Jan 4 04:15:01 prd-ubuntu20-04-docker-8c-8g-1025 passwd[751]: password for 'ubuntu' changed by 'root' Jan 4 04:15:01 prd-ubuntu20-04-docker-8c-8g-1025 sshd[827]: Server listening on 0.0.0.0 port 22. Jan 4 04:15:01 prd-ubuntu20-04-docker-8c-8g-1025 sshd[827]: Server listening on :: port 22. Jan 4 04:15:01 prd-ubuntu20-04-docker-8c-8g-1025 systemd-logind[815]: New seat seat0. Jan 4 04:15:01 prd-ubuntu20-04-docker-8c-8g-1025 systemd-logind[815]: Watching system buttons on /dev/input/event0 (Power Button) Jan 4 04:15:01 prd-ubuntu20-04-docker-8c-8g-1025 systemd-logind[815]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Jan 4 04:15:03 prd-ubuntu20-04-docker-8c-8g-1025 sshd[1018]: error: kex_exchange_identification: Connection closed by remote host Jan 4 04:15:09 prd-ubuntu20-04-docker-8c-8g-1025 sshd[1030]: Invalid user jenkins from 10.30.120.5 port 50960 Jan 4 04:15:09 prd-ubuntu20-04-docker-8c-8g-1025 sshd[1030]: Received disconnect from 10.30.120.5 port 50960:11: Closed due to user request. [preauth] Jan 4 04:15:09 prd-ubuntu20-04-docker-8c-8g-1025 sshd[1030]: Disconnected from invalid user jenkins 10.30.120.5 port 50960 [preauth] Jan 4 04:15:11 prd-ubuntu20-04-docker-8c-8g-1025 sshd[1032]: Invalid user jenkins from 10.30.120.5 port 50968 Jan 4 04:15:11 prd-ubuntu20-04-docker-8c-8g-1025 sshd[1032]: Received disconnect from 10.30.120.5 port 50968:11: Closed due to user request. [preauth] Jan 4 04:15:11 prd-ubuntu20-04-docker-8c-8g-1025 sshd[1032]: Disconnected from invalid user jenkins 10.30.120.5 port 50968 [preauth] Jan 4 04:15:13 prd-ubuntu20-04-docker-8c-8g-1025 sshd[1034]: Invalid user jenkins from 10.30.120.5 port 50972 Jan 4 04:15:14 prd-ubuntu20-04-docker-8c-8g-1025 sshd[1034]: Received disconnect from 10.30.120.5 port 50972:11: Closed due to user request. [preauth] Jan 4 04:15:14 prd-ubuntu20-04-docker-8c-8g-1025 sshd[1034]: Disconnected from invalid user jenkins 10.30.120.5 port 50972 [preauth] Jan 4 04:15:16 prd-ubuntu20-04-docker-8c-8g-1025 sshd[1036]: Invalid user jenkins from 10.30.120.5 port 50980 Jan 4 04:15:16 prd-ubuntu20-04-docker-8c-8g-1025 sshd[1036]: Received disconnect from 10.30.120.5 port 50980:11: Closed due to user request. [preauth] Jan 4 04:15:16 prd-ubuntu20-04-docker-8c-8g-1025 sshd[1036]: Disconnected from invalid user jenkins 10.30.120.5 port 50980 [preauth] Jan 4 04:15:18 prd-ubuntu20-04-docker-8c-8g-1025 sshd[1038]: Invalid user jenkins from 10.30.120.5 port 50990 Jan 4 04:15:18 prd-ubuntu20-04-docker-8c-8g-1025 sshd[1038]: Received disconnect from 10.30.120.5 port 50990:11: Closed due to user request. [preauth] Jan 4 04:15:18 prd-ubuntu20-04-docker-8c-8g-1025 sshd[1038]: Disconnected from invalid user jenkins 10.30.120.5 port 50990 [preauth] Jan 4 04:15:21 prd-ubuntu20-04-docker-8c-8g-1025 sshd[1213]: Invalid user jenkins from 10.30.120.5 port 50996 Jan 4 04:15:21 prd-ubuntu20-04-docker-8c-8g-1025 sshd[1213]: Received disconnect from 10.30.120.5 port 50996:11: Closed due to user request. [preauth] Jan 4 04:15:21 prd-ubuntu20-04-docker-8c-8g-1025 sshd[1213]: Disconnected from invalid user jenkins 10.30.120.5 port 50996 [preauth] Jan 4 04:15:23 prd-ubuntu20-04-docker-8c-8g-1025 sshd[1254]: Invalid user jenkins from 10.30.120.5 port 51000 Jan 4 04:15:23 prd-ubuntu20-04-docker-8c-8g-1025 sshd[1254]: Received disconnect from 10.30.120.5 port 51000:11: Closed due to user request. [preauth] Jan 4 04:15:23 prd-ubuntu20-04-docker-8c-8g-1025 sshd[1254]: Disconnected from invalid user jenkins 10.30.120.5 port 51000 [preauth] Jan 4 04:15:25 prd-ubuntu20-04-docker-8c-8g-1025 sshd[1274]: Invalid user jenkins from 10.30.120.5 port 51004 Jan 4 04:15:25 prd-ubuntu20-04-docker-8c-8g-1025 useradd[1277]: new group: name=jenkins, GID=1001 Jan 4 04:15:25 prd-ubuntu20-04-docker-8c-8g-1025 useradd[1277]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash, from=none Jan 4 04:15:25 prd-ubuntu20-04-docker-8c-8g-1025 sshd[1274]: Received disconnect from 10.30.120.5 port 51004:11: Closed due to user request. [preauth] Jan 4 04:15:25 prd-ubuntu20-04-docker-8c-8g-1025 sshd[1274]: Disconnected from invalid user jenkins 10.30.120.5 port 51004 [preauth] Jan 4 04:15:25 prd-ubuntu20-04-docker-8c-8g-1025 usermod[1287]: add 'jenkins' to group 'docker' Jan 4 04:15:25 prd-ubuntu20-04-docker-8c-8g-1025 usermod[1287]: add 'jenkins' to shadow group 'docker' Jan 4 04:15:27 prd-ubuntu20-04-docker-8c-8g-1025 sshd[1332]: Accepted publickey for jenkins from 10.30.120.5 port 51010 ssh2: RSA SHA256:aPmPdMw/h9M56P/o8xjsZcdBWoRKGeie6FPOwnlsRmU Jan 4 04:15:27 prd-ubuntu20-04-docker-8c-8g-1025 sshd[1332]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Jan 4 04:15:27 prd-ubuntu20-04-docker-8c-8g-1025 systemd-logind[815]: New session 1 of user jenkins. Jan 4 04:15:27 prd-ubuntu20-04-docker-8c-8g-1025 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Jan 4 04:15:45 prd-ubuntu20-04-docker-8c-8g-1025 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/gexfoundry_device-mqtt-go_PR-444 ; USER=root ; COMMAND=/usr/bin/mv /tmp/ssh_known_hosts /etc/ssh/ssh_known_hosts Jan 4 04:15:45 prd-ubuntu20-04-docker-8c-8g-1025 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Jan 4 04:15:45 prd-ubuntu20-04-docker-8c-8g-1025 sudo: pam_unix(sudo:session): session closed for user root Jan 4 04:15:45 prd-ubuntu20-04-docker-8c-8g-1025 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/gexfoundry_device-mqtt-go_PR-444 ; USER=root ; COMMAND=/usr/bin/tee -a /etc/ssh/ssh_known_hosts Jan 4 04:15:45 prd-ubuntu20-04-docker-8c-8g-1025 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Jan 4 04:15:45 prd-ubuntu20-04-docker-8c-8g-1025 sudo: pam_unix(sudo:session): session closed for user root Jan 4 04:15:57 prd-ubuntu20-04-docker-8c-8g-1025 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/gexfoundry_device-mqtt-go_PR-444 ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins .semver Jan 4 04:15:57 prd-ubuntu20-04-docker-8c-8g-1025 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Jan 4 04:15:57 prd-ubuntu20-04-docker-8c-8g-1025 sudo: pam_unix(sudo:session): session closed for user root Jan 4 04:16:02 prd-ubuntu20-04-docker-8c-8g-1025 CRON[3096]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 4 04:16:02 prd-ubuntu20-04-docker-8c-8g-1025 CRON[3096]: pam_unix(cron:session): session closed for user root Jan 4 04:17:01 prd-ubuntu20-04-docker-8c-8g-1025 CRON[10969]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 4 04:17:01 prd-ubuntu20-04-docker-8c-8g-1025 CRON[10970]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 4 04:17:01 prd-ubuntu20-04-docker-8c-8g-1025 CRON[10970]: pam_unix(cron:session): session closed for user root Jan 4 04:17:01 prd-ubuntu20-04-docker-8c-8g-1025 CRON[10969]: pam_unix(cron:session): session closed for user root Jan 4 04:17:04 prd-ubuntu20-04-docker-8c-8g-1025 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/gexfoundry_device-mqtt-go_PR-444 ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins . Jan 4 04:17:04 prd-ubuntu20-04-docker-8c-8g-1025 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Jan 4 04:17:04 prd-ubuntu20-04-docker-8c-8g-1025 sudo: pam_unix(sudo:session): session closed for user root Jan 4 04:17:05 prd-ubuntu20-04-docker-8c-8g-1025 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/gexfoundry_device-mqtt-go_PR-444 ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins . Jan 4 04:17:05 prd-ubuntu20-04-docker-8c-8g-1025 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Jan 4 04:17:05 prd-ubuntu20-04-docker-8c-8g-1025 sudo: pam_unix(sudo:session): session closed for user root Jan 4 04:18:01 prd-ubuntu20-04-docker-8c-8g-1025 CRON[16160]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 4 04:18:01 prd-ubuntu20-04-docker-8c-8g-1025 CRON[16160]: pam_unix(cron:session): session closed for user root Jan 4 04:19:01 prd-ubuntu20-04-docker-8c-8g-1025 CRON[16166]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 4 04:19:01 prd-ubuntu20-04-docker-8c-8g-1025 CRON[16166]: pam_unix(cron:session): session closed for user root Jan 4 04:20:01 prd-ubuntu20-04-docker-8c-8g-1025 CRON[16172]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 4 04:20:01 prd-ubuntu20-04-docker-8c-8g-1025 CRON[16172]: pam_unix(cron:session): session closed for user root Jan 4 04:20:12 prd-ubuntu20-04-docker-8c-8g-1025 systemd-logind[815]: Watching system buttons on /dev/input/event0 (Power Button) Jan 4 04:20:12 prd-ubuntu20-04-docker-8c-8g-1025 systemd-logind[815]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Jan 4 04:21:01 prd-ubuntu20-04-docker-8c-8g-1025 CRON[17369]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 4 04:21:01 prd-ubuntu20-04-docker-8c-8g-1025 CRON[17369]: pam_unix(cron:session): session closed for user root Jan 4 04:22:01 prd-ubuntu20-04-docker-8c-8g-1025 CRON[17416]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 4 04:22:01 prd-ubuntu20-04-docker-8c-8g-1025 CRON[17416]: pam_unix(cron:session): session closed for user root Jan 4 04:23:01 prd-ubuntu20-04-docker-8c-8g-1025 CRON[17425]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 4 04:23:01 prd-ubuntu20-04-docker-8c-8g-1025 CRON[17425]: pam_unix(cron:session): session closed for user root Jan 4 04:24:01 prd-ubuntu20-04-docker-8c-8g-1025 CRON[17429]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 4 04:24:01 prd-ubuntu20-04-docker-8c-8g-1025 CRON[17429]: pam_unix(cron:session): session closed for user root Jan 4 04:25:01 prd-ubuntu20-04-docker-8c-8g-1025 CRON[17434]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 4 04:25:01 prd-ubuntu20-04-docker-8c-8g-1025 CRON[17434]: pam_unix(cron:session): session closed for user root Jan 4 04:25:05 prd-ubuntu20-04-docker-8c-8g-1025 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/gexfoundry_device-mqtt-go_PR-444 ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins /w/workspace/gexfoundry_device-mqtt-go_PR-444/archives Jan 4 04:25:05 prd-ubuntu20-04-docker-8c-8g-1025 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Jan 4 04:25:05 prd-ubuntu20-04-docker-8c-8g-1025 sudo: pam_unix(sudo:session): session closed for user root