Jun 26 03:37:33 prd-ubuntu20-04-docker-8c-8g-4415 passwd[758]: password for 'ubuntu' changed by 'root' Jun 26 03:37:33 prd-ubuntu20-04-docker-8c-8g-4415 systemd-logind[817]: New seat seat0. Jun 26 03:37:33 prd-ubuntu20-04-docker-8c-8g-4415 systemd-logind[817]: Watching system buttons on /dev/input/event0 (Power Button) Jun 26 03:37:33 prd-ubuntu20-04-docker-8c-8g-4415 systemd-logind[817]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Jun 26 03:37:33 prd-ubuntu20-04-docker-8c-8g-4415 sshd[850]: Server listening on 0.0.0.0 port 22. Jun 26 03:37:33 prd-ubuntu20-04-docker-8c-8g-4415 sshd[850]: Server listening on :: port 22. Jun 26 03:37:34 prd-ubuntu20-04-docker-8c-8g-4415 sshd[1004]: error: kex_exchange_identification: Connection closed by remote host Jun 26 03:37:44 prd-ubuntu20-04-docker-8c-8g-4415 sshd[1032]: Invalid user jenkins from 10.30.120.5 port 42504 Jun 26 03:37:44 prd-ubuntu20-04-docker-8c-8g-4415 sshd[1032]: Received disconnect from 10.30.120.5 port 42504:11: Closed due to user request. [preauth] Jun 26 03:37:44 prd-ubuntu20-04-docker-8c-8g-4415 sshd[1032]: Disconnected from invalid user jenkins 10.30.120.5 port 42504 [preauth] Jun 26 03:37:46 prd-ubuntu20-04-docker-8c-8g-4415 sshd[1036]: Invalid user jenkins from 10.30.120.5 port 42512 Jun 26 03:37:46 prd-ubuntu20-04-docker-8c-8g-4415 sshd[1036]: Received disconnect from 10.30.120.5 port 42512:11: Closed due to user request. [preauth] Jun 26 03:37:46 prd-ubuntu20-04-docker-8c-8g-4415 sshd[1036]: Disconnected from invalid user jenkins 10.30.120.5 port 42512 [preauth] Jun 26 03:37:48 prd-ubuntu20-04-docker-8c-8g-4415 sshd[1038]: Invalid user jenkins from 10.30.120.5 port 42514 Jun 26 03:37:48 prd-ubuntu20-04-docker-8c-8g-4415 sshd[1038]: Received disconnect from 10.30.120.5 port 42514:11: Closed due to user request. [preauth] Jun 26 03:37:48 prd-ubuntu20-04-docker-8c-8g-4415 sshd[1038]: Disconnected from invalid user jenkins 10.30.120.5 port 42514 [preauth] Jun 26 03:37:50 prd-ubuntu20-04-docker-8c-8g-4415 sshd[1040]: Invalid user jenkins from 10.30.120.5 port 42518 Jun 26 03:37:51 prd-ubuntu20-04-docker-8c-8g-4415 sshd[1040]: Received disconnect from 10.30.120.5 port 42518:11: Closed due to user request. [preauth] Jun 26 03:37:51 prd-ubuntu20-04-docker-8c-8g-4415 sshd[1040]: Disconnected from invalid user jenkins 10.30.120.5 port 42518 [preauth] Jun 26 03:37:53 prd-ubuntu20-04-docker-8c-8g-4415 sshd[1218]: Invalid user jenkins from 10.30.120.5 port 42520 Jun 26 03:37:53 prd-ubuntu20-04-docker-8c-8g-4415 sshd[1218]: Received disconnect from 10.30.120.5 port 42520:11: Closed due to user request. [preauth] Jun 26 03:37:53 prd-ubuntu20-04-docker-8c-8g-4415 sshd[1218]: Disconnected from invalid user jenkins 10.30.120.5 port 42520 [preauth] Jun 26 03:37:55 prd-ubuntu20-04-docker-8c-8g-4415 sshd[1256]: Invalid user jenkins from 10.30.120.5 port 42522 Jun 26 03:37:55 prd-ubuntu20-04-docker-8c-8g-4415 sshd[1256]: Received disconnect from 10.30.120.5 port 42522:11: Closed due to user request. [preauth] Jun 26 03:37:55 prd-ubuntu20-04-docker-8c-8g-4415 sshd[1256]: Disconnected from invalid user jenkins 10.30.120.5 port 42522 [preauth] Jun 26 03:37:57 prd-ubuntu20-04-docker-8c-8g-4415 sshd[1266]: Invalid user jenkins from 10.30.120.5 port 42524 Jun 26 03:37:58 prd-ubuntu20-04-docker-8c-8g-4415 sshd[1266]: Received disconnect from 10.30.120.5 port 42524:11: Closed due to user request. [preauth] Jun 26 03:37:58 prd-ubuntu20-04-docker-8c-8g-4415 sshd[1266]: Disconnected from invalid user jenkins 10.30.120.5 port 42524 [preauth] Jun 26 03:38:00 prd-ubuntu20-04-docker-8c-8g-4415 sshd[1268]: Invalid user jenkins from 10.30.120.5 port 42526 Jun 26 03:38:00 prd-ubuntu20-04-docker-8c-8g-4415 sshd[1268]: Received disconnect from 10.30.120.5 port 42526:11: Closed due to user request. [preauth] Jun 26 03:38:00 prd-ubuntu20-04-docker-8c-8g-4415 sshd[1268]: Disconnected from invalid user jenkins 10.30.120.5 port 42526 [preauth] Jun 26 03:38:02 prd-ubuntu20-04-docker-8c-8g-4415 CRON[1270]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 26 03:38:02 prd-ubuntu20-04-docker-8c-8g-4415 CRON[1270]: pam_unix(cron:session): session closed for user root Jun 26 03:38:03 prd-ubuntu20-04-docker-8c-8g-4415 sshd[1280]: Invalid user jenkins from 10.30.120.5 port 42528 Jun 26 03:38:03 prd-ubuntu20-04-docker-8c-8g-4415 sshd[1280]: Received disconnect from 10.30.120.5 port 42528:11: Closed due to user request. [preauth] Jun 26 03:38:03 prd-ubuntu20-04-docker-8c-8g-4415 sshd[1280]: Disconnected from invalid user jenkins 10.30.120.5 port 42528 [preauth] Jun 26 03:38:04 prd-ubuntu20-04-docker-8c-8g-4415 useradd[1301]: new group: name=jenkins, GID=1001 Jun 26 03:38:04 prd-ubuntu20-04-docker-8c-8g-4415 useradd[1301]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash, from=none Jun 26 03:38:04 prd-ubuntu20-04-docker-8c-8g-4415 usermod[1311]: add 'jenkins' to group 'docker' Jun 26 03:38:04 prd-ubuntu20-04-docker-8c-8g-4415 usermod[1311]: add 'jenkins' to shadow group 'docker' Jun 26 03:38:05 prd-ubuntu20-04-docker-8c-8g-4415 sshd[1359]: Accepted publickey for jenkins from 10.30.120.5 port 42530 ssh2: RSA SHA256:aPmPdMw/h9M56P/o8xjsZcdBWoRKGeie6FPOwnlsRmU Jun 26 03:38:05 prd-ubuntu20-04-docker-8c-8g-4415 sshd[1359]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Jun 26 03:38:05 prd-ubuntu20-04-docker-8c-8g-4415 systemd-logind[817]: New session 2 of user jenkins. Jun 26 03:38:05 prd-ubuntu20-04-docker-8c-8g-4415 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Jun 26 03:38:27 prd-ubuntu20-04-docker-8c-8g-4415 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/foundry_app-record-replay_PR-143 ; USER=root ; COMMAND=/usr/bin/mv /tmp/ssh_known_hosts /etc/ssh/ssh_known_hosts Jun 26 03:38:27 prd-ubuntu20-04-docker-8c-8g-4415 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Jun 26 03:38:27 prd-ubuntu20-04-docker-8c-8g-4415 sudo: pam_unix(sudo:session): session closed for user root Jun 26 03:38:27 prd-ubuntu20-04-docker-8c-8g-4415 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/foundry_app-record-replay_PR-143 ; USER=root ; COMMAND=/usr/bin/tee -a /etc/ssh/ssh_known_hosts Jun 26 03:38:27 prd-ubuntu20-04-docker-8c-8g-4415 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Jun 26 03:38:27 prd-ubuntu20-04-docker-8c-8g-4415 sudo: pam_unix(sudo:session): session closed for user root Jun 26 03:38:52 prd-ubuntu20-04-docker-8c-8g-4415 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/foundry_app-record-replay_PR-143 ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins .semver Jun 26 03:38:52 prd-ubuntu20-04-docker-8c-8g-4415 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Jun 26 03:38:52 prd-ubuntu20-04-docker-8c-8g-4415 sudo: pam_unix(sudo:session): session closed for user root Jun 26 03:39:01 prd-ubuntu20-04-docker-8c-8g-4415 CRON[3094]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 26 03:39:01 prd-ubuntu20-04-docker-8c-8g-4415 CRON[3094]: pam_unix(cron:session): session closed for user root Jun 26 03:40:01 prd-ubuntu20-04-docker-8c-8g-4415 CRON[3546]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 26 03:40:01 prd-ubuntu20-04-docker-8c-8g-4415 CRON[3546]: pam_unix(cron:session): session closed for user root Jun 26 03:41:01 prd-ubuntu20-04-docker-8c-8g-4415 CRON[12728]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 26 03:41:01 prd-ubuntu20-04-docker-8c-8g-4415 CRON[12728]: pam_unix(cron:session): session closed for user root Jun 26 03:42:01 prd-ubuntu20-04-docker-8c-8g-4415 CRON[23136]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 26 03:42:01 prd-ubuntu20-04-docker-8c-8g-4415 CRON[23136]: pam_unix(cron:session): session closed for user root Jun 26 03:42:13 prd-ubuntu20-04-docker-8c-8g-4415 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/foundry_app-record-replay_PR-143 ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins . Jun 26 03:42:13 prd-ubuntu20-04-docker-8c-8g-4415 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Jun 26 03:42:13 prd-ubuntu20-04-docker-8c-8g-4415 sudo: pam_unix(sudo:session): session closed for user root Jun 26 03:42:14 prd-ubuntu20-04-docker-8c-8g-4415 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/foundry_app-record-replay_PR-143 ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins . Jun 26 03:42:14 prd-ubuntu20-04-docker-8c-8g-4415 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Jun 26 03:42:14 prd-ubuntu20-04-docker-8c-8g-4415 sudo: pam_unix(sudo:session): session closed for user root Jun 26 03:43:01 prd-ubuntu20-04-docker-8c-8g-4415 CRON[28854]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 26 03:43:01 prd-ubuntu20-04-docker-8c-8g-4415 CRON[28854]: pam_unix(cron:session): session closed for user root Jun 26 03:43:01 prd-ubuntu20-04-docker-8c-8g-4415 systemd-logind[817]: Watching system buttons on /dev/input/event0 (Power Button) Jun 26 03:43:01 prd-ubuntu20-04-docker-8c-8g-4415 systemd-logind[817]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Jun 26 03:44:01 prd-ubuntu20-04-docker-8c-8g-4415 CRON[30562]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 26 03:44:01 prd-ubuntu20-04-docker-8c-8g-4415 CRON[30562]: pam_unix(cron:session): session closed for user root Jun 26 03:45:01 prd-ubuntu20-04-docker-8c-8g-4415 CRON[30610]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 26 03:45:01 prd-ubuntu20-04-docker-8c-8g-4415 CRON[30610]: pam_unix(cron:session): session closed for user root Jun 26 03:46:01 prd-ubuntu20-04-docker-8c-8g-4415 CRON[30614]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 26 03:46:01 prd-ubuntu20-04-docker-8c-8g-4415 CRON[30614]: pam_unix(cron:session): session closed for user root Jun 26 03:47:01 prd-ubuntu20-04-docker-8c-8g-4415 CRON[30617]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 26 03:47:01 prd-ubuntu20-04-docker-8c-8g-4415 CRON[30617]: pam_unix(cron:session): session closed for user root Jun 26 03:48:01 prd-ubuntu20-04-docker-8c-8g-4415 CRON[30624]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 26 03:48:01 prd-ubuntu20-04-docker-8c-8g-4415 CRON[30624]: pam_unix(cron:session): session closed for user root Jun 26 03:49:01 prd-ubuntu20-04-docker-8c-8g-4415 CRON[30628]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 26 03:49:01 prd-ubuntu20-04-docker-8c-8g-4415 CRON[30628]: pam_unix(cron:session): session closed for user root Jun 26 03:50:01 prd-ubuntu20-04-docker-8c-8g-4415 CRON[30632]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 26 03:50:01 prd-ubuntu20-04-docker-8c-8g-4415 CRON[30632]: pam_unix(cron:session): session closed for user root Jun 26 03:51:01 prd-ubuntu20-04-docker-8c-8g-4415 CRON[30636]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 26 03:51:01 prd-ubuntu20-04-docker-8c-8g-4415 CRON[30636]: pam_unix(cron:session): session closed for user root Jun 26 03:52:01 prd-ubuntu20-04-docker-8c-8g-4415 CRON[30640]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 26 03:52:01 prd-ubuntu20-04-docker-8c-8g-4415 CRON[30640]: pam_unix(cron:session): session closed for user root Jun 26 03:53:01 prd-ubuntu20-04-docker-8c-8g-4415 CRON[30644]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 26 03:53:01 prd-ubuntu20-04-docker-8c-8g-4415 CRON[30644]: pam_unix(cron:session): session closed for user root Jun 26 03:54:01 prd-ubuntu20-04-docker-8c-8g-4415 CRON[30667]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 26 03:54:01 prd-ubuntu20-04-docker-8c-8g-4415 CRON[30667]: pam_unix(cron:session): session closed for user root Jun 26 03:55:01 prd-ubuntu20-04-docker-8c-8g-4415 CRON[30670]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 26 03:55:01 prd-ubuntu20-04-docker-8c-8g-4415 CRON[30670]: pam_unix(cron:session): session closed for user root Jun 26 03:56:01 prd-ubuntu20-04-docker-8c-8g-4415 CRON[30674]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 26 03:56:01 prd-ubuntu20-04-docker-8c-8g-4415 CRON[30674]: pam_unix(cron:session): session closed for user root Jun 26 03:57:01 prd-ubuntu20-04-docker-8c-8g-4415 CRON[30678]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 26 03:57:01 prd-ubuntu20-04-docker-8c-8g-4415 CRON[30678]: pam_unix(cron:session): session closed for user root Jun 26 03:58:01 prd-ubuntu20-04-docker-8c-8g-4415 CRON[30683]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 26 03:58:01 prd-ubuntu20-04-docker-8c-8g-4415 CRON[30683]: pam_unix(cron:session): session closed for user root Jun 26 03:58:51 prd-ubuntu20-04-docker-8c-8g-4415 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/foundry_app-record-replay_PR-143 ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins /w/workspace/foundry_app-record-replay_PR-143/archives Jun 26 03:58:51 prd-ubuntu20-04-docker-8c-8g-4415 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Jun 26 03:58:51 prd-ubuntu20-04-docker-8c-8g-4415 sudo: pam_unix(sudo:session): session closed for user root