kazulog@sv1:~$ sudo journalctl --no-pager -o short-precise | awk '/STEP7-BEGIN-20260912-094555/{f=1} f' Sep 12 09:47:26.539559 sv1 KAZULOG[4951]: STEP7-BEGIN-20260912-094555 Sep 12 09:47:26.564460 sv1 sshd-session[4872]: syslogin_perform_logout: logout() returned an error Sep 12 09:47:26.565652 sv1 sshd-session[4918]: Received disconnect from 10.100.3.1 port 52595:11: disconnected by user Sep 12 09:47:26.566571 sv1 sshd-session[4918]: Disconnected from user kazulog 10.100.3.1 port 52595 Sep 12 09:47:26.568170 sv1 sshd-session[4872]: pam_unix(sshd:session): session closed for user kazulog Sep 12 09:47:26.571127 sv1 systemd[1]: session-34.scope: Deactivated successfully. Sep 12 09:47:26.574611 sv1 systemd-logind[1132]: Session 34 logged out. Waiting for processes to exit. Sep 12 09:47:26.578412 sv1 systemd-logind[1132]: Removed session 34. Sep 12 09:47:27.194413 sv1 hello.sh[4963]: connect from 192.168.100.20 (192.168.100.20) Sep 12 09:47:36.809308 sv1 systemd[1]: Stopping user@1000.service - User Manager for UID 1000... Sep 12 09:47:36.813972 sv1 systemd[3497]: Activating special unit exit.target... Sep 12 09:47:36.815532 sv1 systemd[3497]: Stopped target default.target - Main User Target. Sep 12 09:47:36.815619 sv1 systemd[3497]: Stopped target basic.target - Basic System. Sep 12 09:47:36.815682 sv1 systemd[3497]: Stopped target paths.target - Paths. Sep 12 09:47:36.816036 sv1 systemd[3497]: Stopped target sockets.target - Sockets. Sep 12 09:47:36.816174 sv1 systemd[3497]: Stopped target timers.target - Timers. Sep 12 09:47:36.816249 sv1 systemd[3497]: Stopped launchpadlib-cache-clean.timer - Clean up old files in the Launchpadlib cache. Sep 12 09:47:36.818426 sv1 systemd[3497]: Closed dbus.socket - D-Bus User Message Bus Socket. Sep 12 09:47:36.818566 sv1 systemd[3497]: Closed dirmngr.socket - GnuPG network certificate management daemon. Sep 12 09:47:36.818663 sv1 systemd[3497]: Closed gpg-agent-browser.socket - GnuPG cryptographic agent and passphrase cache (access for web browsers). Sep 12 09:47:36.819555 sv1 systemd[3497]: Closed gpg-agent-extra.socket - GnuPG cryptographic agent and passphrase cache (restricted). Sep 12 09:47:36.822883 sv1 systemd[3497]: Stopping gpg-agent-ssh.socket - GnuPG cryptographic agent (ssh-agent emulation)... Sep 12 09:47:36.824470 sv1 systemd[3497]: Stopping gpg-agent.socket - GnuPG cryptographic agent and passphrase cache... Sep 12 09:47:36.824557 sv1 systemd[3497]: Closed keyboxd.socket - GnuPG public key management service. Sep 12 09:47:36.824658 sv1 systemd[3497]: Closed pk-debconf-helper.socket - debconf communication socket. Sep 12 09:47:36.826490 sv1 systemd[3497]: Closed snapd.session-agent.socket - REST API socket for snapd user session agent. Sep 12 09:47:36.831949 sv1 systemd[3497]: Stopping ssh-agent.socket - OpenSSH Agent socket... Sep 12 09:47:36.832297 sv1 systemd[3497]: Closed systemd-ask-password.socket - Query the User Interactively for a Password. Sep 12 09:47:36.924866 sv1 systemd[3497]: Closed gpg-agent-ssh.socket - GnuPG cryptographic agent (ssh-agent emulation). Sep 12 09:47:36.926129 sv1 systemd[3497]: Closed gpg-agent.socket - GnuPG cryptographic agent and passphrase cache. Sep 12 09:47:36.927153 sv1 systemd[3497]: Closed ssh-agent.socket - OpenSSH Agent socket. Sep 12 09:47:36.930207 sv1 systemd[3497]: Removed slice app.slice - User Application Slice. Sep 12 09:47:36.930505 sv1 systemd[3497]: Reached target shutdown.target - Shutdown. Sep 12 09:47:36.931064 sv1 systemd[3497]: Finished systemd-exit.service - Exit the Session. Sep 12 09:47:36.931431 sv1 systemd[3497]: Reached target exit.target - Exit the Session. Sep 12 09:47:36.938942 sv1 systemd-logind[1132]: Removed session 20. Sep 12 09:47:36.944624 sv1 systemd[1]: user@1000.service: Deactivated successfully. Sep 12 09:47:36.946496 sv1 systemd[1]: Stopped user@1000.service - User Manager for UID 1000. Sep 12 09:47:36.955019 sv1 systemd[1]: Stopping user-runtime-dir@1000.service - User Runtime Directory /run/user/1000... Sep 12 09:47:36.983057 sv1 systemd[1]: run-user-1000.mount: Deactivated successfully. Sep 12 09:47:36.985247 sv1 systemd[1]: user-runtime-dir@1000.service: Deactivated successfully. Sep 12 09:47:36.985870 sv1 systemd[1]: Stopped user-runtime-dir@1000.service - User Runtime Directory /run/user/1000. Sep 12 09:47:36.991949 sv1 systemd[1]: Removed slice user-1000.slice - User Slice of UID 1000. Sep 12 09:47:36.992387 sv1 systemd[1]: user-1000.slice: Consumed 6.338s CPU time over 30.430s wall clock time, 36.5M memory peak. Sep 12 09:47:45.588265 sv1 sshd-session[4980]: Accepted publickey for kazulog from 10.100.3.1 port 52608 ssh2: ED25519 SHA256:NdURwOz/PbiL79UHvTtYE5vuTJfA2RD5RXsn/rG76rw Sep 12 09:47:45.593533 sv1 sshd-session[4980]: pam_unix(sshd:session): session opened for user kazulog(uid=1000) by kazulog(uid=0) Sep 12 09:47:45.610912 sv1 systemd[1]: Created slice user-1000.slice - User Slice of UID 1000. Sep 12 09:47:45.615057 sv1 systemd[1]: Starting user-runtime-dir@1000.service - User Runtime Directory /run/user/1000... Sep 12 09:47:45.635171 sv1 systemd-logind[1132]: New session '35' of user 'kazulog' with class 'user' and type 'tty'. Sep 12 09:47:45.659442 sv1 systemd[1]: Finished user-runtime-dir@1000.service - User Runtime Directory /run/user/1000. Sep 12 09:47:45.666299 sv1 systemd[1]: Starting user@1000.service - User Manager for UID 1000... Sep 12 09:47:45.683157 sv1 (systemd)[4985]: pam_unix(systemd-user:session): session opened for user kazulog(uid=1000) by kazulog(uid=0) Sep 12 09:47:45.686409 sv1 systemd-logind[1132]: New session '36' of user 'kazulog' with class 'manager' and type 'unspecified'. Sep 12 09:47:45.862407 sv1 systemd[4985]: Queued start job for default target default.target. Sep 12 09:47:45.865484 sv1 systemd[4985]: Created slice app.slice - User Application Slice. Sep 12 09:47:45.866232 sv1 systemd[4985]: Started launchpadlib-cache-clean.timer - Clean up old files in the Launchpadlib cache. Sep 12 09:47:45.866282 sv1 systemd[4985]: Reached target paths.target - Paths. Sep 12 09:47:45.866593 sv1 systemd[4985]: Reached target timers.target - Timers. Sep 12 09:47:45.869020 sv1 systemd[4985]: Starting dbus.socket - D-Bus User Message Bus Socket... Sep 12 09:47:45.869473 sv1 systemd[4985]: Listening on dirmngr.socket - GnuPG network certificate management daemon. Sep 12 09:47:45.869990 sv1 systemd[4985]: Listening on gpg-agent-browser.socket - GnuPG cryptographic agent and passphrase cache (access for web browsers). Sep 12 09:47:45.871038 sv1 systemd[4985]: Listening on gpg-agent-extra.socket - GnuPG cryptographic agent and passphrase cache (restricted). Sep 12 09:47:45.873684 sv1 systemd[4985]: Starting gpg-agent-ssh.socket - GnuPG cryptographic agent (ssh-agent emulation)... Sep 12 09:47:45.877168 sv1 systemd[4985]: Starting gpg-agent.socket - GnuPG cryptographic agent and passphrase cache... Sep 12 09:47:45.877514 sv1 systemd[4985]: Listening on keyboxd.socket - GnuPG public key management service. Sep 12 09:47:45.878001 sv1 systemd[4985]: Listening on pk-debconf-helper.socket - debconf communication socket. Sep 12 09:47:45.879124 sv1 systemd[4985]: Listening on snapd.session-agent.socket - REST API socket for snapd user session agent. Sep 12 09:47:45.883193 sv1 systemd[4985]: Starting ssh-agent.socket - OpenSSH Agent socket... Sep 12 09:47:45.887577 sv1 systemd[4985]: Listening on systemd-ask-password.socket - Query the User Interactively for a Password. Sep 12 09:47:45.943168 sv1 systemd[4985]: Listening on dbus.socket - D-Bus User Message Bus Socket. Sep 12 09:47:45.964524 sv1 systemd[4985]: Listening on gpg-agent.socket - GnuPG cryptographic agent and passphrase cache. Sep 12 09:47:45.970646 sv1 systemd[4985]: Listening on gpg-agent-ssh.socket - GnuPG cryptographic agent (ssh-agent emulation). Sep 12 09:47:45.971225 sv1 systemd[4985]: Listening on ssh-agent.socket - OpenSSH Agent socket. Sep 12 09:47:45.971803 sv1 systemd[4985]: Reached target sockets.target - Sockets. Sep 12 09:47:45.972154 sv1 systemd[4985]: Reached target basic.target - Basic System. Sep 12 09:47:45.972569 sv1 systemd[4985]: Reached target default.target - Main User Target. Sep 12 09:47:45.972933 sv1 systemd[4985]: Startup finished in 275ms. Sep 12 09:47:45.973299 sv1 systemd[1]: Started user@1000.service - User Manager for UID 1000. Sep 12 09:47:45.977331 sv1 systemd[1]: Started session-35.scope - Session 35 of User kazulog. Sep 12 09:47:46.196035 sv1 sudo[5052]: pam_unix(sudo:session): session opened for user root(uid=0) by kazulog(uid=1000) Sep 12 09:47:46.196223 sv1 sudo[5052]: kazulog : PWD=/home/kazulog ; USER=root ; COMMAND=/usr/bin/journalctl --since -10 min --no-pager Sep 12 09:47:46.216892 sv1 sudo[5052]: pam_unix(sudo:session): session closed for user root Sep 12 09:47:46.230844 sv1 tcpdmatch[5059]: warning: hello.sh: no such process name in /etc/inetd.conf Sep 12 09:47:46.240464 sv1 tcpdmatch[5061]: warning: hello: no such process name in /etc/inetd.conf Sep 12 09:47:46.241869 sv1 tcpdmatch[5061]: matched: /etc/hosts.deny line 18 Sep 12 09:47:46.247066 sv1 sshd-session[5048]: Received disconnect from 10.100.3.1 port 52608:11: disconnected by user Sep 12 09:47:46.247866 sv1 sshd-session[5048]: Disconnected from user kazulog 10.100.3.1 port 52608 Sep 12 09:47:46.249142 sv1 sshd-session[4980]: pam_unix(sshd:session): session closed for user kazulog Sep 12 09:47:46.252124 sv1 systemd[1]: session-35.scope: Deactivated successfully. Sep 12 09:47:46.256206 sv1 systemd-logind[1132]: Session 35 logged out. Waiting for processes to exit. Sep 12 09:47:46.259488 sv1 systemd-logind[1132]: Removed session 35. Sep 12 09:47:56.312154 sv1 systemd[1]: Stopping user@1000.service - User Manager for UID 1000... Sep 12 09:47:56.317506 sv1 systemd[4985]: Activating special unit exit.target... Sep 12 09:47:56.319970 sv1 systemd[4985]: Stopped target default.target - Main User Target. Sep 12 09:47:56.320187 sv1 systemd[4985]: Stopped target basic.target - Basic System. Sep 12 09:47:56.320298 sv1 systemd[4985]: Stopped target paths.target - Paths. Sep 12 09:47:56.320405 sv1 systemd[4985]: Stopped target sockets.target - Sockets. Sep 12 09:47:56.320499 sv1 systemd[4985]: Stopped target timers.target - Timers. Sep 12 09:47:56.320589 sv1 systemd[4985]: Stopped launchpadlib-cache-clean.timer - Clean up old files in the Launchpadlib cache. Sep 12 09:47:56.324298 sv1 systemd[4985]: Closed dbus.socket - D-Bus User Message Bus Socket. Sep 12 09:47:56.324514 sv1 systemd[4985]: Closed dirmngr.socket - GnuPG network certificate management daemon. Sep 12 09:47:56.324656 sv1 systemd[4985]: Closed gpg-agent-browser.socket - GnuPG cryptographic agent and passphrase cache (access for web browsers). Sep 12 09:47:56.325630 sv1 systemd[4985]: Closed gpg-agent-extra.socket - GnuPG cryptographic agent and passphrase cache (restricted). Sep 12 09:47:56.330203 sv1 systemd[4985]: Stopping gpg-agent-ssh.socket - GnuPG cryptographic agent (ssh-agent emulation)... Sep 12 09:47:56.333370 sv1 systemd[4985]: Stopping gpg-agent.socket - GnuPG cryptographic agent and passphrase cache... Sep 12 09:47:56.333512 sv1 systemd[4985]: Closed keyboxd.socket - GnuPG public key management service. Sep 12 09:47:56.333649 sv1 systemd[4985]: Closed pk-debconf-helper.socket - debconf communication socket. Sep 12 09:47:56.336611 sv1 systemd[4985]: Closed snapd.session-agent.socket - REST API socket for snapd user session agent. Sep 12 09:47:56.341655 sv1 systemd[4985]: Stopping ssh-agent.socket - OpenSSH Agent socket... Sep 12 09:47:56.341892 sv1 systemd[4985]: Closed systemd-ask-password.socket - Query the User Interactively for a Password. Sep 12 09:47:56.420944 sv1 systemd[4985]: Closed ssh-agent.socket - OpenSSH Agent socket. Sep 12 09:47:56.426504 sv1 systemd[4985]: Closed gpg-agent.socket - GnuPG cryptographic agent and passphrase cache. Sep 12 09:47:56.430142 sv1 systemd[4985]: Closed gpg-agent-ssh.socket - GnuPG cryptographic agent (ssh-agent emulation). Sep 12 09:47:56.433019 sv1 systemd[4985]: Removed slice app.slice - User Application Slice. Sep 12 09:47:56.433358 sv1 systemd[4985]: Reached target shutdown.target - Shutdown. Sep 12 09:47:56.433914 sv1 systemd[4985]: Finished systemd-exit.service - Exit the Session. Sep 12 09:47:56.433977 sv1 systemd[4985]: Reached target exit.target - Exit the Session. Sep 12 09:47:56.439926 sv1 systemd-logind[1132]: Removed session 36. Sep 12 09:47:56.441563 sv1 systemd[1]: user@1000.service: Deactivated successfully. Sep 12 09:47:56.444023 sv1 systemd[1]: Stopped user@1000.service - User Manager for UID 1000. Sep 12 09:47:56.454828 sv1 systemd[1]: Stopping user-runtime-dir@1000.service - User Runtime Directory /run/user/1000... Sep 12 09:47:56.484009 sv1 systemd[1]: run-user-1000.mount: Deactivated successfully. Sep 12 09:47:56.486298 sv1 systemd[1]: user-runtime-dir@1000.service: Deactivated successfully. Sep 12 09:47:56.486929 sv1 systemd[1]: Stopped user-runtime-dir@1000.service - User Runtime Directory /run/user/1000. Sep 12 09:47:56.493473 sv1 systemd[1]: Removed slice user-1000.slice - User Slice of UID 1000. Sep 12 09:48:10.229968 sv1 sshd-session[5079]: Accepted publickey for kazulog from 10.100.3.1 port 52616 ssh2: ED25519 SHA256:NdURwOz/PbiL79UHvTtYE5vuTJfA2RD5RXsn/rG76rw Sep 12 09:48:10.236307 sv1 sshd-session[5079]: pam_unix(sshd:session): session opened for user kazulog(uid=1000) by kazulog(uid=0) Sep 12 09:48:10.248005 sv1 systemd[1]: Created slice user-1000.slice - User Slice of UID 1000. Sep 12 09:48:10.251993 sv1 systemd[1]: Starting user-runtime-dir@1000.service - User Runtime Directory /run/user/1000... Sep 12 09:48:10.278047 sv1 systemd-logind[1132]: New session '37' of user 'kazulog' with class 'user' and type 'tty'. Sep 12 09:48:10.311431 sv1 systemd[1]: Finished user-runtime-dir@1000.service - User Runtime Directory /run/user/1000. Sep 12 09:48:10.321471 sv1 systemd[1]: Starting user@1000.service - User Manager for UID 1000... Sep 12 09:48:10.342185 sv1 (systemd)[5084]: pam_unix(systemd-user:session): session opened for user kazulog(uid=1000) by kazulog(uid=0) Sep 12 09:48:10.345619 sv1 systemd-logind[1132]: New session '38' of user 'kazulog' with class 'manager' and type 'unspecified'. Sep 12 09:48:10.520840 sv1 systemd[5084]: Queued start job for default target default.target. Sep 12 09:48:10.523476 sv1 systemd[5084]: Created slice app.slice - User Application Slice. Sep 12 09:48:10.524414 sv1 systemd[5084]: Started launchpadlib-cache-clean.timer - Clean up old files in the Launchpadlib cache. Sep 12 09:48:10.524471 sv1 systemd[5084]: Reached target paths.target - Paths. Sep 12 09:48:10.525127 sv1 systemd[5084]: Reached target timers.target - Timers. Sep 12 09:48:10.527064 sv1 systemd[5084]: Starting dbus.socket - D-Bus User Message Bus Socket... Sep 12 09:48:10.527529 sv1 systemd[5084]: Listening on dirmngr.socket - GnuPG network certificate management daemon. Sep 12 09:48:10.528992 sv1 systemd[5084]: Listening on gpg-agent-browser.socket - GnuPG cryptographic agent and passphrase cache (access for web browsers). Sep 12 09:48:10.529441 sv1 systemd[5084]: Listening on gpg-agent-extra.socket - GnuPG cryptographic agent and passphrase cache (restricted). Sep 12 09:48:10.531896 sv1 systemd[5084]: Starting gpg-agent-ssh.socket - GnuPG cryptographic agent (ssh-agent emulation)... Sep 12 09:48:10.534558 sv1 systemd[5084]: Starting gpg-agent.socket - GnuPG cryptographic agent and passphrase cache... Sep 12 09:48:10.535002 sv1 systemd[5084]: Listening on keyboxd.socket - GnuPG public key management service. Sep 12 09:48:10.535299 sv1 systemd[5084]: Listening on pk-debconf-helper.socket - debconf communication socket. Sep 12 09:48:10.535421 sv1 systemd[5084]: Listening on snapd.session-agent.socket - REST API socket for snapd user session agent. Sep 12 09:48:10.539870 sv1 systemd[5084]: Starting ssh-agent.socket - OpenSSH Agent socket... Sep 12 09:48:10.544160 sv1 systemd[5084]: Listening on systemd-ask-password.socket - Query the User Interactively for a Password. Sep 12 09:48:10.604527 sv1 systemd[5084]: Listening on dbus.socket - D-Bus User Message Bus Socket. Sep 12 09:48:10.623678 sv1 systemd[5084]: Listening on gpg-agent.socket - GnuPG cryptographic agent and passphrase cache. Sep 12 09:48:10.629603 sv1 systemd[5084]: Listening on ssh-agent.socket - OpenSSH Agent socket. Sep 12 09:48:10.631281 sv1 systemd[5084]: Listening on gpg-agent-ssh.socket - GnuPG cryptographic agent (ssh-agent emulation). Sep 12 09:48:10.631470 sv1 systemd[5084]: Reached target sockets.target - Sockets. Sep 12 09:48:10.631537 sv1 systemd[5084]: Reached target basic.target - Basic System. Sep 12 09:48:10.631604 sv1 systemd[5084]: Reached target default.target - Main User Target. Sep 12 09:48:10.631649 sv1 systemd[5084]: Startup finished in 275ms. Sep 12 09:48:10.633321 sv1 systemd[1]: Started user@1000.service - User Manager for UID 1000. Sep 12 09:48:10.637863 sv1 systemd[1]: Started session-37.scope - Session 37 of User kazulog. Sep 12 09:48:11.349865 sv1 sudo[5157]: pam_unix(sudo:session): session opened for user root(uid=0) by kazulog(uid=1000) Sep 12 09:48:11.350511 sv1 sudo[5157]: kazulog : PWD=/home/kazulog ; USER=root ; COMMAND=/usr/bin/python3 - Sep 12 09:48:11.379107 sv1 sudo[5157]: pam_unix(sudo:session): session closed for user root Sep 12 09:48:11.381146 sv1 sshd-session[5156]: Received disconnect from 10.100.3.1 port 52616:11: disconnected by user Sep 12 09:48:11.381820 sv1 sshd-session[5156]: Disconnected from user kazulog 10.100.3.1 port 52616 Sep 12 09:48:11.382907 sv1 sshd-session[5079]: pam_unix(sshd:session): session closed for user kazulog Sep 12 09:48:11.385887 sv1 systemd[1]: session-37.scope: Deactivated successfully. Sep 12 09:48:11.389138 sv1 systemd-logind[1132]: Session 37 logged out. Waiting for processes to exit. Sep 12 09:48:11.393061 sv1 systemd-logind[1132]: Removed session 37. Sep 12 09:48:11.525933 sv1 sshd-session[5161]: Accepted publickey for kazulog from 10.100.3.1 port 52617 ssh2: ED25519 SHA256:NdURwOz/PbiL79UHvTtYE5vuTJfA2RD5RXsn/rG76rw Sep 12 09:48:11.528859 sv1 sshd-session[5161]: pam_unix(sshd:session): session opened for user kazulog(uid=1000) by kazulog(uid=0) Sep 12 09:48:11.535451 sv1 systemd-logind[1132]: New session '39' of user 'kazulog' with class 'user' and type 'tty'. Sep 12 09:48:11.540233 sv1 systemd[1]: Started session-39.scope - Session 39 of User kazulog. Sep 12 09:48:11.893266 sv1 tcpdmatch[5271]: warning: hello.sh: no such process name in /etc/inetd.conf Sep 12 09:48:11.894029 sv1 tcpdmatch[5271]: matched: /etc/hosts.deny line 18 Sep 12 09:48:11.915450 sv1 sshd-session[5161]: syslogin_perform_logout: logout() returned an error Sep 12 09:48:11.916877 sv1 sshd-session[5207]: Received disconnect from 10.100.3.1 port 52617:11: disconnected by user Sep 12 09:48:11.917187 sv1 sshd-session[5207]: Disconnected from user kazulog 10.100.3.1 port 52617 Sep 12 09:48:11.919044 sv1 sshd-session[5161]: pam_unix(sshd:session): session closed for user kazulog Sep 12 09:48:11.921575 sv1 systemd[1]: session-39.scope: Deactivated successfully. Sep 12 09:48:11.924592 sv1 systemd-logind[1132]: Session 39 logged out. Waiting for processes to exit. Sep 12 09:48:11.927876 sv1 systemd-logind[1132]: Removed session 39. Sep 12 09:48:12.059978 sv1 sshd-session[5283]: Accepted publickey for kazulog from 10.100.3.1 port 52622 ssh2: ED25519 SHA256:NdURwOz/PbiL79UHvTtYE5vuTJfA2RD5RXsn/rG76rw Sep 12 09:48:12.065474 sv1 sshd-session[5283]: pam_unix(sshd:session): session opened for user kazulog(uid=1000) by kazulog(uid=0) Sep 12 09:48:12.076047 sv1 systemd-logind[1132]: New session '40' of user 'kazulog' with class 'user' and type 'tty'. Sep 12 09:48:12.078642 sv1 systemd[1]: Started session-40.scope - Session 40 of User kazulog. Sep 12 09:48:12.424345 sv1 sudo[5362]: pam_unix(sudo:session): session opened for user root(uid=0) by kazulog(uid=1000) Sep 12 09:48:12.425145 sv1 sudo[5362]: kazulog : TTY=/dev/pts/0 ; PWD=/home/kazulog ; USER=root ; COMMAND=/usr/bin/journalctl --no-pager -o short-precise Sep 12 09:48:12.472128 sv1 sudo[5362]: pam_unix(sudo:session): session closed for user root Sep 12 09:48:12.509831 sv1 sshd-session[5283]: syslogin_perform_logout: logout() returned an error Sep 12 09:48:12.510946 sv1 sshd-session[5329]: Received disconnect from 10.100.3.1 port 52622:11: disconnected by user Sep 12 09:48:12.511266 sv1 sshd-session[5329]: Disconnected from user kazulog 10.100.3.1 port 52622 Sep 12 09:48:12.513022 sv1 sshd-session[5283]: pam_unix(sshd:session): session closed for user kazulog Sep 12 09:48:12.516131 sv1 systemd[1]: session-40.scope: Deactivated successfully. Sep 12 09:48:12.519489 sv1 systemd-logind[1132]: Session 40 logged out. Waiting for processes to exit. Sep 12 09:48:12.523236 sv1 systemd-logind[1132]: Removed session 40. Sep 12 09:48:12.657653 sv1 sshd-session[5378]: Accepted publickey for kazulog from 10.100.3.1 port 52623 ssh2: ED25519 SHA256:NdURwOz/PbiL79UHvTtYE5vuTJfA2RD5RXsn/rG76rw Sep 12 09:48:12.660468 sv1 sshd-session[5378]: pam_unix(sshd:session): session opened for user kazulog(uid=1000) by kazulog(uid=0) Sep 12 09:48:12.668985 sv1 systemd-logind[1132]: New session '41' of user 'kazulog' with class 'user' and type 'tty'. Sep 12 09:48:12.671519 sv1 systemd[1]: Started session-41.scope - Session 41 of User kazulog. Sep 12 09:48:12.928249 sv1 sudo[5457]: pam_unix(sudo:session): session opened for user root(uid=0) by kazulog(uid=1000) Sep 12 09:48:12.928861 sv1 sudo[5457]: kazulog : TTY=/dev/pts/0 ; PWD=/home/kazulog ; USER=root ; COMMAND=/usr/bin/cat /etc/inetd.conf Sep 12 09:48:12.935514 sv1 sudo[5457]: pam_unix(sudo:session): session closed for user root Sep 12 09:48:12.946172 sv1 sudo[5461]: pam_unix(sudo:session): session opened for user root(uid=0) by kazulog(uid=1000) Sep 12 09:48:12.946593 sv1 sudo[5461]: kazulog : TTY=/dev/pts/0 ; PWD=/home/kazulog ; USER=root ; COMMAND=/usr/bin/cat /etc/hosts.allow Sep 12 09:48:12.951948 sv1 sudo[5461]: pam_unix(sudo:session): session closed for user root Sep 12 09:48:12.962643 sv1 sudo[5465]: pam_unix(sudo:session): session opened for user root(uid=0) by kazulog(uid=1000) Sep 12 09:48:12.963126 sv1 sudo[5465]: kazulog : TTY=/dev/pts/0 ; PWD=/home/kazulog ; USER=root ; COMMAND=/usr/bin/cat /etc/hosts.deny Sep 12 09:48:12.968320 sv1 sudo[5465]: pam_unix(sudo:session): session closed for user root Sep 12 09:48:12.979010 sv1 sudo[5469]: pam_unix(sudo:session): session opened for user root(uid=0) by kazulog(uid=1000) Sep 12 09:48:12.979547 sv1 sudo[5469]: kazulog : TTY=/dev/pts/0 ; PWD=/home/kazulog ; USER=root ; COMMAND=/usr/bin/cat /etc/inetd.d/hello Sep 12 09:48:12.984569 sv1 sudo[5469]: pam_unix(sudo:session): session closed for user root Sep 12 09:48:13.004575 sv1 sshd-session[5378]: syslogin_perform_logout: logout() returned an error Sep 12 09:48:13.005941 sv1 sshd-session[5424]: Received disconnect from 10.100.3.1 port 52623:11: disconnected by user Sep 12 09:48:13.006209 sv1 sshd-session[5424]: Disconnected from user kazulog 10.100.3.1 port 52623 Sep 12 09:48:13.007792 sv1 sshd-session[5378]: pam_unix(sshd:session): session closed for user kazulog Sep 12 09:48:13.010207 sv1 systemd[1]: session-41.scope: Deactivated successfully. Sep 12 09:48:13.013290 sv1 systemd-logind[1132]: Session 41 logged out. Waiting for processes to exit. Sep 12 09:48:13.015965 sv1 systemd-logind[1132]: Removed session 41. Sep 12 09:48:13.272919 sv1 sshd-session[5484]: Accepted publickey for kazulog from 10.100.3.1 port 52624 ssh2: ED25519 SHA256:NdURwOz/PbiL79UHvTtYE5vuTJfA2RD5RXsn/rG76rw Sep 12 09:48:13.275288 sv1 sshd-session[5484]: pam_unix(sshd:session): session opened for user kazulog(uid=1000) by kazulog(uid=0) Sep 12 09:48:13.280511 sv1 systemd-logind[1132]: New session '42' of user 'kazulog' with class 'user' and type 'tty'. Sep 12 09:48:13.284118 sv1 systemd[1]: Started session-42.scope - Session 42 of User kazulog. Sep 12 09:48:13.518177 sv1 KAZULOG[5563]: STEP7-BEGIN-20260912-094555 Sep 12 09:48:13.540265 sv1 sshd-session[5484]: syslogin_perform_logout: logout() returned an error Sep 12 09:48:13.541547 sv1 sshd-session[5530]: Received disconnect from 10.100.3.1 port 52624:11: disconnected by user Sep 12 09:48:13.541840 sv1 sshd-session[5530]: Disconnected from user kazulog 10.100.3.1 port 52624 Sep 12 09:48:13.543438 sv1 sshd-session[5484]: pam_unix(sshd:session): session closed for user kazulog Sep 12 09:48:13.546155 sv1 systemd[1]: session-42.scope: Deactivated successfully. Sep 12 09:48:13.551126 sv1 systemd-logind[1132]: Session 42 logged out. Waiting for processes to exit. Sep 12 09:48:13.554389 sv1 systemd-logind[1132]: Removed session 42. Sep 12 09:48:15.016447 sv1 hello.sh[5575]: refused connect from 192.168.100.20 (192.168.100.20) Sep 12 09:48:22.027011 sv1 sshd-session[5576]: Accepted publickey for kazulog from 10.100.3.1 port 52631 ssh2: ED25519 SHA256:NdURwOz/PbiL79UHvTtYE5vuTJfA2RD5RXsn/rG76rw Sep 12 09:48:22.034266 sv1 sshd-session[5576]: pam_unix(sshd:session): session opened for user kazulog(uid=1000) by kazulog(uid=0) Sep 12 09:48:22.046334 sv1 systemd-logind[1132]: New session '43' of user 'kazulog' with class 'user' and type 'tty'. Sep 12 09:48:22.052934 sv1 systemd[1]: Started session-43.scope - Session 43 of User kazulog. Sep 12 09:48:22.451355 sv1 sudo[5666]: pam_unix(sudo:session): session opened for user root(uid=0) by kazulog(uid=1000) Sep 12 09:48:22.451970 sv1 sudo[5666]: kazulog : TTY=/dev/pts/0 ; PWD=/home/kazulog ; USER=root ; COMMAND=/usr/bin/journalctl --since -5 min --no-pager Sep 12 09:48:22.475901 sv1 sudo[5666]: pam_unix(sudo:session): session closed for user root Sep 12 09:48:22.530249 sv1 sshd-session[5576]: syslogin_perform_logout: logout() returned an error Sep 12 09:48:22.531425 sv1 sshd-session[5622]: Received disconnect from 10.100.3.1 port 52631:11: disconnected by user Sep 12 09:48:22.531681 sv1 sshd-session[5622]: Disconnected from user kazulog 10.100.3.1 port 52631 Sep 12 09:48:22.533664 sv1 sshd-session[5576]: pam_unix(sshd:session): session closed for user kazulog Sep 12 09:48:22.536618 sv1 systemd[1]: session-43.scope: Deactivated successfully. Sep 12 09:48:22.546324 sv1 systemd-logind[1132]: Session 43 logged out. Waiting for processes to exit. Sep 12 09:48:22.551018 sv1 systemd-logind[1132]: Removed session 43. Sep 12 09:48:22.677589 sv1 sshd-session[5684]: Accepted publickey for kazulog from 10.100.3.1 port 52633 ssh2: ED25519 SHA256:NdURwOz/PbiL79UHvTtYE5vuTJfA2RD5RXsn/rG76rw Sep 12 09:48:22.684292 sv1 sshd-session[5684]: pam_unix(sshd:session): session opened for user kazulog(uid=1000) by kazulog(uid=0) Sep 12 09:48:22.695023 sv1 systemd-logind[1132]: New session '44' of user 'kazulog' with class 'user' and type 'tty'. Sep 12 09:48:22.698963 sv1 systemd[1]: Started session-44.scope - Session 44 of User kazulog. Sep 12 09:48:23.037892 sv1 sudo[5763]: pam_unix(sudo:session): session opened for user root(uid=0) by kazulog(uid=1000) Sep 12 09:48:23.038640 sv1 sudo[5763]: kazulog : TTY=/dev/pts/0 ; PWD=/home/kazulog ; USER=root ; COMMAND=/usr/bin/journalctl --no-pager -o short-precise