May 27 09:35:12 prd-ubuntu20-04-docker-8c-8g-840 passwd[754]: password for 'ubuntu' changed by 'root'
May 27 09:35:12 prd-ubuntu20-04-docker-8c-8g-840 systemd-logind[807]: New seat seat0.
May 27 09:35:12 prd-ubuntu20-04-docker-8c-8g-840 systemd-logind[807]: Watching system buttons on /dev/input/event0 (Power Button)
May 27 09:35:12 prd-ubuntu20-04-docker-8c-8g-840 systemd-logind[807]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard)
May 27 09:35:12 prd-ubuntu20-04-docker-8c-8g-840 sshd[840]: Server listening on 0.0.0.0 port 22.
May 27 09:35:12 prd-ubuntu20-04-docker-8c-8g-840 sshd[840]: Server listening on :: port 22.
May 27 09:35:13 prd-ubuntu20-04-docker-8c-8g-840 sshd[994]: error: kex_exchange_identification: Connection closed by remote host
May 27 09:35:14 prd-ubuntu20-04-docker-8c-8g-840 sshd[1004]: Invalid user jenkins from 10.30.120.5 port 40444
May 27 09:35:14 prd-ubuntu20-04-docker-8c-8g-840 sshd[1004]: Received disconnect from 10.30.120.5 port 40444:11: Closed due to user request. [preauth]
May 27 09:35:14 prd-ubuntu20-04-docker-8c-8g-840 sshd[1004]: Disconnected from invalid user jenkins 10.30.120.5 port 40444 [preauth]
May 27 09:35:18 prd-ubuntu20-04-docker-8c-8g-840 sshd[1007]: Invalid user jenkins from 10.30.120.5 port 40446
May 27 09:35:18 prd-ubuntu20-04-docker-8c-8g-840 sshd[1007]: Received disconnect from 10.30.120.5 port 40446:11: Closed due to user request. [preauth]
May 27 09:35:18 prd-ubuntu20-04-docker-8c-8g-840 sshd[1007]: Disconnected from invalid user jenkins 10.30.120.5 port 40446 [preauth]
May 27 09:35:18 prd-ubuntu20-04-docker-8c-8g-840 sshd[1011]: Invalid user jenkins from 10.30.120.5 port 40450
May 27 09:35:18 prd-ubuntu20-04-docker-8c-8g-840 sshd[1011]: Received disconnect from 10.30.120.5 port 40450:11: Closed due to user request. [preauth]
May 27 09:35:18 prd-ubuntu20-04-docker-8c-8g-840 sshd[1011]: Disconnected from invalid user jenkins 10.30.120.5 port 40450 [preauth]
May 27 09:35:20 prd-ubuntu20-04-docker-8c-8g-840 sshd[1024]: Invalid user jenkins from 10.30.120.5 port 40452
May 27 09:35:20 prd-ubuntu20-04-docker-8c-8g-840 sshd[1024]: Received disconnect from 10.30.120.5 port 40452:11: Closed due to user request. [preauth]
May 27 09:35:20 prd-ubuntu20-04-docker-8c-8g-840 sshd[1024]: Disconnected from invalid user jenkins 10.30.120.5 port 40452 [preauth]
May 27 09:35:22 prd-ubuntu20-04-docker-8c-8g-840 sshd[1026]: Invalid user jenkins from 10.30.120.5 port 40454
May 27 09:35:22 prd-ubuntu20-04-docker-8c-8g-840 sshd[1026]: Received disconnect from 10.30.120.5 port 40454:11: Closed due to user request. [preauth]
May 27 09:35:22 prd-ubuntu20-04-docker-8c-8g-840 sshd[1026]: Disconnected from invalid user jenkins 10.30.120.5 port 40454 [preauth]
May 27 09:35:25 prd-ubuntu20-04-docker-8c-8g-840 sshd[1028]: Invalid user jenkins from 10.30.120.5 port 40456
May 27 09:35:25 prd-ubuntu20-04-docker-8c-8g-840 sshd[1028]: Received disconnect from 10.30.120.5 port 40456:11: Closed due to user request. [preauth]
May 27 09:35:25 prd-ubuntu20-04-docker-8c-8g-840 sshd[1028]: Disconnected from invalid user jenkins 10.30.120.5 port 40456 [preauth]
May 27 09:35:27 prd-ubuntu20-04-docker-8c-8g-840 sshd[1045]: Invalid user jenkins from 10.30.120.5 port 40458
May 27 09:35:27 prd-ubuntu20-04-docker-8c-8g-840 sshd[1045]: Received disconnect from 10.30.120.5 port 40458:11: Closed due to user request. [preauth]
May 27 09:35:27 prd-ubuntu20-04-docker-8c-8g-840 sshd[1045]: Disconnected from invalid user jenkins 10.30.120.5 port 40458 [preauth]
May 27 09:35:29 prd-ubuntu20-04-docker-8c-8g-840 sshd[1051]: Invalid user jenkins from 10.30.120.5 port 40460
May 27 09:35:29 prd-ubuntu20-04-docker-8c-8g-840 sshd[1051]: Received disconnect from 10.30.120.5 port 40460:11: Closed due to user request. [preauth]
May 27 09:35:29 prd-ubuntu20-04-docker-8c-8g-840 sshd[1051]: Disconnected from invalid user jenkins 10.30.120.5 port 40460 [preauth]
May 27 09:35:31 prd-ubuntu20-04-docker-8c-8g-840 sshd[1054]: Invalid user jenkins from 10.30.120.5 port 40462
May 27 09:35:31 prd-ubuntu20-04-docker-8c-8g-840 sshd[1054]: Received disconnect from 10.30.120.5 port 40462:11: Closed due to user request. [preauth]
May 27 09:35:31 prd-ubuntu20-04-docker-8c-8g-840 sshd[1054]: Disconnected from invalid user jenkins 10.30.120.5 port 40462 [preauth]
May 27 09:35:33 prd-ubuntu20-04-docker-8c-8g-840 sshd[1056]: Invalid user jenkins from 10.30.120.5 port 40466
May 27 09:35:33 prd-ubuntu20-04-docker-8c-8g-840 sshd[1056]: Received disconnect from 10.30.120.5 port 40466:11: Closed due to user request. [preauth]
May 27 09:35:33 prd-ubuntu20-04-docker-8c-8g-840 sshd[1056]: Disconnected from invalid user jenkins 10.30.120.5 port 40466 [preauth]
May 27 09:35:35 prd-ubuntu20-04-docker-8c-8g-840 sshd[1068]: Invalid user jenkins from 10.30.120.5 port 40468
May 27 09:35:35 prd-ubuntu20-04-docker-8c-8g-840 sshd[1068]: Received disconnect from 10.30.120.5 port 40468:11: Closed due to user request. [preauth]
May 27 09:35:35 prd-ubuntu20-04-docker-8c-8g-840 sshd[1068]: Disconnected from invalid user jenkins 10.30.120.5 port 40468 [preauth]
May 27 09:35:37 prd-ubuntu20-04-docker-8c-8g-840 sshd[1070]: Invalid user jenkins from 10.30.120.5 port 40470
May 27 09:35:37 prd-ubuntu20-04-docker-8c-8g-840 sshd[1070]: Received disconnect from 10.30.120.5 port 40470:11: Closed due to user request. [preauth]
May 27 09:35:37 prd-ubuntu20-04-docker-8c-8g-840 sshd[1070]: Disconnected from invalid user jenkins 10.30.120.5 port 40470 [preauth]
May 27 09:35:39 prd-ubuntu20-04-docker-8c-8g-840 sshd[1072]: Invalid user jenkins from 10.30.120.5 port 40478
May 27 09:35:40 prd-ubuntu20-04-docker-8c-8g-840 sshd[1072]: Received disconnect from 10.30.120.5 port 40478:11: Closed due to user request. [preauth]
May 27 09:35:40 prd-ubuntu20-04-docker-8c-8g-840 sshd[1072]: Disconnected from invalid user jenkins 10.30.120.5 port 40478 [preauth]
May 27 09:35:42 prd-ubuntu20-04-docker-8c-8g-840 sshd[1075]: Invalid user jenkins from 10.30.120.5 port 40480
May 27 09:35:42 prd-ubuntu20-04-docker-8c-8g-840 sshd[1075]: Received disconnect from 10.30.120.5 port 40480:11: Closed due to user request. [preauth]
May 27 09:35:42 prd-ubuntu20-04-docker-8c-8g-840 sshd[1075]: Disconnected from invalid user jenkins 10.30.120.5 port 40480 [preauth]
May 27 09:35:45 prd-ubuntu20-04-docker-8c-8g-840 sshd[1240]: Invalid user jenkins from 10.30.120.5 port 40482
May 27 09:35:45 prd-ubuntu20-04-docker-8c-8g-840 sshd[1240]: Received disconnect from 10.30.120.5 port 40482:11: Closed due to user request. [preauth]
May 27 09:35:45 prd-ubuntu20-04-docker-8c-8g-840 sshd[1240]: Disconnected from invalid user jenkins 10.30.120.5 port 40482 [preauth]
May 27 09:35:47 prd-ubuntu20-04-docker-8c-8g-840 sshd[1289]: Invalid user jenkins from 10.30.120.5 port 40484
May 27 09:35:47 prd-ubuntu20-04-docker-8c-8g-840 sshd[1289]: Received disconnect from 10.30.120.5 port 40484:11: Closed due to user request. [preauth]
May 27 09:35:47 prd-ubuntu20-04-docker-8c-8g-840 sshd[1289]: Disconnected from invalid user jenkins 10.30.120.5 port 40484 [preauth]
May 27 09:35:49 prd-ubuntu20-04-docker-8c-8g-840 sshd[1293]: Invalid user jenkins from 10.30.120.5 port 40488
May 27 09:35:49 prd-ubuntu20-04-docker-8c-8g-840 sshd[1293]: Received disconnect from 10.30.120.5 port 40488:11: Closed due to user request. [preauth]
May 27 09:35:49 prd-ubuntu20-04-docker-8c-8g-840 sshd[1293]: Disconnected from invalid user jenkins 10.30.120.5 port 40488 [preauth]
May 27 09:35:50 prd-ubuntu20-04-docker-8c-8g-840 useradd[1317]: new group: name=jenkins, GID=1001
May 27 09:35:50 prd-ubuntu20-04-docker-8c-8g-840 useradd[1317]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash, from=none
May 27 09:35:50 prd-ubuntu20-04-docker-8c-8g-840 usermod[1335]: add 'jenkins' to group 'docker'
May 27 09:35:50 prd-ubuntu20-04-docker-8c-8g-840 usermod[1335]: add 'jenkins' to shadow group 'docker'
May 27 09:35:51 prd-ubuntu20-04-docker-8c-8g-840 sshd[1372]: Accepted publickey for jenkins from 10.30.120.5 port 40490 ssh2: RSA SHA256:aPmPdMw/h9M56P/o8xjsZcdBWoRKGeie6FPOwnlsRmU
May 27 09:35:51 prd-ubuntu20-04-docker-8c-8g-840 sshd[1372]: pam_unix(sshd:session): session opened for user jenkins by (uid=0)
May 27 09:35:51 prd-ubuntu20-04-docker-8c-8g-840 systemd-logind[807]: New session 1 of user jenkins.
May 27 09:35:51 prd-ubuntu20-04-docker-8c-8g-840 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0)
May 27 09:36:02 prd-ubuntu20-04-docker-8c-8g-840 CRON[1615]: pam_unix(cron:session): session opened for user root by (uid=0)
May 27 09:36:02 prd-ubuntu20-04-docker-8c-8g-840 CRON[1615]: pam_unix(cron:session): session closed for user root
May 27 09:36:11 prd-ubuntu20-04-docker-8c-8g-840 sudo:  jenkins : TTY=unknown ; PWD=/w/workspace/exfoundry_app-record-replay_napa ; USER=root ; COMMAND=/usr/bin/mv /tmp/ssh_known_hosts /etc/ssh/ssh_known_hosts
May 27 09:36:11 prd-ubuntu20-04-docker-8c-8g-840 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
May 27 09:36:11 prd-ubuntu20-04-docker-8c-8g-840 sudo: pam_unix(sudo:session): session closed for user root
May 27 09:36:11 prd-ubuntu20-04-docker-8c-8g-840 sudo:  jenkins : TTY=unknown ; PWD=/w/workspace/exfoundry_app-record-replay_napa ; USER=root ; COMMAND=/usr/bin/tee -a /etc/ssh/ssh_known_hosts
May 27 09:36:11 prd-ubuntu20-04-docker-8c-8g-840 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
May 27 09:36:11 prd-ubuntu20-04-docker-8c-8g-840 sudo: pam_unix(sudo:session): session closed for user root
May 27 09:36:26 prd-ubuntu20-04-docker-8c-8g-840 sudo:  jenkins : TTY=unknown ; PWD=/w/workspace/exfoundry_app-record-replay_napa ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins .semver
May 27 09:36:26 prd-ubuntu20-04-docker-8c-8g-840 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
May 27 09:36:26 prd-ubuntu20-04-docker-8c-8g-840 sudo: pam_unix(sudo:session): session closed for user root
May 27 09:37:01 prd-ubuntu20-04-docker-8c-8g-840 CRON[3504]: pam_unix(cron:session): session opened for user root by (uid=0)
May 27 09:37:01 prd-ubuntu20-04-docker-8c-8g-840 CRON[3504]: pam_unix(cron:session): session closed for user root
May 27 09:38:01 prd-ubuntu20-04-docker-8c-8g-840 CRON[13760]: pam_unix(cron:session): session opened for user root by (uid=0)
May 27 09:38:01 prd-ubuntu20-04-docker-8c-8g-840 CRON[13760]: pam_unix(cron:session): session closed for user root
May 27 09:38:10 prd-ubuntu20-04-docker-8c-8g-840 sudo:  jenkins : TTY=unknown ; PWD=/w/workspace/exfoundry_app-record-replay_napa ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins .
May 27 09:38:10 prd-ubuntu20-04-docker-8c-8g-840 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
May 27 09:38:10 prd-ubuntu20-04-docker-8c-8g-840 sudo: pam_unix(sudo:session): session closed for user root
May 27 09:38:11 prd-ubuntu20-04-docker-8c-8g-840 sudo:  jenkins : TTY=unknown ; PWD=/w/workspace/exfoundry_app-record-replay_napa ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins .
May 27 09:38:11 prd-ubuntu20-04-docker-8c-8g-840 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
May 27 09:38:11 prd-ubuntu20-04-docker-8c-8g-840 sudo: pam_unix(sudo:session): session closed for user root
May 27 09:39:01 prd-ubuntu20-04-docker-8c-8g-840 CRON[21465]: pam_unix(cron:session): session opened for user root by (uid=0)
May 27 09:39:01 prd-ubuntu20-04-docker-8c-8g-840 CRON[21465]: pam_unix(cron:session): session closed for user root
May 27 09:40:01 prd-ubuntu20-04-docker-8c-8g-840 CRON[21740]: pam_unix(cron:session): session opened for user root by (uid=0)
May 27 09:40:01 prd-ubuntu20-04-docker-8c-8g-840 CRON[21740]: pam_unix(cron:session): session closed for user root
May 27 09:40:27 prd-ubuntu20-04-docker-8c-8g-840 systemd-logind[807]: Watching system buttons on /dev/input/event0 (Power Button)
May 27 09:40:27 prd-ubuntu20-04-docker-8c-8g-840 systemd-logind[807]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard)
May 27 09:41:01 prd-ubuntu20-04-docker-8c-8g-840 CRON[23002]: pam_unix(cron:session): session opened for user root by (uid=0)
May 27 09:41:01 prd-ubuntu20-04-docker-8c-8g-840 CRON[23002]: pam_unix(cron:session): session closed for user root
May 27 09:42:01 prd-ubuntu20-04-docker-8c-8g-840 CRON[23053]: pam_unix(cron:session): session opened for user root by (uid=0)
May 27 09:42:01 prd-ubuntu20-04-docker-8c-8g-840 CRON[23053]: pam_unix(cron:session): session closed for user root
May 27 09:43:01 prd-ubuntu20-04-docker-8c-8g-840 CRON[23056]: pam_unix(cron:session): session opened for user root by (uid=0)
May 27 09:43:01 prd-ubuntu20-04-docker-8c-8g-840 CRON[23056]: pam_unix(cron:session): session closed for user root
May 27 09:44:01 prd-ubuntu20-04-docker-8c-8g-840 CRON[23062]: pam_unix(cron:session): session opened for user root by (uid=0)
May 27 09:44:01 prd-ubuntu20-04-docker-8c-8g-840 CRON[23062]: pam_unix(cron:session): session closed for user root
May 27 09:45:01 prd-ubuntu20-04-docker-8c-8g-840 CRON[23065]: pam_unix(cron:session): session opened for user root by (uid=0)
May 27 09:45:01 prd-ubuntu20-04-docker-8c-8g-840 CRON[23065]: pam_unix(cron:session): session closed for user root
May 27 09:46:01 prd-ubuntu20-04-docker-8c-8g-840 CRON[23074]: pam_unix(cron:session): session opened for user root by (uid=0)
May 27 09:46:01 prd-ubuntu20-04-docker-8c-8g-840 CRON[23074]: pam_unix(cron:session): session closed for user root
May 27 09:47:01 prd-ubuntu20-04-docker-8c-8g-840 CRON[23077]: pam_unix(cron:session): session opened for user root by (uid=0)
May 27 09:47:01 prd-ubuntu20-04-docker-8c-8g-840 CRON[23077]: pam_unix(cron:session): session closed for user root
May 27 09:48:01 prd-ubuntu20-04-docker-8c-8g-840 CRON[23081]: pam_unix(cron:session): session opened for user root by (uid=0)
May 27 09:48:01 prd-ubuntu20-04-docker-8c-8g-840 CRON[23081]: pam_unix(cron:session): session closed for user root
May 27 09:49:01 prd-ubuntu20-04-docker-8c-8g-840 CRON[23086]: pam_unix(cron:session): session opened for user root by (uid=0)
May 27 09:49:01 prd-ubuntu20-04-docker-8c-8g-840 CRON[23086]: pam_unix(cron:session): session closed for user root
May 27 09:50:01 prd-ubuntu20-04-docker-8c-8g-840 CRON[23090]: pam_unix(cron:session): session opened for user root by (uid=0)
May 27 09:50:01 prd-ubuntu20-04-docker-8c-8g-840 CRON[23090]: pam_unix(cron:session): session closed for user root
May 27 09:51:01 prd-ubuntu20-04-docker-8c-8g-840 CRON[23115]: pam_unix(cron:session): session opened for user root by (uid=0)
May 27 09:51:01 prd-ubuntu20-04-docker-8c-8g-840 CRON[23115]: pam_unix(cron:session): session closed for user root
May 27 09:52:01 prd-ubuntu20-04-docker-8c-8g-840 CRON[23119]: pam_unix(cron:session): session opened for user root by (uid=0)
May 27 09:52:01 prd-ubuntu20-04-docker-8c-8g-840 CRON[23119]: pam_unix(cron:session): session closed for user root
May 27 09:53:01 prd-ubuntu20-04-docker-8c-8g-840 CRON[23122]: pam_unix(cron:session): session opened for user root by (uid=0)
May 27 09:53:01 prd-ubuntu20-04-docker-8c-8g-840 CRON[23122]: pam_unix(cron:session): session closed for user root
May 27 09:53:46 prd-ubuntu20-04-docker-8c-8g-840 sudo:  jenkins : TTY=unknown ; PWD=/w/workspace/exfoundry_app-record-replay_napa ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins /w/workspace/exfoundry_app-record-replay_napa/archives
May 27 09:53:46 prd-ubuntu20-04-docker-8c-8g-840 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
May 27 09:53:46 prd-ubuntu20-04-docker-8c-8g-840 sudo: pam_unix(sudo:session): session closed for user root