Jun 17 09:49:13 prd-ubuntu20-04-docker-8c-8g-2548 passwd[736]: password for 'ubuntu' changed by 'root'
Jun 17 09:49:13 prd-ubuntu20-04-docker-8c-8g-2548 systemd-logind[796]: Watching system buttons on /dev/input/event0 (Power Button)
Jun 17 09:49:13 prd-ubuntu20-04-docker-8c-8g-2548 systemd-logind[796]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard)
Jun 17 09:49:13 prd-ubuntu20-04-docker-8c-8g-2548 systemd-logind[796]: New seat seat0.
Jun 17 09:49:13 prd-ubuntu20-04-docker-8c-8g-2548 sshd[828]: Server listening on 0.0.0.0 port 22.
Jun 17 09:49:13 prd-ubuntu20-04-docker-8c-8g-2548 sshd[828]: Server listening on :: port 22.
Jun 17 09:49:14 prd-ubuntu20-04-docker-8c-8g-2548 sshd[887]: error: kex_exchange_identification: Connection closed by remote host
Jun 17 09:49:20 prd-ubuntu20-04-docker-8c-8g-2548 sshd[1025]: Invalid user jenkins from 10.30.120.5 port 57614
Jun 17 09:49:20 prd-ubuntu20-04-docker-8c-8g-2548 sshd[1025]: Received disconnect from 10.30.120.5 port 57614:11: Closed due to user request. [preauth]
Jun 17 09:49:20 prd-ubuntu20-04-docker-8c-8g-2548 sshd[1025]: Disconnected from invalid user jenkins 10.30.120.5 port 57614 [preauth]
Jun 17 09:49:22 prd-ubuntu20-04-docker-8c-8g-2548 sshd[1353]: Invalid user jenkins from 10.30.120.5 port 57616
Jun 17 09:49:22 prd-ubuntu20-04-docker-8c-8g-2548 sshd[1353]: Received disconnect from 10.30.120.5 port 57616:11: Closed due to user request. [preauth]
Jun 17 09:49:22 prd-ubuntu20-04-docker-8c-8g-2548 sshd[1353]: Disconnected from invalid user jenkins 10.30.120.5 port 57616 [preauth]
Jun 17 09:49:24 prd-ubuntu20-04-docker-8c-8g-2548 sshd[1494]: Invalid user jenkins from 10.30.120.5 port 57618
Jun 17 09:49:24 prd-ubuntu20-04-docker-8c-8g-2548 sshd[1494]: Received disconnect from 10.30.120.5 port 57618:11: Closed due to user request. [preauth]
Jun 17 09:49:24 prd-ubuntu20-04-docker-8c-8g-2548 sshd[1494]: Disconnected from invalid user jenkins 10.30.120.5 port 57618 [preauth]
Jun 17 09:49:25 prd-ubuntu20-04-docker-8c-8g-2548 systemd-logind[796]: Watching system buttons on /dev/input/event0 (Power Button)
Jun 17 09:49:25 prd-ubuntu20-04-docker-8c-8g-2548 systemd-logind[796]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard)
Jun 17 09:49:27 prd-ubuntu20-04-docker-8c-8g-2548 sshd[1584]: Invalid user jenkins from 10.30.120.5 port 57626
Jun 17 09:49:27 prd-ubuntu20-04-docker-8c-8g-2548 sshd[1584]: Received disconnect from 10.30.120.5 port 57626:11: Closed due to user request. [preauth]
Jun 17 09:49:27 prd-ubuntu20-04-docker-8c-8g-2548 sshd[1584]: Disconnected from invalid user jenkins 10.30.120.5 port 57626 [preauth]
Jun 17 09:49:29 prd-ubuntu20-04-docker-8c-8g-2548 sshd[1588]: Invalid user jenkins from 10.30.120.5 port 57628
Jun 17 09:49:29 prd-ubuntu20-04-docker-8c-8g-2548 sshd[1588]: Received disconnect from 10.30.120.5 port 57628:11: Closed due to user request. [preauth]
Jun 17 09:49:29 prd-ubuntu20-04-docker-8c-8g-2548 sshd[1588]: Disconnected from invalid user jenkins 10.30.120.5 port 57628 [preauth]
Jun 17 09:49:31 prd-ubuntu20-04-docker-8c-8g-2548 sshd[1778]: Invalid user jenkins from 10.30.120.5 port 57630
Jun 17 09:49:31 prd-ubuntu20-04-docker-8c-8g-2548 sshd[1778]: Received disconnect from 10.30.120.5 port 57630:11: Closed due to user request. [preauth]
Jun 17 09:49:31 prd-ubuntu20-04-docker-8c-8g-2548 sshd[1778]: Disconnected from invalid user jenkins 10.30.120.5 port 57630 [preauth]
Jun 17 09:49:33 prd-ubuntu20-04-docker-8c-8g-2548 sshd[2116]: Invalid user jenkins from 10.30.120.5 port 57632
Jun 17 09:49:33 prd-ubuntu20-04-docker-8c-8g-2548 sshd[2116]: Received disconnect from 10.30.120.5 port 57632:11: Closed due to user request. [preauth]
Jun 17 09:49:33 prd-ubuntu20-04-docker-8c-8g-2548 sshd[2116]: Disconnected from invalid user jenkins 10.30.120.5 port 57632 [preauth]
Jun 17 09:49:35 prd-ubuntu20-04-docker-8c-8g-2548 sshd[2306]: Invalid user jenkins from 10.30.120.5 port 57634
Jun 17 09:49:35 prd-ubuntu20-04-docker-8c-8g-2548 sshd[2306]: Received disconnect from 10.30.120.5 port 57634:11: Closed due to user request. [preauth]
Jun 17 09:49:35 prd-ubuntu20-04-docker-8c-8g-2548 sshd[2306]: Disconnected from invalid user jenkins 10.30.120.5 port 57634 [preauth]
Jun 17 09:49:36 prd-ubuntu20-04-docker-8c-8g-2548 useradd[2327]: new group: name=jenkins, GID=1001
Jun 17 09:49:36 prd-ubuntu20-04-docker-8c-8g-2548 useradd[2327]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash, from=none
Jun 17 09:49:36 prd-ubuntu20-04-docker-8c-8g-2548 usermod[2337]: add 'jenkins' to group 'docker'
Jun 17 09:49:36 prd-ubuntu20-04-docker-8c-8g-2548 usermod[2337]: add 'jenkins' to shadow group 'docker'
Jun 17 09:49:37 prd-ubuntu20-04-docker-8c-8g-2548 sshd[2374]: Accepted publickey for jenkins from 10.30.120.5 port 57636 ssh2: RSA SHA256:aPmPdMw/h9M56P/o8xjsZcdBWoRKGeie6FPOwnlsRmU
Jun 17 09:49:37 prd-ubuntu20-04-docker-8c-8g-2548 sshd[2374]: pam_unix(sshd:session): session opened for user jenkins by (uid=0)
Jun 17 09:49:37 prd-ubuntu20-04-docker-8c-8g-2548 systemd-logind[796]: New session 1 of user jenkins.
Jun 17 09:49:37 prd-ubuntu20-04-docker-8c-8g-2548 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0)
Jun 17 09:49:55 prd-ubuntu20-04-docker-8c-8g-2548 sudo:  jenkins : TTY=unknown ; PWD=/w/workspace/gexfoundry_device-mqtt-go_PR-391 ; USER=root ; COMMAND=/usr/bin/mv /tmp/ssh_known_hosts /etc/ssh/ssh_known_hosts
Jun 17 09:49:55 prd-ubuntu20-04-docker-8c-8g-2548 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Jun 17 09:49:55 prd-ubuntu20-04-docker-8c-8g-2548 sudo: pam_unix(sudo:session): session closed for user root
Jun 17 09:49:55 prd-ubuntu20-04-docker-8c-8g-2548 sudo:  jenkins : TTY=unknown ; PWD=/w/workspace/gexfoundry_device-mqtt-go_PR-391 ; USER=root ; COMMAND=/usr/bin/tee -a /etc/ssh/ssh_known_hosts
Jun 17 09:49:55 prd-ubuntu20-04-docker-8c-8g-2548 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Jun 17 09:49:55 prd-ubuntu20-04-docker-8c-8g-2548 sudo: pam_unix(sudo:session): session closed for user root
Jun 17 09:50:01 prd-ubuntu20-04-docker-8c-8g-2548 CRON[3235]: pam_unix(cron:session): session opened for user root by (uid=0)
Jun 17 09:50:01 prd-ubuntu20-04-docker-8c-8g-2548 CRON[3235]: pam_unix(cron:session): session closed for user root
Jun 17 09:50:08 prd-ubuntu20-04-docker-8c-8g-2548 sudo:  jenkins : TTY=unknown ; PWD=/w/workspace/gexfoundry_device-mqtt-go_PR-391 ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins .semver
Jun 17 09:50:08 prd-ubuntu20-04-docker-8c-8g-2548 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Jun 17 09:50:08 prd-ubuntu20-04-docker-8c-8g-2548 sudo: pam_unix(sudo:session): session closed for user root
Jun 17 09:51:01 prd-ubuntu20-04-docker-8c-8g-2548 CRON[9864]: pam_unix(cron:session): session opened for user root by (uid=0)
Jun 17 09:51:01 prd-ubuntu20-04-docker-8c-8g-2548 CRON[9864]: pam_unix(cron:session): session closed for user root
Jun 17 09:51:10 prd-ubuntu20-04-docker-8c-8g-2548 sudo:  jenkins : TTY=unknown ; PWD=/w/workspace/gexfoundry_device-mqtt-go_PR-391 ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins .
Jun 17 09:51:10 prd-ubuntu20-04-docker-8c-8g-2548 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Jun 17 09:51:10 prd-ubuntu20-04-docker-8c-8g-2548 sudo: pam_unix(sudo:session): session closed for user root
Jun 17 09:51:11 prd-ubuntu20-04-docker-8c-8g-2548 sudo:  jenkins : TTY=unknown ; PWD=/w/workspace/gexfoundry_device-mqtt-go_PR-391 ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins .
Jun 17 09:51:11 prd-ubuntu20-04-docker-8c-8g-2548 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Jun 17 09:51:11 prd-ubuntu20-04-docker-8c-8g-2548 sudo: pam_unix(sudo:session): session closed for user root
Jun 17 09:52:01 prd-ubuntu20-04-docker-8c-8g-2548 CRON[17084]: pam_unix(cron:session): session opened for user root by (uid=0)
Jun 17 09:52:01 prd-ubuntu20-04-docker-8c-8g-2548 CRON[17084]: pam_unix(cron:session): session closed for user root
Jun 17 09:53:01 prd-ubuntu20-04-docker-8c-8g-2548 CRON[17088]: pam_unix(cron:session): session opened for user root by (uid=0)
Jun 17 09:53:01 prd-ubuntu20-04-docker-8c-8g-2548 CRON[17088]: pam_unix(cron:session): session closed for user root
Jun 17 09:54:01 prd-ubuntu20-04-docker-8c-8g-2548 CRON[17093]: pam_unix(cron:session): session opened for user root by (uid=0)
Jun 17 09:54:01 prd-ubuntu20-04-docker-8c-8g-2548 CRON[17093]: pam_unix(cron:session): session closed for user root
Jun 17 09:55:01 prd-ubuntu20-04-docker-8c-8g-2548 CRON[17103]: pam_unix(cron:session): session opened for user root by (uid=0)
Jun 17 09:55:01 prd-ubuntu20-04-docker-8c-8g-2548 CRON[17103]: pam_unix(cron:session): session closed for user root
Jun 17 09:56:01 prd-ubuntu20-04-docker-8c-8g-2548 CRON[17116]: pam_unix(cron:session): session opened for user root by (uid=0)
Jun 17 09:56:01 prd-ubuntu20-04-docker-8c-8g-2548 CRON[17116]: pam_unix(cron:session): session closed for user root
Jun 17 09:57:01 prd-ubuntu20-04-docker-8c-8g-2548 CRON[17119]: pam_unix(cron:session): session opened for user root by (uid=0)
Jun 17 09:57:01 prd-ubuntu20-04-docker-8c-8g-2548 CRON[17119]: pam_unix(cron:session): session closed for user root
Jun 17 09:58:01 prd-ubuntu20-04-docker-8c-8g-2548 CRON[17124]: pam_unix(cron:session): session opened for user root by (uid=0)
Jun 17 09:58:01 prd-ubuntu20-04-docker-8c-8g-2548 CRON[17124]: pam_unix(cron:session): session closed for user root
Jun 17 09:58:53 prd-ubuntu20-04-docker-8c-8g-2548 sudo:  jenkins : TTY=unknown ; PWD=/w/workspace/gexfoundry_device-mqtt-go_PR-391 ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins /w/workspace/gexfoundry_device-mqtt-go_PR-391/archives
Jun 17 09:58:53 prd-ubuntu20-04-docker-8c-8g-2548 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Jun 17 09:58:53 prd-ubuntu20-04-docker-8c-8g-2548 sudo: pam_unix(sudo:session): session closed for user root