Aug 17 23:08:48 prd-ubuntu20-04-docker-8c-8g-3959 passwd[753]: password for 'ubuntu' changed by 'root' Aug 17 23:08:47 prd-ubuntu20-04-docker-8c-8g-3959 systemd-logind[815]: New seat seat0. Aug 17 23:08:48 prd-ubuntu20-04-docker-8c-8g-3959 systemd-logind[815]: Watching system buttons on /dev/input/event0 (Power Button) Aug 17 23:08:48 prd-ubuntu20-04-docker-8c-8g-3959 systemd-logind[815]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Aug 17 23:08:48 prd-ubuntu20-04-docker-8c-8g-3959 sshd[841]: Server listening on 0.0.0.0 port 22. Aug 17 23:08:48 prd-ubuntu20-04-docker-8c-8g-3959 sshd[841]: Server listening on :: port 22. Aug 17 23:08:48 prd-ubuntu20-04-docker-8c-8g-3959 sshd[930]: error: kex_exchange_identification: Connection closed by remote host Aug 17 23:08:54 prd-ubuntu20-04-docker-8c-8g-3959 sshd[1027]: Invalid user jenkins from 10.30.120.5 port 39358 Aug 17 23:08:54 prd-ubuntu20-04-docker-8c-8g-3959 sshd[1027]: Received disconnect from 10.30.120.5 port 39358:11: Closed due to user request. [preauth] Aug 17 23:08:54 prd-ubuntu20-04-docker-8c-8g-3959 sshd[1027]: Disconnected from invalid user jenkins 10.30.120.5 port 39358 [preauth] Aug 17 23:08:56 prd-ubuntu20-04-docker-8c-8g-3959 sshd[1029]: Invalid user jenkins from 10.30.120.5 port 39360 Aug 17 23:08:56 prd-ubuntu20-04-docker-8c-8g-3959 sshd[1029]: Received disconnect from 10.30.120.5 port 39360:11: Closed due to user request. [preauth] Aug 17 23:08:56 prd-ubuntu20-04-docker-8c-8g-3959 sshd[1029]: Disconnected from invalid user jenkins 10.30.120.5 port 39360 [preauth] Aug 17 23:08:58 prd-ubuntu20-04-docker-8c-8g-3959 sshd[1031]: Invalid user jenkins from 10.30.120.5 port 39362 Aug 17 23:08:58 prd-ubuntu20-04-docker-8c-8g-3959 sshd[1031]: Received disconnect from 10.30.120.5 port 39362:11: Closed due to user request. [preauth] Aug 17 23:08:58 prd-ubuntu20-04-docker-8c-8g-3959 sshd[1031]: Disconnected from invalid user jenkins 10.30.120.5 port 39362 [preauth] Aug 17 23:09:00 prd-ubuntu20-04-docker-8c-8g-3959 sshd[1033]: Invalid user jenkins from 10.30.120.5 port 39364 Aug 17 23:09:00 prd-ubuntu20-04-docker-8c-8g-3959 sshd[1033]: Received disconnect from 10.30.120.5 port 39364:11: Closed due to user request. [preauth] Aug 17 23:09:00 prd-ubuntu20-04-docker-8c-8g-3959 sshd[1033]: Disconnected from invalid user jenkins 10.30.120.5 port 39364 [preauth] Aug 17 23:09:01 prd-ubuntu20-04-docker-8c-8g-3959 CRON[1035]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 17 23:09:01 prd-ubuntu20-04-docker-8c-8g-3959 CRON[1035]: pam_unix(cron:session): session closed for user root Aug 17 23:09:02 prd-ubuntu20-04-docker-8c-8g-3959 sshd[1044]: Invalid user jenkins from 10.30.120.5 port 39368 Aug 17 23:09:02 prd-ubuntu20-04-docker-8c-8g-3959 sshd[1044]: Received disconnect from 10.30.120.5 port 39368:11: Closed due to user request. [preauth] Aug 17 23:09:02 prd-ubuntu20-04-docker-8c-8g-3959 sshd[1044]: Disconnected from invalid user jenkins 10.30.120.5 port 39368 [preauth] Aug 17 23:09:04 prd-ubuntu20-04-docker-8c-8g-3959 sshd[1046]: Invalid user jenkins from 10.30.120.5 port 39370 Aug 17 23:09:05 prd-ubuntu20-04-docker-8c-8g-3959 sshd[1046]: Received disconnect from 10.30.120.5 port 39370:11: Closed due to user request. [preauth] Aug 17 23:09:05 prd-ubuntu20-04-docker-8c-8g-3959 sshd[1046]: Disconnected from invalid user jenkins 10.30.120.5 port 39370 [preauth] Aug 17 23:09:07 prd-ubuntu20-04-docker-8c-8g-3959 sshd[1239]: Invalid user jenkins from 10.30.120.5 port 39374 Aug 17 23:09:07 prd-ubuntu20-04-docker-8c-8g-3959 sshd[1239]: Received disconnect from 10.30.120.5 port 39374:11: Closed due to user request. [preauth] Aug 17 23:09:07 prd-ubuntu20-04-docker-8c-8g-3959 sshd[1239]: Disconnected from invalid user jenkins 10.30.120.5 port 39374 [preauth] Aug 17 23:09:09 prd-ubuntu20-04-docker-8c-8g-3959 sshd[1257]: Invalid user jenkins from 10.30.120.5 port 39376 Aug 17 23:09:10 prd-ubuntu20-04-docker-8c-8g-3959 sshd[1257]: Received disconnect from 10.30.120.5 port 39376:11: Closed due to user request. [preauth] Aug 17 23:09:10 prd-ubuntu20-04-docker-8c-8g-3959 sshd[1257]: Disconnected from invalid user jenkins 10.30.120.5 port 39376 [preauth] Aug 17 23:09:12 prd-ubuntu20-04-docker-8c-8g-3959 sshd[1274]: Invalid user jenkins from 10.30.120.5 port 39378 Aug 17 23:09:12 prd-ubuntu20-04-docker-8c-8g-3959 sshd[1274]: Received disconnect from 10.30.120.5 port 39378:11: Closed due to user request. [preauth] Aug 17 23:09:12 prd-ubuntu20-04-docker-8c-8g-3959 sshd[1274]: Disconnected from invalid user jenkins 10.30.120.5 port 39378 [preauth] Aug 17 23:09:14 prd-ubuntu20-04-docker-8c-8g-3959 sshd[1276]: Invalid user jenkins from 10.30.120.5 port 39380 Aug 17 23:09:14 prd-ubuntu20-04-docker-8c-8g-3959 sshd[1276]: Received disconnect from 10.30.120.5 port 39380:11: Closed due to user request. [preauth] Aug 17 23:09:14 prd-ubuntu20-04-docker-8c-8g-3959 sshd[1276]: Disconnected from invalid user jenkins 10.30.120.5 port 39380 [preauth] Aug 17 23:09:16 prd-ubuntu20-04-docker-8c-8g-3959 sshd[1278]: Invalid user jenkins from 10.30.120.5 port 39382 Aug 17 23:09:16 prd-ubuntu20-04-docker-8c-8g-3959 sshd[1278]: Received disconnect from 10.30.120.5 port 39382:11: Closed due to user request. [preauth] Aug 17 23:09:16 prd-ubuntu20-04-docker-8c-8g-3959 sshd[1278]: Disconnected from invalid user jenkins 10.30.120.5 port 39382 [preauth] Aug 17 23:09:17 prd-ubuntu20-04-docker-8c-8g-3959 useradd[1299]: new group: name=jenkins, GID=1001 Aug 17 23:09:17 prd-ubuntu20-04-docker-8c-8g-3959 useradd[1299]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash, from=none Aug 17 23:09:17 prd-ubuntu20-04-docker-8c-8g-3959 usermod[1309]: add 'jenkins' to group 'docker' Aug 17 23:09:17 prd-ubuntu20-04-docker-8c-8g-3959 usermod[1309]: add 'jenkins' to shadow group 'docker' Aug 17 23:09:18 prd-ubuntu20-04-docker-8c-8g-3959 sshd[1336]: Received disconnect from 10.30.120.5 port 39384:11: Closed due to user request. [preauth] Aug 17 23:09:18 prd-ubuntu20-04-docker-8c-8g-3959 sshd[1336]: Disconnected from authenticating user jenkins 10.30.120.5 port 39384 [preauth] Aug 17 23:09:20 prd-ubuntu20-04-docker-8c-8g-3959 sshd[1366]: Accepted publickey for jenkins from 10.30.120.5 port 39392 ssh2: RSA SHA256:aPmPdMw/h9M56P/o8xjsZcdBWoRKGeie6FPOwnlsRmU Aug 17 23:09:20 prd-ubuntu20-04-docker-8c-8g-3959 sshd[1366]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Aug 17 23:09:20 prd-ubuntu20-04-docker-8c-8g-3959 systemd-logind[815]: New session 2 of user jenkins. Aug 17 23:09:20 prd-ubuntu20-04-docker-8c-8g-3959 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Aug 17 23:09:36 prd-ubuntu20-04-docker-8c-8g-3959 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/xfoundry_app-record-replay_PR-56 ; USER=root ; COMMAND=/usr/bin/mv /tmp/ssh_known_hosts /etc/ssh/ssh_known_hosts Aug 17 23:09:36 prd-ubuntu20-04-docker-8c-8g-3959 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Aug 17 23:09:36 prd-ubuntu20-04-docker-8c-8g-3959 sudo: pam_unix(sudo:session): session closed for user root Aug 17 23:09:36 prd-ubuntu20-04-docker-8c-8g-3959 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/xfoundry_app-record-replay_PR-56 ; USER=root ; COMMAND=/usr/bin/tee -a /etc/ssh/ssh_known_hosts Aug 17 23:09:36 prd-ubuntu20-04-docker-8c-8g-3959 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Aug 17 23:09:36 prd-ubuntu20-04-docker-8c-8g-3959 sudo: pam_unix(sudo:session): session closed for user root Aug 17 23:09:51 prd-ubuntu20-04-docker-8c-8g-3959 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/xfoundry_app-record-replay_PR-56 ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins .semver Aug 17 23:09:51 prd-ubuntu20-04-docker-8c-8g-3959 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Aug 17 23:09:51 prd-ubuntu20-04-docker-8c-8g-3959 sudo: pam_unix(sudo:session): session closed for user root Aug 17 23:10:01 prd-ubuntu20-04-docker-8c-8g-3959 CRON[3161]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 17 23:10:01 prd-ubuntu20-04-docker-8c-8g-3959 CRON[3161]: pam_unix(cron:session): session closed for user root Aug 17 23:11:01 prd-ubuntu20-04-docker-8c-8g-3959 CRON[4141]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 17 23:11:01 prd-ubuntu20-04-docker-8c-8g-3959 CRON[4141]: pam_unix(cron:session): session closed for user root Aug 17 23:12:01 prd-ubuntu20-04-docker-8c-8g-3959 CRON[16516]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 17 23:12:01 prd-ubuntu20-04-docker-8c-8g-3959 CRON[16516]: pam_unix(cron:session): session closed for user root Aug 17 23:12:05 prd-ubuntu20-04-docker-8c-8g-3959 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/xfoundry_app-record-replay_PR-56 ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins . Aug 17 23:12:05 prd-ubuntu20-04-docker-8c-8g-3959 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Aug 17 23:12:05 prd-ubuntu20-04-docker-8c-8g-3959 sudo: pam_unix(sudo:session): session closed for user root Aug 17 23:12:06 prd-ubuntu20-04-docker-8c-8g-3959 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/xfoundry_app-record-replay_PR-56 ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins . Aug 17 23:12:06 prd-ubuntu20-04-docker-8c-8g-3959 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Aug 17 23:12:06 prd-ubuntu20-04-docker-8c-8g-3959 sudo: pam_unix(sudo:session): session closed for user root Aug 17 23:13:01 prd-ubuntu20-04-docker-8c-8g-3959 CRON[20874]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 17 23:13:01 prd-ubuntu20-04-docker-8c-8g-3959 CRON[20874]: pam_unix(cron:session): session closed for user root Aug 17 23:13:57 prd-ubuntu20-04-docker-8c-8g-3959 systemd-logind[815]: Watching system buttons on /dev/input/event0 (Power Button) Aug 17 23:13:57 prd-ubuntu20-04-docker-8c-8g-3959 systemd-logind[815]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Aug 17 23:14:01 prd-ubuntu20-04-docker-8c-8g-3959 CRON[21410]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 17 23:14:01 prd-ubuntu20-04-docker-8c-8g-3959 CRON[21410]: pam_unix(cron:session): session closed for user root Aug 17 23:15:01 prd-ubuntu20-04-docker-8c-8g-3959 CRON[21966]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 17 23:15:01 prd-ubuntu20-04-docker-8c-8g-3959 CRON[21966]: pam_unix(cron:session): session closed for user root Aug 17 23:16:01 prd-ubuntu20-04-docker-8c-8g-3959 CRON[22014]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 17 23:16:01 prd-ubuntu20-04-docker-8c-8g-3959 CRON[22014]: pam_unix(cron:session): session closed for user root Aug 17 23:17:01 prd-ubuntu20-04-docker-8c-8g-3959 CRON[22019]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 17 23:17:01 prd-ubuntu20-04-docker-8c-8g-3959 CRON[22018]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 17 23:17:01 prd-ubuntu20-04-docker-8c-8g-3959 CRON[22018]: pam_unix(cron:session): session closed for user root Aug 17 23:17:01 prd-ubuntu20-04-docker-8c-8g-3959 CRON[22019]: pam_unix(cron:session): session closed for user root Aug 17 23:18:01 prd-ubuntu20-04-docker-8c-8g-3959 CRON[22024]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 17 23:18:01 prd-ubuntu20-04-docker-8c-8g-3959 CRON[22024]: pam_unix(cron:session): session closed for user root Aug 17 23:19:01 prd-ubuntu20-04-docker-8c-8g-3959 CRON[22054]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 17 23:19:02 prd-ubuntu20-04-docker-8c-8g-3959 CRON[22054]: pam_unix(cron:session): session closed for user root Aug 17 23:20:01 prd-ubuntu20-04-docker-8c-8g-3959 CRON[22058]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 17 23:20:01 prd-ubuntu20-04-docker-8c-8g-3959 CRON[22058]: pam_unix(cron:session): session closed for user root Aug 17 23:21:01 prd-ubuntu20-04-docker-8c-8g-3959 CRON[22062]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 17 23:21:01 prd-ubuntu20-04-docker-8c-8g-3959 CRON[22062]: pam_unix(cron:session): session closed for user root Aug 17 23:22:01 prd-ubuntu20-04-docker-8c-8g-3959 CRON[22065]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 17 23:22:01 prd-ubuntu20-04-docker-8c-8g-3959 CRON[22065]: pam_unix(cron:session): session closed for user root Aug 17 23:22:16 prd-ubuntu20-04-docker-8c-8g-3959 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/xfoundry_app-record-replay_PR-56 ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins /w/workspace/xfoundry_app-record-replay_PR-56/archives Aug 17 23:22:16 prd-ubuntu20-04-docker-8c-8g-3959 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Aug 17 23:22:16 prd-ubuntu20-04-docker-8c-8g-3959 sudo: pam_unix(sudo:session): session closed for user root