Jun 4 11:47:00 prd-ubuntu20-04-docker-8c-8g-12393 passwd[754]: password for 'ubuntu' changed by 'root' Jun 4 11:47:00 prd-ubuntu20-04-docker-8c-8g-12393 sshd[865]: Server listening on 0.0.0.0 port 22. Jun 4 11:47:00 prd-ubuntu20-04-docker-8c-8g-12393 sshd[865]: Server listening on :: port 22. Jun 4 11:47:00 prd-ubuntu20-04-docker-8c-8g-12393 systemd-logind[840]: New seat seat0. Jun 4 11:47:00 prd-ubuntu20-04-docker-8c-8g-12393 systemd-logind[840]: Watching system buttons on /dev/input/event0 (Power Button) Jun 4 11:47:00 prd-ubuntu20-04-docker-8c-8g-12393 systemd-logind[840]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Jun 4 11:47:02 prd-ubuntu20-04-docker-8c-8g-12393 sshd[1049]: error: kex_exchange_identification: Connection closed by remote host Jun 4 11:47:13 prd-ubuntu20-04-docker-8c-8g-12393 sshd[1069]: Invalid user jenkins from 10.30.120.5 port 54180 Jun 4 11:47:13 prd-ubuntu20-04-docker-8c-8g-12393 sshd[1069]: Received disconnect from 10.30.120.5 port 54180:11: Closed due to user request. [preauth] Jun 4 11:47:13 prd-ubuntu20-04-docker-8c-8g-12393 sshd[1069]: Disconnected from invalid user jenkins 10.30.120.5 port 54180 [preauth] Jun 4 11:47:15 prd-ubuntu20-04-docker-8c-8g-12393 sshd[1071]: Invalid user jenkins from 10.30.120.5 port 54182 Jun 4 11:47:15 prd-ubuntu20-04-docker-8c-8g-12393 sshd[1071]: Received disconnect from 10.30.120.5 port 54182:11: Closed due to user request. [preauth] Jun 4 11:47:15 prd-ubuntu20-04-docker-8c-8g-12393 sshd[1071]: Disconnected from invalid user jenkins 10.30.120.5 port 54182 [preauth] Jun 4 11:47:17 prd-ubuntu20-04-docker-8c-8g-12393 sshd[1073]: Invalid user jenkins from 10.30.120.5 port 54184 Jun 4 11:47:17 prd-ubuntu20-04-docker-8c-8g-12393 sshd[1073]: Received disconnect from 10.30.120.5 port 54184:11: Closed due to user request. [preauth] Jun 4 11:47:17 prd-ubuntu20-04-docker-8c-8g-12393 sshd[1073]: Disconnected from invalid user jenkins 10.30.120.5 port 54184 [preauth] Jun 4 11:47:19 prd-ubuntu20-04-docker-8c-8g-12393 sshd[1205]: Invalid user jenkins from 10.30.120.5 port 54188 Jun 4 11:47:19 prd-ubuntu20-04-docker-8c-8g-12393 sshd[1205]: Received disconnect from 10.30.120.5 port 54188:11: Closed due to user request. [preauth] Jun 4 11:47:19 prd-ubuntu20-04-docker-8c-8g-12393 sshd[1205]: Disconnected from invalid user jenkins 10.30.120.5 port 54188 [preauth] Jun 4 11:47:21 prd-ubuntu20-04-docker-8c-8g-12393 sshd[1388]: Invalid user jenkins from 10.30.120.5 port 54190 Jun 4 11:47:21 prd-ubuntu20-04-docker-8c-8g-12393 sshd[1388]: Received disconnect from 10.30.120.5 port 54190:11: Closed due to user request. [preauth] Jun 4 11:47:21 prd-ubuntu20-04-docker-8c-8g-12393 sshd[1388]: Disconnected from invalid user jenkins 10.30.120.5 port 54190 [preauth] Jun 4 11:47:24 prd-ubuntu20-04-docker-8c-8g-12393 sshd[1394]: Invalid user jenkins from 10.30.120.5 port 54192 Jun 4 11:47:24 prd-ubuntu20-04-docker-8c-8g-12393 sshd[1394]: Received disconnect from 10.30.120.5 port 54192:11: Closed due to user request. [preauth] Jun 4 11:47:24 prd-ubuntu20-04-docker-8c-8g-12393 sshd[1394]: Disconnected from invalid user jenkins 10.30.120.5 port 54192 [preauth] Jun 4 11:47:26 prd-ubuntu20-04-docker-8c-8g-12393 sshd[1396]: Invalid user jenkins from 10.30.120.5 port 54196 Jun 4 11:47:26 prd-ubuntu20-04-docker-8c-8g-12393 sshd[1396]: Received disconnect from 10.30.120.5 port 54196:11: Closed due to user request. [preauth] Jun 4 11:47:26 prd-ubuntu20-04-docker-8c-8g-12393 sshd[1396]: Disconnected from invalid user jenkins 10.30.120.5 port 54196 [preauth] Jun 4 11:47:26 prd-ubuntu20-04-docker-8c-8g-12393 useradd[1403]: new group: name=jenkins, GID=1001 Jun 4 11:47:26 prd-ubuntu20-04-docker-8c-8g-12393 useradd[1403]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash, from=none Jun 4 11:47:26 prd-ubuntu20-04-docker-8c-8g-12393 usermod[1413]: add 'jenkins' to group 'docker' Jun 4 11:47:26 prd-ubuntu20-04-docker-8c-8g-12393 usermod[1413]: add 'jenkins' to shadow group 'docker' Jun 4 11:47:28 prd-ubuntu20-04-docker-8c-8g-12393 sshd[1448]: Accepted publickey for jenkins from 10.30.120.5 port 54198 ssh2: RSA SHA256:aPmPdMw/h9M56P/o8xjsZcdBWoRKGeie6FPOwnlsRmU Jun 4 11:47:28 prd-ubuntu20-04-docker-8c-8g-12393 sshd[1448]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Jun 4 11:47:28 prd-ubuntu20-04-docker-8c-8g-12393 systemd-logind[840]: New session 1 of user jenkins. Jun 4 11:47:28 prd-ubuntu20-04-docker-8c-8g-12393 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Jun 4 11:47:49 prd-ubuntu20-04-docker-8c-8g-12393 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/dry_app-functions-sdk-go_PR-1748 ; USER=root ; COMMAND=/usr/bin/mv /tmp/ssh_known_hosts /etc/ssh/ssh_known_hosts Jun 4 11:47:49 prd-ubuntu20-04-docker-8c-8g-12393 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Jun 4 11:47:49 prd-ubuntu20-04-docker-8c-8g-12393 sudo: pam_unix(sudo:session): session closed for user root Jun 4 11:47:49 prd-ubuntu20-04-docker-8c-8g-12393 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/dry_app-functions-sdk-go_PR-1748 ; USER=root ; COMMAND=/usr/bin/tee -a /etc/ssh/ssh_known_hosts Jun 4 11:47:49 prd-ubuntu20-04-docker-8c-8g-12393 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Jun 4 11:47:49 prd-ubuntu20-04-docker-8c-8g-12393 sudo: pam_unix(sudo:session): session closed for user root Jun 4 11:48:02 prd-ubuntu20-04-docker-8c-8g-12393 CRON[2212]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 4 11:48:02 prd-ubuntu20-04-docker-8c-8g-12393 CRON[2212]: pam_unix(cron:session): session closed for user root Jun 4 11:48:08 prd-ubuntu20-04-docker-8c-8g-12393 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/dry_app-functions-sdk-go_PR-1748 ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins .semver Jun 4 11:48:08 prd-ubuntu20-04-docker-8c-8g-12393 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Jun 4 11:48:08 prd-ubuntu20-04-docker-8c-8g-12393 sudo: pam_unix(sudo:session): session closed for user root Jun 4 11:49:01 prd-ubuntu20-04-docker-8c-8g-12393 CRON[10061]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 4 11:49:01 prd-ubuntu20-04-docker-8c-8g-12393 CRON[10061]: pam_unix(cron:session): session closed for user root Jun 4 11:50:01 prd-ubuntu20-04-docker-8c-8g-12393 CRON[29870]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 4 11:50:01 prd-ubuntu20-04-docker-8c-8g-12393 CRON[29870]: pam_unix(cron:session): session closed for user root Jun 4 11:50:44 prd-ubuntu20-04-docker-8c-8g-12393 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/dry_app-functions-sdk-go_PR-1748 ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins . Jun 4 11:50:44 prd-ubuntu20-04-docker-8c-8g-12393 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Jun 4 11:50:44 prd-ubuntu20-04-docker-8c-8g-12393 sudo: pam_unix(sudo:session): session closed for user root Jun 4 11:51:01 prd-ubuntu20-04-docker-8c-8g-12393 CRON[31369]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 4 11:51:01 prd-ubuntu20-04-docker-8c-8g-12393 CRON[31369]: pam_unix(cron:session): session closed for user root Jun 4 11:51:07 prd-ubuntu20-04-docker-8c-8g-12393 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/dry_app-functions-sdk-go_PR-1748 ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins /w/workspace/dry_app-functions-sdk-go_PR-1748/archives Jun 4 11:51:07 prd-ubuntu20-04-docker-8c-8g-12393 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Jun 4 11:51:07 prd-ubuntu20-04-docker-8c-8g-12393 sudo: pam_unix(sudo:session): session closed for user root