Apr 5 15:57:52 prd-ubuntu20-04-docker-8c-8g-10755 passwd[727]: password for 'ubuntu' changed by 'root' Apr 5 15:57:52 prd-ubuntu20-04-docker-8c-8g-10755 systemd-logind[803]: Watching system buttons on /dev/input/event0 (Power Button) Apr 5 15:57:52 prd-ubuntu20-04-docker-8c-8g-10755 systemd-logind[803]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Apr 5 15:57:52 prd-ubuntu20-04-docker-8c-8g-10755 systemd-logind[803]: New seat seat0. Apr 5 15:57:52 prd-ubuntu20-04-docker-8c-8g-10755 sshd[827]: Server listening on 0.0.0.0 port 22. Apr 5 15:57:52 prd-ubuntu20-04-docker-8c-8g-10755 sshd[827]: Server listening on :: port 22. Apr 5 15:57:54 prd-ubuntu20-04-docker-8c-8g-10755 sshd[924]: error: kex_exchange_identification: Connection closed by remote host Apr 5 15:58:01 prd-ubuntu20-04-docker-8c-8g-10755 sshd[1347]: Invalid user jenkins from 10.30.120.5 port 48256 Apr 5 15:58:01 prd-ubuntu20-04-docker-8c-8g-10755 sshd[1347]: Received disconnect from 10.30.120.5 port 48256:11: Closed due to user request. [preauth] Apr 5 15:58:01 prd-ubuntu20-04-docker-8c-8g-10755 sshd[1347]: Disconnected from invalid user jenkins 10.30.120.5 port 48256 [preauth] Apr 5 15:58:01 prd-ubuntu20-04-docker-8c-8g-10755 CRON[1363]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 5 15:58:01 prd-ubuntu20-04-docker-8c-8g-10755 CRON[1363]: pam_unix(cron:session): session closed for user root Apr 5 15:58:03 prd-ubuntu20-04-docker-8c-8g-10755 sshd[1393]: Invalid user jenkins from 10.30.120.5 port 48258 Apr 5 15:58:04 prd-ubuntu20-04-docker-8c-8g-10755 sshd[1393]: Received disconnect from 10.30.120.5 port 48258:11: Closed due to user request. [preauth] Apr 5 15:58:04 prd-ubuntu20-04-docker-8c-8g-10755 sshd[1393]: Disconnected from invalid user jenkins 10.30.120.5 port 48258 [preauth] Apr 5 15:58:04 prd-ubuntu20-04-docker-8c-8g-10755 systemd-logind[803]: Watching system buttons on /dev/input/event0 (Power Button) Apr 5 15:58:04 prd-ubuntu20-04-docker-8c-8g-10755 systemd-logind[803]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Apr 5 15:58:06 prd-ubuntu20-04-docker-8c-8g-10755 sshd[1592]: Invalid user jenkins from 10.30.120.5 port 48260 Apr 5 15:58:06 prd-ubuntu20-04-docker-8c-8g-10755 sshd[1592]: Received disconnect from 10.30.120.5 port 48260:11: Closed due to user request. [preauth] Apr 5 15:58:06 prd-ubuntu20-04-docker-8c-8g-10755 sshd[1592]: Disconnected from invalid user jenkins 10.30.120.5 port 48260 [preauth] Apr 5 15:58:08 prd-ubuntu20-04-docker-8c-8g-10755 sshd[1599]: Invalid user jenkins from 10.30.120.5 port 48262 Apr 5 15:58:08 prd-ubuntu20-04-docker-8c-8g-10755 sshd[1599]: Received disconnect from 10.30.120.5 port 48262:11: Closed due to user request. [preauth] Apr 5 15:58:08 prd-ubuntu20-04-docker-8c-8g-10755 sshd[1599]: Disconnected from invalid user jenkins 10.30.120.5 port 48262 [preauth] Apr 5 15:58:10 prd-ubuntu20-04-docker-8c-8g-10755 sshd[1602]: Invalid user jenkins from 10.30.120.5 port 48264 Apr 5 15:58:10 prd-ubuntu20-04-docker-8c-8g-10755 sshd[1602]: Received disconnect from 10.30.120.5 port 48264:11: Closed due to user request. [preauth] Apr 5 15:58:10 prd-ubuntu20-04-docker-8c-8g-10755 sshd[1602]: Disconnected from invalid user jenkins 10.30.120.5 port 48264 [preauth] Apr 5 15:58:12 prd-ubuntu20-04-docker-8c-8g-10755 sshd[1920]: Invalid user jenkins from 10.30.120.5 port 48266 Apr 5 15:58:12 prd-ubuntu20-04-docker-8c-8g-10755 sshd[1920]: Received disconnect from 10.30.120.5 port 48266:11: Closed due to user request. [preauth] Apr 5 15:58:12 prd-ubuntu20-04-docker-8c-8g-10755 sshd[1920]: Disconnected from invalid user jenkins 10.30.120.5 port 48266 [preauth] Apr 5 15:58:14 prd-ubuntu20-04-docker-8c-8g-10755 sshd[2019]: Invalid user jenkins from 10.30.120.5 port 48268 Apr 5 15:58:14 prd-ubuntu20-04-docker-8c-8g-10755 sshd[2019]: Received disconnect from 10.30.120.5 port 48268:11: Closed due to user request. [preauth] Apr 5 15:58:14 prd-ubuntu20-04-docker-8c-8g-10755 sshd[2019]: Disconnected from invalid user jenkins 10.30.120.5 port 48268 [preauth] Apr 5 15:58:15 prd-ubuntu20-04-docker-8c-8g-10755 useradd[2100]: new group: name=jenkins, GID=1001 Apr 5 15:58:15 prd-ubuntu20-04-docker-8c-8g-10755 useradd[2100]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash, from=none Apr 5 15:58:15 prd-ubuntu20-04-docker-8c-8g-10755 usermod[2112]: add 'jenkins' to group 'docker' Apr 5 15:58:15 prd-ubuntu20-04-docker-8c-8g-10755 usermod[2112]: add 'jenkins' to shadow group 'docker' Apr 5 15:58:16 prd-ubuntu20-04-docker-8c-8g-10755 sshd[2235]: Accepted publickey for jenkins from 10.30.120.5 port 48270 ssh2: RSA SHA256:aPmPdMw/h9M56P/o8xjsZcdBWoRKGeie6FPOwnlsRmU Apr 5 15:58:16 prd-ubuntu20-04-docker-8c-8g-10755 sshd[2235]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Apr 5 15:58:16 prd-ubuntu20-04-docker-8c-8g-10755 systemd-logind[803]: New session 2 of user jenkins. Apr 5 15:58:16 prd-ubuntu20-04-docker-8c-8g-10755 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Apr 5 15:58:33 prd-ubuntu20-04-docker-8c-8g-10755 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/gexfoundry_device-mqtt-go_PR-353 ; USER=root ; COMMAND=/usr/bin/mv /tmp/ssh_known_hosts /etc/ssh/ssh_known_hosts Apr 5 15:58:33 prd-ubuntu20-04-docker-8c-8g-10755 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Apr 5 15:58:33 prd-ubuntu20-04-docker-8c-8g-10755 sudo: pam_unix(sudo:session): session closed for user root Apr 5 15:58:33 prd-ubuntu20-04-docker-8c-8g-10755 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/gexfoundry_device-mqtt-go_PR-353 ; USER=root ; COMMAND=/usr/bin/tee -a /etc/ssh/ssh_known_hosts Apr 5 15:58:33 prd-ubuntu20-04-docker-8c-8g-10755 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Apr 5 15:58:33 prd-ubuntu20-04-docker-8c-8g-10755 sudo: pam_unix(sudo:session): session closed for user root Apr 5 15:58:40 prd-ubuntu20-04-docker-8c-8g-10755 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/gexfoundry_device-mqtt-go_PR-353 ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins .semver Apr 5 15:58:40 prd-ubuntu20-04-docker-8c-8g-10755 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Apr 5 15:58:40 prd-ubuntu20-04-docker-8c-8g-10755 sudo: pam_unix(sudo:session): session closed for user root Apr 5 15:59:01 prd-ubuntu20-04-docker-8c-8g-10755 CRON[4479]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 5 15:59:01 prd-ubuntu20-04-docker-8c-8g-10755 CRON[4479]: pam_unix(cron:session): session closed for user root Apr 5 15:59:44 prd-ubuntu20-04-docker-8c-8g-10755 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/gexfoundry_device-mqtt-go_PR-353 ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins . Apr 5 15:59:44 prd-ubuntu20-04-docker-8c-8g-10755 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Apr 5 15:59:44 prd-ubuntu20-04-docker-8c-8g-10755 sudo: pam_unix(sudo:session): session closed for user root Apr 5 15:59:45 prd-ubuntu20-04-docker-8c-8g-10755 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/gexfoundry_device-mqtt-go_PR-353 ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins . Apr 5 15:59:45 prd-ubuntu20-04-docker-8c-8g-10755 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Apr 5 15:59:45 prd-ubuntu20-04-docker-8c-8g-10755 sudo: pam_unix(sudo:session): session closed for user root Apr 5 16:00:01 prd-ubuntu20-04-docker-8c-8g-10755 CRON[12103]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 5 16:00:01 prd-ubuntu20-04-docker-8c-8g-10755 CRON[12103]: pam_unix(cron:session): session closed for user root Apr 5 16:01:01 prd-ubuntu20-04-docker-8c-8g-10755 CRON[12552]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 5 16:01:01 prd-ubuntu20-04-docker-8c-8g-10755 CRON[12552]: pam_unix(cron:session): session closed for user root Apr 5 16:02:01 prd-ubuntu20-04-docker-8c-8g-10755 CRON[12557]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 5 16:02:01 prd-ubuntu20-04-docker-8c-8g-10755 CRON[12557]: pam_unix(cron:session): session closed for user root Apr 5 16:03:01 prd-ubuntu20-04-docker-8c-8g-10755 CRON[12563]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 5 16:03:01 prd-ubuntu20-04-docker-8c-8g-10755 CRON[12563]: pam_unix(cron:session): session closed for user root Apr 5 16:04:01 prd-ubuntu20-04-docker-8c-8g-10755 CRON[12580]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 5 16:04:01 prd-ubuntu20-04-docker-8c-8g-10755 CRON[12580]: pam_unix(cron:session): session closed for user root Apr 5 16:05:01 prd-ubuntu20-04-docker-8c-8g-10755 CRON[12583]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 5 16:05:01 prd-ubuntu20-04-docker-8c-8g-10755 CRON[12583]: pam_unix(cron:session): session closed for user root Apr 5 16:06:00 prd-ubuntu20-04-docker-8c-8g-10755 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/gexfoundry_device-mqtt-go_PR-353 ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins /w/workspace/gexfoundry_device-mqtt-go_PR-353/archives Apr 5 16:06:00 prd-ubuntu20-04-docker-8c-8g-10755 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Apr 5 16:06:00 prd-ubuntu20-04-docker-8c-8g-10755 sudo: pam_unix(sudo:session): session closed for user root Apr 5 16:06:01 prd-ubuntu20-04-docker-8c-8g-10755 CRON[12771]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 5 16:06:02 prd-ubuntu20-04-docker-8c-8g-10755 CRON[12771]: pam_unix(cron:session): session closed for user root