Nov 14 03:37:08 prd-ubuntu20-04-docker-8c-8g-26418 passwd[755]: password for 'ubuntu' changed by 'root' Nov 14 03:37:08 prd-ubuntu20-04-docker-8c-8g-26418 systemd-logind[816]: New seat seat0. Nov 14 03:37:08 prd-ubuntu20-04-docker-8c-8g-26418 systemd-logind[816]: Watching system buttons on /dev/input/event0 (Power Button) Nov 14 03:37:08 prd-ubuntu20-04-docker-8c-8g-26418 systemd-logind[816]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Nov 14 03:37:08 prd-ubuntu20-04-docker-8c-8g-26418 sshd[853]: Server listening on 0.0.0.0 port 22. Nov 14 03:37:08 prd-ubuntu20-04-docker-8c-8g-26418 sshd[853]: Server listening on :: port 22. Nov 14 03:37:14 prd-ubuntu20-04-docker-8c-8g-26418 sshd[1032]: error: kex_exchange_identification: Connection closed by remote host Nov 14 03:37:15 prd-ubuntu20-04-docker-8c-8g-26418 sshd[1033]: Invalid user jenkins from 10.30.120.5 port 36972 Nov 14 03:37:15 prd-ubuntu20-04-docker-8c-8g-26418 sshd[1033]: Received disconnect from 10.30.120.5 port 36972:11: Closed due to user request. [preauth] Nov 14 03:37:15 prd-ubuntu20-04-docker-8c-8g-26418 sshd[1033]: Disconnected from invalid user jenkins 10.30.120.5 port 36972 [preauth] Nov 14 03:37:17 prd-ubuntu20-04-docker-8c-8g-26418 sshd[1035]: Invalid user jenkins from 10.30.120.5 port 36974 Nov 14 03:37:17 prd-ubuntu20-04-docker-8c-8g-26418 sshd[1035]: Received disconnect from 10.30.120.5 port 36974:11: Closed due to user request. [preauth] Nov 14 03:37:17 prd-ubuntu20-04-docker-8c-8g-26418 sshd[1035]: Disconnected from invalid user jenkins 10.30.120.5 port 36974 [preauth] Nov 14 03:37:19 prd-ubuntu20-04-docker-8c-8g-26418 sshd[1037]: Invalid user jenkins from 10.30.120.5 port 36976 Nov 14 03:37:20 prd-ubuntu20-04-docker-8c-8g-26418 sshd[1037]: Received disconnect from 10.30.120.5 port 36976:11: Closed due to user request. [preauth] Nov 14 03:37:20 prd-ubuntu20-04-docker-8c-8g-26418 sshd[1037]: Disconnected from invalid user jenkins 10.30.120.5 port 36976 [preauth] Nov 14 03:37:22 prd-ubuntu20-04-docker-8c-8g-26418 sshd[1039]: Invalid user jenkins from 10.30.120.5 port 36978 Nov 14 03:37:22 prd-ubuntu20-04-docker-8c-8g-26418 sshd[1039]: Received disconnect from 10.30.120.5 port 36978:11: Closed due to user request. [preauth] Nov 14 03:37:22 prd-ubuntu20-04-docker-8c-8g-26418 sshd[1039]: Disconnected from invalid user jenkins 10.30.120.5 port 36978 [preauth] Nov 14 03:37:24 prd-ubuntu20-04-docker-8c-8g-26418 sshd[1041]: Invalid user jenkins from 10.30.120.5 port 36980 Nov 14 03:37:24 prd-ubuntu20-04-docker-8c-8g-26418 sshd[1041]: Received disconnect from 10.30.120.5 port 36980:11: Closed due to user request. [preauth] Nov 14 03:37:24 prd-ubuntu20-04-docker-8c-8g-26418 sshd[1041]: Disconnected from invalid user jenkins 10.30.120.5 port 36980 [preauth] Nov 14 03:37:26 prd-ubuntu20-04-docker-8c-8g-26418 sshd[1043]: Invalid user jenkins from 10.30.120.5 port 36982 Nov 14 03:37:26 prd-ubuntu20-04-docker-8c-8g-26418 sshd[1043]: Received disconnect from 10.30.120.5 port 36982:11: Closed due to user request. [preauth] Nov 14 03:37:26 prd-ubuntu20-04-docker-8c-8g-26418 sshd[1043]: Disconnected from invalid user jenkins 10.30.120.5 port 36982 [preauth] Nov 14 03:37:28 prd-ubuntu20-04-docker-8c-8g-26418 sshd[1239]: Invalid user jenkins from 10.30.120.5 port 36984 Nov 14 03:37:28 prd-ubuntu20-04-docker-8c-8g-26418 sshd[1239]: Received disconnect from 10.30.120.5 port 36984:11: Closed due to user request. [preauth] Nov 14 03:37:28 prd-ubuntu20-04-docker-8c-8g-26418 sshd[1239]: Disconnected from invalid user jenkins 10.30.120.5 port 36984 [preauth] Nov 14 03:37:30 prd-ubuntu20-04-docker-8c-8g-26418 sshd[1259]: Invalid user jenkins from 10.30.120.5 port 36988 Nov 14 03:37:30 prd-ubuntu20-04-docker-8c-8g-26418 sshd[1259]: Received disconnect from 10.30.120.5 port 36988:11: Closed due to user request. [preauth] Nov 14 03:37:30 prd-ubuntu20-04-docker-8c-8g-26418 sshd[1259]: Disconnected from invalid user jenkins 10.30.120.5 port 36988 [preauth] Nov 14 03:37:32 prd-ubuntu20-04-docker-8c-8g-26418 sshd[1261]: Invalid user jenkins from 10.30.120.5 port 36996 Nov 14 03:37:32 prd-ubuntu20-04-docker-8c-8g-26418 sshd[1261]: Received disconnect from 10.30.120.5 port 36996:11: Closed due to user request. [preauth] Nov 14 03:37:32 prd-ubuntu20-04-docker-8c-8g-26418 sshd[1261]: Disconnected from invalid user jenkins 10.30.120.5 port 36996 [preauth] Nov 14 03:37:33 prd-ubuntu20-04-docker-8c-8g-26418 useradd[1282]: new group: name=jenkins, GID=1001 Nov 14 03:37:33 prd-ubuntu20-04-docker-8c-8g-26418 useradd[1282]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash, from=none Nov 14 03:37:33 prd-ubuntu20-04-docker-8c-8g-26418 usermod[1292]: add 'jenkins' to group 'docker' Nov 14 03:37:33 prd-ubuntu20-04-docker-8c-8g-26418 usermod[1292]: add 'jenkins' to shadow group 'docker' Nov 14 03:37:34 prd-ubuntu20-04-docker-8c-8g-26418 sshd[1329]: Accepted publickey for jenkins from 10.30.120.5 port 36998 ssh2: RSA SHA256:aPmPdMw/h9M56P/o8xjsZcdBWoRKGeie6FPOwnlsRmU Nov 14 03:37:34 prd-ubuntu20-04-docker-8c-8g-26418 sshd[1329]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Nov 14 03:37:34 prd-ubuntu20-04-docker-8c-8g-26418 systemd-logind[816]: New session 1 of user jenkins. Nov 14 03:37:34 prd-ubuntu20-04-docker-8c-8g-26418 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Nov 14 03:37:57 prd-ubuntu20-04-docker-8c-8g-26418 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/foundry_app-record-replay_PR-154 ; USER=root ; COMMAND=/usr/bin/mv /tmp/ssh_known_hosts /etc/ssh/ssh_known_hosts Nov 14 03:37:57 prd-ubuntu20-04-docker-8c-8g-26418 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Nov 14 03:37:57 prd-ubuntu20-04-docker-8c-8g-26418 sudo: pam_unix(sudo:session): session closed for user root Nov 14 03:37:57 prd-ubuntu20-04-docker-8c-8g-26418 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/foundry_app-record-replay_PR-154 ; USER=root ; COMMAND=/usr/bin/tee -a /etc/ssh/ssh_known_hosts Nov 14 03:37:57 prd-ubuntu20-04-docker-8c-8g-26418 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Nov 14 03:37:57 prd-ubuntu20-04-docker-8c-8g-26418 sudo: pam_unix(sudo:session): session closed for user root Nov 14 03:38:01 prd-ubuntu20-04-docker-8c-8g-26418 CRON[2131]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 14 03:38:01 prd-ubuntu20-04-docker-8c-8g-26418 CRON[2131]: pam_unix(cron:session): session closed for user root Nov 14 03:38:13 prd-ubuntu20-04-docker-8c-8g-26418 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/foundry_app-record-replay_PR-154 ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins .semver Nov 14 03:38:13 prd-ubuntu20-04-docker-8c-8g-26418 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Nov 14 03:38:13 prd-ubuntu20-04-docker-8c-8g-26418 sudo: pam_unix(sudo:session): session closed for user root Nov 14 03:39:01 prd-ubuntu20-04-docker-8c-8g-26418 CRON[3537]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 14 03:39:01 prd-ubuntu20-04-docker-8c-8g-26418 CRON[3537]: pam_unix(cron:session): session closed for user root Nov 14 03:40:01 prd-ubuntu20-04-docker-8c-8g-26418 CRON[13002]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 14 03:40:01 prd-ubuntu20-04-docker-8c-8g-26418 CRON[13002]: pam_unix(cron:session): session closed for user root Nov 14 03:40:59 prd-ubuntu20-04-docker-8c-8g-26418 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/foundry_app-record-replay_PR-154 ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins . Nov 14 03:40:59 prd-ubuntu20-04-docker-8c-8g-26418 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Nov 14 03:40:59 prd-ubuntu20-04-docker-8c-8g-26418 sudo: pam_unix(sudo:session): session closed for user root Nov 14 03:41:00 prd-ubuntu20-04-docker-8c-8g-26418 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/foundry_app-record-replay_PR-154 ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins . Nov 14 03:41:00 prd-ubuntu20-04-docker-8c-8g-26418 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Nov 14 03:41:00 prd-ubuntu20-04-docker-8c-8g-26418 sudo: pam_unix(sudo:session): session closed for user root Nov 14 03:41:01 prd-ubuntu20-04-docker-8c-8g-26418 CRON[23520]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 14 03:41:01 prd-ubuntu20-04-docker-8c-8g-26418 CRON[23520]: pam_unix(cron:session): session closed for user root Nov 14 03:42:01 prd-ubuntu20-04-docker-8c-8g-26418 CRON[29802]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 14 03:42:01 prd-ubuntu20-04-docker-8c-8g-26418 CRON[29802]: pam_unix(cron:session): session closed for user root Nov 14 03:42:15 prd-ubuntu20-04-docker-8c-8g-26418 systemd-logind[816]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Nov 14 03:42:16 prd-ubuntu20-04-docker-8c-8g-26418 systemd-logind[816]: Watching system buttons on /dev/input/event0 (Power Button) Nov 14 03:43:01 prd-ubuntu20-04-docker-8c-8g-26418 CRON[30887]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 14 03:43:01 prd-ubuntu20-04-docker-8c-8g-26418 CRON[30887]: pam_unix(cron:session): session closed for user root Nov 14 03:44:01 prd-ubuntu20-04-docker-8c-8g-26418 CRON[30938]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 14 03:44:01 prd-ubuntu20-04-docker-8c-8g-26418 CRON[30938]: pam_unix(cron:session): session closed for user root Nov 14 03:45:01 prd-ubuntu20-04-docker-8c-8g-26418 CRON[30941]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 14 03:45:01 prd-ubuntu20-04-docker-8c-8g-26418 CRON[30941]: pam_unix(cron:session): session closed for user root Nov 14 03:46:01 prd-ubuntu20-04-docker-8c-8g-26418 CRON[30945]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 14 03:46:01 prd-ubuntu20-04-docker-8c-8g-26418 CRON[30945]: pam_unix(cron:session): session closed for user root Nov 14 03:47:01 prd-ubuntu20-04-docker-8c-8g-26418 CRON[30950]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 14 03:47:01 prd-ubuntu20-04-docker-8c-8g-26418 CRON[30950]: pam_unix(cron:session): session closed for user root Nov 14 03:48:01 prd-ubuntu20-04-docker-8c-8g-26418 CRON[30956]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 14 03:48:01 prd-ubuntu20-04-docker-8c-8g-26418 CRON[30956]: pam_unix(cron:session): session closed for user root Nov 14 03:49:01 prd-ubuntu20-04-docker-8c-8g-26418 CRON[30959]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 14 03:49:01 prd-ubuntu20-04-docker-8c-8g-26418 CRON[30959]: pam_unix(cron:session): session closed for user root Nov 14 03:50:01 prd-ubuntu20-04-docker-8c-8g-26418 CRON[30963]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 14 03:50:01 prd-ubuntu20-04-docker-8c-8g-26418 CRON[30963]: pam_unix(cron:session): session closed for user root Nov 14 03:51:01 prd-ubuntu20-04-docker-8c-8g-26418 CRON[30966]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 14 03:51:01 prd-ubuntu20-04-docker-8c-8g-26418 CRON[30966]: pam_unix(cron:session): session closed for user root Nov 14 03:52:01 prd-ubuntu20-04-docker-8c-8g-26418 CRON[30970]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 14 03:52:01 prd-ubuntu20-04-docker-8c-8g-26418 CRON[30970]: pam_unix(cron:session): session closed for user root Nov 14 03:53:01 prd-ubuntu20-04-docker-8c-8g-26418 CRON[30994]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 14 03:53:01 prd-ubuntu20-04-docker-8c-8g-26418 CRON[30994]: pam_unix(cron:session): session closed for user root Nov 14 03:54:01 prd-ubuntu20-04-docker-8c-8g-26418 CRON[30998]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 14 03:54:01 prd-ubuntu20-04-docker-8c-8g-26418 CRON[30998]: pam_unix(cron:session): session closed for user root Nov 14 03:55:01 prd-ubuntu20-04-docker-8c-8g-26418 CRON[31001]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 14 03:55:01 prd-ubuntu20-04-docker-8c-8g-26418 CRON[31001]: pam_unix(cron:session): session closed for user root Nov 14 03:56:01 prd-ubuntu20-04-docker-8c-8g-26418 CRON[31006]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 14 03:56:01 prd-ubuntu20-04-docker-8c-8g-26418 CRON[31006]: pam_unix(cron:session): session closed for user root Nov 14 03:56:36 prd-ubuntu20-04-docker-8c-8g-26418 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/foundry_app-record-replay_PR-154 ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins /w/workspace/foundry_app-record-replay_PR-154/archives Nov 14 03:56:36 prd-ubuntu20-04-docker-8c-8g-26418 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Nov 14 03:56:36 prd-ubuntu20-04-docker-8c-8g-26418 sudo: pam_unix(sudo:session): session closed for user root