Apr 1 00:53:52 prd-ubuntu20-04-docker-8c-8g-10362 passwd[754]: password for 'ubuntu' changed by 'root' Apr 1 00:53:52 prd-ubuntu20-04-docker-8c-8g-10362 sshd[827]: Server listening on 0.0.0.0 port 22. Apr 1 00:53:52 prd-ubuntu20-04-docker-8c-8g-10362 sshd[827]: Server listening on :: port 22. Apr 1 00:53:52 prd-ubuntu20-04-docker-8c-8g-10362 systemd-logind[804]: Watching system buttons on /dev/input/event0 (Power Button) Apr 1 00:53:52 prd-ubuntu20-04-docker-8c-8g-10362 systemd-logind[804]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Apr 1 00:53:52 prd-ubuntu20-04-docker-8c-8g-10362 systemd-logind[804]: New seat seat0. Apr 1 00:53:53 prd-ubuntu20-04-docker-8c-8g-10362 sshd[896]: error: kex_exchange_identification: Connection closed by remote host Apr 1 00:54:01 prd-ubuntu20-04-docker-8c-8g-10362 sshd[1344]: Invalid user jenkins from 10.30.120.5 port 43316 Apr 1 00:54:01 prd-ubuntu20-04-docker-8c-8g-10362 sshd[1344]: Received disconnect from 10.30.120.5 port 43316:11: Closed due to user request. [preauth] Apr 1 00:54:01 prd-ubuntu20-04-docker-8c-8g-10362 sshd[1344]: Disconnected from invalid user jenkins 10.30.120.5 port 43316 [preauth] Apr 1 00:54:01 prd-ubuntu20-04-docker-8c-8g-10362 CRON[1361]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 1 00:54:01 prd-ubuntu20-04-docker-8c-8g-10362 CRON[1361]: pam_unix(cron:session): session closed for user root Apr 1 00:54:03 prd-ubuntu20-04-docker-8c-8g-10362 sshd[1391]: Invalid user jenkins from 10.30.120.5 port 43318 Apr 1 00:54:03 prd-ubuntu20-04-docker-8c-8g-10362 sshd[1391]: Received disconnect from 10.30.120.5 port 43318:11: Closed due to user request. [preauth] Apr 1 00:54:03 prd-ubuntu20-04-docker-8c-8g-10362 sshd[1391]: Disconnected from invalid user jenkins 10.30.120.5 port 43318 [preauth] Apr 1 00:54:04 prd-ubuntu20-04-docker-8c-8g-10362 systemd-logind[804]: Watching system buttons on /dev/input/event0 (Power Button) Apr 1 00:54:04 prd-ubuntu20-04-docker-8c-8g-10362 systemd-logind[804]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Apr 1 00:54:05 prd-ubuntu20-04-docker-8c-8g-10362 sshd[1589]: Invalid user jenkins from 10.30.120.5 port 43320 Apr 1 00:54:05 prd-ubuntu20-04-docker-8c-8g-10362 sshd[1589]: Received disconnect from 10.30.120.5 port 43320:11: Closed due to user request. [preauth] Apr 1 00:54:05 prd-ubuntu20-04-docker-8c-8g-10362 sshd[1589]: Disconnected from invalid user jenkins 10.30.120.5 port 43320 [preauth] Apr 1 00:54:07 prd-ubuntu20-04-docker-8c-8g-10362 sshd[1595]: Invalid user jenkins from 10.30.120.5 port 43322 Apr 1 00:54:08 prd-ubuntu20-04-docker-8c-8g-10362 sshd[1595]: Received disconnect from 10.30.120.5 port 43322:11: Closed due to user request. [preauth] Apr 1 00:54:08 prd-ubuntu20-04-docker-8c-8g-10362 sshd[1595]: Disconnected from invalid user jenkins 10.30.120.5 port 43322 [preauth] Apr 1 00:54:10 prd-ubuntu20-04-docker-8c-8g-10362 sshd[1598]: Invalid user jenkins from 10.30.120.5 port 43324 Apr 1 00:54:10 prd-ubuntu20-04-docker-8c-8g-10362 sshd[1598]: Received disconnect from 10.30.120.5 port 43324:11: Closed due to user request. [preauth] Apr 1 00:54:10 prd-ubuntu20-04-docker-8c-8g-10362 sshd[1598]: Disconnected from invalid user jenkins 10.30.120.5 port 43324 [preauth] Apr 1 00:54:12 prd-ubuntu20-04-docker-8c-8g-10362 sshd[1909]: Invalid user jenkins from 10.30.120.5 port 43326 Apr 1 00:54:12 prd-ubuntu20-04-docker-8c-8g-10362 sshd[1909]: Received disconnect from 10.30.120.5 port 43326:11: Closed due to user request. [preauth] Apr 1 00:54:12 prd-ubuntu20-04-docker-8c-8g-10362 sshd[1909]: Disconnected from invalid user jenkins 10.30.120.5 port 43326 [preauth] Apr 1 00:54:14 prd-ubuntu20-04-docker-8c-8g-10362 sshd[2094]: Invalid user jenkins from 10.30.120.5 port 43328 Apr 1 00:54:14 prd-ubuntu20-04-docker-8c-8g-10362 sshd[2094]: Received disconnect from 10.30.120.5 port 43328:11: Closed due to user request. [preauth] Apr 1 00:54:14 prd-ubuntu20-04-docker-8c-8g-10362 sshd[2094]: Disconnected from invalid user jenkins 10.30.120.5 port 43328 [preauth] Apr 1 00:54:16 prd-ubuntu20-04-docker-8c-8g-10362 useradd[2182]: new group: name=jenkins, GID=1001 Apr 1 00:54:16 prd-ubuntu20-04-docker-8c-8g-10362 useradd[2182]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash, from=none Apr 1 00:54:16 prd-ubuntu20-04-docker-8c-8g-10362 usermod[2244]: add 'jenkins' to group 'docker' Apr 1 00:54:16 prd-ubuntu20-04-docker-8c-8g-10362 usermod[2244]: add 'jenkins' to shadow group 'docker' Apr 1 00:54:16 prd-ubuntu20-04-docker-8c-8g-10362 sshd[2257]: Received disconnect from 10.30.120.5 port 43330:11: Closed due to user request. [preauth] Apr 1 00:54:16 prd-ubuntu20-04-docker-8c-8g-10362 sshd[2257]: Disconnected from authenticating user jenkins 10.30.120.5 port 43330 [preauth] Apr 1 00:54:18 prd-ubuntu20-04-docker-8c-8g-10362 sshd[2490]: Accepted publickey for jenkins from 10.30.120.5 port 43332 ssh2: RSA SHA256:aPmPdMw/h9M56P/o8xjsZcdBWoRKGeie6FPOwnlsRmU Apr 1 00:54:18 prd-ubuntu20-04-docker-8c-8g-10362 sshd[2490]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Apr 1 00:54:18 prd-ubuntu20-04-docker-8c-8g-10362 systemd-logind[804]: New session 2 of user jenkins. Apr 1 00:54:18 prd-ubuntu20-04-docker-8c-8g-10362 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Apr 1 00:54:40 prd-ubuntu20-04-docker-8c-8g-10362 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/foundry_device-virtual-go_PR-272 ; USER=root ; COMMAND=/usr/bin/mv /tmp/ssh_known_hosts /etc/ssh/ssh_known_hosts Apr 1 00:54:40 prd-ubuntu20-04-docker-8c-8g-10362 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Apr 1 00:54:40 prd-ubuntu20-04-docker-8c-8g-10362 sudo: pam_unix(sudo:session): session closed for user root Apr 1 00:54:40 prd-ubuntu20-04-docker-8c-8g-10362 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/foundry_device-virtual-go_PR-272 ; USER=root ; COMMAND=/usr/bin/tee -a /etc/ssh/ssh_known_hosts Apr 1 00:54:40 prd-ubuntu20-04-docker-8c-8g-10362 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Apr 1 00:54:40 prd-ubuntu20-04-docker-8c-8g-10362 sudo: pam_unix(sudo:session): session closed for user root Apr 1 00:54:48 prd-ubuntu20-04-docker-8c-8g-10362 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/foundry_device-virtual-go_PR-272 ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins .semver Apr 1 00:54:48 prd-ubuntu20-04-docker-8c-8g-10362 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Apr 1 00:54:48 prd-ubuntu20-04-docker-8c-8g-10362 sudo: pam_unix(sudo:session): session closed for user root Apr 1 00:55:01 prd-ubuntu20-04-docker-8c-8g-10362 CRON[4409]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 1 00:55:01 prd-ubuntu20-04-docker-8c-8g-10362 CRON[4409]: pam_unix(cron:session): session closed for user root Apr 1 00:55:43 prd-ubuntu20-04-docker-8c-8g-10362 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/foundry_device-virtual-go_PR-272 ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins . Apr 1 00:55:43 prd-ubuntu20-04-docker-8c-8g-10362 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Apr 1 00:55:43 prd-ubuntu20-04-docker-8c-8g-10362 sudo: pam_unix(sudo:session): session closed for user root Apr 1 00:55:44 prd-ubuntu20-04-docker-8c-8g-10362 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/foundry_device-virtual-go_PR-272 ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins . Apr 1 00:55:44 prd-ubuntu20-04-docker-8c-8g-10362 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Apr 1 00:55:44 prd-ubuntu20-04-docker-8c-8g-10362 sudo: pam_unix(sudo:session): session closed for user root Apr 1 00:56:01 prd-ubuntu20-04-docker-8c-8g-10362 CRON[14779]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 1 00:56:01 prd-ubuntu20-04-docker-8c-8g-10362 CRON[14779]: pam_unix(cron:session): session closed for user root Apr 1 00:57:01 prd-ubuntu20-04-docker-8c-8g-10362 CRON[15593]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 1 00:57:01 prd-ubuntu20-04-docker-8c-8g-10362 CRON[15593]: pam_unix(cron:session): session closed for user root Apr 1 00:58:01 prd-ubuntu20-04-docker-8c-8g-10362 CRON[15598]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 1 00:58:01 prd-ubuntu20-04-docker-8c-8g-10362 CRON[15598]: pam_unix(cron:session): session closed for user root Apr 1 00:59:01 prd-ubuntu20-04-docker-8c-8g-10362 CRON[15614]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 1 00:59:01 prd-ubuntu20-04-docker-8c-8g-10362 CRON[15614]: pam_unix(cron:session): session closed for user root Apr 1 01:00:01 prd-ubuntu20-04-docker-8c-8g-10362 CRON[15618]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 1 01:00:01 prd-ubuntu20-04-docker-8c-8g-10362 CRON[15618]: pam_unix(cron:session): session closed for user root Apr 1 01:01:01 prd-ubuntu20-04-docker-8c-8g-10362 CRON[15622]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 1 01:01:01 prd-ubuntu20-04-docker-8c-8g-10362 CRON[15622]: pam_unix(cron:session): session closed for user root Apr 1 01:02:01 prd-ubuntu20-04-docker-8c-8g-10362 CRON[15626]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 1 01:02:01 prd-ubuntu20-04-docker-8c-8g-10362 CRON[15626]: pam_unix(cron:session): session closed for user root Apr 1 01:03:01 prd-ubuntu20-04-docker-8c-8g-10362 CRON[15638]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 1 01:03:01 prd-ubuntu20-04-docker-8c-8g-10362 CRON[15638]: pam_unix(cron:session): session closed for user root Apr 1 01:04:01 prd-ubuntu20-04-docker-8c-8g-10362 CRON[15654]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 1 01:04:01 prd-ubuntu20-04-docker-8c-8g-10362 CRON[15654]: pam_unix(cron:session): session closed for user root Apr 1 01:05:01 prd-ubuntu20-04-docker-8c-8g-10362 CRON[15658]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 1 01:05:01 prd-ubuntu20-04-docker-8c-8g-10362 CRON[15658]: pam_unix(cron:session): session closed for user root Apr 1 01:05:12 prd-ubuntu20-04-docker-8c-8g-10362 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/foundry_device-virtual-go_PR-272 ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins /w/workspace/foundry_device-virtual-go_PR-272/archives Apr 1 01:05:12 prd-ubuntu20-04-docker-8c-8g-10362 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Apr 1 01:05:12 prd-ubuntu20-04-docker-8c-8g-10362 sudo: pam_unix(sudo:session): session closed for user root