-- Logs begin at Sun 2024-09-01 07:20:07 PDT, end at Mon 2024-09-02 19:50:38 PDT. -- Sep 02 19:49:10 ubuntu sudo[4400]: root : TTY=pts/1 ; PWD=/volumio ; USER=root ; COMMAND=/sbin/ifconfig eth0 Sep 02 19:49:10 ubuntu sudo[4400]: pam_unix(sudo:session): session opened for user root by (uid=0) Sep 02 19:49:10 ubuntu sudo[4405]: root : TTY=pts/1 ; PWD=/volumio ; USER=root ; COMMAND=/sbin/ifconfig wlan0 Sep 02 19:49:10 ubuntu sudo[4405]: pam_unix(sudo:session): session opened for user root by (uid=0) Sep 02 19:49:10 ubuntu sudo[4400]: pam_unix(sudo:session): session closed for user root Sep 02 19:49:10 ubuntu sudo[4405]: pam_unix(sudo:session): session closed for user root Sep 02 19:49:16 ubuntu sudo[4799]: root : TTY=pts/1 ; PWD=/volumio ; USER=root ; COMMAND=/bin/systemctl restart shairport-sync Sep 02 19:49:16 ubuntu sudo[4799]: pam_unix(sudo:session): session opened for user root by (uid=0) Sep 02 19:49:16 ubuntu sudo[4799]: pam_unix(sudo:session): session closed for user root Sep 02 19:49:16 ubuntu sudo[4800]: root : TTY=pts/1 ; PWD=/volumio ; USER=root ; COMMAND=/bin/systemctl restart shairport-sync Sep 02 19:49:16 ubuntu sudo[4800]: pam_unix(sudo:session): session opened for user root by (uid=0) Sep 02 19:49:16 ubuntu sudo[4800]: pam_unix(sudo:session): session closed for user root Sep 02 19:49:30 ubuntu sudo[4819]: pam_unix(sudo:auth): authentication failure; logname= uid=1000 euid=0 tty=/dev/pts/1 ruser=volumio rhost= user=volumio Sep 02 19:49:45 ubuntu sudo[4819]: volumio : 3 incorrect password attempts ; TTY=pts/1 ; PWD=/volumio ; USER=root ; COMMAND=/bin/journalctl --since=2024-09-02 19:48 Sep 02 19:50:10 ubuntu sudo[6457]: root : TTY=pts/1 ; PWD=/volumio ; USER=root ; COMMAND=/sbin/ifconfig eth0 Sep 02 19:50:10 ubuntu sudo[6457]: pam_unix(sudo:session): session opened for user root by (uid=0) Sep 02 19:50:10 ubuntu sudo[6460]: root : TTY=pts/1 ; PWD=/volumio ; USER=root ; COMMAND=/sbin/ifconfig wlan0 Sep 02 19:50:10 ubuntu sudo[6460]: pam_unix(sudo:session): session opened for user root by (uid=0) Sep 02 19:50:10 ubuntu sudo[6457]: pam_unix(sudo:session): session closed for user root Sep 02 19:50:10 ubuntu sudo[6460]: pam_unix(sudo:session): session closed for user root Sep 02 19:50:16 ubuntu sudo[6517]: root : TTY=pts/1 ; PWD=/volumio ; USER=root ; COMMAND=/bin/systemctl restart shairport-sync Sep 02 19:50:16 ubuntu sudo[6517]: pam_unix(sudo:session): session opened for user root by (uid=0) Sep 02 19:50:16 ubuntu sudo[6519]: root : TTY=pts/1 ; PWD=/volumio ; USER=root ; COMMAND=/bin/systemctl restart shairport-sync Sep 02 19:50:16 ubuntu sudo[6517]: pam_unix(sudo:session): session closed for user root Sep 02 19:50:16 ubuntu sudo[6519]: pam_unix(sudo:session): session opened for user root by (uid=0) Sep 02 19:50:16 ubuntu sudo[6519]: pam_unix(sudo:session): session closed for user root Sep 02 19:50:38 ubuntu sudo[6530]: volumio : TTY=pts/1 ; PWD=/volumio ; USER=root ; COMMAND=/bin/journalctl --since=2024-09-02 19:49 Sep 02 19:50:38 ubuntu sudo[6530]: pam_unix(sudo:session): session opened for user root by (uid=0) NAME="Ubuntu" VERSION="16.04 LTS (Xenial Xerus)" ID=ubuntu ID_LIKE=debian PRETTY_NAME="Ubuntu 16.04 LTS" VERSION_ID="16.04" HOME_URL="http://www.ubuntu.com/" SUPPORT_URL="http://help.ubuntu.com/" BUG_REPORT_URL="http://bugs.launchpad.net/ubuntu/" UBUNTU_CODENAME=xenial