Jul 15 05:41:52 prd-ubuntu20-04-docker-8c-8g-20196 passwd[739]: password for 'ubuntu' changed by 'root' Jul 15 05:41:52 prd-ubuntu20-04-docker-8c-8g-20196 sshd[830]: Server listening on 0.0.0.0 port 22. Jul 15 05:41:52 prd-ubuntu20-04-docker-8c-8g-20196 sshd[830]: Server listening on :: port 22. Jul 15 05:41:52 prd-ubuntu20-04-docker-8c-8g-20196 systemd-logind[800]: Watching system buttons on /dev/input/event0 (Power Button) Jul 15 05:41:52 prd-ubuntu20-04-docker-8c-8g-20196 systemd-logind[800]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Jul 15 05:41:52 prd-ubuntu20-04-docker-8c-8g-20196 systemd-logind[800]: New seat seat0. Jul 15 05:41:53 prd-ubuntu20-04-docker-8c-8g-20196 sshd[889]: error: kex_exchange_identification: Connection closed by remote host Jul 15 05:42:00 prd-ubuntu20-04-docker-8c-8g-20196 sshd[1370]: Invalid user jenkins from 10.30.120.5 port 38896 Jul 15 05:42:00 prd-ubuntu20-04-docker-8c-8g-20196 sshd[1370]: Received disconnect from 10.30.120.5 port 38896:11: Closed due to user request. [preauth] Jul 15 05:42:00 prd-ubuntu20-04-docker-8c-8g-20196 sshd[1370]: Disconnected from invalid user jenkins 10.30.120.5 port 38896 [preauth] Jul 15 05:42:01 prd-ubuntu20-04-docker-8c-8g-20196 CRON[1386]: pam_unix(cron:session): session opened for user root by (uid=0) Jul 15 05:42:01 prd-ubuntu20-04-docker-8c-8g-20196 CRON[1386]: pam_unix(cron:session): session closed for user root Jul 15 05:42:02 prd-ubuntu20-04-docker-8c-8g-20196 systemd-logind[800]: Watching system buttons on /dev/input/event0 (Power Button) Jul 15 05:42:02 prd-ubuntu20-04-docker-8c-8g-20196 systemd-logind[800]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Jul 15 05:42:02 prd-ubuntu20-04-docker-8c-8g-20196 sshd[1569]: Invalid user jenkins from 10.30.120.5 port 38898 Jul 15 05:42:02 prd-ubuntu20-04-docker-8c-8g-20196 sshd[1569]: Received disconnect from 10.30.120.5 port 38898:11: Closed due to user request. [preauth] Jul 15 05:42:02 prd-ubuntu20-04-docker-8c-8g-20196 sshd[1569]: Disconnected from invalid user jenkins 10.30.120.5 port 38898 [preauth] Jul 15 05:42:05 prd-ubuntu20-04-docker-8c-8g-20196 sshd[1600]: Invalid user jenkins from 10.30.120.5 port 38906 Jul 15 05:42:05 prd-ubuntu20-04-docker-8c-8g-20196 sshd[1600]: Received disconnect from 10.30.120.5 port 38906:11: Closed due to user request. [preauth] Jul 15 05:42:05 prd-ubuntu20-04-docker-8c-8g-20196 sshd[1600]: Disconnected from invalid user jenkins 10.30.120.5 port 38906 [preauth] Jul 15 05:42:07 prd-ubuntu20-04-docker-8c-8g-20196 sshd[1696]: Invalid user jenkins from 10.30.120.5 port 38908 Jul 15 05:42:07 prd-ubuntu20-04-docker-8c-8g-20196 sshd[1696]: Received disconnect from 10.30.120.5 port 38908:11: Closed due to user request. [preauth] Jul 15 05:42:07 prd-ubuntu20-04-docker-8c-8g-20196 sshd[1696]: Disconnected from invalid user jenkins 10.30.120.5 port 38908 [preauth] Jul 15 05:42:09 prd-ubuntu20-04-docker-8c-8g-20196 sshd[1827]: Invalid user jenkins from 10.30.120.5 port 38910 Jul 15 05:42:09 prd-ubuntu20-04-docker-8c-8g-20196 sshd[1827]: Received disconnect from 10.30.120.5 port 38910:11: Closed due to user request. [preauth] Jul 15 05:42:09 prd-ubuntu20-04-docker-8c-8g-20196 sshd[1827]: Disconnected from invalid user jenkins 10.30.120.5 port 38910 [preauth] Jul 15 05:42:11 prd-ubuntu20-04-docker-8c-8g-20196 sshd[2253]: Invalid user jenkins from 10.30.120.5 port 38914 Jul 15 05:42:11 prd-ubuntu20-04-docker-8c-8g-20196 sshd[2253]: Received disconnect from 10.30.120.5 port 38914:11: Closed due to user request. [preauth] Jul 15 05:42:11 prd-ubuntu20-04-docker-8c-8g-20196 sshd[2253]: Disconnected from invalid user jenkins 10.30.120.5 port 38914 [preauth] Jul 15 05:42:13 prd-ubuntu20-04-docker-8c-8g-20196 sshd[2294]: Invalid user jenkins from 10.30.120.5 port 38916 Jul 15 05:42:13 prd-ubuntu20-04-docker-8c-8g-20196 sshd[2294]: Received disconnect from 10.30.120.5 port 38916:11: Closed due to user request. [preauth] Jul 15 05:42:13 prd-ubuntu20-04-docker-8c-8g-20196 sshd[2294]: Disconnected from invalid user jenkins 10.30.120.5 port 38916 [preauth] Jul 15 05:42:15 prd-ubuntu20-04-docker-8c-8g-20196 sshd[2296]: Invalid user jenkins from 10.30.120.5 port 38918 Jul 15 05:42:16 prd-ubuntu20-04-docker-8c-8g-20196 sshd[2296]: Received disconnect from 10.30.120.5 port 38918:11: Closed due to user request. [preauth] Jul 15 05:42:16 prd-ubuntu20-04-docker-8c-8g-20196 sshd[2296]: Disconnected from invalid user jenkins 10.30.120.5 port 38918 [preauth] Jul 15 05:42:16 prd-ubuntu20-04-docker-8c-8g-20196 useradd[2317]: new group: name=jenkins, GID=1001 Jul 15 05:42:16 prd-ubuntu20-04-docker-8c-8g-20196 useradd[2317]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash, from=none Jul 15 05:42:16 prd-ubuntu20-04-docker-8c-8g-20196 usermod[2327]: add 'jenkins' to group 'docker' Jul 15 05:42:16 prd-ubuntu20-04-docker-8c-8g-20196 usermod[2327]: add 'jenkins' to shadow group 'docker' Jul 15 05:42:18 prd-ubuntu20-04-docker-8c-8g-20196 sshd[2364]: Accepted publickey for jenkins from 10.30.120.5 port 38920 ssh2: RSA SHA256:aPmPdMw/h9M56P/o8xjsZcdBWoRKGeie6FPOwnlsRmU Jul 15 05:42:18 prd-ubuntu20-04-docker-8c-8g-20196 sshd[2364]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Jul 15 05:42:18 prd-ubuntu20-04-docker-8c-8g-20196 systemd-logind[800]: New session 2 of user jenkins. Jul 15 05:42:18 prd-ubuntu20-04-docker-8c-8g-20196 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Jul 15 05:42:37 prd-ubuntu20-04-docker-8c-8g-20196 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/xfoundry_device-usb-camera_PR-52 ; USER=root ; COMMAND=/usr/bin/mv /tmp/ssh_known_hosts /etc/ssh/ssh_known_hosts Jul 15 05:42:37 prd-ubuntu20-04-docker-8c-8g-20196 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Jul 15 05:42:37 prd-ubuntu20-04-docker-8c-8g-20196 sudo: pam_unix(sudo:session): session closed for user root Jul 15 05:42:37 prd-ubuntu20-04-docker-8c-8g-20196 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/xfoundry_device-usb-camera_PR-52 ; USER=root ; COMMAND=/usr/bin/tee -a /etc/ssh/ssh_known_hosts Jul 15 05:42:37 prd-ubuntu20-04-docker-8c-8g-20196 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Jul 15 05:42:37 prd-ubuntu20-04-docker-8c-8g-20196 sudo: pam_unix(sudo:session): session closed for user root Jul 15 05:42:50 prd-ubuntu20-04-docker-8c-8g-20196 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/xfoundry_device-usb-camera_PR-52 ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins .semver Jul 15 05:42:50 prd-ubuntu20-04-docker-8c-8g-20196 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Jul 15 05:42:50 prd-ubuntu20-04-docker-8c-8g-20196 sudo: pam_unix(sudo:session): session closed for user root Jul 15 05:43:01 prd-ubuntu20-04-docker-8c-8g-20196 CRON[4193]: pam_unix(cron:session): session opened for user root by (uid=0) Jul 15 05:43:01 prd-ubuntu20-04-docker-8c-8g-20196 CRON[4193]: pam_unix(cron:session): session closed for user root Jul 15 05:44:01 prd-ubuntu20-04-docker-8c-8g-20196 CRON[4921]: pam_unix(cron:session): session opened for user root by (uid=0) Jul 15 05:44:01 prd-ubuntu20-04-docker-8c-8g-20196 CRON[4921]: pam_unix(cron:session): session closed for user root Jul 15 05:45:01 prd-ubuntu20-04-docker-8c-8g-20196 CRON[4933]: pam_unix(cron:session): session opened for user root by (uid=0) Jul 15 05:45:01 prd-ubuntu20-04-docker-8c-8g-20196 CRON[4933]: pam_unix(cron:session): session closed for user root Jul 15 05:46:01 prd-ubuntu20-04-docker-8c-8g-20196 CRON[4946]: pam_unix(cron:session): session opened for user root by (uid=0) Jul 15 05:46:01 prd-ubuntu20-04-docker-8c-8g-20196 CRON[4946]: pam_unix(cron:session): session closed for user root Jul 15 05:47:01 prd-ubuntu20-04-docker-8c-8g-20196 CRON[4951]: pam_unix(cron:session): session opened for user root by (uid=0) Jul 15 05:47:01 prd-ubuntu20-04-docker-8c-8g-20196 CRON[4951]: pam_unix(cron:session): session closed for user root Jul 15 05:48:01 prd-ubuntu20-04-docker-8c-8g-20196 CRON[4961]: pam_unix(cron:session): session opened for user root by (uid=0) Jul 15 05:48:01 prd-ubuntu20-04-docker-8c-8g-20196 CRON[4961]: pam_unix(cron:session): session closed for user root Jul 15 05:49:01 prd-ubuntu20-04-docker-8c-8g-20196 CRON[4964]: pam_unix(cron:session): session opened for user root by (uid=0) Jul 15 05:49:01 prd-ubuntu20-04-docker-8c-8g-20196 CRON[4964]: pam_unix(cron:session): session closed for user root Jul 15 05:50:01 prd-ubuntu20-04-docker-8c-8g-20196 CRON[4968]: pam_unix(cron:session): session opened for user root by (uid=0) Jul 15 05:50:01 prd-ubuntu20-04-docker-8c-8g-20196 CRON[4968]: pam_unix(cron:session): session closed for user root Jul 15 05:51:01 prd-ubuntu20-04-docker-8c-8g-20196 CRON[4994]: pam_unix(cron:session): session opened for user root by (uid=0) Jul 15 05:51:01 prd-ubuntu20-04-docker-8c-8g-20196 CRON[4994]: pam_unix(cron:session): session closed for user root Jul 15 05:52:01 prd-ubuntu20-04-docker-8c-8g-20196 CRON[4999]: pam_unix(cron:session): session opened for user root by (uid=0) Jul 15 05:52:01 prd-ubuntu20-04-docker-8c-8g-20196 CRON[4999]: pam_unix(cron:session): session closed for user root Jul 15 05:52:12 prd-ubuntu20-04-docker-8c-8g-20196 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/xfoundry_device-usb-camera_PR-52 ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins /w/workspace/xfoundry_device-usb-camera_PR-52/archives Jul 15 05:52:12 prd-ubuntu20-04-docker-8c-8g-20196 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Jul 15 05:52:12 prd-ubuntu20-04-docker-8c-8g-20196 sudo: pam_unix(sudo:session): session closed for user root