Mar 10 03:56:23 prd-ubuntu20-04-docker-8c-8g-40709 passwd[754]: password for 'ubuntu' changed by 'root'
Mar 10 03:56:23 prd-ubuntu20-04-docker-8c-8g-40709 sshd[858]: Server listening on 0.0.0.0 port 22.
Mar 10 03:56:23 prd-ubuntu20-04-docker-8c-8g-40709 sshd[858]: Server listening on :: port 22.
Mar 10 03:56:23 prd-ubuntu20-04-docker-8c-8g-40709 systemd-logind[818]: New seat seat0.
Mar 10 03:56:23 prd-ubuntu20-04-docker-8c-8g-40709 systemd-logind[818]: Watching system buttons on /dev/input/event0 (Power Button)
Mar 10 03:56:23 prd-ubuntu20-04-docker-8c-8g-40709 systemd-logind[818]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard)
Mar 10 03:56:26 prd-ubuntu20-04-docker-8c-8g-40709 sshd[1024]: error: kex_exchange_identification: Connection closed by remote host
Mar 10 03:56:34 prd-ubuntu20-04-docker-8c-8g-40709 sshd[1033]: Invalid user jenkins from 10.30.120.5 port 57350
Mar 10 03:56:35 prd-ubuntu20-04-docker-8c-8g-40709 sshd[1033]: Received disconnect from 10.30.120.5 port 57350:11: Closed due to user request. [preauth]
Mar 10 03:56:35 prd-ubuntu20-04-docker-8c-8g-40709 sshd[1033]: Disconnected from invalid user jenkins 10.30.120.5 port 57350 [preauth]
Mar 10 03:56:37 prd-ubuntu20-04-docker-8c-8g-40709 sshd[1037]: Invalid user jenkins from 10.30.120.5 port 57354
Mar 10 03:56:37 prd-ubuntu20-04-docker-8c-8g-40709 sshd[1037]: Received disconnect from 10.30.120.5 port 57354:11: Closed due to user request. [preauth]
Mar 10 03:56:37 prd-ubuntu20-04-docker-8c-8g-40709 sshd[1037]: Disconnected from invalid user jenkins 10.30.120.5 port 57354 [preauth]
Mar 10 03:56:39 prd-ubuntu20-04-docker-8c-8g-40709 sshd[1039]: Invalid user jenkins from 10.30.120.5 port 57356
Mar 10 03:56:39 prd-ubuntu20-04-docker-8c-8g-40709 sshd[1039]: Received disconnect from 10.30.120.5 port 57356:11: Closed due to user request. [preauth]
Mar 10 03:56:39 prd-ubuntu20-04-docker-8c-8g-40709 sshd[1039]: Disconnected from invalid user jenkins 10.30.120.5 port 57356 [preauth]
Mar 10 03:56:41 prd-ubuntu20-04-docker-8c-8g-40709 sshd[1199]: Invalid user jenkins from 10.30.120.5 port 57358
Mar 10 03:56:41 prd-ubuntu20-04-docker-8c-8g-40709 sshd[1199]: Received disconnect from 10.30.120.5 port 57358:11: Closed due to user request. [preauth]
Mar 10 03:56:41 prd-ubuntu20-04-docker-8c-8g-40709 sshd[1199]: Disconnected from invalid user jenkins 10.30.120.5 port 57358 [preauth]
Mar 10 03:56:43 prd-ubuntu20-04-docker-8c-8g-40709 sshd[1250]: Invalid user jenkins from 10.30.120.5 port 57360
Mar 10 03:56:43 prd-ubuntu20-04-docker-8c-8g-40709 sshd[1250]: Received disconnect from 10.30.120.5 port 57360:11: Closed due to user request. [preauth]
Mar 10 03:56:43 prd-ubuntu20-04-docker-8c-8g-40709 sshd[1250]: Disconnected from invalid user jenkins 10.30.120.5 port 57360 [preauth]
Mar 10 03:56:45 prd-ubuntu20-04-docker-8c-8g-40709 sshd[1266]: Invalid user jenkins from 10.30.120.5 port 57368
Mar 10 03:56:45 prd-ubuntu20-04-docker-8c-8g-40709 sshd[1266]: Received disconnect from 10.30.120.5 port 57368:11: Closed due to user request. [preauth]
Mar 10 03:56:45 prd-ubuntu20-04-docker-8c-8g-40709 sshd[1266]: Disconnected from invalid user jenkins 10.30.120.5 port 57368 [preauth]
Mar 10 03:56:46 prd-ubuntu20-04-docker-8c-8g-40709 useradd[1275]: new group: name=jenkins, GID=1001
Mar 10 03:56:46 prd-ubuntu20-04-docker-8c-8g-40709 useradd[1275]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash, from=none
Mar 10 03:56:46 prd-ubuntu20-04-docker-8c-8g-40709 usermod[1285]: add 'jenkins' to group 'docker'
Mar 10 03:56:46 prd-ubuntu20-04-docker-8c-8g-40709 usermod[1285]: add 'jenkins' to shadow group 'docker'
Mar 10 03:56:47 prd-ubuntu20-04-docker-8c-8g-40709 sshd[1331]: Accepted publickey for jenkins from 10.30.120.5 port 57370 ssh2: RSA SHA256:aPmPdMw/h9M56P/o8xjsZcdBWoRKGeie6FPOwnlsRmU
Mar 10 03:56:47 prd-ubuntu20-04-docker-8c-8g-40709 sshd[1331]: pam_unix(sshd:session): session opened for user jenkins by (uid=0)
Mar 10 03:56:48 prd-ubuntu20-04-docker-8c-8g-40709 systemd-logind[818]: New session 1 of user jenkins.
Mar 10 03:56:48 prd-ubuntu20-04-docker-8c-8g-40709 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0)
Mar 10 03:57:01 prd-ubuntu20-04-docker-8c-8g-40709 CRON[1666]: pam_unix(cron:session): session opened for user root by (uid=0)
Mar 10 03:57:01 prd-ubuntu20-04-docker-8c-8g-40709 CRON[1666]: pam_unix(cron:session): session closed for user root
Mar 10 03:57:10 prd-ubuntu20-04-docker-8c-8g-40709 sudo:  jenkins : TTY=unknown ; PWD=/w/workspace/foundry_app-record-replay_PR-178 ; USER=root ; COMMAND=/usr/bin/mv /tmp/ssh_known_hosts /etc/ssh/ssh_known_hosts
Mar 10 03:57:10 prd-ubuntu20-04-docker-8c-8g-40709 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Mar 10 03:57:10 prd-ubuntu20-04-docker-8c-8g-40709 sudo: pam_unix(sudo:session): session closed for user root
Mar 10 03:57:10 prd-ubuntu20-04-docker-8c-8g-40709 sudo:  jenkins : TTY=unknown ; PWD=/w/workspace/foundry_app-record-replay_PR-178 ; USER=root ; COMMAND=/usr/bin/tee -a /etc/ssh/ssh_known_hosts
Mar 10 03:57:10 prd-ubuntu20-04-docker-8c-8g-40709 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Mar 10 03:57:10 prd-ubuntu20-04-docker-8c-8g-40709 sudo: pam_unix(sudo:session): session closed for user root
Mar 10 03:57:23 prd-ubuntu20-04-docker-8c-8g-40709 sudo:  jenkins : TTY=unknown ; PWD=/w/workspace/foundry_app-record-replay_PR-178 ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins .semver
Mar 10 03:57:23 prd-ubuntu20-04-docker-8c-8g-40709 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Mar 10 03:57:23 prd-ubuntu20-04-docker-8c-8g-40709 sudo: pam_unix(sudo:session): session closed for user root
Mar 10 03:58:01 prd-ubuntu20-04-docker-8c-8g-40709 CRON[3534]: pam_unix(cron:session): session opened for user root by (uid=0)
Mar 10 03:58:01 prd-ubuntu20-04-docker-8c-8g-40709 CRON[3534]: pam_unix(cron:session): session closed for user root
Mar 10 03:59:01 prd-ubuntu20-04-docker-8c-8g-40709 CRON[13711]: pam_unix(cron:session): session opened for user root by (uid=0)
Mar 10 03:59:01 prd-ubuntu20-04-docker-8c-8g-40709 CRON[13711]: pam_unix(cron:session): session closed for user root
Mar 10 03:59:51 prd-ubuntu20-04-docker-8c-8g-40709 sudo:  jenkins : TTY=unknown ; PWD=/w/workspace/foundry_app-record-replay_PR-178 ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins .
Mar 10 03:59:51 prd-ubuntu20-04-docker-8c-8g-40709 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Mar 10 03:59:51 prd-ubuntu20-04-docker-8c-8g-40709 sudo: pam_unix(sudo:session): session closed for user root
Mar 10 03:59:51 prd-ubuntu20-04-docker-8c-8g-40709 sudo:  jenkins : TTY=unknown ; PWD=/w/workspace/foundry_app-record-replay_PR-178 ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins .
Mar 10 03:59:51 prd-ubuntu20-04-docker-8c-8g-40709 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Mar 10 03:59:51 prd-ubuntu20-04-docker-8c-8g-40709 sudo: pam_unix(sudo:session): session closed for user root
Mar 10 04:00:01 prd-ubuntu20-04-docker-8c-8g-40709 CRON[25492]: pam_unix(cron:session): session opened for user root by (uid=0)
Mar 10 04:00:01 prd-ubuntu20-04-docker-8c-8g-40709 CRON[25492]: pam_unix(cron:session): session closed for user root
Mar 10 04:00:48 prd-ubuntu20-04-docker-8c-8g-40709 sudo:  jenkins : TTY=unknown ; PWD=/w/workspace/foundry_app-record-replay_PR-178 ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins /w/workspace/foundry_app-record-replay_PR-178/archives
Mar 10 04:00:48 prd-ubuntu20-04-docker-8c-8g-40709 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Mar 10 04:00:48 prd-ubuntu20-04-docker-8c-8g-40709 sudo: pam_unix(sudo:session): session closed for user root