May 26 01:46:22 prd-ubuntu20-04-docker-8c-8g-11319 passwd[759]: password for 'ubuntu' changed by 'root' May 26 01:46:22 prd-ubuntu20-04-docker-8c-8g-11319 sshd[867]: Server listening on 0.0.0.0 port 22. May 26 01:46:22 prd-ubuntu20-04-docker-8c-8g-11319 sshd[867]: Server listening on :: port 22. May 26 01:46:22 prd-ubuntu20-04-docker-8c-8g-11319 systemd-logind[828]: New seat seat0. May 26 01:46:22 prd-ubuntu20-04-docker-8c-8g-11319 systemd-logind[828]: Watching system buttons on /dev/input/event0 (Power Button) May 26 01:46:22 prd-ubuntu20-04-docker-8c-8g-11319 systemd-logind[828]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) May 26 01:46:23 prd-ubuntu20-04-docker-8c-8g-11319 sshd[1018]: error: kex_exchange_identification: Connection closed by remote host May 26 01:46:32 prd-ubuntu20-04-docker-8c-8g-11319 sshd[1048]: Invalid user jenkins from 10.30.120.5 port 45024 May 26 01:46:32 prd-ubuntu20-04-docker-8c-8g-11319 sshd[1048]: Received disconnect from 10.30.120.5 port 45024:11: Closed due to user request. [preauth] May 26 01:46:32 prd-ubuntu20-04-docker-8c-8g-11319 sshd[1048]: Disconnected from invalid user jenkins 10.30.120.5 port 45024 [preauth] May 26 01:46:34 prd-ubuntu20-04-docker-8c-8g-11319 sshd[1052]: Invalid user jenkins from 10.30.120.5 port 45036 May 26 01:46:35 prd-ubuntu20-04-docker-8c-8g-11319 sshd[1052]: Received disconnect from 10.30.120.5 port 45036:11: Closed due to user request. [preauth] May 26 01:46:35 prd-ubuntu20-04-docker-8c-8g-11319 sshd[1052]: Disconnected from invalid user jenkins 10.30.120.5 port 45036 [preauth] May 26 01:46:37 prd-ubuntu20-04-docker-8c-8g-11319 sshd[1054]: Invalid user jenkins from 10.30.120.5 port 45042 May 26 01:46:37 prd-ubuntu20-04-docker-8c-8g-11319 sshd[1054]: Received disconnect from 10.30.120.5 port 45042:11: Closed due to user request. [preauth] May 26 01:46:37 prd-ubuntu20-04-docker-8c-8g-11319 sshd[1054]: Disconnected from invalid user jenkins 10.30.120.5 port 45042 [preauth] May 26 01:46:39 prd-ubuntu20-04-docker-8c-8g-11319 sshd[1056]: Invalid user jenkins from 10.30.120.5 port 45050 May 26 01:46:39 prd-ubuntu20-04-docker-8c-8g-11319 sshd[1056]: Received disconnect from 10.30.120.5 port 45050:11: Closed due to user request. [preauth] May 26 01:46:39 prd-ubuntu20-04-docker-8c-8g-11319 sshd[1056]: Disconnected from invalid user jenkins 10.30.120.5 port 45050 [preauth] May 26 01:46:42 prd-ubuntu20-04-docker-8c-8g-11319 sshd[1334]: Invalid user jenkins from 10.30.120.5 port 45064 May 26 01:46:42 prd-ubuntu20-04-docker-8c-8g-11319 sshd[1334]: Received disconnect from 10.30.120.5 port 45064:11: Closed due to user request. [preauth] May 26 01:46:42 prd-ubuntu20-04-docker-8c-8g-11319 sshd[1334]: Disconnected from invalid user jenkins 10.30.120.5 port 45064 [preauth] May 26 01:46:44 prd-ubuntu20-04-docker-8c-8g-11319 sshd[1376]: Invalid user jenkins from 10.30.120.5 port 45066 May 26 01:46:45 prd-ubuntu20-04-docker-8c-8g-11319 sshd[1376]: Received disconnect from 10.30.120.5 port 45066:11: Closed due to user request. [preauth] May 26 01:46:45 prd-ubuntu20-04-docker-8c-8g-11319 sshd[1376]: Disconnected from invalid user jenkins 10.30.120.5 port 45066 [preauth] May 26 01:46:47 prd-ubuntu20-04-docker-8c-8g-11319 sshd[1378]: Invalid user jenkins from 10.30.120.5 port 45070 May 26 01:46:47 prd-ubuntu20-04-docker-8c-8g-11319 sshd[1378]: Received disconnect from 10.30.120.5 port 45070:11: Closed due to user request. [preauth] May 26 01:46:47 prd-ubuntu20-04-docker-8c-8g-11319 sshd[1378]: Disconnected from invalid user jenkins 10.30.120.5 port 45070 [preauth] May 26 01:46:49 prd-ubuntu20-04-docker-8c-8g-11319 sshd[1391]: Invalid user jenkins from 10.30.120.5 port 45078 May 26 01:46:50 prd-ubuntu20-04-docker-8c-8g-11319 sshd[1391]: Received disconnect from 10.30.120.5 port 45078:11: Closed due to user request. [preauth] May 26 01:46:50 prd-ubuntu20-04-docker-8c-8g-11319 sshd[1391]: Disconnected from invalid user jenkins 10.30.120.5 port 45078 [preauth] May 26 01:46:52 prd-ubuntu20-04-docker-8c-8g-11319 sshd[1393]: Invalid user jenkins from 10.30.120.5 port 45080 May 26 01:46:52 prd-ubuntu20-04-docker-8c-8g-11319 sshd[1393]: Received disconnect from 10.30.120.5 port 45080:11: Closed due to user request. [preauth] May 26 01:46:52 prd-ubuntu20-04-docker-8c-8g-11319 sshd[1393]: Disconnected from invalid user jenkins 10.30.120.5 port 45080 [preauth] May 26 01:46:52 prd-ubuntu20-04-docker-8c-8g-11319 useradd[1400]: new group: name=jenkins, GID=1001 May 26 01:46:52 prd-ubuntu20-04-docker-8c-8g-11319 useradd[1400]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash, from=none May 26 01:46:53 prd-ubuntu20-04-docker-8c-8g-11319 usermod[1410]: add 'jenkins' to group 'docker' May 26 01:46:53 prd-ubuntu20-04-docker-8c-8g-11319 usermod[1410]: add 'jenkins' to shadow group 'docker' May 26 01:46:54 prd-ubuntu20-04-docker-8c-8g-11319 sshd[1462]: Accepted publickey for jenkins from 10.30.120.5 port 45086 ssh2: RSA SHA256:aPmPdMw/h9M56P/o8xjsZcdBWoRKGeie6FPOwnlsRmU May 26 01:46:54 prd-ubuntu20-04-docker-8c-8g-11319 sshd[1462]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) May 26 01:46:55 prd-ubuntu20-04-docker-8c-8g-11319 systemd-logind[828]: New session 1 of user jenkins. May 26 01:46:55 prd-ubuntu20-04-docker-8c-8g-11319 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) May 26 01:47:02 prd-ubuntu20-04-docker-8c-8g-11319 CRON[1657]: pam_unix(cron:session): session opened for user root by (uid=0) May 26 01:47:02 prd-ubuntu20-04-docker-8c-8g-11319 CRON[1657]: pam_unix(cron:session): session closed for user root May 26 01:47:19 prd-ubuntu20-04-docker-8c-8g-11319 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/xfoundry_app-record-replay_palau ; USER=root ; COMMAND=/usr/bin/mv /tmp/ssh_known_hosts /etc/ssh/ssh_known_hosts May 26 01:47:19 prd-ubuntu20-04-docker-8c-8g-11319 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) May 26 01:47:19 prd-ubuntu20-04-docker-8c-8g-11319 sudo: pam_unix(sudo:session): session closed for user root May 26 01:47:19 prd-ubuntu20-04-docker-8c-8g-11319 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/xfoundry_app-record-replay_palau ; USER=root ; COMMAND=/usr/bin/tee -a /etc/ssh/ssh_known_hosts May 26 01:47:19 prd-ubuntu20-04-docker-8c-8g-11319 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) May 26 01:47:19 prd-ubuntu20-04-docker-8c-8g-11319 sudo: pam_unix(sudo:session): session closed for user root May 26 01:47:40 prd-ubuntu20-04-docker-8c-8g-11319 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/xfoundry_app-record-replay_palau ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins .semver May 26 01:47:40 prd-ubuntu20-04-docker-8c-8g-11319 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) May 26 01:47:40 prd-ubuntu20-04-docker-8c-8g-11319 sudo: pam_unix(sudo:session): session closed for user root May 26 01:48:01 prd-ubuntu20-04-docker-8c-8g-11319 CRON[3289]: pam_unix(cron:session): session opened for user root by (uid=0) May 26 01:48:01 prd-ubuntu20-04-docker-8c-8g-11319 CRON[3289]: pam_unix(cron:session): session closed for user root May 26 01:49:01 prd-ubuntu20-04-docker-8c-8g-11319 CRON[13523]: pam_unix(cron:session): session opened for user root by (uid=0) May 26 01:49:01 prd-ubuntu20-04-docker-8c-8g-11319 CRON[13523]: pam_unix(cron:session): session closed for user root May 26 01:49:54 prd-ubuntu20-04-docker-8c-8g-11319 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/xfoundry_app-record-replay_palau ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins . May 26 01:49:54 prd-ubuntu20-04-docker-8c-8g-11319 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) May 26 01:49:54 prd-ubuntu20-04-docker-8c-8g-11319 sudo: pam_unix(sudo:session): session closed for user root May 26 01:49:55 prd-ubuntu20-04-docker-8c-8g-11319 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/xfoundry_app-record-replay_palau ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins . May 26 01:49:55 prd-ubuntu20-04-docker-8c-8g-11319 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) May 26 01:49:55 prd-ubuntu20-04-docker-8c-8g-11319 sudo: pam_unix(sudo:session): session closed for user root May 26 01:50:01 prd-ubuntu20-04-docker-8c-8g-11319 CRON[25385]: pam_unix(cron:session): session opened for user root by (uid=0) May 26 01:50:01 prd-ubuntu20-04-docker-8c-8g-11319 CRON[25385]: pam_unix(cron:session): session closed for user root May 26 01:51:01 prd-ubuntu20-04-docker-8c-8g-11319 CRON[30754]: pam_unix(cron:session): session opened for user root by (uid=0) May 26 01:51:01 prd-ubuntu20-04-docker-8c-8g-11319 CRON[30754]: pam_unix(cron:session): session closed for user root May 26 01:52:01 prd-ubuntu20-04-docker-8c-8g-11319 CRON[30783]: pam_unix(cron:session): session opened for user root by (uid=0) May 26 01:52:01 prd-ubuntu20-04-docker-8c-8g-11319 CRON[30783]: pam_unix(cron:session): session closed for user root May 26 01:53:01 prd-ubuntu20-04-docker-8c-8g-11319 CRON[30788]: pam_unix(cron:session): session opened for user root by (uid=0) May 26 01:53:01 prd-ubuntu20-04-docker-8c-8g-11319 CRON[30788]: pam_unix(cron:session): session closed for user root May 26 01:54:01 prd-ubuntu20-04-docker-8c-8g-11319 CRON[30791]: pam_unix(cron:session): session opened for user root by (uid=0) May 26 01:54:01 prd-ubuntu20-04-docker-8c-8g-11319 CRON[30791]: pam_unix(cron:session): session closed for user root May 26 01:55:01 prd-ubuntu20-04-docker-8c-8g-11319 CRON[30795]: pam_unix(cron:session): session opened for user root by (uid=0) May 26 01:55:01 prd-ubuntu20-04-docker-8c-8g-11319 CRON[30795]: pam_unix(cron:session): session closed for user root May 26 01:56:01 prd-ubuntu20-04-docker-8c-8g-11319 CRON[30799]: pam_unix(cron:session): session opened for user root by (uid=0) May 26 01:56:01 prd-ubuntu20-04-docker-8c-8g-11319 CRON[30799]: pam_unix(cron:session): session closed for user root May 26 01:57:01 prd-ubuntu20-04-docker-8c-8g-11319 CRON[30806]: pam_unix(cron:session): session opened for user root by (uid=0) May 26 01:57:01 prd-ubuntu20-04-docker-8c-8g-11319 CRON[30806]: pam_unix(cron:session): session closed for user root May 26 01:58:01 prd-ubuntu20-04-docker-8c-8g-11319 CRON[30809]: pam_unix(cron:session): session opened for user root by (uid=0) May 26 01:58:01 prd-ubuntu20-04-docker-8c-8g-11319 CRON[30809]: pam_unix(cron:session): session closed for user root May 26 01:59:01 prd-ubuntu20-04-docker-8c-8g-11319 CRON[30814]: pam_unix(cron:session): session opened for user root by (uid=0) May 26 01:59:01 prd-ubuntu20-04-docker-8c-8g-11319 CRON[30814]: pam_unix(cron:session): session closed for user root May 26 02:00:01 prd-ubuntu20-04-docker-8c-8g-11319 CRON[30817]: pam_unix(cron:session): session opened for user root by (uid=0) May 26 02:00:01 prd-ubuntu20-04-docker-8c-8g-11319 CRON[30817]: pam_unix(cron:session): session closed for user root May 26 02:01:01 prd-ubuntu20-04-docker-8c-8g-11319 CRON[30821]: pam_unix(cron:session): session opened for user root by (uid=0) May 26 02:01:01 prd-ubuntu20-04-docker-8c-8g-11319 CRON[30821]: pam_unix(cron:session): session closed for user root May 26 02:02:01 prd-ubuntu20-04-docker-8c-8g-11319 CRON[30843]: pam_unix(cron:session): session opened for user root by (uid=0) May 26 02:02:01 prd-ubuntu20-04-docker-8c-8g-11319 CRON[30843]: pam_unix(cron:session): session closed for user root May 26 02:03:01 prd-ubuntu20-04-docker-8c-8g-11319 CRON[30849]: pam_unix(cron:session): session opened for user root by (uid=0) May 26 02:03:01 prd-ubuntu20-04-docker-8c-8g-11319 CRON[30849]: pam_unix(cron:session): session closed for user root May 26 02:04:01 prd-ubuntu20-04-docker-8c-8g-11319 CRON[30854]: pam_unix(cron:session): session opened for user root by (uid=0) May 26 02:04:01 prd-ubuntu20-04-docker-8c-8g-11319 CRON[30854]: pam_unix(cron:session): session closed for user root May 26 02:05:01 prd-ubuntu20-04-docker-8c-8g-11319 CRON[30858]: pam_unix(cron:session): session opened for user root by (uid=0) May 26 02:05:01 prd-ubuntu20-04-docker-8c-8g-11319 CRON[30858]: pam_unix(cron:session): session closed for user root May 26 02:06:01 prd-ubuntu20-04-docker-8c-8g-11319 CRON[30861]: pam_unix(cron:session): session opened for user root by (uid=0) May 26 02:06:01 prd-ubuntu20-04-docker-8c-8g-11319 CRON[30861]: pam_unix(cron:session): session closed for user root May 26 02:07:01 prd-ubuntu20-04-docker-8c-8g-11319 CRON[30868]: pam_unix(cron:session): session opened for user root by (uid=0) May 26 02:07:01 prd-ubuntu20-04-docker-8c-8g-11319 CRON[30868]: pam_unix(cron:session): session closed for user root May 26 02:08:01 prd-ubuntu20-04-docker-8c-8g-11319 CRON[30873]: pam_unix(cron:session): session opened for user root by (uid=0) May 26 02:08:01 prd-ubuntu20-04-docker-8c-8g-11319 CRON[30873]: pam_unix(cron:session): session closed for user root May 26 02:09:01 prd-ubuntu20-04-docker-8c-8g-11319 CRON[30877]: pam_unix(cron:session): session opened for user root by (uid=0) May 26 02:09:01 prd-ubuntu20-04-docker-8c-8g-11319 CRON[30877]: pam_unix(cron:session): session closed for user root May 26 02:10:01 prd-ubuntu20-04-docker-8c-8g-11319 CRON[30881]: pam_unix(cron:session): session opened for user root by (uid=0) May 26 02:10:01 prd-ubuntu20-04-docker-8c-8g-11319 CRON[30881]: pam_unix(cron:session): session closed for user root May 26 02:11:01 prd-ubuntu20-04-docker-8c-8g-11319 CRON[30887]: pam_unix(cron:session): session opened for user root by (uid=0) May 26 02:11:01 prd-ubuntu20-04-docker-8c-8g-11319 CRON[30887]: pam_unix(cron:session): session closed for user root May 26 02:12:01 prd-ubuntu20-04-docker-8c-8g-11319 CRON[31436]: pam_unix(cron:session): session opened for user root by (uid=0) May 26 02:12:02 prd-ubuntu20-04-docker-8c-8g-11319 CRON[31436]: pam_unix(cron:session): session closed for user root May 26 02:13:01 prd-ubuntu20-04-docker-8c-8g-11319 CRON[31913]: pam_unix(cron:session): session opened for user root by (uid=0) May 26 02:13:01 prd-ubuntu20-04-docker-8c-8g-11319 CRON[31913]: pam_unix(cron:session): session closed for user root May 26 02:13:25 prd-ubuntu20-04-docker-8c-8g-11319 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/xfoundry_app-record-replay_palau ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins /w/workspace/xfoundry_app-record-replay_palau/archives May 26 02:13:25 prd-ubuntu20-04-docker-8c-8g-11319 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) May 26 02:13:25 prd-ubuntu20-04-docker-8c-8g-11319 sudo: pam_unix(sudo:session): session closed for user root