tools-webgrid-lighttpd-1209.tools.eqiad.wmflabs:
    Jan 20 13:49:24 tools-webgrid-lighttpd-1209 sudo: pam_unix(sudo:session): session closed for user root
    Jan 20 13:49:24 tools-webgrid-lighttpd-1209 sudo:  diamond : TTY=pts/2 ; PWD=/ ; USER=puppet ; COMMAND=list /bin/cat /var/lib/puppet/state/last_run_summary.yaml
    Jan 20 13:49:24 tools-webgrid-lighttpd-1209 sudo:  diamond : TTY=pts/2 ; PWD=/ ; USER=puppet ; COMMAND=/bin/cat /var/lib/puppet/state/last_run_summary.yaml
    Jan 20 13:49:24 tools-webgrid-lighttpd-1209 sudo: pam_unix(sudo:session): session opened for user puppet by (uid=109)
    Jan 20 13:49:24 tools-webgrid-lighttpd-1209 sudo: pam_unix(sudo:session): session closed for user puppet
    Jan 20 13:50:24 tools-webgrid-lighttpd-1209 sudo:  diamond : TTY=pts/2 ; PWD=/ ; USER=root ; COMMAND=/bin/ls /var/spool/cron/crontabs/
    Jan 20 13:50:24 tools-webgrid-lighttpd-1209 sudo: pam_unix(sudo:session): session opened for user root by (uid=109)
    Jan 20 13:50:24 tools-webgrid-lighttpd-1209 sudo: pam_unix(sudo:session): session closed for user root
    Jan 20 13:50:24 tools-webgrid-lighttpd-1209 sudo:  diamond : TTY=pts/2 ; PWD=/ ; USER=puppet ; COMMAND=list /bin/cat /var/lib/puppet/state/last_run_summary.yaml
    Jan 20 13:50:25 tools-webgrid-lighttpd-1209 sudo:  diamond : TTY=pts/2 ; PWD=/ ; USER=puppet ; COMMAND=/bin/cat /var/lib/puppet/state/last_run_summary.yaml
    Jan 20 13:50:25 tools-webgrid-lighttpd-1209 sudo: pam_unix(sudo:session): session opened for user puppet by (uid=109)
    Jan 20 13:50:25 tools-webgrid-lighttpd-1209 sudo: pam_unix(sudo:session): session closed for user puppet
    Jan 20 13:51:24 tools-webgrid-lighttpd-1209 sudo:  diamond : TTY=pts/2 ; PWD=/ ; USER=root ; COMMAND=/bin/ls /var/spool/cron/crontabs/
    Jan 20 13:51:24 tools-webgrid-lighttpd-1209 sudo: pam_unix(sudo:session): session opened for user root by (uid=109)
    Jan 20 13:51:24 tools-webgrid-lighttpd-1209 sudo: pam_unix(sudo:session): session closed for user root
    Jan 20 13:51:25 tools-webgrid-lighttpd-1209 sudo:  diamond : TTY=pts/2 ; PWD=/ ; USER=puppet ; COMMAND=list /bin/cat /var/lib/puppet/state/last_run_summary.yaml
    Jan 20 13:51:25 tools-webgrid-lighttpd-1209 sudo:  diamond : TTY=pts/2 ; PWD=/ ; USER=puppet ; COMMAND=/bin/cat /var/lib/puppet/state/last_run_summary.yaml
    Jan 20 13:51:25 tools-webgrid-lighttpd-1209 sudo: pam_unix(sudo:session): session opened for user puppet by (uid=109)
    Jan 20 13:51:25 tools-webgrid-lighttpd-1209 sudo: pam_unix(sudo:session): session closed for user puppet
    Jan 20 13:52:25 tools-webgrid-lighttpd-1209 sudo:  diamond : TTY=pts/2 ; PWD=/ ; USER=root ; COMMAND=/bin/ls /var/spool/cron/crontabs/
    Jan 20 13:52:25 tools-webgrid-lighttpd-1209 sudo: pam_unix(sudo:session): session opened for user root by (uid=109)
    Jan 20 13:52:25 tools-webgrid-lighttpd-1209 sudo: pam_unix(sudo:session): session closed for user root
    Jan 20 13:52:25 tools-webgrid-lighttpd-1209 sudo:  diamond : TTY=pts/2 ; PWD=/ ; USER=puppet ; COMMAND=list /bin/cat /var/lib/puppet/state/last_run_summary.yaml
    Jan 20 13:52:25 tools-webgrid-lighttpd-1209 sudo:  diamond : TTY=pts/2 ; PWD=/ ; USER=puppet ; COMMAND=/bin/cat /var/lib/puppet/state/last_run_summary.yaml
    Jan 20 13:52:25 tools-webgrid-lighttpd-1209 sudo: pam_unix(sudo:session): session opened for user puppet by (uid=109)
    Jan 20 13:52:25 tools-webgrid-lighttpd-1209 sudo: pam_unix(sudo:session): session closed for user puppet
    Jan 20 13:53:25 tools-webgrid-lighttpd-1209 sudo:  diamond : TTY=pts/2 ; PWD=/ ; USER=root ; COMMAND=/bin/ls /var/spool/cron/crontabs/
    Jan 20 13:53:25 tools-webgrid-lighttpd-1209 sudo: pam_unix(sudo:session): session opened for user root by (uid=109)
    Jan 20 13:53:25 tools-webgrid-lighttpd-1209 sudo: pam_unix(sudo:session): session closed for user root
    Jan 20 13:53:25 tools-webgrid-lighttpd-1209 sudo:  diamond : TTY=pts/2 ; PWD=/ ; USER=puppet ; COMMAND=list /bin/cat /var/lib/puppet/state/last_run_summary.yaml
    Jan 20 13:53:25 tools-webgrid-lighttpd-1209 sudo:  diamond : TTY=pts/2 ; PWD=/ ; USER=puppet ; COMMAND=/bin/cat /var/lib/puppet/state/last_run_summary.yaml
    Jan 20 13:53:25 tools-webgrid-lighttpd-1209 sudo: pam_unix(sudo:session): session opened for user puppet by (uid=109)
    Jan 20 13:53:25 tools-webgrid-lighttpd-1209 sudo: pam_unix(sudo:session): session closed for user puppet
    Jan 20 13:54:25 tools-webgrid-lighttpd-1209 sudo:  diamond : TTY=pts/2 ; PWD=/ ; USER=root ; COMMAND=/bin/ls /var/spool/cron/crontabs/
    Jan 20 13:54:25 tools-webgrid-lighttpd-1209 sudo: pam_unix(sudo:session): session opened for user root by (uid=109)
    Jan 20 13:54:25 tools-webgrid-lighttpd-1209 sudo: pam_unix(sudo:session): session closed for user root
    Jan 20 13:54:25 tools-webgrid-lighttpd-1209 sudo:  diamond : TTY=pts/2 ; PWD=/ ; USER=puppet ; COMMAND=list /bin/cat /var/lib/puppet/state/last_run_summary.yaml
    Jan 20 13:54:26 tools-webgrid-lighttpd-1209 sudo:  diamond : TTY=pts/2 ; PWD=/ ; USER=puppet ; COMMAND=/bin/cat /var/lib/puppet/state/last_run_summary.yaml
    Jan 20 13:54:26 tools-webgrid-lighttpd-1209 sudo: pam_unix(sudo:session): session opened for user puppet by (uid=109)
    Jan 20 13:54:26 tools-webgrid-lighttpd-1209 sudo: pam_unix(sudo:session): session closed for user puppet
    Jan 20 13:55:01 tools-webgrid-lighttpd-1209 CRON[1110]: pam_unix(cron:session): session opened for user root by (uid=0)
    Jan 20 13:55:01 tools-webgrid-lighttpd-1209 CRON[1110]: pam_unix(cron:session): session closed for user root
    Jan 20 13:55:25 tools-webgrid-lighttpd-1209 sudo:  diamond : TTY=pts/2 ; PWD=/ ; USER=root ; COMMAND=/bin/ls /var/spool/cron/crontabs/
    Jan 20 13:55:25 tools-webgrid-lighttpd-1209 sudo: pam_unix(sudo:session): session opened for user root by (uid=109)
    Jan 20 13:55:26 tools-webgrid-lighttpd-1209 sudo: pam_unix(sudo:session): session closed for user root
    Jan 20 13:55:26 tools-webgrid-lighttpd-1209 sudo:  diamond : TTY=pts/2 ; PWD=/ ; USER=puppet ; COMMAND=list /bin/cat /var/lib/puppet/state/last_run_summary.yaml
    Jan 20 13:55:26 tools-webgrid-lighttpd-1209 sudo:  diamond : TTY=pts/2 ; PWD=/ ; USER=puppet ; COMMAND=/bin/cat /var/lib/puppet/state/last_run_summary.yaml
    Jan 20 13:55:26 tools-webgrid-lighttpd-1209 sudo: pam_unix(sudo:session): session opened for user puppet by (uid=109)
    Jan 20 13:55:26 tools-webgrid-lighttpd-1209 sudo: pam_unix(sudo:session): session closed for user puppet
    Jan 20 13:56:26 tools-webgrid-lighttpd-1209 sudo:  diamond : TTY=pts/2 ; PWD=/ ; USER=root ; COMMAND=/bin/ls /var/spool/cron/crontabs/
    Jan 20 13:56:26 tools-webgrid-lighttpd-1209 sudo: pam_unix(sudo:session): session opened for user root by (uid=109)
    Jan 20 13:56:26 tools-webgrid-lighttpd-1209 sudo: pam_unix(sudo:session): session closed for user root
    Jan 20 13:56:26 tools-webgrid-lighttpd-1209 sudo:  diamond : TTY=pts/2 ; PWD=/ ; USER=puppet ; COMMAND=list /bin/cat /var/lib/puppet/state/last_run_summary.yaml
    Jan 20 13:56:26 tools-webgrid-lighttpd-1209 sudo:  diamond : TTY=pts/2 ; PWD=/ ; USER=puppet ; COMMAND=/bin/cat /var/lib/puppet/state/last_run_summary.yaml
    Jan 20 13:56:26 tools-webgrid-lighttpd-1209 sudo: pam_unix(sudo:session): session opened for user puppet by (uid=109)
    Jan 20 13:56:26 tools-webgrid-lighttpd-1209 sudo: pam_unix(sudo:session): session closed for user puppet
    Jan 20 13:57:26 tools-webgrid-lighttpd-1209 sudo:  diamond : TTY=pts/2 ; PWD=/ ; USER=root ; COMMAND=/bin/ls /var/spool/cron/crontabs/
    Jan 20 13:57:26 tools-webgrid-lighttpd-1209 sudo: pam_unix(sudo:session): session opened for user root by (uid=109)
    Jan 20 13:57:26 tools-webgrid-lighttpd-1209 sudo: pam_unix(sudo:session): session closed for user root
    Jan 20 13:57:26 tools-webgrid-lighttpd-1209 sudo:  diamond : TTY=pts/2 ; PWD=/ ; USER=puppet ; COMMAND=list /bin/cat /var/lib/puppet/state/last_run_summary.yaml
    Jan 20 13:57:27 tools-webgrid-lighttpd-1209 sudo:  diamond : TTY=pts/2 ; PWD=/ ; USER=puppet ; COMMAND=/bin/cat /var/lib/puppet/state/last_run_summary.yaml
    Jan 20 13:57:27 tools-webgrid-lighttpd-1209 sudo: pam_unix(sudo:session): session opened for user puppet by (uid=109)
    Jan 20 13:57:27 tools-webgrid-lighttpd-1209 sudo: pam_unix(sudo:session): session closed for user puppet
    Jan 20 13:58:26 tools-webgrid-lighttpd-1209 sudo:  diamond : TTY=pts/2 ; PWD=/ ; USER=root ; COMMAND=/bin/ls /var/spool/cron/crontabs/
    Jan 20 13:58:26 tools-webgrid-lighttpd-1209 sudo: pam_unix(sudo:session): session opened for user root by (uid=109)
    Jan 20 13:58:26 tools-webgrid-lighttpd-1209 sudo: pam_unix(sudo:session): session closed for user root
    Jan 20 13:58:27 tools-webgrid-lighttpd-1209 sudo:  diamond : TTY=pts/2 ; PWD=/ ; USER=puppet ; COMMAND=list /bin/cat /var/lib/puppet/state/last_run_summary.yaml
    Jan 20 13:58:27 tools-webgrid-lighttpd-1209 sudo:  diamond : TTY=pts/2 ; PWD=/ ; USER=puppet ; COMMAND=/bin/cat /var/lib/puppet/state/last_run_summary.yaml
    Jan 20 13:58:27 tools-webgrid-lighttpd-1209 sudo: pam_unix(sudo:session): session opened for user puppet by (uid=109)
    Jan 20 13:58:27 tools-webgrid-lighttpd-1209 sudo: pam_unix(sudo:session): session closed for user puppet
    Jan 20 13:59:27 tools-webgrid-lighttpd-1209 sudo:  diamond : TTY=pts/2 ; PWD=/ ; USER=root ; COMMAND=/bin/ls /var/spool/cron/crontabs/
    Jan 20 13:59:27 tools-webgrid-lighttpd-1209 sudo: pam_unix(sudo:session): session opened for user root by (uid=109)
    Jan 20 13:59:27 tools-webgrid-lighttpd-1209 sudo: pam_unix(sudo:session): session closed for user root
    Jan 20 13:59:27 tools-webgrid-lighttpd-1209 sudo:  diamond : TTY=pts/2 ; PWD=/ ; USER=puppet ; COMMAND=list /bin/cat /var/lib/puppet/state/last_run_summary.yaml
    Jan 20 13:59:27 tools-webgrid-lighttpd-1209 sudo:  diamond : TTY=pts/2 ; PWD=/ ; USER=puppet ; COMMAND=/bin/cat /var/lib/puppet/state/last_run_summary.yaml
    Jan 20 13:59:27 tools-webgrid-lighttpd-1209 sudo: pam_unix(sudo:session): session opened for user puppet by (uid=109)
    Jan 20 13:59:27 tools-webgrid-lighttpd-1209 sudo: pam_unix(sudo:session): session closed for user puppet
    Jan 20 14:00:12 tools-webgrid-lighttpd-1209 sshd[1182]: Set /proc/self/oom_score_adj to 0
    Jan 20 14:00:12 tools-webgrid-lighttpd-1209 sshd[1182]: Connection from 10.68.17.228 port 58664 on 10.68.17.152 port 22
    Jan 20 14:00:27 tools-webgrid-lighttpd-1209 sudo:  diamond : TTY=pts/2 ; PWD=/ ; USER=root ; COMMAND=/bin/ls /var/spool/cron/crontabs/
    Jan 20 14:00:27 tools-webgrid-lighttpd-1209 sudo: pam_unix(sudo:session): session opened for user root by (uid=109)
    Jan 20 14:00:27 tools-webgrid-lighttpd-1209 sudo: pam_unix(sudo:session): session closed for user root
    Jan 20 14:00:27 tools-webgrid-lighttpd-1209 sudo:  diamond : TTY=pts/2 ; PWD=/ ; USER=puppet ; COMMAND=list /bin/cat /var/lib/puppet/state/last_run_summary.yaml
    Jan 20 14:00:28 tools-webgrid-lighttpd-1209 sudo:  diamond : TTY=pts/2 ; PWD=/ ; USER=puppet ; COMMAND=/bin/cat /var/lib/puppet/state/last_run_summary.yaml
    Jan 20 14:00:28 tools-webgrid-lighttpd-1209 sudo: pam_unix(sudo:session): session opened for user puppet by (uid=109)
    Jan 20 14:00:28 tools-webgrid-lighttpd-1209 sudo: pam_unix(sudo:session): session closed for user puppet
    Jan 20 14:01:27 tools-webgrid-lighttpd-1209 sudo:  diamond : TTY=pts/2 ; PWD=/ ; USER=root ; COMMAND=/bin/ls /var/spool/cron/crontabs/
    Jan 20 14:01:27 tools-webgrid-lighttpd-1209 sudo: pam_unix(sudo:session): session opened for user root by (uid=109)
    Jan 20 14:01:27 tools-webgrid-lighttpd-1209 sudo: pam_unix(sudo:session): session closed for user root
    Jan 20 14:01:28 tools-webgrid-lighttpd-1209 sudo:  diamond : TTY=pts/2 ; PWD=/ ; USER=puppet ; COMMAND=list /bin/cat /var/lib/puppet/state/last_run_summary.yaml
    Jan 20 14:01:28 tools-webgrid-lighttpd-1209 sudo:  diamond : TTY=pts/2 ; PWD=/ ; USER=puppet ; COMMAND=/bin/cat /var/lib/puppet/state/last_run_summary.yaml
    Jan 20 14:01:28 tools-webgrid-lighttpd-1209 sudo: pam_unix(sudo:session): session opened for user puppet by (uid=109)
    Jan 20 14:01:28 tools-webgrid-lighttpd-1209 sudo: pam_unix(sudo:session): session closed for user puppet
    Jan 20 14:02:28 tools-webgrid-lighttpd-1209 sudo:  diamond : TTY=pts/2 ; PWD=/ ; USER=root ; COMMAND=/bin/ls /var/spool/cron/crontabs/
    Jan 20 14:02:28 tools-webgrid-lighttpd-1209 sudo: pam_unix(sudo:session): session opened for user root by (uid=109)
    Jan 20 14:02:28 tools-webgrid-lighttpd-1209 sudo: pam_unix(sudo:session): session closed for user root
    Jan 20 14:02:28 tools-webgrid-lighttpd-1209 sudo:  diamond : TTY=pts/2 ; PWD=/ ; USER=puppet ; COMMAND=list /bin/cat /var/lib/puppet/state/last_run_summary.yaml
    Jan 20 14:02:28 tools-webgrid-lighttpd-1209 sudo:  diamond : TTY=pts/2 ; PWD=/ ; USER=puppet ; COMMAND=/bin/cat /var/lib/puppet/state/last_run_summary.yaml
    Jan 20 14:02:28 tools-webgrid-lighttpd-1209 sudo: pam_unix(sudo:session): session opened for user puppet by (uid=109)
    Jan 20 14:02:28 tools-webgrid-lighttpd-1209 sudo: pam_unix(sudo:session): session closed for user puppet
root@labcontrol1001:~# salt 'tools-webgrid-lighttpd-1209.tools.eqiad.wmflabs' cmd.run "grep scfc /var/log/auth.log"
tools-webgrid-lighttpd-1209.tools.eqiad.wmflabs:
    Jan 17 07:00:10 tools-webgrid-lighttpd-1209 sshd[30620]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 17 07:00:10 tools-webgrid-lighttpd-1209 sshd[30620]: Accepted hostbased for scfc from 10.68.17.228 port 42871 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 17 07:00:10 tools-webgrid-lighttpd-1209 sshd[30620]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 17 07:00:10 tools-webgrid-lighttpd-1209 sshd[30635]: Starting session: command for scfc from 10.68.17.228 port 42871
    Jan 17 07:00:10 tools-webgrid-lighttpd-1209 sshd[30620]: pam_unix(sshd:session): session closed for user scfc
    Jan 17 07:30:09 tools-webgrid-lighttpd-1209 sshd[791]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 17 07:30:09 tools-webgrid-lighttpd-1209 sshd[791]: Accepted hostbased for scfc from 10.68.17.228 port 42214 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 17 07:30:09 tools-webgrid-lighttpd-1209 sshd[791]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 17 07:30:09 tools-webgrid-lighttpd-1209 sshd[808]: Starting session: command for scfc from 10.68.17.228 port 42214
    Jan 17 07:30:09 tools-webgrid-lighttpd-1209 sshd[791]: pam_unix(sshd:session): session closed for user scfc
    Jan 17 08:00:09 tools-webgrid-lighttpd-1209 sshd[3485]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 17 08:00:10 tools-webgrid-lighttpd-1209 sshd[3485]: Accepted hostbased for scfc from 10.68.17.228 port 41532 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 17 08:00:10 tools-webgrid-lighttpd-1209 sshd[3485]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 17 08:00:10 tools-webgrid-lighttpd-1209 sshd[3500]: Starting session: command for scfc from 10.68.17.228 port 41532
    Jan 17 08:00:10 tools-webgrid-lighttpd-1209 sshd[3485]: pam_unix(sshd:session): session closed for user scfc
    Jan 17 08:30:11 tools-webgrid-lighttpd-1209 sshd[6186]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 17 08:30:11 tools-webgrid-lighttpd-1209 sshd[6186]: Accepted hostbased for scfc from 10.68.17.228 port 40429 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 17 08:30:11 tools-webgrid-lighttpd-1209 sshd[6186]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 17 08:30:11 tools-webgrid-lighttpd-1209 sshd[6201]: Starting session: command for scfc from 10.68.17.228 port 40429
    Jan 17 08:30:11 tools-webgrid-lighttpd-1209 sshd[6186]: pam_unix(sshd:session): session closed for user scfc
    Jan 17 09:00:09 tools-webgrid-lighttpd-1209 sshd[9005]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 17 09:00:09 tools-webgrid-lighttpd-1209 sshd[9005]: Accepted hostbased for scfc from 10.68.17.228 port 39776 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 17 09:00:09 tools-webgrid-lighttpd-1209 sshd[9005]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 17 09:00:09 tools-webgrid-lighttpd-1209 sshd[9020]: Starting session: command for scfc from 10.68.17.228 port 39776
    Jan 17 09:00:09 tools-webgrid-lighttpd-1209 sshd[9005]: pam_unix(sshd:session): session closed for user scfc
    Jan 17 09:30:11 tools-webgrid-lighttpd-1209 sshd[11801]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 17 09:30:12 tools-webgrid-lighttpd-1209 sshd[11801]: Accepted hostbased for scfc from 10.68.17.228 port 39078 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 17 09:30:12 tools-webgrid-lighttpd-1209 sshd[11801]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 17 09:30:12 tools-webgrid-lighttpd-1209 sshd[11830]: Starting session: command for scfc from 10.68.17.228 port 39078
    Jan 17 09:30:12 tools-webgrid-lighttpd-1209 sshd[11801]: pam_unix(sshd:session): session closed for user scfc
    Jan 17 10:00:10 tools-webgrid-lighttpd-1209 sshd[14445]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 17 10:00:10 tools-webgrid-lighttpd-1209 sshd[14445]: Accepted hostbased for scfc from 10.68.17.228 port 38435 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 17 10:00:10 tools-webgrid-lighttpd-1209 sshd[14445]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 17 10:00:10 tools-webgrid-lighttpd-1209 sshd[14460]: Starting session: command for scfc from 10.68.17.228 port 38435
    Jan 17 10:00:10 tools-webgrid-lighttpd-1209 sshd[14445]: pam_unix(sshd:session): session closed for user scfc
    Jan 17 10:30:12 tools-webgrid-lighttpd-1209 sshd[17071]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 17 10:30:12 tools-webgrid-lighttpd-1209 sshd[17071]: Accepted hostbased for scfc from 10.68.17.228 port 38091 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 17 10:30:12 tools-webgrid-lighttpd-1209 sshd[17071]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 17 10:30:12 tools-webgrid-lighttpd-1209 sshd[17086]: Starting session: command for scfc from 10.68.17.228 port 38091
    Jan 17 10:30:12 tools-webgrid-lighttpd-1209 sshd[17071]: pam_unix(sshd:session): session closed for user scfc
    Jan 17 11:00:12 tools-webgrid-lighttpd-1209 sshd[19697]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 17 11:00:12 tools-webgrid-lighttpd-1209 sshd[19697]: Accepted hostbased for scfc from 10.68.17.228 port 36095 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 17 11:00:12 tools-webgrid-lighttpd-1209 sshd[19697]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 17 11:00:12 tools-webgrid-lighttpd-1209 sshd[19712]: Starting session: command for scfc from 10.68.17.228 port 36095
    Jan 17 11:00:12 tools-webgrid-lighttpd-1209 sshd[19697]: pam_unix(sshd:session): session closed for user scfc
    Jan 17 11:30:10 tools-webgrid-lighttpd-1209 sshd[22320]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 17 11:30:10 tools-webgrid-lighttpd-1209 sshd[22320]: Accepted hostbased for scfc from 10.68.17.228 port 33924 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 17 11:30:10 tools-webgrid-lighttpd-1209 sshd[22320]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 17 11:30:10 tools-webgrid-lighttpd-1209 sshd[22335]: Starting session: command for scfc from 10.68.17.228 port 33924
    Jan 17 11:30:10 tools-webgrid-lighttpd-1209 sshd[22320]: pam_unix(sshd:session): session closed for user scfc
    Jan 17 12:00:11 tools-webgrid-lighttpd-1209 sshd[24925]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 17 12:00:11 tools-webgrid-lighttpd-1209 sshd[24925]: Accepted hostbased for scfc from 10.68.17.228 port 39089 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 17 12:00:11 tools-webgrid-lighttpd-1209 sshd[24925]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 17 12:00:11 tools-webgrid-lighttpd-1209 sshd[24940]: Starting session: command for scfc from 10.68.17.228 port 39089
    Jan 17 12:00:11 tools-webgrid-lighttpd-1209 sshd[24925]: pam_unix(sshd:session): session closed for user scfc
    Jan 17 12:30:11 tools-webgrid-lighttpd-1209 sshd[27561]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 17 12:30:11 tools-webgrid-lighttpd-1209 sshd[27561]: Accepted hostbased for scfc from 10.68.17.228 port 56683 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 17 12:30:11 tools-webgrid-lighttpd-1209 sshd[27561]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 17 12:30:11 tools-webgrid-lighttpd-1209 sshd[27576]: Starting session: command for scfc from 10.68.17.228 port 56683
    Jan 17 12:30:11 tools-webgrid-lighttpd-1209 sshd[27561]: pam_unix(sshd:session): session closed for user scfc
    Jan 17 13:00:12 tools-webgrid-lighttpd-1209 sshd[30188]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 17 13:00:12 tools-webgrid-lighttpd-1209 sshd[30188]: Accepted hostbased for scfc from 10.68.17.228 port 55574 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 17 13:00:12 tools-webgrid-lighttpd-1209 sshd[30188]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 17 13:00:12 tools-webgrid-lighttpd-1209 sshd[30203]: Starting session: command for scfc from 10.68.17.228 port 55574
    Jan 17 13:00:12 tools-webgrid-lighttpd-1209 sshd[30188]: pam_unix(sshd:session): session closed for user scfc
    Jan 17 13:30:13 tools-webgrid-lighttpd-1209 sshd[386]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 17 13:30:13 tools-webgrid-lighttpd-1209 sshd[386]: Accepted hostbased for scfc from 10.68.17.228 port 33464 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 17 13:30:13 tools-webgrid-lighttpd-1209 sshd[386]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 17 13:30:13 tools-webgrid-lighttpd-1209 sshd[401]: Starting session: command for scfc from 10.68.17.228 port 33464
    Jan 17 13:30:13 tools-webgrid-lighttpd-1209 sshd[386]: pam_unix(sshd:session): session closed for user scfc
    Jan 17 14:00:12 tools-webgrid-lighttpd-1209 sshd[3107]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 17 14:00:12 tools-webgrid-lighttpd-1209 sshd[3107]: Accepted hostbased for scfc from 10.68.17.228 port 48518 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 17 14:00:12 tools-webgrid-lighttpd-1209 sshd[3107]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 17 14:00:12 tools-webgrid-lighttpd-1209 sshd[3122]: Starting session: command for scfc from 10.68.17.228 port 48518
    Jan 17 14:00:12 tools-webgrid-lighttpd-1209 sshd[3107]: pam_unix(sshd:session): session closed for user scfc
    Jan 17 14:09:20 tools-webgrid-lighttpd-1209 sshd[3261]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 17 14:09:20 tools-webgrid-lighttpd-1209 sshd[3261]: Accepted hostbased for scfc from 10.68.17.228 port 40261 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 17 14:09:20 tools-webgrid-lighttpd-1209 sshd[3261]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 17 14:09:20 tools-webgrid-lighttpd-1209 sshd[3276]: Starting session: command for scfc from 10.68.17.228 port 40261
    Jan 17 14:09:20 tools-webgrid-lighttpd-1209 sshd[3261]: pam_unix(sshd:session): session closed for user scfc
    Jan 17 14:30:15 tools-webgrid-lighttpd-1209 sshd[5754]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 17 14:30:15 tools-webgrid-lighttpd-1209 sshd[5754]: Accepted hostbased for scfc from 10.68.17.228 port 34070 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 17 14:30:15 tools-webgrid-lighttpd-1209 sshd[5754]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 17 14:30:15 tools-webgrid-lighttpd-1209 sshd[5769]: Starting session: command for scfc from 10.68.17.228 port 34070
    Jan 17 14:30:15 tools-webgrid-lighttpd-1209 sshd[5754]: pam_unix(sshd:session): session closed for user scfc
    Jan 17 15:00:10 tools-webgrid-lighttpd-1209 sshd[8440]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 17 15:00:10 tools-webgrid-lighttpd-1209 sshd[8440]: Accepted hostbased for scfc from 10.68.17.228 port 49644 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 17 15:00:10 tools-webgrid-lighttpd-1209 sshd[8440]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 17 15:00:10 tools-webgrid-lighttpd-1209 sshd[8455]: Starting session: command for scfc from 10.68.17.228 port 49644
    Jan 17 15:00:10 tools-webgrid-lighttpd-1209 sshd[8440]: pam_unix(sshd:session): session closed for user scfc
    Jan 17 15:30:11 tools-webgrid-lighttpd-1209 sshd[11238]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 17 15:30:11 tools-webgrid-lighttpd-1209 sshd[11238]: Accepted hostbased for scfc from 10.68.17.228 port 44763 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 17 15:30:11 tools-webgrid-lighttpd-1209 sshd[11238]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 17 15:30:11 tools-webgrid-lighttpd-1209 sshd[11253]: Starting session: command for scfc from 10.68.17.228 port 44763
    Jan 17 15:30:11 tools-webgrid-lighttpd-1209 sshd[11238]: pam_unix(sshd:session): session closed for user scfc
    Jan 17 16:00:16 tools-webgrid-lighttpd-1209 sshd[13903]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 17 16:00:16 tools-webgrid-lighttpd-1209 sshd[13903]: Accepted hostbased for scfc from 10.68.17.228 port 59315 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 17 16:00:16 tools-webgrid-lighttpd-1209 sshd[13903]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 17 16:00:17 tools-webgrid-lighttpd-1209 sshd[13918]: Starting session: command for scfc from 10.68.17.228 port 59315
    Jan 17 16:00:17 tools-webgrid-lighttpd-1209 sshd[13903]: pam_unix(sshd:session): session closed for user scfc
    Jan 17 16:12:22 tools-webgrid-lighttpd-1209 sshd[16050]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 17 16:12:22 tools-webgrid-lighttpd-1209 sshd[16050]: Accepted hostbased for scfc from 10.68.17.228 port 52468 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 17 16:12:22 tools-webgrid-lighttpd-1209 sshd[16050]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 17 16:12:22 tools-webgrid-lighttpd-1209 sshd[16073]: Starting session: command for scfc from 10.68.17.228 port 52468
    Jan 17 16:12:22 tools-webgrid-lighttpd-1209 sshd[16050]: pam_unix(sshd:session): session closed for user scfc
    Jan 17 16:30:12 tools-webgrid-lighttpd-1209 sshd[16564]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 17 16:30:12 tools-webgrid-lighttpd-1209 sshd[16564]: Accepted hostbased for scfc from 10.68.17.228 port 38518 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 17 16:30:12 tools-webgrid-lighttpd-1209 sshd[16564]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 17 16:30:12 tools-webgrid-lighttpd-1209 sshd[16579]: Starting session: command for scfc from 10.68.17.228 port 38518
    Jan 17 16:30:12 tools-webgrid-lighttpd-1209 sshd[16564]: pam_unix(sshd:session): session closed for user scfc
    Jan 17 17:00:10 tools-webgrid-lighttpd-1209 sshd[19201]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 17 17:00:10 tools-webgrid-lighttpd-1209 sshd[19201]: Accepted hostbased for scfc from 10.68.17.228 port 48427 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 17 17:00:10 tools-webgrid-lighttpd-1209 sshd[19201]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 17 17:00:10 tools-webgrid-lighttpd-1209 sshd[19216]: Starting session: command for scfc from 10.68.17.228 port 48427
    Jan 17 17:00:10 tools-webgrid-lighttpd-1209 sshd[19201]: pam_unix(sshd:session): session closed for user scfc
    Jan 17 17:30:12 tools-webgrid-lighttpd-1209 sshd[21834]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 17 17:30:12 tools-webgrid-lighttpd-1209 sshd[21834]: Accepted hostbased for scfc from 10.68.17.228 port 33226 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 17 17:30:12 tools-webgrid-lighttpd-1209 sshd[21834]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 17 17:30:12 tools-webgrid-lighttpd-1209 sshd[21849]: Starting session: command for scfc from 10.68.17.228 port 33226
    Jan 17 17:30:12 tools-webgrid-lighttpd-1209 sshd[21834]: pam_unix(sshd:session): session closed for user scfc
    Jan 17 18:00:11 tools-webgrid-lighttpd-1209 sshd[24467]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 17 18:00:11 tools-webgrid-lighttpd-1209 sshd[24467]: Accepted hostbased for scfc from 10.68.17.228 port 59790 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 17 18:00:11 tools-webgrid-lighttpd-1209 sshd[24467]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 17 18:00:11 tools-webgrid-lighttpd-1209 sshd[24482]: Starting session: command for scfc from 10.68.17.228 port 59790
    Jan 17 18:00:11 tools-webgrid-lighttpd-1209 sshd[24467]: pam_unix(sshd:session): session closed for user scfc
    Jan 17 18:30:11 tools-webgrid-lighttpd-1209 sshd[27106]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 17 18:30:11 tools-webgrid-lighttpd-1209 sshd[27106]: Accepted hostbased for scfc from 10.68.17.228 port 58624 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 17 18:30:11 tools-webgrid-lighttpd-1209 sshd[27106]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 17 18:30:11 tools-webgrid-lighttpd-1209 sshd[27121]: Starting session: command for scfc from 10.68.17.228 port 58624
    Jan 17 18:30:11 tools-webgrid-lighttpd-1209 sshd[27106]: pam_unix(sshd:session): session closed for user scfc
    Jan 17 19:00:12 tools-webgrid-lighttpd-1209 sshd[29732]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 17 19:00:12 tools-webgrid-lighttpd-1209 sshd[29732]: Accepted hostbased for scfc from 10.68.17.228 port 56829 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 17 19:00:12 tools-webgrid-lighttpd-1209 sshd[29732]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 17 19:00:12 tools-webgrid-lighttpd-1209 sshd[29747]: Starting session: command for scfc from 10.68.17.228 port 56829
    Jan 17 19:00:12 tools-webgrid-lighttpd-1209 sshd[29732]: pam_unix(sshd:session): session closed for user scfc
    Jan 17 19:30:11 tools-webgrid-lighttpd-1209 sshd[32361]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 17 19:30:11 tools-webgrid-lighttpd-1209 sshd[32361]: Accepted hostbased for scfc from 10.68.17.228 port 36138 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 17 19:30:11 tools-webgrid-lighttpd-1209 sshd[32361]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 17 19:30:11 tools-webgrid-lighttpd-1209 sshd[32376]: Starting session: command for scfc from 10.68.17.228 port 36138
    Jan 17 19:30:11 tools-webgrid-lighttpd-1209 sshd[32361]: pam_unix(sshd:session): session closed for user scfc
    Jan 17 20:00:11 tools-webgrid-lighttpd-1209 sshd[2620]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 17 20:00:11 tools-webgrid-lighttpd-1209 sshd[2620]: Accepted hostbased for scfc from 10.68.17.228 port 50466 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 17 20:00:11 tools-webgrid-lighttpd-1209 sshd[2620]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 17 20:00:11 tools-webgrid-lighttpd-1209 sshd[2635]: Starting session: command for scfc from 10.68.17.228 port 50466
    Jan 17 20:00:12 tools-webgrid-lighttpd-1209 sshd[2620]: pam_unix(sshd:session): session closed for user scfc
    Jan 17 20:30:12 tools-webgrid-lighttpd-1209 sshd[5278]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 17 20:30:12 tools-webgrid-lighttpd-1209 sshd[5278]: Accepted hostbased for scfc from 10.68.17.228 port 41457 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 17 20:30:12 tools-webgrid-lighttpd-1209 sshd[5278]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 17 20:30:12 tools-webgrid-lighttpd-1209 sshd[5294]: Starting session: command for scfc from 10.68.17.228 port 41457
    Jan 17 20:30:12 tools-webgrid-lighttpd-1209 sshd[5278]: pam_unix(sshd:session): session closed for user scfc
    Jan 17 21:00:16 tools-webgrid-lighttpd-1209 sshd[7982]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 17 21:00:16 tools-webgrid-lighttpd-1209 sshd[7982]: Accepted hostbased for scfc from 10.68.17.228 port 45640 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 17 21:00:16 tools-webgrid-lighttpd-1209 sshd[7982]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 17 21:00:16 tools-webgrid-lighttpd-1209 sshd[7997]: Starting session: command for scfc from 10.68.17.228 port 45640
    Jan 17 21:00:16 tools-webgrid-lighttpd-1209 sshd[7982]: pam_unix(sshd:session): session closed for user scfc
    Jan 17 21:30:13 tools-webgrid-lighttpd-1209 sshd[10772]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 17 21:30:13 tools-webgrid-lighttpd-1209 sshd[10772]: Accepted hostbased for scfc from 10.68.17.228 port 52523 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 17 21:30:13 tools-webgrid-lighttpd-1209 sshd[10772]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 17 21:30:13 tools-webgrid-lighttpd-1209 sshd[10787]: Starting session: command for scfc from 10.68.17.228 port 52523
    Jan 17 21:30:13 tools-webgrid-lighttpd-1209 sshd[10772]: pam_unix(sshd:session): session closed for user scfc
    Jan 17 22:00:12 tools-webgrid-lighttpd-1209 sshd[13442]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 17 22:00:12 tools-webgrid-lighttpd-1209 sshd[13442]: Accepted hostbased for scfc from 10.68.17.228 port 51592 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 17 22:00:12 tools-webgrid-lighttpd-1209 sshd[13442]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 17 22:00:12 tools-webgrid-lighttpd-1209 sshd[13457]: Starting session: command for scfc from 10.68.17.228 port 51592
    Jan 17 22:00:12 tools-webgrid-lighttpd-1209 sshd[13442]: pam_unix(sshd:session): session closed for user scfc
    Jan 17 22:30:10 tools-webgrid-lighttpd-1209 sshd[16058]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 17 22:30:10 tools-webgrid-lighttpd-1209 sshd[16058]: Accepted hostbased for scfc from 10.68.17.228 port 51017 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 17 22:30:10 tools-webgrid-lighttpd-1209 sshd[16058]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 17 22:30:11 tools-webgrid-lighttpd-1209 sshd[16073]: Starting session: command for scfc from 10.68.17.228 port 51017
    Jan 17 22:30:11 tools-webgrid-lighttpd-1209 sshd[16058]: pam_unix(sshd:session): session closed for user scfc
    Jan 17 23:00:10 tools-webgrid-lighttpd-1209 sshd[18683]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 17 23:00:10 tools-webgrid-lighttpd-1209 sshd[18683]: Accepted hostbased for scfc from 10.68.17.228 port 54692 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 17 23:00:10 tools-webgrid-lighttpd-1209 sshd[18683]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 17 23:00:10 tools-webgrid-lighttpd-1209 sshd[18698]: Starting session: command for scfc from 10.68.17.228 port 54692
    Jan 17 23:00:10 tools-webgrid-lighttpd-1209 sshd[18683]: pam_unix(sshd:session): session closed for user scfc
    Jan 17 23:30:10 tools-webgrid-lighttpd-1209 sshd[21306]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 17 23:30:10 tools-webgrid-lighttpd-1209 sshd[21306]: Accepted hostbased for scfc from 10.68.17.228 port 33380 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 17 23:30:10 tools-webgrid-lighttpd-1209 sshd[21306]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 17 23:30:10 tools-webgrid-lighttpd-1209 sshd[21321]: Starting session: command for scfc from 10.68.17.228 port 33380
    Jan 17 23:30:10 tools-webgrid-lighttpd-1209 sshd[21306]: pam_unix(sshd:session): session closed for user scfc
    Jan 18 00:00:11 tools-webgrid-lighttpd-1209 sshd[23960]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 18 00:00:11 tools-webgrid-lighttpd-1209 sshd[23960]: Accepted hostbased for scfc from 10.68.17.228 port 47038 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 18 00:00:11 tools-webgrid-lighttpd-1209 sshd[23960]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 18 00:00:11 tools-webgrid-lighttpd-1209 sshd[23975]: Starting session: command for scfc from 10.68.17.228 port 47038
    Jan 18 00:00:11 tools-webgrid-lighttpd-1209 sshd[23960]: pam_unix(sshd:session): session closed for user scfc
    Jan 18 00:30:12 tools-webgrid-lighttpd-1209 sshd[26573]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 18 00:30:12 tools-webgrid-lighttpd-1209 sshd[26573]: Accepted hostbased for scfc from 10.68.17.228 port 40769 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 18 00:30:12 tools-webgrid-lighttpd-1209 sshd[26573]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 18 00:30:12 tools-webgrid-lighttpd-1209 sshd[26588]: Starting session: command for scfc from 10.68.17.228 port 40769
    Jan 18 00:30:12 tools-webgrid-lighttpd-1209 sshd[26573]: pam_unix(sshd:session): session closed for user scfc
    Jan 18 01:00:10 tools-webgrid-lighttpd-1209 sshd[29194]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 18 01:00:10 tools-webgrid-lighttpd-1209 sshd[29194]: Accepted hostbased for scfc from 10.68.17.228 port 38105 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 18 01:00:10 tools-webgrid-lighttpd-1209 sshd[29194]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 18 01:00:10 tools-webgrid-lighttpd-1209 sshd[29209]: Starting session: command for scfc from 10.68.17.228 port 38105
    Jan 18 01:00:10 tools-webgrid-lighttpd-1209 sshd[29194]: pam_unix(sshd:session): session closed for user scfc
    Jan 18 01:30:11 tools-webgrid-lighttpd-1209 sshd[31829]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 18 01:30:11 tools-webgrid-lighttpd-1209 sshd[31829]: Accepted hostbased for scfc from 10.68.17.228 port 55524 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 18 01:30:11 tools-webgrid-lighttpd-1209 sshd[31829]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 18 01:30:12 tools-webgrid-lighttpd-1209 sshd[31844]: Starting session: command for scfc from 10.68.17.228 port 55524
    Jan 18 01:30:12 tools-webgrid-lighttpd-1209 sshd[31829]: pam_unix(sshd:session): session closed for user scfc
    Jan 18 02:00:12 tools-webgrid-lighttpd-1209 sshd[2078]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 18 02:00:13 tools-webgrid-lighttpd-1209 sshd[2078]: Accepted hostbased for scfc from 10.68.17.228 port 54055 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 18 02:00:13 tools-webgrid-lighttpd-1209 sshd[2078]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 18 02:00:13 tools-webgrid-lighttpd-1209 sshd[2093]: Starting session: command for scfc from 10.68.17.228 port 54055
    Jan 18 02:00:13 tools-webgrid-lighttpd-1209 sshd[2078]: pam_unix(sshd:session): session closed for user scfc
    Jan 18 02:30:10 tools-webgrid-lighttpd-1209 sshd[4700]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 18 02:30:10 tools-webgrid-lighttpd-1209 sshd[4700]: Accepted hostbased for scfc from 10.68.17.228 port 48134 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 18 02:30:10 tools-webgrid-lighttpd-1209 sshd[4700]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 18 02:30:10 tools-webgrid-lighttpd-1209 sshd[4719]: Starting session: command for scfc from 10.68.17.228 port 48134
    Jan 18 02:30:10 tools-webgrid-lighttpd-1209 sshd[4700]: pam_unix(sshd:session): session closed for user scfc
    Jan 18 03:00:10 tools-webgrid-lighttpd-1209 sshd[7373]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 18 03:00:11 tools-webgrid-lighttpd-1209 sshd[7373]: Accepted hostbased for scfc from 10.68.17.228 port 53048 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 18 03:00:11 tools-webgrid-lighttpd-1209 sshd[7373]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 18 03:00:11 tools-webgrid-lighttpd-1209 sshd[7390]: Starting session: command for scfc from 10.68.17.228 port 53048
    Jan 18 03:00:11 tools-webgrid-lighttpd-1209 sshd[7373]: pam_unix(sshd:session): session closed for user scfc
    Jan 18 03:30:10 tools-webgrid-lighttpd-1209 sshd[10206]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 18 03:30:10 tools-webgrid-lighttpd-1209 sshd[10206]: Accepted hostbased for scfc from 10.68.17.228 port 57728 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 18 03:30:10 tools-webgrid-lighttpd-1209 sshd[10206]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 18 03:30:10 tools-webgrid-lighttpd-1209 sshd[10221]: Starting session: command for scfc from 10.68.17.228 port 57728
    Jan 18 03:30:10 tools-webgrid-lighttpd-1209 sshd[10206]: pam_unix(sshd:session): session closed for user scfc
    Jan 18 04:00:09 tools-webgrid-lighttpd-1209 sshd[12855]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 18 04:00:09 tools-webgrid-lighttpd-1209 sshd[12855]: Accepted hostbased for scfc from 10.68.17.228 port 34111 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 18 04:00:09 tools-webgrid-lighttpd-1209 sshd[12855]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 18 04:00:09 tools-webgrid-lighttpd-1209 sshd[12870]: Starting session: command for scfc from 10.68.17.228 port 34111
    Jan 18 04:00:09 tools-webgrid-lighttpd-1209 sshd[12855]: pam_unix(sshd:session): session closed for user scfc
    Jan 18 04:30:11 tools-webgrid-lighttpd-1209 sshd[15477]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 18 04:30:11 tools-webgrid-lighttpd-1209 sshd[15477]: Accepted hostbased for scfc from 10.68.17.228 port 38764 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 18 04:30:11 tools-webgrid-lighttpd-1209 sshd[15477]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 18 04:30:11 tools-webgrid-lighttpd-1209 sshd[15492]: Starting session: command for scfc from 10.68.17.228 port 38764
    Jan 18 04:30:11 tools-webgrid-lighttpd-1209 sshd[15477]: pam_unix(sshd:session): session closed for user scfc
    Jan 18 05:00:08 tools-webgrid-lighttpd-1209 sshd[18096]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 18 05:00:08 tools-webgrid-lighttpd-1209 sshd[18096]: Accepted hostbased for scfc from 10.68.17.228 port 43565 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 18 05:00:08 tools-webgrid-lighttpd-1209 sshd[18096]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 18 05:00:08 tools-webgrid-lighttpd-1209 sshd[18111]: Starting session: command for scfc from 10.68.17.228 port 43565
    Jan 18 05:00:08 tools-webgrid-lighttpd-1209 sshd[18096]: pam_unix(sshd:session): session closed for user scfc
    Jan 18 05:30:09 tools-webgrid-lighttpd-1209 sshd[20729]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 18 05:30:09 tools-webgrid-lighttpd-1209 sshd[20729]: Accepted hostbased for scfc from 10.68.17.228 port 48326 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 18 05:30:09 tools-webgrid-lighttpd-1209 sshd[20729]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 18 05:30:09 tools-webgrid-lighttpd-1209 sshd[20744]: Starting session: command for scfc from 10.68.17.228 port 48326
    Jan 18 05:30:09 tools-webgrid-lighttpd-1209 sshd[20729]: pam_unix(sshd:session): session closed for user scfc
    Jan 18 06:00:12 tools-webgrid-lighttpd-1209 sshd[23339]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 18 06:00:12 tools-webgrid-lighttpd-1209 sshd[23339]: Accepted hostbased for scfc from 10.68.17.228 port 52994 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 18 06:00:12 tools-webgrid-lighttpd-1209 sshd[23339]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 18 06:00:12 tools-webgrid-lighttpd-1209 sshd[23354]: Starting session: command for scfc from 10.68.17.228 port 52994
    Jan 18 06:00:12 tools-webgrid-lighttpd-1209 sshd[23339]: pam_unix(sshd:session): session closed for user scfc
    Jan 18 06:30:11 tools-webgrid-lighttpd-1209 sshd[26040]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 18 06:30:11 tools-webgrid-lighttpd-1209 sshd[26040]: Accepted hostbased for scfc from 10.68.17.228 port 57554 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 18 06:30:11 tools-webgrid-lighttpd-1209 sshd[26040]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 18 06:30:11 tools-webgrid-lighttpd-1209 sshd[26055]: Starting session: command for scfc from 10.68.17.228 port 57554
    Jan 18 06:30:11 tools-webgrid-lighttpd-1209 sshd[26040]: pam_unix(sshd:session): session closed for user scfc
    Jan 18 07:00:10 tools-webgrid-lighttpd-1209 sshd[28838]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 18 07:00:10 tools-webgrid-lighttpd-1209 sshd[28838]: Accepted hostbased for scfc from 10.68.17.228 port 33528 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 18 07:00:10 tools-webgrid-lighttpd-1209 sshd[28838]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 18 07:00:10 tools-webgrid-lighttpd-1209 sshd[28853]: Starting session: command for scfc from 10.68.17.228 port 33528
    Jan 18 07:00:11 tools-webgrid-lighttpd-1209 sshd[28838]: pam_unix(sshd:session): session closed for user scfc
    Jan 18 07:30:10 tools-webgrid-lighttpd-1209 sshd[31454]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 18 07:30:11 tools-webgrid-lighttpd-1209 sshd[31454]: Accepted hostbased for scfc from 10.68.17.228 port 37928 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 18 07:30:11 tools-webgrid-lighttpd-1209 sshd[31454]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 18 07:30:11 tools-webgrid-lighttpd-1209 sshd[31469]: Starting session: command for scfc from 10.68.17.228 port 37928
    Jan 18 07:30:11 tools-webgrid-lighttpd-1209 sshd[31454]: pam_unix(sshd:session): session closed for user scfc
    Jan 18 08:00:10 tools-webgrid-lighttpd-1209 sshd[1696]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 18 08:00:10 tools-webgrid-lighttpd-1209 sshd[1696]: Accepted hostbased for scfc from 10.68.17.228 port 42393 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 18 08:00:10 tools-webgrid-lighttpd-1209 sshd[1696]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 18 08:00:10 tools-webgrid-lighttpd-1209 sshd[1711]: Starting session: command for scfc from 10.68.17.228 port 42393
    Jan 18 08:00:10 tools-webgrid-lighttpd-1209 sshd[1696]: pam_unix(sshd:session): session closed for user scfc
    Jan 18 08:30:10 tools-webgrid-lighttpd-1209 sshd[4414]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 18 08:30:10 tools-webgrid-lighttpd-1209 sshd[4414]: Accepted hostbased for scfc from 10.68.17.228 port 46935 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 18 08:30:10 tools-webgrid-lighttpd-1209 sshd[4414]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 18 08:30:11 tools-webgrid-lighttpd-1209 sshd[4429]: Starting session: command for scfc from 10.68.17.228 port 46935
    Jan 18 08:30:11 tools-webgrid-lighttpd-1209 sshd[4414]: pam_unix(sshd:session): session closed for user scfc
    Jan 18 09:00:14 tools-webgrid-lighttpd-1209 sshd[7192]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 18 09:00:14 tools-webgrid-lighttpd-1209 sshd[7192]: Accepted hostbased for scfc from 10.68.17.228 port 51505 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 18 09:00:14 tools-webgrid-lighttpd-1209 sshd[7192]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 18 09:00:14 tools-webgrid-lighttpd-1209 sshd[7207]: Starting session: command for scfc from 10.68.17.228 port 51505
    Jan 18 09:00:14 tools-webgrid-lighttpd-1209 sshd[7192]: pam_unix(sshd:session): session closed for user scfc
    Jan 18 09:30:17 tools-webgrid-lighttpd-1209 sshd[10015]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 18 09:30:17 tools-webgrid-lighttpd-1209 sshd[10015]: Accepted hostbased for scfc from 10.68.17.228 port 56563 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 18 09:30:17 tools-webgrid-lighttpd-1209 sshd[10015]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 18 09:30:17 tools-webgrid-lighttpd-1209 sshd[10032]: Starting session: command for scfc from 10.68.17.228 port 56563
    Jan 18 09:30:17 tools-webgrid-lighttpd-1209 sshd[10015]: pam_unix(sshd:session): session closed for user scfc
    Jan 18 10:00:10 tools-webgrid-lighttpd-1209 sshd[12682]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 18 10:00:10 tools-webgrid-lighttpd-1209 sshd[12682]: Accepted hostbased for scfc from 10.68.17.228 port 32878 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 18 10:00:10 tools-webgrid-lighttpd-1209 sshd[12682]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 18 10:00:11 tools-webgrid-lighttpd-1209 sshd[12697]: Starting session: command for scfc from 10.68.17.228 port 32878
    Jan 18 10:00:11 tools-webgrid-lighttpd-1209 sshd[12682]: pam_unix(sshd:session): session closed for user scfc
    Jan 18 10:30:11 tools-webgrid-lighttpd-1209 sshd[15299]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 18 10:30:11 tools-webgrid-lighttpd-1209 sshd[15299]: Accepted hostbased for scfc from 10.68.17.228 port 37233 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 18 10:30:11 tools-webgrid-lighttpd-1209 sshd[15299]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 18 10:30:11 tools-webgrid-lighttpd-1209 sshd[15314]: Starting session: command for scfc from 10.68.17.228 port 37233
    Jan 18 10:30:11 tools-webgrid-lighttpd-1209 sshd[15299]: pam_unix(sshd:session): session closed for user scfc
    Jan 18 11:00:14 tools-webgrid-lighttpd-1209 sshd[17899]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 18 11:00:14 tools-webgrid-lighttpd-1209 sshd[17899]: Accepted hostbased for scfc from 10.68.17.228 port 41626 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 18 11:00:14 tools-webgrid-lighttpd-1209 sshd[17899]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 18 11:00:14 tools-webgrid-lighttpd-1209 sshd[17914]: Starting session: command for scfc from 10.68.17.228 port 41626
    Jan 18 11:00:14 tools-webgrid-lighttpd-1209 sshd[17899]: pam_unix(sshd:session): session closed for user scfc
    Jan 18 11:30:10 tools-webgrid-lighttpd-1209 sshd[20528]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 18 11:30:10 tools-webgrid-lighttpd-1209 sshd[20528]: Accepted hostbased for scfc from 10.68.17.228 port 46211 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 18 11:30:10 tools-webgrid-lighttpd-1209 sshd[20528]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 18 11:30:10 tools-webgrid-lighttpd-1209 sshd[20543]: Starting session: command for scfc from 10.68.17.228 port 46211
    Jan 18 11:30:10 tools-webgrid-lighttpd-1209 sshd[20528]: pam_unix(sshd:session): session closed for user scfc
    Jan 18 12:00:12 tools-webgrid-lighttpd-1209 sshd[23131]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 18 12:00:12 tools-webgrid-lighttpd-1209 sshd[23131]: Accepted hostbased for scfc from 10.68.17.228 port 50709 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 18 12:00:12 tools-webgrid-lighttpd-1209 sshd[23131]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 18 12:00:12 tools-webgrid-lighttpd-1209 sshd[23147]: Starting session: command for scfc from 10.68.17.228 port 50709
    Jan 18 12:00:12 tools-webgrid-lighttpd-1209 sshd[23131]: pam_unix(sshd:session): session closed for user scfc
    Jan 18 12:30:09 tools-webgrid-lighttpd-1209 sshd[25764]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 18 12:30:09 tools-webgrid-lighttpd-1209 sshd[25764]: Accepted hostbased for scfc from 10.68.17.228 port 56256 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 18 12:30:09 tools-webgrid-lighttpd-1209 sshd[25764]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 18 12:30:09 tools-webgrid-lighttpd-1209 sshd[25779]: Starting session: command for scfc from 10.68.17.228 port 56256
    Jan 18 12:30:09 tools-webgrid-lighttpd-1209 sshd[25764]: pam_unix(sshd:session): session closed for user scfc
    Jan 18 13:00:11 tools-webgrid-lighttpd-1209 sshd[28390]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 18 13:00:11 tools-webgrid-lighttpd-1209 sshd[28390]: Accepted hostbased for scfc from 10.68.17.228 port 37144 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 18 13:00:11 tools-webgrid-lighttpd-1209 sshd[28390]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 18 13:00:11 tools-webgrid-lighttpd-1209 sshd[28405]: Starting session: command for scfc from 10.68.17.228 port 37144
    Jan 18 13:00:11 tools-webgrid-lighttpd-1209 sshd[28390]: pam_unix(sshd:session): session closed for user scfc
    Jan 18 13:30:10 tools-webgrid-lighttpd-1209 sshd[31035]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 18 13:30:10 tools-webgrid-lighttpd-1209 sshd[31035]: Accepted hostbased for scfc from 10.68.17.228 port 60233 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 18 13:30:10 tools-webgrid-lighttpd-1209 sshd[31035]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 18 13:30:10 tools-webgrid-lighttpd-1209 sshd[31050]: Starting session: command for scfc from 10.68.17.228 port 60233
    Jan 18 13:30:10 tools-webgrid-lighttpd-1209 sshd[31035]: pam_unix(sshd:session): session closed for user scfc
    Jan 18 14:00:11 tools-webgrid-lighttpd-1209 sshd[1285]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 18 14:00:11 tools-webgrid-lighttpd-1209 sshd[1285]: Accepted hostbased for scfc from 10.68.17.228 port 34682 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 18 14:00:11 tools-webgrid-lighttpd-1209 sshd[1285]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 18 14:00:11 tools-webgrid-lighttpd-1209 sshd[1300]: Starting session: command for scfc from 10.68.17.228 port 34682
    Jan 18 14:00:11 tools-webgrid-lighttpd-1209 sshd[1285]: pam_unix(sshd:session): session closed for user scfc
    Jan 18 14:30:11 tools-webgrid-lighttpd-1209 sshd[3922]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 18 14:30:11 tools-webgrid-lighttpd-1209 sshd[3922]: Accepted hostbased for scfc from 10.68.17.228 port 40501 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 18 14:30:11 tools-webgrid-lighttpd-1209 sshd[3922]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 18 14:30:11 tools-webgrid-lighttpd-1209 sshd[3937]: Starting session: command for scfc from 10.68.17.228 port 40501
    Jan 18 14:30:11 tools-webgrid-lighttpd-1209 sshd[3922]: pam_unix(sshd:session): session closed for user scfc
    Jan 18 15:00:10 tools-webgrid-lighttpd-1209 sshd[6533]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 18 15:00:10 tools-webgrid-lighttpd-1209 sshd[6533]: Accepted hostbased for scfc from 10.68.17.228 port 51275 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 18 15:00:10 tools-webgrid-lighttpd-1209 sshd[6533]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 18 15:00:10 tools-webgrid-lighttpd-1209 sshd[6548]: Starting session: command for scfc from 10.68.17.228 port 51275
    Jan 18 15:00:11 tools-webgrid-lighttpd-1209 sshd[6533]: pam_unix(sshd:session): session closed for user scfc
    Jan 18 15:30:11 tools-webgrid-lighttpd-1209 sshd[9262]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 18 15:30:11 tools-webgrid-lighttpd-1209 sshd[9262]: Accepted hostbased for scfc from 10.68.17.228 port 54269 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 18 15:30:11 tools-webgrid-lighttpd-1209 sshd[9262]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 18 15:30:11 tools-webgrid-lighttpd-1209 sshd[9277]: Starting session: command for scfc from 10.68.17.228 port 54269
    Jan 18 15:30:11 tools-webgrid-lighttpd-1209 sshd[9262]: pam_unix(sshd:session): session closed for user scfc
    Jan 18 16:00:11 tools-webgrid-lighttpd-1209 sshd[12049]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 18 16:00:11 tools-webgrid-lighttpd-1209 sshd[12049]: Accepted hostbased for scfc from 10.68.17.228 port 58231 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 18 16:00:11 tools-webgrid-lighttpd-1209 sshd[12049]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 18 16:00:11 tools-webgrid-lighttpd-1209 sshd[12064]: Starting session: command for scfc from 10.68.17.228 port 58231
    Jan 18 16:00:11 tools-webgrid-lighttpd-1209 sshd[12049]: pam_unix(sshd:session): session closed for user scfc
    Jan 18 16:30:13 tools-webgrid-lighttpd-1209 sshd[14682]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 18 16:30:13 tools-webgrid-lighttpd-1209 sshd[14682]: Accepted hostbased for scfc from 10.68.17.228 port 42506 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 18 16:30:13 tools-webgrid-lighttpd-1209 sshd[14682]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 18 16:30:14 tools-webgrid-lighttpd-1209 sshd[14697]: Starting session: command for scfc from 10.68.17.228 port 42506
    Jan 18 16:30:14 tools-webgrid-lighttpd-1209 sshd[14682]: pam_unix(sshd:session): session closed for user scfc
    Jan 18 17:00:12 tools-webgrid-lighttpd-1209 sshd[17295]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 18 17:00:12 tools-webgrid-lighttpd-1209 sshd[17295]: Accepted hostbased for scfc from 10.68.17.228 port 35892 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 18 17:00:12 tools-webgrid-lighttpd-1209 sshd[17295]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 18 17:00:13 tools-webgrid-lighttpd-1209 sshd[17310]: Starting session: command for scfc from 10.68.17.228 port 35892
    Jan 18 17:00:13 tools-webgrid-lighttpd-1209 sshd[17295]: pam_unix(sshd:session): session closed for user scfc
    Jan 18 17:30:10 tools-webgrid-lighttpd-1209 sshd[19923]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 18 17:30:10 tools-webgrid-lighttpd-1209 sshd[19923]: Accepted hostbased for scfc from 10.68.17.228 port 46620 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 18 17:30:10 tools-webgrid-lighttpd-1209 sshd[19923]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 18 17:30:11 tools-webgrid-lighttpd-1209 sshd[19938]: Starting session: command for scfc from 10.68.17.228 port 46620
    Jan 18 17:30:11 tools-webgrid-lighttpd-1209 sshd[19923]: pam_unix(sshd:session): session closed for user scfc
    Jan 18 18:00:12 tools-webgrid-lighttpd-1209 sshd[22525]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 18 18:00:12 tools-webgrid-lighttpd-1209 sshd[22525]: Accepted hostbased for scfc from 10.68.17.228 port 52268 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 18 18:00:12 tools-webgrid-lighttpd-1209 sshd[22525]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 18 18:00:12 tools-webgrid-lighttpd-1209 sshd[22540]: Starting session: command for scfc from 10.68.17.228 port 52268
    Jan 18 18:00:12 tools-webgrid-lighttpd-1209 sshd[22525]: pam_unix(sshd:session): session closed for user scfc
    Jan 18 18:30:10 tools-webgrid-lighttpd-1209 sshd[25156]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 18 18:30:10 tools-webgrid-lighttpd-1209 sshd[25156]: Accepted hostbased for scfc from 10.68.17.228 port 55129 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 18 18:30:10 tools-webgrid-lighttpd-1209 sshd[25156]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 18 18:30:10 tools-webgrid-lighttpd-1209 sshd[25171]: Starting session: command for scfc from 10.68.17.228 port 55129
    Jan 18 18:30:10 tools-webgrid-lighttpd-1209 sshd[25156]: pam_unix(sshd:session): session closed for user scfc
    Jan 18 19:00:11 tools-webgrid-lighttpd-1209 sshd[27784]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 18 19:00:11 tools-webgrid-lighttpd-1209 sshd[27784]: Accepted hostbased for scfc from 10.68.17.228 port 57869 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 18 19:00:11 tools-webgrid-lighttpd-1209 sshd[27784]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 18 19:00:11 tools-webgrid-lighttpd-1209 sshd[27799]: Starting session: command for scfc from 10.68.17.228 port 57869
    Jan 18 19:00:11 tools-webgrid-lighttpd-1209 sshd[27784]: pam_unix(sshd:session): session closed for user scfc
    Jan 18 19:30:10 tools-webgrid-lighttpd-1209 sshd[30427]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 18 19:30:10 tools-webgrid-lighttpd-1209 sshd[30427]: Accepted hostbased for scfc from 10.68.17.228 port 60536 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 18 19:30:10 tools-webgrid-lighttpd-1209 sshd[30427]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 18 19:30:10 tools-webgrid-lighttpd-1209 sshd[30442]: Starting session: command for scfc from 10.68.17.228 port 60536
    Jan 18 19:30:10 tools-webgrid-lighttpd-1209 sshd[30427]: pam_unix(sshd:session): session closed for user scfc
    Jan 18 20:00:11 tools-webgrid-lighttpd-1209 sshd[592]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 18 20:00:11 tools-webgrid-lighttpd-1209 sshd[592]: Accepted hostbased for scfc from 10.68.17.228 port 34899 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 18 20:00:11 tools-webgrid-lighttpd-1209 sshd[592]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 18 20:00:11 tools-webgrid-lighttpd-1209 sshd[607]: Starting session: command for scfc from 10.68.17.228 port 34899
    Jan 18 20:00:11 tools-webgrid-lighttpd-1209 sshd[592]: pam_unix(sshd:session): session closed for user scfc
    Jan 18 20:30:10 tools-webgrid-lighttpd-1209 sshd[3313]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 18 20:30:10 tools-webgrid-lighttpd-1209 sshd[3313]: Accepted hostbased for scfc from 10.68.17.228 port 47623 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 18 20:30:10 tools-webgrid-lighttpd-1209 sshd[3313]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 18 20:30:10 tools-webgrid-lighttpd-1209 sshd[3328]: Starting session: command for scfc from 10.68.17.228 port 47623
    Jan 18 20:30:10 tools-webgrid-lighttpd-1209 sshd[3313]: pam_unix(sshd:session): session closed for user scfc
    Jan 18 21:00:12 tools-webgrid-lighttpd-1209 sshd[5927]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 18 21:00:12 tools-webgrid-lighttpd-1209 sshd[5927]: Accepted hostbased for scfc from 10.68.17.228 port 48176 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 18 21:00:12 tools-webgrid-lighttpd-1209 sshd[5927]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 18 21:00:12 tools-webgrid-lighttpd-1209 sshd[5942]: Starting session: command for scfc from 10.68.17.228 port 48176
    Jan 18 21:00:12 tools-webgrid-lighttpd-1209 sshd[5927]: pam_unix(sshd:session): session closed for user scfc
    Jan 18 21:30:10 tools-webgrid-lighttpd-1209 sshd[8673]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 18 21:30:10 tools-webgrid-lighttpd-1209 sshd[8673]: Accepted hostbased for scfc from 10.68.17.228 port 60843 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 18 21:30:10 tools-webgrid-lighttpd-1209 sshd[8673]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 18 21:30:10 tools-webgrid-lighttpd-1209 sshd[8688]: Starting session: command for scfc from 10.68.17.228 port 60843
    Jan 18 21:30:10 tools-webgrid-lighttpd-1209 sshd[8673]: pam_unix(sshd:session): session closed for user scfc
    Jan 18 22:00:11 tools-webgrid-lighttpd-1209 sshd[11428]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 18 22:00:11 tools-webgrid-lighttpd-1209 sshd[11428]: Accepted hostbased for scfc from 10.68.17.228 port 34590 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 18 22:00:11 tools-webgrid-lighttpd-1209 sshd[11428]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 18 22:00:11 tools-webgrid-lighttpd-1209 sshd[11443]: Starting session: command for scfc from 10.68.17.228 port 34590
    Jan 18 22:00:11 tools-webgrid-lighttpd-1209 sshd[11428]: pam_unix(sshd:session): session closed for user scfc
    Jan 18 22:30:10 tools-webgrid-lighttpd-1209 sshd[14120]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 18 22:30:10 tools-webgrid-lighttpd-1209 sshd[14120]: Accepted hostbased for scfc from 10.68.17.228 port 35073 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 18 22:30:10 tools-webgrid-lighttpd-1209 sshd[14120]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 18 22:30:10 tools-webgrid-lighttpd-1209 sshd[14135]: Starting session: command for scfc from 10.68.17.228 port 35073
    Jan 18 22:30:10 tools-webgrid-lighttpd-1209 sshd[14120]: pam_unix(sshd:session): session closed for user scfc
    Jan 18 22:33:29 tools-webgrid-lighttpd-1209 sshd[14181]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 18 22:33:30 tools-webgrid-lighttpd-1209 sshd[14181]: Accepted hostbased for scfc from 10.68.17.228 port 44228 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 18 22:33:30 tools-webgrid-lighttpd-1209 sshd[14181]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 18 22:33:30 tools-webgrid-lighttpd-1209 sshd[14196]: Starting session: command for scfc from 10.68.17.228 port 44228
    Jan 18 22:33:30 tools-webgrid-lighttpd-1209 sshd[14181]: pam_unix(sshd:session): session closed for user scfc
    Jan 18 23:00:10 tools-webgrid-lighttpd-1209 sshd[16746]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 18 23:00:10 tools-webgrid-lighttpd-1209 sshd[16746]: Accepted hostbased for scfc from 10.68.17.228 port 39811 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 18 23:00:10 tools-webgrid-lighttpd-1209 sshd[16746]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 18 23:00:10 tools-webgrid-lighttpd-1209 sshd[16761]: Starting session: command for scfc from 10.68.17.228 port 39811
    Jan 18 23:00:10 tools-webgrid-lighttpd-1209 sshd[16746]: pam_unix(sshd:session): session closed for user scfc
    Jan 18 23:30:09 tools-webgrid-lighttpd-1209 sshd[19346]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 18 23:30:09 tools-webgrid-lighttpd-1209 sshd[19346]: Accepted hostbased for scfc from 10.68.17.228 port 43068 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 18 23:30:09 tools-webgrid-lighttpd-1209 sshd[19346]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 18 23:30:09 tools-webgrid-lighttpd-1209 sshd[19361]: Starting session: command for scfc from 10.68.17.228 port 43068
    Jan 18 23:30:09 tools-webgrid-lighttpd-1209 sshd[19346]: pam_unix(sshd:session): session closed for user scfc
    Jan 19 00:00:10 tools-webgrid-lighttpd-1209 sshd[21970]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 19 00:00:10 tools-webgrid-lighttpd-1209 sshd[21970]: Accepted hostbased for scfc from 10.68.17.228 port 39017 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 19 00:00:10 tools-webgrid-lighttpd-1209 sshd[21970]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 19 00:00:10 tools-webgrid-lighttpd-1209 sshd[21985]: Starting session: command for scfc from 10.68.17.228 port 39017
    Jan 19 00:00:10 tools-webgrid-lighttpd-1209 sshd[21970]: pam_unix(sshd:session): session closed for user scfc
    Jan 19 00:30:14 tools-webgrid-lighttpd-1209 sshd[24583]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 19 00:30:14 tools-webgrid-lighttpd-1209 sshd[24583]: Accepted hostbased for scfc from 10.68.17.228 port 56254 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 19 00:30:14 tools-webgrid-lighttpd-1209 sshd[24583]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 19 00:30:14 tools-webgrid-lighttpd-1209 sshd[24598]: Starting session: command for scfc from 10.68.17.228 port 56254
    Jan 19 00:30:14 tools-webgrid-lighttpd-1209 sshd[24583]: pam_unix(sshd:session): session closed for user scfc
    Jan 19 01:00:15 tools-webgrid-lighttpd-1209 sshd[27204]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 19 01:00:15 tools-webgrid-lighttpd-1209 sshd[27204]: Accepted hostbased for scfc from 10.68.17.228 port 54802 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 19 01:00:15 tools-webgrid-lighttpd-1209 sshd[27204]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 19 01:00:15 tools-webgrid-lighttpd-1209 sshd[27219]: Starting session: command for scfc from 10.68.17.228 port 54802
    Jan 19 01:00:15 tools-webgrid-lighttpd-1209 sshd[27204]: pam_unix(sshd:session): session closed for user scfc
    Jan 19 01:30:11 tools-webgrid-lighttpd-1209 sshd[29818]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 19 01:30:11 tools-webgrid-lighttpd-1209 sshd[29818]: Accepted hostbased for scfc from 10.68.17.228 port 42642 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 19 01:30:11 tools-webgrid-lighttpd-1209 sshd[29818]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 19 01:30:11 tools-webgrid-lighttpd-1209 sshd[29834]: Starting session: command for scfc from 10.68.17.228 port 42642
    Jan 19 01:30:11 tools-webgrid-lighttpd-1209 sshd[29818]: pam_unix(sshd:session): session closed for user scfc
    Jan 19 02:00:09 tools-webgrid-lighttpd-1209 sshd[32427]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 19 02:00:09 tools-webgrid-lighttpd-1209 sshd[32427]: Accepted hostbased for scfc from 10.68.17.228 port 42710 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 19 02:00:09 tools-webgrid-lighttpd-1209 sshd[32427]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 19 02:00:09 tools-webgrid-lighttpd-1209 sshd[32442]: Starting session: command for scfc from 10.68.17.228 port 42710
    Jan 19 02:00:09 tools-webgrid-lighttpd-1209 sshd[32427]: pam_unix(sshd:session): session closed for user scfc
    Jan 19 02:30:11 tools-webgrid-lighttpd-1209 sshd[2663]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 19 02:30:11 tools-webgrid-lighttpd-1209 sshd[2663]: Accepted hostbased for scfc from 10.68.17.228 port 46546 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 19 02:30:11 tools-webgrid-lighttpd-1209 sshd[2663]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 19 02:30:11 tools-webgrid-lighttpd-1209 sshd[2688]: Starting session: command for scfc from 10.68.17.228 port 46546
    Jan 19 02:30:11 tools-webgrid-lighttpd-1209 sshd[2663]: pam_unix(sshd:session): session closed for user scfc
    Jan 19 03:00:10 tools-webgrid-lighttpd-1209 sshd[5285]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 19 03:00:10 tools-webgrid-lighttpd-1209 sshd[5285]: Accepted hostbased for scfc from 10.68.17.228 port 46731 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 19 03:00:10 tools-webgrid-lighttpd-1209 sshd[5285]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 19 03:00:10 tools-webgrid-lighttpd-1209 sshd[5300]: Starting session: command for scfc from 10.68.17.228 port 46731
    Jan 19 03:00:10 tools-webgrid-lighttpd-1209 sshd[5285]: pam_unix(sshd:session): session closed for user scfc
    Jan 19 03:30:09 tools-webgrid-lighttpd-1209 sshd[7992]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 19 03:30:09 tools-webgrid-lighttpd-1209 sshd[7992]: Accepted hostbased for scfc from 10.68.17.228 port 38177 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 19 03:30:09 tools-webgrid-lighttpd-1209 sshd[7992]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 19 03:30:09 tools-webgrid-lighttpd-1209 sshd[8007]: Starting session: command for scfc from 10.68.17.228 port 38177
    Jan 19 03:30:09 tools-webgrid-lighttpd-1209 sshd[7992]: pam_unix(sshd:session): session closed for user scfc
    Jan 19 04:00:51 tools-webgrid-lighttpd-1209 sshd[10758]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 19 04:00:51 tools-webgrid-lighttpd-1209 sshd[10758]: Accepted hostbased for scfc from 10.68.17.228 port 35906 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 19 04:00:51 tools-webgrid-lighttpd-1209 sshd[10758]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 19 04:00:51 tools-webgrid-lighttpd-1209 sshd[10773]: Starting session: command for scfc from 10.68.17.228 port 35906
    Jan 19 04:00:51 tools-webgrid-lighttpd-1209 sshd[10758]: pam_unix(sshd:session): session closed for user scfc
    Jan 19 04:30:09 tools-webgrid-lighttpd-1209 sshd[13405]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 19 04:30:09 tools-webgrid-lighttpd-1209 sshd[13405]: Accepted hostbased for scfc from 10.68.17.228 port 51490 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 19 04:30:09 tools-webgrid-lighttpd-1209 sshd[13405]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 19 04:30:09 tools-webgrid-lighttpd-1209 sshd[13420]: Starting session: command for scfc from 10.68.17.228 port 51490
    Jan 19 04:30:09 tools-webgrid-lighttpd-1209 sshd[13405]: pam_unix(sshd:session): session closed for user scfc
    Jan 19 05:00:09 tools-webgrid-lighttpd-1209 sshd[16023]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 19 05:00:09 tools-webgrid-lighttpd-1209 sshd[16023]: Accepted hostbased for scfc from 10.68.17.228 port 38742 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 19 05:00:09 tools-webgrid-lighttpd-1209 sshd[16023]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 19 05:00:09 tools-webgrid-lighttpd-1209 sshd[16038]: Starting session: command for scfc from 10.68.17.228 port 38742
    Jan 19 05:00:09 tools-webgrid-lighttpd-1209 sshd[16023]: pam_unix(sshd:session): session closed for user scfc
    Jan 19 05:30:11 tools-webgrid-lighttpd-1209 sshd[18643]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 19 05:30:11 tools-webgrid-lighttpd-1209 sshd[18643]: Accepted hostbased for scfc from 10.68.17.228 port 42061 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 19 05:30:11 tools-webgrid-lighttpd-1209 sshd[18643]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 19 05:30:11 tools-webgrid-lighttpd-1209 sshd[18659]: Starting session: command for scfc from 10.68.17.228 port 42061
    Jan 19 05:30:11 tools-webgrid-lighttpd-1209 sshd[18643]: pam_unix(sshd:session): session closed for user scfc
    Jan 19 06:00:10 tools-webgrid-lighttpd-1209 sshd[21266]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 19 06:00:10 tools-webgrid-lighttpd-1209 sshd[21266]: Accepted hostbased for scfc from 10.68.17.228 port 45164 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 19 06:00:10 tools-webgrid-lighttpd-1209 sshd[21266]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 19 06:00:10 tools-webgrid-lighttpd-1209 sshd[21283]: Starting session: command for scfc from 10.68.17.228 port 45164
    Jan 19 06:00:10 tools-webgrid-lighttpd-1209 sshd[21266]: pam_unix(sshd:session): session closed for user scfc
    Jan 19 06:30:11 tools-webgrid-lighttpd-1209 sshd[23970]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 19 06:30:11 tools-webgrid-lighttpd-1209 sshd[23970]: Accepted hostbased for scfc from 10.68.17.228 port 48145 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 19 06:30:11 tools-webgrid-lighttpd-1209 sshd[23970]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 19 06:30:11 tools-webgrid-lighttpd-1209 sshd[23985]: Starting session: command for scfc from 10.68.17.228 port 48145
    Jan 19 06:30:11 tools-webgrid-lighttpd-1209 sshd[23970]: pam_unix(sshd:session): session closed for user scfc
    Jan 19 07:00:10 tools-webgrid-lighttpd-1209 sshd[26775]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 19 07:00:10 tools-webgrid-lighttpd-1209 sshd[26775]: Accepted hostbased for scfc from 10.68.17.228 port 51561 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 19 07:00:10 tools-webgrid-lighttpd-1209 sshd[26775]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 19 07:00:10 tools-webgrid-lighttpd-1209 sshd[26790]: Starting session: command for scfc from 10.68.17.228 port 51561
    Jan 19 07:00:10 tools-webgrid-lighttpd-1209 sshd[26775]: pam_unix(sshd:session): session closed for user scfc
    Jan 19 07:30:10 tools-webgrid-lighttpd-1209 sshd[29391]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 19 07:30:10 tools-webgrid-lighttpd-1209 sshd[29391]: Accepted hostbased for scfc from 10.68.17.228 port 55134 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 19 07:30:10 tools-webgrid-lighttpd-1209 sshd[29391]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 19 07:30:10 tools-webgrid-lighttpd-1209 sshd[29406]: Starting session: command for scfc from 10.68.17.228 port 55134
    Jan 19 07:30:10 tools-webgrid-lighttpd-1209 sshd[29391]: pam_unix(sshd:session): session closed for user scfc
    Jan 19 08:00:11 tools-webgrid-lighttpd-1209 sshd[32018]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 19 08:00:11 tools-webgrid-lighttpd-1209 sshd[32018]: Accepted hostbased for scfc from 10.68.17.228 port 58559 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 19 08:00:11 tools-webgrid-lighttpd-1209 sshd[32018]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 19 08:00:12 tools-webgrid-lighttpd-1209 sshd[32033]: Starting session: command for scfc from 10.68.17.228 port 58559
    Jan 19 08:00:12 tools-webgrid-lighttpd-1209 sshd[32018]: pam_unix(sshd:session): session closed for user scfc
    Jan 19 08:30:09 tools-webgrid-lighttpd-1209 sshd[2357]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 19 08:30:09 tools-webgrid-lighttpd-1209 sshd[2357]: Accepted hostbased for scfc from 10.68.17.228 port 33512 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 19 08:30:09 tools-webgrid-lighttpd-1209 sshd[2357]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 19 08:30:09 tools-webgrid-lighttpd-1209 sshd[2372]: Starting session: command for scfc from 10.68.17.228 port 33512
    Jan 19 08:30:10 tools-webgrid-lighttpd-1209 sshd[2357]: pam_unix(sshd:session): session closed for user scfc
    Jan 19 09:00:09 tools-webgrid-lighttpd-1209 sshd[5075]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 19 09:00:09 tools-webgrid-lighttpd-1209 sshd[5075]: Accepted hostbased for scfc from 10.68.17.228 port 37055 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 19 09:00:09 tools-webgrid-lighttpd-1209 sshd[5075]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 19 09:00:10 tools-webgrid-lighttpd-1209 sshd[5090]: Starting session: command for scfc from 10.68.17.228 port 37055
    Jan 19 09:00:10 tools-webgrid-lighttpd-1209 sshd[5075]: pam_unix(sshd:session): session closed for user scfc
    Jan 19 09:30:10 tools-webgrid-lighttpd-1209 sshd[7808]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 19 09:30:10 tools-webgrid-lighttpd-1209 sshd[7808]: Accepted hostbased for scfc from 10.68.17.228 port 40694 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 19 09:30:10 tools-webgrid-lighttpd-1209 sshd[7808]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 19 09:30:10 tools-webgrid-lighttpd-1209 sshd[7823]: Starting session: command for scfc from 10.68.17.228 port 40694
    Jan 19 09:30:10 tools-webgrid-lighttpd-1209 sshd[7808]: pam_unix(sshd:session): session closed for user scfc
    Jan 19 10:00:10 tools-webgrid-lighttpd-1209 sshd[10545]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 19 10:00:10 tools-webgrid-lighttpd-1209 sshd[10545]: Accepted hostbased for scfc from 10.68.17.228 port 44256 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 19 10:00:10 tools-webgrid-lighttpd-1209 sshd[10545]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 19 10:00:10 tools-webgrid-lighttpd-1209 sshd[10560]: Starting session: command for scfc from 10.68.17.228 port 44256
    Jan 19 10:00:10 tools-webgrid-lighttpd-1209 sshd[10545]: pam_unix(sshd:session): session closed for user scfc
    Jan 19 10:30:13 tools-webgrid-lighttpd-1209 sshd[13214]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 19 10:30:13 tools-webgrid-lighttpd-1209 sshd[13214]: Accepted hostbased for scfc from 10.68.17.228 port 47592 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 19 10:30:13 tools-webgrid-lighttpd-1209 sshd[13214]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 19 10:30:13 tools-webgrid-lighttpd-1209 sshd[13229]: Starting session: command for scfc from 10.68.17.228 port 47592
    Jan 19 10:30:13 tools-webgrid-lighttpd-1209 sshd[13214]: pam_unix(sshd:session): session closed for user scfc
    Jan 19 11:00:12 tools-webgrid-lighttpd-1209 sshd[15822]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 19 11:00:12 tools-webgrid-lighttpd-1209 sshd[15822]: Accepted hostbased for scfc from 10.68.17.228 port 51134 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 19 11:00:12 tools-webgrid-lighttpd-1209 sshd[15822]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 19 11:00:12 tools-webgrid-lighttpd-1209 sshd[15837]: Starting session: command for scfc from 10.68.17.228 port 51134
    Jan 19 11:00:12 tools-webgrid-lighttpd-1209 sshd[15822]: pam_unix(sshd:session): session closed for user scfc
    Jan 19 11:30:11 tools-webgrid-lighttpd-1209 sshd[18453]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 19 11:30:11 tools-webgrid-lighttpd-1209 sshd[18453]: Accepted hostbased for scfc from 10.68.17.228 port 54627 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 19 11:30:11 tools-webgrid-lighttpd-1209 sshd[18453]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 19 11:30:11 tools-webgrid-lighttpd-1209 sshd[18468]: Starting session: command for scfc from 10.68.17.228 port 54627
    Jan 19 11:30:11 tools-webgrid-lighttpd-1209 sshd[18453]: pam_unix(sshd:session): session closed for user scfc
    Jan 19 12:00:11 tools-webgrid-lighttpd-1209 sshd[21075]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 19 12:00:11 tools-webgrid-lighttpd-1209 sshd[21075]: Accepted hostbased for scfc from 10.68.17.228 port 58464 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 19 12:00:11 tools-webgrid-lighttpd-1209 sshd[21075]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 19 12:00:12 tools-webgrid-lighttpd-1209 sshd[21090]: Starting session: command for scfc from 10.68.17.228 port 58464
    Jan 19 12:00:12 tools-webgrid-lighttpd-1209 sshd[21075]: pam_unix(sshd:session): session closed for user scfc
    Jan 19 12:30:11 tools-webgrid-lighttpd-1209 sshd[23710]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 19 12:30:11 tools-webgrid-lighttpd-1209 sshd[23710]: Accepted hostbased for scfc from 10.68.17.228 port 51773 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 19 12:30:11 tools-webgrid-lighttpd-1209 sshd[23710]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 19 12:30:11 tools-webgrid-lighttpd-1209 sshd[23725]: Starting session: command for scfc from 10.68.17.228 port 51773
    Jan 19 12:30:11 tools-webgrid-lighttpd-1209 sshd[23710]: pam_unix(sshd:session): session closed for user scfc
    Jan 19 13:00:10 tools-webgrid-lighttpd-1209 sshd[26331]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 19 13:00:10 tools-webgrid-lighttpd-1209 sshd[26331]: Accepted hostbased for scfc from 10.68.17.228 port 47675 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 19 13:00:10 tools-webgrid-lighttpd-1209 sshd[26331]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 19 13:00:11 tools-webgrid-lighttpd-1209 sshd[26346]: Starting session: command for scfc from 10.68.17.228 port 47675
    Jan 19 13:00:11 tools-webgrid-lighttpd-1209 sshd[26331]: pam_unix(sshd:session): session closed for user scfc
    Jan 19 13:30:10 tools-webgrid-lighttpd-1209 sshd[28950]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 19 13:30:10 tools-webgrid-lighttpd-1209 sshd[28950]: Accepted hostbased for scfc from 10.68.17.228 port 57628 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 19 13:30:10 tools-webgrid-lighttpd-1209 sshd[28950]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 19 13:30:10 tools-webgrid-lighttpd-1209 sshd[28965]: Starting session: command for scfc from 10.68.17.228 port 57628
    Jan 19 13:30:11 tools-webgrid-lighttpd-1209 sshd[28950]: pam_unix(sshd:session): session closed for user scfc
    Jan 19 14:00:11 tools-webgrid-lighttpd-1209 sshd[31554]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 19 14:00:11 tools-webgrid-lighttpd-1209 sshd[31554]: Accepted hostbased for scfc from 10.68.17.228 port 44940 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 19 14:00:11 tools-webgrid-lighttpd-1209 sshd[31554]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 19 14:00:11 tools-webgrid-lighttpd-1209 sshd[31569]: Starting session: command for scfc from 10.68.17.228 port 44940
    Jan 19 14:00:11 tools-webgrid-lighttpd-1209 sshd[31554]: pam_unix(sshd:session): session closed for user scfc
    Jan 19 14:30:09 tools-webgrid-lighttpd-1209 sshd[1818]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 19 14:30:09 tools-webgrid-lighttpd-1209 sshd[1818]: Accepted hostbased for scfc from 10.68.17.228 port 53529 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 19 14:30:09 tools-webgrid-lighttpd-1209 sshd[1818]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 19 14:30:09 tools-webgrid-lighttpd-1209 sshd[1833]: Starting session: command for scfc from 10.68.17.228 port 53529
    Jan 19 14:30:10 tools-webgrid-lighttpd-1209 sshd[1818]: pam_unix(sshd:session): session closed for user scfc
    Jan 19 15:00:11 tools-webgrid-lighttpd-1209 sshd[4423]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 19 15:00:11 tools-webgrid-lighttpd-1209 sshd[4423]: Accepted hostbased for scfc from 10.68.17.228 port 43299 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 19 15:00:11 tools-webgrid-lighttpd-1209 sshd[4423]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 19 15:00:11 tools-webgrid-lighttpd-1209 sshd[4438]: Starting session: command for scfc from 10.68.17.228 port 43299
    Jan 19 15:00:11 tools-webgrid-lighttpd-1209 sshd[4423]: pam_unix(sshd:session): session closed for user scfc
    Jan 19 15:30:09 tools-webgrid-lighttpd-1209 sshd[7074]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 19 15:30:09 tools-webgrid-lighttpd-1209 sshd[7074]: Accepted hostbased for scfc from 10.68.17.228 port 40101 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 19 15:30:09 tools-webgrid-lighttpd-1209 sshd[7074]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 19 15:30:10 tools-webgrid-lighttpd-1209 sshd[7099]: Starting session: command for scfc from 10.68.17.228 port 40101
    Jan 19 15:30:10 tools-webgrid-lighttpd-1209 sshd[7074]: pam_unix(sshd:session): session closed for user scfc
    Jan 19 16:00:10 tools-webgrid-lighttpd-1209 sshd[9832]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 19 16:00:10 tools-webgrid-lighttpd-1209 sshd[9832]: Accepted hostbased for scfc from 10.68.17.228 port 34347 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 19 16:00:10 tools-webgrid-lighttpd-1209 sshd[9832]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 19 16:00:10 tools-webgrid-lighttpd-1209 sshd[9857]: Starting session: command for scfc from 10.68.17.228 port 34347
    Jan 19 16:00:10 tools-webgrid-lighttpd-1209 sshd[9832]: pam_unix(sshd:session): session closed for user scfc
    Jan 19 16:30:13 tools-webgrid-lighttpd-1209 sshd[12568]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 19 16:30:13 tools-webgrid-lighttpd-1209 sshd[12568]: Accepted hostbased for scfc from 10.68.17.228 port 48960 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 19 16:30:13 tools-webgrid-lighttpd-1209 sshd[12568]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 19 16:30:13 tools-webgrid-lighttpd-1209 sshd[12583]: Starting session: command for scfc from 10.68.17.228 port 48960
    Jan 19 16:30:13 tools-webgrid-lighttpd-1209 sshd[12568]: pam_unix(sshd:session): session closed for user scfc
    Jan 19 17:00:11 tools-webgrid-lighttpd-1209 sshd[15249]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 19 17:00:11 tools-webgrid-lighttpd-1209 sshd[15249]: Accepted hostbased for scfc from 10.68.17.228 port 37180 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 19 17:00:11 tools-webgrid-lighttpd-1209 sshd[15249]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 19 17:00:11 tools-webgrid-lighttpd-1209 sshd[15264]: Starting session: command for scfc from 10.68.17.228 port 37180
    Jan 19 17:00:11 tools-webgrid-lighttpd-1209 sshd[15249]: pam_unix(sshd:session): session closed for user scfc
    Jan 19 17:30:10 tools-webgrid-lighttpd-1209 sshd[17860]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 19 17:30:10 tools-webgrid-lighttpd-1209 sshd[17860]: Accepted hostbased for scfc from 10.68.17.228 port 42197 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 19 17:30:10 tools-webgrid-lighttpd-1209 sshd[17860]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 19 17:30:11 tools-webgrid-lighttpd-1209 sshd[17875]: Starting session: command for scfc from 10.68.17.228 port 42197
    Jan 19 17:30:11 tools-webgrid-lighttpd-1209 sshd[17860]: pam_unix(sshd:session): session closed for user scfc
    Jan 19 18:00:11 tools-webgrid-lighttpd-1209 sshd[20466]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 19 18:00:11 tools-webgrid-lighttpd-1209 sshd[20466]: Accepted hostbased for scfc from 10.68.17.228 port 55286 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 19 18:00:11 tools-webgrid-lighttpd-1209 sshd[20466]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 19 18:00:11 tools-webgrid-lighttpd-1209 sshd[20481]: Starting session: command for scfc from 10.68.17.228 port 55286
    Jan 19 18:00:12 tools-webgrid-lighttpd-1209 sshd[20466]: pam_unix(sshd:session): session closed for user scfc
    Jan 19 18:30:10 tools-webgrid-lighttpd-1209 sshd[23098]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 19 18:30:10 tools-webgrid-lighttpd-1209 sshd[23098]: Accepted hostbased for scfc from 10.68.17.228 port 33573 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 19 18:30:10 tools-webgrid-lighttpd-1209 sshd[23098]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 19 18:30:11 tools-webgrid-lighttpd-1209 sshd[23113]: Starting session: command for scfc from 10.68.17.228 port 33573
    Jan 19 18:30:11 tools-webgrid-lighttpd-1209 sshd[23098]: pam_unix(sshd:session): session closed for user scfc
    Jan 19 19:00:11 tools-webgrid-lighttpd-1209 sshd[25739]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 19 19:00:11 tools-webgrid-lighttpd-1209 sshd[25739]: Accepted hostbased for scfc from 10.68.17.228 port 44431 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 19 19:00:11 tools-webgrid-lighttpd-1209 sshd[25739]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 19 19:00:11 tools-webgrid-lighttpd-1209 sshd[25754]: Starting session: command for scfc from 10.68.17.228 port 44431
    Jan 19 19:00:11 tools-webgrid-lighttpd-1209 sshd[25739]: pam_unix(sshd:session): session closed for user scfc
    Jan 19 19:30:11 tools-webgrid-lighttpd-1209 sshd[28456]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 19 19:30:11 tools-webgrid-lighttpd-1209 sshd[28456]: Accepted hostbased for scfc from 10.68.17.228 port 53529 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 19 19:30:11 tools-webgrid-lighttpd-1209 sshd[28456]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 19 19:30:11 tools-webgrid-lighttpd-1209 sshd[28471]: Starting session: command for scfc from 10.68.17.228 port 53529
    Jan 19 19:30:11 tools-webgrid-lighttpd-1209 sshd[28456]: pam_unix(sshd:session): session closed for user scfc
    Jan 19 20:00:11 tools-webgrid-lighttpd-1209 sshd[31641]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 19 20:00:11 tools-webgrid-lighttpd-1209 sshd[31641]: Accepted hostbased for scfc from 10.68.17.228 port 34459 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 19 20:00:11 tools-webgrid-lighttpd-1209 sshd[31641]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 19 20:00:11 tools-webgrid-lighttpd-1209 sshd[31656]: Starting session: command for scfc from 10.68.17.228 port 34459
    Jan 19 20:00:11 tools-webgrid-lighttpd-1209 sshd[31641]: pam_unix(sshd:session): session closed for user scfc
    Jan 19 20:30:10 tools-webgrid-lighttpd-1209 sshd[3601]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 19 20:30:10 tools-webgrid-lighttpd-1209 sshd[3601]: Accepted hostbased for scfc from 10.68.17.228 port 55701 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 19 20:30:10 tools-webgrid-lighttpd-1209 sshd[3601]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 19 20:30:11 tools-webgrid-lighttpd-1209 sshd[3620]: Starting session: command for scfc from 10.68.17.228 port 55701
    Jan 19 20:30:11 tools-webgrid-lighttpd-1209 sshd[3601]: pam_unix(sshd:session): session closed for user scfc
    Jan 19 21:00:11 tools-webgrid-lighttpd-1209 sshd[6786]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 19 21:00:11 tools-webgrid-lighttpd-1209 sshd[6786]: Accepted hostbased for scfc from 10.68.17.228 port 54678 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 19 21:00:11 tools-webgrid-lighttpd-1209 sshd[6786]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 19 21:00:11 tools-webgrid-lighttpd-1209 sshd[6801]: Starting session: command for scfc from 10.68.17.228 port 54678
    Jan 19 21:00:11 tools-webgrid-lighttpd-1209 sshd[6786]: pam_unix(sshd:session): session closed for user scfc
    Jan 19 21:30:11 tools-webgrid-lighttpd-1209 sshd[10503]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 19 21:30:11 tools-webgrid-lighttpd-1209 sshd[10503]: Accepted hostbased for scfc from 10.68.17.228 port 52204 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 19 21:30:11 tools-webgrid-lighttpd-1209 sshd[10503]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 19 21:30:11 tools-webgrid-lighttpd-1209 sshd[10518]: Starting session: command for scfc from 10.68.17.228 port 52204
    Jan 19 21:30:11 tools-webgrid-lighttpd-1209 sshd[10503]: pam_unix(sshd:session): session closed for user scfc
    Jan 19 22:00:10 tools-webgrid-lighttpd-1209 sshd[14313]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 19 22:00:11 tools-webgrid-lighttpd-1209 sshd[14313]: Accepted hostbased for scfc from 10.68.17.228 port 50620 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 19 22:00:11 tools-webgrid-lighttpd-1209 sshd[14313]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 19 22:00:11 tools-webgrid-lighttpd-1209 sshd[14328]: Starting session: command for scfc from 10.68.17.228 port 50620
    Jan 19 22:00:11 tools-webgrid-lighttpd-1209 sshd[14313]: pam_unix(sshd:session): session closed for user scfc
    Jan 19 22:30:10 tools-webgrid-lighttpd-1209 sshd[17070]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 19 22:30:10 tools-webgrid-lighttpd-1209 sshd[17070]: Accepted hostbased for scfc from 10.68.17.228 port 45198 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 19 22:30:10 tools-webgrid-lighttpd-1209 sshd[17070]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 19 22:30:10 tools-webgrid-lighttpd-1209 sshd[17085]: Starting session: command for scfc from 10.68.17.228 port 45198
    Jan 19 22:30:10 tools-webgrid-lighttpd-1209 sshd[17070]: pam_unix(sshd:session): session closed for user scfc
    Jan 19 23:00:13 tools-webgrid-lighttpd-1209 sshd[19941]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 19 23:00:13 tools-webgrid-lighttpd-1209 sshd[19941]: Accepted hostbased for scfc from 10.68.17.228 port 48683 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 19 23:00:13 tools-webgrid-lighttpd-1209 sshd[19941]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 19 23:00:13 tools-webgrid-lighttpd-1209 sshd[19956]: Starting session: command for scfc from 10.68.17.228 port 48683
    Jan 19 23:00:13 tools-webgrid-lighttpd-1209 sshd[19941]: pam_unix(sshd:session): session closed for user scfc
    Jan 19 23:02:07 tools-webgrid-lighttpd-1209 sshd[19990]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 19 23:02:07 tools-webgrid-lighttpd-1209 sshd[19990]: Accepted hostbased for scfc from 10.68.17.228 port 52565 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 19 23:02:07 tools-webgrid-lighttpd-1209 sshd[19990]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 19 23:02:07 tools-webgrid-lighttpd-1209 sshd[20005]: Starting session: command for scfc from 10.68.17.228 port 52565
    Jan 19 23:02:07 tools-webgrid-lighttpd-1209 sshd[19990]: pam_unix(sshd:session): session closed for user scfc
    Jan 19 23:30:10 tools-webgrid-lighttpd-1209 sshd[22682]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 19 23:30:10 tools-webgrid-lighttpd-1209 sshd[22682]: Accepted hostbased for scfc from 10.68.17.228 port 38550 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 19 23:30:10 tools-webgrid-lighttpd-1209 sshd[22682]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 19 23:30:10 tools-webgrid-lighttpd-1209 sshd[22697]: Starting session: command for scfc from 10.68.17.228 port 38550
    Jan 19 23:30:10 tools-webgrid-lighttpd-1209 sshd[22682]: pam_unix(sshd:session): session closed for user scfc
    Jan 20 00:00:11 tools-webgrid-lighttpd-1209 sshd[18434]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 20 00:00:11 tools-webgrid-lighttpd-1209 sshd[18434]: Accepted hostbased for scfc from 10.68.17.228 port 39999 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 20 00:00:11 tools-webgrid-lighttpd-1209 sshd[18434]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 20 00:00:11 tools-webgrid-lighttpd-1209 sshd[18449]: Starting session: command for scfc from 10.68.17.228 port 39999
    Jan 20 00:00:11 tools-webgrid-lighttpd-1209 sshd[18434]: pam_unix(sshd:session): session closed for user scfc
    Jan 20 00:30:11 tools-webgrid-lighttpd-1209 sshd[25012]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 20 00:30:12 tools-webgrid-lighttpd-1209 sshd[25012]: Accepted hostbased for scfc from 10.68.17.228 port 41382 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 20 00:30:12 tools-webgrid-lighttpd-1209 sshd[25012]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 20 00:30:12 tools-webgrid-lighttpd-1209 sshd[25038]: Starting session: command for scfc from 10.68.17.228 port 41382
    Jan 20 00:30:12 tools-webgrid-lighttpd-1209 sshd[25012]: pam_unix(sshd:session): session closed for user scfc
    Jan 20 01:00:17 tools-webgrid-lighttpd-1209 sshd[25772]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 20 01:00:17 tools-webgrid-lighttpd-1209 sshd[25772]: Accepted hostbased for scfc from 10.68.17.228 port 59542 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 20 01:00:17 tools-webgrid-lighttpd-1209 sshd[25772]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 20 01:00:17 tools-webgrid-lighttpd-1209 sshd[25787]: Starting session: command for scfc from 10.68.17.228 port 59542
    Jan 20 01:00:17 tools-webgrid-lighttpd-1209 sshd[25772]: pam_unix(sshd:session): session closed for user scfc
    Jan 20 01:30:09 tools-webgrid-lighttpd-1209 sshd[25165]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 20 01:30:09 tools-webgrid-lighttpd-1209 sshd[25165]: Accepted hostbased for scfc from 10.68.17.228 port 40268 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 20 01:30:09 tools-webgrid-lighttpd-1209 sshd[25165]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 20 01:30:09 tools-webgrid-lighttpd-1209 sshd[25190]: Starting session: command for scfc from 10.68.17.228 port 40268
    Jan 20 01:30:09 tools-webgrid-lighttpd-1209 sshd[25165]: pam_unix(sshd:session): session closed for user scfc
    Jan 20 02:00:10 tools-webgrid-lighttpd-1209 sshd[406]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 20 02:00:10 tools-webgrid-lighttpd-1209 sshd[406]: Accepted hostbased for scfc from 10.68.17.228 port 35878 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 20 02:00:10 tools-webgrid-lighttpd-1209 sshd[406]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 20 02:00:10 tools-webgrid-lighttpd-1209 sshd[421]: Starting session: command for scfc from 10.68.17.228 port 35878
    Jan 20 02:00:11 tools-webgrid-lighttpd-1209 sudo:     scfc : TTY=unknown ; PWD=/home/scfc ; USER=root ; COMMAND=/bin/kill -HUP 22935
    Jan 20 02:00:11 tools-webgrid-lighttpd-1209 sudo:     scfc : TTY=unknown ; PWD=/home/scfc ; USER=root ; COMMAND=/bin/kill -HUP 22935
    Jan 20 02:00:11 tools-webgrid-lighttpd-1209 sshd[406]: pam_unix(sshd:session): session closed for user scfc
    Jan 20 02:30:09 tools-webgrid-lighttpd-1209 sshd[3228]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 20 02:30:09 tools-webgrid-lighttpd-1209 sshd[3228]: Accepted hostbased for scfc from 10.68.17.228 port 34954 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 20 02:30:09 tools-webgrid-lighttpd-1209 sshd[3228]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 20 02:30:09 tools-webgrid-lighttpd-1209 sshd[3243]: Starting session: command for scfc from 10.68.17.228 port 34954
    Jan 20 02:30:10 tools-webgrid-lighttpd-1209 sshd[3228]: pam_unix(sshd:session): session closed for user scfc
    Jan 20 03:00:09 tools-webgrid-lighttpd-1209 sshd[6001]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 20 03:00:09 tools-webgrid-lighttpd-1209 sshd[6001]: Accepted hostbased for scfc from 10.68.17.228 port 34723 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 20 03:00:09 tools-webgrid-lighttpd-1209 sshd[6001]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 20 03:00:09 tools-webgrid-lighttpd-1209 sshd[6016]: Starting session: command for scfc from 10.68.17.228 port 34723
    Jan 20 03:00:09 tools-webgrid-lighttpd-1209 sshd[6001]: pam_unix(sshd:session): session closed for user scfc
    Jan 20 03:30:10 tools-webgrid-lighttpd-1209 sshd[9347]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 20 03:30:10 tools-webgrid-lighttpd-1209 sshd[9347]: Accepted hostbased for scfc from 10.68.17.228 port 35066 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 20 03:30:10 tools-webgrid-lighttpd-1209 sshd[9347]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 20 03:30:10 tools-webgrid-lighttpd-1209 sshd[9363]: Starting session: command for scfc from 10.68.17.228 port 35066
    Jan 20 03:30:10 tools-webgrid-lighttpd-1209 sshd[9347]: pam_unix(sshd:session): session closed for user scfc
    Jan 20 04:00:08 tools-webgrid-lighttpd-1209 sshd[12526]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 20 04:00:08 tools-webgrid-lighttpd-1209 sshd[12526]: Accepted hostbased for scfc from 10.68.17.228 port 55157 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 20 04:00:08 tools-webgrid-lighttpd-1209 sshd[12526]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 20 04:00:08 tools-webgrid-lighttpd-1209 sshd[12541]: Starting session: command for scfc from 10.68.17.228 port 55157
    Jan 20 04:00:08 tools-webgrid-lighttpd-1209 sshd[12526]: pam_unix(sshd:session): session closed for user scfc
    Jan 20 04:30:09 tools-webgrid-lighttpd-1209 sshd[15668]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 20 04:30:09 tools-webgrid-lighttpd-1209 sshd[15668]: Accepted hostbased for scfc from 10.68.17.228 port 40075 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 20 04:30:09 tools-webgrid-lighttpd-1209 sshd[15668]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 20 04:30:09 tools-webgrid-lighttpd-1209 sshd[15683]: Starting session: command for scfc from 10.68.17.228 port 40075
    Jan 20 04:30:09 tools-webgrid-lighttpd-1209 sshd[15668]: pam_unix(sshd:session): session closed for user scfc
    Jan 20 05:00:09 tools-webgrid-lighttpd-1209 sshd[18533]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 20 05:00:09 tools-webgrid-lighttpd-1209 sshd[18533]: Accepted hostbased for scfc from 10.68.17.228 port 48744 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 20 05:00:09 tools-webgrid-lighttpd-1209 sshd[18533]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 20 05:00:09 tools-webgrid-lighttpd-1209 sshd[18548]: Starting session: command for scfc from 10.68.17.228 port 48744
    Jan 20 05:00:09 tools-webgrid-lighttpd-1209 sshd[18533]: pam_unix(sshd:session): session closed for user scfc
    Jan 20 05:30:09 tools-webgrid-lighttpd-1209 sshd[21348]: Accepted ECDSA public key 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 from scfc@tools-bastion-01.tools.eqiad.wmflabs
    Jan 20 05:30:09 tools-webgrid-lighttpd-1209 sshd[21348]: Accepted hostbased for scfc from 10.68.17.228 port 57235 ssh2: ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57, client user "scfc", client host "tools-bastion-01.tools.eqiad.wmflabs"
    Jan 20 05:30:09 tools-webgrid-lighttpd-1209 sshd[21348]: pam_unix(sshd:session): session opened for user scfc by (uid=0)
    Jan 20 05:30:09 tools-webgrid-lighttpd-1209 sshd[21363]: Starting session: command for scfc from 10.68.17.228 port 57235
    Jan 20 05:30:09 tools-webgrid-lighttpd-1209 sshd[21348]: pam_unix(sshd:session): session closed for user scfc
root@labcontrol1001:~# salt 'tools-webgrid-lighttpd-1209.tools.eqiad.wmflabs' cmd.run "date"
tools-webgrid-lighttpd-1209.tools.eqiad.wmflabs:
tools-webgrid-lighttpd-1209.tools.eqiad.wmflabs:
    top - 14:12:25 up 21 days, 10:55,  0 users,  load average: 106.68, 106.35, 105.32
    Tasks: 500 total,   1 running, 499 sleeping,   0 stopped,   0 zombie
    Cpu(s): 34.4%us,  3.0%sy,  0.0%ni, 61.7%id,  0.1%wa,  0.0%hi,  0.4%si,  0.5%st
    Mem:   8178496k total,  5856324k used,  2322172k free,   248684k buffers
    Swap: 25034744k total,        0k used, 25034744k free,  3513728k cached

      PID USER      PR  NI  VIRT  RES  SHR S %CPU %MEM    TIME+  COMMAND
     1418 root      20   0 12176 1460  848 R    4  0.0   0:00.02 top
        1 root      20   0 20064 2224 1284 S    0  0.0   0:07.86 init
        2 root      20   0     0    0    0 S    0  0.0   0:00.00 kthreadd
        3 root      20   0     0    0    0 S    0  0.0   0:50.55 ksoftirqd/0
        4 root      20   0     0    0    0 S    0  0.0   0:00.00 kworker/0:0
tools-webgrid-lighttpd-1209.tools.eqiad.wmflabs:
    top - 14:12:59 up 21 days, 10:55,  0 users,  load average: 106.38, 106.31, 105.3
    Tasks: 500 total,   1 running, 499 sleeping,   0 stopped,   0 zombie
    Cpu(s): 34.4%us,  3.0%sy,  0.0%ni, 61.7%id,  0.1%wa,  0.0%hi,  0.4%si,  0.5%st
    Mem:   8178496k total,  5856628k used,  2321868k free,   248684k buffers
    Swap: 25034744k total,        0k used, 25034744k free,  3513732k cached

      PID USER      PR  NI  VIRT  RES  SHR S %CPU %MEM    TIME+  COMMAND
     1438 root      20   0 12180 1484  856 R    6  0.0   0:00.04 top -c -b -n 1
     1061 tools.sd  20   0  443m  25m 5368 S    2  0.3  57:06.66 python -m src.serve
        1 root      20   0 20064 2224 1284 S    0  0.0   0:07.86 /sbin/init
        2 root      20   0     0    0    0 S    0  0.0   0:00.00 [kthreadd]
        3 root      20   0     0    0    0 S    0  0.0   0:50.55 [ksoftirqd/0]
        4 root      20   0     0    0    0 S    0  0.0   0:00.00 [kworker/0:0]
        5 root      20   0     0    0    0 S    0  0.0   0:00.08 [kworker/u:0]
        6 root      RT   0     0    0    0 S    0  0.0   0:04.11 [migration/0]
        7 root      RT   0     0    0    0 S    0  0.0   0:11.52 [watchdog/0]
        8 root      RT   0     0    0    0 S    0  0.0   0:04.01 [migration/1]
       10 root      20   0     0    0    0 S    0  0.0   4:03.34 [ksoftirqd/1]
       11 root      20   0     0    0    0 S    0  0.0   3:11.62 [kworker/0:1]
       12 root      RT   0     0    0    0 S    0  0.0   0:11.47 [watchdog/1]
       13 root      RT   0     0    0    0 S    0  0.0   0:04.94 [migration/2]
       15 root      20   0     0    0    0 S    0  0.0   0:49.39 [ksoftirqd/2]
       16 root      RT   0     0    0    0 S    0  0.0   0:10.08 [watchdog/2]
       17 root      RT   0     0    0    0 S    0  0.0   0:03.62 [migration/3]
       18 root      20   0     0    0    0 S    0  0.0   0:00.00 [kworker/3:0]
       19 root      20   0     0    0    0 S    0  0.0   0:40.28 [ksoftirqd/3]
       20 root      RT   0     0    0    0 S    0  0.0   0:09.35 [watchdog/3]
       21 root       0 -20     0    0    0 S    0  0.0   0:00.00 [cpuset]
       22 root       0 -20     0    0    0 S    0  0.0   0:00.00 [khelper]
       23 root      20   0     0    0    0 S    0  0.0   0:00.00 [kdevtmpfs]
       24 root       0 -20     0    0    0 S    0  0.0   0:00.00 [netns]
       25 root      20   0     0    0    0 S    0  0.0   0:00.00 [kworker/u:1]
       26 root      20   0     0    0    0 S    0  0.0   0:05.62 [sync_supers]
       27 root      20   0     0    0    0 S    0  0.0   0:00.30 [bdi-default]
       28 root       0 -20     0    0    0 S    0  0.0   0:00.00 [kintegrityd]
       29 root       0 -20     0    0    0 S    0  0.0   0:00.00 [kblockd]
       30 root       0 -20     0    0    0 S    0  0.0   0:00.00 [ata_sff]
       31 root      20   0     0    0    0 S    0  0.0   0:00.00 [khubd]
       32 root       0 -20     0    0    0 S    0  0.0   0:00.00 [md]
       33 root      20   0     0    0    0 S    0  0.0   1:25.62 [kworker/2:1]
       35 root      20   0     0    0    0 S    0  0.0   0:01.63 [khungtaskd]
       36 root      20   0     0    0    0 S    0  0.0   0:03.19 [kswapd0]
       37 root      25   5     0    0    0 S    0  0.0   0:00.00 [ksmd]
       38 root      39  19     0    0    0 S    0  0.0   0:00.00 [khugepaged]
       39 root      20   0     0    0    0 S    0  0.0   0:00.00 [fsnotify_mark]
       40 root      20   0     0    0    0 S    0  0.0   0:00.00 [ecryptfs-kthrea]
       41 root       0 -20     0    0    0 S    0  0.0   0:00.00 [crypto]
       49 root       0 -20     0    0    0 S    0  0.0   0:00.00 [kthrotld]
       50 root      20   0     0    0    0 S    0  0.0   0:00.00 [scsi_eh_0]
       51 root      20   0     0    0    0 S    0  0.0   0:00.00 [scsi_eh_1]
       72 root       0 -20     0    0    0 S    0  0.0   0:00.00 [devfreq_wq]
      214 root      20   0     0    0    0 S    0  0.0  48:15.13 [kworker/1:1]
      215 root      20   0     0    0    0 S    0  0.0   2:28.47 [kworker/3:1]
      221 root       0 -20     0    0    0 S    0  0.0   0:00.00 [kdmflush]
      228 root       0 -20     0    0    0 S    0  0.0   0:00.00 [kdmflush]
      236 root      20   0     0    0    0 S    0  0.0   0:41.24 [jbd2/vda1-8]
      237 root       0 -20     0    0    0 S    0  0.0   0:00.00 [ext4-dio-unwrit]
      320 root      20   0 17228  636  456 S    0  0.0   0:00.06 upstart-udev-bridge
      331 root      20   0 15208 1264  740 S    0  0.0   0:00.05 /sbin/udevd --daemo
      338 root      20   0 19196 1008  724 S    0  0.0   0:03.73 rpcbind -w
      367 statd     20   0 27336 1980 1288 S    0  0.0   0:00.00 rpc.statd -L
      406 root      20   0 35860 1188  856 S    0  0.0   0:00.00 CRON
      407 root      20   0  4396  608  508 S    0  0.0   0:00.00 /bin/sh -c   [ -x /
      412 root      20   0 38908 1000  852 S    0  0.0   0:00.00 find /var/lib/php5/
      413 root      20   0 31124  828  680 D    0  0.0   0:00.30 fuser -s ./sess_j3a
      458 root      20   0     0    0    0 S    0  0.0   1:54.59 [vballoon]
      464 root      20   0 15204  852  324 S    0  0.0   0:00.00 /sbin/udevd --daemo
      465 root      20   0 15184  832  324 S    0  0.0   0:00.00 /sbin/udevd --daemo
      474 root       0 -20     0    0    0 S    0  0.0   0:00.00 [kpsmoused]
      487 root      20   0     0    0    0 S    0  0.0   0:05.64 [jbd2/dm-1-8]
      488 root       0 -20     0    0    0 S    0  0.0   0:00.00 [ext4-dio-unwrit]
      568 root      20   0 15184  384  196 S    0  0.0   0:00.00 upstart-socket-brid
      608 root      20   0 15032 1084  544 S    0  0.0   0:00.07 dhclient3 -e IF_MET
      661 root       0 -20     0    0    0 S    0  0.0   0:00.00 [rpciod]
      678 root       0 -20     0    0    0 S    0  0.0   0:00.00 [nfsiod]
      682 root      20   0     0    0    0 S    0  0.0   0:00.00 [nfsv4.0-svc]
      684 root      20   0     0    0    0 S    0  0.0   0:35.37 [flush-253:0]
      732 ntp       20   0 39360 2832 1972 S    0  0.0   3:15.12 /usr/sbin/ntpd -p /
      748 diamond   20   0  570m  25m 5300 S    0  0.3  30:44.64 /usr/bin/python /us
      802 syslog    20   0  241m 5152 1068 S    0  0.1   2:21.40 rsyslogd -c5
      804 messageb  20   0 19580  684  452 S    0  0.0   0:00.02 dbus-daemon --syste
      866 root      20   0 33404  880  748 S    0  0.0   0:00.00 /sbin/getty -8 3840
      872 root      20   0 33404  876  748 S    0  0.0   0:00.00 /sbin/getty -8 3840
      874 root      20   0  588m  47m 9528 S    0  0.6  15:12.54 /usr/bin/python /us
      878 root      20   0 33404  880  748 S    0  0.0   0:00.00 /sbin/getty -8 3840
      879 root      20   0 33404  880  748 S    0  0.0   0:00.00 /sbin/getty -8 3840
      882 root      20   0 33404  876  748 S    0  0.0   0:00.00 /sbin/getty -8 3840
      886 root      20   0 52568 2956 2336 S    0  0.0   0:01.22 /usr/sbin/sshd -D
      887 daemon    20   0 10572  352  220 S    0  0.0   0:00.05 atd
      888 root      20   0 12776  932  724 S    0  0.0   0:07.13 cron
      909 root      20   0 15976  700  524 S    0  0.0   4:07.85 /usr/sbin/irqbalanc
      933 sgeadmin  20   0 22548 1988 1544 S    0  0.0   0:00.00 /usr/lib/gridengine
      935 tools.po  20   0 52300 2936 1576 D    0  0.0   5:48.38 /usr/sbin/lighttpd
      936 Debian-e  20   0 45392 1148  732 S    0  0.0   0:01.98 /usr/sbin/exim4 -oP
      937 sgeadmin  20   0 22548 1996 1544 S    0  0.0   0:00.00 /usr/lib/gridengine
      939 tools.sd  20   0 52152 2920 1684 D    0  0.0   1:37.51 /usr/sbin/lighttpd
      940 sgeadmin  20   0 22548 1988 1544 S    0  0.0   0:00.00 /usr/lib/gridengine
      942 tools.wi  20   0 52332 3156 1660 D    0  0.0   1:33.50 /usr/sbin/lighttpd
      959 root      20   0 47044 1528  944 S    0  0.0   1:45.51 /usr/sbin/lldpd
      960 _lldpd    20   0 42804  676  204 S    0  0.0   0:39.60 /usr/sbin/lldpd
      966 root      20   0  6992  384  216 S    0  0.0   0:00.00 /usr/sbin/mcelog --
      975 tools.po  20   0  307m  13m 8868 S    0  0.2   0:00.02 /usr/bin/php-cgi
      981 nagios    20   0 23340 1108  616 S    0  0.0   4:31.24 /usr/sbin/nrpe -c /
      995 tools.po  20   0  307m  13m 8880 S    0  0.2   0:00.38 /usr/bin/php-cgi
     1001 tools.wi  20   0  307m  13m 8868 S    0  0.2   0:00.03 /usr/bin/php-cgi
     1003 root      20   0  942m 3896 1656 S    0  0.0   4:24.71 /usr/sbin/nscd
     1004 tools.wi  20   0  307m 5320  324 S    0  0.1   0:00.00 /usr/bin/php-cgi
     1005 tools.wi  20   0  307m 5320  324 S    0  0.1   0:00.00 /usr/bin/php-cgi
     1007 tools.po  20   0 17092 1388 1132 D    0  0.0 137:34.48 /usr/lib/gamin/gam_
     1008 tools.wi  20   0  307m  13m 8868 S    0  0.2   0:00.03 /usr/bin/php-cgi
     1017 tools.wi  20   0  307m 5320  324 S    0  0.1   0:00.00 /usr/bin/php-cgi
     1024 tools.wi  20   0  307m 5320  324 S    0  0.1   0:00.00 /usr/bin/php-cgi
     1035 tools.wi  20   0 16972 1280 1108 D    0  0.0  11:42.46 /usr/lib/gamin/gam_
     1039 nslcd     20   0  437m 6964 1868 S    0  0.1   4:20.22 /usr/sbin/nslcd
     1050 tools.sd  20   0  307m  13m 8868 S    0  0.2   0:00.02 /usr/bin/php-cgi
     1052 tools.sd  20   0  307m 5316  324 S    0  0.1   0:00.00 /usr/bin/php-cgi
     1053 tools.sd  20   0  307m 5316  324 S    0  0.1   0:00.00 /usr/bin/php-cgi
     1054 tools.sd  20   0  307m  13m 8868 S    0  0.2   0:00.02 /usr/bin/php-cgi
     1056 tools.sd  20   0  307m 5320  324 S    0  0.1   0:00.00 /usr/bin/php-cgi
     1057 tools.sd  20   0  307m 5320  324 S    0  0.1   0:00.00 /usr/bin/php-cgi
     1058 tools.sd  20   0  4392  604  508 S    0  0.0   0:00.00 /bin/sh /data/proje
     1063 tools.sd  20   0 16972 1288 1112 D    0  0.0   2:06.84 /usr/lib/gamin/gam_
     1066 root      20   0  8768  524  408 S    0  0.0   0:00.53 /usr/sbin/inetd
     1105 sgeadmin  20   0 62768 8076 2208 D    0  0.1 515:39.36 /usr/lib/gridengine
     1182 scfc      20   0 97832 4100 3080 D    0  0.1   0:00.01 sshd: scfc [priv]
     1183 sshd      20   0 62672 1340  628 S    0  0.0   0:00.00 sshd: scfc [net]
     1276 www-data  20   0 44332 1048  292 S    0  0.0   1:22.55 /usr/sbin/lighttpd
     1304 root      20   0 34320  816  704 S    0  0.0   0:00.00 /sbin/getty -8 3840
     1305 root      20   0  7332  716  604 S    0  0.0   0:00.00 /sbin/getty -L 1152
     1354 root      20   0 35860 1188  856 S    0  0.0   0:00.00 CRON
     1355 root      20   0  4396  612  508 S    0  0.0   0:00.00 /bin/sh -c   [ -x /
     1360 root      20   0 38908 1000  852 S    0  0.0   0:00.00 find /var/lib/php5/
     1361 root      20   0 31124  832  680 D    0  0.0   0:00.33 fuser -s ./sess_j3a
     1436 root      20   0  588m  39m 1372 S    0  0.5   0:00.00 /usr/bin/python /us
     1437 root      20   0  4396  608  504 S    0  0.0   0:00.00 /bin/sh -c top -c -
     3104 tools.ca  20   0  314m  12m 4376 S    0  0.2   0:13.14 /usr/bin/php-cgi
     3136 tools.po  20   0  308m 8184 2668 S    0  0.1   0:01.56 /usr/bin/php-cgi
     3302 tools.wi  20   0  339m 9928 3380 S    0  0.1   0:02.84 /usr/bin/php-cgi
     5686 tools.po  20   0  308m 8304 2668 S    0  0.1   0:01.56 /usr/bin/php-cgi
     5766 tools.wi  20   0  339m 9.8m 3324 S    0  0.1   0:02.54 /usr/bin/php-cgi
     6414 tools.wi  20   0  338m 8856 3284 S    0  0.1   0:00.10 /usr/bin/php-cgi
     6703 sgeadmin  20   0 22548 2000 1552 S    0  0.0   0:00.00 /usr/lib/gridengine
     6705 51058     20   0 53044 3796 1692 D    0  0.0   1:44.01 /usr/sbin/lighttpd
     6729 51058     20   0  307m  13m 8868 S    0  0.2   0:00.01 /usr/bin/php-cgi
     6731 51058     20   0  307m 5316  324 S    0  0.1   0:00.00 /usr/bin/php-cgi
     6732 51058     20   0  307m 5316  324 S    0  0.1   0:00.00 /usr/bin/php-cgi
     6733 51058     20   0  307m  13m 8868 S    0  0.2   0:00.02 /usr/bin/php-cgi
     6735 51058     20   0  307m 5316  324 S    0  0.1   0:00.00 /usr/bin/php-cgi
     6736 51058     20   0  307m 5316  324 S    0  0.1   0:00.00 /usr/bin/php-cgi
     6738 51058     20   0 17316 1624 1144 D    0  0.0 719:19.58 /usr/lib/gamin/gam_
     6956 sgeadmin  20   0 22548 1996 1548 S    0  0.0   0:00.00 /usr/lib/gridengine
     6958 tools.ca  20   0 52532 3268 1588 D    0  0.0   9:51.10 /usr/sbin/lighttpd
     6988 tools.ca  20   0  307m  13m 8880 S    0  0.2   0:00.33 /usr/bin/php-cgi
     6992 tools.ca  20   0  307m  13m 8880 S    0  0.2   0:01.05 /usr/bin/php-cgi
     6997 tools.ca  20   0 16972 1284 1108 D    0  0.0   5:16.09 /usr/lib/gamin/gam_
     7011 sgeadmin  20   0 22548 2008 1552 S    0  0.0   0:00.00 /usr/lib/gridengine
     7013 52421     20   0 52188 2804 1556 D    0  0.0   1:36.84 /usr/sbin/lighttpd
     7033 52421     20   0  307m  13m 8868 S    0  0.2   0:00.02 /usr/bin/php-cgi
     7035 52421     20   0  312m 9436 2936 S    0  0.1   0:00.26 /usr/bin/php-cgi
     7036 52421     20   0  312m 9464 2924 S    0  0.1   0:00.24 /usr/bin/php-cgi
     7037 52421     20   0  307m  13m 8868 S    0  0.2   0:00.02 /usr/bin/php-cgi
     7039 52421     20   0  312m 9552 2964 S    0  0.1   0:08.39 /usr/bin/php-cgi
     7040 52421     20   0  312m 9540 2952 S    0  0.1   0:08.17 /usr/bin/php-cgi
     7042 52421     20   0 16972 1284 1112 D    0  0.0   7:39.02 /usr/lib/gamin/gam_
     7056 sgeadmin  20   0 22548 2000 1552 S    0  0.0   0:00.00 /usr/lib/gridengine
     7058 tools.al  20   0 52072 2796 1628 D    0  0.0   1:36.00 /usr/sbin/lighttpd
     7082 tools.al  20   0  307m  13m 8868 S    0  0.2   0:00.01 /usr/bin/php-cgi
     7084 tools.al  20   0  307m 5316  324 S    0  0.1   0:00.00 /usr/bin/php-cgi
     7085 tools.al  20   0  307m 5316  324 S    0  0.1   0:00.00 /usr/bin/php-cgi
     7086 tools.al  20   0  307m  13m 8868 S    0  0.2   0:00.02 /usr/bin/php-cgi
     7088 tools.al  20   0  307m 5320  324 S    0  0.1   0:00.00 /usr/bin/php-cgi
     7089 tools.al  20   0  307m 5320  324 S    0  0.1   0:00.00 /usr/bin/php-cgi
     7091 tools.al  20   0 16972 1288 1112 D    0  0.0   9:44.89 /usr/lib/gamin/gam_
     7092 sgeadmin  20   0 22548 1992 1548 S    0  0.0   0:00.00 /usr/lib/gridengine
     7094 tools.ti  20   0 52168 2844 1636 S    0  0.0   1:35.91 /usr/sbin/lighttpd
     7118 tools.ti  20   0  307m  13m 8868 S    0  0.2   0:00.02 /usr/bin/php-cgi
     7120 tools.ti  20   0  307m 5320  324 S    0  0.1   0:00.00 /usr/bin/php-cgi
     7121 tools.ti  20   0  307m 5320  324 S    0  0.1   0:00.00 /usr/bin/php-cgi
     7122 tools.ti  20   0  307m  13m 8868 S    0  0.2   0:00.01 /usr/bin/php-cgi
     7124 tools.ti  20   0  307m 5320  324 S    0  0.1   0:00.00 /usr/bin/php-cgi
     7125 tools.ti  20   0  307m 5320  324 S    0  0.1   0:00.00 /usr/bin/php-cgi
     7127 tools.ti  20   0 16972 1288 1112 D    0  0.0  34:08.19 /usr/lib/gamin/gam_
     7189 sgeadmin  20   0 22548 2000 1548 S    0  0.0   0:00.00 /usr/lib/gridengine
     7191 tools.ex  20   0 52076 2500 1468 D    0  0.0   1:35.43 /usr/sbin/lighttpd
     7211 tools.ex  20   0  307m  13m 8868 S    0  0.2   0:00.01 /usr/bin/php-cgi
     7213 tools.ex  20   0  307m 5320  324 S    0  0.1   0:00.00 /usr/bin/php-cgi
     7214 tools.ex  20   0  307m 5320  324 S    0  0.1   0:00.00 /usr/bin/php-cgi
     7215 tools.ex  20   0  307m  13m 8868 S    0  0.2   0:00.01 /usr/bin/php-cgi
     7217 tools.ex  20   0  307m 5316  324 S    0  0.1   0:00.00 /usr/bin/php-cgi
     7218 tools.ex  20   0  307m 5316  324 S    0  0.1   0:00.00 /usr/bin/php-cgi
     7220 tools.ex  20   0 16972 1284 1112 D    0  0.0  44:15.11 /usr/lib/gamin/gam_
     7379 sgeadmin  20   0 22548 1992 1548 S    0  0.0   0:00.00 /usr/lib/gridengine
     7381 tools.po  20   0 52460 3172 1552 D    0  0.0   1:35.47 /usr/sbin/lighttpd