Feb 24 22:56:38 prd-ubuntu20-04-docker-8c-8g-39643 passwd[752]: password for 'ubuntu' changed by 'root' Feb 24 22:56:38 prd-ubuntu20-04-docker-8c-8g-39643 sshd[834]: Server listening on 0.0.0.0 port 22. Feb 24 22:56:38 prd-ubuntu20-04-docker-8c-8g-39643 sshd[834]: Server listening on :: port 22. Feb 24 22:56:38 prd-ubuntu20-04-docker-8c-8g-39643 systemd-logind[817]: New seat seat0. Feb 24 22:56:38 prd-ubuntu20-04-docker-8c-8g-39643 systemd-logind[817]: Watching system buttons on /dev/input/event0 (Power Button) Feb 24 22:56:38 prd-ubuntu20-04-docker-8c-8g-39643 systemd-logind[817]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Feb 24 22:56:43 prd-ubuntu20-04-docker-8c-8g-39643 sshd[1016]: error: kex_exchange_identification: Connection closed by remote host Feb 24 22:56:44 prd-ubuntu20-04-docker-8c-8g-39643 sshd[1031]: Invalid user jenkins from 10.30.120.5 port 57312 Feb 24 22:56:44 prd-ubuntu20-04-docker-8c-8g-39643 sshd[1031]: Received disconnect from 10.30.120.5 port 57312:11: Closed due to user request. [preauth] Feb 24 22:56:44 prd-ubuntu20-04-docker-8c-8g-39643 sshd[1031]: Disconnected from invalid user jenkins 10.30.120.5 port 57312 [preauth] Feb 24 22:56:46 prd-ubuntu20-04-docker-8c-8g-39643 sshd[1034]: Invalid user jenkins from 10.30.120.5 port 57332 Feb 24 22:56:46 prd-ubuntu20-04-docker-8c-8g-39643 sshd[1034]: Received disconnect from 10.30.120.5 port 57332:11: Closed due to user request. [preauth] Feb 24 22:56:46 prd-ubuntu20-04-docker-8c-8g-39643 sshd[1034]: Disconnected from invalid user jenkins 10.30.120.5 port 57332 [preauth] Feb 24 22:56:48 prd-ubuntu20-04-docker-8c-8g-39643 sshd[1036]: Invalid user jenkins from 10.30.120.5 port 57352 Feb 24 22:56:48 prd-ubuntu20-04-docker-8c-8g-39643 sshd[1036]: Received disconnect from 10.30.120.5 port 57352:11: Closed due to user request. [preauth] Feb 24 22:56:48 prd-ubuntu20-04-docker-8c-8g-39643 sshd[1036]: Disconnected from invalid user jenkins 10.30.120.5 port 57352 [preauth] Feb 24 22:56:50 prd-ubuntu20-04-docker-8c-8g-39643 sshd[1038]: Invalid user jenkins from 10.30.120.5 port 57376 Feb 24 22:56:51 prd-ubuntu20-04-docker-8c-8g-39643 sshd[1038]: Received disconnect from 10.30.120.5 port 57376:11: Closed due to user request. [preauth] Feb 24 22:56:51 prd-ubuntu20-04-docker-8c-8g-39643 sshd[1038]: Disconnected from invalid user jenkins 10.30.120.5 port 57376 [preauth] Feb 24 22:56:53 prd-ubuntu20-04-docker-8c-8g-39643 sshd[1040]: Invalid user jenkins from 10.30.120.5 port 57392 Feb 24 22:56:53 prd-ubuntu20-04-docker-8c-8g-39643 sshd[1040]: Received disconnect from 10.30.120.5 port 57392:11: Closed due to user request. [preauth] Feb 24 22:56:53 prd-ubuntu20-04-docker-8c-8g-39643 sshd[1040]: Disconnected from invalid user jenkins 10.30.120.5 port 57392 [preauth] Feb 24 22:56:55 prd-ubuntu20-04-docker-8c-8g-39643 sshd[1042]: Invalid user jenkins from 10.30.120.5 port 57422 Feb 24 22:56:55 prd-ubuntu20-04-docker-8c-8g-39643 sshd[1042]: Received disconnect from 10.30.120.5 port 57422:11: Closed due to user request. [preauth] Feb 24 22:56:55 prd-ubuntu20-04-docker-8c-8g-39643 sshd[1042]: Disconnected from invalid user jenkins 10.30.120.5 port 57422 [preauth] Feb 24 22:56:57 prd-ubuntu20-04-docker-8c-8g-39643 sshd[1044]: Invalid user jenkins from 10.30.120.5 port 57440 Feb 24 22:56:57 prd-ubuntu20-04-docker-8c-8g-39643 sshd[1044]: Received disconnect from 10.30.120.5 port 57440:11: Closed due to user request. [preauth] Feb 24 22:56:57 prd-ubuntu20-04-docker-8c-8g-39643 sshd[1044]: Disconnected from invalid user jenkins 10.30.120.5 port 57440 [preauth] Feb 24 22:56:59 prd-ubuntu20-04-docker-8c-8g-39643 sshd[1046]: Invalid user jenkins from 10.30.120.5 port 57464 Feb 24 22:56:59 prd-ubuntu20-04-docker-8c-8g-39643 sshd[1046]: Received disconnect from 10.30.120.5 port 57464:11: Closed due to user request. [preauth] Feb 24 22:56:59 prd-ubuntu20-04-docker-8c-8g-39643 sshd[1046]: Disconnected from invalid user jenkins 10.30.120.5 port 57464 [preauth] Feb 24 22:57:01 prd-ubuntu20-04-docker-8c-8g-39643 CRON[1060]: pam_unix(cron:session): session opened for user root by (uid=0) Feb 24 22:57:01 prd-ubuntu20-04-docker-8c-8g-39643 CRON[1060]: pam_unix(cron:session): session closed for user root Feb 24 22:57:01 prd-ubuntu20-04-docker-8c-8g-39643 sshd[1064]: Invalid user jenkins from 10.30.120.5 port 57482 Feb 24 22:57:01 prd-ubuntu20-04-docker-8c-8g-39643 sshd[1064]: Received disconnect from 10.30.120.5 port 57482:11: Closed due to user request. [preauth] Feb 24 22:57:01 prd-ubuntu20-04-docker-8c-8g-39643 sshd[1064]: Disconnected from invalid user jenkins 10.30.120.5 port 57482 [preauth] Feb 24 22:57:04 prd-ubuntu20-04-docker-8c-8g-39643 sshd[1214]: Invalid user jenkins from 10.30.120.5 port 57504 Feb 24 22:57:04 prd-ubuntu20-04-docker-8c-8g-39643 sshd[1214]: Received disconnect from 10.30.120.5 port 57504:11: Closed due to user request. [preauth] Feb 24 22:57:04 prd-ubuntu20-04-docker-8c-8g-39643 sshd[1214]: Disconnected from invalid user jenkins 10.30.120.5 port 57504 [preauth] Feb 24 22:57:06 prd-ubuntu20-04-docker-8c-8g-39643 sshd[1230]: Invalid user jenkins from 10.30.120.5 port 57532 Feb 24 22:57:06 prd-ubuntu20-04-docker-8c-8g-39643 sshd[1230]: Received disconnect from 10.30.120.5 port 57532:11: Closed due to user request. [preauth] Feb 24 22:57:06 prd-ubuntu20-04-docker-8c-8g-39643 sshd[1230]: Disconnected from invalid user jenkins 10.30.120.5 port 57532 [preauth] Feb 24 22:57:08 prd-ubuntu20-04-docker-8c-8g-39643 sshd[1264]: Invalid user jenkins from 10.30.120.5 port 57556 Feb 24 22:57:08 prd-ubuntu20-04-docker-8c-8g-39643 sshd[1264]: Received disconnect from 10.30.120.5 port 57556:11: Closed due to user request. [preauth] Feb 24 22:57:08 prd-ubuntu20-04-docker-8c-8g-39643 sshd[1264]: Disconnected from invalid user jenkins 10.30.120.5 port 57556 [preauth] Feb 24 22:57:10 prd-ubuntu20-04-docker-8c-8g-39643 sshd[1276]: Invalid user jenkins from 10.30.120.5 port 57574 Feb 24 22:57:10 prd-ubuntu20-04-docker-8c-8g-39643 sshd[1276]: Received disconnect from 10.30.120.5 port 57574:11: Closed due to user request. [preauth] Feb 24 22:57:10 prd-ubuntu20-04-docker-8c-8g-39643 sshd[1276]: Disconnected from invalid user jenkins 10.30.120.5 port 57574 [preauth] Feb 24 22:57:13 prd-ubuntu20-04-docker-8c-8g-39643 sshd[1278]: Invalid user jenkins from 10.30.120.5 port 57588 Feb 24 22:57:13 prd-ubuntu20-04-docker-8c-8g-39643 sshd[1278]: Received disconnect from 10.30.120.5 port 57588:11: Closed due to user request. [preauth] Feb 24 22:57:13 prd-ubuntu20-04-docker-8c-8g-39643 sshd[1278]: Disconnected from invalid user jenkins 10.30.120.5 port 57588 [preauth] Feb 24 22:57:15 prd-ubuntu20-04-docker-8c-8g-39643 sshd[1297]: Invalid user jenkins from 10.30.120.5 port 57608 Feb 24 22:57:15 prd-ubuntu20-04-docker-8c-8g-39643 sshd[1297]: Received disconnect from 10.30.120.5 port 57608:11: Closed due to user request. [preauth] Feb 24 22:57:15 prd-ubuntu20-04-docker-8c-8g-39643 sshd[1297]: Disconnected from invalid user jenkins 10.30.120.5 port 57608 [preauth] Feb 24 22:57:15 prd-ubuntu20-04-docker-8c-8g-39643 useradd[1310]: new group: name=jenkins, GID=1001 Feb 24 22:57:15 prd-ubuntu20-04-docker-8c-8g-39643 useradd[1310]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash, from=none Feb 24 22:57:15 prd-ubuntu20-04-docker-8c-8g-39643 usermod[1320]: add 'jenkins' to group 'docker' Feb 24 22:57:15 prd-ubuntu20-04-docker-8c-8g-39643 usermod[1320]: add 'jenkins' to shadow group 'docker' Feb 24 22:57:17 prd-ubuntu20-04-docker-8c-8g-39643 sshd[1357]: Accepted publickey for jenkins from 10.30.120.5 port 57638 ssh2: RSA SHA256:aPmPdMw/h9M56P/o8xjsZcdBWoRKGeie6FPOwnlsRmU Feb 24 22:57:17 prd-ubuntu20-04-docker-8c-8g-39643 sshd[1357]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Feb 24 22:57:17 prd-ubuntu20-04-docker-8c-8g-39643 systemd-logind[817]: New session 2 of user jenkins. Feb 24 22:57:17 prd-ubuntu20-04-docker-8c-8g-39643 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Feb 24 22:57:38 prd-ubuntu20-04-docker-8c-8g-39643 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/dry_app-functions-sdk-go_PR-1680 ; USER=root ; COMMAND=/usr/bin/mv /tmp/ssh_known_hosts /etc/ssh/ssh_known_hosts Feb 24 22:57:38 prd-ubuntu20-04-docker-8c-8g-39643 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Feb 24 22:57:38 prd-ubuntu20-04-docker-8c-8g-39643 sudo: pam_unix(sudo:session): session closed for user root Feb 24 22:57:38 prd-ubuntu20-04-docker-8c-8g-39643 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/dry_app-functions-sdk-go_PR-1680 ; USER=root ; COMMAND=/usr/bin/tee -a /etc/ssh/ssh_known_hosts Feb 24 22:57:38 prd-ubuntu20-04-docker-8c-8g-39643 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Feb 24 22:57:38 prd-ubuntu20-04-docker-8c-8g-39643 sudo: pam_unix(sudo:session): session closed for user root Feb 24 22:57:54 prd-ubuntu20-04-docker-8c-8g-39643 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/dry_app-functions-sdk-go_PR-1680 ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins .semver Feb 24 22:57:54 prd-ubuntu20-04-docker-8c-8g-39643 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Feb 24 22:57:55 prd-ubuntu20-04-docker-8c-8g-39643 sudo: pam_unix(sudo:session): session closed for user root Feb 24 22:58:02 prd-ubuntu20-04-docker-8c-8g-39643 CRON[2704]: pam_unix(cron:session): session opened for user root by (uid=0) Feb 24 22:58:02 prd-ubuntu20-04-docker-8c-8g-39643 CRON[2704]: pam_unix(cron:session): session closed for user root Feb 24 22:59:01 prd-ubuntu20-04-docker-8c-8g-39643 CRON[15017]: pam_unix(cron:session): session opened for user root by (uid=0) Feb 24 22:59:01 prd-ubuntu20-04-docker-8c-8g-39643 CRON[15017]: pam_unix(cron:session): session closed for user root Feb 24 23:00:01 prd-ubuntu20-04-docker-8c-8g-39643 CRON[28176]: pam_unix(cron:session): session opened for user root by (uid=0) Feb 24 23:00:01 prd-ubuntu20-04-docker-8c-8g-39643 CRON[28176]: pam_unix(cron:session): session closed for user root Feb 24 23:00:32 prd-ubuntu20-04-docker-8c-8g-39643 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/dry_app-functions-sdk-go_PR-1680 ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins . Feb 24 23:00:32 prd-ubuntu20-04-docker-8c-8g-39643 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Feb 24 23:00:32 prd-ubuntu20-04-docker-8c-8g-39643 sudo: pam_unix(sudo:session): session closed for user root Feb 24 23:01:00 prd-ubuntu20-04-docker-8c-8g-39643 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/dry_app-functions-sdk-go_PR-1680 ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins /w/workspace/dry_app-functions-sdk-go_PR-1680/archives Feb 24 23:01:00 prd-ubuntu20-04-docker-8c-8g-39643 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Feb 24 23:01:00 prd-ubuntu20-04-docker-8c-8g-39643 sudo: pam_unix(sudo:session): session closed for user root Feb 24 23:01:01 prd-ubuntu20-04-docker-8c-8g-39643 CRON[29954]: pam_unix(cron:session): session opened for user root by (uid=0) Feb 24 23:01:01 prd-ubuntu20-04-docker-8c-8g-39643 CRON[29954]: pam_unix(cron:session): session closed for user root