Apr 13 07:19:37 prd-ubuntu20-04-docker-8c-8g-8418 passwd[753]: password for 'ubuntu' changed by 'root' Apr 13 07:19:37 prd-ubuntu20-04-docker-8c-8g-8418 systemd-logind[798]: New seat seat0. Apr 13 07:19:37 prd-ubuntu20-04-docker-8c-8g-8418 systemd-logind[798]: Watching system buttons on /dev/input/event0 (Power Button) Apr 13 07:19:37 prd-ubuntu20-04-docker-8c-8g-8418 systemd-logind[798]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Apr 13 07:19:37 prd-ubuntu20-04-docker-8c-8g-8418 sshd[871]: Server listening on 0.0.0.0 port 22. Apr 13 07:19:37 prd-ubuntu20-04-docker-8c-8g-8418 sshd[871]: Server listening on :: port 22. Apr 13 07:19:39 prd-ubuntu20-04-docker-8c-8g-8418 sshd[1025]: error: kex_exchange_identification: Connection closed by remote host Apr 13 07:19:44 prd-ubuntu20-04-docker-8c-8g-8418 sshd[1035]: Invalid user jenkins from 10.30.120.5 port 36856 Apr 13 07:19:45 prd-ubuntu20-04-docker-8c-8g-8418 sshd[1035]: Received disconnect from 10.30.120.5 port 36856:11: Closed due to user request. [preauth] Apr 13 07:19:45 prd-ubuntu20-04-docker-8c-8g-8418 sshd[1035]: Disconnected from invalid user jenkins 10.30.120.5 port 36856 [preauth] Apr 13 07:19:47 prd-ubuntu20-04-docker-8c-8g-8418 sshd[1038]: Invalid user jenkins from 10.30.120.5 port 36866 Apr 13 07:19:47 prd-ubuntu20-04-docker-8c-8g-8418 sshd[1038]: Received disconnect from 10.30.120.5 port 36866:11: Closed due to user request. [preauth] Apr 13 07:19:47 prd-ubuntu20-04-docker-8c-8g-8418 sshd[1038]: Disconnected from invalid user jenkins 10.30.120.5 port 36866 [preauth] Apr 13 07:19:49 prd-ubuntu20-04-docker-8c-8g-8418 sshd[1040]: Invalid user jenkins from 10.30.120.5 port 36876 Apr 13 07:19:49 prd-ubuntu20-04-docker-8c-8g-8418 sshd[1040]: Received disconnect from 10.30.120.5 port 36876:11: Closed due to user request. [preauth] Apr 13 07:19:49 prd-ubuntu20-04-docker-8c-8g-8418 sshd[1040]: Disconnected from invalid user jenkins 10.30.120.5 port 36876 [preauth] Apr 13 07:19:51 prd-ubuntu20-04-docker-8c-8g-8418 sshd[1042]: Invalid user jenkins from 10.30.120.5 port 36882 Apr 13 07:19:51 prd-ubuntu20-04-docker-8c-8g-8418 sshd[1042]: Received disconnect from 10.30.120.5 port 36882:11: Closed due to user request. [preauth] Apr 13 07:19:51 prd-ubuntu20-04-docker-8c-8g-8418 sshd[1042]: Disconnected from invalid user jenkins 10.30.120.5 port 36882 [preauth] Apr 13 07:19:53 prd-ubuntu20-04-docker-8c-8g-8418 sshd[1044]: Invalid user jenkins from 10.30.120.5 port 36888 Apr 13 07:19:53 prd-ubuntu20-04-docker-8c-8g-8418 sshd[1044]: Received disconnect from 10.30.120.5 port 36888:11: Closed due to user request. [preauth] Apr 13 07:19:53 prd-ubuntu20-04-docker-8c-8g-8418 sshd[1044]: Disconnected from invalid user jenkins 10.30.120.5 port 36888 [preauth] Apr 13 07:19:55 prd-ubuntu20-04-docker-8c-8g-8418 sshd[1102]: Invalid user jenkins from 10.30.120.5 port 36898 Apr 13 07:19:55 prd-ubuntu20-04-docker-8c-8g-8418 sshd[1102]: Received disconnect from 10.30.120.5 port 36898:11: Closed due to user request. [preauth] Apr 13 07:19:55 prd-ubuntu20-04-docker-8c-8g-8418 sshd[1102]: Disconnected from invalid user jenkins 10.30.120.5 port 36898 [preauth] Apr 13 07:19:57 prd-ubuntu20-04-docker-8c-8g-8418 sshd[1257]: Invalid user jenkins from 10.30.120.5 port 36904 Apr 13 07:19:57 prd-ubuntu20-04-docker-8c-8g-8418 sshd[1257]: Received disconnect from 10.30.120.5 port 36904:11: Closed due to user request. [preauth] Apr 13 07:19:57 prd-ubuntu20-04-docker-8c-8g-8418 sshd[1257]: Disconnected from invalid user jenkins 10.30.120.5 port 36904 [preauth] Apr 13 07:19:59 prd-ubuntu20-04-docker-8c-8g-8418 sshd[1261]: Invalid user jenkins from 10.30.120.5 port 36908 Apr 13 07:19:59 prd-ubuntu20-04-docker-8c-8g-8418 sshd[1261]: Received disconnect from 10.30.120.5 port 36908:11: Closed due to user request. [preauth] Apr 13 07:19:59 prd-ubuntu20-04-docker-8c-8g-8418 sshd[1261]: Disconnected from invalid user jenkins 10.30.120.5 port 36908 [preauth] Apr 13 07:20:00 prd-ubuntu20-04-docker-8c-8g-8418 useradd[1292]: new group: name=jenkins, GID=1001 Apr 13 07:20:00 prd-ubuntu20-04-docker-8c-8g-8418 useradd[1292]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash, from=none Apr 13 07:20:00 prd-ubuntu20-04-docker-8c-8g-8418 usermod[1302]: add 'jenkins' to group 'docker' Apr 13 07:20:00 prd-ubuntu20-04-docker-8c-8g-8418 usermod[1302]: add 'jenkins' to shadow group 'docker' Apr 13 07:20:01 prd-ubuntu20-04-docker-8c-8g-8418 CRON[1341]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 13 07:20:01 prd-ubuntu20-04-docker-8c-8g-8418 CRON[1341]: pam_unix(cron:session): session closed for user root Apr 13 07:20:02 prd-ubuntu20-04-docker-8c-8g-8418 sshd[1339]: Accepted publickey for jenkins from 10.30.120.5 port 36914 ssh2: RSA SHA256:aPmPdMw/h9M56P/o8xjsZcdBWoRKGeie6FPOwnlsRmU Apr 13 07:20:02 prd-ubuntu20-04-docker-8c-8g-8418 sshd[1339]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Apr 13 07:20:02 prd-ubuntu20-04-docker-8c-8g-8418 systemd-logind[798]: New session 2 of user jenkins. Apr 13 07:20:02 prd-ubuntu20-04-docker-8c-8g-8418 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Apr 13 07:20:16 prd-ubuntu20-04-docker-8c-8g-8418 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/gexfoundry_device-mqtt-go_PR-560 ; USER=root ; COMMAND=/usr/bin/mv /tmp/ssh_known_hosts /etc/ssh/ssh_known_hosts Apr 13 07:20:16 prd-ubuntu20-04-docker-8c-8g-8418 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Apr 13 07:20:16 prd-ubuntu20-04-docker-8c-8g-8418 sudo: pam_unix(sudo:session): session closed for user root Apr 13 07:20:16 prd-ubuntu20-04-docker-8c-8g-8418 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/gexfoundry_device-mqtt-go_PR-560 ; USER=root ; COMMAND=/usr/bin/tee -a /etc/ssh/ssh_known_hosts Apr 13 07:20:16 prd-ubuntu20-04-docker-8c-8g-8418 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Apr 13 07:20:16 prd-ubuntu20-04-docker-8c-8g-8418 sudo: pam_unix(sudo:session): session closed for user root Apr 13 07:20:30 prd-ubuntu20-04-docker-8c-8g-8418 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/gexfoundry_device-mqtt-go_PR-560 ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins .semver Apr 13 07:20:30 prd-ubuntu20-04-docker-8c-8g-8418 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Apr 13 07:20:30 prd-ubuntu20-04-docker-8c-8g-8418 sudo: pam_unix(sudo:session): session closed for user root Apr 13 07:21:02 prd-ubuntu20-04-docker-8c-8g-8418 CRON[3653]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 13 07:21:02 prd-ubuntu20-04-docker-8c-8g-8418 CRON[3653]: pam_unix(cron:session): session closed for user root Apr 13 07:21:31 prd-ubuntu20-04-docker-8c-8g-8418 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/gexfoundry_device-mqtt-go_PR-560 ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins . Apr 13 07:21:31 prd-ubuntu20-04-docker-8c-8g-8418 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Apr 13 07:21:31 prd-ubuntu20-04-docker-8c-8g-8418 sudo: pam_unix(sudo:session): session closed for user root Apr 13 07:21:31 prd-ubuntu20-04-docker-8c-8g-8418 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/gexfoundry_device-mqtt-go_PR-560 ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins . Apr 13 07:21:31 prd-ubuntu20-04-docker-8c-8g-8418 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Apr 13 07:21:31 prd-ubuntu20-04-docker-8c-8g-8418 sudo: pam_unix(sudo:session): session closed for user root Apr 13 07:22:01 prd-ubuntu20-04-docker-8c-8g-8418 CRON[16550]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 13 07:22:01 prd-ubuntu20-04-docker-8c-8g-8418 CRON[16550]: pam_unix(cron:session): session closed for user root Apr 13 07:23:01 prd-ubuntu20-04-docker-8c-8g-8418 CRON[16837]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 13 07:23:01 prd-ubuntu20-04-docker-8c-8g-8418 CRON[16837]: pam_unix(cron:session): session closed for user root Apr 13 07:24:01 prd-ubuntu20-04-docker-8c-8g-8418 CRON[16841]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 13 07:24:01 prd-ubuntu20-04-docker-8c-8g-8418 CRON[16841]: pam_unix(cron:session): session closed for user root Apr 13 07:24:45 prd-ubuntu20-04-docker-8c-8g-8418 systemd-logind[798]: Watching system buttons on /dev/input/event0 (Power Button) Apr 13 07:24:45 prd-ubuntu20-04-docker-8c-8g-8418 systemd-logind[798]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Apr 13 07:25:01 prd-ubuntu20-04-docker-8c-8g-8418 CRON[18005]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 13 07:25:01 prd-ubuntu20-04-docker-8c-8g-8418 CRON[18005]: pam_unix(cron:session): session closed for user root Apr 13 07:26:01 prd-ubuntu20-04-docker-8c-8g-8418 CRON[18064]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 13 07:26:01 prd-ubuntu20-04-docker-8c-8g-8418 CRON[18064]: pam_unix(cron:session): session closed for user root Apr 13 07:27:01 prd-ubuntu20-04-docker-8c-8g-8418 CRON[18067]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 13 07:27:01 prd-ubuntu20-04-docker-8c-8g-8418 CRON[18067]: pam_unix(cron:session): session closed for user root Apr 13 07:28:01 prd-ubuntu20-04-docker-8c-8g-8418 CRON[18075]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 13 07:28:01 prd-ubuntu20-04-docker-8c-8g-8418 CRON[18075]: pam_unix(cron:session): session closed for user root Apr 13 07:29:01 prd-ubuntu20-04-docker-8c-8g-8418 CRON[18078]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 13 07:29:01 prd-ubuntu20-04-docker-8c-8g-8418 CRON[18078]: pam_unix(cron:session): session closed for user root Apr 13 07:30:01 prd-ubuntu20-04-docker-8c-8g-8418 CRON[18085]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 13 07:30:01 prd-ubuntu20-04-docker-8c-8g-8418 CRON[18085]: pam_unix(cron:session): session closed for user root Apr 13 07:31:01 prd-ubuntu20-04-docker-8c-8g-8418 CRON[18089]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 13 07:31:01 prd-ubuntu20-04-docker-8c-8g-8418 CRON[18089]: pam_unix(cron:session): session closed for user root Apr 13 07:32:01 prd-ubuntu20-04-docker-8c-8g-8418 CRON[18094]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 13 07:32:01 prd-ubuntu20-04-docker-8c-8g-8418 CRON[18094]: pam_unix(cron:session): session closed for user root Apr 13 07:33:01 prd-ubuntu20-04-docker-8c-8g-8418 CRON[18172]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 13 07:33:01 prd-ubuntu20-04-docker-8c-8g-8418 CRON[18172]: pam_unix(cron:session): session closed for user root Apr 13 07:33:02 prd-ubuntu20-04-docker-8c-8g-8418 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/gexfoundry_device-mqtt-go_PR-560 ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins /w/workspace/gexfoundry_device-mqtt-go_PR-560/archives Apr 13 07:33:02 prd-ubuntu20-04-docker-8c-8g-8418 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Apr 13 07:33:02 prd-ubuntu20-04-docker-8c-8g-8418 sudo: pam_unix(sudo:session): session closed for user root