[sagher]

Code: (Select All)

root@xxxxxxxx:~# sudo journalctl -xn -l > journalctl.log
root@xxxxxxxxx:~# journalctl -xn -l
-- Logs begin at Sat 2019-03-16 13:06:48 EDT, end at Thu 2019-04-11 05:29:12 EDT. --
Apr 11 05:27:35 xxxxxxxxx sudo[16365]: root : TTY=pts/1 ; PWD=/root ; USER
Apr 11 05:27:35 xxxxxxxxx sudo[16365]: pam_unix(sudo:session): session ope
Apr 11 05:28:16 xxxxxxxxx sudo[16581]: root : TTY=pts/1 ; PWD=/root ; USER
Apr 11 05:28:16 xxxxxxxxx sudo[16581]: pam_unix(sudo:session): session ope
Apr 11 05:28:16 xxxxxxxxx sudo[16581]: pam_unix(sudo:session): session clo
Apr 11 05:29:10 Pxxxxxxxx sshd[16865]: Accepted password for root from 39.
Apr 11 05:29:10 Pxxxxxxxx sshd[16865]: pam_unix(sshd:session): session ope
Apr 11 05:29:12 Pxxxxxxxx postfix/smtpd[16886]: connect from unknown[185.2
Apr 11 05:29:12 xxxxxxxxx postfix/smtpd[16886]: lost connection after AUTH
Apr 11 05:29:12 Pxxxxxxxx postfix/smtpd[16886]: disconnect from unknown[18
lines 1-11/11 (END)...skipping...
-- Logs begin at Sat 2019-03-16 13:06:48 EDT, end at Thu 2019-04-11 05:29:12 EDT. --
Apr 11 05:27:35 xxxxx sudo[16365]: root : TTY=pts/1 ; PWD=/root ; USER=root ; COMMAND=/bin/journalctl -xn -l
Apr 11 05:27:35 xxxxx sudo[16365]: pam_unix(sudo:session): session opened for user root by root(uid=0)
Apr 11 05:28:16 xxxxx sudo[16581]: root : TTY=pts/1 ; PWD=/root ; USER=root ; COMMAND=/bin/journalctl -xn -l
Apr 11 05:28:16 xxxxx sudo[16581]: pam_unix(sudo:session): session opened for user root by root(uid=0)
Apr 11 05:28:16 xxxxx sudo[16581]: pam_unix(sudo:session): session closed for user root
Apr 11 05:29:10 xxxxx sshd[16865]: Accepted password for root from 39.40.178.33 port 50292 ssh2
Apr 11 05:29:10 xxxxx sshd[16865]: pam_unix(sshd:session): session opened for user root by (uid=0)
Apr 11 05:29:12 xxxxx postfix/smtpd[16886]: connect from unknown[185.234.216.92]
Apr 11 05:29:12 xxxxx postfix/smtpd[16886]: lost connection after AUTH from unknown[185.234.216.92]
Apr 11 05:29:12 xxxxx postfix/smtpd[16886]: disconnect from unknown[185.234.216.92]