Aug 4 09:19:20 prd-ubuntu20-04-docker-8c-8g-21925 passwd[739]: password for 'ubuntu' changed by 'root' Aug 4 09:19:20 prd-ubuntu20-04-docker-8c-8g-21925 sshd[826]: Server listening on 0.0.0.0 port 22. Aug 4 09:19:20 prd-ubuntu20-04-docker-8c-8g-21925 sshd[826]: Server listening on :: port 22. Aug 4 09:19:20 prd-ubuntu20-04-docker-8c-8g-21925 systemd-logind[799]: Watching system buttons on /dev/input/event0 (Power Button) Aug 4 09:19:20 prd-ubuntu20-04-docker-8c-8g-21925 systemd-logind[799]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Aug 4 09:19:20 prd-ubuntu20-04-docker-8c-8g-21925 systemd-logind[799]: New seat seat0. Aug 4 09:19:21 prd-ubuntu20-04-docker-8c-8g-21925 sshd[920]: error: kex_exchange_identification: Connection closed by remote host Aug 4 09:19:30 prd-ubuntu20-04-docker-8c-8g-21925 sshd[1370]: Invalid user jenkins from 10.30.120.5 port 36036 Aug 4 09:19:30 prd-ubuntu20-04-docker-8c-8g-21925 sshd[1370]: Received disconnect from 10.30.120.5 port 36036:11: Closed due to user request. [preauth] Aug 4 09:19:30 prd-ubuntu20-04-docker-8c-8g-21925 sshd[1370]: Disconnected from invalid user jenkins 10.30.120.5 port 36036 [preauth] Aug 4 09:19:30 prd-ubuntu20-04-docker-8c-8g-21925 systemd-logind[799]: Watching system buttons on /dev/input/event0 (Power Button) Aug 4 09:19:30 prd-ubuntu20-04-docker-8c-8g-21925 systemd-logind[799]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Aug 4 09:19:32 prd-ubuntu20-04-docker-8c-8g-21925 sshd[1579]: Invalid user jenkins from 10.30.120.5 port 36044 Aug 4 09:19:32 prd-ubuntu20-04-docker-8c-8g-21925 sshd[1579]: Received disconnect from 10.30.120.5 port 36044:11: Closed due to user request. [preauth] Aug 4 09:19:32 prd-ubuntu20-04-docker-8c-8g-21925 sshd[1579]: Disconnected from invalid user jenkins 10.30.120.5 port 36044 [preauth] Aug 4 09:19:34 prd-ubuntu20-04-docker-8c-8g-21925 sshd[1585]: Invalid user jenkins from 10.30.120.5 port 36046 Aug 4 09:19:34 prd-ubuntu20-04-docker-8c-8g-21925 sshd[1585]: Received disconnect from 10.30.120.5 port 36046:11: Closed due to user request. [preauth] Aug 4 09:19:34 prd-ubuntu20-04-docker-8c-8g-21925 sshd[1585]: Disconnected from invalid user jenkins 10.30.120.5 port 36046 [preauth] Aug 4 09:19:36 prd-ubuntu20-04-docker-8c-8g-21925 sshd[1587]: Invalid user jenkins from 10.30.120.5 port 36048 Aug 4 09:19:36 prd-ubuntu20-04-docker-8c-8g-21925 sshd[1587]: Received disconnect from 10.30.120.5 port 36048:11: Closed due to user request. [preauth] Aug 4 09:19:36 prd-ubuntu20-04-docker-8c-8g-21925 sshd[1587]: Disconnected from invalid user jenkins 10.30.120.5 port 36048 [preauth] Aug 4 09:19:38 prd-ubuntu20-04-docker-8c-8g-21925 sshd[1732]: Invalid user jenkins from 10.30.120.5 port 36050 Aug 4 09:19:38 prd-ubuntu20-04-docker-8c-8g-21925 sshd[1732]: Received disconnect from 10.30.120.5 port 36050:11: Closed due to user request. [preauth] Aug 4 09:19:38 prd-ubuntu20-04-docker-8c-8g-21925 sshd[1732]: Disconnected from invalid user jenkins 10.30.120.5 port 36050 [preauth] Aug 4 09:19:41 prd-ubuntu20-04-docker-8c-8g-21925 sshd[2015]: Invalid user jenkins from 10.30.120.5 port 36054 Aug 4 09:19:41 prd-ubuntu20-04-docker-8c-8g-21925 sshd[2015]: Received disconnect from 10.30.120.5 port 36054:11: Closed due to user request. [preauth] Aug 4 09:19:41 prd-ubuntu20-04-docker-8c-8g-21925 sshd[2015]: Disconnected from invalid user jenkins 10.30.120.5 port 36054 [preauth] Aug 4 09:19:43 prd-ubuntu20-04-docker-8c-8g-21925 sshd[2148]: Invalid user jenkins from 10.30.120.5 port 36056 Aug 4 09:19:43 prd-ubuntu20-04-docker-8c-8g-21925 sshd[2148]: Received disconnect from 10.30.120.5 port 36056:11: Closed due to user request. [preauth] Aug 4 09:19:43 prd-ubuntu20-04-docker-8c-8g-21925 sshd[2148]: Disconnected from invalid user jenkins 10.30.120.5 port 36056 [preauth] Aug 4 09:19:45 prd-ubuntu20-04-docker-8c-8g-21925 useradd[2309]: new group: name=jenkins, GID=1001 Aug 4 09:19:45 prd-ubuntu20-04-docker-8c-8g-21925 useradd[2309]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash, from=none Aug 4 09:19:45 prd-ubuntu20-04-docker-8c-8g-21925 usermod[2319]: add 'jenkins' to group 'docker' Aug 4 09:19:45 prd-ubuntu20-04-docker-8c-8g-21925 usermod[2319]: add 'jenkins' to shadow group 'docker' Aug 4 09:19:46 prd-ubuntu20-04-docker-8c-8g-21925 sshd[2356]: Accepted publickey for jenkins from 10.30.120.5 port 36058 ssh2: RSA SHA256:aPmPdMw/h9M56P/o8xjsZcdBWoRKGeie6FPOwnlsRmU Aug 4 09:19:46 prd-ubuntu20-04-docker-8c-8g-21925 sshd[2356]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Aug 4 09:19:46 prd-ubuntu20-04-docker-8c-8g-21925 systemd-logind[799]: New session 1 of user jenkins. Aug 4 09:19:46 prd-ubuntu20-04-docker-8c-8g-21925 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Aug 4 09:20:02 prd-ubuntu20-04-docker-8c-8g-21925 CRON[2995]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 4 09:20:02 prd-ubuntu20-04-docker-8c-8g-21925 CRON[2995]: pam_unix(cron:session): session closed for user root Aug 4 09:20:02 prd-ubuntu20-04-docker-8c-8g-21925 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/foundry_device-virtual-go_PR-298 ; USER=root ; COMMAND=/usr/bin/mv /tmp/ssh_known_hosts /etc/ssh/ssh_known_hosts Aug 4 09:20:02 prd-ubuntu20-04-docker-8c-8g-21925 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Aug 4 09:20:02 prd-ubuntu20-04-docker-8c-8g-21925 sudo: pam_unix(sudo:session): session closed for user root Aug 4 09:20:02 prd-ubuntu20-04-docker-8c-8g-21925 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/foundry_device-virtual-go_PR-298 ; USER=root ; COMMAND=/usr/bin/tee -a /etc/ssh/ssh_known_hosts Aug 4 09:20:02 prd-ubuntu20-04-docker-8c-8g-21925 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Aug 4 09:20:02 prd-ubuntu20-04-docker-8c-8g-21925 sudo: pam_unix(sudo:session): session closed for user root Aug 4 09:20:15 prd-ubuntu20-04-docker-8c-8g-21925 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/foundry_device-virtual-go_PR-298 ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins .semver Aug 4 09:20:15 prd-ubuntu20-04-docker-8c-8g-21925 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Aug 4 09:20:15 prd-ubuntu20-04-docker-8c-8g-21925 sudo: pam_unix(sudo:session): session closed for user root Aug 4 09:21:01 prd-ubuntu20-04-docker-8c-8g-21925 CRON[7102]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 4 09:21:01 prd-ubuntu20-04-docker-8c-8g-21925 CRON[7102]: pam_unix(cron:session): session closed for user root Aug 4 09:21:20 prd-ubuntu20-04-docker-8c-8g-21925 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/foundry_device-virtual-go_PR-298 ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins . Aug 4 09:21:20 prd-ubuntu20-04-docker-8c-8g-21925 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Aug 4 09:21:20 prd-ubuntu20-04-docker-8c-8g-21925 sudo: pam_unix(sudo:session): session closed for user root Aug 4 09:21:20 prd-ubuntu20-04-docker-8c-8g-21925 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/foundry_device-virtual-go_PR-298 ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins . Aug 4 09:21:20 prd-ubuntu20-04-docker-8c-8g-21925 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Aug 4 09:21:20 prd-ubuntu20-04-docker-8c-8g-21925 sudo: pam_unix(sudo:session): session closed for user root Aug 4 09:22:01 prd-ubuntu20-04-docker-8c-8g-21925 CRON[17239]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 4 09:22:01 prd-ubuntu20-04-docker-8c-8g-21925 CRON[17239]: pam_unix(cron:session): session closed for user root Aug 4 09:23:01 prd-ubuntu20-04-docker-8c-8g-21925 CRON[17520]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 4 09:23:01 prd-ubuntu20-04-docker-8c-8g-21925 CRON[17520]: pam_unix(cron:session): session closed for user root Aug 4 09:24:01 prd-ubuntu20-04-docker-8c-8g-21925 CRON[17526]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 4 09:24:01 prd-ubuntu20-04-docker-8c-8g-21925 CRON[17526]: pam_unix(cron:session): session closed for user root Aug 4 09:25:01 prd-ubuntu20-04-docker-8c-8g-21925 CRON[17536]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 4 09:25:01 prd-ubuntu20-04-docker-8c-8g-21925 CRON[17536]: pam_unix(cron:session): session closed for user root Aug 4 09:26:01 prd-ubuntu20-04-docker-8c-8g-21925 CRON[17540]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 4 09:26:01 prd-ubuntu20-04-docker-8c-8g-21925 CRON[17540]: pam_unix(cron:session): session closed for user root Aug 4 09:27:01 prd-ubuntu20-04-docker-8c-8g-21925 CRON[17543]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 4 09:27:01 prd-ubuntu20-04-docker-8c-8g-21925 CRON[17543]: pam_unix(cron:session): session closed for user root Aug 4 09:28:01 prd-ubuntu20-04-docker-8c-8g-21925 CRON[17547]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 4 09:28:01 prd-ubuntu20-04-docker-8c-8g-21925 CRON[17547]: pam_unix(cron:session): session closed for user root Aug 4 09:29:01 prd-ubuntu20-04-docker-8c-8g-21925 CRON[17579]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 4 09:29:01 prd-ubuntu20-04-docker-8c-8g-21925 CRON[17579]: pam_unix(cron:session): session closed for user root Aug 4 09:29:03 prd-ubuntu20-04-docker-8c-8g-21925 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/foundry_device-virtual-go_PR-298 ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins /w/workspace/foundry_device-virtual-go_PR-298/archives Aug 4 09:29:03 prd-ubuntu20-04-docker-8c-8g-21925 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Aug 4 09:29:03 prd-ubuntu20-04-docker-8c-8g-21925 sudo: pam_unix(sudo:session): session closed for user root