr/local ; USER=root ; COMMAND=/bin/mv moodledata moodledata1 Sep 10 13:07:11 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 13:07:11 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 13:07:16 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/usr/local ; USER=root ; COMMAND=/bin/mkdir moodledata Sep 10 13:07:16 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 13:07:16 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 13:07:37 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/usr/local ; USER=root ; COMMAND=/bin/mount -t nfs4 fs-0ffe9244.efs.us-east-1.amazonaws.com:/ /usr/local/moodledata Sep 10 13:07:37 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 13:07:37 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 13:07:49 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/usr/local ; USER=root ; COMMAND=/bin/mount -t nfs4 fs-0ffe9244.efs.us-east-1.amazonaws.com /usr/local/moodledata Sep 10 13:07:49 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 13:07:49 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 13:07:51 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/usr/local ; USER=root ; COMMAND=/bin/mount -t nfs4 fs-0ffe9244.efs.us-east-1.amazonaws.com:/ /usr/local/moodledata Sep 10 13:07:51 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 13:07:51 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 13:08:06 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/usr/local ; USER=root ; COMMAND=/usr/bin/apt-get install nfs4 Sep 10 13:08:06 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 13:08:06 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 13:09:01 ip-172-31-5-39 CRON[10048]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 10 13:09:02 ip-172-31-5-39 CRON[10048]: pam_unix(cron:session): session closed for user root Sep 10 13:09:30 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/usr/local ; USER=root ; COMMAND=/usr/bin/apt-cache search efs Sep 10 13:09:30 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 13:09:30 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 13:09:37 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/usr/local ; USER=root ; COMMAND=/usr/bin/apt-cache search nfs4 Sep 10 13:09:37 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 13:09:38 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 13:09:48 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/usr/local ; USER=root ; COMMAND=/usr/bin/apt-get install nfs4-acl-tools Sep 10 13:09:48 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 13:09:49 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 13:09:52 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/usr/local ; USER=root ; COMMAND=/bin/mount -t nfs4 fs-0ffe9244.efs.us-east-1.amazonaws.com:/ /usr/local/moodledata Sep 10 13:09:52 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 13:09:52 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 13:11:47 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/usr/local ; USER=root ; COMMAND=/bin/mount -t nfs4 fs-0ffe9244.efs.us-east-1.amazonaws.com:/ /usr/local/moodledata Sep 10 13:11:47 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 13:11:47 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 13:12:58 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/usr/local ; USER=root ; COMMAND=/bin/mount -t nfs4 -o fscache fs-0ffe9244.efs.us-east-1.amazonaws.com:/ /usr/local/moodledata Sep 10 13:12:58 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 13:12:58 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 13:14:55 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/usr/local ; USER=root ; COMMAND=/usr/bin/vim /etc/fstab Sep 10 13:14:55 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 13:15:37 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 13:15:40 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/usr/local ; USER=root ; COMMAND=/sbin/reboot Sep 10 13:15:40 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 13:15:40 ip-172-31-5-39 sshd[9767]: pam_unix(sshd:session): session closed for user ubuntu Sep 10 13:15:40 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 13:15:40 ip-172-31-5-39 systemd: pam_unix(systemd-user:session): session closed for user ubuntu Sep 10 13:16:21 ip-172-31-5-39 sshd[1135]: Server listening on 0.0.0.0 port 22. Sep 10 13:16:21 ip-172-31-5-39 sshd[1135]: Server listening on :: port 22. Sep 10 13:16:21 ip-172-31-5-39 systemd-logind[1148]: Watching system buttons on /dev/input/event0 (Power Button) Sep 10 13:16:21 ip-172-31-5-39 systemd-logind[1148]: Watching system buttons on /dev/input/event1 (Sleep Button) Sep 10 13:16:21 ip-172-31-5-39 systemd-logind[1148]: New seat seat0. Sep 10 13:16:33 ip-172-31-5-39 sshd[1387]: Accepted publickey for ubuntu from 177.103.176.199 port 54257 ssh2: RSA SHA256:3/91sXvgrhpGwm6BHY9O8YSerXhFGNxSkZn2QEniijY Sep 10 13:16:33 ip-172-31-5-39 sshd[1387]: pam_unix(sshd:session): session opened for user ubuntu by (uid=0) Sep 10 13:16:33 ip-172-31-5-39 systemd: pam_unix(systemd-user:session): session opened for user ubuntu by (uid=0) Sep 10 13:16:33 ip-172-31-5-39 systemd-logind[1148]: New session 1 of user ubuntu. Sep 10 13:17:01 ip-172-31-5-39 CRON[1466]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 10 13:17:01 ip-172-31-5-39 CRON[1466]: pam_unix(cron:session): session closed for user root Sep 10 13:17:19 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/home/ubuntu ; USER=root ; COMMAND=/usr/bin/apt-get install nfs-utils Sep 10 13:17:19 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 13:17:19 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 13:17:25 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/home/ubuntu ; USER=root ; COMMAND=/usr/bin/apt-get install nfs4-utils Sep 10 13:17:25 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 13:17:25 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 13:17:38 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/home/ubuntu ; USER=root ; COMMAND=/usr/bin/apt-cache search nfs Sep 10 13:17:38 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 13:17:39 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 13:18:05 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/home/ubuntu ; USER=root ; COMMAND=/usr/bin/apt-get install nfs-common Sep 10 13:18:05 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 13:18:12 ip-172-31-5-39 useradd[2973]: new user: name=statd, UID=112, GID=65534, home=/var/lib/nfs, shell=/bin/false Sep 10 13:18:12 ip-172-31-5-39 usermod[2978]: change user 'statd' password Sep 10 13:18:12 ip-172-31-5-39 chage[2983]: changed password expiry for statd Sep 10 13:18:13 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 13:18:16 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/home/ubuntu ; USER=root ; COMMAND=/sbin/reboot Sep 10 13:18:16 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 13:18:16 ip-172-31-5-39 systemd: pam_unix(systemd-user:session): session closed for user ubuntu Sep 10 13:18:16 ip-172-31-5-39 sshd[1387]: pam_unix(sshd:session): session closed for user ubuntu Sep 10 13:18:16 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 13:18:53 ip-172-31-5-39 sshd[1153]: Server listening on 0.0.0.0 port 22. Sep 10 13:18:53 ip-172-31-5-39 sshd[1153]: Server listening on :: port 22. Sep 10 13:18:54 ip-172-31-5-39 systemd-logind[1168]: Watching system buttons on /dev/input/event0 (Power Button) Sep 10 13:18:54 ip-172-31-5-39 systemd-logind[1168]: Watching system buttons on /dev/input/event1 (Sleep Button) Sep 10 13:18:54 ip-172-31-5-39 systemd-logind[1168]: New seat seat0. Sep 10 13:18:57 ip-172-31-5-39 sshd[1369]: Accepted publickey for ubuntu from 177.103.176.199 port 12905 ssh2: RSA SHA256:3/91sXvgrhpGwm6BHY9O8YSerXhFGNxSkZn2QEniijY Sep 10 13:18:57 ip-172-31-5-39 sshd[1369]: pam_unix(sshd:session): session opened for user ubuntu by (uid=0) Sep 10 13:18:57 ip-172-31-5-39 systemd: pam_unix(systemd-user:session): session opened for user ubuntu by (uid=0) Sep 10 13:18:57 ip-172-31-5-39 systemd-logind[1168]: New session 1 of user ubuntu. Sep 10 13:19:19 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/usr/local/moodledata1 ; USER=root ; COMMAND=/bin/mv moodledatateste ../moodledata/ Sep 10 13:19:19 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 13:21:32 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 13:21:41 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/usr/local ; USER=root ; COMMAND=/bin/rm -rf moodledata1/ Sep 10 13:21:41 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 13:21:41 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 13:24:51 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/usr/local/moodledata ; USER=root ; COMMAND=/usr/bin/apt-get install du Sep 10 13:24:51 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 13:24:51 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 13:24:54 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/usr/local/moodledata ; USER=root ; COMMAND=/usr/bin/apt-get install aspell Sep 10 13:24:54 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 13:25:00 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 13:25:13 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/usr/local/moodledata ; USER=root ; COMMAND=/usr/bin/apt-get install dot Sep 10 13:25:13 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 13:25:13 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 13:25:32 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/usr/local/moodledata ; USER=root ; COMMAND=/usr/bin/apt-get install ghostscript Sep 10 13:25:32 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 13:25:37 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 13:27:55 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/usr/local/moodledata ; USER=root ; COMMAND=/usr/bin/apt-cache search du Sep 10 13:27:55 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 13:27:56 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 13:28:22 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/usr/local/moodledata ; USER=root ; COMMAND=/usr/bin/apt-cache search dot Sep 10 13:28:22 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 13:28:23 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 13:30:36 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/usr/local/moodledata ; USER=root ; COMMAND=/usr/bin/apt-get install graphviz Sep 10 13:30:36 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 13:30:45 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 13:31:52 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/usr/local ; USER=root ; COMMAND=/bin/chown www-data:www-data moodledata -R Sep 10 13:31:52 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 13:32:05 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 13:35:12 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/usr/local/moodledata ; USER=root ; COMMAND=/usr/bin/vim /etc/php/7.0/apache2/php.ini Sep 10 13:35:12 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 13:36:39 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 13:36:42 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/usr/local/moodledata ; USER=root ; COMMAND=/etc/init.d/apache2 restart Sep 10 13:36:42 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 13:36:44 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 13:39:01 ip-172-31-5-39 CRON[4518]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 10 13:39:01 ip-172-31-5-39 CRON[4518]: pam_unix(cron:session): session closed for user root Sep 10 13:39:25 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/usr/local/moodledata ; USER=root ; COMMAND=/usr/bin/vim /var/www/html/moodle/config.php Sep 10 13:39:25 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 13:40:31 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 13:40:43 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/usr/local/moodledata ; USER=root ; COMMAND=/usr/bin/vim /var/www/html/moodle/config.php Sep 10 13:40:43 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 13:41:02 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 13:43:48 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/usr/local/moodledata ; USER=root ; COMMAND=/usr/bin/apt-get install php7.0-memcached Sep 10 13:43:48 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 13:43:49 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 13:43:54 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/usr/local/moodledata ; USER=root ; COMMAND=/usr/bin/apt-get install php7.0-mcached Sep 10 13:43:54 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 13:43:54 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 13:44:01 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/usr/local/moodledata ; USER=root ; COMMAND=/usr/bin/apt-cache search php7 Sep 10 13:44:01 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 13:44:02 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 13:44:06 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/usr/local/moodledata ; USER=root ; COMMAND=/usr/bin/apt-cache search php7.0-m Sep 10 13:44:06 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 13:44:07 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 13:44:11 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/usr/local/moodledata ; USER=root ; COMMAND=/usr/bin/apt-cache search php7.0-cached Sep 10 13:44:11 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 13:44:12 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 13:44:16 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/usr/local/moodledata ; USER=root ; COMMAND=/usr/bin/apt-cache search php7.0 Sep 10 13:44:16 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 13:44:16 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 13:45:08 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/usr/local/moodledata ; USER=root ; COMMAND=/usr/bin/apt-get install -y php7.0-dev git pkg-config build-essential libmemcached-dev Sep 10 13:45:08 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 13:45:25 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 13:45:48 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/usr/local ; USER=root ; COMMAND=/usr/bin/git clone https://github.com/php-memcached-dev/php-memcached.git Sep 10 13:45:48 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 13:45:49 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 13:45:58 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/usr/local/php-memcached ; USER=root ; COMMAND=/usr/bin/git checkout php7 Sep 10 13:45:58 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 13:45:58 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 13:46:05 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/usr/local/php-memcached ; USER=root ; COMMAND=/usr/bin/phpize Sep 10 13:46:05 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 13:46:05 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 13:46:09 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/usr/local/php-memcached ; USER=root ; COMMAND=./configure --disable-memcached-sasl Sep 10 13:46:09 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 13:46:10 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 13:46:14 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/usr/local/php-memcached ; USER=root ; COMMAND=/usr/bin/make Sep 10 13:46:14 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 13:46:17 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 13:46:19 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/usr/local/php-memcached ; USER=root ; COMMAND=/usr/bin/make install Sep 10 13:46:19 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 13:46:19 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 13:46:42 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/usr/local/php-memcached ; USER=root ; COMMAND=/usr/bin/vim /etc/ld.so.conf Sep 10 13:46:42 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 13:46:49 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 13:47:29 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/usr/local/php-memcached ; USER=root ; COMMAND=/usr/bin/vim /etc/php/mods-available/memcached.ini Sep 10 13:47:29 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 13:47:30 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 13:47:43 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/usr/local/php-memcached ; USER=root ; COMMAND=/usr/bin/vim /etc/php/7.0/mods-available/memcached.ini Sep 10 13:47:43 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 13:47:50 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 13:48:46 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/etc/php/7.0 ; USER=root ; COMMAND=/bin/ln -s /etc/php/7.0/mods-available/memcached.ini /etc/php/7.0/fpm/conf.d/20-memcached.ini Sep 10 13:48:46 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 13:48:46 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 13:48:49 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/etc/php/7.0 ; USER=root ; COMMAND=/bin/ln -s /etc/php/mods-available/memcached.ini /etc/php/7.0/cli/conf.d/20-memcached.ini Sep 10 13:48:49 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 13:48:49 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 13:48:56 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/etc/php/7.0 ; USER=root ; COMMAND=/bin/ln -s /etc/php/7.0/mods-available/memcached.ini /etc/php/7.0/cli/conf.d/20-memcached.ini Sep 10 13:48:56 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 13:48:56 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 13:49:04 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/etc/php/7.0 ; USER=root ; COMMAND=/bin/rm -rf /etc/php/7.0/cli/conf.d/20-memcached.ini Sep 10 13:49:04 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 13:49:04 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 13:49:07 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/etc/php/7.0 ; USER=root ; COMMAND=/bin/ln -s /etc/php/7.0/mods-available/memcached.ini /etc/php/7.0/cli/conf.d/20-memcached.ini Sep 10 13:49:07 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 13:49:07 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 13:49:13 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/etc/php/7.0 ; USER=root ; COMMAND=/usr/bin/vim /etc/php/7.0/cli/conf.d/20-memcached.ini Sep 10 13:49:13 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 13:49:15 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 13:49:17 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/etc/php/7.0 ; USER=root ; COMMAND=/etc/init.d/apache2 restart Sep 10 13:49:17 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 13:49:19 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 13:50:21 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/etc/php/7.0 ; USER=root ; COMMAND=/usr/bin/vim /etc/php/7.0/cli/conf.d/20-memcached.ini Sep 10 13:50:21 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 13:50:25 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 13:50:33 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/etc/php/7.0 ; USER=root ; COMMAND=/usr/bin/vim /etc/php/7.0/apache2/php.ini Sep 10 13:50:33 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 13:51:04 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 13:51:10 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/etc/php/7.0 ; USER=root ; COMMAND=/etc/init.d/php7.0-fpm status Sep 10 13:51:10 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 13:51:10 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 13:51:14 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/etc/php/7.0 ; USER=root ; COMMAND=/etc/init.d/php7.0-fpm restart Sep 10 13:51:14 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 13:51:14 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 13:51:54 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/etc/php/7.0 ; USER=root ; COMMAND=/usr/bin/vim /etc/php/7.0/apache2/php.ini Sep 10 13:51:54 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 13:52:27 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 13:52:28 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/etc/php/7.0 ; USER=root ; COMMAND=/usr/bin/vim /etc/php/7.0/apache2/php.ini Sep 10 13:52:28 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 13:52:54 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 13:53:01 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/etc/php/7.0 ; USER=root ; COMMAND=/etc/init.d/apache2 restart Sep 10 13:53:01 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 13:53:03 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 13:57:47 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/usr/local ; USER=root ; COMMAND=/bin/cp -R moodledata/moodledatateste . Sep 10 13:57:47 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 13:58:25 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 13:58:47 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/usr/local ; USER=root ; COMMAND=/usr/bin/vim /var/www/html/moodle/config.php Sep 10 13:58:47 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 13:58:57 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 13:59:12 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/usr/local ; USER=root ; COMMAND=/bin/chown www-data:www-data moodledatateste -R Sep 10 13:59:12 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 13:59:12 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 14:06:03 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/usr/local ; USER=root ; COMMAND=/usr/bin/vim /var/www/html/moodle/config.php Sep 10 14:06:03 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 14:06:23 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 14:09:01 ip-172-31-5-39 CRON[16640]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 10 14:09:02 ip-172-31-5-39 CRON[16640]: pam_unix(cron:session): session closed for user root Sep 10 14:17:01 ip-172-31-5-39 CRON[16710]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 10 14:17:01 ip-172-31-5-39 CRON[16710]: pam_unix(cron:session): session closed for user root Sep 10 14:19:34 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/usr/local ; USER=root ; COMMAND=/bin/umount /usr/local/moodledata Sep 10 14:19:34 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 14:19:34 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 14:19:39 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/usr/local ; USER=root ; COMMAND=/bin/umount /usr/local/moodledata Sep 10 14:19:39 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 14:19:39 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 14:19:57 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/usr/local/moodledata ; USER=root ; COMMAND=/bin/rm -rf moodledatateste Sep 10 14:19:57 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 14:20:56 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 14:32:31 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/usr/local/moodledata ; USER=root ; COMMAND=/bin/cp -R ../moodledatateste . Sep 10 14:32:31 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 14:34:07 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 14:35:14 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/usr/local/moodledata/moodledatateste ; USER=root ; COMMAND=/usr/bin/vim /var/www/html/moodle/config.php Sep 10 14:35:14 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 14:35:23 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 14:35:34 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/usr/local/moodledata ; USER=root ; COMMAND=/bin/chown www-data:www-data moodledatateste -R Sep 10 14:35:34 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 14:35:47 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 14:39:01 ip-172-31-5-39 CRON[16808]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 10 14:39:01 ip-172-31-5-39 CRON[16808]: pam_unix(cron:session): session closed for user root Sep 10 14:40:32 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/usr/local ; USER=root ; COMMAND=/bin/rm -rf moodledatateste Sep 10 14:40:32 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 14:40:32 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 14:51:01 ip-172-31-5-39 CRON[16878]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 10 14:51:01 ip-172-31-5-39 CRON[16878]: pam_unix(cron:session): session closed for user root Sep 10 14:54:07 ip-172-31-5-39 sshd[16881]: Accepted publickey for ubuntu from 177.103.176.199 port 8299 ssh2: RSA SHA256:3/91sXvgrhpGwm6BHY9O8YSerXhFGNxSkZn2QEniijY Sep 10 14:54:07 ip-172-31-5-39 sshd[16881]: pam_unix(sshd:session): session opened for user ubuntu by (uid=0) Sep 10 14:54:07 ip-172-31-5-39 systemd-logind[1168]: New session 7 of user ubuntu. Sep 10 14:54:14 ip-172-31-5-39 sshd[16935]: Received disconnect from 177.103.176.199 port 8299:11: disconnected by user Sep 10 14:54:14 ip-172-31-5-39 sshd[16935]: Disconnected from 177.103.176.199 port 8299 Sep 10 14:54:14 ip-172-31-5-39 sshd[16881]: pam_unix(sshd:session): session closed for user ubuntu Sep 10 14:54:14 ip-172-31-5-39 systemd-logind[1168]: Removed session 7. Sep 10 14:54:28 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/home/ubuntu ; USER=root ; COMMAND=/bin/mv ava2.tar.gz /var/www/html/ Sep 10 14:54:28 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 14:54:28 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 14:54:46 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html ; USER=root ; COMMAND=/bin/tar -xvf ava2.tar.gz Sep 10 14:54:46 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 14:54:54 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 14:56:26 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html ; USER=root ; COMMAND=/bin/chown www-data:www-data eccsm -R Sep 10 14:56:26 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 14:56:26 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 14:56:39 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/etc/apache2/sites-enabled ; USER=root ; COMMAND=/usr/bin/vim 000-default.conf Sep 10 14:56:39 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 14:56:59 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 14:57:27 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/etc/apache2/sites-enabled ; USER=root ; COMMAND=/usr/bin/vim 000-default.conf Sep 10 14:57:27 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 14:58:09 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 14:58:11 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/etc/apache2/sites-enabled ; USER=root ; COMMAND=/etc/init.d/apache2 restart Sep 10 14:58:11 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 14:58:13 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 14:58:15 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/etc/apache2/sites-enabled ; USER=root ; COMMAND=/usr/bin/vim 000-default.conf Sep 10 14:58:15 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 14:58:52 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 14:58:59 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/eccsm ; USER=root ; COMMAND=/usr/bin/vim config.php Sep 10 14:58:59 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 14:59:11 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 14:59:25 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/eccsm ; USER=root ; COMMAND=/bin/cp ../moodle/config.php config.php.example Sep 10 14:59:25 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 14:59:25 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 14:59:41 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/eccsm ; USER=root ; COMMAND=/usr/bin/vim config.php Sep 10 14:59:41 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 14:59:57 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 15:00:04 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/eccsm ; USER=root ; COMMAND=/usr/bin/vim config.php Sep 10 15:00:04 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 15:00:28 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 15:08:02 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/eccsm ; USER=root ; COMMAND=/usr/bin/vim config.php Sep 10 15:08:02 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 15:09:01 ip-172-31-5-39 CRON[17164]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 10 15:09:01 ip-172-31-5-39 CRON[17164]: pam_unix(cron:session): session closed for user root Sep 10 15:10:45 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 15:10:54 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/eccsm ; USER=root ; COMMAND=/usr/bin/vim config.php Sep 10 15:10:54 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 15:11:14 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 15:11:23 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/eccsm ; USER=root ; COMMAND=/usr/bin/vim config.php Sep 10 15:11:23 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 15:17:01 ip-172-31-5-39 CRON[17224]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 10 15:17:01 ip-172-31-5-39 CRON[17224]: pam_unix(cron:session): session closed for user root Sep 10 15:39:01 ip-172-31-5-39 CRON[17239]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 10 15:39:01 ip-172-31-5-39 CRON[17239]: pam_unix(cron:session): session closed for user root Sep 10 16:09:01 ip-172-31-5-39 CRON[17306]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 10 16:09:01 ip-172-31-5-39 CRON[17306]: pam_unix(cron:session): session closed for user root Sep 10 16:17:01 ip-172-31-5-39 CRON[17361]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 10 16:17:01 ip-172-31-5-39 CRON[17361]: pam_unix(cron:session): session closed for user root Sep 10 16:39:01 ip-172-31-5-39 CRON[17376]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 10 16:39:01 ip-172-31-5-39 CRON[17376]: pam_unix(cron:session): session closed for user root Sep 10 16:45:29 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 17:02:10 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/eccsm ; USER=root ; COMMAND=/usr/bin/vim config.php Sep 10 17:02:10 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 17:03:53 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 17:07:41 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html ; USER=root ; COMMAND=/usr/bin/wget https://moodle.org/plugins/download.php/16831/local_mailtest_moodle35_2018052100.zip Sep 10 17:07:41 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 17:07:42 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 17:08:10 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html ; USER=root ; COMMAND=/usr/bin/apt-get install unzip Sep 10 17:08:10 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 17:08:12 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 17:08:21 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html ; USER=root ; COMMAND=/usr/bin/unzip local_mailtest_moodle35_2018052100.zip Sep 10 17:08:21 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 17:08:21 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 17:09:01 ip-172-31-5-39 CRON[17860]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 10 17:09:01 ip-172-31-5-39 CRON[17860]: pam_unix(cron:session): session closed for user root Sep 10 17:09:05 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html ; USER=root ; COMMAND=/bin/mv mailtest moodle/local/ Sep 10 17:09:05 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 17:09:05 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 17:17:01 ip-172-31-5-39 CRON[17923]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 10 17:17:01 ip-172-31-5-39 CRON[17923]: pam_unix(cron:session): session closed for user root Sep 10 17:33:31 ip-172-31-5-39 sshd[17940]: Accepted publickey for ubuntu from 177.103.176.199 port 33930 ssh2: RSA SHA256:3/91sXvgrhpGwm6BHY9O8YSerXhFGNxSkZn2QEniijY Sep 10 17:33:31 ip-172-31-5-39 sshd[17940]: pam_unix(sshd:session): session opened for user ubuntu by (uid=0) Sep 10 17:33:31 ip-172-31-5-39 systemd-logind[1168]: New session 16 of user ubuntu. Sep 10 17:39:01 ip-172-31-5-39 CRON[17998]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 10 17:39:02 ip-172-31-5-39 CRON[17998]: pam_unix(cron:session): session closed for user root Sep 10 17:41:59 ip-172-31-5-39 sshd[17994]: Received disconnect from 177.103.176.199 port 33930:11: disconnected by user Sep 10 17:41:59 ip-172-31-5-39 sshd[17994]: Disconnected from 177.103.176.199 port 33930 Sep 10 17:41:59 ip-172-31-5-39 sshd[17940]: pam_unix(sshd:session): session closed for user ubuntu Sep 10 17:41:59 ip-172-31-5-39 systemd-logind[1168]: Removed session 16. Sep 10 17:42:37 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/home/ubuntu ; USER=root ; COMMAND=/bin/mv moodledataeccsm.tar.gz /usr/local/moodledata/ Sep 10 17:42:37 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 17:51:29 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 17:51:49 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/usr/local/moodledata ; USER=root ; COMMAND=/bin/tar -xvf moodledataeccsm.tar.gz Sep 10 17:51:49 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 18:09:01 ip-172-31-5-39 CRON[18099]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 10 18:09:01 ip-172-31-5-39 CRON[18099]: pam_unix(cron:session): session closed for user root Sep 10 18:17:01 ip-172-31-5-39 CRON[18166]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 10 18:17:01 ip-172-31-5-39 CRON[18166]: pam_unix(cron:session): session closed for user root Sep 10 18:39:01 ip-172-31-5-39 CRON[18182]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 10 18:39:02 ip-172-31-5-39 CRON[18182]: pam_unix(cron:session): session closed for user root Sep 10 18:41:44 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 18:41:58 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/usr/local/moodledata ; USER=root ; COMMAND=/bin/chown www-data:www-data moodledataeccsm Sep 10 18:41:58 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 18:41:58 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 18:42:01 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/usr/local/moodledata ; USER=root ; COMMAND=/bin/chown www-data:www-data moodledataeccsm -R Sep 10 18:42:01 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 18:49:02 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 18:52:24 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/eccsm ; USER=root ; COMMAND=/usr/bin/vim config.php Sep 10 18:52:24 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 18:52:33 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 18:52:46 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/eccsm ; USER=root ; COMMAND=/usr/bin/vim config.php Sep 10 18:52:46 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 18:52:53 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 19:00:31 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html ; USER=root ; COMMAND=/bin/cp -R eccsm eccsm_orig Sep 10 19:00:31 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 19:00:39 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 19:00:59 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html ; USER=root ; COMMAND=/bin/mkdir teste Sep 10 19:00:59 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 19:00:59 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 19:01:07 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html ; USER=root ; COMMAND=/bin/mv moodle-latest-35.tgz teste/ Sep 10 19:01:07 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 19:01:07 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 19:01:15 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/teste ; USER=root ; COMMAND=/bin/tar -zxvf moodle-latest-35.tgz Sep 10 19:01:15 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 19:01:19 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 19:01:37 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/teste/moodle ; USER=root ; COMMAND=/bin/cp -R admin analytics auth availability backup badges behat.yml.dist blocks blog brokenfile.php cache calendar cohort comment competency completion composer.json composer.lock config-dist.php CONTRIBUTING.txt COPYING.txt course dataformat draftfile.php enrol error file.php files filter githash.php grade group Gruntfile.js help_ajax.php help.php index.php install install.php INSTALL.txt iplookup lang lib local login media message mnet mod my notes npm-shrinkwrap.json package.json phpunit.xml.dist pix plagiarism pluginfile.php portfolio privacy PULL_REQUEST_TEMPLATE.txt question rating README.txt report repository rss search tag theme TRADEMARK.txt user userpix version.php webservice ../../eccsm Sep 10 19:01:38 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 19:01:42 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 19:04:43 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/eccsm ; USER=root ; COMMAND=/usr/bin/vim config.php Sep 10 19:04:43 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 19:04:54 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 19:06:15 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/eccsm ; USER=root ; COMMAND=/bin/rm -rf admin analytics auth availability backup badges behat.yml.dist blocks blog brokenfile.php cache calendar cohort comment competency completion composer.json composer.lock config-dist.php config.php config.php.example CONTRIBUTING.txt COPYING.txt course dataformat draftfile.php enrol error file.php files filter githash.php grade group Gruntfile.js help_ajax.php help.php index.php install install.php INSTALL.txt iplookup lang lib local login mdeploy.php mdeploytest.php media message mnet mod my notes npm-shrinkwrap.json package.json phpunit.xml.dist pix plagiarism pluginfile.php portfolio privacy PULL_REQUEST_TEMPLATE.txt question rating README.txt report repository rss search tag tags.txt theme TRADEMARK.txt user userpix version.php webservice Sep 10 19:06:15 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 19:06:16 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 19:06:29 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/eccsm ; USER=root ; COMMAND=/bin/cp -R ../teste/moodle/admin ../teste/moodle/analytics ../teste/moodle/auth ../teste/moodle/availability ../teste/moodle/backup ../teste/moodle/badges ../teste/moodle/behat.yml.dist ../teste/moodle/blocks ../teste/moodle/blog ../teste/moodle/brokenfile.php ../teste/moodle/cache ../teste/moodle/calendar ../teste/moodle/cohort ../teste/moodle/comment ../teste/moodle/competency ../teste/moodle/completion ../teste/moodle/composer.json ../teste/moodle/composer.lock ../teste/moodle/config-dist.php ../teste/moodle/CONTRIBUTING.txt ../teste/moodle/COPYING.txt ../teste/moodle/course ../teste/moodle/dataformat ../teste/moodle/draftfile.php ../teste/moodle/enrol ../teste/moodle/error ../teste/moodle/file.php ../teste/moodle/files ../teste/moodle/filter ../teste/moodle/githash.php ../teste/moodle/grade ../teste/moodle/group ../teste/moodle/Gruntfile.js ../teste/moodle/help_ajax.php Sep 10 19:06:29 ip-172-31-5-39 sudo: ubuntu : (command continued) ../teste/moodle/help.php ../teste/moodle/index.php ../teste/moodle/install ../teste/moodle/install.php ../teste/moodle/INSTALL.txt ../teste/moodle/iplookup ../teste/moodle/lang ../teste/moodle/lib ../teste/moodle/local ../teste/moodle/login ../teste/moodle/media ../teste/moodle/message ../teste/moodle/mnet ../teste/moodle/mod ../teste/moodle/my ../teste/moodle/notes ../teste/moodle/npm-shrinkwrap.json ../teste/moodle/package.json ../teste/moodle/phpunit.xml.dist ../teste/moodle/pix ../teste/moodle/plagiarism ../teste/moodle/pluginfile.php ../teste/moodle/portfolio ../teste/moodle/privacy ../teste/moodle/PULL_REQUEST_TEMPLATE.txt ../teste/moodle/question ../teste/moodle/rating ../teste/moodle/README.txt ../teste/moodle/report ../teste/moodle/repository ../teste/moodle/rss ../teste/moodle/search ../teste/moodle/tag ../teste/moodle/theme ../teste/moodle/TRADEMARK.txt ../teste/moodle/user ../teste/moodle/userpix Sep 10 19:06:29 ip-172-31-5-39 sudo: ubuntu : (command continued) ../teste/moodle/version.php ../teste/moodle/webservice . Sep 10 19:06:29 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 19:06:30 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 19:07:13 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/eccsm_orig/theme ; USER=root ; COMMAND=/bin/cp -R ecc ecc2 ecc2_sm ../../eccsm/theme/ Sep 10 19:07:13 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 19:07:13 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 19:07:36 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/eccsm_orig ; USER=root ; COMMAND=/bin/cp config.php ../eccsm/ Sep 10 19:07:36 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 19:07:36 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 19:09:01 ip-172-31-5-39 CRON[18468]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 10 19:09:01 ip-172-31-5-39 CRON[18468]: pam_unix(cron:session): session closed for user root Sep 10 19:12:38 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html ; USER=root ; COMMAND=/usr/bin/wget https://download.moodle.org/download.php/stable30/moodle-3.0.10.tgz Sep 10 19:12:38 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 19:12:38 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 19:12:49 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html ; USER=root ; COMMAND=/bin/mv moodle-3.0.10.tgz teste/ Sep 10 19:12:49 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 19:12:49 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 19:12:54 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/teste ; USER=root ; COMMAND=/bin/rm -rf moodle Sep 10 19:12:54 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 19:12:55 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 19:13:07 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/teste ; USER=root ; COMMAND=/bin/tar -xvf moodle-3.0.10.tgz Sep 10 19:13:07 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 19:13:07 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 19:13:11 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/teste ; USER=root ; COMMAND=/bin/tar -zxvf moodle-3.0.10.tgz Sep 10 19:13:11 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 19:13:11 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 19:13:19 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/teste ; USER=root ; COMMAND=/bin/tar -xzvf moodle-3.0.10.tgz Sep 10 19:13:19 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 19:13:19 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 19:13:23 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/teste ; USER=root ; COMMAND=/bin/tar -xzf moodle-3.0.10.tgz Sep 10 19:13:23 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 19:13:23 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 19:13:36 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/teste ; USER=root ; COMMAND=/bin/rm -rf moodle-3.0.10.tgz Sep 10 19:13:36 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 19:13:36 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 19:13:48 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/teste ; USER=root ; COMMAND=/usr/bin/wget https://download.moodle.org/download.php/direct/stable30/moodle-3.0.10.tgz Sep 10 19:13:48 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 19:13:53 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 19:14:05 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/teste ; USER=root ; COMMAND=/bin/tar -zxvf moodle-3.0.10.tgz Sep 10 19:14:05 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 19:14:08 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 19:14:21 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/eccsm ; USER=root ; COMMAND=/bin/rm -rf admin analytics auth availability backup badges behat.yml.dist blocks blog brokenfile.php cache calendar cohort comment competency completion composer.json composer.lock config-dist.php config.php CONTRIBUTING.txt COPYING.txt course dataformat draftfile.php enrol error file.php files filter githash.php grade group Gruntfile.js help_ajax.php help.php index.php install install.php INSTALL.txt iplookup lang lib local login media message mnet mod my notes npm-shrinkwrap.json package.json phpunit.xml.dist pix plagiarism pluginfile.php portfolio privacy PULL_REQUEST_TEMPLATE.txt question rating README.txt report repository rss search tag theme TRADEMARK.txt user userpix version.php webservice Sep 10 19:14:21 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 19:14:22 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 19:14:36 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/eccsm ; USER=root ; COMMAND=/bin/cp -R ../teste/moodle/admin ../teste/moodle/auth ../teste/moodle/availability ../teste/moodle/backup ../teste/moodle/badges ../teste/moodle/behat.yml.dist ../teste/moodle/blocks ../teste/moodle/blog ../teste/moodle/brokenfile.php ../teste/moodle/cache ../teste/moodle/calendar ../teste/moodle/cohort ../teste/moodle/comment ../teste/moodle/completion ../teste/moodle/composer.json ../teste/moodle/composer.lock ../teste/moodle/config-dist.php ../teste/moodle/COPYING.txt ../teste/moodle/course ../teste/moodle/draftfile.php ../teste/moodle/enrol ../teste/moodle/error ../teste/moodle/file.php ../teste/moodle/files ../teste/moodle/filter ../teste/moodle/githash.php ../teste/moodle/grade ../teste/moodle/group ../teste/moodle/Gruntfile.js ../teste/moodle/help_ajax.php ../teste/moodle/help.php ../teste/moodle/index.php ../teste/moodle/install ../teste/moodle/install.php Sep 10 19:14:36 ip-172-31-5-39 sudo: ubuntu : (command continued) ../teste/moodle/iplookup ../teste/moodle/lang ../teste/moodle/lib ../teste/moodle/local ../teste/moodle/login ../teste/moodle/message ../teste/moodle/mnet ../teste/moodle/mod ../teste/moodle/my ../teste/moodle/notes ../teste/moodle/npm-shrinkwrap.json ../teste/moodle/package.json ../teste/moodle/phpunit.xml.dist ../teste/moodle/pix ../teste/moodle/plagiarism ../teste/moodle/pluginfile.php ../teste/moodle/portfolio ../teste/moodle/question ../teste/moodle/rating ../teste/moodle/README.txt ../teste/moodle/report ../teste/moodle/repository ../teste/moodle/rss ../teste/moodle/tag ../teste/moodle/tags.txt ../teste/moodle/theme ../teste/moodle/TRADEMARK.txt ../teste/moodle/user ../teste/moodle/userpix ../teste/moodle/version.php ../teste/moodle/webservice . Sep 10 19:14:36 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 19:14:37 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 19:14:48 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/eccsm_orig ; USER=root ; COMMAND=/bin/cp config.php ../eccsm/ Sep 10 19:14:48 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 19:14:48 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 19:15:08 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/eccsm_orig/theme ; USER=root ; COMMAND=/bin/cp ecc ecc2 ecc2_sm ../../eccsm/theme/ Sep 10 19:15:08 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 19:15:08 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 19:15:14 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/eccsm_orig/theme ; USER=root ; COMMAND=/bin/cp -R ecc ecc2 ecc2_sm ../../eccsm/theme/ Sep 10 19:15:14 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 19:15:14 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 19:15:44 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/eccsm ; USER=root ; COMMAND=/usr/bin/vim config.php Sep 10 19:15:44 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 19:15:57 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 19:17:01 ip-172-31-5-39 CRON[18661]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 10 19:17:01 ip-172-31-5-39 CRON[18661]: pam_unix(cron:session): session closed for user root Sep 10 19:39:01 ip-172-31-5-39 CRON[18691]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 10 19:39:01 ip-172-31-5-39 CRON[18691]: pam_unix(cron:session): session closed for user root Sep 10 19:45:50 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html ; USER=root ; COMMAND=/bin/mv eccsm eccsm_3.0 Sep 10 19:45:50 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 19:45:50 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 19:45:57 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html ; USER=root ; COMMAND=/bin/mv eccsm_orig eccsm Sep 10 19:45:57 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 19:45:57 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 19:46:32 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/eccsm ; USER=root ; COMMAND=/usr/bin/vim config.php Sep 10 19:46:32 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 19:46:39 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 19:47:24 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html ; USER=root ; COMMAND=/bin/mv eccsm eccsm_orig Sep 10 19:47:24 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 19:47:24 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 19:47:31 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html ; USER=root ; COMMAND=/bin/mv eccsm_3.0 eccsm Sep 10 19:47:31 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 19:47:31 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 19:49:25 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/usr/local/moodledata/moodledataeccsm/cache/cachestore_file/default_application ; USER=root ; COMMAND=/bin/rm -rf core_calendar_categories core_coursecat core_eventinvalidation core_grade_categories core_navigation_expandcourse core_presignup core_tagindexbuilder core_userselections repository_skydrive_foldername Sep 10 19:49:25 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 19:49:25 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 19:50:37 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/eccsm ; USER=root ; COMMAND=/bin/cp ../eccsm_orig/config.php . Sep 10 19:50:37 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 19:50:37 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 19:50:39 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/eccsm ; USER=root ; COMMAND=/usr/bin/vim config.php Sep 10 19:50:39 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 19:50:54 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 19:52:43 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/eccsm ; USER=root ; COMMAND=/usr/bin/vim /usr/local/moodledata/moodledataeccsm/cache/core_component.php Sep 10 19:52:43 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 19:54:07 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 19:55:35 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/eccsm ; USER=root ; COMMAND=/usr/bin/vim /usr/local/moodledata/moodledataeccsm/muc/config.php Sep 10 19:55:35 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 19:56:00 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 19:56:14 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html ; USER=root ; COMMAND=/bin/mv eccsm eccsm_3 Sep 10 19:56:14 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 19:56:14 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 19:56:20 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html ; USER=root ; COMMAND=/bin/mv eccsm_orig eccsm Sep 10 19:56:20 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 19:56:20 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 19:56:28 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/eccsm ; USER=root ; COMMAND=/usr/bin/vim config.php Sep 10 19:56:28 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 19:56:36 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 19:58:56 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html ; USER=root ; COMMAND=/bin/mv eccsm eccsm_orig Sep 10 19:58:56 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 19:58:56 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 19:59:02 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html ; USER=root ; COMMAND=/bin/mv eccsm_3 eccsm Sep 10 19:59:02 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 19:59:02 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 19:59:16 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html ; USER=root ; COMMAND=/bin/mv /usr/local/moodledata/moodledataeccsm/muc . Sep 10 19:59:16 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 19:59:17 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 20:01:51 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/eccsm_orig/blocks ; USER=root ; COMMAND=/bin/cp -R configurable_reports ../../eccsm/blocks/ Sep 10 20:01:51 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 20:01:51 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 20:02:06 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/eccsm_orig/blocks ; USER=root ; COMMAND=/bin/cp -R repo_filemanager ../../eccsm/blocks/ Sep 10 20:02:06 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 20:02:06 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 20:02:56 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/eccsm_orig/report ; USER=root ; COMMAND=/bin/cp -R progressgroup ../../eccsm/report/ Sep 10 20:02:56 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 20:02:56 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 20:03:21 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/eccsm_orig/repository ; USER=root ; COMMAND=/bin/cp -R coursefilearea ../../eccsm/repository/ Sep 10 20:03:21 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 20:03:21 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 20:06:53 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/eccsm/blocks/repo_filemanager ; USER=root ; COMMAND=/usr/bin/vim version.php Sep 10 20:06:53 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 20:07:06 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 20:08:33 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/eccsm/blocks/repo_filemanager ; USER=root ; COMMAND=/bin/rm -rf block_repo_filemanager.php choosefile.php db index.php lang readme.txt repos version.php Sep 10 20:08:33 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 20:08:33 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 20:08:38 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/eccsm/blocks/repo_filemanager ; USER=root ; COMMAND=/usr/bin/wget https://moodle.org/plugins/download.php/12793/block_repo_filemanager_moodle32_2016120601.zip Sep 10 20:08:38 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 20:08:39 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 20:08:45 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/eccsm/blocks/repo_filemanager ; USER=root ; COMMAND=/usr/bin/unzip block_repo_filemanager_moodle32_2016120601.zip Sep 10 20:08:45 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 20:08:45 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 20:08:53 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/eccsm/blocks/repo_filemanager/repo_filemanager ; USER=root ; COMMAND=/bin/mv block_repo_filemanager.php choosefile.php db index.php lang readme.txt repos uploadlib.php version.php ../ Sep 10 20:08:53 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 20:08:53 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 20:09:00 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/eccsm/blocks/repo_filemanager ; USER=root ; COMMAND=/bin/rm -rf repo_filemanager/ Sep 10 20:09:00 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 20:09:00 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 20:09:01 ip-172-31-5-39 CRON[19263]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 10 20:09:01 ip-172-31-5-39 CRON[19263]: pam_unix(cron:session): session closed for user root Sep 10 20:10:08 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/eccsm/repository ; USER=root ; COMMAND=/bin/rm -rf alfresco areafiles boxnet coursefilearea coursefiles draftfiles_ajax.php draftfiles_manager.php dropbox equella filepicker.js filepicker.php filesystem flickr flickr_public googledocs lib.php local manage_instances.php merlot picasa README.txt recent repository_ajax.php repository_callback.php s3 skydrive tests upgrade.txt upload url user webdav wikimedia youtube Sep 10 20:10:08 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 20:10:08 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 20:10:10 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/eccsm/repository ; USER=root ; COMMAND=/usr/bin/wget https://moodle.org/plugins/download.php/11077/repository_coursefilearea_moodle32_2016041801.zip Sep 10 20:10:10 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 20:10:11 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 20:10:14 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/eccsm/repository ; USER=root ; COMMAND=/usr/bin/unzip repository_coursefilearea_moodle32_2016041801.zip Sep 10 20:10:14 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 20:10:14 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 20:10:19 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/eccsm/repository/coursefilearea ; USER=root ; COMMAND=/bin/mv db file.php lang lib.php pix readme.txt test.php version.php ../ Sep 10 20:10:19 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 20:10:19 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 20:10:24 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/eccsm/repository ; USER=root ; COMMAND=/bin/rm -rf coursefilearea/ Sep 10 20:10:24 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 20:10:24 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 20:11:41 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/eccsm/repository ; USER=root ; COMMAND=/bin/cp ../../eccsm_orig/repository/filepicker.js ../../eccsm_orig/repository/filepicker.php . Sep 10 20:11:41 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 20:11:41 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 20:15:02 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/eccsm/repository ; USER=root ; COMMAND=/usr/bin/vim /var/www/html/eccsm/repository/lib.php Sep 10 20:15:02 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 20:15:09 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 20:15:40 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/eccsm/repository ; USER=root ; COMMAND=/bin/mv repository_coursefilearea_moodle32_2016041801.zip /root/ Sep 10 20:15:40 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 20:15:40 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 20:15:45 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/eccsm/repository ; USER=root ; COMMAND=/bin/rm -rf db file.php filepicker.js filepicker.php lang lib.php pix readme.txt test.php version.php Sep 10 20:15:45 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 20:15:45 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 20:16:14 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/teste/moodle/repository ; USER=root ; COMMAND=/bin/cp -R alfresco areafiles boxnet coursefiles draftfiles_ajax.php draftfiles_manager.php dropbox equella filepicker.js filepicker.php filesystem flickr flickr_public googledocs lib.php local manage_instances.php merlot picasa README.txt recent repository_ajax.php repository_callback.php s3 skydrive tests upgrade.txt upload url user webdav wikimedia youtube ../../../eccsm/repository/ Sep 10 20:16:14 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 20:16:14 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 20:16:28 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/eccsm/repository/coursefiles ; USER=root ; COMMAND=/bin/rm -rf db lang lib.php pix tests version.php Sep 10 20:16:28 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 20:16:28 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 20:16:46 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/eccsm/repository/coursefiles ; USER=root ; COMMAND=/bin/cp /root/repository_coursefilearea_moodle32_2016041801.zip . Sep 10 20:16:46 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 20:16:46 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 20:16:50 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/eccsm/repository/coursefiles ; USER=root ; COMMAND=/usr/bin/unzip repository_coursefilearea_moodle32_2016041801.zip Sep 10 20:16:50 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 20:16:50 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 20:16:56 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/eccsm/repository/coursefiles/coursefilearea ; USER=root ; COMMAND=/bin/mv db file.php lang lib.php pix readme.txt test.php version.php ../ Sep 10 20:16:56 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 20:16:56 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 20:17:01 ip-172-31-5-39 CRON[19478]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 10 20:17:01 ip-172-31-5-39 CRON[19478]: pam_unix(cron:session): session closed for user root Sep 10 20:17:03 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/eccsm/repository/coursefiles ; USER=root ; COMMAND=/bin/rm -rf coursefilearea/ Sep 10 20:17:03 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 20:17:03 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 20:21:18 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/eccsm/repository/coursefiles ; USER=root ; COMMAND=/bin/rm -rf db file.php lang lib.php pix readme.txt repository_coursefilearea_moodle32_2016041801.zip test.php version.php Sep 10 20:21:18 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 20:21:18 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 20:21:39 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/eccsm/repository/coursefiles ; USER=root ; COMMAND=/bin/cp -R ../../../teste/moodle/repository/coursefiles/db ../../../teste/moodle/repository/coursefiles/lang ../../../teste/moodle/repository/coursefiles/lib.php ../../../teste/moodle/repository/coursefiles/pix ../../../teste/moodle/repository/coursefiles/tests ../../../teste/moodle/repository/coursefiles/version.php . Sep 10 20:21:39 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 20:21:39 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 20:21:57 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/eccsm/repository ; USER=root ; COMMAND=/bin/cp /root/repository_coursefilearea_moodle32_2016041801.zip . Sep 10 20:21:57 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 20:21:57 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 20:22:04 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/eccsm/repository ; USER=root ; COMMAND=/usr/bin/unzip repository_coursefilearea_moodle32_2016041801.zip Sep 10 20:22:04 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 20:22:04 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 20:25:05 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/eccsm/repository ; USER=root ; COMMAND=/bin/mv repository_coursefilearea_moodle32_2016041801.zip /tmp/ Sep 10 20:25:05 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 20:25:05 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 20:26:14 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/eccsm/blocks/repo_filemanager ; USER=root ; COMMAND=/bin/mv block_repo_filemanager_moodle32_2016120601.zip /tmp/ Sep 10 20:26:14 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 20:26:14 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 20:26:47 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/teste ; USER=root ; COMMAND=/bin/rm -rf moodle Sep 10 20:26:47 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 20:26:47 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 20:26:54 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/teste ; USER=root ; COMMAND=/bin/tar -zxvf moodle-latest-35.tgz Sep 10 20:26:54 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 20:26:57 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 20:27:07 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html ; USER=root ; COMMAND=/bin/cp -R eccsm eccsm_3 Sep 10 20:27:08 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 20:27:09 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 20:27:16 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/eccsm ; USER=root ; COMMAND=/bin/rm -rf admin auth availability backup badges behat.yml.dist blocks blog brokenfile.php cache calendar cohort comment completion composer.json composer.lock config-dist.php config.php COPYING.txt course draftfile.php enrol error file.php files filter githash.php grade group Gruntfile.js help_ajax.php help.php index.php install install.php iplookup lang lib local login message mnet mod my notes npm-shrinkwrap.json package.json phpunit.xml.dist pix plagiarism pluginfile.php portfolio question rating README.txt report repository rss tag tags.txt theme TRADEMARK.txt user userpix version.php webservice Sep 10 20:27:16 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 20:27:16 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 20:27:30 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/eccsm ; USER=root ; COMMAND=/bin/cp -R ../teste/moodle/admin ../teste/moodle/analytics ../teste/moodle/auth ../teste/moodle/availability ../teste/moodle/backup ../teste/moodle/badges ../teste/moodle/behat.yml.dist ../teste/moodle/blocks ../teste/moodle/blog ../teste/moodle/brokenfile.php ../teste/moodle/cache ../teste/moodle/calendar ../teste/moodle/cohort ../teste/moodle/comment ../teste/moodle/competency ../teste/moodle/completion ../teste/moodle/composer.json ../teste/moodle/composer.lock ../teste/moodle/config-dist.php ../teste/moodle/CONTRIBUTING.txt ../teste/moodle/COPYING.txt ../teste/moodle/course ../teste/moodle/dataformat ../teste/moodle/draftfile.php ../teste/moodle/enrol ../teste/moodle/error ../teste/moodle/file.php ../teste/moodle/files ../teste/moodle/filter ../teste/moodle/githash.php ../teste/moodle/grade ../teste/moodle/group ../teste/moodle/Gruntfile.js ../teste/moodle/help_ajax.php Sep 10 20:27:30 ip-172-31-5-39 sudo: ubuntu : (command continued) ../teste/moodle/help.php ../teste/moodle/index.php ../teste/moodle/install ../teste/moodle/install.php ../teste/moodle/INSTALL.txt ../teste/moodle/iplookup ../teste/moodle/lang ../teste/moodle/lib ../teste/moodle/local ../teste/moodle/login ../teste/moodle/media ../teste/moodle/message ../teste/moodle/mnet ../teste/moodle/mod ../teste/moodle/my ../teste/moodle/notes ../teste/moodle/npm-shrinkwrap.json ../teste/moodle/package.json ../teste/moodle/phpunit.xml.dist ../teste/moodle/pix ../teste/moodle/plagiarism ../teste/moodle/pluginfile.php ../teste/moodle/portfolio ../teste/moodle/privacy ../teste/moodle/PULL_REQUEST_TEMPLATE.txt ../teste/moodle/question ../teste/moodle/rating ../teste/moodle/README.txt ../teste/moodle/report ../teste/moodle/repository ../teste/moodle/rss ../teste/moodle/search ../teste/moodle/tag ../teste/moodle/theme ../teste/moodle/TRADEMARK.txt ../teste/moodle/user ../teste/moodle/userpix Sep 10 20:27:30 ip-172-31-5-39 sudo: ubuntu : (command continued) ../teste/moodle/version.php ../teste/moodle/webservice . Sep 10 20:27:30 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 20:27:31 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 20:27:47 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/eccsm/theme ; USER=root ; COMMAND=/bin/cp -R ../../eccsm_3/theme/ecc . Sep 10 20:27:47 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 20:27:47 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 20:27:49 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/eccsm/theme ; USER=root ; COMMAND=/bin/cp -R ../../eccsm_3/theme/ecc2 . Sep 10 20:27:49 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 20:27:49 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 20:27:52 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/eccsm/theme ; USER=root ; COMMAND=/bin/cp -R ../../eccsm_3/theme/ecc2_sm . Sep 10 20:27:52 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 20:27:52 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 20:28:04 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/eccsm/blocks ; USER=root ; COMMAND=/bin/cp -R ../../eccsm_3/blocks/configurable_reports . Sep 10 20:28:04 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 20:28:04 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 20:28:10 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/eccsm/blocks ; USER=root ; COMMAND=/bin/cp -R ../../eccsm_3/blocks/repo_filemanager . Sep 10 20:28:10 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 20:28:10 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 20:28:26 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/eccsm/report ; USER=root ; COMMAND=/bin/cp -R ../../eccsm_3/report/progressgroup . Sep 10 20:28:26 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 20:28:26 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 20:28:44 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/eccsm/repository ; USER=root ; COMMAND=/bin/cp -R ../../eccsm_3/repository/coursefilearea . Sep 10 20:28:44 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 20:28:44 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 20:29:12 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/eccsm/repository ; USER=root ; COMMAND=/bin/cp -R ../../eccsm_3/config.php ../ Sep 10 20:29:12 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 20:29:12 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 20:30:46 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/teste ; USER=root ; COMMAND=/usr/bin/wget https://download.moodle.org/download.php/stable32/moodle-3.2.9.tgz Sep 10 20:30:46 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 20:30:46 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 20:30:57 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/teste ; USER=root ; COMMAND=/bin/rm -rf moodle-3.2.9.tgz Sep 10 20:30:57 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 20:30:57 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 20:31:11 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/teste ; USER=root ; COMMAND=/usr/bin/wget https://download.moodle.org/download.php/direct/stable32/moodle-3.2.9.tgz Sep 10 20:31:11 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 20:31:16 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 20:31:25 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/teste ; USER=root ; COMMAND=/bin/rm -rf moodle Sep 10 20:31:25 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 20:31:25 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 20:31:34 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/teste ; USER=root ; COMMAND=/bin/tar -zxvf moodle-3.2.9.tgz Sep 10 20:31:34 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 20:31:37 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 20:31:45 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/eccsm ; USER=root ; COMMAND=/bin/rm -rf admin analytics auth availability backup badges behat.yml.dist blocks blog brokenfile.php cache calendar cohort comment competency completion composer.json composer.lock config-dist.php config.php CONTRIBUTING.txt COPYING.txt course dataformat draftfile.php enrol error file.php files filter githash.php grade group Gruntfile.js help_ajax.php help.php index.php install install.php INSTALL.txt iplookup lang lib local login media message mnet mod my notes npm-shrinkwrap.json package.json phpunit.xml.dist pix plagiarism pluginfile.php portfolio privacy PULL_REQUEST_TEMPLATE.txt question rating README.txt report repository rss search tag theme TRADEMARK.txt user userpix version.php webservice Sep 10 20:31:45 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 20:31:46 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 20:31:53 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/eccsm ; USER=root ; COMMAND=/bin/cp -R ../teste/moodle/admin ../teste/moodle/auth ../teste/moodle/availability ../teste/moodle/backup ../teste/moodle/badges ../teste/moodle/behat.yml.dist ../teste/moodle/blocks ../teste/moodle/blog ../teste/moodle/brokenfile.php ../teste/moodle/cache ../teste/moodle/calendar ../teste/moodle/cohort ../teste/moodle/comment ../teste/moodle/competency ../teste/moodle/completion ../teste/moodle/composer.json ../teste/moodle/composer.lock ../teste/moodle/config-dist.php ../teste/moodle/CONTRIBUTING.txt ../teste/moodle/COPYING.txt ../teste/moodle/course ../teste/moodle/dataformat ../teste/moodle/draftfile.php ../teste/moodle/enrol ../teste/moodle/error ../teste/moodle/file.php ../teste/moodle/files ../teste/moodle/filter ../teste/moodle/githash.php ../teste/moodle/grade ../teste/moodle/group ../teste/moodle/Gruntfile.js ../teste/moodle/help_ajax.php ../teste/moodle/help.php Sep 10 20:31:53 ip-172-31-5-39 sudo: ubuntu : (command continued) ../teste/moodle/index.php ../teste/moodle/install ../teste/moodle/install.php ../teste/moodle/INSTALL.txt ../teste/moodle/iplookup ../teste/moodle/lang ../teste/moodle/lib ../teste/moodle/local ../teste/moodle/login ../teste/moodle/media ../teste/moodle/message ../teste/moodle/mnet ../teste/moodle/mod ../teste/moodle/my ../teste/moodle/notes ../teste/moodle/npm-shrinkwrap.json ../teste/moodle/package.json ../teste/moodle/phpunit.xml.dist ../teste/moodle/pix ../teste/moodle/plagiarism ../teste/moodle/pluginfile.php ../teste/moodle/portfolio ../teste/moodle/PULL_REQUEST_TEMPLATE.txt ../teste/moodle/question ../teste/moodle/rating ../teste/moodle/README.txt ../teste/moodle/report ../teste/moodle/repository ../teste/moodle/rss ../teste/moodle/search ../teste/moodle/tag ../teste/moodle/tags.txt ../teste/moodle/theme ../teste/moodle/TRADEMARK.txt ../teste/moodle/user ../teste/moodle/userpix ../teste/moodle/version.php Sep 10 20:31:53 ip-172-31-5-39 sudo: ubuntu : (command continued) ../teste/moodle/webservice . Sep 10 20:31:53 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 20:31:54 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 20:32:13 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/eccsm ; USER=root ; COMMAND=/bin/cp ../eccsm_3/config.php . Sep 10 20:32:13 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 20:32:13 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 20:32:38 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/eccsm/blocks ; USER=root ; COMMAND=/bin/cp ../../eccsm_3/blocks/configurable_reports . Sep 10 20:32:38 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 20:32:38 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 20:32:42 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/eccsm/blocks ; USER=root ; COMMAND=/bin/cp -R ../../eccsm_3/blocks/configurable_reports . Sep 10 20:32:42 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 20:32:42 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 20:32:57 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/eccsm/blocks ; USER=root ; COMMAND=/bin/cp -R ../../eccsm_3/blocks/repo_filemanager . Sep 10 20:32:57 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 20:32:57 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 20:33:14 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/eccsm/report ; USER=root ; COMMAND=/bin/cp -R ../../eccsm_3/report/progressgroup . Sep 10 20:33:14 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 20:33:14 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 20:33:27 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/eccsm/theme ; USER=root ; COMMAND=/bin/cp -R ../../eccsm_3/theme/ecc . Sep 10 20:33:27 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 20:33:27 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 20:33:29 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/eccsm/theme ; USER=root ; COMMAND=/bin/cp -R ../../eccsm_3/theme/ecc2 . Sep 10 20:33:29 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 20:33:29 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 20:33:31 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/eccsm/theme ; USER=root ; COMMAND=/bin/cp -R ../../eccsm_3/theme/ecc2_sm . Sep 10 20:33:31 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 20:33:31 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 20:33:48 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/eccsm/repository ; USER=root ; COMMAND=/bin/cp -R ../../eccsm_3/repository/coursefilearea . Sep 10 20:33:48 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 20:33:48 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 20:39:01 ip-172-31-5-39 CRON[19952]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 10 20:39:01 ip-172-31-5-39 CRON[19952]: pam_unix(cron:session): session closed for user root Sep 10 20:42:57 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html ; USER=root ; COMMAND=/bin/rm -rf eccsm_3 Sep 10 20:42:57 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 20:42:57 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 20:43:07 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html ; USER=root ; COMMAND=/bin/cp -R eccsm eccsm_329 Sep 10 20:43:07 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 20:43:07 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 20:43:14 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/teste ; USER=root ; COMMAND=/bin/rm -rf moodle moodle-3.0.10.tgz moodle-3.2.9.tgz moodle-latest-35.tgz Sep 10 20:43:14 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 20:43:15 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 20:43:38 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/teste ; USER=root ; COMMAND=/usr/bin/wget https://download.moodle.org/download.php/direct/stable32/moodle-3.2.9.tgz Sep 10 20:43:38 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 20:43:39 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 20:44:07 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/teste ; USER=root ; COMMAND=/usr/bin/wget https://download.moodle.org/download.php/direct/stable35/moodle-3.5.2.tgz Sep 10 20:44:07 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 20:44:08 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 20:44:17 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/teste ; USER=root ; COMMAND=/bin/tar -zxvf moodle-3.5.2.tgz Sep 10 20:44:17 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 20:44:20 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 20:44:28 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/eccsm ; USER=root ; COMMAND=/bin/rm -rf admin auth availability backup badges behat.yml.dist blocks blog brokenfile.php cache calendar cohort comment competency completion composer.json composer.lock config-dist.php config.php CONTRIBUTING.txt COPYING.txt course dataformat draftfile.php enrol error file.php files filter githash.php grade group Gruntfile.js help_ajax.php help.php index.php install install.php INSTALL.txt iplookup lang lib local login media message mnet mod my notes npm-shrinkwrap.json package.json phpunit.xml.dist pix plagiarism pluginfile.php portfolio PULL_REQUEST_TEMPLATE.txt question rating README.txt report repository rss search tag tags.txt theme TRADEMARK.txt user userpix version.php webservice Sep 10 20:44:28 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 20:44:29 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 20:44:41 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/eccsm ; USER=root ; COMMAND=/bin/cp -R ../teste/moodle/admin ../teste/moodle/analytics ../teste/moodle/auth ../teste/moodle/availability ../teste/moodle/backup ../teste/moodle/badges ../teste/moodle/behat.yml.dist ../teste/moodle/blocks ../teste/moodle/blog ../teste/moodle/brokenfile.php ../teste/moodle/cache ../teste/moodle/calendar ../teste/moodle/cohort ../teste/moodle/comment ../teste/moodle/competency ../teste/moodle/completion ../teste/moodle/composer.json ../teste/moodle/composer.lock ../teste/moodle/config-dist.php ../teste/moodle/CONTRIBUTING.txt ../teste/moodle/COPYING.txt ../teste/moodle/course ../teste/moodle/dataformat ../teste/moodle/draftfile.php ../teste/moodle/enrol ../teste/moodle/error ../teste/moodle/file.php ../teste/moodle/files ../teste/moodle/filter ../teste/moodle/githash.php ../teste/moodle/grade ../teste/moodle/group ../teste/moodle/Gruntfile.js ../teste/moodle/help_ajax.php Sep 10 20:44:41 ip-172-31-5-39 sudo: ubuntu : (command continued) ../teste/moodle/help.php ../teste/moodle/index.php ../teste/moodle/install ../teste/moodle/install.php ../teste/moodle/INSTALL.txt ../teste/moodle/iplookup ../teste/moodle/lang ../teste/moodle/lib ../teste/moodle/local ../teste/moodle/login ../teste/moodle/media ../teste/moodle/message ../teste/moodle/mnet ../teste/moodle/mod ../teste/moodle/my ../teste/moodle/notes ../teste/moodle/npm-shrinkwrap.json ../teste/moodle/package.json ../teste/moodle/phpunit.xml.dist ../teste/moodle/pix ../teste/moodle/plagiarism ../teste/moodle/pluginfile.php ../teste/moodle/portfolio ../teste/moodle/privacy ../teste/moodle/PULL_REQUEST_TEMPLATE.txt ../teste/moodle/question ../teste/moodle/rating ../teste/moodle/README.txt ../teste/moodle/report ../teste/moodle/repository ../teste/moodle/rss ../teste/moodle/search ../teste/moodle/tag ../teste/moodle/theme ../teste/moodle/TRADEMARK.txt ../teste/moodle/user ../teste/moodle/userpix Sep 10 20:44:41 ip-172-31-5-39 sudo: ubuntu : (command continued) ../teste/moodle/version.php ../teste/moodle/webservice . Sep 10 20:44:41 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 20:44:42 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 20:44:53 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/eccsm ; USER=root ; COMMAND=/bin/cp ../eccsm_329/config.php . Sep 10 20:44:53 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 20:44:53 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 20:45:19 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/eccsm/blocks ; USER=root ; COMMAND=/bin/cp -R ../../eccsm_329/blocks/configurable_reports . Sep 10 20:45:19 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 20:45:19 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 20:45:24 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/eccsm/blocks ; USER=root ; COMMAND=/bin/cp -R ../../eccsm_329/blocks/repo_filemanager . Sep 10 20:45:24 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 20:45:24 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 20:45:35 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/eccsm/theme ; USER=root ; COMMAND=/bin/cp -R ../../eccsm_329/theme/ecc . Sep 10 20:45:35 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 20:45:35 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 20:45:36 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/eccsm/theme ; USER=root ; COMMAND=/bin/cp -R ../../eccsm_329/theme/ecc2 . Sep 10 20:45:36 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 20:45:36 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 20:45:38 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/eccsm/theme ; USER=root ; COMMAND=/bin/cp -R ../../eccsm_329/theme/ecc2_sm . Sep 10 20:45:38 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 20:45:38 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 20:45:50 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/eccsm/report ; USER=root ; COMMAND=/bin/cp -R ../../eccsm_329/report/progressgroup . Sep 10 20:45:50 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 20:45:50 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 20:46:02 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/eccsm/repository ; USER=root ; COMMAND=/bin/cp -R ../../eccsm_329/repository/coursefilearea . Sep 10 20:46:02 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 20:46:02 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 21:06:47 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html ; USER=root ; COMMAND=/bin/rm -rf muc/ Sep 10 21:06:47 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 21:06:47 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 21:06:55 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html ; USER=root ; COMMAND=/bin/mv local_mailtest_moodle35_2018052100.zip /tmp/ Sep 10 21:06:55 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 21:06:55 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 21:09:01 ip-172-31-5-39 CRON[20195]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 10 21:09:01 ip-172-31-5-39 CRON[20195]: pam_unix(cron:session): session closed for user root Sep 10 21:17:01 ip-172-31-5-39 CRON[20277]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 10 21:17:01 ip-172-31-5-39 CRON[20277]: pam_unix(cron:session): session closed for user root Sep 10 21:30:27 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html ; USER=root ; COMMAND=/bin/rm -rf eccsm_orig Sep 10 21:30:27 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 21:30:28 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 21:30:38 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/moodle ; USER=root ; COMMAND=/usr/bin/vim config.php Sep 10 21:30:38 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 21:30:45 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 21:30:57 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/teste ; USER=root ; COMMAND=/bin/rm -rf moodle/ Sep 10 21:30:57 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 21:30:57 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 21:31:15 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html ; USER=root ; COMMAND=/bin/mkdir bkp Sep 10 21:31:15 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 21:31:15 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 21:31:22 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/bkp ; USER=root ; COMMAND=/bin/mkdir eccsm Sep 10 21:31:22 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 21:31:22 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 21:31:28 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/bkp/eccsm ; USER=root ; COMMAND=/bin/mv ../../ava2.tar.gz . Sep 10 21:31:28 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 21:31:28 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 21:31:36 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/bkp/eccsm ; USER=root ; COMMAND=/bin/mv /tmp/block_repo_filemanager_moodle32_2016120601.zip /tmp/local_mailtest_moodle35_2018052100.zip /tmp/repository_coursefilearea_moodle32_2016041801.zip . Sep 10 21:31:36 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 21:31:36 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 21:31:49 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/bkp ; USER=root ; COMMAND=/bin/mkdir eadfcav Sep 10 21:31:49 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 21:31:49 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 21:32:12 ip-172-31-5-39 sshd[20355]: Accepted publickey for ubuntu from 177.103.176.199 port 55084 ssh2: RSA SHA256:3/91sXvgrhpGwm6BHY9O8YSerXhFGNxSkZn2QEniijY Sep 10 21:32:12 ip-172-31-5-39 sshd[20355]: pam_unix(sshd:session): session opened for user ubuntu by (uid=0) Sep 10 21:32:12 ip-172-31-5-39 systemd-logind[1168]: New session 29 of user ubuntu. Sep 10 21:32:20 ip-172-31-5-39 sshd[20409]: Received disconnect from 177.103.176.199 port 55084:11: disconnected by user Sep 10 21:32:20 ip-172-31-5-39 sshd[20409]: Disconnected from 177.103.176.199 port 55084 Sep 10 21:32:20 ip-172-31-5-39 sshd[20355]: pam_unix(sshd:session): session closed for user ubuntu Sep 10 21:32:20 ip-172-31-5-39 systemd-logind[1168]: Removed session 29. Sep 10 21:32:29 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/bkp/eadfcav ; USER=root ; COMMAND=/bin/mv /home/ubuntu/ead.tar.gz . Sep 10 21:32:29 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 21:32:29 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 21:32:43 ip-172-31-5-39 sshd[20437]: Accepted publickey for ubuntu from 177.103.176.199 port 35983 ssh2: RSA SHA256:3/91sXvgrhpGwm6BHY9O8YSerXhFGNxSkZn2QEniijY Sep 10 21:32:43 ip-172-31-5-39 sshd[20437]: pam_unix(sshd:session): session opened for user ubuntu by (uid=0) Sep 10 21:32:43 ip-172-31-5-39 systemd-logind[1168]: New session 30 of user ubuntu. Sep 10 21:33:18 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/bkp/eccsm ; USER=root ; COMMAND=/bin/mv /usr/local/moodledata/moodledataeccsm.tar.gz . Sep 10 21:33:18 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 21:33:20 ip-172-31-5-39 sshd[20469]: Received disconnect from 177.103.176.199 port 35983:11: disconnected by user Sep 10 21:33:20 ip-172-31-5-39 sshd[20469]: Disconnected from 177.103.176.199 port 35983 Sep 10 21:33:20 ip-172-31-5-39 sshd[20437]: pam_unix(sshd:session): session closed for user ubuntu Sep 10 21:33:20 ip-172-31-5-39 systemd-logind[1168]: Removed session 30. Sep 10 21:39:01 ip-172-31-5-39 CRON[20505]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 10 21:39:02 ip-172-31-5-39 CRON[20505]: pam_unix(cron:session): session closed for user root Sep 10 21:42:25 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 21:43:01 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/bkp/eadfcav ; USER=root ; COMMAND=/bin/mv /home/ubuntu/moodledatagte.tar.gz . Sep 10 21:43:01 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 21:43:01 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 21:43:13 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/bkp/eadfcav ; USER=root ; COMMAND=/bin/tar -xvf moodledatagte.tar.gz Sep 10 21:43:13 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 21:43:25 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 21:43:33 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/bkp/eadfcav ; USER=root ; COMMAND=/bin/mv moodledatagte /usr/local/moodledata/ Sep 10 21:43:33 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 21:51:32 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 21:51:43 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/bkp/eadfcav ; USER=root ; COMMAND=/bin/tar -xvf ead.tar.gz Sep 10 21:51:43 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 21:51:50 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 21:51:57 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/bkp/eadfcav ; USER=root ; COMMAND=/bin/mv gte ../../ Sep 10 21:51:57 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 21:51:57 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 21:52:22 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/gte ; USER=root ; COMMAND=/usr/bin/vim /etc/apache2/sites-enabled/000-default.conf Sep 10 21:52:22 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 21:53:03 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 21:53:05 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/gte ; USER=root ; COMMAND=/etc/init.d/apache2 restart Sep 10 21:53:05 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 21:53:07 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 21:53:26 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/usr/local/moodledata ; USER=root ; COMMAND=/bin/chown www-data:www-data moodledatagte -R Sep 10 21:53:26 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 21:54:35 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 21:54:54 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/gte ; USER=root ; COMMAND=/usr/bin/vim ../eccsm/config.php Sep 10 21:54:54 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 21:55:09 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 21:55:12 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/gte ; USER=root ; COMMAND=/usr/bin/vim config.php Sep 10 21:55:12 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 21:56:32 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 21:58:59 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html ; USER=root ; COMMAND=/bin/cp -R gte gte_orig Sep 10 21:58:59 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 21:59:00 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 21:59:17 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/teste ; USER=root ; COMMAND=/bin/tar -zxvf moodle-3.5.2.tgz Sep 10 21:59:17 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 21:59:20 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 21:59:27 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/gte ; USER=root ; COMMAND=/bin/rm -rf admin auth availability backup badges behat.yml.dist blocks blog brokenfile.php cache calendar cohort comment competency completion composer.json composer.lock config-dist.php __config.php _config.php config.php CONTRIBUTING.txt COPYING.txt course dataformat draftfile.php enrol error file.php files filter githash.php grade group Gruntfile.js help_ajax.php help.php index.php install install.php INSTALL.txt iplookup lang lib local login media message mnet mod my notes npm-shrinkwrap.json package.json phpunit.xml.dist pix plagiarism pluginfile.php portfolio PULL_REQUEST_TEMPLATE.txt question rating README.txt report repository rss search tag tags.txt theme TRADEMARK.txt user userpix version.php webservice Sep 10 21:59:27 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 21:59:27 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 21:59:35 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/gte ; USER=root ; COMMAND=/bin/cp -R ../teste/moodle/admin ../teste/moodle/analytics ../teste/moodle/auth ../teste/moodle/availability ../teste/moodle/backup ../teste/moodle/badges ../teste/moodle/behat.yml.dist ../teste/moodle/blocks ../teste/moodle/blog ../teste/moodle/brokenfile.php ../teste/moodle/cache ../teste/moodle/calendar ../teste/moodle/cohort ../teste/moodle/comment ../teste/moodle/competency ../teste/moodle/completion ../teste/moodle/composer.json ../teste/moodle/composer.lock ../teste/moodle/config-dist.php ../teste/moodle/CONTRIBUTING.txt ../teste/moodle/COPYING.txt ../teste/moodle/course ../teste/moodle/dataformat ../teste/moodle/draftfile.php ../teste/moodle/enrol ../teste/moodle/error ../teste/moodle/file.php ../teste/moodle/files ../teste/moodle/filter ../teste/moodle/githash.php ../teste/moodle/grade ../teste/moodle/group ../teste/moodle/Gruntfile.js ../teste/moodle/help_ajax.php Sep 10 21:59:35 ip-172-31-5-39 sudo: ubuntu : (command continued) ../teste/moodle/help.php ../teste/moodle/index.php ../teste/moodle/install ../teste/moodle/install.php ../teste/moodle/INSTALL.txt ../teste/moodle/iplookup ../teste/moodle/lang ../teste/moodle/lib ../teste/moodle/local ../teste/moodle/login ../teste/moodle/media ../teste/moodle/message ../teste/moodle/mnet ../teste/moodle/mod ../teste/moodle/my ../teste/moodle/notes ../teste/moodle/npm-shrinkwrap.json ../teste/moodle/package.json ../teste/moodle/phpunit.xml.dist ../teste/moodle/pix ../teste/moodle/plagiarism ../teste/moodle/pluginfile.php ../teste/moodle/portfolio ../teste/moodle/privacy ../teste/moodle/PULL_REQUEST_TEMPLATE.txt ../teste/moodle/question ../teste/moodle/rating ../teste/moodle/README.txt ../teste/moodle/report ../teste/moodle/repository ../teste/moodle/rss ../teste/moodle/search ../teste/moodle/tag ../teste/moodle/theme ../teste/moodle/TRADEMARK.txt ../teste/moodle/user ../teste/moodle/userpix Sep 10 21:59:35 ip-172-31-5-39 sudo: ubuntu : (command continued) ../teste/moodle/version.php ../teste/moodle/webservice . Sep 10 21:59:35 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 21:59:37 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 21:59:48 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/gte ; USER=root ; COMMAND=/bin/cp ../gte_orig/config.php . Sep 10 21:59:48 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 21:59:48 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 22:01:28 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/gte ; USER=root ; COMMAND=/usr/bin/vim /etc/apache2/sites-enabled/000-default.conf Sep 10 22:01:28 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 22:01:40 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 22:01:56 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/gte ; USER=root ; COMMAND=/etc/init.d/apache2 restart Sep 10 22:01:56 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 22:01:58 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 22:05:28 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/gte/blocks ; USER=root ; COMMAND=/bin/cp -R ../../gte_orig/blocks/accessibility . Sep 10 22:05:28 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 22:05:28 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 22:06:08 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/gte/theme ; USER=root ; COMMAND=/bin/cp -R ../../gte_orig/theme/lambda . Sep 10 22:06:08 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 22:06:08 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 22:09:01 ip-172-31-5-39 CRON[21087]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 10 22:09:01 ip-172-31-5-39 CRON[21087]: pam_unix(cron:session): session closed for user root Sep 10 22:17:01 ip-172-31-5-39 CRON[21148]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 10 22:17:01 ip-172-31-5-39 CRON[21148]: pam_unix(cron:session): session closed for user root Sep 10 22:20:50 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/eccsm ; USER=root ; COMMAND=/usr/bin/vim config.php Sep 10 22:20:50 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 22:20:59 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 22:21:03 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/moodle ; USER=root ; COMMAND=/usr/bin/vim config.php Sep 10 22:21:03 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 22:21:13 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 22:21:17 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/gte ; USER=root ; COMMAND=/usr/bin/vim config.php Sep 10 22:21:17 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 22:21:30 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 22:24:26 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/gte ; USER=root ; COMMAND=/usr/bin/vim /etc/fstab Sep 10 22:24:26 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 22:24:29 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 22:24:31 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/gte ; USER=root ; COMMAND=/usr/bin/vim /etc/crontab Sep 10 22:24:31 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 22:25:54 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 22:26:04 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/gte ; USER=root ; COMMAND=/etc/init.d/cron restart Sep 10 22:26:04 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 22:26:04 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 22:26:18 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/gte ; USER=root ; COMMAND=/usr/bin/touch /var/log/moodleeccsmcron Sep 10 22:26:18 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 22:26:18 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 22:26:22 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/gte ; USER=root ; COMMAND=/usr/bin/touch /var/log/moodlegtemcron Sep 10 22:26:22 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 22:26:22 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 22:30:01 ip-172-31-5-39 CRON[21292]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 10 22:30:12 ip-172-31-5-39 CRON[21292]: pam_unix(cron:session): session closed for user root Sep 10 22:34:15 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html ; USER=root ; COMMAND=/bin/rm -rf gte_orig/ Sep 10 22:34:15 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 10 22:34:16 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 10 22:34:27 ip-172-31-5-39 sshd[1453]: Received disconnect from 177.103.176.199 port 12905:11: disconnected by user Sep 10 22:34:27 ip-172-31-5-39 sshd[1453]: Disconnected from 177.103.176.199 port 12905 Sep 10 22:34:27 ip-172-31-5-39 sshd[1369]: pam_unix(sshd:session): session closed for user ubuntu Sep 10 22:34:27 ip-172-31-5-39 systemd-logind[1168]: Removed session 1. Sep 10 22:34:27 ip-172-31-5-39 systemd: pam_unix(systemd-user:session): session closed for user ubuntu Sep 10 22:35:01 ip-172-31-5-39 CRON[21327]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 10 22:35:10 ip-172-31-5-39 CRON[21327]: pam_unix(cron:session): session closed for user root Sep 10 22:39:01 ip-172-31-5-39 CRON[21330]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 10 22:39:01 ip-172-31-5-39 CRON[21330]: pam_unix(cron:session): session closed for user root Sep 10 22:40:01 ip-172-31-5-39 CRON[21385]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 10 22:40:10 ip-172-31-5-39 CRON[21385]: pam_unix(cron:session): session closed for user root Sep 10 22:45:01 ip-172-31-5-39 CRON[21388]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 10 22:45:11 ip-172-31-5-39 CRON[21388]: pam_unix(cron:session): session closed for user root Sep 10 22:50:01 ip-172-31-5-39 CRON[21391]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 10 22:50:11 ip-172-31-5-39 CRON[21391]: pam_unix(cron:session): session closed for user root Sep 10 22:55:01 ip-172-31-5-39 CRON[21394]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 10 22:55:09 ip-172-31-5-39 CRON[21394]: pam_unix(cron:session): session closed for user root Sep 10 23:00:01 ip-172-31-5-39 CRON[21398]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 10 23:00:01 ip-172-31-5-39 CRON[21397]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 10 23:00:30 ip-172-31-5-39 CRON[21397]: pam_unix(cron:session): session closed for user root Sep 10 23:01:08 ip-172-31-5-39 CRON[21398]: pam_unix(cron:session): session closed for user root Sep 10 23:05:01 ip-172-31-5-39 CRON[21416]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 10 23:05:10 ip-172-31-5-39 CRON[21416]: pam_unix(cron:session): session closed for user root Sep 10 23:09:01 ip-172-31-5-39 CRON[21419]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 10 23:09:01 ip-172-31-5-39 CRON[21419]: pam_unix(cron:session): session closed for user root Sep 10 23:10:02 ip-172-31-5-39 CRON[21474]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 10 23:10:14 ip-172-31-5-39 CRON[21474]: pam_unix(cron:session): session closed for user root Sep 10 23:15:01 ip-172-31-5-39 CRON[21477]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 10 23:15:11 ip-172-31-5-39 CRON[21477]: pam_unix(cron:session): session closed for user root Sep 10 23:17:01 ip-172-31-5-39 CRON[21480]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 10 23:17:01 ip-172-31-5-39 CRON[21480]: pam_unix(cron:session): session closed for user root Sep 10 23:20:01 ip-172-31-5-39 CRON[21483]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 10 23:20:12 ip-172-31-5-39 CRON[21483]: pam_unix(cron:session): session closed for user root Sep 10 23:25:01 ip-172-31-5-39 CRON[21486]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 10 23:25:14 ip-172-31-5-39 CRON[21486]: pam_unix(cron:session): session closed for user root Sep 10 23:30:01 ip-172-31-5-39 CRON[21489]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 10 23:30:16 ip-172-31-5-39 CRON[21489]: pam_unix(cron:session): session closed for user root Sep 10 23:35:01 ip-172-31-5-39 CRON[21504]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 10 23:35:10 ip-172-31-5-39 CRON[21504]: pam_unix(cron:session): session closed for user root Sep 10 23:39:01 ip-172-31-5-39 CRON[21507]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 10 23:39:01 ip-172-31-5-39 CRON[21507]: pam_unix(cron:session): session closed for user root Sep 10 23:40:01 ip-172-31-5-39 CRON[21562]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 10 23:40:12 ip-172-31-5-39 CRON[21562]: pam_unix(cron:session): session closed for user root Sep 10 23:45:01 ip-172-31-5-39 CRON[21565]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 10 23:45:11 ip-172-31-5-39 CRON[21565]: pam_unix(cron:session): session closed for user root Sep 10 23:50:01 ip-172-31-5-39 CRON[21568]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 10 23:50:13 ip-172-31-5-39 CRON[21568]: pam_unix(cron:session): session closed for user root Sep 10 23:55:01 ip-172-31-5-39 CRON[21571]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 10 23:55:10 ip-172-31-5-39 CRON[21571]: pam_unix(cron:session): session closed for user root Sep 11 00:00:01 ip-172-31-5-39 CRON[21587]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 00:00:01 ip-172-31-5-39 CRON[21586]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 00:00:17 ip-172-31-5-39 CRON[21586]: pam_unix(cron:session): session closed for user root Sep 11 00:00:47 ip-172-31-5-39 CRON[21587]: pam_unix(cron:session): session closed for user root Sep 11 00:05:01 ip-172-31-5-39 CRON[21592]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 00:05:13 ip-172-31-5-39 CRON[21592]: pam_unix(cron:session): session closed for user root Sep 11 00:09:01 ip-172-31-5-39 CRON[21595]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 00:09:01 ip-172-31-5-39 CRON[21595]: pam_unix(cron:session): session closed for user root Sep 11 00:10:01 ip-172-31-5-39 CRON[21650]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 00:10:14 ip-172-31-5-39 CRON[21650]: pam_unix(cron:session): session closed for user root Sep 11 00:15:01 ip-172-31-5-39 CRON[21653]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 00:15:10 ip-172-31-5-39 CRON[21653]: pam_unix(cron:session): session closed for user root Sep 11 00:17:01 ip-172-31-5-39 CRON[21656]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 00:17:01 ip-172-31-5-39 CRON[21656]: pam_unix(cron:session): session closed for user root Sep 11 00:20:01 ip-172-31-5-39 CRON[21659]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 00:20:12 ip-172-31-5-39 CRON[21659]: pam_unix(cron:session): session closed for user root Sep 11 00:25:01 ip-172-31-5-39 CRON[21674]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 00:25:13 ip-172-31-5-39 CRON[21674]: pam_unix(cron:session): session closed for user root Sep 11 00:30:01 ip-172-31-5-39 CRON[21677]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 00:30:15 ip-172-31-5-39 CRON[21677]: pam_unix(cron:session): session closed for user root Sep 11 00:35:01 ip-172-31-5-39 CRON[21680]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 00:35:11 ip-172-31-5-39 CRON[21680]: pam_unix(cron:session): session closed for user root Sep 11 00:39:01 ip-172-31-5-39 CRON[21683]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 00:39:01 ip-172-31-5-39 CRON[21683]: pam_unix(cron:session): session closed for user root Sep 11 00:40:01 ip-172-31-5-39 CRON[21738]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 00:40:12 ip-172-31-5-39 CRON[21738]: pam_unix(cron:session): session closed for user root Sep 11 00:45:01 ip-172-31-5-39 CRON[21741]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 00:45:11 ip-172-31-5-39 CRON[21741]: pam_unix(cron:session): session closed for user root Sep 11 00:50:01 ip-172-31-5-39 CRON[21756]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 00:50:13 ip-172-31-5-39 CRON[21756]: pam_unix(cron:session): session closed for user root Sep 11 00:55:01 ip-172-31-5-39 CRON[21759]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 00:55:10 ip-172-31-5-39 CRON[21759]: pam_unix(cron:session): session closed for user root Sep 11 01:00:01 ip-172-31-5-39 CRON[21763]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 01:00:01 ip-172-31-5-39 CRON[21762]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 01:00:19 ip-172-31-5-39 CRON[21762]: pam_unix(cron:session): session closed for user root Sep 11 01:01:14 ip-172-31-5-39 CRON[21763]: pam_unix(cron:session): session closed for user root Sep 11 01:05:01 ip-172-31-5-39 CRON[21768]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 01:05:13 ip-172-31-5-39 CRON[21768]: pam_unix(cron:session): session closed for user root Sep 11 01:09:01 ip-172-31-5-39 CRON[21771]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 01:09:01 ip-172-31-5-39 CRON[21771]: pam_unix(cron:session): session closed for user root Sep 11 01:10:01 ip-172-31-5-39 CRON[21826]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 01:10:13 ip-172-31-5-39 CRON[21826]: pam_unix(cron:session): session closed for user root Sep 11 01:15:01 ip-172-31-5-39 CRON[21829]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 01:15:12 ip-172-31-5-39 CRON[21829]: pam_unix(cron:session): session closed for user root Sep 11 01:17:01 ip-172-31-5-39 CRON[21844]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 01:17:01 ip-172-31-5-39 CRON[21844]: pam_unix(cron:session): session closed for user root Sep 11 01:20:01 ip-172-31-5-39 CRON[21847]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 01:20:12 ip-172-31-5-39 CRON[21847]: pam_unix(cron:session): session closed for user root Sep 11 01:25:01 ip-172-31-5-39 CRON[21850]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 01:25:13 ip-172-31-5-39 CRON[21850]: pam_unix(cron:session): session closed for user root Sep 11 01:30:01 ip-172-31-5-39 CRON[21853]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 01:30:15 ip-172-31-5-39 CRON[21853]: pam_unix(cron:session): session closed for user root Sep 11 01:35:01 ip-172-31-5-39 CRON[21856]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 01:35:10 ip-172-31-5-39 CRON[21856]: pam_unix(cron:session): session closed for user root Sep 11 01:39:01 ip-172-31-5-39 CRON[21859]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 01:39:02 ip-172-31-5-39 CRON[21859]: pam_unix(cron:session): session closed for user root Sep 11 01:40:01 ip-172-31-5-39 CRON[21926]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 01:40:12 ip-172-31-5-39 CRON[21926]: pam_unix(cron:session): session closed for user root Sep 11 01:45:01 ip-172-31-5-39 CRON[21929]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 01:45:10 ip-172-31-5-39 CRON[21929]: pam_unix(cron:session): session closed for user root Sep 11 01:50:01 ip-172-31-5-39 CRON[21932]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 01:50:13 ip-172-31-5-39 CRON[21932]: pam_unix(cron:session): session closed for user root Sep 11 01:55:01 ip-172-31-5-39 CRON[21935]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 01:55:10 ip-172-31-5-39 CRON[21935]: pam_unix(cron:session): session closed for user root Sep 11 02:00:01 ip-172-31-5-39 CRON[21939]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 02:00:01 ip-172-31-5-39 CRON[21938]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 02:00:22 ip-172-31-5-39 CRON[21938]: pam_unix(cron:session): session closed for user root Sep 11 02:00:32 ip-172-31-5-39 CRON[21939]: pam_unix(cron:session): session closed for user root Sep 11 02:05:01 ip-172-31-5-39 CRON[21956]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 02:05:13 ip-172-31-5-39 CRON[21956]: pam_unix(cron:session): session closed for user root Sep 11 02:09:01 ip-172-31-5-39 CRON[21959]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 02:09:01 ip-172-31-5-39 CRON[21959]: pam_unix(cron:session): session closed for user root Sep 11 02:10:01 ip-172-31-5-39 CRON[22014]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 02:10:13 ip-172-31-5-39 CRON[22014]: pam_unix(cron:session): session closed for user root Sep 11 02:15:01 ip-172-31-5-39 CRON[22017]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 02:15:11 ip-172-31-5-39 CRON[22017]: pam_unix(cron:session): session closed for user root Sep 11 02:17:01 ip-172-31-5-39 CRON[22020]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 02:17:01 ip-172-31-5-39 CRON[22020]: pam_unix(cron:session): session closed for user root Sep 11 02:20:01 ip-172-31-5-39 CRON[22023]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 02:20:12 ip-172-31-5-39 CRON[22023]: pam_unix(cron:session): session closed for user root Sep 11 02:25:01 ip-172-31-5-39 CRON[22026]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 02:25:12 ip-172-31-5-39 CRON[22026]: pam_unix(cron:session): session closed for user root Sep 11 02:30:01 ip-172-31-5-39 CRON[22029]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 02:30:15 ip-172-31-5-39 CRON[22029]: pam_unix(cron:session): session closed for user root Sep 11 02:35:01 ip-172-31-5-39 CRON[22044]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 02:35:11 ip-172-31-5-39 CRON[22044]: pam_unix(cron:session): session closed for user root Sep 11 02:39:01 ip-172-31-5-39 CRON[22047]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 02:39:01 ip-172-31-5-39 CRON[22047]: pam_unix(cron:session): session closed for user root Sep 11 02:40:01 ip-172-31-5-39 CRON[22102]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 02:40:12 ip-172-31-5-39 CRON[22102]: pam_unix(cron:session): session closed for user root Sep 11 02:45:01 ip-172-31-5-39 CRON[22105]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 02:45:11 ip-172-31-5-39 CRON[22105]: pam_unix(cron:session): session closed for user root Sep 11 02:50:01 ip-172-31-5-39 CRON[22108]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 02:50:13 ip-172-31-5-39 CRON[22108]: pam_unix(cron:session): session closed for user root Sep 11 02:55:01 ip-172-31-5-39 CRON[22111]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 02:55:10 ip-172-31-5-39 CRON[22111]: pam_unix(cron:session): session closed for user root Sep 11 03:00:01 ip-172-31-5-39 CRON[22115]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 03:00:01 ip-172-31-5-39 CRON[22114]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 03:00:16 ip-172-31-5-39 CRON[22114]: pam_unix(cron:session): session closed for user root Sep 11 03:01:11 ip-172-31-5-39 CRON[22115]: pam_unix(cron:session): session closed for user root Sep 11 03:05:01 ip-172-31-5-39 CRON[22132]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 03:05:14 ip-172-31-5-39 CRON[22132]: pam_unix(cron:session): session closed for user root Sep 11 03:09:01 ip-172-31-5-39 CRON[22135]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 03:09:01 ip-172-31-5-39 CRON[22135]: pam_unix(cron:session): session closed for user root Sep 11 03:10:01 ip-172-31-5-39 CRON[22190]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 03:10:13 ip-172-31-5-39 CRON[22190]: pam_unix(cron:session): session closed for user root Sep 11 03:15:01 ip-172-31-5-39 CRON[22193]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 03:15:11 ip-172-31-5-39 CRON[22193]: pam_unix(cron:session): session closed for user root Sep 11 03:17:01 ip-172-31-5-39 CRON[22196]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 03:17:01 ip-172-31-5-39 CRON[22196]: pam_unix(cron:session): session closed for user root Sep 11 03:20:01 ip-172-31-5-39 CRON[22199]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 03:20:12 ip-172-31-5-39 CRON[22199]: pam_unix(cron:session): session closed for user root Sep 11 03:25:01 ip-172-31-5-39 CRON[22484]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 03:25:13 ip-172-31-5-39 CRON[22484]: pam_unix(cron:session): session closed for user root Sep 11 03:30:01 ip-172-31-5-39 CRON[22499]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 03:30:15 ip-172-31-5-39 CRON[22499]: pam_unix(cron:session): session closed for user root Sep 11 03:35:01 ip-172-31-5-39 CRON[22502]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 03:35:11 ip-172-31-5-39 CRON[22502]: pam_unix(cron:session): session closed for user root Sep 11 03:39:01 ip-172-31-5-39 CRON[22505]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 03:39:01 ip-172-31-5-39 CRON[22505]: pam_unix(cron:session): session closed for user root Sep 11 03:40:01 ip-172-31-5-39 CRON[22560]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 03:40:11 ip-172-31-5-39 CRON[22560]: pam_unix(cron:session): session closed for user root Sep 11 03:45:01 ip-172-31-5-39 CRON[22563]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 03:45:12 ip-172-31-5-39 CRON[22563]: pam_unix(cron:session): session closed for user root Sep 11 03:50:01 ip-172-31-5-39 CRON[22566]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 03:50:13 ip-172-31-5-39 CRON[22566]: pam_unix(cron:session): session closed for user root Sep 11 03:55:01 ip-172-31-5-39 CRON[22581]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 03:55:10 ip-172-31-5-39 CRON[22581]: pam_unix(cron:session): session closed for user root Sep 11 04:00:01 ip-172-31-5-39 CRON[22584]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 04:00:01 ip-172-31-5-39 CRON[22585]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 04:00:15 ip-172-31-5-39 CRON[22584]: pam_unix(cron:session): session closed for user root Sep 11 04:01:08 ip-172-31-5-39 CRON[22585]: pam_unix(cron:session): session closed for user root Sep 11 04:05:01 ip-172-31-5-39 CRON[22590]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 04:05:14 ip-172-31-5-39 CRON[22590]: pam_unix(cron:session): session closed for user root Sep 11 04:09:01 ip-172-31-5-39 CRON[22593]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 04:09:01 ip-172-31-5-39 CRON[22593]: pam_unix(cron:session): session closed for user root Sep 11 04:10:01 ip-172-31-5-39 CRON[22648]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 04:10:12 ip-172-31-5-39 CRON[22648]: pam_unix(cron:session): session closed for user root Sep 11 04:15:01 ip-172-31-5-39 CRON[22651]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 04:15:11 ip-172-31-5-39 CRON[22651]: pam_unix(cron:session): session closed for user root Sep 11 04:17:01 ip-172-31-5-39 CRON[22654]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 04:17:01 ip-172-31-5-39 CRON[22654]: pam_unix(cron:session): session closed for user root Sep 11 04:20:01 ip-172-31-5-39 CRON[22669]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 04:20:12 ip-172-31-5-39 CRON[22669]: pam_unix(cron:session): session closed for user root Sep 11 04:25:01 ip-172-31-5-39 CRON[22672]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 04:25:13 ip-172-31-5-39 CRON[22672]: pam_unix(cron:session): session closed for user root Sep 11 04:30:01 ip-172-31-5-39 CRON[22675]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 04:30:16 ip-172-31-5-39 CRON[22675]: pam_unix(cron:session): session closed for user root Sep 11 04:35:01 ip-172-31-5-39 CRON[22678]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 04:35:10 ip-172-31-5-39 CRON[22678]: pam_unix(cron:session): session closed for user root Sep 11 04:39:01 ip-172-31-5-39 CRON[22681]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 04:39:01 ip-172-31-5-39 CRON[22681]: pam_unix(cron:session): session closed for user root Sep 11 04:40:01 ip-172-31-5-39 CRON[22736]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 04:40:14 ip-172-31-5-39 CRON[22736]: pam_unix(cron:session): session closed for user root Sep 11 04:45:01 ip-172-31-5-39 CRON[22739]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 04:45:11 ip-172-31-5-39 CRON[22739]: pam_unix(cron:session): session closed for user root Sep 11 04:50:01 ip-172-31-5-39 CRON[22754]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 04:50:12 ip-172-31-5-39 CRON[22754]: pam_unix(cron:session): session closed for user root Sep 11 04:55:01 ip-172-31-5-39 CRON[22757]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 04:55:11 ip-172-31-5-39 CRON[22757]: pam_unix(cron:session): session closed for user root Sep 11 05:00:01 ip-172-31-5-39 CRON[22761]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 05:00:01 ip-172-31-5-39 CRON[22760]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 05:00:15 ip-172-31-5-39 CRON[22760]: pam_unix(cron:session): session closed for user root Sep 11 05:01:11 ip-172-31-5-39 CRON[22761]: pam_unix(cron:session): session closed for user root Sep 11 05:05:01 ip-172-31-5-39 CRON[22766]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 05:05:16 ip-172-31-5-39 CRON[22766]: pam_unix(cron:session): session closed for user root Sep 11 05:09:01 ip-172-31-5-39 CRON[22769]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 05:09:01 ip-172-31-5-39 CRON[22769]: pam_unix(cron:session): session closed for user root Sep 11 05:10:01 ip-172-31-5-39 CRON[22824]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 05:10:14 ip-172-31-5-39 CRON[22824]: pam_unix(cron:session): session closed for user root Sep 11 05:15:01 ip-172-31-5-39 CRON[22839]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 05:15:10 ip-172-31-5-39 CRON[22839]: pam_unix(cron:session): session closed for user root Sep 11 05:17:01 ip-172-31-5-39 CRON[22842]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 05:17:01 ip-172-31-5-39 CRON[22842]: pam_unix(cron:session): session closed for user root Sep 11 05:20:01 ip-172-31-5-39 CRON[22845]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 05:20:12 ip-172-31-5-39 CRON[22845]: pam_unix(cron:session): session closed for user root Sep 11 05:25:01 ip-172-31-5-39 CRON[22848]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 05:25:13 ip-172-31-5-39 CRON[22848]: pam_unix(cron:session): session closed for user root Sep 11 05:30:01 ip-172-31-5-39 CRON[22851]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 05:30:15 ip-172-31-5-39 CRON[22851]: pam_unix(cron:session): session closed for user root Sep 11 05:35:01 ip-172-31-5-39 CRON[22854]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 05:35:10 ip-172-31-5-39 CRON[22854]: pam_unix(cron:session): session closed for user root Sep 11 05:39:01 ip-172-31-5-39 CRON[22869]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 05:39:01 ip-172-31-5-39 CRON[22869]: pam_unix(cron:session): session closed for user root Sep 11 05:40:01 ip-172-31-5-39 CRON[22924]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 05:40:12 ip-172-31-5-39 CRON[22924]: pam_unix(cron:session): session closed for user root Sep 11 05:45:01 ip-172-31-5-39 CRON[22927]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 05:45:11 ip-172-31-5-39 CRON[22927]: pam_unix(cron:session): session closed for user root Sep 11 05:50:01 ip-172-31-5-39 CRON[22930]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 05:50:12 ip-172-31-5-39 CRON[22930]: pam_unix(cron:session): session closed for user root Sep 11 05:55:01 ip-172-31-5-39 CRON[22933]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 05:55:10 ip-172-31-5-39 CRON[22933]: pam_unix(cron:session): session closed for user root Sep 11 06:00:01 ip-172-31-5-39 CRON[22937]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 06:00:01 ip-172-31-5-39 CRON[22936]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 06:00:21 ip-172-31-5-39 CRON[22936]: pam_unix(cron:session): session closed for user root Sep 11 06:00:33 ip-172-31-5-39 CRON[22937]: pam_unix(cron:session): session closed for user root Sep 11 06:05:01 ip-172-31-5-39 CRON[22942]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 06:05:13 ip-172-31-5-39 CRON[22942]: pam_unix(cron:session): session closed for user root Sep 11 06:09:01 ip-172-31-5-39 CRON[22957]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 06:09:01 ip-172-31-5-39 CRON[22957]: pam_unix(cron:session): session closed for user root Sep 11 06:10:01 ip-172-31-5-39 CRON[23012]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 06:10:13 ip-172-31-5-39 CRON[23012]: pam_unix(cron:session): session closed for user root Sep 11 06:15:01 ip-172-31-5-39 CRON[23015]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 06:15:11 ip-172-31-5-39 CRON[23015]: pam_unix(cron:session): session closed for user root Sep 11 06:17:01 ip-172-31-5-39 CRON[23018]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 06:17:01 ip-172-31-5-39 CRON[23018]: pam_unix(cron:session): session closed for user root Sep 11 06:20:01 ip-172-31-5-39 CRON[23021]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 06:20:13 ip-172-31-5-39 CRON[23021]: pam_unix(cron:session): session closed for user root Sep 11 06:25:01 ip-172-31-5-39 CRON[23025]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 06:25:01 ip-172-31-5-39 CRON[23024]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 06:25:08 ip-172-31-5-39 CRON[23025]: pam_unix(cron:session): session closed for user root Sep 11 06:25:12 ip-172-31-5-39 CRON[23024]: pam_unix(cron:session): session closed for user root Sep 11 06:30:01 ip-172-31-5-39 CRON[23223]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 06:30:16 ip-172-31-5-39 CRON[23223]: pam_unix(cron:session): session closed for user root Sep 11 06:35:01 ip-172-31-5-39 CRON[23226]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 06:35:10 ip-172-31-5-39 CRON[23226]: pam_unix(cron:session): session closed for user root Sep 11 06:39:01 ip-172-31-5-39 CRON[23241]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 06:39:01 ip-172-31-5-39 CRON[23241]: pam_unix(cron:session): session closed for user root Sep 11 06:40:01 ip-172-31-5-39 CRON[23296]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 06:40:11 ip-172-31-5-39 CRON[23296]: pam_unix(cron:session): session closed for user root Sep 11 06:45:01 ip-172-31-5-39 CRON[23299]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 06:45:11 ip-172-31-5-39 CRON[23299]: pam_unix(cron:session): session closed for user root Sep 11 06:50:01 ip-172-31-5-39 CRON[23367]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 06:50:12 ip-172-31-5-39 CRON[23367]: pam_unix(cron:session): session closed for user root Sep 11 06:55:01 ip-172-31-5-39 CRON[23370]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 06:55:10 ip-172-31-5-39 CRON[23370]: pam_unix(cron:session): session closed for user root Sep 11 07:00:01 ip-172-31-5-39 CRON[23386]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 07:00:01 ip-172-31-5-39 CRON[23385]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 07:00:17 ip-172-31-5-39 CRON[23385]: pam_unix(cron:session): session closed for user root Sep 11 07:01:11 ip-172-31-5-39 CRON[23386]: pam_unix(cron:session): session closed for user root Sep 11 07:05:01 ip-172-31-5-39 CRON[23391]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 07:05:13 ip-172-31-5-39 CRON[23391]: pam_unix(cron:session): session closed for user root Sep 11 07:09:01 ip-172-31-5-39 CRON[23394]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 07:09:01 ip-172-31-5-39 CRON[23394]: pam_unix(cron:session): session closed for user root Sep 11 07:10:01 ip-172-31-5-39 CRON[23449]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 07:10:14 ip-172-31-5-39 CRON[23449]: pam_unix(cron:session): session closed for user root Sep 11 07:15:01 ip-172-31-5-39 CRON[23452]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 07:15:12 ip-172-31-5-39 CRON[23452]: pam_unix(cron:session): session closed for user root Sep 11 07:17:01 ip-172-31-5-39 CRON[23455]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 07:17:01 ip-172-31-5-39 CRON[23455]: pam_unix(cron:session): session closed for user root Sep 11 07:20:01 ip-172-31-5-39 CRON[23458]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 07:20:13 ip-172-31-5-39 CRON[23458]: pam_unix(cron:session): session closed for user root Sep 11 07:25:01 ip-172-31-5-39 CRON[23474]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 07:25:13 ip-172-31-5-39 CRON[23474]: pam_unix(cron:session): session closed for user root Sep 11 07:30:01 ip-172-31-5-39 CRON[23477]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 07:30:15 ip-172-31-5-39 CRON[23477]: pam_unix(cron:session): session closed for user root Sep 11 07:35:01 ip-172-31-5-39 CRON[23480]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 07:35:11 ip-172-31-5-39 CRON[23480]: pam_unix(cron:session): session closed for user root Sep 11 07:39:01 ip-172-31-5-39 CRON[23483]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 07:39:01 ip-172-31-5-39 CRON[23483]: pam_unix(cron:session): session closed for user root Sep 11 07:40:01 ip-172-31-5-39 CRON[23538]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 07:40:12 ip-172-31-5-39 CRON[23538]: pam_unix(cron:session): session closed for user root Sep 11 07:45:01 ip-172-31-5-39 CRON[23541]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 07:45:10 ip-172-31-5-39 CRON[23541]: pam_unix(cron:session): session closed for user root Sep 11 07:50:01 ip-172-31-5-39 CRON[23556]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 07:50:13 ip-172-31-5-39 CRON[23556]: pam_unix(cron:session): session closed for user root Sep 11 07:55:01 ip-172-31-5-39 CRON[23559]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 07:55:10 ip-172-31-5-39 CRON[23559]: pam_unix(cron:session): session closed for user root Sep 11 08:00:01 ip-172-31-5-39 CRON[23563]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 08:00:01 ip-172-31-5-39 CRON[23562]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 08:00:21 ip-172-31-5-39 CRON[23562]: pam_unix(cron:session): session closed for user root Sep 11 08:00:31 ip-172-31-5-39 CRON[23563]: pam_unix(cron:session): session closed for user root Sep 11 08:05:01 ip-172-31-5-39 CRON[23568]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 08:05:13 ip-172-31-5-39 CRON[23568]: pam_unix(cron:session): session closed for user root Sep 11 08:09:01 ip-172-31-5-39 CRON[23571]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 08:09:01 ip-172-31-5-39 CRON[23571]: pam_unix(cron:session): session closed for user root Sep 11 08:10:01 ip-172-31-5-39 CRON[23626]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 08:10:13 ip-172-31-5-39 CRON[23626]: pam_unix(cron:session): session closed for user root Sep 11 08:15:01 ip-172-31-5-39 CRON[23629]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 08:15:13 ip-172-31-5-39 CRON[23629]: pam_unix(cron:session): session closed for user root Sep 11 08:17:01 ip-172-31-5-39 CRON[23632]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 08:17:01 ip-172-31-5-39 CRON[23632]: pam_unix(cron:session): session closed for user root Sep 11 08:20:01 ip-172-31-5-39 CRON[23647]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 08:20:13 ip-172-31-5-39 CRON[23647]: pam_unix(cron:session): session closed for user root Sep 11 08:25:01 ip-172-31-5-39 CRON[23650]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 08:25:13 ip-172-31-5-39 CRON[23650]: pam_unix(cron:session): session closed for user root Sep 11 08:30:01 ip-172-31-5-39 CRON[23653]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 08:30:17 ip-172-31-5-39 CRON[23653]: pam_unix(cron:session): session closed for user root Sep 11 08:35:01 ip-172-31-5-39 CRON[23656]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 08:35:12 ip-172-31-5-39 CRON[23656]: pam_unix(cron:session): session closed for user root Sep 11 08:39:01 ip-172-31-5-39 CRON[23659]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 08:39:01 ip-172-31-5-39 CRON[23659]: pam_unix(cron:session): session closed for user root Sep 11 08:40:01 ip-172-31-5-39 CRON[23714]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 08:40:14 ip-172-31-5-39 CRON[23714]: pam_unix(cron:session): session closed for user root Sep 11 08:45:01 ip-172-31-5-39 CRON[23729]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 08:45:12 ip-172-31-5-39 CRON[23729]: pam_unix(cron:session): session closed for user root Sep 11 08:50:01 ip-172-31-5-39 CRON[23732]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 08:50:14 ip-172-31-5-39 CRON[23732]: pam_unix(cron:session): session closed for user root Sep 11 08:55:01 ip-172-31-5-39 CRON[23735]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 08:55:11 ip-172-31-5-39 CRON[23735]: pam_unix(cron:session): session closed for user root Sep 11 09:00:01 ip-172-31-5-39 CRON[23739]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 09:00:01 ip-172-31-5-39 CRON[23738]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 09:00:18 ip-172-31-5-39 CRON[23738]: pam_unix(cron:session): session closed for user root Sep 11 09:01:13 ip-172-31-5-39 CRON[23739]: pam_unix(cron:session): session closed for user root Sep 11 09:05:01 ip-172-31-5-39 CRON[23744]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 09:05:15 ip-172-31-5-39 CRON[23744]: pam_unix(cron:session): session closed for user root Sep 11 09:09:01 ip-172-31-5-39 CRON[23747]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 09:09:01 ip-172-31-5-39 CRON[23747]: pam_unix(cron:session): session closed for user root Sep 11 09:10:01 ip-172-31-5-39 CRON[23802]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 09:10:14 ip-172-31-5-39 CRON[23802]: pam_unix(cron:session): session closed for user root Sep 11 09:15:01 ip-172-31-5-39 CRON[23817]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 09:15:13 ip-172-31-5-39 CRON[23817]: pam_unix(cron:session): session closed for user root Sep 11 09:17:01 ip-172-31-5-39 CRON[23820]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 09:17:01 ip-172-31-5-39 CRON[23820]: pam_unix(cron:session): session closed for user root Sep 11 09:20:01 ip-172-31-5-39 CRON[23823]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 09:20:12 ip-172-31-5-39 CRON[23823]: pam_unix(cron:session): session closed for user root Sep 11 09:25:01 ip-172-31-5-39 CRON[23826]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 09:25:14 ip-172-31-5-39 CRON[23826]: pam_unix(cron:session): session closed for user root Sep 11 09:30:01 ip-172-31-5-39 CRON[23829]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 09:30:17 ip-172-31-5-39 CRON[23829]: pam_unix(cron:session): session closed for user root Sep 11 09:35:01 ip-172-31-5-39 CRON[23832]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 09:35:12 ip-172-31-5-39 CRON[23832]: pam_unix(cron:session): session closed for user root Sep 11 09:39:01 ip-172-31-5-39 CRON[23847]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 09:39:01 ip-172-31-5-39 CRON[23847]: pam_unix(cron:session): session closed for user root Sep 11 09:40:01 ip-172-31-5-39 CRON[23902]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 09:40:15 ip-172-31-5-39 CRON[23902]: pam_unix(cron:session): session closed for user root Sep 11 09:45:01 ip-172-31-5-39 CRON[23905]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 09:45:12 ip-172-31-5-39 CRON[23905]: pam_unix(cron:session): session closed for user root Sep 11 09:50:01 ip-172-31-5-39 CRON[23908]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 09:50:14 ip-172-31-5-39 CRON[23908]: pam_unix(cron:session): session closed for user root Sep 11 09:55:01 ip-172-31-5-39 CRON[23911]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 09:55:13 ip-172-31-5-39 CRON[23911]: pam_unix(cron:session): session closed for user root Sep 11 10:00:01 ip-172-31-5-39 CRON[23915]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 10:00:01 ip-172-31-5-39 CRON[23914]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 10:00:23 ip-172-31-5-39 CRON[23914]: pam_unix(cron:session): session closed for user root Sep 11 10:00:32 ip-172-31-5-39 CRON[23915]: pam_unix(cron:session): session closed for user root Sep 11 10:05:01 ip-172-31-5-39 CRON[23932]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 10:05:13 ip-172-31-5-39 CRON[23932]: pam_unix(cron:session): session closed for user root Sep 11 10:09:01 ip-172-31-5-39 CRON[23935]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 10:09:01 ip-172-31-5-39 CRON[23935]: pam_unix(cron:session): session closed for user root Sep 11 10:10:01 ip-172-31-5-39 CRON[23990]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 10:10:13 ip-172-31-5-39 CRON[23990]: pam_unix(cron:session): session closed for user root Sep 11 10:15:01 ip-172-31-5-39 CRON[23993]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 10:15:13 ip-172-31-5-39 CRON[23993]: pam_unix(cron:session): session closed for user root Sep 11 10:17:01 ip-172-31-5-39 CRON[23996]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 10:17:01 ip-172-31-5-39 CRON[23996]: pam_unix(cron:session): session closed for user root Sep 11 10:20:01 ip-172-31-5-39 CRON[23999]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 10:20:12 ip-172-31-5-39 CRON[23999]: pam_unix(cron:session): session closed for user root Sep 11 10:25:01 ip-172-31-5-39 CRON[24002]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 10:25:14 ip-172-31-5-39 CRON[24002]: pam_unix(cron:session): session closed for user root Sep 11 10:30:01 ip-172-31-5-39 CRON[24017]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 10:30:17 ip-172-31-5-39 CRON[24017]: pam_unix(cron:session): session closed for user root Sep 11 10:35:01 ip-172-31-5-39 CRON[24020]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 10:35:11 ip-172-31-5-39 CRON[24020]: pam_unix(cron:session): session closed for user root Sep 11 10:39:01 ip-172-31-5-39 CRON[24023]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 10:39:01 ip-172-31-5-39 CRON[24023]: pam_unix(cron:session): session closed for user root Sep 11 10:40:01 ip-172-31-5-39 CRON[24078]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 10:40:13 ip-172-31-5-39 CRON[24078]: pam_unix(cron:session): session closed for user root Sep 11 10:45:01 ip-172-31-5-39 CRON[24081]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 10:45:13 ip-172-31-5-39 CRON[24081]: pam_unix(cron:session): session closed for user root Sep 11 10:50:01 ip-172-31-5-39 CRON[24084]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 10:50:13 ip-172-31-5-39 CRON[24084]: pam_unix(cron:session): session closed for user root Sep 11 10:55:01 ip-172-31-5-39 CRON[24099]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 10:55:11 ip-172-31-5-39 CRON[24099]: pam_unix(cron:session): session closed for user root Sep 11 11:00:01 ip-172-31-5-39 CRON[24103]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 11:00:01 ip-172-31-5-39 CRON[24102]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 11:00:18 ip-172-31-5-39 CRON[24102]: pam_unix(cron:session): session closed for user root Sep 11 11:01:13 ip-172-31-5-39 CRON[24103]: pam_unix(cron:session): session closed for user root Sep 11 11:05:01 ip-172-31-5-39 CRON[24108]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 11:05:14 ip-172-31-5-39 CRON[24108]: pam_unix(cron:session): session closed for user root Sep 11 11:09:01 ip-172-31-5-39 CRON[24111]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 11:09:01 ip-172-31-5-39 CRON[24111]: pam_unix(cron:session): session closed for user root Sep 11 11:10:01 ip-172-31-5-39 CRON[24166]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 11:10:14 ip-172-31-5-39 CRON[24166]: pam_unix(cron:session): session closed for user root Sep 11 11:15:01 ip-172-31-5-39 CRON[24169]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 11:15:13 ip-172-31-5-39 CRON[24169]: pam_unix(cron:session): session closed for user root Sep 11 11:17:01 ip-172-31-5-39 CRON[24172]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 11:17:01 ip-172-31-5-39 CRON[24172]: pam_unix(cron:session): session closed for user root Sep 11 11:20:01 ip-172-31-5-39 CRON[24175]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 11:20:13 ip-172-31-5-39 CRON[24175]: pam_unix(cron:session): session closed for user root Sep 11 11:23:41 ip-172-31-5-39 sshd[24194]: Accepted publickey for ubuntu from 177.103.176.199 port 22954 ssh2: RSA SHA256:3/91sXvgrhpGwm6BHY9O8YSerXhFGNxSkZn2QEniijY Sep 11 11:23:41 ip-172-31-5-39 sshd[24194]: pam_unix(sshd:session): session opened for user ubuntu by (uid=0) Sep 11 11:23:41 ip-172-31-5-39 systemd: pam_unix(systemd-user:session): session opened for user ubuntu by (uid=0) Sep 11 11:23:41 ip-172-31-5-39 systemd-logind[1168]: New session 242 of user ubuntu. Sep 11 11:23:44 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/home/ubuntu ; USER=root ; COMMAND=/usr/bin/vim /etc/apache2/sites-enabled/000-default.conf Sep 11 11:23:44 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 11 11:24:18 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 11 11:24:20 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/home/ubuntu ; USER=root ; COMMAND=/etc/init.d/cron restart Sep 11 11:24:20 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 11 11:24:20 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 11 11:24:31 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/home/ubuntu ; USER=root ; COMMAND=/etc/init.d/apache2 restart Sep 11 11:24:31 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 11 11:24:33 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 11 11:24:34 ip-172-31-5-39 sshd[24256]: Received disconnect from 177.103.176.199 port 22954:11: disconnected by user Sep 11 11:24:34 ip-172-31-5-39 sshd[24256]: Disconnected from 177.103.176.199 port 22954 Sep 11 11:24:34 ip-172-31-5-39 sshd[24194]: pam_unix(sshd:session): session closed for user ubuntu Sep 11 11:24:34 ip-172-31-5-39 systemd-logind[1168]: Removed session 242. Sep 11 11:25:01 ip-172-31-5-39 CRON[24409]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 11:25:14 ip-172-31-5-39 CRON[24409]: pam_unix(cron:session): session closed for user root Sep 11 11:30:01 ip-172-31-5-39 CRON[24412]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 11:30:17 ip-172-31-5-39 CRON[24412]: pam_unix(cron:session): session closed for user root Sep 11 11:34:16 ip-172-31-5-39 sshd[24415]: Accepted publickey for ubuntu from 177.103.176.199 port 15007 ssh2: RSA SHA256:3/91sXvgrhpGwm6BHY9O8YSerXhFGNxSkZn2QEniijY Sep 11 11:34:16 ip-172-31-5-39 sshd[24415]: pam_unix(sshd:session): session opened for user ubuntu by (uid=0) Sep 11 11:34:16 ip-172-31-5-39 systemd: pam_unix(systemd-user:session): session opened for user ubuntu by (uid=0) Sep 11 11:34:16 ip-172-31-5-39 systemd-logind[1168]: New session 245 of user ubuntu. Sep 11 11:35:01 ip-172-31-5-39 CRON[24529]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 11:35:11 ip-172-31-5-39 CRON[24529]: pam_unix(cron:session): session closed for user root Sep 11 11:35:47 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/etc/apache2/mods-enabled ; USER=root ; COMMAND=/usr/bin/vim deflate.conf Sep 11 11:35:47 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 11 11:36:13 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 11 11:36:47 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/etc/apache2/mods-enabled ; USER=root ; COMMAND=/usr/bin/vim mpm_prefork.conf Sep 11 11:36:47 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 11 11:37:23 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 11 11:37:24 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/etc/apache2/mods-enabled ; USER=root ; COMMAND=/etc/init.d/apache2 restart Sep 11 11:37:24 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 11 11:37:27 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 11 11:38:56 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/etc/apache2/mods-enabled ; USER=root ; COMMAND=/usr/bin/vim access_compat.load Sep 11 11:38:56 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 11 11:38:59 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 11 11:39:01 ip-172-31-5-39 CRON[24678]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 11:39:01 ip-172-31-5-39 CRON[24678]: pam_unix(cron:session): session closed for user root Sep 11 11:39:08 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/etc/apache2 ; USER=root ; COMMAND=/usr/bin/vim apache2.conf Sep 11 11:39:08 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 11 11:40:01 ip-172-31-5-39 CRON[24753]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 11:40:21 ip-172-31-5-39 CRON[24753]: pam_unix(cron:session): session closed for user root Sep 11 11:40:46 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 11 11:40:49 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/etc/apache2 ; USER=root ; COMMAND=/usr/bin/vim ports.conf Sep 11 11:40:49 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 11 11:41:00 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 11 11:41:02 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/etc/apache2 ; USER=root ; COMMAND=/etc/init.d/apache2 restart Sep 11 11:41:02 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 11 11:41:04 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 11 11:42:44 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/etc/apache2 ; USER=root ; COMMAND=/usr/bin/vim apache2.conf Sep 11 11:42:44 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 11 11:43:25 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 11 11:43:31 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/etc/apache2 ; USER=root ; COMMAND=/usr/bin/vim mods-enabled/deflate.conf Sep 11 11:43:31 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 11 11:43:38 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 11 11:43:41 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/etc/apache2 ; USER=root ; COMMAND=/etc/init.d/apache2 restart Sep 11 11:43:41 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 11 11:43:43 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 11 11:44:43 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/etc/apache2/mods-enabled ; USER=root ; COMMAND=/usr/bin/vim deflate.conf Sep 11 11:44:43 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 11 11:45:01 ip-172-31-5-39 CRON[25043]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 11:45:12 ip-172-31-5-39 CRON[25043]: pam_unix(cron:session): session closed for user root Sep 11 11:45:59 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 11 11:46:03 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/etc/apache2/mods-enabled ; USER=root ; COMMAND=/usr/bin/vim ../apache2.conf Sep 11 11:46:03 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 11 11:47:20 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 11 11:47:28 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/etc/apache2/mods-enabled ; USER=root ; COMMAND=/usr/bin/vim ../sites-enabled/000-default.conf Sep 11 11:47:28 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 11 11:47:55 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 11 11:47:56 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/etc/apache2/mods-enabled ; USER=root ; COMMAND=/etc/init.d/apache2 restart Sep 11 11:47:56 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 11 11:47:59 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 11 11:48:07 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/etc/apache2/mods-enabled ; USER=root ; COMMAND=/usr/bin/vim ../apache2.conf Sep 11 11:48:07 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 11 11:49:49 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 11 11:49:50 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/etc/apache2/mods-enabled ; USER=root ; COMMAND=/etc/init.d/apache2 restart Sep 11 11:49:50 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 11 11:49:50 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 11 11:50:01 ip-172-31-5-39 CRON[25260]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 11:50:16 ip-172-31-5-39 CRON[25260]: pam_unix(cron:session): session closed for user root Sep 11 11:50:20 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/etc/apache2/mods-enabled ; USER=root ; COMMAND=/usr/bin/vim ../apache2.conf Sep 11 11:50:20 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 11 11:50:42 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 11 11:51:09 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/etc/apache2/mods-enabled ; USER=root ; COMMAND=/usr/bin/vim ../apache2.conf Sep 11 11:51:09 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 11 11:51:25 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 11 11:51:32 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/etc/apache2/mods-enabled ; USER=root ; COMMAND=/etc/init.d/apache2 restart Sep 11 11:51:32 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 11 11:51:32 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 11 11:51:40 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/etc/apache2/mods-enabled ; USER=root ; COMMAND=/usr/bin/vim ../apache2.conf Sep 11 11:51:40 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 11 11:52:54 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 11 11:52:55 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/etc/apache2/mods-enabled ; USER=root ; COMMAND=/etc/init.d/apache2 restart Sep 11 11:52:55 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 11 11:52:56 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 11 11:55:01 ip-172-31-5-39 CRON[25382]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 11:55:11 ip-172-31-5-39 CRON[25382]: pam_unix(cron:session): session closed for user root Sep 11 12:00:01 ip-172-31-5-39 CRON[25386]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 12:00:01 ip-172-31-5-39 CRON[25385]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 12:00:24 ip-172-31-5-39 CRON[25385]: pam_unix(cron:session): session closed for user root Sep 11 12:00:33 ip-172-31-5-39 CRON[25386]: pam_unix(cron:session): session closed for user root Sep 11 12:05:01 ip-172-31-5-39 CRON[25391]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 12:05:13 ip-172-31-5-39 CRON[25391]: pam_unix(cron:session): session closed for user root Sep 11 12:09:01 ip-172-31-5-39 CRON[25394]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 12:09:02 ip-172-31-5-39 CRON[25394]: pam_unix(cron:session): session closed for user root Sep 11 12:10:01 ip-172-31-5-39 CRON[25449]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 12:10:13 ip-172-31-5-39 CRON[25449]: pam_unix(cron:session): session closed for user root Sep 11 12:15:01 ip-172-31-5-39 CRON[25464]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 12:15:12 ip-172-31-5-39 CRON[25464]: pam_unix(cron:session): session closed for user root Sep 11 12:17:01 ip-172-31-5-39 CRON[25467]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 12:17:01 ip-172-31-5-39 CRON[25467]: pam_unix(cron:session): session closed for user root Sep 11 12:20:01 ip-172-31-5-39 CRON[25470]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 12:20:13 ip-172-31-5-39 CRON[25470]: pam_unix(cron:session): session closed for user root Sep 11 12:25:01 ip-172-31-5-39 CRON[25473]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 12:25:15 ip-172-31-5-39 CRON[25473]: pam_unix(cron:session): session closed for user root Sep 11 12:30:01 ip-172-31-5-39 CRON[25476]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 12:30:17 ip-172-31-5-39 CRON[25476]: pam_unix(cron:session): session closed for user root Sep 11 12:35:01 ip-172-31-5-39 CRON[25479]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 12:35:11 ip-172-31-5-39 CRON[25479]: pam_unix(cron:session): session closed for user root Sep 11 12:39:01 ip-172-31-5-39 CRON[25488]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 12:39:01 ip-172-31-5-39 CRON[25488]: pam_unix(cron:session): session closed for user root Sep 11 12:40:01 ip-172-31-5-39 CRON[25543]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 12:40:13 ip-172-31-5-39 CRON[25543]: pam_unix(cron:session): session closed for user root Sep 11 12:45:01 ip-172-31-5-39 CRON[25558]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 12:45:12 ip-172-31-5-39 CRON[25558]: pam_unix(cron:session): session closed for user root Sep 11 12:50:01 ip-172-31-5-39 CRON[25561]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 12:50:14 ip-172-31-5-39 CRON[25561]: pam_unix(cron:session): session closed for user root Sep 11 12:55:01 ip-172-31-5-39 CRON[25564]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 12:55:10 ip-172-31-5-39 CRON[25564]: pam_unix(cron:session): session closed for user root Sep 11 13:00:01 ip-172-31-5-39 CRON[25568]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 13:00:01 ip-172-31-5-39 CRON[25567]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 13:00:19 ip-172-31-5-39 CRON[25567]: pam_unix(cron:session): session closed for user root Sep 11 13:05:01 ip-172-31-5-39 CRON[25587]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 13:05:14 ip-172-31-5-39 CRON[25587]: pam_unix(cron:session): session closed for user root Sep 11 13:09:01 ip-172-31-5-39 CRON[25590]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 13:09:01 ip-172-31-5-39 CRON[25590]: pam_unix(cron:session): session closed for user root Sep 11 13:10:01 ip-172-31-5-39 CRON[25645]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 13:10:15 ip-172-31-5-39 CRON[25645]: pam_unix(cron:session): session closed for user root Sep 11 13:12:56 ip-172-31-5-39 CRON[25568]: pam_unix(cron:session): session closed for user root Sep 11 13:15:01 ip-172-31-5-39 CRON[25651]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 13:15:14 ip-172-31-5-39 CRON[25651]: pam_unix(cron:session): session closed for user root Sep 11 13:17:01 ip-172-31-5-39 CRON[25654]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 13:17:01 ip-172-31-5-39 CRON[25654]: pam_unix(cron:session): session closed for user root Sep 11 13:20:01 ip-172-31-5-39 CRON[25657]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 13:20:13 ip-172-31-5-39 CRON[25657]: pam_unix(cron:session): session closed for user root Sep 11 13:20:55 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/bkp/eccsm ; USER=root ; COMMAND=/bin/cp local_mailtest_moodle35_2018052100.zip ../../eccsm/local/ Sep 11 13:20:55 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 11 13:20:55 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 11 13:21:05 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/eccsm/local ; USER=root ; COMMAND=/usr/bin/unzip local_mailtest_moodle35_2018052100.zip Sep 11 13:21:05 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 11 13:21:05 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 11 13:21:10 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/eccsm/local ; USER=root ; COMMAND=/bin/rm -rf local_mailtest_moodle35_2018052100.zip Sep 11 13:21:10 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 11 13:21:10 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 11 13:25:01 ip-172-31-5-39 CRON[25692]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 13:25:14 ip-172-31-5-39 CRON[25692]: pam_unix(cron:session): session closed for user root Sep 11 13:30:01 ip-172-31-5-39 CRON[25709]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 13:30:18 ip-172-31-5-39 CRON[25709]: pam_unix(cron:session): session closed for user root Sep 11 13:33:49 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/eccsm/theme ; USER=root ; COMMAND=/bin/tar -cjf theme.tar.gz ecc ecc2 ecc2_sm Sep 11 13:33:49 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 11 13:33:50 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 11 13:33:59 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/eccsm/theme ; USER=root ; COMMAND=/bin/mv theme.tar.gz /home/ubuntu/ Sep 11 13:33:59 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 11 13:33:59 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 11 13:34:09 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/home/ubuntu ; USER=root ; COMMAND=/bin/chown www-data:www-data theme.tar.gz Sep 11 13:34:09 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 11 13:34:09 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 11 13:34:34 ip-172-31-5-39 sshd[25747]: Accepted publickey for ubuntu from 177.103.176.199 port 5827 ssh2: RSA SHA256:3/91sXvgrhpGwm6BHY9O8YSerXhFGNxSkZn2QEniijY Sep 11 13:34:34 ip-172-31-5-39 sshd[25747]: pam_unix(sshd:session): session opened for user ubuntu by (uid=0) Sep 11 13:34:34 ip-172-31-5-39 systemd-logind[1168]: New session 278 of user ubuntu. Sep 11 13:34:36 ip-172-31-5-39 sshd[25801]: Received disconnect from 177.103.176.199 port 5827:11: disconnected by user Sep 11 13:34:36 ip-172-31-5-39 sshd[25801]: Disconnected from 177.103.176.199 port 5827 Sep 11 13:34:36 ip-172-31-5-39 sshd[25747]: pam_unix(sshd:session): session closed for user ubuntu Sep 11 13:34:36 ip-172-31-5-39 systemd-logind[1168]: Removed session 278. Sep 11 13:34:44 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/home/ubuntu ; USER=root ; COMMAND=/bin/rm -rf theme.tar.gz Sep 11 13:34:44 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 11 13:34:44 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 11 13:35:01 ip-172-31-5-39 CRON[25816]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 13:35:11 ip-172-31-5-39 CRON[25816]: pam_unix(cron:session): session closed for user root Sep 11 13:38:53 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/etc/logrotate.d ; USER=root ; COMMAND=/usr/bin/vim apache2 Sep 11 13:38:53 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 11 13:39:00 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 11 13:39:01 ip-172-31-5-39 CRON[25840]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 13:39:01 ip-172-31-5-39 CRON[25840]: pam_unix(cron:session): session closed for user root Sep 11 13:39:16 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/etc/logrotate.d ; USER=root ; COMMAND=/usr/bin/vim apache2 Sep 11 13:39:16 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 11 13:39:20 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 11 13:39:35 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/etc/logrotate.d ; USER=root ; COMMAND=/usr/bin/vim ../sites-enabled/000-default.conf Sep 11 13:39:35 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 11 13:39:37 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 11 13:39:50 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/etc/logrotate.d ; USER=root ; COMMAND=/usr/bin/vim /etc/apache2/sites-enabled/000-default.conf Sep 11 13:39:50 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 11 13:40:01 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 11 13:40:01 ip-172-31-5-39 CRON[25962]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 13:40:03 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/etc/logrotate.d ; USER=root ; COMMAND=/etc/init.d/apache2 restart Sep 11 13:40:03 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 11 13:40:05 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 11 13:40:13 ip-172-31-5-39 CRON[25962]: pam_unix(cron:session): session closed for user root Sep 11 13:40:51 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/etc/logrotate.d ; USER=root ; COMMAND=/usr/bin/vim moodlecron Sep 11 13:40:51 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 11 13:41:23 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 11 13:41:48 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/etc/logrotate.d ; USER=root ; COMMAND=/usr/sbin/logrotate -f moodlecron Sep 11 13:41:48 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 11 13:41:48 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 11 13:42:34 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/etc/logrotate.d ; USER=root ; COMMAND=/bin/su Sep 11 13:42:34 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 11 13:42:34 ip-172-31-5-39 su[26089]: Successful su for root by root Sep 11 13:42:34 ip-172-31-5-39 su[26089]: + /dev/pts/0 root:root Sep 11 13:42:34 ip-172-31-5-39 su[26089]: pam_unix(su:session): session opened for user root by ubuntu(uid=0) Sep 11 13:42:34 ip-172-31-5-39 su[26089]: pam_systemd(su:session): Cannot create session: Already running in a session Sep 11 13:44:26 ip-172-31-5-39 su[26089]: pam_unix(su:session): session closed for user root Sep 11 13:44:26 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 11 13:44:35 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/etc/logrotate.d ; USER=root ; COMMAND=/usr/sbin/logrotate -f apache2 Sep 11 13:44:35 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 11 13:44:35 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 11 13:44:46 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/etc/logrotate.d ; USER=root ; COMMAND=/bin/ls -lh /var/log/apache2/ Sep 11 13:44:46 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 11 13:44:46 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 11 13:45:01 ip-172-31-5-39 CRON[26180]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 13:45:10 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/etc/logrotate.d ; USER=root ; COMMAND=/bin/su Sep 11 13:45:10 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 11 13:45:10 ip-172-31-5-39 su[26185]: Successful su for root by root Sep 11 13:45:10 ip-172-31-5-39 su[26185]: + /dev/pts/0 root:root Sep 11 13:45:10 ip-172-31-5-39 su[26185]: pam_unix(su:session): session opened for user root by ubuntu(uid=0) Sep 11 13:45:10 ip-172-31-5-39 su[26185]: pam_systemd(su:session): Cannot create session: Already running in a session Sep 11 13:45:12 ip-172-31-5-39 CRON[26180]: pam_unix(cron:session): session closed for user root Sep 11 13:45:36 ip-172-31-5-39 su[26185]: pam_unix(su:session): session closed for user root Sep 11 13:45:36 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 11 13:49:16 ip-172-31-5-39 sshd[24454]: Received disconnect from 177.103.176.199 port 15007:11: disconnected by user Sep 11 13:49:16 ip-172-31-5-39 sshd[24454]: Disconnected from 177.103.176.199 port 15007 Sep 11 13:49:16 ip-172-31-5-39 sshd[24415]: pam_unix(sshd:session): session closed for user ubuntu Sep 11 13:49:16 ip-172-31-5-39 systemd-logind[1168]: Removed session 245. Sep 11 13:50:01 ip-172-31-5-39 CRON[26214]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 13:50:14 ip-172-31-5-39 CRON[26214]: pam_unix(cron:session): session closed for user root Sep 11 13:55:01 ip-172-31-5-39 CRON[26229]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 13:55:10 ip-172-31-5-39 CRON[26229]: pam_unix(cron:session): session closed for user root Sep 11 14:00:01 ip-172-31-5-39 CRON[26233]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 14:00:01 ip-172-31-5-39 CRON[26232]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 14:00:26 ip-172-31-5-39 CRON[26232]: pam_unix(cron:session): session closed for user root Sep 11 14:00:32 ip-172-31-5-39 CRON[26233]: pam_unix(cron:session): session closed for user root Sep 11 14:05:01 ip-172-31-5-39 CRON[26239]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 14:05:13 ip-172-31-5-39 CRON[26239]: pam_unix(cron:session): session closed for user root Sep 11 14:09:01 ip-172-31-5-39 CRON[26242]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 14:09:01 ip-172-31-5-39 CRON[26242]: pam_unix(cron:session): session closed for user root Sep 11 14:10:01 ip-172-31-5-39 CRON[26297]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 14:10:15 ip-172-31-5-39 CRON[26297]: pam_unix(cron:session): session closed for user root Sep 11 14:15:01 ip-172-31-5-39 CRON[26300]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 14:15:11 ip-172-31-5-39 CRON[26300]: pam_unix(cron:session): session closed for user root Sep 11 14:17:01 ip-172-31-5-39 CRON[26303]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 14:17:01 ip-172-31-5-39 CRON[26303]: pam_unix(cron:session): session closed for user root Sep 11 14:20:01 ip-172-31-5-39 CRON[26306]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 14:20:14 ip-172-31-5-39 CRON[26306]: pam_unix(cron:session): session closed for user root Sep 11 14:25:01 ip-172-31-5-39 CRON[26321]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 14:25:13 ip-172-31-5-39 CRON[26321]: pam_unix(cron:session): session closed for user root Sep 11 14:30:01 ip-172-31-5-39 CRON[26326]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 14:30:18 ip-172-31-5-39 CRON[26326]: pam_unix(cron:session): session closed for user root Sep 11 14:35:01 ip-172-31-5-39 CRON[26330]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 14:35:11 ip-172-31-5-39 CRON[26330]: pam_unix(cron:session): session closed for user root Sep 11 14:39:01 ip-172-31-5-39 CRON[26335]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 14:39:01 ip-172-31-5-39 CRON[26335]: pam_unix(cron:session): session closed for user root Sep 11 14:40:01 ip-172-31-5-39 CRON[26390]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 14:40:13 ip-172-31-5-39 CRON[26390]: pam_unix(cron:session): session closed for user root Sep 11 14:45:01 ip-172-31-5-39 CRON[26406]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 14:45:12 ip-172-31-5-39 CRON[26406]: pam_unix(cron:session): session closed for user root Sep 11 14:50:01 ip-172-31-5-39 CRON[26409]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 14:50:15 ip-172-31-5-39 CRON[26409]: pam_unix(cron:session): session closed for user root Sep 11 14:51:01 ip-172-31-5-39 CRON[26412]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 14:51:01 ip-172-31-5-39 CRON[26412]: pam_unix(cron:session): session closed for user root Sep 11 14:55:01 ip-172-31-5-39 CRON[26415]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 14:55:10 ip-172-31-5-39 CRON[26415]: pam_unix(cron:session): session closed for user root Sep 11 15:00:01 ip-172-31-5-39 CRON[26418]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 15:00:01 ip-172-31-5-39 CRON[26419]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 15:00:28 ip-172-31-5-39 CRON[26418]: pam_unix(cron:session): session closed for user root Sep 11 15:00:34 ip-172-31-5-39 CRON[26419]: pam_unix(cron:session): session closed for user root Sep 11 15:05:01 ip-172-31-5-39 CRON[26424]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 15:05:12 ip-172-31-5-39 CRON[26424]: pam_unix(cron:session): session closed for user root Sep 11 15:09:01 ip-172-31-5-39 CRON[26427]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 15:09:01 ip-172-31-5-39 CRON[26427]: pam_unix(cron:session): session closed for user root Sep 11 15:10:01 ip-172-31-5-39 CRON[26494]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 15:10:13 ip-172-31-5-39 CRON[26494]: pam_unix(cron:session): session closed for user root Sep 11 15:15:01 ip-172-31-5-39 CRON[26498]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 15:15:12 ip-172-31-5-39 CRON[26498]: pam_unix(cron:session): session closed for user root Sep 11 15:17:01 ip-172-31-5-39 CRON[26501]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 15:17:01 ip-172-31-5-39 CRON[26501]: pam_unix(cron:session): session closed for user root Sep 11 15:20:01 ip-172-31-5-39 CRON[26504]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 15:20:14 ip-172-31-5-39 CRON[26504]: pam_unix(cron:session): session closed for user root Sep 11 15:25:01 ip-172-31-5-39 CRON[26507]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 15:25:14 ip-172-31-5-39 CRON[26507]: pam_unix(cron:session): session closed for user root Sep 11 15:30:02 ip-172-31-5-39 CRON[26510]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 15:30:17 ip-172-31-5-39 CRON[26510]: pam_unix(cron:session): session closed for user root Sep 11 15:35:01 ip-172-31-5-39 CRON[26513]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 15:35:11 ip-172-31-5-39 CRON[26513]: pam_unix(cron:session): session closed for user root Sep 11 15:39:01 ip-172-31-5-39 CRON[26528]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 15:39:01 ip-172-31-5-39 CRON[26528]: pam_unix(cron:session): session closed for user root Sep 11 15:40:01 ip-172-31-5-39 CRON[26583]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 15:40:13 ip-172-31-5-39 CRON[26583]: pam_unix(cron:session): session closed for user root Sep 11 15:45:01 ip-172-31-5-39 CRON[26586]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 15:45:13 ip-172-31-5-39 CRON[26586]: pam_unix(cron:session): session closed for user root Sep 11 15:50:01 ip-172-31-5-39 CRON[26589]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 15:50:15 ip-172-31-5-39 CRON[26589]: pam_unix(cron:session): session closed for user root Sep 11 15:55:01 ip-172-31-5-39 CRON[26592]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 15:55:11 ip-172-31-5-39 CRON[26592]: pam_unix(cron:session): session closed for user root Sep 11 16:00:01 ip-172-31-5-39 CRON[26608]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 16:00:01 ip-172-31-5-39 CRON[26607]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 16:00:25 ip-172-31-5-39 CRON[26607]: pam_unix(cron:session): session closed for user root Sep 11 16:00:32 ip-172-31-5-39 CRON[26608]: pam_unix(cron:session): session closed for user root Sep 11 16:05:01 ip-172-31-5-39 CRON[26660]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 16:05:15 ip-172-31-5-39 CRON[26660]: pam_unix(cron:session): session closed for user root Sep 11 16:09:01 ip-172-31-5-39 CRON[26663]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 16:09:01 ip-172-31-5-39 CRON[26663]: pam_unix(cron:session): session closed for user root Sep 11 16:10:01 ip-172-31-5-39 CRON[26718]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 16:10:14 ip-172-31-5-39 CRON[26718]: pam_unix(cron:session): session closed for user root Sep 11 16:15:01 ip-172-31-5-39 CRON[26721]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 16:15:12 ip-172-31-5-39 CRON[26721]: pam_unix(cron:session): session closed for user root Sep 11 16:17:01 ip-172-31-5-39 CRON[26724]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 16:17:01 ip-172-31-5-39 CRON[26724]: pam_unix(cron:session): session closed for user root Sep 11 16:20:01 ip-172-31-5-39 CRON[26727]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 16:20:13 ip-172-31-5-39 CRON[26727]: pam_unix(cron:session): session closed for user root Sep 11 16:25:01 ip-172-31-5-39 CRON[26742]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 16:25:14 ip-172-31-5-39 CRON[26742]: pam_unix(cron:session): session closed for user root Sep 11 16:30:01 ip-172-31-5-39 CRON[26745]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 16:30:17 ip-172-31-5-39 CRON[26745]: pam_unix(cron:session): session closed for user root Sep 11 16:35:01 ip-172-31-5-39 CRON[26748]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 16:35:11 ip-172-31-5-39 CRON[26748]: pam_unix(cron:session): session closed for user root Sep 11 16:39:01 ip-172-31-5-39 CRON[26751]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 16:39:02 ip-172-31-5-39 CRON[26751]: pam_unix(cron:session): session closed for user root Sep 11 16:40:01 ip-172-31-5-39 CRON[26806]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 16:40:13 ip-172-31-5-39 CRON[26806]: pam_unix(cron:session): session closed for user root Sep 11 16:45:01 ip-172-31-5-39 CRON[26809]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 16:45:13 ip-172-31-5-39 CRON[26809]: pam_unix(cron:session): session closed for user root Sep 11 16:50:01 ip-172-31-5-39 CRON[26812]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 16:50:14 ip-172-31-5-39 CRON[26812]: pam_unix(cron:session): session closed for user root Sep 11 16:55:01 ip-172-31-5-39 CRON[26827]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 16:55:11 ip-172-31-5-39 CRON[26827]: pam_unix(cron:session): session closed for user root Sep 11 17:00:01 ip-172-31-5-39 CRON[26831]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 17:00:01 ip-172-31-5-39 CRON[26830]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 17:00:26 ip-172-31-5-39 CRON[26830]: pam_unix(cron:session): session closed for user root Sep 11 17:00:34 ip-172-31-5-39 CRON[26831]: pam_unix(cron:session): session closed for user root Sep 11 17:05:01 ip-172-31-5-39 CRON[26837]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 17:05:14 ip-172-31-5-39 CRON[26837]: pam_unix(cron:session): session closed for user root Sep 11 17:09:01 ip-172-31-5-39 CRON[26840]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 17:09:01 ip-172-31-5-39 CRON[26840]: pam_unix(cron:session): session closed for user root Sep 11 17:10:01 ip-172-31-5-39 CRON[26895]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 17:10:14 ip-172-31-5-39 CRON[26895]: pam_unix(cron:session): session closed for user root Sep 11 17:13:11 ip-172-31-5-39 sshd[26898]: Accepted publickey for ubuntu from 177.103.176.199 port 6461 ssh2: RSA SHA256:3/91sXvgrhpGwm6BHY9O8YSerXhFGNxSkZn2QEniijY Sep 11 17:13:11 ip-172-31-5-39 sshd[26898]: pam_unix(sshd:session): session opened for user ubuntu by (uid=0) Sep 11 17:13:11 ip-172-31-5-39 systemd: pam_unix(systemd-user:session): session opened for user ubuntu by (uid=0) Sep 11 17:13:11 ip-172-31-5-39 systemd-logind[1168]: New session 339 of user ubuntu. Sep 11 17:13:31 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/home/ubuntu ; USER=root ; COMMAND=/usr/bin/apt-get install python-setuptools Sep 11 17:13:31 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 11 17:13:35 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 11 17:14:16 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/home/ubuntu/s3cmd-1.5.0-alpha1 ; USER=root ; COMMAND=/usr/bin/python setup.py install Sep 11 17:14:16 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 11 17:14:16 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 11 17:15:01 ip-172-31-5-39 CRON[27087]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 17:15:14 ip-172-31-5-39 CRON[27087]: pam_unix(cron:session): session closed for user root Sep 11 17:17:01 ip-172-31-5-39 CRON[27090]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 17:17:01 ip-172-31-5-39 CRON[27090]: pam_unix(cron:session): session closed for user root Sep 11 17:20:01 ip-172-31-5-39 CRON[27105]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 17:20:13 ip-172-31-5-39 CRON[27105]: pam_unix(cron:session): session closed for user root Sep 11 17:21:35 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/home/ubuntu/s3cmd-1.5.0-alpha1 ; USER=root ; COMMAND=/usr/bin/apt-get install gpg Sep 11 17:21:35 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 11 17:21:36 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 11 17:22:23 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/home/ubuntu ; USER=root ; COMMAND=/usr/bin/vim bkp.sh Sep 11 17:22:23 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 11 17:22:34 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 11 17:22:54 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/home/ubuntu ; USER=root ; COMMAND=/usr/bin/vim bkp.sh Sep 11 17:22:54 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 11 17:23:04 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 11 17:23:07 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/home/ubuntu ; USER=root ; COMMAND=/usr/bin/vim bkp.sh Sep 11 17:23:07 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 11 17:23:29 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 11 17:23:35 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/home/ubuntu ; USER=root ; COMMAND=/usr/bin/vim bkp.sh Sep 11 17:23:35 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 11 17:23:48 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 11 17:23:53 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/home/ubuntu ; USER=root ; COMMAND=/usr/bin/vim bkp.sh Sep 11 17:23:53 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 11 17:25:01 ip-172-31-5-39 CRON[27156]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 17:25:13 ip-172-31-5-39 CRON[27156]: pam_unix(cron:session): session closed for user root Sep 11 17:28:26 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 11 17:28:33 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/home/ubuntu ; USER=root ; COMMAND=/bin/chmod +x bkp.sh Sep 11 17:28:33 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 11 17:28:33 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 11 17:28:46 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/home/ubuntu ; USER=root ; COMMAND=/usr/bin/apt-get install mysql-client Sep 11 17:28:46 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 11 17:28:53 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 11 17:29:17 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/home/ubuntu ; USER=root ; COMMAND=/usr/bin/vim bkp.sh Sep 11 17:29:17 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 11 17:30:01 ip-172-31-5-39 CRON[27570]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 17:30:05 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 11 17:30:18 ip-172-31-5-39 CRON[27570]: pam_unix(cron:session): session closed for user root Sep 11 17:30:29 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/home/ubuntu ; USER=root ; COMMAND=/usr/bin/vim bkp.sh Sep 11 17:30:29 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 11 17:30:47 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 11 17:30:59 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/home/ubuntu ; USER=root ; COMMAND=/usr/bin/vim bkp.sh Sep 11 17:30:59 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 11 17:31:07 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 11 17:33:42 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/home/ubuntu ; USER=root ; COMMAND=/bin/rm -rf teste.sql Sep 11 17:33:42 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 11 17:33:42 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 11 17:34:03 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/home/ubuntu ; USER=root ; COMMAND=/usr/bin/vim bkp.sh Sep 11 17:34:03 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 11 17:34:19 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 11 17:35:01 ip-172-31-5-39 CRON[27614]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 17:35:12 ip-172-31-5-39 CRON[27614]: pam_unix(cron:session): session closed for user root Sep 11 17:36:34 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/home/ubuntu ; USER=root ; COMMAND=/usr/bin/vim bkp.sh Sep 11 17:36:34 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 11 17:36:59 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 11 17:38:24 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/home/ubuntu ; USER=root ; COMMAND=/usr/bin/vim bkp.sh Sep 11 17:38:24 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 11 17:38:50 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 11 17:39:01 ip-172-31-5-39 CRON[27637]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 17:39:02 ip-172-31-5-39 CRON[27637]: pam_unix(cron:session): session closed for user root Sep 11 17:40:01 ip-172-31-5-39 CRON[27693]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 17:40:13 ip-172-31-5-39 CRON[27693]: pam_unix(cron:session): session closed for user root Sep 11 17:40:55 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/home/ubuntu ; USER=root ; COMMAND=/usr/bin/apt-get install python-magic Sep 11 17:40:55 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 11 17:40:56 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 11 17:42:46 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/home/ubuntu ; USER=root ; COMMAND=/usr/bin/vim bkp.sh Sep 11 17:42:46 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 11 17:44:03 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 11 17:44:33 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/home/ubuntu ; USER=root ; COMMAND=/usr/bin/vim bkp.sh Sep 11 17:44:33 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 11 17:45:01 ip-172-31-5-39 CRON[27796]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 17:45:12 ip-172-31-5-39 CRON[27796]: pam_unix(cron:session): session closed for user root Sep 11 17:45:15 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 11 17:47:49 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/home/ubuntu ; USER=root ; COMMAND=/usr/bin/vim bkp.sh Sep 11 17:47:49 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 11 17:48:12 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 11 17:50:01 ip-172-31-5-39 CRON[27843]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 17:50:16 ip-172-31-5-39 CRON[27843]: pam_unix(cron:session): session closed for user root Sep 11 17:51:02 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/home/ubuntu ; USER=root ; COMMAND=/usr/bin/vim /etc/crontab Sep 11 17:51:02 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 11 17:51:56 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 11 17:52:00 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/home/ubuntu ; USER=root ; COMMAND=/etc/init.d/cron restart Sep 11 17:52:00 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 11 17:52:00 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 11 17:52:26 ip-172-31-5-39 sshd[26959]: Received disconnect from 177.103.176.199 port 6461:11: disconnected by user Sep 11 17:52:26 ip-172-31-5-39 sshd[26959]: Disconnected from 177.103.176.199 port 6461 Sep 11 17:52:26 ip-172-31-5-39 sshd[26898]: pam_unix(sshd:session): session closed for user ubuntu Sep 11 17:52:26 ip-172-31-5-39 systemd-logind[1168]: Removed session 339. Sep 11 18:09:01 ip-172-31-5-39 CRON[27937]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 18:09:01 ip-172-31-5-39 CRON[27937]: pam_unix(cron:session): session closed for user root Sep 11 18:39:01 ip-172-31-5-39 CRON[28004]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 18:39:02 ip-172-31-5-39 CRON[28004]: pam_unix(cron:session): session closed for user root Sep 11 19:09:01 ip-172-31-5-39 CRON[28083]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 19:09:01 ip-172-31-5-39 CRON[28083]: pam_unix(cron:session): session closed for user root Sep 11 19:27:21 ip-172-31-5-39 sshd[28138]: Accepted publickey for ubuntu from 177.103.176.199 port 57907 ssh2: RSA SHA256:3/91sXvgrhpGwm6BHY9O8YSerXhFGNxSkZn2QEniijY Sep 11 19:27:21 ip-172-31-5-39 sshd[28138]: pam_unix(sshd:session): session opened for user ubuntu by (uid=0) Sep 11 19:27:21 ip-172-31-5-39 systemd: pam_unix(systemd-user:session): session opened for user ubuntu by (uid=0) Sep 11 19:27:21 ip-172-31-5-39 systemd-logind[1168]: New session 353 of user ubuntu. Sep 11 19:28:15 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/etc/apache2/mods-enabled ; USER=root ; COMMAND=/bin/ln -s ../mods-available/expires.load expires.load Sep 11 19:28:15 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 11 19:28:15 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 11 19:28:26 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/etc/apache2/mods-enabled ; USER=root ; COMMAND=/bin/ln -s expires.load ../mods-available/expires.load Sep 11 19:28:26 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 11 19:28:26 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 11 19:28:33 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/etc/apache2/mods-enabled ; USER=root ; COMMAND=/bin/ln -ls expires.load ../mods-available/expires.load Sep 11 19:28:33 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 11 19:28:33 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 11 19:28:38 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/etc/apache2/mods-enabled ; USER=root ; COMMAND=/bin/ln -ls expires.load ../mods-available/expires.load Sep 11 19:28:38 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 11 19:28:38 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 11 19:29:15 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/etc/apache2/mods-enabled ; USER=root ; COMMAND=/bin/ln -ls ../mods-available/expires.load /etc/apache2/mods-enabled/expires.load Sep 11 19:29:15 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 11 19:29:15 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 11 19:29:19 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/etc/apache2/mods-enabled ; USER=root ; COMMAND=/bin/ln -s ../mods-available/expires.load /etc/apache2/mods-enabled/expires.load Sep 11 19:29:19 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 11 19:29:19 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 11 19:29:59 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/etc/apache2/conf-enabled ; USER=root ; COMMAND=/usr/bin/vim expiresconf Sep 11 19:29:59 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 11 19:30:00 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 11 19:30:03 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/etc/apache2/conf-enabled ; USER=root ; COMMAND=/usr/bin/vim expires.conf Sep 11 19:30:03 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 11 19:30:07 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 11 19:30:15 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/etc/apache2/conf-enabled ; USER=root ; COMMAND=/etc/init.d/apache2 restart Sep 11 19:30:15 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 11 19:30:17 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 11 19:30:57 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/etc/apache2/sites-enabled ; USER=root ; COMMAND=/usr/bin/vim 000-default.conf Sep 11 19:30:57 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 11 19:31:44 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 11 19:31:50 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/etc/apache2/sites-enabled ; USER=root ; COMMAND=/bin/ls /var/log/apache2/ Sep 11 19:31:50 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 11 19:31:50 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 11 19:31:56 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/etc/apache2/sites-enabled ; USER=root ; COMMAND=/etc/init.d/apache2 restart Sep 11 19:31:56 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 11 19:31:58 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 11 19:32:24 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/log ; USER=root ; COMMAND=/bin/chown www-data:www-data apache2 -R Sep 11 19:32:24 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 11 19:32:24 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 11 19:33:05 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var ; USER=root ; COMMAND=/bin/chmod -R 666 log/ Sep 11 19:33:05 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 11 19:33:05 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 11 19:33:11 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var ; USER=root ; COMMAND=/bin/chmod -R 655 log/ Sep 11 19:33:11 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 11 19:33:11 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 11 19:34:23 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/log/apache2 ; USER=root ; COMMAND=/usr/bin/vim /etc/apache2/sites-enabled/000-default.conf Sep 11 19:34:23 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 11 19:34:31 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 11 19:34:32 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/log/apache2 ; USER=root ; COMMAND=/etc/init.d/apache2 restart Sep 11 19:34:32 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 11 19:34:35 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 11 19:35:17 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/log/apache2 ; USER=root ; COMMAND=/usr/bin/vim /etc/apache2/sites-enabled/000-default.conf Sep 11 19:35:17 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 11 19:35:42 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 11 19:35:45 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/log/apache2 ; USER=root ; COMMAND=/etc/init.d/apache2 restart Sep 11 19:35:45 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 11 19:35:47 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 11 19:36:40 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/log/apache2 ; USER=root ; COMMAND=/usr/bin/vim /etc/apache2/sites-enabled/000-default.conf Sep 11 19:36:40 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 11 19:36:53 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 11 19:36:56 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/log/apache2 ; USER=root ; COMMAND=/etc/init.d/apache2 restart Sep 11 19:36:56 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 11 19:36:58 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 11 19:38:30 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/log ; USER=root ; COMMAND=/bin/chmod -R 655 apache2/ Sep 11 19:38:30 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 11 19:38:30 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 11 19:38:38 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/log ; USER=root ; COMMAND=/bin/chmod -R 666 apache2/ Sep 11 19:38:38 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 11 19:38:38 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 11 19:38:44 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/log ; USER=root ; COMMAND=/bin/chmod -R 777 apache2/ Sep 11 19:38:44 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 11 19:38:44 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 11 19:38:53 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/log ; USER=root ; COMMAND=/bin/chmod -R 655 apache2/ Sep 11 19:38:53 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 11 19:38:53 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 11 19:39:01 ip-172-31-5-39 CRON[28926]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 19:39:01 ip-172-31-5-39 CRON[28926]: pam_unix(cron:session): session closed for user root Sep 11 19:39:13 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/log/apache2 ; USER=root ; COMMAND=/bin/chmod -R 755 apache2/ Sep 11 19:39:13 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 11 19:39:13 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 11 19:39:16 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/log ; USER=root ; COMMAND=/bin/chmod -R 755 apache2/ Sep 11 19:39:16 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 11 19:39:16 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 11 19:46:43 ip-172-31-5-39 sshd[28199]: Received disconnect from 177.103.176.199 port 57907:11: disconnected by user Sep 11 19:46:43 ip-172-31-5-39 sshd[28199]: Disconnected from 177.103.176.199 port 57907 Sep 11 19:46:43 ip-172-31-5-39 sshd[28138]: pam_unix(sshd:session): session closed for user ubuntu Sep 11 19:46:43 ip-172-31-5-39 systemd-logind[1168]: Removed session 353. Sep 11 20:09:01 ip-172-31-5-39 CRON[29022]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 20:09:01 ip-172-31-5-39 CRON[29022]: pam_unix(cron:session): session closed for user root Sep 11 20:39:01 ip-172-31-5-39 CRON[29093]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 20:39:01 ip-172-31-5-39 CRON[29093]: pam_unix(cron:session): session closed for user root Sep 11 21:09:01 ip-172-31-5-39 CRON[29161]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 21:09:01 ip-172-31-5-39 CRON[29161]: pam_unix(cron:session): session closed for user root Sep 11 21:39:01 ip-172-31-5-39 CRON[29230]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 21:39:01 ip-172-31-5-39 CRON[29230]: pam_unix(cron:session): session closed for user root Sep 11 22:09:01 ip-172-31-5-39 CRON[29298]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 22:09:01 ip-172-31-5-39 CRON[29298]: pam_unix(cron:session): session closed for user root Sep 11 22:39:01 ip-172-31-5-39 CRON[29365]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 22:39:01 ip-172-31-5-39 CRON[29365]: pam_unix(cron:session): session closed for user root Sep 11 23:09:01 ip-172-31-5-39 CRON[29432]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 23:09:01 ip-172-31-5-39 CRON[29432]: pam_unix(cron:session): session closed for user root Sep 11 23:39:01 ip-172-31-5-39 CRON[29499]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 11 23:39:02 ip-172-31-5-39 CRON[29499]: pam_unix(cron:session): session closed for user root Sep 12 00:09:01 ip-172-31-5-39 CRON[29578]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 12 00:09:01 ip-172-31-5-39 CRON[29578]: pam_unix(cron:session): session closed for user root Sep 12 00:39:01 ip-172-31-5-39 CRON[29645]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 12 00:39:01 ip-172-31-5-39 CRON[29645]: pam_unix(cron:session): session closed for user root Sep 12 01:09:01 ip-172-31-5-39 CRON[29712]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 12 01:09:01 ip-172-31-5-39 CRON[29712]: pam_unix(cron:session): session closed for user root Sep 12 01:39:01 ip-172-31-5-39 CRON[29779]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 12 01:39:01 ip-172-31-5-39 CRON[29779]: pam_unix(cron:session): session closed for user root Sep 12 02:09:01 ip-172-31-5-39 CRON[29846]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 12 02:09:01 ip-172-31-5-39 CRON[29846]: pam_unix(cron:session): session closed for user root Sep 12 02:39:01 ip-172-31-5-39 CRON[29913]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 12 02:39:01 ip-172-31-5-39 CRON[29913]: pam_unix(cron:session): session closed for user root Sep 12 03:09:01 ip-172-31-5-39 CRON[29980]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 12 03:09:01 ip-172-31-5-39 CRON[29980]: pam_unix(cron:session): session closed for user root Sep 12 03:39:01 ip-172-31-5-39 CRON[30059]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 12 03:39:01 ip-172-31-5-39 CRON[30059]: pam_unix(cron:session): session closed for user root Sep 12 04:09:01 ip-172-31-5-39 CRON[30126]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 12 04:09:01 ip-172-31-5-39 CRON[30126]: pam_unix(cron:session): session closed for user root Sep 12 04:39:01 ip-172-31-5-39 CRON[30476]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 12 04:39:01 ip-172-31-5-39 CRON[30476]: pam_unix(cron:session): session closed for user root Sep 12 05:09:01 ip-172-31-5-39 CRON[30543]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 12 05:09:01 ip-172-31-5-39 CRON[30543]: pam_unix(cron:session): session closed for user root Sep 12 05:39:01 ip-172-31-5-39 CRON[30610]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 12 05:39:01 ip-172-31-5-39 CRON[30610]: pam_unix(cron:session): session closed for user root Sep 12 06:09:01 ip-172-31-5-39 CRON[30677]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 12 06:09:01 ip-172-31-5-39 CRON[30677]: pam_unix(cron:session): session closed for user root Sep 12 06:39:01 ip-172-31-5-39 CRON[30744]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 12 06:39:01 ip-172-31-5-39 CRON[30744]: pam_unix(cron:session): session closed for user root Sep 12 07:09:01 ip-172-31-5-39 CRON[30876]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 12 07:09:01 ip-172-31-5-39 CRON[30876]: pam_unix(cron:session): session closed for user root Sep 12 07:39:01 ip-172-31-5-39 CRON[30943]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 12 07:39:01 ip-172-31-5-39 CRON[30943]: pam_unix(cron:session): session closed for user root Sep 12 08:09:01 ip-172-31-5-39 CRON[31022]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 12 08:09:01 ip-172-31-5-39 CRON[31022]: pam_unix(cron:session): session closed for user root Sep 12 08:39:01 ip-172-31-5-39 CRON[31089]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 12 08:39:01 ip-172-31-5-39 CRON[31089]: pam_unix(cron:session): session closed for user root Sep 12 09:09:01 ip-172-31-5-39 CRON[31156]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 12 09:09:02 ip-172-31-5-39 CRON[31156]: pam_unix(cron:session): session closed for user root Sep 12 09:39:01 ip-172-31-5-39 CRON[31223]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 12 09:39:01 ip-172-31-5-39 CRON[31223]: pam_unix(cron:session): session closed for user root Sep 12 10:09:01 ip-172-31-5-39 CRON[31290]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 12 10:09:01 ip-172-31-5-39 CRON[31290]: pam_unix(cron:session): session closed for user root Sep 12 10:39:01 ip-172-31-5-39 CRON[31369]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 12 10:39:01 ip-172-31-5-39 CRON[31369]: pam_unix(cron:session): session closed for user root Sep 12 11:09:01 ip-172-31-5-39 CRON[31436]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 12 11:09:01 ip-172-31-5-39 CRON[31436]: pam_unix(cron:session): session closed for user root Sep 12 11:39:01 ip-172-31-5-39 CRON[31503]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 12 11:39:01 ip-172-31-5-39 CRON[31503]: pam_unix(cron:session): session closed for user root Sep 12 11:50:46 ip-172-31-5-39 sshd[31558]: Accepted publickey for ubuntu from 186.231.102.150 port 55591 ssh2: RSA SHA256:3/91sXvgrhpGwm6BHY9O8YSerXhFGNxSkZn2QEniijY Sep 12 11:50:46 ip-172-31-5-39 sshd[31558]: pam_unix(sshd:session): session opened for user ubuntu by (uid=0) Sep 12 11:50:46 ip-172-31-5-39 systemd: pam_unix(systemd-user:session): session opened for user ubuntu by (uid=0) Sep 12 11:50:46 ip-172-31-5-39 systemd-logind[1168]: New session 387 of user ubuntu. Sep 12 11:53:18 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/home/ubuntu ; USER=root ; COMMAND=/usr/bin/vim bkp.sh Sep 12 11:53:18 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 11:53:34 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 11:54:47 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/home/ubuntu ; USER=root ; COMMAND=/usr/bin/vim /etc/crontab Sep 12 11:54:47 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 11:54:53 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 11:54:59 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/home/ubuntu ; USER=root ; COMMAND=/etc/init.d/cron restart Sep 12 11:54:59 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 11:54:59 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 11:55:25 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/home/ubuntu ; USER=root ; COMMAND=/sbin/hwclock Sep 12 11:55:25 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 11:55:26 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 11:55:30 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/home/ubuntu ; USER=root ; COMMAND=/sbin/hwclock --help Sep 12 11:55:30 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 11:55:30 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 11:55:36 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/home/ubuntu ; USER=root ; COMMAND=/sbin/hwclock --systohc Sep 12 11:55:36 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 11:55:37 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 11:55:39 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/home/ubuntu ; USER=root ; COMMAND=/sbin/hwclock Sep 12 11:55:39 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 11:55:40 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 11:55:53 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/home/ubuntu ; USER=root ; COMMAND=/bin/date 091208562018 Sep 12 11:55:53 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 08:56:00 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 11:56:00 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/home/ubuntu ; USER=root ; COMMAND=/bin/date 091208562018 Sep 12 11:56:00 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 08:56:00 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 11:56:04 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/home/ubuntu ; USER=root ; COMMAND=/bin/date Sep 12 11:56:04 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 11:56:04 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 11:56:15 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/home/ubuntu ; USER=root ; COMMAND=/bin/date Sep 12 11:56:15 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 11:56:15 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 11:56:26 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/home/ubuntu ; USER=root ; COMMAND=/bin/date 091208562018 Sep 12 11:56:26 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 08:56:00 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 11:57:30 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/home/ubuntu ; USER=root ; COMMAND=/usr/bin/apt-get install chrony Sep 12 11:57:30 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 11:57:34 ip-172-31-5-39 groupadd[32518]: group added to /etc/group: name=_chrony, GID=117 Sep 12 11:57:34 ip-172-31-5-39 groupadd[32518]: group added to /etc/gshadow: name=_chrony Sep 12 11:57:34 ip-172-31-5-39 groupadd[32518]: new group: name=_chrony, GID=117 Sep 12 11:57:34 ip-172-31-5-39 useradd[32522]: new user: name=_chrony, UID=113, GID=117, home=/var/lib/chrony, shell=/bin/false Sep 12 11:57:34 ip-172-31-5-39 usermod[32527]: change user '_chrony' password Sep 12 11:57:34 ip-172-31-5-39 chage[32532]: changed password expiry for _chrony Sep 12 11:57:34 ip-172-31-5-39 chfn[32535]: changed user '_chrony' information Sep 12 11:57:38 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 11:57:45 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/home/ubuntu ; USER=root ; COMMAND=/usr/bin/vim /etc/chrony.conf Sep 12 11:57:45 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 11:57:47 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 11:57:52 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/home/ubuntu ; USER=root ; COMMAND=/usr/bin/vim /etc/chrony/chrony.conf Sep 12 11:57:52 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 11:58:27 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 11:58:39 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/home/ubuntu ; USER=root ; COMMAND=/usr/sbin/service chronyd start Sep 12 11:58:39 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 11:58:39 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 11:58:50 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/home/ubuntu ; USER=root ; COMMAND=/etc/init.d/chrony restart Sep 12 11:58:50 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 11:58:52 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 11:59:15 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/home/ubuntu ; USER=root ; COMMAND=/bin/systemctl enable chrony Sep 12 11:59:15 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 11:59:15 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 12:00:22 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/home/ubuntu ; USER=root ; COMMAND=/usr/bin/vim /etc/sysconfig/clock Sep 12 12:00:22 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 12:00:23 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 12:01:56 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/home/ubuntu ; USER=root ; COMMAND=/bin/rm /etc/localtime Sep 12 12:01:56 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 12:01:56 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 12:01:56 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/home/ubuntu ; USER=root ; COMMAND=/bin/ln -s /usr/share/zoneinfo/America/Sao_Paulo /etc/localtime Sep 12 12:01:56 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 12:01:56 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 12:02:20 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/home/ubuntu ; USER=root ; COMMAND=/etc/init.d/apache2 restart Sep 12 12:02:20 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 12:02:22 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 12:03:03 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/home/ubuntu ; USER=root ; COMMAND=/etc/init.d/chrony restart Sep 12 12:03:03 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 12:03:05 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 12:03:23 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/home/ubuntu ; USER=root ; COMMAND=/usr/bin/vim /etc/chrony/chrony.conf Sep 12 12:03:23 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 12:03:41 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 12:03:44 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/home/ubuntu ; USER=root ; COMMAND=/usr/bin/vim /etc/adjtime Sep 12 12:03:44 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 12:03:47 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 12:03:51 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/home/ubuntu ; USER=root ; COMMAND=/usr/bin/vim /etc/chrony/chrony.conf Sep 12 12:03:51 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 12:03:57 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 12:04:40 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/home/ubuntu ; USER=root ; COMMAND=/usr/bin/apt remove chrony Sep 12 12:04:40 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 12:04:43 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 12:05:37 ip-172-31-5-39 sshd[31619]: Received disconnect from 186.231.102.150 port 55591:11: disconnected by user Sep 12 12:05:37 ip-172-31-5-39 sshd[31619]: Disconnected from 186.231.102.150 port 55591 Sep 12 12:05:37 ip-172-31-5-39 sshd[31558]: pam_unix(sshd:session): session closed for user ubuntu Sep 12 12:05:37 ip-172-31-5-39 systemd-logind[1168]: Removed session 387. Sep 12 12:09:01 ip-172-31-5-39 CRON[1635]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 12 12:09:02 ip-172-31-5-39 CRON[1635]: pam_unix(cron:session): session closed for user root Sep 12 12:39:01 ip-172-31-5-39 CRON[1705]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 12 12:39:01 ip-172-31-5-39 CRON[1705]: pam_unix(cron:session): session closed for user root Sep 12 13:09:01 ip-172-31-5-39 CRON[1772]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 12 13:09:01 ip-172-31-5-39 CRON[1772]: pam_unix(cron:session): session closed for user root Sep 12 13:39:01 ip-172-31-5-39 CRON[1844]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 12 13:39:01 ip-172-31-5-39 CRON[1844]: pam_unix(cron:session): session closed for user root Sep 12 14:09:01 ip-172-31-5-39 CRON[1911]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 12 14:09:01 ip-172-31-5-39 CRON[1911]: pam_unix(cron:session): session closed for user root Sep 12 14:39:01 ip-172-31-5-39 CRON[1990]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 12 14:39:01 ip-172-31-5-39 CRON[1990]: pam_unix(cron:session): session closed for user root Sep 12 14:51:01 ip-172-31-5-39 CRON[2045]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 12 14:51:01 ip-172-31-5-39 CRON[2045]: pam_unix(cron:session): session closed for user root Sep 12 15:09:01 ip-172-31-5-39 CRON[2060]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 12 15:09:01 ip-172-31-5-39 CRON[2060]: pam_unix(cron:session): session closed for user root Sep 12 15:39:01 ip-172-31-5-39 CRON[2127]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 12 15:39:01 ip-172-31-5-39 CRON[2127]: pam_unix(cron:session): session closed for user root Sep 12 16:09:01 ip-172-31-5-39 CRON[2194]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 12 16:09:01 ip-172-31-5-39 CRON[2194]: pam_unix(cron:session): session closed for user root Sep 12 16:39:01 ip-172-31-5-39 CRON[2261]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 12 16:39:01 ip-172-31-5-39 CRON[2261]: pam_unix(cron:session): session closed for user root Sep 12 17:09:01 ip-172-31-5-39 CRON[2328]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 12 17:09:02 ip-172-31-5-39 CRON[2328]: pam_unix(cron:session): session closed for user root Sep 12 17:39:01 ip-172-31-5-39 CRON[2395]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 12 17:39:01 ip-172-31-5-39 CRON[2395]: pam_unix(cron:session): session closed for user root Sep 12 18:09:01 ip-172-31-5-39 CRON[2462]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 12 18:09:01 ip-172-31-5-39 CRON[2462]: pam_unix(cron:session): session closed for user root Sep 12 18:16:59 ip-172-31-5-39 sshd[2517]: Accepted publickey for ubuntu from 177.103.176.199 port 41752 ssh2: RSA SHA256:3/91sXvgrhpGwm6BHY9O8YSerXhFGNxSkZn2QEniijY Sep 12 18:16:59 ip-172-31-5-39 sshd[2517]: pam_unix(sshd:session): session opened for user ubuntu by (uid=0) Sep 12 18:16:59 ip-172-31-5-39 systemd: pam_unix(systemd-user:session): session opened for user ubuntu by (uid=0) Sep 12 18:16:59 ip-172-31-5-39 systemd-logind[1168]: New session 402 of user ubuntu. Sep 12 18:26:00 ip-172-31-5-39 sshd[2612]: Accepted publickey for ubuntu from 177.103.176.199 port 6025 ssh2: RSA SHA256:3/91sXvgrhpGwm6BHY9O8YSerXhFGNxSkZn2QEniijY Sep 12 18:26:00 ip-172-31-5-39 sshd[2612]: pam_unix(sshd:session): session opened for user ubuntu by (uid=0) Sep 12 18:26:00 ip-172-31-5-39 systemd-logind[1168]: New session 403 of user ubuntu. Sep 12 18:26:08 ip-172-31-5-39 sshd[2644]: Received disconnect from 177.103.176.199 port 6025:11: disconnected by user Sep 12 18:26:08 ip-172-31-5-39 sshd[2644]: Disconnected from 177.103.176.199 port 6025 Sep 12 18:26:08 ip-172-31-5-39 sshd[2612]: pam_unix(sshd:session): session closed for user ubuntu Sep 12 18:26:08 ip-172-31-5-39 systemd-logind[1168]: Removed session 403. Sep 12 18:26:27 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/home/ubuntu ; USER=root ; COMMAND=/bin/mv cetesb.tar.gz /var/www/html/bkp/ Sep 12 18:26:27 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 18:26:27 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 18:26:35 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/bkp ; USER=root ; COMMAND=/bin/mkdir cetesb Sep 12 18:26:35 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 18:26:35 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 18:26:40 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/bkp ; USER=root ; COMMAND=/bin/mv cetesb.tar.gz cetesb Sep 12 18:26:40 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 18:26:40 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 18:26:45 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/bkp/cetesb ; USER=root ; COMMAND=/bin/tar -xvf cetesb.tar.gz Sep 12 18:26:45 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 18:26:52 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 18:27:02 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/bkp/cetesb ; USER=root ; COMMAND=/bin/mv cetesb ../../ Sep 12 18:27:02 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 18:27:02 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 18:27:36 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html ; USER=root ; COMMAND=/usr/bin/vim /etc/apache2/sites-enabled/000-default.conf Sep 12 18:27:36 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 18:28:53 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 18:29:54 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/cetesb ; USER=root ; COMMAND=/usr/bin/vim config.php Sep 12 18:29:54 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 18:30:18 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 18:30:20 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/cetesb ; USER=root ; COMMAND=/usr/bin/vim config.php Sep 12 18:30:20 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 18:31:58 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 18:32:13 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/cetesb ; USER=root ; COMMAND=/usr/bin/vim config.php Sep 12 18:32:13 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 18:32:28 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 18:32:32 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/cetesb ; USER=root ; COMMAND=/usr/bin/vim config.php Sep 12 18:32:32 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 18:32:48 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 18:32:53 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/cetesb ; USER=root ; COMMAND=/usr/bin/vim config.php Sep 12 18:32:53 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 18:33:13 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 18:33:18 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/cetesb ; USER=root ; COMMAND=/usr/bin/vim config.php Sep 12 18:33:18 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 18:33:25 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 18:34:14 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/cetesb ; USER=root ; COMMAND=/usr/bin/vim config.php Sep 12 18:34:14 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 18:35:22 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 18:39:01 ip-172-31-5-39 CRON[2756]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 12 18:39:01 ip-172-31-5-39 CRON[2756]: pam_unix(cron:session): session closed for user root Sep 12 18:43:37 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/cetesb ; USER=root ; COMMAND=/usr/bin/vim /etc/apache2/sites-enabled/000-default.conf Sep 12 18:43:37 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 18:43:42 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 18:43:48 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/cetesb ; USER=root ; COMMAND=/etc/init.d/apache2 restart Sep 12 18:43:48 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 18:43:50 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 18:44:07 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/cetesb ; USER=root ; COMMAND=/usr/bin/vim /etc/apache2/sites-enabled/000-default.conf Sep 12 18:44:07 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 18:44:24 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 18:44:27 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/cetesb ; USER=root ; COMMAND=/etc/init.d/apache2 restart Sep 12 18:44:27 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 18:44:29 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 18:47:05 ip-172-31-5-39 sshd[2999]: Accepted publickey for ubuntu from 177.103.176.199 port 52171 ssh2: RSA SHA256:3/91sXvgrhpGwm6BHY9O8YSerXhFGNxSkZn2QEniijY Sep 12 18:47:05 ip-172-31-5-39 sshd[2999]: pam_unix(sshd:session): session opened for user ubuntu by (uid=0) Sep 12 18:47:05 ip-172-31-5-39 systemd-logind[1168]: New session 405 of user ubuntu. Sep 12 18:49:18 ip-172-31-5-39 sshd[3031]: Received disconnect from 177.103.176.199 port 52171:11: disconnected by user Sep 12 18:49:18 ip-172-31-5-39 sshd[3031]: Disconnected from 177.103.176.199 port 52171 Sep 12 18:49:18 ip-172-31-5-39 sshd[2999]: pam_unix(sshd:session): session closed for user ubuntu Sep 12 18:49:18 ip-172-31-5-39 systemd-logind[1168]: Removed session 405. Sep 12 18:49:27 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/bkp/cetesb ; USER=root ; COMMAND=/bin/mv /home/ubuntu/moodledatacetesb.tar.gz . Sep 12 18:49:27 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 18:49:27 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 18:49:34 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/bkp/cetesb ; USER=root ; COMMAND=/bin/tar -xvf moodledatacetesb.tar.gz Sep 12 18:49:34 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 18:50:40 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 18:50:56 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/bkp/cetesb ; USER=root ; COMMAND=/bin/mv moodledatacetesb /usr/local/moodledata/ Sep 12 18:50:56 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 18:55:55 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 18:56:03 ip-172-31-5-39 sshd[3089]: Accepted publickey for ubuntu from 177.103.176.199 port 19064 ssh2: RSA SHA256:3/91sXvgrhpGwm6BHY9O8YSerXhFGNxSkZn2QEniijY Sep 12 18:56:03 ip-172-31-5-39 sshd[3089]: pam_unix(sshd:session): session opened for user ubuntu by (uid=0) Sep 12 18:56:03 ip-172-31-5-39 systemd-logind[1168]: New session 406 of user ubuntu. Sep 12 18:56:09 ip-172-31-5-39 sshd[3121]: Received disconnect from 177.103.176.199 port 19064:11: disconnected by user Sep 12 18:56:09 ip-172-31-5-39 sshd[3121]: Disconnected from 177.103.176.199 port 19064 Sep 12 18:56:09 ip-172-31-5-39 sshd[3089]: pam_unix(sshd:session): session closed for user ubuntu Sep 12 18:56:09 ip-172-31-5-39 systemd-logind[1168]: Removed session 406. Sep 12 18:56:25 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/bkp ; USER=root ; COMMAND=/bin/mkdir ecc Sep 12 18:56:25 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 18:56:25 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 18:56:33 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/bkp/ecc ; USER=root ; COMMAND=/bin/mv /home/ubuntu/ecc.tar.gz . Sep 12 18:56:33 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 18:56:33 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 18:56:39 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/bkp/ecc ; USER=root ; COMMAND=/bin/tar -xvf ecc.tar.gz Sep 12 18:56:39 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 18:56:43 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 18:56:49 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/bkp/ecc ; USER=root ; COMMAND=/bin/mv ecc ../../ Sep 12 18:56:49 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 18:56:49 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 18:58:03 ip-172-31-5-39 sshd[3161]: Accepted publickey for ubuntu from 177.103.176.199 port 38757 ssh2: RSA SHA256:3/91sXvgrhpGwm6BHY9O8YSerXhFGNxSkZn2QEniijY Sep 12 18:58:03 ip-172-31-5-39 sshd[3161]: pam_unix(sshd:session): session opened for user ubuntu by (uid=0) Sep 12 18:58:03 ip-172-31-5-39 systemd-logind[1168]: New session 407 of user ubuntu. Sep 12 18:58:12 ip-172-31-5-39 sshd[3193]: Received disconnect from 177.103.176.199 port 38757:11: disconnected by user Sep 12 18:58:12 ip-172-31-5-39 sshd[3193]: Disconnected from 177.103.176.199 port 38757 Sep 12 18:58:12 ip-172-31-5-39 sshd[3161]: pam_unix(sshd:session): session closed for user ubuntu Sep 12 18:58:12 ip-172-31-5-39 systemd-logind[1168]: Removed session 407. Sep 12 18:58:24 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/bkp/ecc ; USER=root ; COMMAND=/bin/mv /home/ubuntu/moodledataecc.tar.gz . Sep 12 18:58:24 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 18:58:24 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 18:58:29 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/bkp/ecc ; USER=root ; COMMAND=/bin/tar -xvf moodledataecc.tar.gz Sep 12 18:58:29 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 18:58:33 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 18:58:40 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/bkp/ecc ; USER=root ; COMMAND=/bin/mv moodledataecc /usr/local/moodledata/ Sep 12 18:58:40 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 19:02:12 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 19:06:00 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/ecc ; USER=root ; COMMAND=/usr/bin/vim config.php Sep 12 19:06:00 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 19:06:11 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 19:06:16 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/ecc ; USER=root ; COMMAND=/usr/bin/vim config.php Sep 12 19:06:16 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 19:06:27 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 19:06:31 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/ecc ; USER=root ; COMMAND=/usr/bin/vim config.php Sep 12 19:06:31 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 19:07:01 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 19:09:01 ip-172-31-5-39 CRON[3270]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 12 19:09:01 ip-172-31-5-39 CRON[3270]: pam_unix(cron:session): session closed for user root Sep 12 19:28:58 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/ecc ; USER=root ; COMMAND=/usr/bin/vim /etc/apache2/sites-enabled/000-default.conf Sep 12 19:28:58 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 19:30:00 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 19:30:03 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/ecc ; USER=root ; COMMAND=/etc/init.d/apache2 restart Sep 12 19:30:03 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 19:30:05 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 19:30:39 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/ecc ; USER=root ; COMMAND=/usr/bin/vim config.php Sep 12 19:30:39 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 19:30:47 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 19:31:08 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/ecc ; USER=root ; COMMAND=/usr/bin/vim config.php Sep 12 19:31:08 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 19:31:13 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 19:31:59 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/ecc ; USER=root ; COMMAND=/usr/bin/vim /var/www/html/ecc/config.php Sep 12 19:31:59 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 19:33:12 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 19:33:23 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/ecc ; USER=root ; COMMAND=/usr/bin/vim /var/www/html/ecc/config.php Sep 12 19:33:23 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 19:33:28 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 19:33:36 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/ecc ; USER=root ; COMMAND=/usr/bin/vim /var/www/html/ecc/config.php Sep 12 19:33:36 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 19:33:50 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 19:34:11 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/ecc ; USER=root ; COMMAND=/usr/bin/vim /var/www/html/ecc/config.php Sep 12 19:34:11 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 19:34:17 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 19:34:19 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/ecc ; USER=root ; COMMAND=/usr/bin/vim /var/www/html/ecc/config.php Sep 12 19:34:19 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 19:34:37 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 19:34:39 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/ecc ; USER=root ; COMMAND=/usr/bin/vim /var/www/html/ecc/config.php Sep 12 19:34:39 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 19:34:41 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 19:35:25 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/ecc ; USER=root ; COMMAND=/usr/bin/vim _config.php Sep 12 19:35:25 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 19:35:34 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 19:36:02 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/ecc ; USER=root ; COMMAND=/usr/bin/vim config.php Sep 12 19:36:02 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 19:38:33 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 19:38:36 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/ecc ; USER=root ; COMMAND=/usr/bin/vim config.php Sep 12 19:38:36 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 19:38:40 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 19:39:01 ip-172-31-5-39 CRON[3516]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 12 19:39:01 ip-172-31-5-39 CRON[3516]: pam_unix(cron:session): session closed for user root Sep 12 19:39:05 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/ecc ; USER=root ; COMMAND=/usr/bin/apt-get install php7.0-mysql Sep 12 19:39:05 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 19:39:06 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 19:39:10 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/ecc ; USER=root ; COMMAND=/usr/bin/apt-get install php7.0-mysqli Sep 12 19:39:10 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 19:39:10 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 19:39:15 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/ecc ; USER=root ; COMMAND=/usr/bin/apt-get install php7.0-pdo-mysql Sep 12 19:39:15 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 19:39:16 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 19:39:18 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/ecc ; USER=root ; COMMAND=/usr/bin/apt-get install php7.0-pdo Sep 12 19:39:18 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 19:39:18 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 19:39:59 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/ecc ; USER=root ; COMMAND=/usr/bin/vim /var/www/html/ecc/lib/adodb/adodb-time.inc.php Sep 12 19:39:59 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 19:40:22 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 19:40:40 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/ecc ; USER=root ; COMMAND=/usr/bin/vim /var/www/html/ecc/lib/adodb/adodb-time.inc.php Sep 12 19:40:40 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 19:40:49 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 19:40:56 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/ecc ; USER=root ; COMMAND=/usr/bin/vim /var/www/html/ecc/lib/adodb/adodb-time.inc.php Sep 12 19:40:56 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 19:41:03 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 19:41:27 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/ecc ; USER=root ; COMMAND=/bin/cp ../cetesb/lib/adodb/adodb-time.inc.php . Sep 12 19:41:27 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 19:41:27 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 19:41:40 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/ecc ; USER=root ; COMMAND=/bin/cp ../cetesb/lib/adodb/adodb-time.inc.php lib/adodb/ Sep 12 19:41:40 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 19:41:40 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 19:42:09 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/ecc ; USER=root ; COMMAND=/bin/cp ../cetesb/lib/accesslib.php lib/ Sep 12 19:42:09 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 19:42:09 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 19:43:19 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/bkp/ecc ; USER=root ; COMMAND=/bin/tar -xvf ecc.tar.gz Sep 12 19:43:19 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 19:43:24 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 19:43:40 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/bkp/ecc/ecc/lib ; USER=root ; COMMAND=/bin/cp accesslib.php ../../../../ecc/lib/ Sep 12 19:43:40 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 19:43:40 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 19:45:24 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/bkp/ecc/ecc/lib/adodb ; USER=root ; COMMAND=/bin/cp adodb-time.inc.php ../../../../../ecc/lib/adodb/ Sep 12 19:45:24 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 19:45:24 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 19:45:47 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/bkp/ecc/ecc/lib/adodb ; USER=root ; COMMAND=/usr/bin/vim /var/www/html/ecc/lib/adodb/adodb-time.inc.php Sep 12 19:45:47 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 19:45:59 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 19:46:08 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/bkp/ecc/ecc/lib/adodb ; USER=root ; COMMAND=/usr/bin/vim /var/www/html/ecc/lib/adodb/adodb-time.inc.php Sep 12 19:46:09 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 19:46:19 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 19:46:26 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/bkp/ecc/ecc/lib/adodb ; USER=root ; COMMAND=/usr/bin/vim /var/www/html/ecc/lib/adodb/adodb-time.inc.php Sep 12 19:46:26 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 19:47:17 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 19:47:35 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/bkp/ecc/ecc/lib/adodb ; USER=root ; COMMAND=/usr/bin/vim /var/www/html/ecc/lib/accesslib.php Sep 12 19:47:35 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 19:47:59 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 20:05:17 ip-172-31-5-39 sshd[3753]: Accepted publickey for ubuntu from 177.103.176.199 port 49267 ssh2: RSA SHA256:3/91sXvgrhpGwm6BHY9O8YSerXhFGNxSkZn2QEniijY Sep 12 20:05:17 ip-172-31-5-39 sshd[3753]: pam_unix(sshd:session): session opened for user ubuntu by (uid=0) Sep 12 20:05:17 ip-172-31-5-39 systemd-logind[1168]: New session 410 of user ubuntu. Sep 12 20:06:48 ip-172-31-5-39 sshd[3807]: Received disconnect from 177.103.176.199 port 49267:11: disconnected by user Sep 12 20:06:48 ip-172-31-5-39 sshd[3807]: Disconnected from 177.103.176.199 port 49267 Sep 12 20:06:48 ip-172-31-5-39 sshd[3753]: pam_unix(sshd:session): session closed for user ubuntu Sep 12 20:06:48 ip-172-31-5-39 systemd-logind[1168]: Removed session 410. Sep 12 20:06:55 ip-172-31-5-39 sshd[3812]: Accepted publickey for ubuntu from 177.103.176.199 port 16227 ssh2: RSA SHA256:3/91sXvgrhpGwm6BHY9O8YSerXhFGNxSkZn2QEniijY Sep 12 20:06:55 ip-172-31-5-39 sshd[3812]: pam_unix(sshd:session): session opened for user ubuntu by (uid=0) Sep 12 20:06:55 ip-172-31-5-39 systemd-logind[1168]: New session 411 of user ubuntu. Sep 12 20:07:03 ip-172-31-5-39 sshd[3844]: Received disconnect from 177.103.176.199 port 16227:11: disconnected by user Sep 12 20:07:03 ip-172-31-5-39 sshd[3844]: Disconnected from 177.103.176.199 port 16227 Sep 12 20:07:03 ip-172-31-5-39 sshd[3812]: pam_unix(sshd:session): session closed for user ubuntu Sep 12 20:07:03 ip-172-31-5-39 systemd-logind[1168]: Removed session 411. Sep 12 20:07:13 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/bkp ; USER=root ; COMMAND=/bin/mkdir poli Sep 12 20:07:13 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 20:07:13 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 20:07:24 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/bkp/poli ; USER=root ; COMMAND=/bin/mv /home/ubuntu/moodledatapoli.tar.gz /home/ubuntu/poli.tar.gz /home/ubuntu/s3cmd-1.5.0-alpha1.tar.gz . Sep 12 20:07:24 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 20:07:24 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 20:07:32 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/bkp/poli ; USER=root ; COMMAND=/bin/mv s3cmd-1.5.0-alpha1.tar.gz /home/ubuntu/ Sep 12 20:07:32 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 20:07:32 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 20:07:38 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/bkp/poli ; USER=root ; COMMAND=/bin/tar -xvf poli.tar.gz Sep 12 20:07:38 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 20:07:47 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 20:07:55 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/bkp/poli ; USER=root ; COMMAND=/bin/mv poli ../../ Sep 12 20:07:55 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 20:07:55 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 20:08:03 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/bkp/poli ; USER=root ; COMMAND=/bin/tar -xvf moodledatapoli.tar.gz Sep 12 20:08:03 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 20:08:47 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 20:08:59 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/bkp/poli ; USER=root ; COMMAND=/usr/bin/vim /etc/apache2/sites-enabled/000-default.conf Sep 12 20:08:59 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 20:09:01 ip-172-31-5-39 CRON[3903]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 12 20:09:02 ip-172-31-5-39 CRON[3903]: pam_unix(cron:session): session closed for user root Sep 12 20:09:48 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 20:10:19 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/bkp/poli ; USER=root ; COMMAND=/bin/mv moodledatapoli /usr/local/moodledata/ Sep 12 20:10:19 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 20:39:01 ip-172-31-5-39 CRON[3990]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 12 20:39:01 ip-172-31-5-39 CRON[3990]: pam_unix(cron:session): session closed for user root Sep 12 20:45:53 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 21:09:01 ip-172-31-5-39 CRON[4058]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 12 21:09:01 ip-172-31-5-39 CRON[4058]: pam_unix(cron:session): session closed for user root Sep 12 21:10:09 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/bkp/poli ; USER=root ; COMMAND=/usr/bin/vim /etc/apache2/sites-enabled/000-default.conf Sep 12 21:10:09 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 21:10:15 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 21:10:17 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/bkp/poli ; USER=root ; COMMAND=/etc/init.d/apache2 restart Sep 12 21:10:17 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 21:10:20 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 21:11:06 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/poli ; USER=root ; COMMAND=/usr/bin/vim config.php Sep 12 21:11:06 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 21:12:06 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 21:14:01 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/poli ; USER=root ; COMMAND=/usr/bin/vim config.php Sep 12 21:14:01 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 21:14:14 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 21:15:02 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/poli/admin/cli ; USER=root ; COMMAND=/usr/bin/php reset_password.php Sep 12 21:15:02 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 21:15:06 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 21:15:46 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html ; USER=root ; COMMAND=/bin/rm -rf ecc Sep 12 21:15:46 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 21:15:47 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 21:15:50 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html ; USER=root ; COMMAND=/bin/rm -rf eccsm_329/ Sep 12 21:15:50 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 21:15:53 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 21:16:37 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html ; USER=root ; COMMAND=/bin/rm -rf /usr/local/moodledata/moodledataecc Sep 12 21:16:37 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 21:18:27 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 21:20:04 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/poli ; USER=root ; COMMAND=/usr/bin/vim config.php Sep 12 21:20:04 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 21:20:10 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 21:29:11 ip-172-31-5-39 sshd[2578]: Received disconnect from 177.103.176.199 port 41752:11: disconnected by user Sep 12 21:29:11 ip-172-31-5-39 sshd[2578]: Disconnected from 177.103.176.199 port 41752 Sep 12 21:29:11 ip-172-31-5-39 sshd[2517]: pam_unix(sshd:session): session closed for user ubuntu Sep 12 21:29:11 ip-172-31-5-39 systemd-logind[1168]: Removed session 402. Sep 12 21:29:11 ip-172-31-5-39 systemd: pam_unix(systemd-user:session): session closed for user ubuntu Sep 12 21:39:01 ip-172-31-5-39 CRON[4333]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 12 21:39:01 ip-172-31-5-39 CRON[4333]: pam_unix(cron:session): session closed for user root Sep 12 22:05:48 ip-172-31-5-39 sshd[4406]: Accepted publickey for ubuntu from 177.103.176.199 port 27454 ssh2: RSA SHA256:3/91sXvgrhpGwm6BHY9O8YSerXhFGNxSkZn2QEniijY Sep 12 22:05:48 ip-172-31-5-39 sshd[4406]: pam_unix(sshd:session): session opened for user ubuntu by (uid=0) Sep 12 22:05:48 ip-172-31-5-39 systemd: pam_unix(systemd-user:session): session opened for user ubuntu by (uid=0) Sep 12 22:05:48 ip-172-31-5-39 systemd-logind[1168]: New session 416 of user ubuntu. Sep 12 22:06:23 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/bkp ; USER=root ; COMMAND=/bin/mkdir midia Sep 12 22:06:23 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 22:06:23 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 22:09:01 ip-172-31-5-39 CRON[4498]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 12 22:09:01 ip-172-31-5-39 CRON[4498]: pam_unix(cron:session): session closed for user root Sep 12 22:12:09 ip-172-31-5-39 sshd[4553]: Accepted publickey for ubuntu from 177.103.176.199 port 60597 ssh2: RSA SHA256:3/91sXvgrhpGwm6BHY9O8YSerXhFGNxSkZn2QEniijY Sep 12 22:12:09 ip-172-31-5-39 sshd[4553]: pam_unix(sshd:session): session opened for user ubuntu by (uid=0) Sep 12 22:12:09 ip-172-31-5-39 systemd-logind[1168]: New session 418 of user ubuntu. Sep 12 22:12:18 ip-172-31-5-39 sshd[4585]: Received disconnect from 177.103.176.199 port 60597:11: disconnected by user Sep 12 22:12:18 ip-172-31-5-39 sshd[4585]: Disconnected from 177.103.176.199 port 60597 Sep 12 22:12:18 ip-172-31-5-39 sshd[4553]: pam_unix(sshd:session): session closed for user ubuntu Sep 12 22:12:18 ip-172-31-5-39 systemd-logind[1168]: Removed session 418. Sep 12 22:12:25 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/bkp/midia ; USER=root ; COMMAND=/bin/mv /home/ubuntu/midia.tar.gz . Sep 12 22:12:25 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 22:12:25 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 22:12:31 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/bkp/midia ; USER=root ; COMMAND=/bin/tar -xvf midia.tar.gz Sep 12 22:12:31 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 22:12:38 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 22:12:43 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/bkp/midia ; USER=root ; COMMAND=/bin/mv midia ../../ Sep 12 22:12:43 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 22:12:43 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 22:14:42 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/midia ; USER=root ; COMMAND=/usr/bin/vim config.php Sep 12 22:14:42 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 22:15:06 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 22:15:10 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/midia ; USER=root ; COMMAND=/usr/bin/vim config.php Sep 12 22:15:10 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 22:15:27 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 22:16:32 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/midia ; USER=root ; COMMAND=/usr/bin/vim /etc/apache2/sites-enabled/000-default.conf Sep 12 22:16:32 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 22:17:00 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 22:17:02 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/midia ; USER=root ; COMMAND=/etc/init.d/apache2 restart Sep 12 22:17:02 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 22:17:05 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 22:17:52 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/midia ; USER=root ; COMMAND=/usr/bin/vim config.php Sep 12 22:17:52 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 22:18:03 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 22:18:59 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/midia ; USER=root ; COMMAND=/usr/bin/vim config.php Sep 12 22:18:59 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 22:19:06 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 22:19:18 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/midia ; USER=root ; COMMAND=/usr/bin/vim /var/www/html/midia/lib/adodb/adodb-time.inc.php Sep 12 22:19:18 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 22:19:30 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 22:19:47 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/midia ; USER=root ; COMMAND=/usr/bin/vim /var/www/html/midia/lib/textlib.class.php Sep 12 22:19:47 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 22:19:52 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 22:20:07 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/midia ; USER=root ; COMMAND=/usr/bin/vim /var/www/html/midia/lib/accesslib.php Sep 12 22:20:07 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 22:20:20 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 22:20:45 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/midia ; USER=root ; COMMAND=/usr/bin/vim /var/www/html/midia/config.php Sep 12 22:20:45 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 22:20:52 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 22:21:12 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/midia ; USER=root ; COMMAND=/usr/bin/vim /var/www/html/midia/config.php Sep 12 22:21:12 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 22:21:19 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 22:22:07 ip-172-31-5-39 sshd[4803]: Accepted publickey for ubuntu from 177.103.176.199 port 11781 ssh2: RSA SHA256:3/91sXvgrhpGwm6BHY9O8YSerXhFGNxSkZn2QEniijY Sep 12 22:22:07 ip-172-31-5-39 sshd[4803]: pam_unix(sshd:session): session opened for user ubuntu by (uid=0) Sep 12 22:22:07 ip-172-31-5-39 systemd-logind[1168]: New session 419 of user ubuntu. Sep 12 22:25:06 ip-172-31-5-39 sshd[4835]: Received disconnect from 177.103.176.199 port 11781:11: disconnected by user Sep 12 22:25:06 ip-172-31-5-39 sshd[4835]: Disconnected from 177.103.176.199 port 11781 Sep 12 22:25:06 ip-172-31-5-39 sshd[4803]: pam_unix(sshd:session): session closed for user ubuntu Sep 12 22:25:06 ip-172-31-5-39 systemd-logind[1168]: Removed session 419. Sep 12 22:25:19 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/bkp/midia ; USER=root ; COMMAND=/bin/mv /home/ubuntu/moodledatamidia.tar.gz . Sep 12 22:25:19 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 22:25:19 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 22:25:25 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/bkp/midia ; USER=root ; COMMAND=/bin/tar -xvf moodledatamidia.tar.gz Sep 12 22:25:25 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 22:26:51 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 22:26:59 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/bkp/midia ; USER=root ; COMMAND=/bin/mv moodledatamidia /usr/local/moodledata/ Sep 12 22:26:59 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 22:26:59 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 22:28:25 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/bkp/midia ; USER=root ; COMMAND=/bin/rm -rf /usr/local/moodledata/moodledatamidia/ Sep 12 22:28:25 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 22:28:25 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 22:28:33 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/bkp/midia ; USER=root ; COMMAND=/bin/mv moodledatamidia /usr/local/moodledata/ Sep 12 22:28:33 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 22:36:28 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 22:39:01 ip-172-31-5-39 CRON[4977]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 12 22:39:02 ip-172-31-5-39 CRON[4977]: pam_unix(cron:session): session closed for user root Sep 12 22:39:55 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/midia ; USER=root ; COMMAND=/usr/bin/vim /var/www/html/midia/lib/adodb/adodb-time.inc.php Sep 12 22:39:55 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 22:40:00 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 22:40:11 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/midia ; USER=root ; COMMAND=/usr/bin/vim /var/www/html/midia/lib/accesslib.php Sep 12 22:40:11 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 22:40:17 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 22:41:45 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/midia ; USER=root ; COMMAND=/usr/bin/vim config.php Sep 12 22:41:45 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 22:42:08 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 22:42:38 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/midia ; USER=root ; COMMAND=/usr/bin/vim config.php Sep 12 22:42:38 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 22:42:52 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 22:43:07 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/midia ; USER=root ; COMMAND=/usr/bin/vim config.php Sep 12 22:43:07 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 22:43:32 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 22:43:43 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/midia ; USER=root ; COMMAND=/usr/bin/vim config.php Sep 12 22:43:43 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 22:43:54 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 22:44:05 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/midia ; USER=root ; COMMAND=/usr/bin/vim config.php Sep 12 22:44:05 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 22:44:23 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 22:44:34 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/midia ; USER=root ; COMMAND=/usr/bin/vim config.php Sep 12 22:44:34 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 22:44:55 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 22:45:00 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/midia ; USER=root ; COMMAND=/usr/bin/vim config.php Sep 12 22:45:00 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 22:45:24 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 22:46:09 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/midia ; USER=root ; COMMAND=/usr/bin/vim config.php Sep 12 22:46:09 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 22:46:33 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 22:47:18 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html ; USER=root ; COMMAND=/bin/rm -rf midia/ Sep 12 22:47:18 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 22:47:19 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 22:47:29 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html ; USER=root ; COMMAND=/bin/rm -rf /usr/local/moodledata/moodledatamidia Sep 12 22:47:29 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 22:49:37 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 22:49:52 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/bkp ; USER=root ; COMMAND=/bin/rm -rf ecc midia/ Sep 12 22:49:52 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 22:49:53 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 22:50:04 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/bkp ; USER=root ; COMMAND=/usr/bin/vim /etc/apache2/sites-enabled/000-default.conf Sep 12 22:50:04 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 22:50:16 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 22:50:18 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/bkp ; USER=root ; COMMAND=/etc/init.d/apache2 restart Sep 12 22:50:18 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 12 22:50:21 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 12 22:50:27 ip-172-31-5-39 sshd[4467]: Received disconnect from 177.103.176.199 port 27454:11: disconnected by user Sep 12 22:50:27 ip-172-31-5-39 sshd[4467]: Disconnected from 177.103.176.199 port 27454 Sep 12 22:50:27 ip-172-31-5-39 sshd[4406]: pam_unix(sshd:session): session closed for user ubuntu Sep 12 22:50:27 ip-172-31-5-39 systemd-logind[1168]: Removed session 416. Sep 12 22:50:27 ip-172-31-5-39 systemd: pam_unix(systemd-user:session): session closed for user ubuntu Sep 12 23:09:01 ip-172-31-5-39 CRON[5259]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 12 23:09:01 ip-172-31-5-39 CRON[5259]: pam_unix(cron:session): session closed for user root Sep 12 23:39:01 ip-172-31-5-39 CRON[5326]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 12 23:39:01 ip-172-31-5-39 CRON[5326]: pam_unix(cron:session): session closed for user root Sep 13 00:09:01 ip-172-31-5-39 CRON[5393]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 13 00:09:01 ip-172-31-5-39 CRON[5393]: pam_unix(cron:session): session closed for user root Sep 13 00:39:01 ip-172-31-5-39 CRON[5460]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 13 00:39:01 ip-172-31-5-39 CRON[5460]: pam_unix(cron:session): session closed for user root Sep 13 01:09:01 ip-172-31-5-39 CRON[5534]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 13 01:09:01 ip-172-31-5-39 CRON[5534]: pam_unix(cron:session): session closed for user root Sep 13 01:39:01 ip-172-31-5-39 CRON[5601]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 13 01:39:01 ip-172-31-5-39 CRON[5601]: pam_unix(cron:session): session closed for user root Sep 13 02:09:01 ip-172-31-5-39 CRON[5668]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 13 02:09:01 ip-172-31-5-39 CRON[5668]: pam_unix(cron:session): session closed for user root Sep 13 02:39:01 ip-172-31-5-39 CRON[5738]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 13 02:39:01 ip-172-31-5-39 CRON[5738]: pam_unix(cron:session): session closed for user root Sep 13 03:09:01 ip-172-31-5-39 CRON[5817]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 13 03:09:01 ip-172-31-5-39 CRON[5817]: pam_unix(cron:session): session closed for user root Sep 13 03:39:01 ip-172-31-5-39 CRON[5887]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 13 03:39:01 ip-172-31-5-39 CRON[5887]: pam_unix(cron:session): session closed for user root Sep 13 04:09:01 ip-172-31-5-39 CRON[6239]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 13 04:09:01 ip-172-31-5-39 CRON[6239]: pam_unix(cron:session): session closed for user root Sep 13 04:39:01 ip-172-31-5-39 CRON[6306]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 13 04:39:01 ip-172-31-5-39 CRON[6306]: pam_unix(cron:session): session closed for user root Sep 13 05:09:01 ip-172-31-5-39 CRON[6376]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 13 05:09:01 ip-172-31-5-39 CRON[6376]: pam_unix(cron:session): session closed for user root Sep 13 05:39:01 ip-172-31-5-39 CRON[6455]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 13 05:39:01 ip-172-31-5-39 CRON[6455]: pam_unix(cron:session): session closed for user root Sep 13 06:09:01 ip-172-31-5-39 CRON[6522]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 13 06:09:01 ip-172-31-5-39 CRON[6522]: pam_unix(cron:session): session closed for user root Sep 13 06:39:01 ip-172-31-5-39 CRON[6589]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 13 06:39:02 ip-172-31-5-39 CRON[6589]: pam_unix(cron:session): session closed for user root Sep 13 07:09:01 ip-172-31-5-39 CRON[6656]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 13 07:09:01 ip-172-31-5-39 CRON[6656]: pam_unix(cron:session): session closed for user root Sep 13 07:39:01 ip-172-31-5-39 CRON[6723]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 13 07:39:01 ip-172-31-5-39 CRON[6723]: pam_unix(cron:session): session closed for user root Sep 13 08:09:01 ip-172-31-5-39 CRON[6790]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 13 08:09:01 ip-172-31-5-39 CRON[6790]: pam_unix(cron:session): session closed for user root Sep 13 08:39:01 ip-172-31-5-39 CRON[6869]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 13 08:39:01 ip-172-31-5-39 CRON[6869]: pam_unix(cron:session): session closed for user root Sep 13 09:09:01 ip-172-31-5-39 CRON[6936]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 13 09:09:01 ip-172-31-5-39 CRON[6936]: pam_unix(cron:session): session closed for user root Sep 13 09:39:01 ip-172-31-5-39 CRON[7068]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 13 09:39:01 ip-172-31-5-39 CRON[7068]: pam_unix(cron:session): session closed for user root Sep 13 10:09:01 ip-172-31-5-39 CRON[7135]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 13 10:09:01 ip-172-31-5-39 CRON[7135]: pam_unix(cron:session): session closed for user root Sep 13 10:39:01 ip-172-31-5-39 CRON[7202]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 13 10:39:01 ip-172-31-5-39 CRON[7202]: pam_unix(cron:session): session closed for user root Sep 13 11:09:01 ip-172-31-5-39 CRON[7269]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 13 11:09:01 ip-172-31-5-39 CRON[7269]: pam_unix(cron:session): session closed for user root Sep 13 11:39:01 ip-172-31-5-39 CRON[7336]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 13 11:39:02 ip-172-31-5-39 CRON[7336]: pam_unix(cron:session): session closed for user root Sep 13 12:09:01 ip-172-31-5-39 CRON[7404]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 13 12:09:01 ip-172-31-5-39 CRON[7404]: pam_unix(cron:session): session closed for user root Sep 13 12:39:01 ip-172-31-5-39 CRON[7475]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 13 12:39:01 ip-172-31-5-39 CRON[7475]: pam_unix(cron:session): session closed for user root Sep 13 13:09:01 ip-172-31-5-39 CRON[7545]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 13 13:09:01 ip-172-31-5-39 CRON[7545]: pam_unix(cron:session): session closed for user root Sep 13 13:39:01 ip-172-31-5-39 CRON[7617]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 13 13:39:01 ip-172-31-5-39 CRON[7617]: pam_unix(cron:session): session closed for user root Sep 13 13:45:11 ip-172-31-5-39 sshd[7684]: Accepted publickey for ubuntu from 177.103.176.199 port 24963 ssh2: RSA SHA256:3/91sXvgrhpGwm6BHY9O8YSerXhFGNxSkZn2QEniijY Sep 13 13:45:11 ip-172-31-5-39 sshd[7684]: pam_unix(sshd:session): session opened for user ubuntu by (uid=0) Sep 13 13:45:11 ip-172-31-5-39 systemd: pam_unix(systemd-user:session): session opened for user ubuntu by (uid=0) Sep 13 13:45:11 ip-172-31-5-39 systemd-logind[1168]: New session 451 of user ubuntu. Sep 13 13:45:33 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html ; USER=root ; COMMAND=/bin/rm -rf teste/ Sep 13 13:45:33 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 13 13:45:36 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 13 13:46:25 ip-172-31-5-39 sshd[7775]: Accepted publickey for ubuntu from 177.103.176.199 port 27549 ssh2: RSA SHA256:3/91sXvgrhpGwm6BHY9O8YSerXhFGNxSkZn2QEniijY Sep 13 13:46:25 ip-172-31-5-39 sshd[7775]: pam_unix(sshd:session): session opened for user ubuntu by (uid=0) Sep 13 13:46:25 ip-172-31-5-39 systemd-logind[1168]: New session 452 of user ubuntu. Sep 13 13:46:32 ip-172-31-5-39 sshd[7807]: Received disconnect from 177.103.176.199 port 27549:11: disconnected by user Sep 13 13:46:32 ip-172-31-5-39 sshd[7807]: Disconnected from 177.103.176.199 port 27549 Sep 13 13:46:32 ip-172-31-5-39 sshd[7775]: pam_unix(sshd:session): session closed for user ubuntu Sep 13 13:46:32 ip-172-31-5-39 systemd-logind[1168]: Removed session 452. Sep 13 13:46:40 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/bkp ; USER=root ; COMMAND=/bin/mkdir professoronline Sep 13 13:46:40 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 13 13:46:40 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 13 13:46:50 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/bkp/professoronline ; USER=root ; COMMAND=/bin/mv /home/ubuntu/professoronline.tar.gz . Sep 13 13:46:50 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 13 13:46:50 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 13 13:46:54 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/bkp/professoronline ; USER=root ; COMMAND=/bin/tar -xvf professoronline.tar.gz Sep 13 13:46:54 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 13 13:47:01 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 13 13:47:05 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/bkp/professoronline ; USER=root ; COMMAND=/bin/mv professoronline ../../ Sep 13 13:47:05 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 13 13:47:05 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 13 13:55:30 ip-172-31-5-39 sshd[7895]: Accepted publickey for ubuntu from 177.103.176.199 port 42321 ssh2: RSA SHA256:3/91sXvgrhpGwm6BHY9O8YSerXhFGNxSkZn2QEniijY Sep 13 13:55:30 ip-172-31-5-39 sshd[7895]: pam_unix(sshd:session): session opened for user ubuntu by (uid=0) Sep 13 13:55:30 ip-172-31-5-39 systemd-logind[1168]: New session 453 of user ubuntu. Sep 13 13:57:10 ip-172-31-5-39 sshd[7927]: Received disconnect from 177.103.176.199 port 42321:11: disconnected by user Sep 13 13:57:10 ip-172-31-5-39 sshd[7927]: Disconnected from 177.103.176.199 port 42321 Sep 13 13:57:10 ip-172-31-5-39 sshd[7895]: pam_unix(sshd:session): session closed for user ubuntu Sep 13 13:57:10 ip-172-31-5-39 systemd-logind[1168]: Removed session 453. Sep 13 13:57:25 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/bkp/professoronline ; USER=root ; COMMAND=/bin/mv /home/ubuntu/moodledataprofessoronline.tar.gz . Sep 13 13:57:25 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 13 13:57:25 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 13 13:57:29 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/bkp/professoronline ; USER=root ; COMMAND=/bin/tar -xvf moodledataprofessoronline.tar.gz Sep 13 13:57:29 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 13 13:58:14 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 13 13:58:44 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/bkp/professoronline ; USER=root ; COMMAND=/bin/mv moodledataprofessoronline /usr/local/moodledata/ Sep 13 13:58:44 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 13 14:09:01 ip-172-31-5-39 CRON[7977]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 13 14:09:01 ip-172-31-5-39 CRON[7977]: pam_unix(cron:session): session closed for user root Sep 13 14:10:43 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 13 14:12:55 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/bkp/professoronline ; USER=root ; COMMAND=/bin/chown www-data:www-data /usr/local/moodledata/ -R Sep 13 14:12:55 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 13 14:30:31 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 13 14:30:49 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/bkp/professoronline ; USER=root ; COMMAND=/usr/bin/vim /etc/crontab Sep 13 14:30:49 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 13 14:31:31 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 13 14:31:38 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/bkp/professoronline ; USER=root ; COMMAND=/usr/bin/vim /etc/apache2/sites-enabled/000-default.conf Sep 13 14:31:38 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 13 14:32:36 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 13 14:33:04 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/professoronline ; USER=root ; COMMAND=/usr/bin/vim config.php Sep 13 14:33:04 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 13 14:34:34 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 13 14:34:39 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/professoronline ; USER=root ; COMMAND=/usr/bin/vim config.php Sep 13 14:34:39 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 13 14:35:20 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 13 14:35:24 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/professoronline ; USER=root ; COMMAND=/etc/init.d/apache2 restart Sep 13 14:35:24 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 13 14:35:27 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 13 14:39:01 ip-172-31-5-39 CRON[8235]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 13 14:39:01 ip-172-31-5-39 CRON[8235]: pam_unix(cron:session): session closed for user root Sep 13 14:45:41 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/bkp ; USER=root ; COMMAND=/bin/mkdir mogi Sep 13 14:45:41 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 13 14:45:41 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 13 14:45:57 ip-172-31-5-39 sshd[8295]: Accepted publickey for ubuntu from 177.103.176.199 port 41233 ssh2: RSA SHA256:3/91sXvgrhpGwm6BHY9O8YSerXhFGNxSkZn2QEniijY Sep 13 14:45:57 ip-172-31-5-39 sshd[8295]: pam_unix(sshd:session): session opened for user ubuntu by (uid=0) Sep 13 14:45:57 ip-172-31-5-39 systemd-logind[1168]: New session 456 of user ubuntu. Sep 13 14:46:04 ip-172-31-5-39 sshd[8349]: Received disconnect from 177.103.176.199 port 41233:11: disconnected by user Sep 13 14:46:04 ip-172-31-5-39 sshd[8349]: Disconnected from 177.103.176.199 port 41233 Sep 13 14:46:04 ip-172-31-5-39 sshd[8295]: pam_unix(sshd:session): session closed for user ubuntu Sep 13 14:46:04 ip-172-31-5-39 systemd-logind[1168]: Removed session 456. Sep 13 14:46:10 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/bkp/mogi ; USER=root ; COMMAND=/bin/mv /home/ubuntu/mogi.tar.gz . Sep 13 14:46:10 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 13 14:46:10 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 13 14:46:13 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/bkp/mogi ; USER=root ; COMMAND=/bin/tar -xvf mogi.tar.gz Sep 13 14:46:13 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 13 14:46:21 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 13 14:46:33 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/bkp/mogi ; USER=root ; COMMAND=/bin/mv mogi ../../ Sep 13 14:46:33 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 13 14:46:33 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 13 14:47:21 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/mogi ; USER=root ; COMMAND=/usr/bin/vim config.php Sep 13 14:47:21 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 13 14:48:05 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 13 14:48:10 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/mogi ; USER=root ; COMMAND=/usr/bin/vim config.php Sep 13 14:48:10 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 13 14:48:39 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 13 14:48:40 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/mogi ; USER=root ; COMMAND=/usr/bin/vim config.php Sep 13 14:48:40 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 13 14:49:51 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 13 14:50:08 ip-172-31-5-39 sshd[8417]: Accepted publickey for ubuntu from 177.103.176.199 port 42808 ssh2: RSA SHA256:3/91sXvgrhpGwm6BHY9O8YSerXhFGNxSkZn2QEniijY Sep 13 14:50:08 ip-172-31-5-39 sshd[8417]: pam_unix(sshd:session): session opened for user ubuntu by (uid=0) Sep 13 14:50:08 ip-172-31-5-39 systemd-logind[1168]: New session 457 of user ubuntu. Sep 13 14:50:51 ip-172-31-5-39 sshd[8449]: Received disconnect from 177.103.176.199 port 42808:11: disconnected by user Sep 13 14:50:51 ip-172-31-5-39 sshd[8449]: Disconnected from 177.103.176.199 port 42808 Sep 13 14:50:51 ip-172-31-5-39 sshd[8417]: pam_unix(sshd:session): session closed for user ubuntu Sep 13 14:50:51 ip-172-31-5-39 systemd-logind[1168]: Removed session 457. Sep 13 14:50:58 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/bkp/mogi ; USER=root ; COMMAND=/bin/mv /home/ubuntu/moodledatamogi.tar.gz . Sep 13 14:50:58 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 13 14:50:58 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 13 14:51:01 ip-172-31-5-39 CRON[8468]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 13 14:51:01 ip-172-31-5-39 CRON[8468]: pam_unix(cron:session): session closed for user root Sep 13 14:51:02 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/bkp/mogi ; USER=root ; COMMAND=/bin/tar -xvf moodledatamogi.tar.gz Sep 13 14:51:02 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 13 14:51:24 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 13 14:51:34 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/bkp/mogi ; USER=root ; COMMAND=/bin/chown www-data:www-data moodledatamogi -R Sep 13 14:51:34 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 13 14:51:34 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 13 14:51:43 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/bkp/mogi ; USER=root ; COMMAND=/bin/mv moodledatamogi /usr/local/moodledata/ Sep 13 14:51:43 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 13 14:56:59 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 13 14:57:23 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/bkp/mogi ; USER=root ; COMMAND=/usr/bin/vim /etc/apache2/sites-enabled/000-default.conf Sep 13 14:57:23 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 13 14:58:05 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 13 14:58:08 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html/bkp/mogi ; USER=root ; COMMAND=/etc/init.d/apache2 restart Sep 13 14:58:08 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 13 14:58:10 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 13 15:08:11 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html ; USER=root ; COMMAND=/usr/bin/vim /etc/apache2/sites-enabled/000-default.conf Sep 13 15:08:11 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 13 15:09:01 ip-172-31-5-39 CRON[8626]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 13 15:09:02 ip-172-31-5-39 CRON[8626]: pam_unix(cron:session): session closed for user root Sep 13 15:09:08 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 13 15:09:10 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html ; USER=root ; COMMAND=/etc/init.d/apache2 restart Sep 13 15:09:10 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 13 15:09:22 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 13 15:12:46 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/www/html ; USER=root ; COMMAND=/usr/bin/vim /etc/apache2/sites-enabled/000-default.conf Sep 13 15:12:46 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 13 15:14:24 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 13 15:15:37 ip-172-31-5-39 sshd[7745]: Received disconnect from 177.103.176.199 port 24963:11: disconnected by user Sep 13 15:15:37 ip-172-31-5-39 sshd[7745]: Disconnected from 177.103.176.199 port 24963 Sep 13 15:15:37 ip-172-31-5-39 sshd[7684]: pam_unix(sshd:session): session closed for user ubuntu Sep 13 15:15:37 ip-172-31-5-39 systemd-logind[1168]: Removed session 451. Sep 13 15:15:37 ip-172-31-5-39 systemd: pam_unix(systemd-user:session): session closed for user ubuntu Sep 13 15:39:01 ip-172-31-5-39 CRON[8811]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 13 15:39:01 ip-172-31-5-39 CRON[8811]: pam_unix(cron:session): session closed for user root Sep 13 16:09:01 ip-172-31-5-39 CRON[8879]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 13 16:09:01 ip-172-31-5-39 CRON[8879]: pam_unix(cron:session): session closed for user root Sep 13 16:39:01 ip-172-31-5-39 CRON[8946]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 13 16:39:01 ip-172-31-5-39 CRON[8946]: pam_unix(cron:session): session closed for user root Sep 13 16:52:35 ip-172-31-5-39 sshd[9013]: Accepted publickey for ubuntu from 177.103.176.199 port 3599 ssh2: RSA SHA256:3/91sXvgrhpGwm6BHY9O8YSerXhFGNxSkZn2QEniijY Sep 13 16:52:35 ip-172-31-5-39 sshd[9013]: pam_unix(sshd:session): session opened for user ubuntu by (uid=0) Sep 13 16:52:35 ip-172-31-5-39 systemd-logind[1168]: New session 463 of user ubuntu. Sep 13 16:52:35 ip-172-31-5-39 systemd: pam_unix(systemd-user:session): session opened for user ubuntu by (uid=0) Sep 13 16:53:11 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/log/apache2 ; USER=root ; COMMAND=/usr/bin/vim /etc/apache2/sites-enabled/000-default.conf Sep 13 16:53:11 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 13 16:53:40 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 13 16:53:55 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/log/apache2 ; USER=root ; COMMAND=/bin/rm -rf publico-poli-access_log publico-poli-error.log Sep 13 16:53:55 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 13 16:53:55 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 13 16:53:58 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/log/apache2 ; USER=root ; COMMAND=/usr/bin/vim /etc/apache2/sites-enabled/000-default.conf Sep 13 16:53:58 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 13 16:54:04 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 13 16:54:20 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/log/apache2 ; USER=root ; COMMAND=/bin/rm -rf poli-access_log Sep 13 16:54:20 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 13 16:54:20 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 13 16:54:51 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/log/apache2 ; USER=root ; COMMAND=/bin/rm -rf eccava-error.log Sep 13 16:54:51 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 13 16:54:51 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 13 16:54:54 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/log/apache2 ; USER=root ; COMMAND=/bin/rm -rf eccava.log Sep 13 16:54:54 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 13 16:54:54 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 13 16:55:13 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/var/log/apache2 ; USER=root ; COMMAND=/usr/bin/vim /etc/apache2/sites-enabled/000-default.conf Sep 13 16:55:13 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 13 16:55:25 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 13 16:55:51 ip-172-31-5-39 sshd[9075]: Received disconnect from 177.103.176.199 port 3599:11: disconnected by user Sep 13 16:55:51 ip-172-31-5-39 sshd[9075]: Disconnected from 177.103.176.199 port 3599 Sep 13 16:55:51 ip-172-31-5-39 sshd[9013]: pam_unix(sshd:session): session closed for user ubuntu Sep 13 16:55:51 ip-172-31-5-39 systemd-logind[1168]: Removed session 463. Sep 13 17:09:01 ip-172-31-5-39 CRON[9181]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 13 17:09:01 ip-172-31-5-39 CRON[9181]: pam_unix(cron:session): session closed for user root Sep 13 17:39:01 ip-172-31-5-39 CRON[9248]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 13 17:39:01 ip-172-31-5-39 CRON[9248]: pam_unix(cron:session): session closed for user root Sep 13 18:09:01 ip-172-31-5-39 CRON[9315]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 13 18:09:01 ip-172-31-5-39 CRON[9315]: pam_unix(cron:session): session closed for user root Sep 13 18:39:01 ip-172-31-5-39 CRON[9382]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 13 18:39:01 ip-172-31-5-39 CRON[9382]: pam_unix(cron:session): session closed for user root Sep 13 19:09:01 ip-172-31-5-39 CRON[9449]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 13 19:09:01 ip-172-31-5-39 CRON[9449]: pam_unix(cron:session): session closed for user root Sep 13 19:39:01 ip-172-31-5-39 CRON[9528]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 13 19:39:02 ip-172-31-5-39 CRON[9528]: pam_unix(cron:session): session closed for user root Sep 13 20:09:01 ip-172-31-5-39 CRON[9595]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 13 20:09:01 ip-172-31-5-39 CRON[9595]: pam_unix(cron:session): session closed for user root Sep 13 20:39:01 ip-172-31-5-39 CRON[9662]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 13 20:39:01 ip-172-31-5-39 CRON[9662]: pam_unix(cron:session): session closed for user root Sep 13 21:09:01 ip-172-31-5-39 CRON[9729]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 13 21:09:01 ip-172-31-5-39 CRON[9729]: pam_unix(cron:session): session closed for user root Sep 13 21:39:01 ip-172-31-5-39 CRON[9796]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 13 21:39:01 ip-172-31-5-39 CRON[9796]: pam_unix(cron:session): session closed for user root Sep 13 22:09:01 ip-172-31-5-39 CRON[9863]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 13 22:09:01 ip-172-31-5-39 CRON[9863]: pam_unix(cron:session): session closed for user root Sep 13 22:39:01 ip-172-31-5-39 CRON[9930]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 13 22:39:01 ip-172-31-5-39 CRON[9930]: pam_unix(cron:session): session closed for user root Sep 13 23:09:01 ip-172-31-5-39 CRON[10009]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 13 23:09:01 ip-172-31-5-39 CRON[10009]: pam_unix(cron:session): session closed for user root Sep 13 23:39:01 ip-172-31-5-39 CRON[10076]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 13 23:39:01 ip-172-31-5-39 CRON[10076]: pam_unix(cron:session): session closed for user root Sep 14 00:09:01 ip-172-31-5-39 CRON[10143]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 14 00:09:01 ip-172-31-5-39 CRON[10143]: pam_unix(cron:session): session closed for user root Sep 14 00:39:01 ip-172-31-5-39 CRON[10210]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 14 00:39:02 ip-172-31-5-39 CRON[10210]: pam_unix(cron:session): session closed for user root Sep 14 01:09:01 ip-172-31-5-39 CRON[10277]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 14 01:09:01 ip-172-31-5-39 CRON[10277]: pam_unix(cron:session): session closed for user root Sep 14 01:39:01 ip-172-31-5-39 CRON[10344]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 14 01:39:01 ip-172-31-5-39 CRON[10344]: pam_unix(cron:session): session closed for user root Sep 14 02:09:01 ip-172-31-5-39 CRON[10416]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 14 02:09:01 ip-172-31-5-39 CRON[10416]: pam_unix(cron:session): session closed for user root Sep 14 02:39:01 ip-172-31-5-39 CRON[10483]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 14 02:39:01 ip-172-31-5-39 CRON[10483]: pam_unix(cron:session): session closed for user root Sep 14 03:09:01 ip-172-31-5-39 CRON[10562]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 14 03:09:01 ip-172-31-5-39 CRON[10562]: pam_unix(cron:session): session closed for user root Sep 14 03:39:01 ip-172-31-5-39 CRON[10629]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 14 03:39:01 ip-172-31-5-39 CRON[10629]: pam_unix(cron:session): session closed for user root Sep 14 04:09:01 ip-172-31-5-39 CRON[10696]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 14 04:09:01 ip-172-31-5-39 CRON[10696]: pam_unix(cron:session): session closed for user root Sep 14 04:39:01 ip-172-31-5-39 CRON[10763]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 14 04:39:01 ip-172-31-5-39 CRON[10763]: pam_unix(cron:session): session closed for user root Sep 14 05:09:01 ip-172-31-5-39 CRON[11099]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 14 05:09:02 ip-172-31-5-39 CRON[11099]: pam_unix(cron:session): session closed for user root Sep 14 05:39:01 ip-172-31-5-39 CRON[11166]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 14 05:39:01 ip-172-31-5-39 CRON[11166]: pam_unix(cron:session): session closed for user root Sep 14 06:09:01 ip-172-31-5-39 CRON[11245]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 14 06:09:01 ip-172-31-5-39 CRON[11245]: pam_unix(cron:session): session closed for user root Sep 14 06:39:01 ip-172-31-5-39 CRON[11312]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 14 06:39:01 ip-172-31-5-39 CRON[11312]: pam_unix(cron:session): session closed for user root Sep 14 07:09:01 ip-172-31-5-39 CRON[11379]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 14 07:09:01 ip-172-31-5-39 CRON[11379]: pam_unix(cron:session): session closed for user root Sep 14 07:39:01 ip-172-31-5-39 CRON[11446]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 14 07:39:01 ip-172-31-5-39 CRON[11446]: pam_unix(cron:session): session closed for user root Sep 14 08:09:01 ip-172-31-5-39 CRON[11513]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 14 08:09:01 ip-172-31-5-39 CRON[11513]: pam_unix(cron:session): session closed for user root Sep 14 08:39:01 ip-172-31-5-39 CRON[11592]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 14 08:39:01 ip-172-31-5-39 CRON[11592]: pam_unix(cron:session): session closed for user root Sep 14 09:09:01 ip-172-31-5-39 CRON[11659]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 14 09:09:01 ip-172-31-5-39 CRON[11659]: pam_unix(cron:session): session closed for user root Sep 14 09:39:01 ip-172-31-5-39 CRON[11791]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 14 09:39:01 ip-172-31-5-39 CRON[11791]: pam_unix(cron:session): session closed for user root Sep 14 10:09:01 ip-172-31-5-39 CRON[11858]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 14 10:09:02 ip-172-31-5-39 CRON[11858]: pam_unix(cron:session): session closed for user root Sep 14 10:39:01 ip-172-31-5-39 CRON[11925]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 14 10:39:01 ip-172-31-5-39 CRON[11925]: pam_unix(cron:session): session closed for user root Sep 14 11:09:01 ip-172-31-5-39 CRON[11992]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 14 11:09:01 ip-172-31-5-39 CRON[11992]: pam_unix(cron:session): session closed for user root Sep 14 11:39:01 ip-172-31-5-39 CRON[12059]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 14 11:39:01 ip-172-31-5-39 CRON[12059]: pam_unix(cron:session): session closed for user root Sep 14 12:09:01 ip-172-31-5-39 CRON[12126]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 14 12:09:01 ip-172-31-5-39 CRON[12126]: pam_unix(cron:session): session closed for user root Sep 14 12:39:01 ip-172-31-5-39 CRON[12205]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 14 12:39:01 ip-172-31-5-39 CRON[12205]: pam_unix(cron:session): session closed for user root Sep 14 13:04:42 ip-172-31-5-39 sshd[12263]: Accepted publickey for ubuntu from 177.103.176.199 port 63458 ssh2: RSA SHA256:3/91sXvgrhpGwm6BHY9O8YSerXhFGNxSkZn2QEniijY Sep 14 13:04:42 ip-172-31-5-39 sshd[12263]: pam_unix(sshd:session): session opened for user ubuntu by (uid=0) Sep 14 13:04:42 ip-172-31-5-39 systemd: pam_unix(systemd-user:session): session opened for user ubuntu by (uid=0) Sep 14 13:04:42 ip-172-31-5-39 systemd-logind[1168]: New session 504 of user ubuntu. Sep 14 13:05:47 ip-172-31-5-39 sshd[12324]: Received disconnect from 177.103.176.199 port 63458:11: disconnected by user Sep 14 13:05:47 ip-172-31-5-39 sshd[12324]: Disconnected from 177.103.176.199 port 63458 Sep 14 13:05:47 ip-172-31-5-39 sshd[12263]: pam_unix(sshd:session): session closed for user ubuntu Sep 14 13:05:47 ip-172-31-5-39 systemd-logind[1168]: Removed session 504. Sep 14 13:09:01 ip-172-31-5-39 CRON[12378]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 14 13:09:01 ip-172-31-5-39 CRON[12378]: pam_unix(cron:session): session closed for user root Sep 14 13:26:49 ip-172-31-5-39 sshd[12440]: Accepted publickey for ubuntu from 177.103.176.199 port 41294 ssh2: RSA SHA256:3/91sXvgrhpGwm6BHY9O8YSerXhFGNxSkZn2QEniijY Sep 14 13:26:49 ip-172-31-5-39 sshd[12440]: pam_unix(sshd:session): session opened for user ubuntu by (uid=0) Sep 14 13:26:49 ip-172-31-5-39 systemd: pam_unix(systemd-user:session): session opened for user ubuntu by (uid=0) Sep 14 13:26:49 ip-172-31-5-39 systemd-logind[1168]: New session 506 of user ubuntu. Sep 14 13:26:53 ip-172-31-5-39 sshd[12480]: Received disconnect from 177.103.176.199 port 41294:11: disconnected by user Sep 14 13:26:53 ip-172-31-5-39 sshd[12480]: Disconnected from 177.103.176.199 port 41294 Sep 14 13:26:53 ip-172-31-5-39 sshd[12440]: pam_unix(sshd:session): session closed for user ubuntu Sep 14 13:26:53 ip-172-31-5-39 systemd-logind[1168]: Removed session 506. Sep 14 13:27:33 ip-172-31-5-39 sshd[12506]: Accepted publickey for ubuntu from 177.103.176.199 port 21293 ssh2: RSA SHA256:3/91sXvgrhpGwm6BHY9O8YSerXhFGNxSkZn2QEniijY Sep 14 13:27:33 ip-172-31-5-39 sshd[12506]: pam_unix(sshd:session): session opened for user ubuntu by (uid=0) Sep 14 13:27:33 ip-172-31-5-39 systemd: pam_unix(systemd-user:session): session opened for user ubuntu by (uid=0) Sep 14 13:27:33 ip-172-31-5-39 systemd-logind[1168]: New session 507 of user ubuntu. Sep 14 13:27:53 ip-172-31-5-39 sshd[12545]: Received disconnect from 177.103.176.199 port 21293:11: disconnected by user Sep 14 13:27:53 ip-172-31-5-39 sshd[12545]: Disconnected from 177.103.176.199 port 21293 Sep 14 13:27:53 ip-172-31-5-39 sshd[12506]: pam_unix(sshd:session): session closed for user ubuntu Sep 14 13:27:53 ip-172-31-5-39 systemd-logind[1168]: Removed session 507. Sep 14 13:39:01 ip-172-31-5-39 CRON[12591]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 14 13:39:01 ip-172-31-5-39 CRON[12591]: pam_unix(cron:session): session closed for user root Sep 14 14:09:01 ip-172-31-5-39 CRON[12658]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 14 14:09:01 ip-172-31-5-39 CRON[12658]: pam_unix(cron:session): session closed for user root Sep 14 14:18:02 ip-172-31-5-39 sshd[12713]: Accepted publickey for ubuntu from 177.103.176.199 port 50080 ssh2: RSA SHA256:3/91sXvgrhpGwm6BHY9O8YSerXhFGNxSkZn2QEniijY Sep 14 14:18:02 ip-172-31-5-39 sshd[12713]: pam_unix(sshd:session): session opened for user ubuntu by (uid=0) Sep 14 14:18:02 ip-172-31-5-39 systemd: pam_unix(systemd-user:session): session opened for user ubuntu by (uid=0) Sep 14 14:18:02 ip-172-31-5-39 systemd-logind[1168]: New session 510 of user ubuntu. Sep 14 14:18:18 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/home/ubuntu ; USER=root ; COMMAND=/usr/bin/vim /etc/crontab Sep 14 14:18:18 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 14 14:18:29 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 14 14:18:42 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/home/ubuntu ; USER=root ; COMMAND=/etc/init.d/cron restart Sep 14 14:18:42 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 14 14:18:42 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 14 14:24:06 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/home/ubuntu ; USER=root ; COMMAND=/usr/bin/vim bkp.sh Sep 14 14:24:06 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 14 14:24:21 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 14 14:24:57 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/home/ubuntu ; USER=root ; COMMAND=/usr/bin/vim bkp.sh Sep 14 14:24:57 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 14 14:26:47 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 14 14:27:06 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/home/ubuntu ; USER=root ; COMMAND=/usr/bin/vim bkp.sh Sep 14 14:27:06 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 14 14:28:22 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 14 14:28:34 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/home/ubuntu ; USER=root ; COMMAND=/usr/bin/vim bkp.sh Sep 14 14:28:34 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 14 14:29:37 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 14 14:33:39 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/home/ubuntu ; USER=root ; COMMAND=/usr/bin/vim bkp. Sep 14 14:33:39 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 14 14:33:40 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 14 14:33:42 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/home/ubuntu ; USER=root ; COMMAND=/usr/bin/vim bkp.sh Sep 14 14:33:42 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 14 14:34:27 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 14 14:39:01 ip-172-31-5-39 CRON[12996]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 14 14:39:01 ip-172-31-5-39 CRON[12996]: pam_unix(cron:session): session closed for user root Sep 14 14:40:37 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/home/ubuntu ; USER=root ; COMMAND=/usr/bin/vim bkp. Sep 14 14:40:37 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 14 14:40:39 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 14 14:40:45 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/home/ubuntu ; USER=root ; COMMAND=/usr/bin/vim bkp.sh Sep 14 14:40:45 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 14 14:41:13 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 14 14:51:59 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/home/ubuntu/s3cmd-1.5.0-alpha1 ; USER=root ; COMMAND=/usr/bin/vim bk Sep 14 14:51:59 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 14 14:52:00 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 14 14:52:10 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/home/ubuntu ; USER=root ; COMMAND=/usr/bin/vim bkp.sh Sep 14 14:52:10 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 14 14:52:31 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 14 14:52:32 ip-172-31-5-39 sshd[12774]: Received disconnect from 177.103.176.199 port 50080:11: disconnected by user Sep 14 14:52:32 ip-172-31-5-39 sshd[12774]: Disconnected from 177.103.176.199 port 50080 Sep 14 14:52:32 ip-172-31-5-39 sshd[12713]: pam_unix(sshd:session): session closed for user ubuntu Sep 14 14:52:32 ip-172-31-5-39 systemd-logind[1168]: Removed session 510. Sep 14 15:09:01 ip-172-31-5-39 CRON[13259]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 14 15:09:02 ip-172-31-5-39 CRON[13259]: pam_unix(cron:session): session closed for user root Sep 14 15:39:01 ip-172-31-5-39 CRON[13326]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 14 15:39:01 ip-172-31-5-39 CRON[13326]: pam_unix(cron:session): session closed for user root Sep 14 16:09:01 ip-172-31-5-39 CRON[13405]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 14 16:09:01 ip-172-31-5-39 CRON[13405]: pam_unix(cron:session): session closed for user root Sep 14 16:39:01 ip-172-31-5-39 CRON[13473]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 14 16:39:01 ip-172-31-5-39 CRON[13473]: pam_unix(cron:session): session closed for user root Sep 14 17:09:01 ip-172-31-5-39 CRON[13540]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 14 17:09:01 ip-172-31-5-39 CRON[13540]: pam_unix(cron:session): session closed for user root Sep 14 17:39:01 ip-172-31-5-39 CRON[13607]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 14 17:39:01 ip-172-31-5-39 CRON[13607]: pam_unix(cron:session): session closed for user root Sep 14 17:51:01 ip-172-31-5-39 CRON[13662]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 14 17:51:01 ip-172-31-5-39 CRON[13662]: pam_unix(cron:session): session closed for user root Sep 14 18:09:01 ip-172-31-5-39 CRON[13677]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 14 18:09:01 ip-172-31-5-39 CRON[13677]: pam_unix(cron:session): session closed for user root Sep 14 18:39:01 ip-172-31-5-39 CRON[13744]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 14 18:39:01 ip-172-31-5-39 CRON[13744]: pam_unix(cron:session): session closed for user root Sep 14 18:54:08 ip-172-31-5-39 sshd[13813]: Accepted publickey for ubuntu from 177.103.176.199 port 16796 ssh2: RSA SHA256:3/91sXvgrhpGwm6BHY9O8YSerXhFGNxSkZn2QEniijY Sep 14 18:54:08 ip-172-31-5-39 sshd[13813]: pam_unix(sshd:session): session opened for user ubuntu by (uid=0) Sep 14 18:54:08 ip-172-31-5-39 systemd: pam_unix(systemd-user:session): session opened for user ubuntu by (uid=0) Sep 14 18:54:08 ip-172-31-5-39 systemd-logind[1168]: New session 521 of user ubuntu. Sep 14 19:00:51 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/home/ubuntu ; USER=root ; COMMAND=./bkp.sh Sep 14 19:00:51 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 14 19:00:53 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 14 19:00:58 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/home/ubuntu ; USER=root ; COMMAND=/usr/bin/apt-get install pigz Sep 14 19:00:58 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 14 19:01:01 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 14 19:01:09 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/home/ubuntu ; USER=root ; COMMAND=/bin/rm -rf mdl_eccsm-2018-09-14.sql.gz moodle-eccsm-2018-09-14.tar.gz Sep 14 19:01:09 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 14 19:01:09 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 14 19:01:12 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/home/ubuntu ; USER=root ; COMMAND=./bkp.sh Sep 14 19:01:12 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 14 19:03:37 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 14 19:04:20 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/home/ubuntu ; USER=root ; COMMAND=/bin/rm -rf mdl_eccsm-2018-09-14.sql.gz mdl_gte-2018-09-14.sql.gz moodle-cetesb-2018-09-14.tar.gz moodle-eccsm-2018-09-14.tar.gz moodle-gte-2018-09-14.tar.gz Sep 14 19:04:20 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 14 19:04:20 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 14 19:04:27 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/home/ubuntu ; USER=root ; COMMAND=./bkp.sh Sep 14 19:04:27 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 14 19:09:01 ip-172-31-5-39 CRON[14276]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 14 19:09:02 ip-172-31-5-39 CRON[14276]: pam_unix(cron:session): session closed for user root Sep 14 19:14:48 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 14 19:16:33 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/home/ubuntu ; USER=root ; COMMAND=/bin/rm -rf mdl_eccsm-2018-09-14.sql.gz Sep 14 19:16:33 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 14 19:16:33 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 14 19:18:06 ip-172-31-5-39 sshd[13874]: Received disconnect from 177.103.176.199 port 16796:11: disconnected by user Sep 14 19:18:06 ip-172-31-5-39 sshd[13874]: Disconnected from 177.103.176.199 port 16796 Sep 14 19:18:06 ip-172-31-5-39 sshd[13813]: pam_unix(sshd:session): session closed for user ubuntu Sep 14 19:18:06 ip-172-31-5-39 systemd-logind[1168]: Removed session 521. Sep 14 19:18:06 ip-172-31-5-39 systemd: pam_unix(systemd-user:session): session closed for user ubuntu Sep 14 19:37:04 ip-172-31-5-39 sshd[14424]: Accepted publickey for ubuntu from 177.103.176.199 port 62112 ssh2: RSA SHA256:3/91sXvgrhpGwm6BHY9O8YSerXhFGNxSkZn2QEniijY Sep 14 19:37:04 ip-172-31-5-39 sshd[14424]: pam_unix(sshd:session): session opened for user ubuntu by (uid=0) Sep 14 19:37:04 ip-172-31-5-39 systemd: pam_unix(systemd-user:session): session opened for user ubuntu by (uid=0) Sep 14 19:37:04 ip-172-31-5-39 systemd-logind[1168]: New session 523 of user ubuntu. Sep 14 19:37:15 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/home/ubuntu ; USER=root ; COMMAND=/bin/cp .s3cfg /root/ Sep 14 19:37:15 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 14 19:37:15 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 14 19:37:26 ip-172-31-5-39 sshd[14464]: Received disconnect from 177.103.176.199 port 62112:11: disconnected by user Sep 14 19:37:26 ip-172-31-5-39 sshd[14464]: Disconnected from 177.103.176.199 port 62112 Sep 14 19:37:26 ip-172-31-5-39 sshd[14424]: pam_unix(sshd:session): session closed for user ubuntu Sep 14 19:37:26 ip-172-31-5-39 systemd-logind[1168]: Removed session 523. Sep 14 19:39:01 ip-172-31-5-39 CRON[14515]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 14 19:39:01 ip-172-31-5-39 CRON[14515]: pam_unix(cron:session): session closed for user root Sep 14 20:09:01 ip-172-31-5-39 CRON[14582]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 14 20:09:01 ip-172-31-5-39 CRON[14582]: pam_unix(cron:session): session closed for user root Sep 14 20:39:01 ip-172-31-5-39 CRON[14649]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 14 20:39:01 ip-172-31-5-39 CRON[14649]: pam_unix(cron:session): session closed for user root Sep 14 21:09:01 ip-172-31-5-39 CRON[14716]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 14 21:09:01 ip-172-31-5-39 CRON[14716]: pam_unix(cron:session): session closed for user root Sep 14 21:39:01 ip-172-31-5-39 CRON[14783]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 14 21:39:01 ip-172-31-5-39 CRON[14783]: pam_unix(cron:session): session closed for user root Sep 14 22:09:01 ip-172-31-5-39 CRON[14850]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 14 22:09:02 ip-172-31-5-39 CRON[14850]: pam_unix(cron:session): session closed for user root Sep 14 22:39:01 ip-172-31-5-39 CRON[14917]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 14 22:39:01 ip-172-31-5-39 CRON[14917]: pam_unix(cron:session): session closed for user root Sep 14 23:09:01 ip-172-31-5-39 CRON[14984]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 14 23:09:01 ip-172-31-5-39 CRON[14984]: pam_unix(cron:session): session closed for user root Sep 14 23:39:01 ip-172-31-5-39 CRON[15051]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 14 23:39:01 ip-172-31-5-39 CRON[15051]: pam_unix(cron:session): session closed for user root Sep 15 00:09:01 ip-172-31-5-39 CRON[15118]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 15 00:09:01 ip-172-31-5-39 CRON[15118]: pam_unix(cron:session): session closed for user root Sep 15 00:39:01 ip-172-31-5-39 CRON[15197]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 15 00:39:01 ip-172-31-5-39 CRON[15197]: pam_unix(cron:session): session closed for user root Sep 15 01:09:01 ip-172-31-5-39 CRON[15264]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 15 01:09:01 ip-172-31-5-39 CRON[15264]: pam_unix(cron:session): session closed for user root Sep 15 01:39:01 ip-172-31-5-39 CRON[15331]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 15 01:39:01 ip-172-31-5-39 CRON[15331]: pam_unix(cron:session): session closed for user root Sep 15 02:09:01 ip-172-31-5-39 CRON[15398]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 15 02:09:01 ip-172-31-5-39 CRON[15398]: pam_unix(cron:session): session closed for user root Sep 15 02:39:01 ip-172-31-5-39 CRON[15465]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 15 02:39:01 ip-172-31-5-39 CRON[15465]: pam_unix(cron:session): session closed for user root Sep 15 03:09:01 ip-172-31-5-39 CRON[15532]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 15 03:09:01 ip-172-31-5-39 CRON[15532]: pam_unix(cron:session): session closed for user root Sep 15 03:39:01 ip-172-31-5-39 CRON[15599]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 15 03:39:01 ip-172-31-5-39 CRON[15599]: pam_unix(cron:session): session closed for user root Sep 15 04:09:01 ip-172-31-5-39 CRON[15678]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 15 04:09:01 ip-172-31-5-39 CRON[15678]: pam_unix(cron:session): session closed for user root Sep 15 04:39:01 ip-172-31-5-39 CRON[15745]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 15 04:39:01 ip-172-31-5-39 CRON[15745]: pam_unix(cron:session): session closed for user root Sep 15 05:09:01 ip-172-31-5-39 CRON[15812]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 15 05:09:01 ip-172-31-5-39 CRON[15812]: pam_unix(cron:session): session closed for user root Sep 15 05:39:01 ip-172-31-5-39 CRON[15879]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 15 05:39:01 ip-172-31-5-39 CRON[15879]: pam_unix(cron:session): session closed for user root Sep 15 06:09:01 ip-172-31-5-39 CRON[15946]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 15 06:09:01 ip-172-31-5-39 CRON[15946]: pam_unix(cron:session): session closed for user root Sep 15 06:39:01 ip-172-31-5-39 CRON[16281]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 15 06:39:01 ip-172-31-5-39 CRON[16281]: pam_unix(cron:session): session closed for user root Sep 15 07:09:01 ip-172-31-5-39 CRON[16360]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 15 07:09:01 ip-172-31-5-39 CRON[16360]: pam_unix(cron:session): session closed for user root Sep 15 07:39:01 ip-172-31-5-39 CRON[16430]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 15 07:39:02 ip-172-31-5-39 CRON[16430]: pam_unix(cron:session): session closed for user root Sep 15 08:09:01 ip-172-31-5-39 CRON[16498]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 15 08:09:01 ip-172-31-5-39 CRON[16498]: pam_unix(cron:session): session closed for user root Sep 15 08:39:01 ip-172-31-5-39 CRON[16565]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 15 08:39:01 ip-172-31-5-39 CRON[16565]: pam_unix(cron:session): session closed for user root Sep 15 09:09:01 ip-172-31-5-39 CRON[16632]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 15 09:09:01 ip-172-31-5-39 CRON[16632]: pam_unix(cron:session): session closed for user root Sep 15 09:39:01 ip-172-31-5-39 CRON[16764]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 15 09:39:01 ip-172-31-5-39 CRON[16764]: pam_unix(cron:session): session closed for user root Sep 15 10:09:01 ip-172-31-5-39 CRON[16843]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 15 10:09:01 ip-172-31-5-39 CRON[16843]: pam_unix(cron:session): session closed for user root Sep 15 10:39:01 ip-172-31-5-39 CRON[16910]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 15 10:39:01 ip-172-31-5-39 CRON[16910]: pam_unix(cron:session): session closed for user root Sep 15 11:09:01 ip-172-31-5-39 CRON[16977]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 15 11:09:01 ip-172-31-5-39 CRON[16977]: pam_unix(cron:session): session closed for user root Sep 15 11:39:01 ip-172-31-5-39 CRON[17044]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 15 11:39:01 ip-172-31-5-39 CRON[17044]: pam_unix(cron:session): session closed for user root Sep 15 12:09:01 ip-172-31-5-39 CRON[17111]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 15 12:09:01 ip-172-31-5-39 CRON[17111]: pam_unix(cron:session): session closed for user root Sep 15 12:39:01 ip-172-31-5-39 CRON[17178]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 15 12:39:02 ip-172-31-5-39 CRON[17178]: pam_unix(cron:session): session closed for user root Sep 15 13:09:01 ip-172-31-5-39 CRON[17257]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 15 13:09:01 ip-172-31-5-39 CRON[17257]: pam_unix(cron:session): session closed for user root Sep 15 13:39:01 ip-172-31-5-39 CRON[17329]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 15 13:39:01 ip-172-31-5-39 CRON[17329]: pam_unix(cron:session): session closed for user root Sep 15 14:09:01 ip-172-31-5-39 CRON[17396]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 15 14:09:01 ip-172-31-5-39 CRON[17396]: pam_unix(cron:session): session closed for user root Sep 15 14:39:01 ip-172-31-5-39 CRON[17463]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 15 14:39:01 ip-172-31-5-39 CRON[17463]: pam_unix(cron:session): session closed for user root Sep 15 15:09:01 ip-172-31-5-39 CRON[17530]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 15 15:09:01 ip-172-31-5-39 CRON[17530]: pam_unix(cron:session): session closed for user root Sep 15 15:39:01 ip-172-31-5-39 CRON[17597]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 15 15:39:01 ip-172-31-5-39 CRON[17597]: pam_unix(cron:session): session closed for user root Sep 15 16:09:01 ip-172-31-5-39 CRON[17664]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 15 16:09:01 ip-172-31-5-39 CRON[17664]: pam_unix(cron:session): session closed for user root Sep 15 16:39:01 ip-172-31-5-39 CRON[17731]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 15 16:39:01 ip-172-31-5-39 CRON[17731]: pam_unix(cron:session): session closed for user root Sep 15 17:09:01 ip-172-31-5-39 CRON[17798]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 15 17:09:02 ip-172-31-5-39 CRON[17798]: pam_unix(cron:session): session closed for user root Sep 15 17:39:01 ip-172-31-5-39 CRON[17924]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 15 17:39:01 ip-172-31-5-39 CRON[17924]: pam_unix(cron:session): session closed for user root Sep 15 17:51:01 ip-172-31-5-39 CRON[17979]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 15 17:51:01 ip-172-31-5-39 CRON[17979]: pam_unix(cron:session): session closed for user root Sep 15 18:09:01 ip-172-31-5-39 CRON[17995]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 15 18:09:01 ip-172-31-5-39 CRON[17995]: pam_unix(cron:session): session closed for user root Sep 15 18:39:01 ip-172-31-5-39 CRON[18062]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 15 18:39:01 ip-172-31-5-39 CRON[18062]: pam_unix(cron:session): session closed for user root Sep 15 19:09:01 ip-172-31-5-39 CRON[18129]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 15 19:09:01 ip-172-31-5-39 CRON[18129]: pam_unix(cron:session): session closed for user root Sep 15 19:39:01 ip-172-31-5-39 CRON[18196]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 15 19:39:01 ip-172-31-5-39 CRON[18196]: pam_unix(cron:session): session closed for user root Sep 15 20:09:01 ip-172-31-5-39 CRON[18263]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 15 20:09:01 ip-172-31-5-39 CRON[18263]: pam_unix(cron:session): session closed for user root Sep 15 20:39:01 ip-172-31-5-39 CRON[18330]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 15 20:39:01 ip-172-31-5-39 CRON[18330]: pam_unix(cron:session): session closed for user root Sep 15 21:09:01 ip-172-31-5-39 CRON[18410]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 15 21:09:01 ip-172-31-5-39 CRON[18410]: pam_unix(cron:session): session closed for user root Sep 15 21:39:01 ip-172-31-5-39 CRON[18477]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 15 21:39:01 ip-172-31-5-39 CRON[18477]: pam_unix(cron:session): session closed for user root Sep 15 22:09:01 ip-172-31-5-39 CRON[18544]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 15 22:09:02 ip-172-31-5-39 CRON[18544]: pam_unix(cron:session): session closed for user root Sep 15 22:39:01 ip-172-31-5-39 CRON[18611]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 15 22:39:01 ip-172-31-5-39 CRON[18611]: pam_unix(cron:session): session closed for user root Sep 15 23:09:01 ip-172-31-5-39 CRON[18678]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 15 23:09:01 ip-172-31-5-39 CRON[18678]: pam_unix(cron:session): session closed for user root Sep 15 23:39:01 ip-172-31-5-39 CRON[18745]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 15 23:39:01 ip-172-31-5-39 CRON[18745]: pam_unix(cron:session): session closed for user root Sep 16 00:09:01 ip-172-31-5-39 CRON[18812]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 16 00:09:01 ip-172-31-5-39 CRON[18812]: pam_unix(cron:session): session closed for user root Sep 16 00:39:01 ip-172-31-5-39 CRON[18891]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 16 00:39:01 ip-172-31-5-39 CRON[18891]: pam_unix(cron:session): session closed for user root Sep 16 01:09:01 ip-172-31-5-39 CRON[18958]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 16 01:09:01 ip-172-31-5-39 CRON[18958]: pam_unix(cron:session): session closed for user root Sep 16 01:39:01 ip-172-31-5-39 CRON[19025]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 16 01:39:01 ip-172-31-5-39 CRON[19025]: pam_unix(cron:session): session closed for user root Sep 16 02:09:01 ip-172-31-5-39 CRON[19092]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 16 02:09:01 ip-172-31-5-39 CRON[19092]: pam_unix(cron:session): session closed for user root Sep 16 02:39:01 ip-172-31-5-39 CRON[19159]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 16 02:39:01 ip-172-31-5-39 CRON[19159]: pam_unix(cron:session): session closed for user root Sep 16 03:09:01 ip-172-31-5-39 CRON[19226]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 16 03:09:02 ip-172-31-5-39 CRON[19226]: pam_unix(cron:session): session closed for user root Sep 16 03:39:01 ip-172-31-5-39 CRON[19293]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 16 03:39:01 ip-172-31-5-39 CRON[19293]: pam_unix(cron:session): session closed for user root Sep 16 03:57:01 ip-172-31-5-39 CRON[19360]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 16 03:57:01 ip-172-31-5-39 CRON[19360]: pam_unix(cron:session): session closed for user root Sep 16 04:09:01 ip-172-31-5-39 CRON[19363]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 16 04:09:01 ip-172-31-5-39 CRON[19363]: pam_unix(cron:session): session closed for user root Sep 16 04:39:01 ip-172-31-5-39 CRON[19430]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 16 04:39:01 ip-172-31-5-39 CRON[19430]: pam_unix(cron:session): session closed for user root Sep 16 05:09:01 ip-172-31-5-39 CRON[19497]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 16 05:09:01 ip-172-31-5-39 CRON[19497]: pam_unix(cron:session): session closed for user root Sep 16 05:39:01 ip-172-31-5-39 CRON[19832]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 16 05:39:01 ip-172-31-5-39 CRON[19832]: pam_unix(cron:session): session closed for user root Sep 16 06:09:01 ip-172-31-5-39 CRON[19911]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 16 06:09:01 ip-172-31-5-39 CRON[19911]: pam_unix(cron:session): session closed for user root Sep 16 06:39:01 ip-172-31-5-39 CRON[19978]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 16 06:39:01 ip-172-31-5-39 CRON[19978]: pam_unix(cron:session): session closed for user root Sep 16 07:09:01 ip-172-31-5-39 CRON[20045]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 16 07:09:01 ip-172-31-5-39 CRON[20045]: pam_unix(cron:session): session closed for user root Sep 16 07:39:01 ip-172-31-5-39 CRON[20112]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 16 07:39:02 ip-172-31-5-39 CRON[20112]: pam_unix(cron:session): session closed for user root Sep 16 08:09:01 ip-172-31-5-39 CRON[20179]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 16 08:09:01 ip-172-31-5-39 CRON[20179]: pam_unix(cron:session): session closed for user root Sep 16 08:39:01 ip-172-31-5-39 CRON[20246]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 16 08:39:01 ip-172-31-5-39 CRON[20246]: pam_unix(cron:session): session closed for user root Sep 16 09:09:01 ip-172-31-5-39 CRON[20325]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 16 09:09:01 ip-172-31-5-39 CRON[20325]: pam_unix(cron:session): session closed for user root Sep 16 09:39:01 ip-172-31-5-39 CRON[20392]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 16 09:39:01 ip-172-31-5-39 CRON[20392]: pam_unix(cron:session): session closed for user root Sep 16 10:09:01 ip-172-31-5-39 CRON[20524]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 16 10:09:01 ip-172-31-5-39 CRON[20524]: pam_unix(cron:session): session closed for user root Sep 16 10:39:01 ip-172-31-5-39 CRON[20591]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 16 10:39:01 ip-172-31-5-39 CRON[20591]: pam_unix(cron:session): session closed for user root Sep 16 11:09:01 ip-172-31-5-39 CRON[20659]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 16 11:09:01 ip-172-31-5-39 CRON[20659]: pam_unix(cron:session): session closed for user root Sep 16 11:39:01 ip-172-31-5-39 CRON[20726]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 16 11:39:01 ip-172-31-5-39 CRON[20726]: pam_unix(cron:session): session closed for user root Sep 16 12:09:01 ip-172-31-5-39 CRON[20793]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 16 12:09:01 ip-172-31-5-39 CRON[20793]: pam_unix(cron:session): session closed for user root Sep 16 12:39:01 ip-172-31-5-39 CRON[20872]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 16 12:39:02 ip-172-31-5-39 CRON[20872]: pam_unix(cron:session): session closed for user root Sep 16 13:09:01 ip-172-31-5-39 CRON[20986]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 16 13:09:01 ip-172-31-5-39 CRON[20986]: pam_unix(cron:session): session closed for user root Sep 16 13:39:01 ip-172-31-5-39 CRON[21057]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 16 13:39:01 ip-172-31-5-39 CRON[21057]: pam_unix(cron:session): session closed for user root Sep 16 14:09:01 ip-172-31-5-39 CRON[21124]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 16 14:09:01 ip-172-31-5-39 CRON[21124]: pam_unix(cron:session): session closed for user root Sep 16 14:39:01 ip-172-31-5-39 CRON[21191]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 16 14:39:01 ip-172-31-5-39 CRON[21191]: pam_unix(cron:session): session closed for user root Sep 16 15:09:01 ip-172-31-5-39 CRON[21258]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 16 15:09:01 ip-172-31-5-39 CRON[21258]: pam_unix(cron:session): session closed for user root Sep 16 15:39:01 ip-172-31-5-39 CRON[21337]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 16 15:39:01 ip-172-31-5-39 CRON[21337]: pam_unix(cron:session): session closed for user root Sep 16 16:09:01 ip-172-31-5-39 CRON[21404]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 16 16:09:01 ip-172-31-5-39 CRON[21404]: pam_unix(cron:session): session closed for user root Sep 16 16:39:01 ip-172-31-5-39 CRON[21471]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 16 16:39:01 ip-172-31-5-39 CRON[21471]: pam_unix(cron:session): session closed for user root Sep 16 17:09:01 ip-172-31-5-39 CRON[21539]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 16 17:09:01 ip-172-31-5-39 CRON[21539]: pam_unix(cron:session): session closed for user root Sep 16 17:39:01 ip-172-31-5-39 CRON[21606]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 16 17:39:01 ip-172-31-5-39 CRON[21606]: pam_unix(cron:session): session closed for user root Sep 16 17:51:01 ip-172-31-5-39 CRON[21673]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 16 17:51:01 ip-172-31-5-39 CRON[21673]: pam_unix(cron:session): session closed for user root Sep 16 18:09:01 ip-172-31-5-39 CRON[21676]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 16 18:09:01 ip-172-31-5-39 CRON[21676]: pam_unix(cron:session): session closed for user root Sep 16 18:39:01 ip-172-31-5-39 CRON[21743]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 16 18:39:01 ip-172-31-5-39 CRON[21743]: pam_unix(cron:session): session closed for user root Sep 16 19:09:01 ip-172-31-5-39 CRON[21822]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 16 19:09:01 ip-172-31-5-39 CRON[21822]: pam_unix(cron:session): session closed for user root Sep 16 19:39:01 ip-172-31-5-39 CRON[21889]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 16 19:39:01 ip-172-31-5-39 CRON[21889]: pam_unix(cron:session): session closed for user root Sep 16 20:09:01 ip-172-31-5-39 CRON[21956]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 16 20:09:01 ip-172-31-5-39 CRON[21956]: pam_unix(cron:session): session closed for user root Sep 16 20:39:01 ip-172-31-5-39 CRON[22024]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 16 20:39:01 ip-172-31-5-39 CRON[22024]: pam_unix(cron:session): session closed for user root Sep 16 21:09:01 ip-172-31-5-39 CRON[22091]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 16 21:09:01 ip-172-31-5-39 CRON[22091]: pam_unix(cron:session): session closed for user root Sep 16 21:39:01 ip-172-31-5-39 CRON[22158]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 16 21:39:01 ip-172-31-5-39 CRON[22158]: pam_unix(cron:session): session closed for user root Sep 16 22:09:01 ip-172-31-5-39 CRON[22237]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 16 22:09:02 ip-172-31-5-39 CRON[22237]: pam_unix(cron:session): session closed for user root Sep 16 22:39:01 ip-172-31-5-39 CRON[22304]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 16 22:39:01 ip-172-31-5-39 CRON[22304]: pam_unix(cron:session): session closed for user root Sep 16 23:09:01 ip-172-31-5-39 CRON[22371]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 16 23:09:01 ip-172-31-5-39 CRON[22371]: pam_unix(cron:session): session closed for user root Sep 16 23:39:01 ip-172-31-5-39 CRON[22438]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 16 23:39:01 ip-172-31-5-39 CRON[22438]: pam_unix(cron:session): session closed for user root Sep 17 00:09:01 ip-172-31-5-39 CRON[22505]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 00:09:01 ip-172-31-5-39 CRON[22505]: pam_unix(cron:session): session closed for user root Sep 17 00:39:01 ip-172-31-5-39 CRON[22572]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 00:39:01 ip-172-31-5-39 CRON[22572]: pam_unix(cron:session): session closed for user root Sep 17 01:09:01 ip-172-31-5-39 CRON[22651]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 01:09:01 ip-172-31-5-39 CRON[22651]: pam_unix(cron:session): session closed for user root Sep 17 01:39:01 ip-172-31-5-39 CRON[22718]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 01:39:01 ip-172-31-5-39 CRON[22718]: pam_unix(cron:session): session closed for user root Sep 17 02:09:01 ip-172-31-5-39 CRON[22785]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 02:09:01 ip-172-31-5-39 CRON[22785]: pam_unix(cron:session): session closed for user root Sep 17 02:39:01 ip-172-31-5-39 CRON[22852]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 02:39:01 ip-172-31-5-39 CRON[22852]: pam_unix(cron:session): session closed for user root Sep 17 03:09:01 ip-172-31-5-39 CRON[22919]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 03:09:02 ip-172-31-5-39 CRON[22919]: pam_unix(cron:session): session closed for user root Sep 17 03:39:01 ip-172-31-5-39 CRON[22986]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 03:39:01 ip-172-31-5-39 CRON[22986]: pam_unix(cron:session): session closed for user root Sep 17 04:09:01 ip-172-31-5-39 CRON[23053]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 04:09:01 ip-172-31-5-39 CRON[23053]: pam_unix(cron:session): session closed for user root Sep 17 04:39:01 ip-172-31-5-39 CRON[23120]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 04:39:01 ip-172-31-5-39 CRON[23120]: pam_unix(cron:session): session closed for user root Sep 17 05:09:01 ip-172-31-5-39 CRON[23475]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 05:09:01 ip-172-31-5-39 CRON[23475]: pam_unix(cron:session): session closed for user root Sep 17 05:39:01 ip-172-31-5-39 CRON[23542]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 05:39:01 ip-172-31-5-39 CRON[23542]: pam_unix(cron:session): session closed for user root Sep 17 06:09:01 ip-172-31-5-39 CRON[23609]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 06:09:01 ip-172-31-5-39 CRON[23609]: pam_unix(cron:session): session closed for user root Sep 17 06:39:01 ip-172-31-5-39 CRON[23676]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 06:39:01 ip-172-31-5-39 CRON[23676]: pam_unix(cron:session): session closed for user root Sep 17 07:09:01 ip-172-31-5-39 CRON[23743]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 07:09:01 ip-172-31-5-39 CRON[23743]: pam_unix(cron:session): session closed for user root Sep 17 07:39:01 ip-172-31-5-39 CRON[23810]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 07:39:02 ip-172-31-5-39 CRON[23810]: pam_unix(cron:session): session closed for user root Sep 17 08:09:01 ip-172-31-5-39 CRON[23877]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 08:09:01 ip-172-31-5-39 CRON[23877]: pam_unix(cron:session): session closed for user root Sep 17 08:39:01 ip-172-31-5-39 CRON[23944]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 08:39:01 ip-172-31-5-39 CRON[23944]: pam_unix(cron:session): session closed for user root Sep 17 09:09:01 ip-172-31-5-39 CRON[24023]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 09:09:01 ip-172-31-5-39 CRON[24023]: pam_unix(cron:session): session closed for user root Sep 17 09:39:01 ip-172-31-5-39 CRON[24090]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 09:39:01 ip-172-31-5-39 CRON[24090]: pam_unix(cron:session): session closed for user root Sep 17 10:09:01 ip-172-31-5-39 CRON[24222]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 10:09:01 ip-172-31-5-39 CRON[24222]: pam_unix(cron:session): session closed for user root Sep 17 10:39:01 ip-172-31-5-39 CRON[24289]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 10:39:01 ip-172-31-5-39 CRON[24289]: pam_unix(cron:session): session closed for user root Sep 17 11:09:01 ip-172-31-5-39 CRON[24356]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 11:09:01 ip-172-31-5-39 CRON[24356]: pam_unix(cron:session): session closed for user root Sep 17 11:39:01 ip-172-31-5-39 CRON[24435]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 11:39:01 ip-172-31-5-39 CRON[24435]: pam_unix(cron:session): session closed for user root Sep 17 12:09:01 ip-172-31-5-39 CRON[24502]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 12:09:01 ip-172-31-5-39 CRON[24502]: pam_unix(cron:session): session closed for user root Sep 17 12:39:01 ip-172-31-5-39 CRON[24569]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 12:39:01 ip-172-31-5-39 CRON[24569]: pam_unix(cron:session): session closed for user root Sep 17 13:09:01 ip-172-31-5-39 CRON[24636]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 13:09:01 ip-172-31-5-39 CRON[24636]: pam_unix(cron:session): session closed for user root Sep 17 13:39:01 ip-172-31-5-39 CRON[24710]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 13:39:01 ip-172-31-5-39 CRON[24710]: pam_unix(cron:session): session closed for user root Sep 17 14:09:01 ip-172-31-5-39 CRON[24777]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 14:09:01 ip-172-31-5-39 CRON[24777]: pam_unix(cron:session): session closed for user root Sep 17 14:15:55 ip-172-31-5-39 sshd[24832]: Accepted publickey for ubuntu from 177.103.176.199 port 50641 ssh2: RSA SHA256:3/91sXvgrhpGwm6BHY9O8YSerXhFGNxSkZn2QEniijY Sep 17 14:15:55 ip-172-31-5-39 sshd[24832]: pam_unix(sshd:session): session opened for user ubuntu by (uid=0) Sep 17 14:15:55 ip-172-31-5-39 systemd: pam_unix(systemd-user:session): session opened for user ubuntu by (uid=0) Sep 17 14:15:55 ip-172-31-5-39 systemd-logind[1168]: New session 661 of user ubuntu. Sep 17 14:16:39 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/home/ubuntu ; USER=root ; COMMAND=/usr/bin/vim /etc/crontab Sep 17 14:16:39 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 17 14:16:49 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 17 14:16:57 ip-172-31-5-39 sudo: ubuntu : TTY=pts/0 ; PWD=/home/ubuntu ; USER=root ; COMMAND=/etc/init.d/cron restart Sep 17 14:16:57 ip-172-31-5-39 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0) Sep 17 14:16:57 ip-172-31-5-39 sudo: pam_unix(sudo:session): session closed for user root Sep 17 14:17:01 ip-172-31-5-39 CRON[24986]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 14:17:01 ip-172-31-5-39 CRON[24986]: pam_unix(cron:session): session closed for user root Sep 17 14:17:12 ip-172-31-5-39 sshd[24893]: Received disconnect from 177.103.176.199 port 50641:11: disconnected by user Sep 17 14:17:12 ip-172-31-5-39 sshd[24893]: Disconnected from 177.103.176.199 port 50641 Sep 17 14:17:12 ip-172-31-5-39 sshd[24832]: pam_unix(sshd:session): session closed for user ubuntu Sep 17 14:17:12 ip-172-31-5-39 systemd-logind[1168]: Removed session 661. Sep 17 14:20:01 ip-172-31-5-39 CRON[24999]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 14:22:18 ip-172-31-5-39 CRON[24999]: pam_unix(cron:session): session closed for user root Sep 17 14:25:01 ip-172-31-5-39 CRON[25015]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 14:25:15 ip-172-31-5-39 CRON[25015]: pam_unix(cron:session): session closed for user root Sep 17 14:30:01 ip-172-31-5-39 CRON[25018]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 14:30:21 ip-172-31-5-39 CRON[25018]: pam_unix(cron:session): session closed for user root Sep 17 14:35:01 ip-172-31-5-39 CRON[25021]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 14:35:15 ip-172-31-5-39 CRON[25021]: pam_unix(cron:session): session closed for user root Sep 17 14:39:01 ip-172-31-5-39 CRON[25024]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 14:39:01 ip-172-31-5-39 CRON[25024]: pam_unix(cron:session): session closed for user root Sep 17 14:40:01 ip-172-31-5-39 CRON[25079]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 14:40:16 ip-172-31-5-39 CRON[25079]: pam_unix(cron:session): session closed for user root Sep 17 14:45:01 ip-172-31-5-39 CRON[25082]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 14:45:15 ip-172-31-5-39 CRON[25082]: pam_unix(cron:session): session closed for user root Sep 17 14:50:01 ip-172-31-5-39 CRON[25097]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 14:50:18 ip-172-31-5-39 CRON[25097]: pam_unix(cron:session): session closed for user root Sep 17 14:55:01 ip-172-31-5-39 CRON[25100]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 14:55:15 ip-172-31-5-39 CRON[25100]: pam_unix(cron:session): session closed for user root Sep 17 15:00:01 ip-172-31-5-39 CRON[25103]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 15:00:01 ip-172-31-5-39 CRON[25104]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 15:00:23 ip-172-31-5-39 CRON[25103]: pam_unix(cron:session): session closed for user root Sep 17 15:03:30 ip-172-31-5-39 CRON[25104]: pam_unix(cron:session): session closed for user root Sep 17 15:05:01 ip-172-31-5-39 CRON[25110]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 15:05:16 ip-172-31-5-39 CRON[25110]: pam_unix(cron:session): session closed for user root Sep 17 15:09:01 ip-172-31-5-39 CRON[25113]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 15:09:01 ip-172-31-5-39 CRON[25113]: pam_unix(cron:session): session closed for user root Sep 17 15:10:01 ip-172-31-5-39 CRON[25168]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 15:10:19 ip-172-31-5-39 CRON[25168]: pam_unix(cron:session): session closed for user root Sep 17 15:15:01 ip-172-31-5-39 CRON[25183]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 15:15:17 ip-172-31-5-39 CRON[25183]: pam_unix(cron:session): session closed for user root Sep 17 15:17:01 ip-172-31-5-39 CRON[25186]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 15:17:01 ip-172-31-5-39 CRON[25186]: pam_unix(cron:session): session closed for user root Sep 17 15:20:01 ip-172-31-5-39 CRON[25189]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 15:20:18 ip-172-31-5-39 CRON[25189]: pam_unix(cron:session): session closed for user root Sep 17 15:25:01 ip-172-31-5-39 CRON[25192]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 15:25:16 ip-172-31-5-39 CRON[25192]: pam_unix(cron:session): session closed for user root Sep 17 15:30:01 ip-172-31-5-39 CRON[25195]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 15:30:22 ip-172-31-5-39 CRON[25195]: pam_unix(cron:session): session closed for user root Sep 17 15:35:01 ip-172-31-5-39 CRON[25198]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 15:35:15 ip-172-31-5-39 CRON[25198]: pam_unix(cron:session): session closed for user root Sep 17 15:39:01 ip-172-31-5-39 CRON[25213]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 15:39:02 ip-172-31-5-39 CRON[25213]: pam_unix(cron:session): session closed for user root Sep 17 15:40:01 ip-172-31-5-39 CRON[25268]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 15:40:17 ip-172-31-5-39 CRON[25268]: pam_unix(cron:session): session closed for user root Sep 17 15:45:01 ip-172-31-5-39 CRON[25271]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 15:45:17 ip-172-31-5-39 CRON[25271]: pam_unix(cron:session): session closed for user root Sep 17 15:50:01 ip-172-31-5-39 CRON[25277]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 15:50:18 ip-172-31-5-39 CRON[25277]: pam_unix(cron:session): session closed for user root Sep 17 15:55:01 ip-172-31-5-39 CRON[25280]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 15:55:16 ip-172-31-5-39 CRON[25280]: pam_unix(cron:session): session closed for user root Sep 17 16:00:01 ip-172-31-5-39 CRON[25283]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 16:00:02 ip-172-31-5-39 CRON[25284]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 16:00:32 ip-172-31-5-39 CRON[25283]: pam_unix(cron:session): session closed for user root Sep 17 16:00:41 ip-172-31-5-39 CRON[25284]: pam_unix(cron:session): session closed for user root Sep 17 16:05:01 ip-172-31-5-39 CRON[25301]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 16:05:16 ip-172-31-5-39 CRON[25301]: pam_unix(cron:session): session closed for user root Sep 17 16:09:01 ip-172-31-5-39 CRON[25304]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 16:09:01 ip-172-31-5-39 CRON[25304]: pam_unix(cron:session): session closed for user root Sep 17 16:10:01 ip-172-31-5-39 CRON[25359]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 16:10:19 ip-172-31-5-39 CRON[25359]: pam_unix(cron:session): session closed for user root Sep 17 16:15:01 ip-172-31-5-39 CRON[25362]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 16:15:17 ip-172-31-5-39 CRON[25362]: pam_unix(cron:session): session closed for user root Sep 17 16:17:01 ip-172-31-5-39 CRON[25365]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 16:17:01 ip-172-31-5-39 CRON[25365]: pam_unix(cron:session): session closed for user root Sep 17 16:20:01 ip-172-31-5-39 CRON[25368]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 16:20:17 ip-172-31-5-39 CRON[25368]: pam_unix(cron:session): session closed for user root Sep 17 16:25:01 ip-172-31-5-39 CRON[25371]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 16:25:17 ip-172-31-5-39 CRON[25371]: pam_unix(cron:session): session closed for user root Sep 17 16:30:01 ip-172-31-5-39 CRON[25386]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 16:30:21 ip-172-31-5-39 CRON[25386]: pam_unix(cron:session): session closed for user root Sep 17 16:35:01 ip-172-31-5-39 CRON[25391]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 16:35:16 ip-172-31-5-39 CRON[25391]: pam_unix(cron:session): session closed for user root Sep 17 16:39:01 ip-172-31-5-39 CRON[25394]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 16:39:01 ip-172-31-5-39 CRON[25394]: pam_unix(cron:session): session closed for user root Sep 17 16:40:01 ip-172-31-5-39 CRON[25449]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 16:40:15 ip-172-31-5-39 CRON[25449]: pam_unix(cron:session): session closed for user root Sep 17 16:45:01 ip-172-31-5-39 CRON[25452]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 16:45:16 ip-172-31-5-39 CRON[25452]: pam_unix(cron:session): session closed for user root Sep 17 16:50:01 ip-172-31-5-39 CRON[25455]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 16:50:19 ip-172-31-5-39 CRON[25455]: pam_unix(cron:session): session closed for user root Sep 17 16:55:01 ip-172-31-5-39 CRON[25470]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 16:55:13 ip-172-31-5-39 CRON[25470]: pam_unix(cron:session): session closed for user root Sep 17 17:00:01 ip-172-31-5-39 CRON[25474]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 17:00:01 ip-172-31-5-39 CRON[25473]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 17:00:33 ip-172-31-5-39 CRON[25473]: pam_unix(cron:session): session closed for user root Sep 17 17:00:41 ip-172-31-5-39 CRON[25474]: pam_unix(cron:session): session closed for user root Sep 17 17:05:01 ip-172-31-5-39 CRON[25480]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 17:05:15 ip-172-31-5-39 CRON[25480]: pam_unix(cron:session): session closed for user root Sep 17 17:09:01 ip-172-31-5-39 CRON[25483]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 17:09:01 ip-172-31-5-39 CRON[25483]: pam_unix(cron:session): session closed for user root Sep 17 17:10:01 ip-172-31-5-39 CRON[25538]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 17:10:19 ip-172-31-5-39 CRON[25538]: pam_unix(cron:session): session closed for user root Sep 17 17:15:01 ip-172-31-5-39 CRON[25541]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 17:15:16 ip-172-31-5-39 CRON[25541]: pam_unix(cron:session): session closed for user root Sep 17 17:17:01 ip-172-31-5-39 CRON[25544]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 17:17:01 ip-172-31-5-39 CRON[25544]: pam_unix(cron:session): session closed for user root Sep 17 17:20:01 ip-172-31-5-39 CRON[25559]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 17:20:17 ip-172-31-5-39 CRON[25559]: pam_unix(cron:session): session closed for user root Sep 17 17:25:01 ip-172-31-5-39 CRON[25562]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 17:25:16 ip-172-31-5-39 CRON[25562]: pam_unix(cron:session): session closed for user root Sep 17 17:30:01 ip-172-31-5-39 CRON[25565]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 17:30:21 ip-172-31-5-39 CRON[25565]: pam_unix(cron:session): session closed for user root Sep 17 17:35:01 ip-172-31-5-39 CRON[25568]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 17:35:15 ip-172-31-5-39 CRON[25568]: pam_unix(cron:session): session closed for user root Sep 17 17:39:01 ip-172-31-5-39 CRON[25571]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 17:39:01 ip-172-31-5-39 CRON[25571]: pam_unix(cron:session): session closed for user root Sep 17 17:40:01 ip-172-31-5-39 CRON[25626]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 17:40:17 ip-172-31-5-39 CRON[25626]: pam_unix(cron:session): session closed for user root Sep 17 17:45:01 ip-172-31-5-39 CRON[25629]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 17:45:15 ip-172-31-5-39 CRON[25629]: pam_unix(cron:session): session closed for user root Sep 17 17:50:01 ip-172-31-5-39 CRON[25644]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 17:50:18 ip-172-31-5-39 CRON[25644]: pam_unix(cron:session): session closed for user root Sep 17 17:51:01 ip-172-31-5-39 CRON[25647]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 17:51:01 ip-172-31-5-39 CRON[25647]: pam_unix(cron:session): session closed for user root Sep 17 17:55:01 ip-172-31-5-39 CRON[25650]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 17:55:14 ip-172-31-5-39 CRON[25650]: pam_unix(cron:session): session closed for user root Sep 17 18:00:01 ip-172-31-5-39 CRON[25654]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 18:00:01 ip-172-31-5-39 CRON[25653]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 18:00:31 ip-172-31-5-39 CRON[25653]: pam_unix(cron:session): session closed for user root Sep 17 18:00:43 ip-172-31-5-39 CRON[25654]: pam_unix(cron:session): session closed for user root Sep 17 18:05:01 ip-172-31-5-39 CRON[25659]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 18:05:16 ip-172-31-5-39 CRON[25659]: pam_unix(cron:session): session closed for user root Sep 17 18:09:01 ip-172-31-5-39 CRON[25662]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 18:09:01 ip-172-31-5-39 CRON[25662]: pam_unix(cron:session): session closed for user root Sep 17 18:10:01 ip-172-31-5-39 CRON[25717]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 18:10:18 ip-172-31-5-39 CRON[25717]: pam_unix(cron:session): session closed for user root Sep 17 18:15:01 ip-172-31-5-39 CRON[25732]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 18:15:16 ip-172-31-5-39 CRON[25732]: pam_unix(cron:session): session closed for user root Sep 17 18:17:01 ip-172-31-5-39 CRON[25735]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 18:17:01 ip-172-31-5-39 CRON[25735]: pam_unix(cron:session): session closed for user root Sep 17 18:20:01 ip-172-31-5-39 CRON[25738]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 18:20:17 ip-172-31-5-39 CRON[25738]: pam_unix(cron:session): session closed for user root Sep 17 18:25:01 ip-172-31-5-39 CRON[25741]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 18:25:16 ip-172-31-5-39 CRON[25741]: pam_unix(cron:session): session closed for user root Sep 17 18:30:01 ip-172-31-5-39 CRON[25744]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 18:30:21 ip-172-31-5-39 CRON[25744]: pam_unix(cron:session): session closed for user root Sep 17 18:35:01 ip-172-31-5-39 CRON[25747]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 18:35:14 ip-172-31-5-39 CRON[25747]: pam_unix(cron:session): session closed for user root Sep 17 18:39:01 ip-172-31-5-39 CRON[25750]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 18:39:02 ip-172-31-5-39 CRON[25750]: pam_unix(cron:session): session closed for user root Sep 17 18:40:02 ip-172-31-5-39 CRON[25805]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 18:40:18 ip-172-31-5-39 CRON[25805]: pam_unix(cron:session): session closed for user root Sep 17 18:45:01 ip-172-31-5-39 CRON[25820]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 18:45:16 ip-172-31-5-39 CRON[25820]: pam_unix(cron:session): session closed for user root Sep 17 18:50:01 ip-172-31-5-39 CRON[25823]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 18:50:17 ip-172-31-5-39 CRON[25823]: pam_unix(cron:session): session closed for user root Sep 17 18:55:01 ip-172-31-5-39 CRON[25826]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 18:55:14 ip-172-31-5-39 CRON[25826]: pam_unix(cron:session): session closed for user root Sep 17 19:00:01 ip-172-31-5-39 CRON[25830]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 19:00:01 ip-172-31-5-39 CRON[25829]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 19:00:30 ip-172-31-5-39 CRON[25829]: pam_unix(cron:session): session closed for user root Sep 17 19:00:36 ip-172-31-5-39 CRON[25830]: pam_unix(cron:session): session closed for user root Sep 17 19:05:01 ip-172-31-5-39 CRON[25835]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 19:05:15 ip-172-31-5-39 CRON[25835]: pam_unix(cron:session): session closed for user root Sep 17 19:09:01 ip-172-31-5-39 CRON[25838]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 19:09:01 ip-172-31-5-39 CRON[25838]: pam_unix(cron:session): session closed for user root Sep 17 19:10:01 ip-172-31-5-39 CRON[25905]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 19:10:18 ip-172-31-5-39 CRON[25905]: pam_unix(cron:session): session closed for user root Sep 17 19:15:01 ip-172-31-5-39 CRON[25908]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 19:15:16 ip-172-31-5-39 CRON[25908]: pam_unix(cron:session): session closed for user root Sep 17 19:17:01 ip-172-31-5-39 CRON[25911]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 19:17:01 ip-172-31-5-39 CRON[25911]: pam_unix(cron:session): session closed for user root Sep 17 19:20:01 ip-172-31-5-39 CRON[25914]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 19:20:17 ip-172-31-5-39 CRON[25914]: pam_unix(cron:session): session closed for user root Sep 17 19:25:01 ip-172-31-5-39 CRON[25917]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 19:25:15 ip-172-31-5-39 CRON[25917]: pam_unix(cron:session): session closed for user root Sep 17 19:30:01 ip-172-31-5-39 CRON[25920]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 19:30:20 ip-172-31-5-39 CRON[25920]: pam_unix(cron:session): session closed for user root Sep 17 19:35:01 ip-172-31-5-39 CRON[25935]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 19:35:14 ip-172-31-5-39 CRON[25935]: pam_unix(cron:session): session closed for user root Sep 17 19:39:01 ip-172-31-5-39 CRON[25938]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 19:39:02 ip-172-31-5-39 CRON[25938]: pam_unix(cron:session): session closed for user root Sep 17 19:40:01 ip-172-31-5-39 CRON[25993]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 19:40:16 ip-172-31-5-39 CRON[25993]: pam_unix(cron:session): session closed for user root Sep 17 19:45:01 ip-172-31-5-39 CRON[25996]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 19:45:16 ip-172-31-5-39 CRON[25996]: pam_unix(cron:session): session closed for user root Sep 17 19:50:01 ip-172-31-5-39 CRON[25999]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 19:50:18 ip-172-31-5-39 CRON[25999]: pam_unix(cron:session): session closed for user root Sep 17 19:55:01 ip-172-31-5-39 CRON[26002]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 19:55:14 ip-172-31-5-39 CRON[26002]: pam_unix(cron:session): session closed for user root Sep 17 20:00:01 ip-172-31-5-39 CRON[26017]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 20:00:01 ip-172-31-5-39 CRON[26018]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 20:00:31 ip-172-31-5-39 CRON[26017]: pam_unix(cron:session): session closed for user root Sep 17 20:00:37 ip-172-31-5-39 CRON[26018]: pam_unix(cron:session): session closed for user root Sep 17 20:05:01 ip-172-31-5-39 CRON[26023]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 20:05:16 ip-172-31-5-39 CRON[26023]: pam_unix(cron:session): session closed for user root Sep 17 20:09:01 ip-172-31-5-39 CRON[26026]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 20:09:02 ip-172-31-5-39 CRON[26026]: pam_unix(cron:session): session closed for user root Sep 17 20:10:01 ip-172-31-5-39 CRON[26081]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 20:10:17 ip-172-31-5-39 CRON[26081]: pam_unix(cron:session): session closed for user root Sep 17 20:15:01 ip-172-31-5-39 CRON[26084]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 20:15:16 ip-172-31-5-39 CRON[26084]: pam_unix(cron:session): session closed for user root Sep 17 20:17:01 ip-172-31-5-39 CRON[26087]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 20:17:01 ip-172-31-5-39 CRON[26087]: pam_unix(cron:session): session closed for user root Sep 17 20:20:01 ip-172-31-5-39 CRON[26090]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 20:20:16 ip-172-31-5-39 CRON[26090]: pam_unix(cron:session): session closed for user root Sep 17 20:25:01 ip-172-31-5-39 CRON[26093]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 20:25:16 ip-172-31-5-39 CRON[26093]: pam_unix(cron:session): session closed for user root Sep 17 20:30:01 ip-172-31-5-39 CRON[26108]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 20:30:21 ip-172-31-5-39 CRON[26108]: pam_unix(cron:session): session closed for user root Sep 17 20:35:01 ip-172-31-5-39 CRON[26111]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 20:35:15 ip-172-31-5-39 CRON[26111]: pam_unix(cron:session): session closed for user root Sep 17 20:39:01 ip-172-31-5-39 CRON[26114]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 20:39:01 ip-172-31-5-39 CRON[26114]: pam_unix(cron:session): session closed for user root Sep 17 20:40:01 ip-172-31-5-39 CRON[26169]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 20:40:16 ip-172-31-5-39 CRON[26169]: pam_unix(cron:session): session closed for user root Sep 17 20:45:01 ip-172-31-5-39 CRON[26219]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 20:45:16 ip-172-31-5-39 CRON[26219]: pam_unix(cron:session): session closed for user root Sep 17 20:50:01 ip-172-31-5-39 CRON[26222]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 20:50:17 ip-172-31-5-39 CRON[26222]: pam_unix(cron:session): session closed for user root Sep 17 20:55:01 ip-172-31-5-39 CRON[26237]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 20:55:14 ip-172-31-5-39 CRON[26237]: pam_unix(cron:session): session closed for user root Sep 17 21:00:01 ip-172-31-5-39 CRON[26241]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 21:00:01 ip-172-31-5-39 CRON[26240]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 21:00:32 ip-172-31-5-39 CRON[26240]: pam_unix(cron:session): session closed for user root Sep 17 21:00:39 ip-172-31-5-39 CRON[26241]: pam_unix(cron:session): session closed for user root Sep 17 21:05:01 ip-172-31-5-39 CRON[26246]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 21:05:16 ip-172-31-5-39 CRON[26246]: pam_unix(cron:session): session closed for user root Sep 17 21:09:01 ip-172-31-5-39 CRON[26249]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 21:09:01 ip-172-31-5-39 CRON[26249]: pam_unix(cron:session): session closed for user root Sep 17 21:10:01 ip-172-31-5-39 CRON[26304]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 21:10:18 ip-172-31-5-39 CRON[26304]: pam_unix(cron:session): session closed for user root Sep 17 21:15:01 ip-172-31-5-39 CRON[26307]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 21:15:15 ip-172-31-5-39 CRON[26307]: pam_unix(cron:session): session closed for user root Sep 17 21:17:01 ip-172-31-5-39 CRON[26310]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 21:17:01 ip-172-31-5-39 CRON[26310]: pam_unix(cron:session): session closed for user root Sep 17 21:20:01 ip-172-31-5-39 CRON[26313]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 21:20:17 ip-172-31-5-39 CRON[26313]: pam_unix(cron:session): session closed for user root Sep 17 21:25:01 ip-172-31-5-39 CRON[26328]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 21:25:15 ip-172-31-5-39 CRON[26328]: pam_unix(cron:session): session closed for user root Sep 17 21:30:01 ip-172-31-5-39 CRON[26331]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 21:30:21 ip-172-31-5-39 CRON[26331]: pam_unix(cron:session): session closed for user root Sep 17 21:35:01 ip-172-31-5-39 CRON[26334]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 21:35:15 ip-172-31-5-39 CRON[26334]: pam_unix(cron:session): session closed for user root Sep 17 21:39:01 ip-172-31-5-39 CRON[26337]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 21:39:01 ip-172-31-5-39 CRON[26337]: pam_unix(cron:session): session closed for user root Sep 17 21:40:01 ip-172-31-5-39 CRON[26392]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 21:40:17 ip-172-31-5-39 CRON[26392]: pam_unix(cron:session): session closed for user root Sep 17 21:45:01 ip-172-31-5-39 CRON[26395]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 21:45:15 ip-172-31-5-39 CRON[26395]: pam_unix(cron:session): session closed for user root Sep 17 21:50:01 ip-172-31-5-39 CRON[26410]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 21:50:20 ip-172-31-5-39 CRON[26410]: pam_unix(cron:session): session closed for user root Sep 17 21:55:01 ip-172-31-5-39 CRON[26413]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 21:55:16 ip-172-31-5-39 CRON[26413]: pam_unix(cron:session): session closed for user root Sep 17 22:00:01 ip-172-31-5-39 CRON[26417]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 22:00:01 ip-172-31-5-39 CRON[26416]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 22:00:29 ip-172-31-5-39 CRON[26416]: pam_unix(cron:session): session closed for user root Sep 17 22:00:37 ip-172-31-5-39 CRON[26417]: pam_unix(cron:session): session closed for user root Sep 17 22:05:01 ip-172-31-5-39 CRON[26422]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 22:05:16 ip-172-31-5-39 CRON[26422]: pam_unix(cron:session): session closed for user root Sep 17 22:09:01 ip-172-31-5-39 CRON[26425]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 22:09:01 ip-172-31-5-39 CRON[26425]: pam_unix(cron:session): session closed for user root Sep 17 22:10:01 ip-172-31-5-39 CRON[26480]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 22:10:19 ip-172-31-5-39 CRON[26480]: pam_unix(cron:session): session closed for user root Sep 17 22:15:01 ip-172-31-5-39 CRON[26495]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 22:15:15 ip-172-31-5-39 CRON[26495]: pam_unix(cron:session): session closed for user root Sep 17 22:17:01 ip-172-31-5-39 CRON[26498]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 22:17:01 ip-172-31-5-39 CRON[26498]: pam_unix(cron:session): session closed for user root Sep 17 22:20:01 ip-172-31-5-39 CRON[26501]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 22:20:17 ip-172-31-5-39 CRON[26501]: pam_unix(cron:session): session closed for user root Sep 17 22:25:01 ip-172-31-5-39 CRON[26504]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 22:25:16 ip-172-31-5-39 CRON[26504]: pam_unix(cron:session): session closed for user root Sep 17 22:30:01 ip-172-31-5-39 CRON[26507]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 22:30:21 ip-172-31-5-39 CRON[26507]: pam_unix(cron:session): session closed for user root Sep 17 22:35:01 ip-172-31-5-39 CRON[26510]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 22:35:15 ip-172-31-5-39 CRON[26510]: pam_unix(cron:session): session closed for user root Sep 17 22:39:01 ip-172-31-5-39 CRON[26513]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 22:39:01 ip-172-31-5-39 CRON[26513]: pam_unix(cron:session): session closed for user root Sep 17 22:40:01 ip-172-31-5-39 CRON[26580]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 22:40:16 ip-172-31-5-39 CRON[26580]: pam_unix(cron:session): session closed for user root Sep 17 22:45:01 ip-172-31-5-39 CRON[26583]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 22:45:16 ip-172-31-5-39 CRON[26583]: pam_unix(cron:session): session closed for user root Sep 17 22:50:01 ip-172-31-5-39 CRON[26586]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 22:50:17 ip-172-31-5-39 CRON[26586]: pam_unix(cron:session): session closed for user root Sep 17 22:55:01 ip-172-31-5-39 CRON[26589]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 22:55:15 ip-172-31-5-39 CRON[26589]: pam_unix(cron:session): session closed for user root Sep 17 23:00:01 ip-172-31-5-39 CRON[26593]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 23:00:01 ip-172-31-5-39 CRON[26592]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 23:00:29 ip-172-31-5-39 CRON[26592]: pam_unix(cron:session): session closed for user root Sep 17 23:00:35 ip-172-31-5-39 CRON[26593]: pam_unix(cron:session): session closed for user root Sep 17 23:05:01 ip-172-31-5-39 CRON[26610]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 23:05:16 ip-172-31-5-39 CRON[26610]: pam_unix(cron:session): session closed for user root Sep 17 23:09:01 ip-172-31-5-39 CRON[26616]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 23:09:01 ip-172-31-5-39 CRON[26616]: pam_unix(cron:session): session closed for user root Sep 17 23:10:01 ip-172-31-5-39 CRON[26671]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 23:10:16 ip-172-31-5-39 CRON[26671]: pam_unix(cron:session): session closed for user root Sep 17 23:15:01 ip-172-31-5-39 CRON[26674]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 23:15:16 ip-172-31-5-39 CRON[26674]: pam_unix(cron:session): session closed for user root Sep 17 23:17:01 ip-172-31-5-39 CRON[26677]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 23:17:01 ip-172-31-5-39 CRON[26677]: pam_unix(cron:session): session closed for user root Sep 17 23:20:01 ip-172-31-5-39 CRON[26680]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 23:20:16 ip-172-31-5-39 CRON[26680]: pam_unix(cron:session): session closed for user root Sep 17 23:25:01 ip-172-31-5-39 CRON[26683]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 23:25:15 ip-172-31-5-39 CRON[26683]: pam_unix(cron:session): session closed for user root Sep 17 23:30:01 ip-172-31-5-39 CRON[26698]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 23:30:21 ip-172-31-5-39 CRON[26698]: pam_unix(cron:session): session closed for user root Sep 17 23:35:01 ip-172-31-5-39 CRON[26701]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 23:35:15 ip-172-31-5-39 CRON[26701]: pam_unix(cron:session): session closed for user root Sep 17 23:39:01 ip-172-31-5-39 CRON[26704]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 23:39:01 ip-172-31-5-39 CRON[26704]: pam_unix(cron:session): session closed for user root Sep 17 23:40:01 ip-172-31-5-39 CRON[26759]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 23:40:17 ip-172-31-5-39 CRON[26759]: pam_unix(cron:session): session closed for user root Sep 17 23:45:01 ip-172-31-5-39 CRON[26762]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 23:45:16 ip-172-31-5-39 CRON[26762]: pam_unix(cron:session): session closed for user root Sep 17 23:50:01 ip-172-31-5-39 CRON[26765]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 23:50:17 ip-172-31-5-39 CRON[26765]: pam_unix(cron:session): session closed for user root Sep 17 23:55:01 ip-172-31-5-39 CRON[26780]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 17 23:55:15 ip-172-31-5-39 CRON[26780]: pam_unix(cron:session): session closed for user root Sep 18 00:00:01 ip-172-31-5-39 CRON[26784]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 00:00:01 ip-172-31-5-39 CRON[26783]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 00:00:32 ip-172-31-5-39 CRON[26783]: pam_unix(cron:session): session closed for user root Sep 18 00:00:38 ip-172-31-5-39 CRON[26784]: pam_unix(cron:session): session closed for user root Sep 18 00:05:01 ip-172-31-5-39 CRON[26789]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 00:05:16 ip-172-31-5-39 CRON[26789]: pam_unix(cron:session): session closed for user root Sep 18 00:09:01 ip-172-31-5-39 CRON[26792]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 00:09:01 ip-172-31-5-39 CRON[26792]: pam_unix(cron:session): session closed for user root Sep 18 00:10:01 ip-172-31-5-39 CRON[26847]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 00:10:19 ip-172-31-5-39 CRON[26847]: pam_unix(cron:session): session closed for user root Sep 18 00:15:01 ip-172-31-5-39 CRON[26850]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 00:15:16 ip-172-31-5-39 CRON[26850]: pam_unix(cron:session): session closed for user root Sep 18 00:17:01 ip-172-31-5-39 CRON[26853]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 00:17:01 ip-172-31-5-39 CRON[26853]: pam_unix(cron:session): session closed for user root Sep 18 00:20:01 ip-172-31-5-39 CRON[26856]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 00:20:16 ip-172-31-5-39 CRON[26856]: pam_unix(cron:session): session closed for user root Sep 18 00:25:01 ip-172-31-5-39 CRON[26871]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 00:25:16 ip-172-31-5-39 CRON[26871]: pam_unix(cron:session): session closed for user root Sep 18 00:30:01 ip-172-31-5-39 CRON[26874]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 00:30:20 ip-172-31-5-39 CRON[26874]: pam_unix(cron:session): session closed for user root Sep 18 00:35:01 ip-172-31-5-39 CRON[26877]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 00:35:15 ip-172-31-5-39 CRON[26877]: pam_unix(cron:session): session closed for user root Sep 18 00:39:01 ip-172-31-5-39 CRON[26880]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 00:39:02 ip-172-31-5-39 CRON[26880]: pam_unix(cron:session): session closed for user root Sep 18 00:40:01 ip-172-31-5-39 CRON[26935]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 00:40:16 ip-172-31-5-39 CRON[26935]: pam_unix(cron:session): session closed for user root Sep 18 00:45:01 ip-172-31-5-39 CRON[26950]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 00:45:16 ip-172-31-5-39 CRON[26950]: pam_unix(cron:session): session closed for user root Sep 18 00:50:01 ip-172-31-5-39 CRON[26953]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 00:50:17 ip-172-31-5-39 CRON[26953]: pam_unix(cron:session): session closed for user root Sep 18 00:55:01 ip-172-31-5-39 CRON[26956]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 00:55:14 ip-172-31-5-39 CRON[26956]: pam_unix(cron:session): session closed for user root Sep 18 01:00:01 ip-172-31-5-39 CRON[26960]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 01:00:01 ip-172-31-5-39 CRON[26959]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 01:00:31 ip-172-31-5-39 CRON[26959]: pam_unix(cron:session): session closed for user root Sep 18 01:00:37 ip-172-31-5-39 CRON[26960]: pam_unix(cron:session): session closed for user root Sep 18 01:05:01 ip-172-31-5-39 CRON[26965]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 01:05:16 ip-172-31-5-39 CRON[26965]: pam_unix(cron:session): session closed for user root Sep 18 01:09:01 ip-172-31-5-39 CRON[26980]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 01:09:01 ip-172-31-5-39 CRON[26980]: pam_unix(cron:session): session closed for user root Sep 18 01:10:01 ip-172-31-5-39 CRON[27035]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 01:10:17 ip-172-31-5-39 CRON[27035]: pam_unix(cron:session): session closed for user root Sep 18 01:15:01 ip-172-31-5-39 CRON[27038]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 01:15:17 ip-172-31-5-39 CRON[27038]: pam_unix(cron:session): session closed for user root Sep 18 01:17:01 ip-172-31-5-39 CRON[27041]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 01:17:01 ip-172-31-5-39 CRON[27041]: pam_unix(cron:session): session closed for user root Sep 18 01:20:01 ip-172-31-5-39 CRON[27044]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 01:20:17 ip-172-31-5-39 CRON[27044]: pam_unix(cron:session): session closed for user root Sep 18 01:25:01 ip-172-31-5-39 CRON[27047]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 01:25:14 ip-172-31-5-39 CRON[27047]: pam_unix(cron:session): session closed for user root Sep 18 01:30:01 ip-172-31-5-39 CRON[27050]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 01:30:20 ip-172-31-5-39 CRON[27050]: pam_unix(cron:session): session closed for user root Sep 18 01:35:01 ip-172-31-5-39 CRON[27053]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 01:35:16 ip-172-31-5-39 CRON[27053]: pam_unix(cron:session): session closed for user root Sep 18 01:39:01 ip-172-31-5-39 CRON[27068]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 01:39:01 ip-172-31-5-39 CRON[27068]: pam_unix(cron:session): session closed for user root Sep 18 01:40:01 ip-172-31-5-39 CRON[27123]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 01:40:17 ip-172-31-5-39 CRON[27123]: pam_unix(cron:session): session closed for user root Sep 18 01:45:01 ip-172-31-5-39 CRON[27126]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 01:45:16 ip-172-31-5-39 CRON[27126]: pam_unix(cron:session): session closed for user root Sep 18 01:50:01 ip-172-31-5-39 CRON[27129]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 01:50:19 ip-172-31-5-39 CRON[27129]: pam_unix(cron:session): session closed for user root Sep 18 01:55:01 ip-172-31-5-39 CRON[27132]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 01:55:15 ip-172-31-5-39 CRON[27132]: pam_unix(cron:session): session closed for user root Sep 18 02:00:01 ip-172-31-5-39 CRON[27136]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 02:00:01 ip-172-31-5-39 CRON[27135]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 02:00:31 ip-172-31-5-39 CRON[27135]: pam_unix(cron:session): session closed for user root Sep 18 02:00:37 ip-172-31-5-39 CRON[27136]: pam_unix(cron:session): session closed for user root Sep 18 02:05:01 ip-172-31-5-39 CRON[27153]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 02:05:17 ip-172-31-5-39 CRON[27153]: pam_unix(cron:session): session closed for user root Sep 18 02:09:01 ip-172-31-5-39 CRON[27156]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 02:09:01 ip-172-31-5-39 CRON[27156]: pam_unix(cron:session): session closed for user root Sep 18 02:10:01 ip-172-31-5-39 CRON[27211]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 02:10:18 ip-172-31-5-39 CRON[27211]: pam_unix(cron:session): session closed for user root Sep 18 02:15:01 ip-172-31-5-39 CRON[27214]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 02:15:16 ip-172-31-5-39 CRON[27214]: pam_unix(cron:session): session closed for user root Sep 18 02:17:01 ip-172-31-5-39 CRON[27217]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 02:17:01 ip-172-31-5-39 CRON[27217]: pam_unix(cron:session): session closed for user root Sep 18 02:20:01 ip-172-31-5-39 CRON[27220]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 02:20:17 ip-172-31-5-39 CRON[27220]: pam_unix(cron:session): session closed for user root Sep 18 02:25:01 ip-172-31-5-39 CRON[27223]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 02:25:15 ip-172-31-5-39 CRON[27223]: pam_unix(cron:session): session closed for user root Sep 18 02:30:01 ip-172-31-5-39 CRON[27226]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 02:30:21 ip-172-31-5-39 CRON[27226]: pam_unix(cron:session): session closed for user root Sep 18 02:35:01 ip-172-31-5-39 CRON[27241]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 02:35:14 ip-172-31-5-39 CRON[27241]: pam_unix(cron:session): session closed for user root Sep 18 02:39:01 ip-172-31-5-39 CRON[27244]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 02:39:01 ip-172-31-5-39 CRON[27244]: pam_unix(cron:session): session closed for user root Sep 18 02:40:01 ip-172-31-5-39 CRON[27299]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 02:40:17 ip-172-31-5-39 CRON[27299]: pam_unix(cron:session): session closed for user root Sep 18 02:45:01 ip-172-31-5-39 CRON[27303]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 02:45:01 ip-172-31-5-39 CRON[27302]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 02:45:15 ip-172-31-5-39 CRON[27302]: pam_unix(cron:session): session closed for user root Sep 18 02:50:01 ip-172-31-5-39 CRON[27330]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 02:50:19 ip-172-31-5-39 CRON[27330]: pam_unix(cron:session): session closed for user root Sep 18 02:55:01 ip-172-31-5-39 CRON[27362]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 02:55:05 ip-172-31-5-39 CRON[27303]: pam_unix(cron:session): session closed for user root Sep 18 02:55:15 ip-172-31-5-39 CRON[27362]: pam_unix(cron:session): session closed for user root Sep 18 03:00:01 ip-172-31-5-39 CRON[27389]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 03:00:01 ip-172-31-5-39 CRON[27390]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 03:00:30 ip-172-31-5-39 CRON[27389]: pam_unix(cron:session): session closed for user root Sep 18 03:00:40 ip-172-31-5-39 CRON[27390]: pam_unix(cron:session): session closed for user root Sep 18 03:05:01 ip-172-31-5-39 CRON[27395]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 03:05:16 ip-172-31-5-39 CRON[27395]: pam_unix(cron:session): session closed for user root Sep 18 03:09:01 ip-172-31-5-39 CRON[27398]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 03:09:01 ip-172-31-5-39 CRON[27398]: pam_unix(cron:session): session closed for user root Sep 18 03:10:01 ip-172-31-5-39 CRON[27453]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 03:10:18 ip-172-31-5-39 CRON[27453]: pam_unix(cron:session): session closed for user root Sep 18 03:15:01 ip-172-31-5-39 CRON[27456]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 03:15:16 ip-172-31-5-39 CRON[27456]: pam_unix(cron:session): session closed for user root Sep 18 03:17:01 ip-172-31-5-39 CRON[27459]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 03:17:01 ip-172-31-5-39 CRON[27459]: pam_unix(cron:session): session closed for user root Sep 18 03:20:01 ip-172-31-5-39 CRON[27462]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 03:20:17 ip-172-31-5-39 CRON[27462]: pam_unix(cron:session): session closed for user root Sep 18 03:25:01 ip-172-31-5-39 CRON[27465]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 03:25:15 ip-172-31-5-39 CRON[27465]: pam_unix(cron:session): session closed for user root Sep 18 03:30:01 ip-172-31-5-39 CRON[27480]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 03:30:21 ip-172-31-5-39 CRON[27480]: pam_unix(cron:session): session closed for user root Sep 18 03:35:01 ip-172-31-5-39 CRON[27483]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 03:35:16 ip-172-31-5-39 CRON[27483]: pam_unix(cron:session): session closed for user root Sep 18 03:39:01 ip-172-31-5-39 CRON[27486]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 03:39:01 ip-172-31-5-39 CRON[27486]: pam_unix(cron:session): session closed for user root Sep 18 03:40:01 ip-172-31-5-39 CRON[27541]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 03:40:17 ip-172-31-5-39 CRON[27541]: pam_unix(cron:session): session closed for user root Sep 18 03:45:01 ip-172-31-5-39 CRON[27544]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 03:45:16 ip-172-31-5-39 CRON[27544]: pam_unix(cron:session): session closed for user root Sep 18 03:50:01 ip-172-31-5-39 CRON[27547]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 03:50:15 ip-172-31-5-39 CRON[27547]: pam_unix(cron:session): session closed for user root Sep 18 03:55:01 ip-172-31-5-39 CRON[27562]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 03:55:13 ip-172-31-5-39 CRON[27562]: pam_unix(cron:session): session closed for user root Sep 18 04:00:01 ip-172-31-5-39 CRON[27566]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 04:00:01 ip-172-31-5-39 CRON[27565]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 04:00:26 ip-172-31-5-39 CRON[27565]: pam_unix(cron:session): session closed for user root Sep 18 04:00:38 ip-172-31-5-39 CRON[27566]: pam_unix(cron:session): session closed for user root Sep 18 04:05:01 ip-172-31-5-39 CRON[27571]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 04:05:16 ip-172-31-5-39 CRON[27571]: pam_unix(cron:session): session closed for user root Sep 18 04:09:01 ip-172-31-5-39 CRON[27574]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 04:09:01 ip-172-31-5-39 CRON[27574]: pam_unix(cron:session): session closed for user root Sep 18 04:10:01 ip-172-31-5-39 CRON[27629]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 04:10:16 ip-172-31-5-39 CRON[27629]: pam_unix(cron:session): session closed for user root Sep 18 04:15:01 ip-172-31-5-39 CRON[27632]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 04:15:17 ip-172-31-5-39 CRON[27632]: pam_unix(cron:session): session closed for user root Sep 18 04:17:01 ip-172-31-5-39 CRON[27635]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 04:17:01 ip-172-31-5-39 CRON[27635]: pam_unix(cron:session): session closed for user root Sep 18 04:20:01 ip-172-31-5-39 CRON[27650]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 04:20:16 ip-172-31-5-39 CRON[27650]: pam_unix(cron:session): session closed for user root Sep 18 04:25:01 ip-172-31-5-39 CRON[27653]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 04:25:16 ip-172-31-5-39 CRON[27653]: pam_unix(cron:session): session closed for user root Sep 18 04:30:01 ip-172-31-5-39 CRON[27656]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 04:30:21 ip-172-31-5-39 CRON[27656]: pam_unix(cron:session): session closed for user root Sep 18 04:35:01 ip-172-31-5-39 CRON[27659]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 04:35:15 ip-172-31-5-39 CRON[27659]: pam_unix(cron:session): session closed for user root Sep 18 04:39:01 ip-172-31-5-39 CRON[27662]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 04:39:01 ip-172-31-5-39 CRON[27662]: pam_unix(cron:session): session closed for user root Sep 18 04:40:01 ip-172-31-5-39 CRON[27717]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 04:40:18 ip-172-31-5-39 CRON[27717]: pam_unix(cron:session): session closed for user root Sep 18 04:45:01 ip-172-31-5-39 CRON[27732]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 04:45:16 ip-172-31-5-39 CRON[27732]: pam_unix(cron:session): session closed for user root Sep 18 04:50:01 ip-172-31-5-39 CRON[27735]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 04:50:17 ip-172-31-5-39 CRON[27735]: pam_unix(cron:session): session closed for user root Sep 18 04:55:01 ip-172-31-5-39 CRON[27738]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 04:55:16 ip-172-31-5-39 CRON[27738]: pam_unix(cron:session): session closed for user root Sep 18 05:00:01 ip-172-31-5-39 CRON[27742]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 05:00:01 ip-172-31-5-39 CRON[27741]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 05:00:30 ip-172-31-5-39 CRON[27741]: pam_unix(cron:session): session closed for user root Sep 18 05:00:37 ip-172-31-5-39 CRON[27742]: pam_unix(cron:session): session closed for user root Sep 18 05:05:01 ip-172-31-5-39 CRON[27747]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 05:05:16 ip-172-31-5-39 CRON[27747]: pam_unix(cron:session): session closed for user root Sep 18 05:09:01 ip-172-31-5-39 CRON[27762]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 05:09:01 ip-172-31-5-39 CRON[27762]: pam_unix(cron:session): session closed for user root Sep 18 05:10:01 ip-172-31-5-39 CRON[27817]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 05:10:16 ip-172-31-5-39 CRON[27817]: pam_unix(cron:session): session closed for user root Sep 18 05:15:01 ip-172-31-5-39 CRON[27820]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 05:15:16 ip-172-31-5-39 CRON[27820]: pam_unix(cron:session): session closed for user root Sep 18 05:17:01 ip-172-31-5-39 CRON[27823]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 05:17:01 ip-172-31-5-39 CRON[27823]: pam_unix(cron:session): session closed for user root Sep 18 05:20:01 ip-172-31-5-39 CRON[27826]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 05:20:16 ip-172-31-5-39 CRON[27826]: pam_unix(cron:session): session closed for user root Sep 18 05:25:01 ip-172-31-5-39 CRON[27829]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 05:25:15 ip-172-31-5-39 CRON[27829]: pam_unix(cron:session): session closed for user root Sep 18 05:30:01 ip-172-31-5-39 CRON[27832]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 05:30:21 ip-172-31-5-39 CRON[27832]: pam_unix(cron:session): session closed for user root Sep 18 05:35:01 ip-172-31-5-39 CRON[27847]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 05:35:14 ip-172-31-5-39 CRON[27847]: pam_unix(cron:session): session closed for user root Sep 18 05:39:01 ip-172-31-5-39 CRON[27850]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 05:39:02 ip-172-31-5-39 CRON[27850]: pam_unix(cron:session): session closed for user root Sep 18 05:40:01 ip-172-31-5-39 CRON[27905]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 05:40:17 ip-172-31-5-39 CRON[27905]: pam_unix(cron:session): session closed for user root Sep 18 05:45:01 ip-172-31-5-39 CRON[27908]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 05:45:16 ip-172-31-5-39 CRON[27908]: pam_unix(cron:session): session closed for user root Sep 18 05:50:01 ip-172-31-5-39 CRON[27911]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 05:50:17 ip-172-31-5-39 CRON[27911]: pam_unix(cron:session): session closed for user root Sep 18 05:55:01 ip-172-31-5-39 CRON[27914]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 05:55:14 ip-172-31-5-39 CRON[27914]: pam_unix(cron:session): session closed for user root Sep 18 06:00:01 ip-172-31-5-39 CRON[27918]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 06:00:01 ip-172-31-5-39 CRON[27917]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 06:00:30 ip-172-31-5-39 CRON[27917]: pam_unix(cron:session): session closed for user root Sep 18 06:00:36 ip-172-31-5-39 CRON[27918]: pam_unix(cron:session): session closed for user root Sep 18 06:05:01 ip-172-31-5-39 CRON[27935]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 06:05:18 ip-172-31-5-39 CRON[27935]: pam_unix(cron:session): session closed for user root Sep 18 06:09:01 ip-172-31-5-39 CRON[28209]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 06:09:01 ip-172-31-5-39 CRON[28209]: pam_unix(cron:session): session closed for user root Sep 18 06:10:01 ip-172-31-5-39 CRON[28264]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 06:10:18 ip-172-31-5-39 CRON[28264]: pam_unix(cron:session): session closed for user root Sep 18 06:15:01 ip-172-31-5-39 CRON[28267]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 06:15:17 ip-172-31-5-39 CRON[28267]: pam_unix(cron:session): session closed for user root Sep 18 06:17:01 ip-172-31-5-39 CRON[28270]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 06:17:01 ip-172-31-5-39 CRON[28270]: pam_unix(cron:session): session closed for user root Sep 18 06:20:01 ip-172-31-5-39 CRON[28273]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 06:20:16 ip-172-31-5-39 CRON[28273]: pam_unix(cron:session): session closed for user root Sep 18 06:25:01 ip-172-31-5-39 CRON[28276]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 06:25:16 ip-172-31-5-39 CRON[28276]: pam_unix(cron:session): session closed for user root Sep 18 06:30:01 ip-172-31-5-39 CRON[28279]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 06:30:20 ip-172-31-5-39 CRON[28279]: pam_unix(cron:session): session closed for user root Sep 18 06:35:01 ip-172-31-5-39 CRON[28294]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 06:35:15 ip-172-31-5-39 CRON[28294]: pam_unix(cron:session): session closed for user root Sep 18 06:39:01 ip-172-31-5-39 CRON[28297]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 06:39:01 ip-172-31-5-39 CRON[28297]: pam_unix(cron:session): session closed for user root Sep 18 06:40:01 ip-172-31-5-39 CRON[28352]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 06:40:17 ip-172-31-5-39 CRON[28352]: pam_unix(cron:session): session closed for user root Sep 18 06:45:01 ip-172-31-5-39 CRON[28355]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 06:45:15 ip-172-31-5-39 CRON[28355]: pam_unix(cron:session): session closed for user root Sep 18 06:50:01 ip-172-31-5-39 CRON[28358]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 06:50:18 ip-172-31-5-39 CRON[28358]: pam_unix(cron:session): session closed for user root Sep 18 06:55:01 ip-172-31-5-39 CRON[28373]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 06:55:14 ip-172-31-5-39 CRON[28373]: pam_unix(cron:session): session closed for user root Sep 18 07:00:01 ip-172-31-5-39 CRON[28377]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 07:00:01 ip-172-31-5-39 CRON[28376]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 07:00:33 ip-172-31-5-39 CRON[28376]: pam_unix(cron:session): session closed for user root Sep 18 07:00:38 ip-172-31-5-39 CRON[28377]: pam_unix(cron:session): session closed for user root Sep 18 07:05:01 ip-172-31-5-39 CRON[28382]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 07:05:16 ip-172-31-5-39 CRON[28382]: pam_unix(cron:session): session closed for user root Sep 18 07:09:01 ip-172-31-5-39 CRON[28385]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 07:09:01 ip-172-31-5-39 CRON[28385]: pam_unix(cron:session): session closed for user root Sep 18 07:10:01 ip-172-31-5-39 CRON[28440]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 07:10:18 ip-172-31-5-39 CRON[28440]: pam_unix(cron:session): session closed for user root Sep 18 07:15:01 ip-172-31-5-39 CRON[28443]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 07:15:17 ip-172-31-5-39 CRON[28443]: pam_unix(cron:session): session closed for user root Sep 18 07:17:01 ip-172-31-5-39 CRON[28458]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 07:17:01 ip-172-31-5-39 CRON[28458]: pam_unix(cron:session): session closed for user root Sep 18 07:20:01 ip-172-31-5-39 CRON[28461]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 07:20:18 ip-172-31-5-39 CRON[28461]: pam_unix(cron:session): session closed for user root Sep 18 07:25:01 ip-172-31-5-39 CRON[28465]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 07:25:15 ip-172-31-5-39 CRON[28465]: pam_unix(cron:session): session closed for user root Sep 18 07:30:01 ip-172-31-5-39 CRON[28468]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 07:30:21 ip-172-31-5-39 CRON[28468]: pam_unix(cron:session): session closed for user root Sep 18 07:35:01 ip-172-31-5-39 CRON[28471]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 07:35:13 ip-172-31-5-39 CRON[28471]: pam_unix(cron:session): session closed for user root Sep 18 07:39:01 ip-172-31-5-39 CRON[28474]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 07:39:01 ip-172-31-5-39 CRON[28474]: pam_unix(cron:session): session closed for user root Sep 18 07:40:01 ip-172-31-5-39 CRON[28529]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 07:40:17 ip-172-31-5-39 CRON[28529]: pam_unix(cron:session): session closed for user root Sep 18 07:45:01 ip-172-31-5-39 CRON[28544]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 07:45:17 ip-172-31-5-39 CRON[28544]: pam_unix(cron:session): session closed for user root Sep 18 07:50:01 ip-172-31-5-39 CRON[28547]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 07:50:18 ip-172-31-5-39 CRON[28547]: pam_unix(cron:session): session closed for user root Sep 18 07:55:01 ip-172-31-5-39 CRON[28550]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 07:55:15 ip-172-31-5-39 CRON[28550]: pam_unix(cron:session): session closed for user root Sep 18 08:00:01 ip-172-31-5-39 CRON[28554]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 08:00:01 ip-172-31-5-39 CRON[28553]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 08:00:27 ip-172-31-5-39 CRON[28553]: pam_unix(cron:session): session closed for user root Sep 18 08:00:42 ip-172-31-5-39 CRON[28554]: pam_unix(cron:session): session closed for user root Sep 18 08:05:01 ip-172-31-5-39 CRON[28560]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 08:05:15 ip-172-31-5-39 CRON[28560]: pam_unix(cron:session): session closed for user root Sep 18 08:09:01 ip-172-31-5-39 CRON[28575]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 08:09:01 ip-172-31-5-39 CRON[28575]: pam_unix(cron:session): session closed for user root Sep 18 08:10:01 ip-172-31-5-39 CRON[28630]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 08:10:19 ip-172-31-5-39 CRON[28630]: pam_unix(cron:session): session closed for user root Sep 18 08:15:01 ip-172-31-5-39 CRON[28633]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 08:15:15 ip-172-31-5-39 CRON[28633]: pam_unix(cron:session): session closed for user root Sep 18 08:17:01 ip-172-31-5-39 CRON[28636]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 08:17:01 ip-172-31-5-39 CRON[28636]: pam_unix(cron:session): session closed for user root Sep 18 08:20:01 ip-172-31-5-39 CRON[28639]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 08:20:16 ip-172-31-5-39 CRON[28639]: pam_unix(cron:session): session closed for user root Sep 18 08:25:01 ip-172-31-5-39 CRON[28642]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 08:25:16 ip-172-31-5-39 CRON[28642]: pam_unix(cron:session): session closed for user root Sep 18 08:30:01 ip-172-31-5-39 CRON[28645]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 08:30:21 ip-172-31-5-39 CRON[28645]: pam_unix(cron:session): session closed for user root Sep 18 08:35:01 ip-172-31-5-39 CRON[28660]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 08:35:15 ip-172-31-5-39 CRON[28660]: pam_unix(cron:session): session closed for user root Sep 18 08:39:01 ip-172-31-5-39 CRON[28663]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 08:39:01 ip-172-31-5-39 CRON[28663]: pam_unix(cron:session): session closed for user root Sep 18 08:40:01 ip-172-31-5-39 CRON[28718]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 08:40:17 ip-172-31-5-39 CRON[28718]: pam_unix(cron:session): session closed for user root Sep 18 08:45:01 ip-172-31-5-39 CRON[28721]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 08:45:15 ip-172-31-5-39 CRON[28721]: pam_unix(cron:session): session closed for user root Sep 18 08:50:01 ip-172-31-5-39 CRON[28724]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 08:50:18 ip-172-31-5-39 CRON[28724]: pam_unix(cron:session): session closed for user root Sep 18 08:55:01 ip-172-31-5-39 CRON[28727]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 08:55:14 ip-172-31-5-39 CRON[28727]: pam_unix(cron:session): session closed for user root Sep 18 09:00:01 ip-172-31-5-39 CRON[28731]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 09:00:01 ip-172-31-5-39 CRON[28730]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 09:00:34 ip-172-31-5-39 CRON[28730]: pam_unix(cron:session): session closed for user root Sep 18 09:00:40 ip-172-31-5-39 CRON[28731]: pam_unix(cron:session): session closed for user root Sep 18 09:05:01 ip-172-31-5-39 CRON[28748]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 09:05:16 ip-172-31-5-39 CRON[28748]: pam_unix(cron:session): session closed for user root Sep 18 09:09:01 ip-172-31-5-39 CRON[28751]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 09:09:01 ip-172-31-5-39 CRON[28751]: pam_unix(cron:session): session closed for user root Sep 18 09:10:01 ip-172-31-5-39 CRON[28806]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 09:10:18 ip-172-31-5-39 CRON[28806]: pam_unix(cron:session): session closed for user root Sep 18 09:15:01 ip-172-31-5-39 CRON[28809]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 09:15:15 ip-172-31-5-39 CRON[28809]: pam_unix(cron:session): session closed for user root Sep 18 09:17:01 ip-172-31-5-39 CRON[28812]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 09:17:01 ip-172-31-5-39 CRON[28812]: pam_unix(cron:session): session closed for user root Sep 18 09:20:01 ip-172-31-5-39 CRON[28815]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 09:20:14 ip-172-31-5-39 CRON[28815]: pam_unix(cron:session): session closed for user root Sep 18 09:25:01 ip-172-31-5-39 CRON[28819]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 18 09:25:01 ip-172-31-5-39 CRON[28818]: pam_unix(cron:session): session opened for user root by (uid=0)