Sep 15 22:00:39 prd-ubuntu20-04-docker-8c-8g-29310 passwd[740]: password for 'ubuntu' changed by 'root' Sep 15 22:00:39 prd-ubuntu20-04-docker-8c-8g-29310 systemd-logind[795]: Watching system buttons on /dev/input/event0 (Power Button) Sep 15 22:00:39 prd-ubuntu20-04-docker-8c-8g-29310 systemd-logind[795]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Sep 15 22:00:39 prd-ubuntu20-04-docker-8c-8g-29310 sshd[816]: Server listening on 0.0.0.0 port 22. Sep 15 22:00:39 prd-ubuntu20-04-docker-8c-8g-29310 sshd[816]: Server listening on :: port 22. Sep 15 22:00:39 prd-ubuntu20-04-docker-8c-8g-29310 systemd-logind[795]: New seat seat0. Sep 15 22:00:40 prd-ubuntu20-04-docker-8c-8g-29310 sshd[906]: error: kex_exchange_identification: Connection closed by remote host Sep 15 22:00:40 prd-ubuntu20-04-docker-8c-8g-29310 sshd[912]: Invalid user jenkins from 10.30.120.5 port 56306 Sep 15 22:00:40 prd-ubuntu20-04-docker-8c-8g-29310 sshd[912]: Received disconnect from 10.30.120.5 port 56306:11: Closed due to user request. [preauth] Sep 15 22:00:40 prd-ubuntu20-04-docker-8c-8g-29310 sshd[912]: Disconnected from invalid user jenkins 10.30.120.5 port 56306 [preauth] Sep 15 22:00:43 prd-ubuntu20-04-docker-8c-8g-29310 sshd[1021]: Invalid user jenkins from 10.30.120.5 port 56308 Sep 15 22:00:43 prd-ubuntu20-04-docker-8c-8g-29310 sshd[1021]: Received disconnect from 10.30.120.5 port 56308:11: Closed due to user request. [preauth] Sep 15 22:00:43 prd-ubuntu20-04-docker-8c-8g-29310 sshd[1021]: Disconnected from invalid user jenkins 10.30.120.5 port 56308 [preauth] Sep 15 22:00:45 prd-ubuntu20-04-docker-8c-8g-29310 sshd[1023]: Invalid user jenkins from 10.30.120.5 port 56310 Sep 15 22:00:45 prd-ubuntu20-04-docker-8c-8g-29310 sshd[1023]: Received disconnect from 10.30.120.5 port 56310:11: Closed due to user request. [preauth] Sep 15 22:00:45 prd-ubuntu20-04-docker-8c-8g-29310 sshd[1023]: Disconnected from invalid user jenkins 10.30.120.5 port 56310 [preauth] Sep 15 22:00:47 prd-ubuntu20-04-docker-8c-8g-29310 sshd[1025]: Invalid user jenkins from 10.30.120.5 port 56312 Sep 15 22:00:47 prd-ubuntu20-04-docker-8c-8g-29310 sshd[1025]: Received disconnect from 10.30.120.5 port 56312:11: Closed due to user request. [preauth] Sep 15 22:00:47 prd-ubuntu20-04-docker-8c-8g-29310 sshd[1025]: Disconnected from invalid user jenkins 10.30.120.5 port 56312 [preauth] Sep 15 22:00:49 prd-ubuntu20-04-docker-8c-8g-29310 sshd[1034]: Invalid user jenkins from 10.30.120.5 port 56314 Sep 15 22:00:49 prd-ubuntu20-04-docker-8c-8g-29310 sshd[1034]: Received disconnect from 10.30.120.5 port 56314:11: Closed due to user request. [preauth] Sep 15 22:00:49 prd-ubuntu20-04-docker-8c-8g-29310 sshd[1034]: Disconnected from invalid user jenkins 10.30.120.5 port 56314 [preauth] Sep 15 22:00:51 prd-ubuntu20-04-docker-8c-8g-29310 sshd[1199]: Invalid user jenkins from 10.30.120.5 port 56316 Sep 15 22:00:51 prd-ubuntu20-04-docker-8c-8g-29310 sshd[1199]: Received disconnect from 10.30.120.5 port 56316:11: Closed due to user request. [preauth] Sep 15 22:00:51 prd-ubuntu20-04-docker-8c-8g-29310 sshd[1199]: Disconnected from invalid user jenkins 10.30.120.5 port 56316 [preauth] Sep 15 22:00:53 prd-ubuntu20-04-docker-8c-8g-29310 sshd[1228]: Invalid user jenkins from 10.30.120.5 port 56318 Sep 15 22:00:53 prd-ubuntu20-04-docker-8c-8g-29310 sshd[1228]: Received disconnect from 10.30.120.5 port 56318:11: Closed due to user request. [preauth] Sep 15 22:00:53 prd-ubuntu20-04-docker-8c-8g-29310 sshd[1228]: Disconnected from invalid user jenkins 10.30.120.5 port 56318 [preauth] Sep 15 22:00:55 prd-ubuntu20-04-docker-8c-8g-29310 systemd-logind[795]: Watching system buttons on /dev/input/event0 (Power Button) Sep 15 22:00:55 prd-ubuntu20-04-docker-8c-8g-29310 systemd-logind[795]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Sep 15 22:00:55 prd-ubuntu20-04-docker-8c-8g-29310 sshd[1423]: Invalid user jenkins from 10.30.120.5 port 56322 Sep 15 22:00:55 prd-ubuntu20-04-docker-8c-8g-29310 sshd[1423]: Received disconnect from 10.30.120.5 port 56322:11: Closed due to user request. [preauth] Sep 15 22:00:55 prd-ubuntu20-04-docker-8c-8g-29310 sshd[1423]: Disconnected from invalid user jenkins 10.30.120.5 port 56322 [preauth] Sep 15 22:00:58 prd-ubuntu20-04-docker-8c-8g-29310 sshd[1599]: Invalid user jenkins from 10.30.120.5 port 56326 Sep 15 22:00:58 prd-ubuntu20-04-docker-8c-8g-29310 sshd[1599]: Received disconnect from 10.30.120.5 port 56326:11: Closed due to user request. [preauth] Sep 15 22:00:58 prd-ubuntu20-04-docker-8c-8g-29310 sshd[1599]: Disconnected from invalid user jenkins 10.30.120.5 port 56326 [preauth] Sep 15 22:01:00 prd-ubuntu20-04-docker-8c-8g-29310 sshd[1603]: Invalid user jenkins from 10.30.120.5 port 56328 Sep 15 22:01:00 prd-ubuntu20-04-docker-8c-8g-29310 sshd[1603]: Received disconnect from 10.30.120.5 port 56328:11: Closed due to user request. [preauth] Sep 15 22:01:00 prd-ubuntu20-04-docker-8c-8g-29310 sshd[1603]: Disconnected from invalid user jenkins 10.30.120.5 port 56328 [preauth] Sep 15 22:01:01 prd-ubuntu20-04-docker-8c-8g-29310 CRON[1791]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 15 22:01:01 prd-ubuntu20-04-docker-8c-8g-29310 CRON[1791]: pam_unix(cron:session): session closed for user root Sep 15 22:01:02 prd-ubuntu20-04-docker-8c-8g-29310 sshd[1887]: Invalid user jenkins from 10.30.120.5 port 56336 Sep 15 22:01:02 prd-ubuntu20-04-docker-8c-8g-29310 sshd[1887]: Received disconnect from 10.30.120.5 port 56336:11: Closed due to user request. [preauth] Sep 15 22:01:02 prd-ubuntu20-04-docker-8c-8g-29310 sshd[1887]: Disconnected from invalid user jenkins 10.30.120.5 port 56336 [preauth] Sep 15 22:01:04 prd-ubuntu20-04-docker-8c-8g-29310 sshd[2146]: Invalid user jenkins from 10.30.120.5 port 56338 Sep 15 22:01:04 prd-ubuntu20-04-docker-8c-8g-29310 sshd[2146]: Received disconnect from 10.30.120.5 port 56338:11: Closed due to user request. [preauth] Sep 15 22:01:04 prd-ubuntu20-04-docker-8c-8g-29310 sshd[2146]: Disconnected from invalid user jenkins 10.30.120.5 port 56338 [preauth] Sep 15 22:01:06 prd-ubuntu20-04-docker-8c-8g-29310 sshd[2308]: Invalid user jenkins from 10.30.120.5 port 56340 Sep 15 22:01:06 prd-ubuntu20-04-docker-8c-8g-29310 sshd[2308]: Received disconnect from 10.30.120.5 port 56340:11: Closed due to user request. [preauth] Sep 15 22:01:06 prd-ubuntu20-04-docker-8c-8g-29310 sshd[2308]: Disconnected from invalid user jenkins 10.30.120.5 port 56340 [preauth] Sep 15 22:01:08 prd-ubuntu20-04-docker-8c-8g-29310 sshd[2342]: Invalid user jenkins from 10.30.120.5 port 56342 Sep 15 22:01:08 prd-ubuntu20-04-docker-8c-8g-29310 sshd[2342]: Received disconnect from 10.30.120.5 port 56342:11: Closed due to user request. [preauth] Sep 15 22:01:08 prd-ubuntu20-04-docker-8c-8g-29310 sshd[2342]: Disconnected from invalid user jenkins 10.30.120.5 port 56342 [preauth] Sep 15 22:01:10 prd-ubuntu20-04-docker-8c-8g-29310 useradd[2366]: new group: name=jenkins, GID=1001 Sep 15 22:01:10 prd-ubuntu20-04-docker-8c-8g-29310 useradd[2366]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash, from=none Sep 15 22:01:10 prd-ubuntu20-04-docker-8c-8g-29310 usermod[2376]: add 'jenkins' to group 'docker' Sep 15 22:01:10 prd-ubuntu20-04-docker-8c-8g-29310 usermod[2376]: add 'jenkins' to shadow group 'docker' Sep 15 22:01:10 prd-ubuntu20-04-docker-8c-8g-29310 sshd[2413]: Accepted publickey for jenkins from 10.30.120.5 port 56346 ssh2: RSA SHA256:aPmPdMw/h9M56P/o8xjsZcdBWoRKGeie6FPOwnlsRmU Sep 15 22:01:10 prd-ubuntu20-04-docker-8c-8g-29310 sshd[2413]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Sep 15 22:01:10 prd-ubuntu20-04-docker-8c-8g-29310 systemd-logind[795]: New session 2 of user jenkins. Sep 15 22:01:10 prd-ubuntu20-04-docker-8c-8g-29310 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Sep 15 22:01:52 prd-ubuntu20-04-docker-8c-8g-29310 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/exfoundry_device-virtual-go_main ; USER=root ; COMMAND=/usr/bin/mv /tmp/ssh_known_hosts /etc/ssh/ssh_known_hosts Sep 15 22:01:52 prd-ubuntu20-04-docker-8c-8g-29310 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Sep 15 22:01:52 prd-ubuntu20-04-docker-8c-8g-29310 sudo: pam_unix(sudo:session): session closed for user root Sep 15 22:01:52 prd-ubuntu20-04-docker-8c-8g-29310 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/exfoundry_device-virtual-go_main ; USER=root ; COMMAND=/usr/bin/tee -a /etc/ssh/ssh_known_hosts Sep 15 22:01:52 prd-ubuntu20-04-docker-8c-8g-29310 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Sep 15 22:01:52 prd-ubuntu20-04-docker-8c-8g-29310 sudo: pam_unix(sudo:session): session closed for user root Sep 15 22:02:01 prd-ubuntu20-04-docker-8c-8g-29310 CRON[3545]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 15 22:02:01 prd-ubuntu20-04-docker-8c-8g-29310 CRON[3545]: pam_unix(cron:session): session closed for user root Sep 15 22:02:05 prd-ubuntu20-04-docker-8c-8g-29310 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/exfoundry_device-virtual-go_main ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins .semver Sep 15 22:02:05 prd-ubuntu20-04-docker-8c-8g-29310 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Sep 15 22:02:05 prd-ubuntu20-04-docker-8c-8g-29310 sudo: pam_unix(sudo:session): session closed for user root Sep 15 22:03:01 prd-ubuntu20-04-docker-8c-8g-29310 CRON[12487]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 15 22:03:01 prd-ubuntu20-04-docker-8c-8g-29310 CRON[12487]: pam_unix(cron:session): session closed for user root Sep 15 22:03:03 prd-ubuntu20-04-docker-8c-8g-29310 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/exfoundry_device-virtual-go_main ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins . Sep 15 22:03:03 prd-ubuntu20-04-docker-8c-8g-29310 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Sep 15 22:03:03 prd-ubuntu20-04-docker-8c-8g-29310 sudo: pam_unix(sudo:session): session closed for user root Sep 15 22:03:03 prd-ubuntu20-04-docker-8c-8g-29310 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/exfoundry_device-virtual-go_main ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins . Sep 15 22:03:03 prd-ubuntu20-04-docker-8c-8g-29310 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Sep 15 22:03:03 prd-ubuntu20-04-docker-8c-8g-29310 sudo: pam_unix(sudo:session): session closed for user root Sep 15 22:04:01 prd-ubuntu20-04-docker-8c-8g-29310 CRON[18013]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 15 22:04:01 prd-ubuntu20-04-docker-8c-8g-29310 CRON[18013]: pam_unix(cron:session): session closed for user root Sep 15 22:05:01 prd-ubuntu20-04-docker-8c-8g-29310 CRON[18018]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 15 22:05:01 prd-ubuntu20-04-docker-8c-8g-29310 CRON[18018]: pam_unix(cron:session): session closed for user root Sep 15 22:06:01 prd-ubuntu20-04-docker-8c-8g-29310 CRON[18024]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 15 22:06:01 prd-ubuntu20-04-docker-8c-8g-29310 CRON[18024]: pam_unix(cron:session): session closed for user root Sep 15 22:07:01 prd-ubuntu20-04-docker-8c-8g-29310 CRON[18039]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 15 22:07:01 prd-ubuntu20-04-docker-8c-8g-29310 CRON[18039]: pam_unix(cron:session): session closed for user root Sep 15 22:08:01 prd-ubuntu20-04-docker-8c-8g-29310 CRON[18043]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 15 22:08:01 prd-ubuntu20-04-docker-8c-8g-29310 CRON[18043]: pam_unix(cron:session): session closed for user root Sep 15 22:09:01 prd-ubuntu20-04-docker-8c-8g-29310 CRON[18052]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 15 22:09:01 prd-ubuntu20-04-docker-8c-8g-29310 CRON[18052]: pam_unix(cron:session): session closed for user root Sep 15 22:10:01 prd-ubuntu20-04-docker-8c-8g-29310 CRON[18055]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 15 22:10:01 prd-ubuntu20-04-docker-8c-8g-29310 CRON[18055]: pam_unix(cron:session): session closed for user root Sep 15 22:11:01 prd-ubuntu20-04-docker-8c-8g-29310 CRON[18069]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 15 22:11:01 prd-ubuntu20-04-docker-8c-8g-29310 CRON[18069]: pam_unix(cron:session): session closed for user root Sep 15 22:12:01 prd-ubuntu20-04-docker-8c-8g-29310 CRON[18072]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 15 22:12:01 prd-ubuntu20-04-docker-8c-8g-29310 CRON[18072]: pam_unix(cron:session): session closed for user root Sep 15 22:13:01 prd-ubuntu20-04-docker-8c-8g-29310 CRON[18076]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 15 22:13:01 prd-ubuntu20-04-docker-8c-8g-29310 CRON[18076]: pam_unix(cron:session): session closed for user root Sep 15 22:14:01 prd-ubuntu20-04-docker-8c-8g-29310 CRON[20052]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 15 22:14:01 prd-ubuntu20-04-docker-8c-8g-29310 CRON[20052]: pam_unix(cron:session): session closed for user root Sep 15 22:14:10 prd-ubuntu20-04-docker-8c-8g-29310 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/exfoundry_device-virtual-go_main ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins /w/workspace/exfoundry_device-virtual-go_main/archives Sep 15 22:14:10 prd-ubuntu20-04-docker-8c-8g-29310 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Sep 15 22:14:10 prd-ubuntu20-04-docker-8c-8g-29310 sudo: pam_unix(sudo:session): session closed for user root