Oct 15 16:50:01 2blog CRON[1650127]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Oct 15 16:50:01 2blog CRON[1650125]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Oct 15 16:50:01 2blog CRON[1650124]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Oct 15 16:50:01 2blog CRON[1650126]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Oct 15 16:50:01 2blog CRON[1650125]: pam_unix(cron:session): session closed for user root
Oct 15 16:50:02 2blog CRON[1650127]: pam_unix(cron:session): session closed for user root
Oct 15 16:50:02 2blog CRON[1650126]: pam_unix(cron:session): session closed for user root
Oct 15 16:50:25 2blog CRON[1650124]: pam_unix(cron:session): session closed for user root
Oct 15 16:51:01 2blog CRON[1654720]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Oct 15 16:51:02 2blog CRON[1654720]: pam_unix(cron:session): session closed for user root
Oct 15 16:52:01 2blog CRON[1654767]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Oct 15 16:52:01 2blog CRON[1654766]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Oct 15 16:52:01 2blog CRON[1654767]: pam_unix(cron:session): session closed for user root
Oct 15 16:52:02 2blog CRON[1654766]: pam_unix(cron:session): session closed for user root
Oct 15 16:53:01 2blog CRON[1654884]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Oct 15 16:53:01 2blog CRON[1654884]: pam_unix(cron:session): session closed for user root
Oct 15 16:54:01 2blog CRON[1654931]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Oct 15 16:54:01 2blog CRON[1654932]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Oct 15 16:54:02 2blog CRON[1654932]: pam_unix(cron:session): session closed for user root
Oct 15 16:54:02 2blog CRON[1654931]: pam_unix(cron:session): session closed for user root
Oct 15 16:55:01 2blog CRON[1655048]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Oct 15 16:55:01 2blog CRON[1655050]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Oct 15 16:55:01 2blog CRON[1655049]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Oct 15 16:55:01 2blog CRON[1655049]: pam_unix(cron:session): session closed for user root
Oct 15 16:55:01 2blog CRON[1655050]: pam_unix(cron:session): session closed for user root
Oct 15 16:55:23 2blog CRON[1655048]: pam_unix(cron:session): session closed for user root
Oct 15 16:56:01 2blog CRON[1659595]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Oct 15 16:56:01 2blog CRON[1659594]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Oct 15 16:56:01 2blog CRON[1659595]: pam_unix(cron:session): session closed for user root
Oct 15 16:56:27 2blog CRON[1659594]: pam_unix(cron:session): session closed for user root
Oct 15 16:56:46 2blog sudo:    steps : TTY=pts/0 ; PWD=/mnt/myshare/uploads/sites ; USER=root ; COMMAND=/usr/bin/zip -r site4212-uploads.zip 4212
Oct 15 16:56:46 2blog sudo: pam_unix(sudo:session): session opened for user root(uid=0) by steps(uid=1003)
Oct 15 16:56:46 2blog sudo: pam_unix(sudo:session): session closed for user root
Oct 15 16:56:56 2blog sudo:    steps : TTY=pts/0 ; PWD=/mnt/myshare/uploads/sites ; USER=root ; COMMAND=/usr/bin/mv site4212-uploads.zip /tmp/
Oct 15 16:56:56 2blog sudo: pam_unix(sudo:session): session opened for user root(uid=0) by steps(uid=1003)
Oct 15 16:56:56 2blog sudo: pam_unix(sudo:session): session closed for user root
Oct 15 16:57:01 2blog CRON[1659749]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Oct 15 16:57:02 2blog CRON[1659749]: pam_unix(cron:session): session closed for user root
Oct 15 16:57:12 2blog sudo:    steps : TTY=pts/0 ; PWD=/tmp ; USER=root ; COMMAND=/usr/bin/chown steps: site4212-uploads.zip
Oct 15 16:57:12 2blog sudo: pam_unix(sudo:session): session opened for user root(uid=0) by steps(uid=1003)
Oct 15 16:57:12 2blog sudo: pam_unix(sudo:session): session closed for user root
Oct 15 16:57:30 2blog sshd-session[1659788]: Connection from 60.248.142.180 port 56831 on 140.111.67.81 port 22 rdomain ""
Oct 15 16:57:30 2blog sshd-session[1659788]: Failed publickey for steps from 60.248.142.180 port 56831 ssh2: ED25519 SHA256:TUnqcmVxtezSiHyXhS5bZgRWONMJxRRb+YMbOQ0604k
Oct 15 16:57:37 2blog sshd-session[1659788]: Accepted password for steps from 60.248.142.180 port 56831 ssh2
Oct 15 16:57:37 2blog sshd-session[1659788]: pam_unix(sshd:session): session opened for user steps(uid=1003) by (uid=0)
Oct 15 16:57:37 2blog systemd-logind[1010]: New session 289259 of user steps.
Oct 15 16:57:37 2blog sshd-session[1659788]: User child is on pid 1659863
Oct 15 16:57:37 2blog sshd-session[1659863]: Starting session: subsystem 'sftp' for steps from 60.248.142.180 port 56831 id 0
Oct 15 16:57:37 2blog sshd-session[1659863]: Received disconnect from 60.248.142.180 port 56831:11: disconnected by user
Oct 15 16:57:37 2blog sshd-session[1659863]: Disconnected from user steps 60.248.142.180 port 56831
Oct 15 16:57:37 2blog sshd-session[1659788]: pam_unix(sshd:session): session closed for user steps
Oct 15 16:57:37 2blog systemd-logind[1010]: Session 289259 logged out. Waiting for processes to exit.
Oct 15 16:57:37 2blog systemd-logind[1010]: Removed session 289259.
Oct 15 16:58:01 2blog CRON[1659884]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Oct 15 16:58:01 2blog CRON[1659885]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Oct 15 16:58:01 2blog CRON[1659885]: pam_unix(cron:session): session closed for user root
Oct 15 16:58:01 2blog CRON[1659884]: pam_unix(cron:session): session closed for user root
Oct 15 16:59:01 2blog CRON[1660050]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Oct 15 16:59:02 2blog CRON[1660050]: pam_unix(cron:session): session closed for user root
Oct 15 17:00:01 2blog CRON[1660105]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Oct 15 17:00:01 2blog CRON[1660107]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Oct 15 17:00:01 2blog CRON[1660109]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Oct 15 17:00:01 2blog CRON[1660108]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Oct 15 17:00:01 2blog CRON[1660106]: pam_unix(cron:session): session opened for user smmsp(uid=121) by (uid=0)
Oct 15 17:00:01 2blog CRON[1660106]: pam_unix(cron:session): session closed for user smmsp
Oct 15 17:00:01 2blog CRON[1660107]: pam_unix(cron:session): session closed for user root
Oct 15 17:00:01 2blog CRON[1660109]: pam_unix(cron:session): session closed for user root
Oct 15 17:00:02 2blog CRON[1660108]: pam_unix(cron:session): session closed for user root
Oct 15 17:00:25 2blog CRON[1660105]: pam_unix(cron:session): session closed for user root
Oct 15 17:01:01 2blog CRON[1664710]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Oct 15 17:01:01 2blog CRON[1664710]: pam_unix(cron:session): session closed for user root
Oct 15 17:02:01 2blog CRON[1664768]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Oct 15 17:02:01 2blog CRON[1664767]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Oct 15 17:02:02 2blog CRON[1664767]: pam_unix(cron:session): session closed for user root
Oct 15 17:02:02 2blog CRON[1664768]: pam_unix(cron:session): session closed for user root
Oct 15 17:03:01 2blog CRON[1664872]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Oct 15 17:03:01 2blog CRON[1664872]: pam_unix(cron:session): session closed for user root