Mar 21 01:23:27 prd-ubuntu20-04-docker-8c-8g-8122 passwd[739]: password for 'ubuntu' changed by 'root' Mar 21 01:23:27 prd-ubuntu20-04-docker-8c-8g-8122 systemd-logind[794]: Watching system buttons on /dev/input/event0 (Power Button) Mar 21 01:23:27 prd-ubuntu20-04-docker-8c-8g-8122 systemd-logind[794]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Mar 21 01:23:27 prd-ubuntu20-04-docker-8c-8g-8122 systemd-logind[794]: New seat seat0. Mar 21 01:23:27 prd-ubuntu20-04-docker-8c-8g-8122 sshd[826]: Server listening on 0.0.0.0 port 22. Mar 21 01:23:27 prd-ubuntu20-04-docker-8c-8g-8122 sshd[826]: Server listening on :: port 22. Mar 21 01:23:27 prd-ubuntu20-04-docker-8c-8g-8122 sshd[887]: error: kex_exchange_identification: Connection closed by remote host Mar 21 01:23:31 prd-ubuntu20-04-docker-8c-8g-8122 sshd[1030]: Invalid user jenkins from 10.30.120.5 port 45928 Mar 21 01:23:32 prd-ubuntu20-04-docker-8c-8g-8122 sshd[1030]: Received disconnect from 10.30.120.5 port 45928:11: Closed due to user request. [preauth] Mar 21 01:23:32 prd-ubuntu20-04-docker-8c-8g-8122 sshd[1030]: Disconnected from invalid user jenkins 10.30.120.5 port 45928 [preauth] Mar 21 01:23:34 prd-ubuntu20-04-docker-8c-8g-8122 sshd[1042]: Invalid user jenkins from 10.30.120.5 port 45930 Mar 21 01:23:34 prd-ubuntu20-04-docker-8c-8g-8122 sshd[1042]: Received disconnect from 10.30.120.5 port 45930:11: Closed due to user request. [preauth] Mar 21 01:23:34 prd-ubuntu20-04-docker-8c-8g-8122 sshd[1042]: Disconnected from invalid user jenkins 10.30.120.5 port 45930 [preauth] Mar 21 01:23:36 prd-ubuntu20-04-docker-8c-8g-8122 sshd[1346]: Invalid user jenkins from 10.30.120.5 port 45932 Mar 21 01:23:36 prd-ubuntu20-04-docker-8c-8g-8122 sshd[1346]: Received disconnect from 10.30.120.5 port 45932:11: Closed due to user request. [preauth] Mar 21 01:23:36 prd-ubuntu20-04-docker-8c-8g-8122 sshd[1346]: Disconnected from invalid user jenkins 10.30.120.5 port 45932 [preauth] Mar 21 01:23:38 prd-ubuntu20-04-docker-8c-8g-8122 sshd[1394]: Invalid user jenkins from 10.30.120.5 port 45934 Mar 21 01:23:38 prd-ubuntu20-04-docker-8c-8g-8122 sshd[1394]: Received disconnect from 10.30.120.5 port 45934:11: Closed due to user request. [preauth] Mar 21 01:23:38 prd-ubuntu20-04-docker-8c-8g-8122 sshd[1394]: Disconnected from invalid user jenkins 10.30.120.5 port 45934 [preauth] Mar 21 01:23:38 prd-ubuntu20-04-docker-8c-8g-8122 systemd-logind[794]: Watching system buttons on /dev/input/event0 (Power Button) Mar 21 01:23:39 prd-ubuntu20-04-docker-8c-8g-8122 systemd-logind[794]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Mar 21 01:23:40 prd-ubuntu20-04-docker-8c-8g-8122 sshd[1591]: Invalid user jenkins from 10.30.120.5 port 45936 Mar 21 01:23:40 prd-ubuntu20-04-docker-8c-8g-8122 sshd[1591]: Received disconnect from 10.30.120.5 port 45936:11: Closed due to user request. [preauth] Mar 21 01:23:40 prd-ubuntu20-04-docker-8c-8g-8122 sshd[1591]: Disconnected from invalid user jenkins 10.30.120.5 port 45936 [preauth] Mar 21 01:23:42 prd-ubuntu20-04-docker-8c-8g-8122 sshd[1596]: Invalid user jenkins from 10.30.120.5 port 45938 Mar 21 01:23:42 prd-ubuntu20-04-docker-8c-8g-8122 sshd[1596]: Received disconnect from 10.30.120.5 port 45938:11: Closed due to user request. [preauth] Mar 21 01:23:42 prd-ubuntu20-04-docker-8c-8g-8122 sshd[1596]: Disconnected from invalid user jenkins 10.30.120.5 port 45938 [preauth] Mar 21 01:23:44 prd-ubuntu20-04-docker-8c-8g-8122 sshd[1599]: Invalid user jenkins from 10.30.120.5 port 45940 Mar 21 01:23:44 prd-ubuntu20-04-docker-8c-8g-8122 sshd[1599]: Received disconnect from 10.30.120.5 port 45940:11: Closed due to user request. [preauth] Mar 21 01:23:44 prd-ubuntu20-04-docker-8c-8g-8122 sshd[1599]: Disconnected from invalid user jenkins 10.30.120.5 port 45940 [preauth] Mar 21 01:23:46 prd-ubuntu20-04-docker-8c-8g-8122 sshd[1945]: Invalid user jenkins from 10.30.120.5 port 45942 Mar 21 01:23:46 prd-ubuntu20-04-docker-8c-8g-8122 sshd[1945]: Received disconnect from 10.30.120.5 port 45942:11: Closed due to user request. [preauth] Mar 21 01:23:46 prd-ubuntu20-04-docker-8c-8g-8122 sshd[1945]: Disconnected from invalid user jenkins 10.30.120.5 port 45942 [preauth] Mar 21 01:23:48 prd-ubuntu20-04-docker-8c-8g-8122 sshd[2075]: Invalid user jenkins from 10.30.120.5 port 45944 Mar 21 01:23:49 prd-ubuntu20-04-docker-8c-8g-8122 sshd[2075]: Received disconnect from 10.30.120.5 port 45944:11: Closed due to user request. [preauth] Mar 21 01:23:49 prd-ubuntu20-04-docker-8c-8g-8122 sshd[2075]: Disconnected from invalid user jenkins 10.30.120.5 port 45944 [preauth] Mar 21 01:23:49 prd-ubuntu20-04-docker-8c-8g-8122 useradd[2156]: new group: name=jenkins, GID=1001 Mar 21 01:23:49 prd-ubuntu20-04-docker-8c-8g-8122 useradd[2156]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash, from=none Mar 21 01:23:50 prd-ubuntu20-04-docker-8c-8g-8122 usermod[2166]: add 'jenkins' to group 'docker' Mar 21 01:23:50 prd-ubuntu20-04-docker-8c-8g-8122 usermod[2166]: add 'jenkins' to shadow group 'docker' Mar 21 01:23:51 prd-ubuntu20-04-docker-8c-8g-8122 sshd[2301]: Accepted publickey for jenkins from 10.30.120.5 port 45952 ssh2: RSA SHA256:aPmPdMw/h9M56P/o8xjsZcdBWoRKGeie6FPOwnlsRmU Mar 21 01:23:51 prd-ubuntu20-04-docker-8c-8g-8122 sshd[2301]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Mar 21 01:23:51 prd-ubuntu20-04-docker-8c-8g-8122 systemd-logind[794]: New session 1 of user jenkins. Mar 21 01:23:51 prd-ubuntu20-04-docker-8c-8g-8122 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Mar 21 01:24:01 prd-ubuntu20-04-docker-8c-8g-8122 CRON[2841]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 21 01:24:01 prd-ubuntu20-04-docker-8c-8g-8122 CRON[2841]: pam_unix(cron:session): session closed for user root Mar 21 01:24:09 prd-ubuntu20-04-docker-8c-8g-8122 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/gexfoundry_device-mqtt-go_PR-346 ; USER=root ; COMMAND=/usr/bin/mv /tmp/ssh_known_hosts /etc/ssh/ssh_known_hosts Mar 21 01:24:09 prd-ubuntu20-04-docker-8c-8g-8122 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Mar 21 01:24:09 prd-ubuntu20-04-docker-8c-8g-8122 sudo: pam_unix(sudo:session): session closed for user root Mar 21 01:24:09 prd-ubuntu20-04-docker-8c-8g-8122 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/gexfoundry_device-mqtt-go_PR-346 ; USER=root ; COMMAND=/usr/bin/tee -a /etc/ssh/ssh_known_hosts Mar 21 01:24:09 prd-ubuntu20-04-docker-8c-8g-8122 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Mar 21 01:24:09 prd-ubuntu20-04-docker-8c-8g-8122 sudo: pam_unix(sudo:session): session closed for user root Mar 21 01:24:17 prd-ubuntu20-04-docker-8c-8g-8122 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/gexfoundry_device-mqtt-go_PR-346 ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins .semver Mar 21 01:24:17 prd-ubuntu20-04-docker-8c-8g-8122 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Mar 21 01:24:17 prd-ubuntu20-04-docker-8c-8g-8122 sudo: pam_unix(sudo:session): session closed for user root Mar 21 01:25:01 prd-ubuntu20-04-docker-8c-8g-8122 CRON[5076]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 21 01:25:01 prd-ubuntu20-04-docker-8c-8g-8122 CRON[5076]: pam_unix(cron:session): session closed for user root Mar 21 01:25:17 prd-ubuntu20-04-docker-8c-8g-8122 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/gexfoundry_device-mqtt-go_PR-346 ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins . Mar 21 01:25:17 prd-ubuntu20-04-docker-8c-8g-8122 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Mar 21 01:25:17 prd-ubuntu20-04-docker-8c-8g-8122 sudo: pam_unix(sudo:session): session closed for user root Mar 21 01:25:18 prd-ubuntu20-04-docker-8c-8g-8122 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/gexfoundry_device-mqtt-go_PR-346 ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins . Mar 21 01:25:18 prd-ubuntu20-04-docker-8c-8g-8122 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Mar 21 01:25:18 prd-ubuntu20-04-docker-8c-8g-8122 sudo: pam_unix(sudo:session): session closed for user root Mar 21 01:26:01 prd-ubuntu20-04-docker-8c-8g-8122 CRON[12121]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 21 01:26:01 prd-ubuntu20-04-docker-8c-8g-8122 CRON[12121]: pam_unix(cron:session): session closed for user root Mar 21 01:27:01 prd-ubuntu20-04-docker-8c-8g-8122 CRON[12128]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 21 01:27:01 prd-ubuntu20-04-docker-8c-8g-8122 CRON[12128]: pam_unix(cron:session): session closed for user root Mar 21 01:28:01 prd-ubuntu20-04-docker-8c-8g-8122 CRON[12133]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 21 01:28:01 prd-ubuntu20-04-docker-8c-8g-8122 CRON[12133]: pam_unix(cron:session): session closed for user root Mar 21 01:29:01 prd-ubuntu20-04-docker-8c-8g-8122 CRON[12138]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 21 01:29:01 prd-ubuntu20-04-docker-8c-8g-8122 CRON[12138]: pam_unix(cron:session): session closed for user root Mar 21 01:30:01 prd-ubuntu20-04-docker-8c-8g-8122 CRON[12189]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 21 01:30:01 prd-ubuntu20-04-docker-8c-8g-8122 CRON[12189]: pam_unix(cron:session): session closed for user root Mar 21 01:31:01 prd-ubuntu20-04-docker-8c-8g-8122 CRON[12640]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 21 01:31:01 prd-ubuntu20-04-docker-8c-8g-8122 CRON[12640]: pam_unix(cron:session): session closed for user root Mar 21 01:32:01 prd-ubuntu20-04-docker-8c-8g-8122 CRON[12649]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 21 01:32:01 prd-ubuntu20-04-docker-8c-8g-8122 CRON[12649]: pam_unix(cron:session): session closed for user root Mar 21 01:33:01 prd-ubuntu20-04-docker-8c-8g-8122 CRON[12652]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 21 01:33:01 prd-ubuntu20-04-docker-8c-8g-8122 CRON[12652]: pam_unix(cron:session): session closed for user root Mar 21 01:33:34 prd-ubuntu20-04-docker-8c-8g-8122 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/gexfoundry_device-mqtt-go_PR-346 ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins /w/workspace/gexfoundry_device-mqtt-go_PR-346/archives Mar 21 01:33:34 prd-ubuntu20-04-docker-8c-8g-8122 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Mar 21 01:33:34 prd-ubuntu20-04-docker-8c-8g-8122 sudo: pam_unix(sudo:session): session closed for user root