Apr 25 02:11:20 prd-ubuntu20-04-docker-8c-8g-21926 passwd[735]: password for 'ubuntu' changed by 'root' Apr 25 02:11:20 prd-ubuntu20-04-docker-8c-8g-21926 sshd[819]: Server listening on 0.0.0.0 port 22. Apr 25 02:11:20 prd-ubuntu20-04-docker-8c-8g-21926 sshd[819]: Server listening on :: port 22. Apr 25 02:11:20 prd-ubuntu20-04-docker-8c-8g-21926 systemd-logind[798]: Watching system buttons on /dev/input/event0 (Power Button) Apr 25 02:11:20 prd-ubuntu20-04-docker-8c-8g-21926 systemd-logind[798]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Apr 25 02:11:20 prd-ubuntu20-04-docker-8c-8g-21926 systemd-logind[798]: New seat seat0. Apr 25 02:11:21 prd-ubuntu20-04-docker-8c-8g-21926 sshd[910]: error: kex_exchange_identification: Connection closed by remote host Apr 25 02:11:22 prd-ubuntu20-04-docker-8c-8g-21926 sshd[911]: Invalid user jenkins from 10.30.120.5 port 49770 Apr 25 02:11:22 prd-ubuntu20-04-docker-8c-8g-21926 sshd[911]: Received disconnect from 10.30.120.5 port 49770:11: Closed due to user request. [preauth] Apr 25 02:11:22 prd-ubuntu20-04-docker-8c-8g-21926 sshd[911]: Disconnected from invalid user jenkins 10.30.120.5 port 49770 [preauth] Apr 25 02:11:24 prd-ubuntu20-04-docker-8c-8g-21926 sshd[1021]: Invalid user jenkins from 10.30.120.5 port 49786 Apr 25 02:11:24 prd-ubuntu20-04-docker-8c-8g-21926 sshd[1021]: Received disconnect from 10.30.120.5 port 49786:11: Closed due to user request. [preauth] Apr 25 02:11:24 prd-ubuntu20-04-docker-8c-8g-21926 sshd[1021]: Disconnected from invalid user jenkins 10.30.120.5 port 49786 [preauth] Apr 25 02:11:26 prd-ubuntu20-04-docker-8c-8g-21926 sshd[1137]: Invalid user jenkins from 10.30.120.5 port 49794 Apr 25 02:11:26 prd-ubuntu20-04-docker-8c-8g-21926 sshd[1137]: Received disconnect from 10.30.120.5 port 49794:11: Closed due to user request. [preauth] Apr 25 02:11:26 prd-ubuntu20-04-docker-8c-8g-21926 sshd[1137]: Disconnected from invalid user jenkins 10.30.120.5 port 49794 [preauth] Apr 25 02:11:28 prd-ubuntu20-04-docker-8c-8g-21926 sshd[1211]: Invalid user jenkins from 10.30.120.5 port 49802 Apr 25 02:11:28 prd-ubuntu20-04-docker-8c-8g-21926 sshd[1211]: Received disconnect from 10.30.120.5 port 49802:11: Closed due to user request. [preauth] Apr 25 02:11:28 prd-ubuntu20-04-docker-8c-8g-21926 sshd[1211]: Disconnected from invalid user jenkins 10.30.120.5 port 49802 [preauth] Apr 25 02:11:30 prd-ubuntu20-04-docker-8c-8g-21926 systemd-logind[798]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Apr 25 02:11:30 prd-ubuntu20-04-docker-8c-8g-21926 systemd-logind[798]: Watching system buttons on /dev/input/event0 (Power Button) Apr 25 02:11:30 prd-ubuntu20-04-docker-8c-8g-21926 sshd[1405]: Invalid user jenkins from 10.30.120.5 port 49808 Apr 25 02:11:30 prd-ubuntu20-04-docker-8c-8g-21926 sshd[1405]: Received disconnect from 10.30.120.5 port 49808:11: Closed due to user request. [preauth] Apr 25 02:11:30 prd-ubuntu20-04-docker-8c-8g-21926 sshd[1405]: Disconnected from invalid user jenkins 10.30.120.5 port 49808 [preauth] Apr 25 02:11:32 prd-ubuntu20-04-docker-8c-8g-21926 sshd[1491]: Invalid user jenkins from 10.30.120.5 port 49816 Apr 25 02:11:32 prd-ubuntu20-04-docker-8c-8g-21926 sshd[1491]: Received disconnect from 10.30.120.5 port 49816:11: Closed due to user request. [preauth] Apr 25 02:11:32 prd-ubuntu20-04-docker-8c-8g-21926 sshd[1491]: Disconnected from invalid user jenkins 10.30.120.5 port 49816 [preauth] Apr 25 02:11:34 prd-ubuntu20-04-docker-8c-8g-21926 sshd[1586]: Invalid user jenkins from 10.30.120.5 port 49824 Apr 25 02:11:35 prd-ubuntu20-04-docker-8c-8g-21926 sshd[1586]: Received disconnect from 10.30.120.5 port 49824:11: Closed due to user request. [preauth] Apr 25 02:11:35 prd-ubuntu20-04-docker-8c-8g-21926 sshd[1586]: Disconnected from invalid user jenkins 10.30.120.5 port 49824 [preauth] Apr 25 02:11:37 prd-ubuntu20-04-docker-8c-8g-21926 sshd[1589]: Invalid user jenkins from 10.30.120.5 port 49830 Apr 25 02:11:37 prd-ubuntu20-04-docker-8c-8g-21926 sshd[1589]: Received disconnect from 10.30.120.5 port 49830:11: Closed due to user request. [preauth] Apr 25 02:11:37 prd-ubuntu20-04-docker-8c-8g-21926 sshd[1589]: Disconnected from invalid user jenkins 10.30.120.5 port 49830 [preauth] Apr 25 02:11:39 prd-ubuntu20-04-docker-8c-8g-21926 sshd[1861]: Invalid user jenkins from 10.30.120.5 port 49836 Apr 25 02:11:39 prd-ubuntu20-04-docker-8c-8g-21926 sshd[1861]: Received disconnect from 10.30.120.5 port 49836:11: Closed due to user request. [preauth] Apr 25 02:11:39 prd-ubuntu20-04-docker-8c-8g-21926 sshd[1861]: Disconnected from invalid user jenkins 10.30.120.5 port 49836 [preauth] Apr 25 02:11:41 prd-ubuntu20-04-docker-8c-8g-21926 sshd[2029]: Invalid user jenkins from 10.30.120.5 port 49844 Apr 25 02:11:41 prd-ubuntu20-04-docker-8c-8g-21926 sshd[2029]: Received disconnect from 10.30.120.5 port 49844:11: Closed due to user request. [preauth] Apr 25 02:11:41 prd-ubuntu20-04-docker-8c-8g-21926 sshd[2029]: Disconnected from invalid user jenkins 10.30.120.5 port 49844 [preauth] Apr 25 02:11:43 prd-ubuntu20-04-docker-8c-8g-21926 sshd[2210]: Invalid user jenkins from 10.30.120.5 port 49850 Apr 25 02:11:43 prd-ubuntu20-04-docker-8c-8g-21926 sshd[2210]: Received disconnect from 10.30.120.5 port 49850:11: Closed due to user request. [preauth] Apr 25 02:11:43 prd-ubuntu20-04-docker-8c-8g-21926 sshd[2210]: Disconnected from invalid user jenkins 10.30.120.5 port 49850 [preauth] Apr 25 02:11:43 prd-ubuntu20-04-docker-8c-8g-21926 useradd[2306]: new group: name=jenkins, GID=1001 Apr 25 02:11:43 prd-ubuntu20-04-docker-8c-8g-21926 useradd[2306]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash, from=none Apr 25 02:11:43 prd-ubuntu20-04-docker-8c-8g-21926 usermod[2316]: add 'jenkins' to group 'docker' Apr 25 02:11:43 prd-ubuntu20-04-docker-8c-8g-21926 usermod[2316]: add 'jenkins' to shadow group 'docker' Apr 25 02:11:45 prd-ubuntu20-04-docker-8c-8g-21926 sshd[2353]: Accepted publickey for jenkins from 10.30.120.5 port 49856 ssh2: RSA SHA256:aPmPdMw/h9M56P/o8xjsZcdBWoRKGeie6FPOwnlsRmU Apr 25 02:11:45 prd-ubuntu20-04-docker-8c-8g-21926 sshd[2353]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Apr 25 02:11:45 prd-ubuntu20-04-docker-8c-8g-21926 systemd-logind[798]: New session 1 of user jenkins. Apr 25 02:11:45 prd-ubuntu20-04-docker-8c-8g-21926 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Apr 25 02:12:01 prd-ubuntu20-04-docker-8c-8g-21926 CRON[2765]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 25 02:12:01 prd-ubuntu20-04-docker-8c-8g-21926 CRON[2765]: pam_unix(cron:session): session closed for user root Apr 25 02:12:06 prd-ubuntu20-04-docker-8c-8g-21926 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/gexfoundry_device-mqtt-go_PR-368 ; USER=root ; COMMAND=/usr/bin/mv /tmp/ssh_known_hosts /etc/ssh/ssh_known_hosts Apr 25 02:12:06 prd-ubuntu20-04-docker-8c-8g-21926 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Apr 25 02:12:06 prd-ubuntu20-04-docker-8c-8g-21926 sudo: pam_unix(sudo:session): session closed for user root Apr 25 02:12:06 prd-ubuntu20-04-docker-8c-8g-21926 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/gexfoundry_device-mqtt-go_PR-368 ; USER=root ; COMMAND=/usr/bin/tee -a /etc/ssh/ssh_known_hosts Apr 25 02:12:06 prd-ubuntu20-04-docker-8c-8g-21926 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Apr 25 02:12:06 prd-ubuntu20-04-docker-8c-8g-21926 sudo: pam_unix(sudo:session): session closed for user root Apr 25 02:12:14 prd-ubuntu20-04-docker-8c-8g-21926 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/gexfoundry_device-mqtt-go_PR-368 ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins .semver Apr 25 02:12:14 prd-ubuntu20-04-docker-8c-8g-21926 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Apr 25 02:12:14 prd-ubuntu20-04-docker-8c-8g-21926 sudo: pam_unix(sudo:session): session closed for user root Apr 25 02:13:01 prd-ubuntu20-04-docker-8c-8g-21926 CRON[9520]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 25 02:13:01 prd-ubuntu20-04-docker-8c-8g-21926 CRON[9520]: pam_unix(cron:session): session closed for user root Apr 25 02:14:01 prd-ubuntu20-04-docker-8c-8g-21926 CRON[9863]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 25 02:14:01 prd-ubuntu20-04-docker-8c-8g-21926 CRON[9863]: pam_unix(cron:session): session closed for user root Apr 25 02:15:01 prd-ubuntu20-04-docker-8c-8g-21926 CRON[9887]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 25 02:15:01 prd-ubuntu20-04-docker-8c-8g-21926 CRON[9887]: pam_unix(cron:session): session closed for user root Apr 25 02:16:01 prd-ubuntu20-04-docker-8c-8g-21926 CRON[9898]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 25 02:16:01 prd-ubuntu20-04-docker-8c-8g-21926 CRON[9898]: pam_unix(cron:session): session closed for user root Apr 25 02:17:01 prd-ubuntu20-04-docker-8c-8g-21926 CRON[9904]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 25 02:17:01 prd-ubuntu20-04-docker-8c-8g-21926 CRON[9903]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 25 02:17:01 prd-ubuntu20-04-docker-8c-8g-21926 CRON[9903]: pam_unix(cron:session): session closed for user root Apr 25 02:17:01 prd-ubuntu20-04-docker-8c-8g-21926 CRON[9904]: pam_unix(cron:session): session closed for user root Apr 25 02:18:01 prd-ubuntu20-04-docker-8c-8g-21926 CRON[9911]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 25 02:18:01 prd-ubuntu20-04-docker-8c-8g-21926 CRON[9911]: pam_unix(cron:session): session closed for user root Apr 25 02:19:01 prd-ubuntu20-04-docker-8c-8g-21926 CRON[9914]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 25 02:19:01 prd-ubuntu20-04-docker-8c-8g-21926 CRON[9914]: pam_unix(cron:session): session closed for user root Apr 25 02:20:01 prd-ubuntu20-04-docker-8c-8g-21926 CRON[9918]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 25 02:20:01 prd-ubuntu20-04-docker-8c-8g-21926 CRON[9918]: pam_unix(cron:session): session closed for user root Apr 25 02:20:04 prd-ubuntu20-04-docker-8c-8g-21926 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/gexfoundry_device-mqtt-go_PR-368 ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins /w/workspace/gexfoundry_device-mqtt-go_PR-368/archives Apr 25 02:20:04 prd-ubuntu20-04-docker-8c-8g-21926 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Apr 25 02:20:04 prd-ubuntu20-04-docker-8c-8g-21926 sudo: pam_unix(sudo:session): session closed for user root