Oct 24 15:49:05 prd-ubuntu20-04-docker-8c-8g-9945 passwd[751]: password for 'ubuntu' changed by 'root' Oct 24 15:49:06 prd-ubuntu20-04-docker-8c-8g-9945 systemd-logind[813]: New seat seat0. Oct 24 15:49:06 prd-ubuntu20-04-docker-8c-8g-9945 sshd[844]: Server listening on 0.0.0.0 port 22. Oct 24 15:49:06 prd-ubuntu20-04-docker-8c-8g-9945 sshd[844]: Server listening on :: port 22. Oct 24 15:49:06 prd-ubuntu20-04-docker-8c-8g-9945 systemd-logind[813]: Watching system buttons on /dev/input/event0 (Power Button) Oct 24 15:49:06 prd-ubuntu20-04-docker-8c-8g-9945 systemd-logind[813]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Oct 24 15:49:07 prd-ubuntu20-04-docker-8c-8g-9945 sshd[1018]: error: kex_exchange_identification: Connection closed by remote host Oct 24 15:49:14 prd-ubuntu20-04-docker-8c-8g-9945 sshd[1036]: Invalid user jenkins from 10.30.120.5 port 50946 Oct 24 15:49:14 prd-ubuntu20-04-docker-8c-8g-9945 sshd[1036]: Received disconnect from 10.30.120.5 port 50946:11: Closed due to user request. [preauth] Oct 24 15:49:14 prd-ubuntu20-04-docker-8c-8g-9945 sshd[1036]: Disconnected from invalid user jenkins 10.30.120.5 port 50946 [preauth] Oct 24 15:49:16 prd-ubuntu20-04-docker-8c-8g-9945 sshd[1038]: Invalid user jenkins from 10.30.120.5 port 50948 Oct 24 15:49:16 prd-ubuntu20-04-docker-8c-8g-9945 sshd[1038]: Received disconnect from 10.30.120.5 port 50948:11: Closed due to user request. [preauth] Oct 24 15:49:16 prd-ubuntu20-04-docker-8c-8g-9945 sshd[1038]: Disconnected from invalid user jenkins 10.30.120.5 port 50948 [preauth] Oct 24 15:49:18 prd-ubuntu20-04-docker-8c-8g-9945 sshd[1040]: Invalid user jenkins from 10.30.120.5 port 50950 Oct 24 15:49:18 prd-ubuntu20-04-docker-8c-8g-9945 sshd[1040]: Received disconnect from 10.30.120.5 port 50950:11: Closed due to user request. [preauth] Oct 24 15:49:18 prd-ubuntu20-04-docker-8c-8g-9945 sshd[1040]: Disconnected from invalid user jenkins 10.30.120.5 port 50950 [preauth] Oct 24 15:49:20 prd-ubuntu20-04-docker-8c-8g-9945 sshd[1042]: Invalid user jenkins from 10.30.120.5 port 50954 Oct 24 15:49:20 prd-ubuntu20-04-docker-8c-8g-9945 sshd[1042]: Received disconnect from 10.30.120.5 port 50954:11: Closed due to user request. [preauth] Oct 24 15:49:20 prd-ubuntu20-04-docker-8c-8g-9945 sshd[1042]: Disconnected from invalid user jenkins 10.30.120.5 port 50954 [preauth] Oct 24 15:49:22 prd-ubuntu20-04-docker-8c-8g-9945 sshd[1044]: Invalid user jenkins from 10.30.120.5 port 50956 Oct 24 15:49:22 prd-ubuntu20-04-docker-8c-8g-9945 sshd[1044]: Received disconnect from 10.30.120.5 port 50956:11: Closed due to user request. [preauth] Oct 24 15:49:22 prd-ubuntu20-04-docker-8c-8g-9945 sshd[1044]: Disconnected from invalid user jenkins 10.30.120.5 port 50956 [preauth] Oct 24 15:49:24 prd-ubuntu20-04-docker-8c-8g-9945 sshd[1220]: Invalid user jenkins from 10.30.120.5 port 50958 Oct 24 15:49:24 prd-ubuntu20-04-docker-8c-8g-9945 sshd[1220]: Received disconnect from 10.30.120.5 port 50958:11: Closed due to user request. [preauth] Oct 24 15:49:24 prd-ubuntu20-04-docker-8c-8g-9945 sshd[1220]: Disconnected from invalid user jenkins 10.30.120.5 port 50958 [preauth] Oct 24 15:49:27 prd-ubuntu20-04-docker-8c-8g-9945 sshd[1260]: Invalid user jenkins from 10.30.120.5 port 50960 Oct 24 15:49:27 prd-ubuntu20-04-docker-8c-8g-9945 sshd[1260]: Received disconnect from 10.30.120.5 port 50960:11: Closed due to user request. [preauth] Oct 24 15:49:27 prd-ubuntu20-04-docker-8c-8g-9945 sshd[1260]: Disconnected from invalid user jenkins 10.30.120.5 port 50960 [preauth] Oct 24 15:49:29 prd-ubuntu20-04-docker-8c-8g-9945 sshd[1262]: Invalid user jenkins from 10.30.120.5 port 50962 Oct 24 15:49:29 prd-ubuntu20-04-docker-8c-8g-9945 sshd[1262]: Received disconnect from 10.30.120.5 port 50962:11: Closed due to user request. [preauth] Oct 24 15:49:29 prd-ubuntu20-04-docker-8c-8g-9945 sshd[1262]: Disconnected from invalid user jenkins 10.30.120.5 port 50962 [preauth] Oct 24 15:49:31 prd-ubuntu20-04-docker-8c-8g-9945 sshd[1286]: Invalid user jenkins from 10.30.120.5 port 50964 Oct 24 15:49:31 prd-ubuntu20-04-docker-8c-8g-9945 useradd[1293]: new group: name=jenkins, GID=1001 Oct 24 15:49:31 prd-ubuntu20-04-docker-8c-8g-9945 useradd[1293]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash, from=none Oct 24 15:49:31 prd-ubuntu20-04-docker-8c-8g-9945 sshd[1286]: Received disconnect from 10.30.120.5 port 50964:11: Closed due to user request. [preauth] Oct 24 15:49:31 prd-ubuntu20-04-docker-8c-8g-9945 sshd[1286]: Disconnected from invalid user jenkins 10.30.120.5 port 50964 [preauth] Oct 24 15:49:31 prd-ubuntu20-04-docker-8c-8g-9945 usermod[1303]: add 'jenkins' to group 'docker' Oct 24 15:49:31 prd-ubuntu20-04-docker-8c-8g-9945 usermod[1303]: add 'jenkins' to shadow group 'docker' Oct 24 15:49:33 prd-ubuntu20-04-docker-8c-8g-9945 sshd[1340]: Accepted publickey for jenkins from 10.30.120.5 port 50966 ssh2: RSA SHA256:aPmPdMw/h9M56P/o8xjsZcdBWoRKGeie6FPOwnlsRmU Oct 24 15:49:33 prd-ubuntu20-04-docker-8c-8g-9945 sshd[1340]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Oct 24 15:49:33 prd-ubuntu20-04-docker-8c-8g-9945 systemd-logind[813]: New session 1 of user jenkins. Oct 24 15:49:33 prd-ubuntu20-04-docker-8c-8g-9945 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Oct 24 15:49:51 prd-ubuntu20-04-docker-8c-8g-9945 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/gexfoundry_device-mqtt-go_PR-635 ; USER=root ; COMMAND=/usr/bin/mv /tmp/ssh_known_hosts /etc/ssh/ssh_known_hosts Oct 24 15:49:51 prd-ubuntu20-04-docker-8c-8g-9945 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Oct 24 15:49:51 prd-ubuntu20-04-docker-8c-8g-9945 sudo: pam_unix(sudo:session): session closed for user root Oct 24 15:49:51 prd-ubuntu20-04-docker-8c-8g-9945 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/gexfoundry_device-mqtt-go_PR-635 ; USER=root ; COMMAND=/usr/bin/tee -a /etc/ssh/ssh_known_hosts Oct 24 15:49:51 prd-ubuntu20-04-docker-8c-8g-9945 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Oct 24 15:49:51 prd-ubuntu20-04-docker-8c-8g-9945 sudo: pam_unix(sudo:session): session closed for user root Oct 24 15:50:01 prd-ubuntu20-04-docker-8c-8g-9945 CRON[2506]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 24 15:50:01 prd-ubuntu20-04-docker-8c-8g-9945 CRON[2506]: pam_unix(cron:session): session closed for user root Oct 24 15:50:06 prd-ubuntu20-04-docker-8c-8g-9945 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/gexfoundry_device-mqtt-go_PR-635 ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins .semver Oct 24 15:50:06 prd-ubuntu20-04-docker-8c-8g-9945 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Oct 24 15:50:06 prd-ubuntu20-04-docker-8c-8g-9945 sudo: pam_unix(sudo:session): session closed for user root Oct 24 15:51:01 prd-ubuntu20-04-docker-8c-8g-9945 CRON[3549]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 24 15:51:01 prd-ubuntu20-04-docker-8c-8g-9945 CRON[3549]: pam_unix(cron:session): session closed for user root Oct 24 15:51:44 prd-ubuntu20-04-docker-8c-8g-9945 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/gexfoundry_device-mqtt-go_PR-635 ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins . Oct 24 15:51:44 prd-ubuntu20-04-docker-8c-8g-9945 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Oct 24 15:51:44 prd-ubuntu20-04-docker-8c-8g-9945 sudo: pam_unix(sudo:session): session closed for user root Oct 24 15:51:45 prd-ubuntu20-04-docker-8c-8g-9945 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/gexfoundry_device-mqtt-go_PR-635 ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins . Oct 24 15:51:45 prd-ubuntu20-04-docker-8c-8g-9945 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Oct 24 15:51:45 prd-ubuntu20-04-docker-8c-8g-9945 sudo: pam_unix(sudo:session): session closed for user root Oct 24 15:52:01 prd-ubuntu20-04-docker-8c-8g-9945 CRON[16212]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 24 15:52:01 prd-ubuntu20-04-docker-8c-8g-9945 CRON[16212]: pam_unix(cron:session): session closed for user root Oct 24 15:53:01 prd-ubuntu20-04-docker-8c-8g-9945 CRON[16956]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 24 15:53:01 prd-ubuntu20-04-docker-8c-8g-9945 CRON[16956]: pam_unix(cron:session): session closed for user root Oct 24 15:54:01 prd-ubuntu20-04-docker-8c-8g-9945 CRON[16962]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 24 15:54:01 prd-ubuntu20-04-docker-8c-8g-9945 CRON[16962]: pam_unix(cron:session): session closed for user root Oct 24 15:55:01 prd-ubuntu20-04-docker-8c-8g-9945 CRON[17528]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 24 15:55:01 prd-ubuntu20-04-docker-8c-8g-9945 CRON[17528]: pam_unix(cron:session): session closed for user root Oct 24 15:56:01 prd-ubuntu20-04-docker-8c-8g-9945 CRON[17532]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 24 15:56:01 prd-ubuntu20-04-docker-8c-8g-9945 CRON[17532]: pam_unix(cron:session): session closed for user root Oct 24 15:57:01 prd-ubuntu20-04-docker-8c-8g-9945 CRON[17535]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 24 15:57:01 prd-ubuntu20-04-docker-8c-8g-9945 CRON[17535]: pam_unix(cron:session): session closed for user root Oct 24 15:58:01 prd-ubuntu20-04-docker-8c-8g-9945 CRON[17539]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 24 15:58:02 prd-ubuntu20-04-docker-8c-8g-9945 CRON[17539]: pam_unix(cron:session): session closed for user root Oct 24 15:59:01 prd-ubuntu20-04-docker-8c-8g-9945 CRON[17542]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 24 15:59:01 prd-ubuntu20-04-docker-8c-8g-9945 CRON[17542]: pam_unix(cron:session): session closed for user root Oct 24 16:00:01 prd-ubuntu20-04-docker-8c-8g-9945 CRON[17551]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 24 16:00:01 prd-ubuntu20-04-docker-8c-8g-9945 CRON[17551]: pam_unix(cron:session): session closed for user root Oct 24 16:01:01 prd-ubuntu20-04-docker-8c-8g-9945 CRON[17554]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 24 16:01:01 prd-ubuntu20-04-docker-8c-8g-9945 CRON[17554]: pam_unix(cron:session): session closed for user root Oct 24 16:01:49 prd-ubuntu20-04-docker-8c-8g-9945 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/gexfoundry_device-mqtt-go_PR-635 ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins /w/workspace/gexfoundry_device-mqtt-go_PR-635/archives Oct 24 16:01:49 prd-ubuntu20-04-docker-8c-8g-9945 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Oct 24 16:01:49 prd-ubuntu20-04-docker-8c-8g-9945 sudo: pam_unix(sudo:session): session closed for user root