Nov 2 03:37:18 prd-ubuntu20-04-docker-8c-8g-16331 passwd[754]: password for 'ubuntu' changed by 'root' Nov 2 03:37:18 prd-ubuntu20-04-docker-8c-8g-16331 systemd-logind[800]: New seat seat0. Nov 2 03:37:18 prd-ubuntu20-04-docker-8c-8g-16331 systemd-logind[800]: Watching system buttons on /dev/input/event0 (Power Button) Nov 2 03:37:18 prd-ubuntu20-04-docker-8c-8g-16331 systemd-logind[800]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Nov 2 03:37:18 prd-ubuntu20-04-docker-8c-8g-16331 sshd[838]: Server listening on 0.0.0.0 port 22. Nov 2 03:37:18 prd-ubuntu20-04-docker-8c-8g-16331 sshd[838]: Server listening on :: port 22. Nov 2 03:37:19 prd-ubuntu20-04-docker-8c-8g-16331 sshd[964]: error: kex_exchange_identification: Connection closed by remote host Nov 2 03:37:23 prd-ubuntu20-04-docker-8c-8g-16331 sshd[1016]: Invalid user jenkins from 10.30.120.5 port 57856 Nov 2 03:37:24 prd-ubuntu20-04-docker-8c-8g-16331 sshd[1016]: Received disconnect from 10.30.120.5 port 57856:11: Closed due to user request. [preauth] Nov 2 03:37:24 prd-ubuntu20-04-docker-8c-8g-16331 sshd[1016]: Disconnected from invalid user jenkins 10.30.120.5 port 57856 [preauth] Nov 2 03:37:26 prd-ubuntu20-04-docker-8c-8g-16331 sshd[1035]: Invalid user jenkins from 10.30.120.5 port 57858 Nov 2 03:37:26 prd-ubuntu20-04-docker-8c-8g-16331 sshd[1035]: Received disconnect from 10.30.120.5 port 57858:11: Closed due to user request. [preauth] Nov 2 03:37:26 prd-ubuntu20-04-docker-8c-8g-16331 sshd[1035]: Disconnected from invalid user jenkins 10.30.120.5 port 57858 [preauth] Nov 2 03:37:28 prd-ubuntu20-04-docker-8c-8g-16331 sshd[1038]: Invalid user jenkins from 10.30.120.5 port 57860 Nov 2 03:37:28 prd-ubuntu20-04-docker-8c-8g-16331 sshd[1038]: Received disconnect from 10.30.120.5 port 57860:11: Closed due to user request. [preauth] Nov 2 03:37:28 prd-ubuntu20-04-docker-8c-8g-16331 sshd[1038]: Disconnected from invalid user jenkins 10.30.120.5 port 57860 [preauth] Nov 2 03:37:30 prd-ubuntu20-04-docker-8c-8g-16331 sshd[1040]: Invalid user jenkins from 10.30.120.5 port 57864 Nov 2 03:37:30 prd-ubuntu20-04-docker-8c-8g-16331 sshd[1040]: Received disconnect from 10.30.120.5 port 57864:11: Closed due to user request. [preauth] Nov 2 03:37:30 prd-ubuntu20-04-docker-8c-8g-16331 sshd[1040]: Disconnected from invalid user jenkins 10.30.120.5 port 57864 [preauth] Nov 2 03:37:32 prd-ubuntu20-04-docker-8c-8g-16331 sshd[1042]: Invalid user jenkins from 10.30.120.5 port 57866 Nov 2 03:37:32 prd-ubuntu20-04-docker-8c-8g-16331 sshd[1042]: Received disconnect from 10.30.120.5 port 57866:11: Closed due to user request. [preauth] Nov 2 03:37:32 prd-ubuntu20-04-docker-8c-8g-16331 sshd[1042]: Disconnected from invalid user jenkins 10.30.120.5 port 57866 [preauth] Nov 2 03:37:34 prd-ubuntu20-04-docker-8c-8g-16331 sshd[1044]: Invalid user jenkins from 10.30.120.5 port 57870 Nov 2 03:37:34 prd-ubuntu20-04-docker-8c-8g-16331 sshd[1044]: Received disconnect from 10.30.120.5 port 57870:11: Closed due to user request. [preauth] Nov 2 03:37:34 prd-ubuntu20-04-docker-8c-8g-16331 sshd[1044]: Disconnected from invalid user jenkins 10.30.120.5 port 57870 [preauth] Nov 2 03:37:36 prd-ubuntu20-04-docker-8c-8g-16331 sshd[1046]: Invalid user jenkins from 10.30.120.5 port 57874 Nov 2 03:37:36 prd-ubuntu20-04-docker-8c-8g-16331 sshd[1046]: Received disconnect from 10.30.120.5 port 57874:11: Closed due to user request. [preauth] Nov 2 03:37:36 prd-ubuntu20-04-docker-8c-8g-16331 sshd[1046]: Disconnected from invalid user jenkins 10.30.120.5 port 57874 [preauth] Nov 2 03:37:38 prd-ubuntu20-04-docker-8c-8g-16331 sshd[1048]: Invalid user jenkins from 10.30.120.5 port 57876 Nov 2 03:37:38 prd-ubuntu20-04-docker-8c-8g-16331 sshd[1048]: Received disconnect from 10.30.120.5 port 57876:11: Closed due to user request. [preauth] Nov 2 03:37:38 prd-ubuntu20-04-docker-8c-8g-16331 sshd[1048]: Disconnected from invalid user jenkins 10.30.120.5 port 57876 [preauth] Nov 2 03:37:40 prd-ubuntu20-04-docker-8c-8g-16331 sshd[1059]: Invalid user jenkins from 10.30.120.5 port 57878 Nov 2 03:37:41 prd-ubuntu20-04-docker-8c-8g-16331 sshd[1059]: Received disconnect from 10.30.120.5 port 57878:11: Closed due to user request. [preauth] Nov 2 03:37:41 prd-ubuntu20-04-docker-8c-8g-16331 sshd[1059]: Disconnected from invalid user jenkins 10.30.120.5 port 57878 [preauth] Nov 2 03:37:43 prd-ubuntu20-04-docker-8c-8g-16331 sshd[1227]: Invalid user jenkins from 10.30.120.5 port 57880 Nov 2 03:37:43 prd-ubuntu20-04-docker-8c-8g-16331 sshd[1227]: Received disconnect from 10.30.120.5 port 57880:11: Closed due to user request. [preauth] Nov 2 03:37:43 prd-ubuntu20-04-docker-8c-8g-16331 sshd[1227]: Disconnected from invalid user jenkins 10.30.120.5 port 57880 [preauth] Nov 2 03:37:45 prd-ubuntu20-04-docker-8c-8g-16331 sshd[1267]: Invalid user jenkins from 10.30.120.5 port 57886 Nov 2 03:37:45 prd-ubuntu20-04-docker-8c-8g-16331 sshd[1267]: Received disconnect from 10.30.120.5 port 57886:11: Closed due to user request. [preauth] Nov 2 03:37:45 prd-ubuntu20-04-docker-8c-8g-16331 sshd[1267]: Disconnected from invalid user jenkins 10.30.120.5 port 57886 [preauth] Nov 2 03:37:47 prd-ubuntu20-04-docker-8c-8g-16331 sshd[1269]: Invalid user jenkins from 10.30.120.5 port 57888 Nov 2 03:37:47 prd-ubuntu20-04-docker-8c-8g-16331 sshd[1269]: Received disconnect from 10.30.120.5 port 57888:11: Closed due to user request. [preauth] Nov 2 03:37:47 prd-ubuntu20-04-docker-8c-8g-16331 sshd[1269]: Disconnected from invalid user jenkins 10.30.120.5 port 57888 [preauth] Nov 2 03:37:49 prd-ubuntu20-04-docker-8c-8g-16331 sshd[1284]: Invalid user jenkins from 10.30.120.5 port 57890 Nov 2 03:37:50 prd-ubuntu20-04-docker-8c-8g-16331 sshd[1284]: Received disconnect from 10.30.120.5 port 57890:11: Closed due to user request. [preauth] Nov 2 03:37:50 prd-ubuntu20-04-docker-8c-8g-16331 sshd[1284]: Disconnected from invalid user jenkins 10.30.120.5 port 57890 [preauth] Nov 2 03:37:52 prd-ubuntu20-04-docker-8c-8g-16331 sshd[1286]: Invalid user jenkins from 10.30.120.5 port 57898 Nov 2 03:37:52 prd-ubuntu20-04-docker-8c-8g-16331 sshd[1286]: Received disconnect from 10.30.120.5 port 57898:11: Closed due to user request. [preauth] Nov 2 03:37:52 prd-ubuntu20-04-docker-8c-8g-16331 sshd[1286]: Disconnected from invalid user jenkins 10.30.120.5 port 57898 [preauth] Nov 2 03:37:54 prd-ubuntu20-04-docker-8c-8g-16331 sshd[1296]: Invalid user jenkins from 10.30.120.5 port 57900 Nov 2 03:37:54 prd-ubuntu20-04-docker-8c-8g-16331 sshd[1296]: Received disconnect from 10.30.120.5 port 57900:11: Closed due to user request. [preauth] Nov 2 03:37:54 prd-ubuntu20-04-docker-8c-8g-16331 sshd[1296]: Disconnected from invalid user jenkins 10.30.120.5 port 57900 [preauth] Nov 2 03:37:54 prd-ubuntu20-04-docker-8c-8g-16331 useradd[1309]: new group: name=jenkins, GID=1001 Nov 2 03:37:54 prd-ubuntu20-04-docker-8c-8g-16331 useradd[1309]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash, from=none Nov 2 03:37:54 prd-ubuntu20-04-docker-8c-8g-16331 usermod[1319]: add 'jenkins' to group 'docker' Nov 2 03:37:54 prd-ubuntu20-04-docker-8c-8g-16331 usermod[1319]: add 'jenkins' to shadow group 'docker' Nov 2 03:37:56 prd-ubuntu20-04-docker-8c-8g-16331 sshd[1356]: Accepted publickey for jenkins from 10.30.120.5 port 57902 ssh2: RSA SHA256:aPmPdMw/h9M56P/o8xjsZcdBWoRKGeie6FPOwnlsRmU Nov 2 03:37:56 prd-ubuntu20-04-docker-8c-8g-16331 sshd[1356]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Nov 2 03:37:56 prd-ubuntu20-04-docker-8c-8g-16331 systemd-logind[800]: New session 1 of user jenkins. Nov 2 03:37:56 prd-ubuntu20-04-docker-8c-8g-16331 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Nov 2 03:38:02 prd-ubuntu20-04-docker-8c-8g-16331 CRON[1569]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 2 03:38:02 prd-ubuntu20-04-docker-8c-8g-16331 CRON[1569]: pam_unix(cron:session): session closed for user root Nov 2 03:38:14 prd-ubuntu20-04-docker-8c-8g-16331 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/foundry_app-record-replay_PR-102 ; USER=root ; COMMAND=/usr/bin/mv /tmp/ssh_known_hosts /etc/ssh/ssh_known_hosts Nov 2 03:38:14 prd-ubuntu20-04-docker-8c-8g-16331 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Nov 2 03:38:14 prd-ubuntu20-04-docker-8c-8g-16331 sudo: pam_unix(sudo:session): session closed for user root Nov 2 03:38:14 prd-ubuntu20-04-docker-8c-8g-16331 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/foundry_app-record-replay_PR-102 ; USER=root ; COMMAND=/usr/bin/tee -a /etc/ssh/ssh_known_hosts Nov 2 03:38:14 prd-ubuntu20-04-docker-8c-8g-16331 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Nov 2 03:38:14 prd-ubuntu20-04-docker-8c-8g-16331 sudo: pam_unix(sudo:session): session closed for user root Nov 2 03:38:29 prd-ubuntu20-04-docker-8c-8g-16331 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/foundry_app-record-replay_PR-102 ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins .semver Nov 2 03:38:29 prd-ubuntu20-04-docker-8c-8g-16331 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Nov 2 03:38:29 prd-ubuntu20-04-docker-8c-8g-16331 sudo: pam_unix(sudo:session): session closed for user root Nov 2 03:39:01 prd-ubuntu20-04-docker-8c-8g-16331 CRON[3459]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 2 03:39:01 prd-ubuntu20-04-docker-8c-8g-16331 CRON[3459]: pam_unix(cron:session): session closed for user root Nov 2 03:40:01 prd-ubuntu20-04-docker-8c-8g-16331 CRON[9874]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 2 03:40:01 prd-ubuntu20-04-docker-8c-8g-16331 CRON[9874]: pam_unix(cron:session): session closed for user root Nov 2 03:40:44 prd-ubuntu20-04-docker-8c-8g-16331 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/foundry_app-record-replay_PR-102 ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins . Nov 2 03:40:44 prd-ubuntu20-04-docker-8c-8g-16331 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Nov 2 03:40:44 prd-ubuntu20-04-docker-8c-8g-16331 sudo: pam_unix(sudo:session): session closed for user root Nov 2 03:40:45 prd-ubuntu20-04-docker-8c-8g-16331 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/foundry_app-record-replay_PR-102 ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins . Nov 2 03:40:45 prd-ubuntu20-04-docker-8c-8g-16331 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Nov 2 03:40:45 prd-ubuntu20-04-docker-8c-8g-16331 sudo: pam_unix(sudo:session): session closed for user root Nov 2 03:41:01 prd-ubuntu20-04-docker-8c-8g-16331 CRON[20446]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 2 03:41:01 prd-ubuntu20-04-docker-8c-8g-16331 CRON[20446]: pam_unix(cron:session): session closed for user root Nov 2 03:42:01 prd-ubuntu20-04-docker-8c-8g-16331 CRON[21388]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 2 03:42:01 prd-ubuntu20-04-docker-8c-8g-16331 CRON[21388]: pam_unix(cron:session): session closed for user root Nov 2 03:42:34 prd-ubuntu20-04-docker-8c-8g-16331 systemd-logind[800]: Watching system buttons on /dev/input/event0 (Power Button) Nov 2 03:42:34 prd-ubuntu20-04-docker-8c-8g-16331 systemd-logind[800]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Nov 2 03:43:01 prd-ubuntu20-04-docker-8c-8g-16331 CRON[22700]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 2 03:43:01 prd-ubuntu20-04-docker-8c-8g-16331 CRON[22700]: pam_unix(cron:session): session closed for user root Nov 2 03:44:01 prd-ubuntu20-04-docker-8c-8g-16331 CRON[22762]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 2 03:44:01 prd-ubuntu20-04-docker-8c-8g-16331 CRON[22762]: pam_unix(cron:session): session closed for user root Nov 2 03:45:01 prd-ubuntu20-04-docker-8c-8g-16331 CRON[22765]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 2 03:45:01 prd-ubuntu20-04-docker-8c-8g-16331 CRON[22765]: pam_unix(cron:session): session closed for user root Nov 2 03:46:01 prd-ubuntu20-04-docker-8c-8g-16331 CRON[22769]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 2 03:46:01 prd-ubuntu20-04-docker-8c-8g-16331 CRON[22769]: pam_unix(cron:session): session closed for user root Nov 2 03:47:01 prd-ubuntu20-04-docker-8c-8g-16331 CRON[22772]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 2 03:47:01 prd-ubuntu20-04-docker-8c-8g-16331 CRON[22772]: pam_unix(cron:session): session closed for user root Nov 2 03:48:01 prd-ubuntu20-04-docker-8c-8g-16331 CRON[22780]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 2 03:48:01 prd-ubuntu20-04-docker-8c-8g-16331 CRON[22780]: pam_unix(cron:session): session closed for user root Nov 2 03:49:01 prd-ubuntu20-04-docker-8c-8g-16331 CRON[22783]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 2 03:49:01 prd-ubuntu20-04-docker-8c-8g-16331 CRON[22783]: pam_unix(cron:session): session closed for user root Nov 2 03:50:01 prd-ubuntu20-04-docker-8c-8g-16331 CRON[22787]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 2 03:50:01 prd-ubuntu20-04-docker-8c-8g-16331 CRON[22787]: pam_unix(cron:session): session closed for user root Nov 2 03:51:01 prd-ubuntu20-04-docker-8c-8g-16331 CRON[22790]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 2 03:51:01 prd-ubuntu20-04-docker-8c-8g-16331 CRON[22790]: pam_unix(cron:session): session closed for user root Nov 2 03:52:00 prd-ubuntu20-04-docker-8c-8g-16331 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/foundry_app-record-replay_PR-102 ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins /w/workspace/foundry_app-record-replay_PR-102/archives Nov 2 03:52:00 prd-ubuntu20-04-docker-8c-8g-16331 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Nov 2 03:52:00 prd-ubuntu20-04-docker-8c-8g-16331 sudo: pam_unix(sudo:session): session closed for user root Nov 2 03:52:01 prd-ubuntu20-04-docker-8c-8g-16331 CRON[22986]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 2 03:52:01 prd-ubuntu20-04-docker-8c-8g-16331 CRON[22986]: pam_unix(cron:session): session closed for user root