Nov 7 01:16:11 prd-ubuntu20-04-docker-8c-8g-16785 passwd[774]: password for 'ubuntu' changed by 'root' Nov 7 01:16:11 prd-ubuntu20-04-docker-8c-8g-16785 systemd-logind[849]: New seat seat0. Nov 7 01:16:11 prd-ubuntu20-04-docker-8c-8g-16785 systemd-logind[849]: Watching system buttons on /dev/input/event0 (Power Button) Nov 7 01:16:11 prd-ubuntu20-04-docker-8c-8g-16785 systemd-logind[849]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Nov 7 01:16:11 prd-ubuntu20-04-docker-8c-8g-16785 sshd[895]: Server listening on 0.0.0.0 port 22. Nov 7 01:16:11 prd-ubuntu20-04-docker-8c-8g-16785 sshd[895]: Server listening on :: port 22. Nov 7 01:16:13 prd-ubuntu20-04-docker-8c-8g-16785 sshd[926]: error: kex_exchange_identification: Connection closed by remote host Nov 7 01:16:15 prd-ubuntu20-04-docker-8c-8g-16785 sshd[928]: Invalid user jenkins from 10.30.120.5 port 48922 Nov 7 01:16:17 prd-ubuntu20-04-docker-8c-8g-16785 sshd[937]: Invalid user jenkins from 10.30.120.5 port 48924 Nov 7 01:16:19 prd-ubuntu20-04-docker-8c-8g-16785 sshd[949]: Invalid user jenkins from 10.30.120.5 port 48926 Nov 7 01:16:20 prd-ubuntu20-04-docker-8c-8g-16785 sshd[928]: Received disconnect from 10.30.120.5 port 48922:11: Closed due to user request. [preauth] Nov 7 01:16:20 prd-ubuntu20-04-docker-8c-8g-16785 sshd[937]: Received disconnect from 10.30.120.5 port 48924:11: Closed due to user request. [preauth] Nov 7 01:16:20 prd-ubuntu20-04-docker-8c-8g-16785 sshd[928]: Disconnected from invalid user jenkins 10.30.120.5 port 48922 [preauth] Nov 7 01:16:20 prd-ubuntu20-04-docker-8c-8g-16785 sshd[949]: Received disconnect from 10.30.120.5 port 48926:11: Closed due to user request. [preauth] Nov 7 01:16:20 prd-ubuntu20-04-docker-8c-8g-16785 sshd[937]: Disconnected from invalid user jenkins 10.30.120.5 port 48924 [preauth] Nov 7 01:16:20 prd-ubuntu20-04-docker-8c-8g-16785 sshd[949]: Disconnected from invalid user jenkins 10.30.120.5 port 48926 [preauth] Nov 7 01:16:21 prd-ubuntu20-04-docker-8c-8g-16785 sshd[968]: Invalid user jenkins from 10.30.120.5 port 48928 Nov 7 01:16:21 prd-ubuntu20-04-docker-8c-8g-16785 sshd[968]: Received disconnect from 10.30.120.5 port 48928:11: Closed due to user request. [preauth] Nov 7 01:16:21 prd-ubuntu20-04-docker-8c-8g-16785 sshd[968]: Disconnected from invalid user jenkins 10.30.120.5 port 48928 [preauth] Nov 7 01:16:24 prd-ubuntu20-04-docker-8c-8g-16785 sshd[1027]: Invalid user jenkins from 10.30.120.5 port 48932 Nov 7 01:16:24 prd-ubuntu20-04-docker-8c-8g-16785 sshd[1027]: Received disconnect from 10.30.120.5 port 48932:11: Closed due to user request. [preauth] Nov 7 01:16:24 prd-ubuntu20-04-docker-8c-8g-16785 sshd[1027]: Disconnected from invalid user jenkins 10.30.120.5 port 48932 [preauth] Nov 7 01:16:26 prd-ubuntu20-04-docker-8c-8g-16785 sshd[1044]: Invalid user jenkins from 10.30.120.5 port 48934 Nov 7 01:16:26 prd-ubuntu20-04-docker-8c-8g-16785 sshd[1044]: Received disconnect from 10.30.120.5 port 48934:11: Closed due to user request. [preauth] Nov 7 01:16:26 prd-ubuntu20-04-docker-8c-8g-16785 sshd[1044]: Disconnected from invalid user jenkins 10.30.120.5 port 48934 [preauth] Nov 7 01:16:28 prd-ubuntu20-04-docker-8c-8g-16785 sshd[1053]: Invalid user jenkins from 10.30.120.5 port 48936 Nov 7 01:16:28 prd-ubuntu20-04-docker-8c-8g-16785 sshd[1053]: Received disconnect from 10.30.120.5 port 48936:11: Closed due to user request. [preauth] Nov 7 01:16:28 prd-ubuntu20-04-docker-8c-8g-16785 sshd[1053]: Disconnected from invalid user jenkins 10.30.120.5 port 48936 [preauth] Nov 7 01:16:30 prd-ubuntu20-04-docker-8c-8g-16785 sshd[1057]: Invalid user jenkins from 10.30.120.5 port 48944 Nov 7 01:16:30 prd-ubuntu20-04-docker-8c-8g-16785 sshd[1057]: Received disconnect from 10.30.120.5 port 48944:11: Closed due to user request. [preauth] Nov 7 01:16:30 prd-ubuntu20-04-docker-8c-8g-16785 sshd[1057]: Disconnected from invalid user jenkins 10.30.120.5 port 48944 [preauth] Nov 7 01:16:32 prd-ubuntu20-04-docker-8c-8g-16785 sshd[1073]: Invalid user jenkins from 10.30.120.5 port 48946 Nov 7 01:16:32 prd-ubuntu20-04-docker-8c-8g-16785 sshd[1073]: Received disconnect from 10.30.120.5 port 48946:11: Closed due to user request. [preauth] Nov 7 01:16:32 prd-ubuntu20-04-docker-8c-8g-16785 sshd[1073]: Disconnected from invalid user jenkins 10.30.120.5 port 48946 [preauth] Nov 7 01:16:34 prd-ubuntu20-04-docker-8c-8g-16785 sshd[1094]: Invalid user jenkins from 10.30.120.5 port 48948 Nov 7 01:16:34 prd-ubuntu20-04-docker-8c-8g-16785 sshd[1094]: Received disconnect from 10.30.120.5 port 48948:11: Closed due to user request. [preauth] Nov 7 01:16:34 prd-ubuntu20-04-docker-8c-8g-16785 sshd[1094]: Disconnected from invalid user jenkins 10.30.120.5 port 48948 [preauth] Nov 7 01:16:36 prd-ubuntu20-04-docker-8c-8g-16785 sshd[1099]: Invalid user jenkins from 10.30.120.5 port 48950 Nov 7 01:16:36 prd-ubuntu20-04-docker-8c-8g-16785 sshd[1099]: Received disconnect from 10.30.120.5 port 48950:11: Closed due to user request. [preauth] Nov 7 01:16:36 prd-ubuntu20-04-docker-8c-8g-16785 sshd[1099]: Disconnected from invalid user jenkins 10.30.120.5 port 48950 [preauth] Nov 7 01:16:39 prd-ubuntu20-04-docker-8c-8g-16785 sshd[1102]: Invalid user jenkins from 10.30.120.5 port 48954 Nov 7 01:16:39 prd-ubuntu20-04-docker-8c-8g-16785 sshd[1102]: Received disconnect from 10.30.120.5 port 48954:11: Closed due to user request. [preauth] Nov 7 01:16:39 prd-ubuntu20-04-docker-8c-8g-16785 sshd[1102]: Disconnected from invalid user jenkins 10.30.120.5 port 48954 [preauth] Nov 7 01:16:41 prd-ubuntu20-04-docker-8c-8g-16785 sshd[1250]: Invalid user jenkins from 10.30.120.5 port 48956 Nov 7 01:16:41 prd-ubuntu20-04-docker-8c-8g-16785 sshd[1250]: Received disconnect from 10.30.120.5 port 48956:11: Closed due to user request. [preauth] Nov 7 01:16:41 prd-ubuntu20-04-docker-8c-8g-16785 sshd[1250]: Disconnected from invalid user jenkins 10.30.120.5 port 48956 [preauth] Nov 7 01:16:43 prd-ubuntu20-04-docker-8c-8g-16785 sshd[1252]: Invalid user jenkins from 10.30.120.5 port 48958 Nov 7 01:16:43 prd-ubuntu20-04-docker-8c-8g-16785 sshd[1252]: Received disconnect from 10.30.120.5 port 48958:11: Closed due to user request. [preauth] Nov 7 01:16:43 prd-ubuntu20-04-docker-8c-8g-16785 sshd[1252]: Disconnected from invalid user jenkins 10.30.120.5 port 48958 [preauth] Nov 7 01:16:45 prd-ubuntu20-04-docker-8c-8g-16785 sshd[1256]: Invalid user jenkins from 10.30.120.5 port 48960 Nov 7 01:16:45 prd-ubuntu20-04-docker-8c-8g-16785 sshd[1256]: Received disconnect from 10.30.120.5 port 48960:11: Closed due to user request. [preauth] Nov 7 01:16:45 prd-ubuntu20-04-docker-8c-8g-16785 sshd[1256]: Disconnected from invalid user jenkins 10.30.120.5 port 48960 [preauth] Nov 7 01:16:47 prd-ubuntu20-04-docker-8c-8g-16785 sshd[1258]: Invalid user jenkins from 10.30.120.5 port 48962 Nov 7 01:16:47 prd-ubuntu20-04-docker-8c-8g-16785 sshd[1258]: Received disconnect from 10.30.120.5 port 48962:11: Closed due to user request. [preauth] Nov 7 01:16:47 prd-ubuntu20-04-docker-8c-8g-16785 sshd[1258]: Disconnected from invalid user jenkins 10.30.120.5 port 48962 [preauth] Nov 7 01:16:49 prd-ubuntu20-04-docker-8c-8g-16785 sshd[1277]: Invalid user jenkins from 10.30.120.5 port 48964 Nov 7 01:16:49 prd-ubuntu20-04-docker-8c-8g-16785 sshd[1277]: Received disconnect from 10.30.120.5 port 48964:11: Closed due to user request. [preauth] Nov 7 01:16:49 prd-ubuntu20-04-docker-8c-8g-16785 sshd[1277]: Disconnected from invalid user jenkins 10.30.120.5 port 48964 [preauth] Nov 7 01:16:51 prd-ubuntu20-04-docker-8c-8g-16785 sshd[1416]: Invalid user jenkins from 10.30.120.5 port 48966 Nov 7 01:16:51 prd-ubuntu20-04-docker-8c-8g-16785 sshd[1416]: Received disconnect from 10.30.120.5 port 48966:11: Closed due to user request. [preauth] Nov 7 01:16:51 prd-ubuntu20-04-docker-8c-8g-16785 sshd[1416]: Disconnected from invalid user jenkins 10.30.120.5 port 48966 [preauth] Nov 7 01:16:53 prd-ubuntu20-04-docker-8c-8g-16785 sshd[1625]: Invalid user jenkins from 10.30.120.5 port 48970 Nov 7 01:16:54 prd-ubuntu20-04-docker-8c-8g-16785 sshd[1625]: Received disconnect from 10.30.120.5 port 48970:11: Closed due to user request. [preauth] Nov 7 01:16:54 prd-ubuntu20-04-docker-8c-8g-16785 sshd[1625]: Disconnected from invalid user jenkins 10.30.120.5 port 48970 [preauth] Nov 7 01:16:56 prd-ubuntu20-04-docker-8c-8g-16785 sshd[1666]: Invalid user jenkins from 10.30.120.5 port 48972 Nov 7 01:16:56 prd-ubuntu20-04-docker-8c-8g-16785 sshd[1666]: Received disconnect from 10.30.120.5 port 48972:11: Closed due to user request. [preauth] Nov 7 01:16:56 prd-ubuntu20-04-docker-8c-8g-16785 sshd[1666]: Disconnected from invalid user jenkins 10.30.120.5 port 48972 [preauth] Nov 7 01:16:58 prd-ubuntu20-04-docker-8c-8g-16785 sshd[1668]: Invalid user jenkins from 10.30.120.5 port 48974 Nov 7 01:16:58 prd-ubuntu20-04-docker-8c-8g-16785 sshd[1668]: Received disconnect from 10.30.120.5 port 48974:11: Closed due to user request. [preauth] Nov 7 01:16:58 prd-ubuntu20-04-docker-8c-8g-16785 sshd[1668]: Disconnected from invalid user jenkins 10.30.120.5 port 48974 [preauth] Nov 7 01:17:00 prd-ubuntu20-04-docker-8c-8g-16785 sshd[1670]: Invalid user jenkins from 10.30.120.5 port 48982 Nov 7 01:17:00 prd-ubuntu20-04-docker-8c-8g-16785 sshd[1670]: Received disconnect from 10.30.120.5 port 48982:11: Closed due to user request. [preauth] Nov 7 01:17:00 prd-ubuntu20-04-docker-8c-8g-16785 sshd[1670]: Disconnected from invalid user jenkins 10.30.120.5 port 48982 [preauth] Nov 7 01:17:01 prd-ubuntu20-04-docker-8c-8g-16785 CRON[1672]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 7 01:17:01 prd-ubuntu20-04-docker-8c-8g-16785 CRON[1673]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 7 01:17:01 prd-ubuntu20-04-docker-8c-8g-16785 CRON[1672]: pam_unix(cron:session): session closed for user root Nov 7 01:17:01 prd-ubuntu20-04-docker-8c-8g-16785 CRON[1673]: pam_unix(cron:session): session closed for user root Nov 7 01:17:02 prd-ubuntu20-04-docker-8c-8g-16785 sshd[1687]: Invalid user jenkins from 10.30.120.5 port 48984 Nov 7 01:17:02 prd-ubuntu20-04-docker-8c-8g-16785 sshd[1687]: Received disconnect from 10.30.120.5 port 48984:11: Closed due to user request. [preauth] Nov 7 01:17:02 prd-ubuntu20-04-docker-8c-8g-16785 sshd[1687]: Disconnected from invalid user jenkins 10.30.120.5 port 48984 [preauth] Nov 7 01:17:04 prd-ubuntu20-04-docker-8c-8g-16785 sshd[1689]: Invalid user jenkins from 10.30.120.5 port 48986 Nov 7 01:17:04 prd-ubuntu20-04-docker-8c-8g-16785 sshd[1689]: Received disconnect from 10.30.120.5 port 48986:11: Closed due to user request. [preauth] Nov 7 01:17:04 prd-ubuntu20-04-docker-8c-8g-16785 sshd[1689]: Disconnected from invalid user jenkins 10.30.120.5 port 48986 [preauth] Nov 7 01:17:06 prd-ubuntu20-04-docker-8c-8g-16785 useradd[1712]: new group: name=jenkins, GID=1001 Nov 7 01:17:06 prd-ubuntu20-04-docker-8c-8g-16785 useradd[1712]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash, from=none Nov 7 01:17:06 prd-ubuntu20-04-docker-8c-8g-16785 sshd[1713]: Invalid user jenkins from 10.30.120.5 port 48988 Nov 7 01:17:06 prd-ubuntu20-04-docker-8c-8g-16785 sshd[1713]: Received disconnect from 10.30.120.5 port 48988:11: Closed due to user request. [preauth] Nov 7 01:17:06 prd-ubuntu20-04-docker-8c-8g-16785 sshd[1713]: Disconnected from invalid user jenkins 10.30.120.5 port 48988 [preauth] Nov 7 01:17:07 prd-ubuntu20-04-docker-8c-8g-16785 usermod[1731]: add 'jenkins' to group 'docker' Nov 7 01:17:07 prd-ubuntu20-04-docker-8c-8g-16785 usermod[1731]: add 'jenkins' to shadow group 'docker' Nov 7 01:17:08 prd-ubuntu20-04-docker-8c-8g-16785 sshd[2077]: Accepted publickey for jenkins from 10.30.120.5 port 48992 ssh2: RSA SHA256:aPmPdMw/h9M56P/o8xjsZcdBWoRKGeie6FPOwnlsRmU Nov 7 01:17:08 prd-ubuntu20-04-docker-8c-8g-16785 sshd[2077]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Nov 7 01:17:08 prd-ubuntu20-04-docker-8c-8g-16785 systemd-logind[849]: New session 3 of user jenkins. Nov 7 01:17:08 prd-ubuntu20-04-docker-8c-8g-16785 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Nov 7 01:17:27 prd-ubuntu20-04-docker-8c-8g-16785 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/gexfoundry_device-mqtt-go_PR-643 ; USER=root ; COMMAND=/usr/bin/mv /tmp/ssh_known_hosts /etc/ssh/ssh_known_hosts Nov 7 01:17:27 prd-ubuntu20-04-docker-8c-8g-16785 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Nov 7 01:17:27 prd-ubuntu20-04-docker-8c-8g-16785 sudo: pam_unix(sudo:session): session closed for user root Nov 7 01:17:27 prd-ubuntu20-04-docker-8c-8g-16785 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/gexfoundry_device-mqtt-go_PR-643 ; USER=root ; COMMAND=/usr/bin/tee -a /etc/ssh/ssh_known_hosts Nov 7 01:17:27 prd-ubuntu20-04-docker-8c-8g-16785 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Nov 7 01:17:27 prd-ubuntu20-04-docker-8c-8g-16785 sudo: pam_unix(sudo:session): session closed for user root Nov 7 01:18:01 prd-ubuntu20-04-docker-8c-8g-16785 CRON[3364]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 7 01:18:01 prd-ubuntu20-04-docker-8c-8g-16785 CRON[3364]: pam_unix(cron:session): session closed for user root Nov 7 01:18:06 prd-ubuntu20-04-docker-8c-8g-16785 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/gexfoundry_device-mqtt-go_PR-643 ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins .semver Nov 7 01:18:06 prd-ubuntu20-04-docker-8c-8g-16785 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Nov 7 01:18:06 prd-ubuntu20-04-docker-8c-8g-16785 sudo: pam_unix(sudo:session): session closed for user root Nov 7 01:19:01 prd-ubuntu20-04-docker-8c-8g-16785 CRON[4198]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 7 01:19:01 prd-ubuntu20-04-docker-8c-8g-16785 CRON[4198]: pam_unix(cron:session): session closed for user root Nov 7 01:20:01 prd-ubuntu20-04-docker-8c-8g-16785 CRON[8904]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 7 01:20:01 prd-ubuntu20-04-docker-8c-8g-16785 CRON[8904]: pam_unix(cron:session): session closed for user root Nov 7 01:20:19 prd-ubuntu20-04-docker-8c-8g-16785 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/gexfoundry_device-mqtt-go_PR-643 ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins . Nov 7 01:20:19 prd-ubuntu20-04-docker-8c-8g-16785 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Nov 7 01:20:19 prd-ubuntu20-04-docker-8c-8g-16785 sudo: pam_unix(sudo:session): session closed for user root Nov 7 01:20:20 prd-ubuntu20-04-docker-8c-8g-16785 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/gexfoundry_device-mqtt-go_PR-643 ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins . Nov 7 01:20:20 prd-ubuntu20-04-docker-8c-8g-16785 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Nov 7 01:20:20 prd-ubuntu20-04-docker-8c-8g-16785 sudo: pam_unix(sudo:session): session closed for user root Nov 7 01:21:01 prd-ubuntu20-04-docker-8c-8g-16785 CRON[17475]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 7 01:21:01 prd-ubuntu20-04-docker-8c-8g-16785 CRON[17475]: pam_unix(cron:session): session closed for user root Nov 7 01:22:01 prd-ubuntu20-04-docker-8c-8g-16785 CRON[17729]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 7 01:22:01 prd-ubuntu20-04-docker-8c-8g-16785 CRON[17729]: pam_unix(cron:session): session closed for user root Nov 7 01:23:01 prd-ubuntu20-04-docker-8c-8g-16785 CRON[17734]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 7 01:23:01 prd-ubuntu20-04-docker-8c-8g-16785 CRON[17734]: pam_unix(cron:session): session closed for user root Nov 7 01:24:01 prd-ubuntu20-04-docker-8c-8g-16785 CRON[17737]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 7 01:24:01 prd-ubuntu20-04-docker-8c-8g-16785 CRON[17737]: pam_unix(cron:session): session closed for user root Nov 7 01:25:01 prd-ubuntu20-04-docker-8c-8g-16785 CRON[17741]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 7 01:25:01 prd-ubuntu20-04-docker-8c-8g-16785 CRON[17741]: pam_unix(cron:session): session closed for user root Nov 7 01:26:01 prd-ubuntu20-04-docker-8c-8g-16785 CRON[17747]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 7 01:26:01 prd-ubuntu20-04-docker-8c-8g-16785 CRON[17747]: pam_unix(cron:session): session closed for user root Nov 7 01:27:01 prd-ubuntu20-04-docker-8c-8g-16785 CRON[17752]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 7 01:27:01 prd-ubuntu20-04-docker-8c-8g-16785 CRON[17752]: pam_unix(cron:session): session closed for user root Nov 7 01:28:01 prd-ubuntu20-04-docker-8c-8g-16785 CRON[17756]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 7 01:28:01 prd-ubuntu20-04-docker-8c-8g-16785 CRON[17756]: pam_unix(cron:session): session closed for user root Nov 7 01:29:01 prd-ubuntu20-04-docker-8c-8g-16785 CRON[17764]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 7 01:29:01 prd-ubuntu20-04-docker-8c-8g-16785 CRON[17764]: pam_unix(cron:session): session closed for user root Nov 7 01:30:01 prd-ubuntu20-04-docker-8c-8g-16785 CRON[17782]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 7 01:30:01 prd-ubuntu20-04-docker-8c-8g-16785 CRON[17782]: pam_unix(cron:session): session closed for user root Nov 7 01:31:01 prd-ubuntu20-04-docker-8c-8g-16785 CRON[17790]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 7 01:31:01 prd-ubuntu20-04-docker-8c-8g-16785 CRON[17790]: pam_unix(cron:session): session closed for user root Nov 7 01:31:40 prd-ubuntu20-04-docker-8c-8g-16785 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/gexfoundry_device-mqtt-go_PR-643 ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins /w/workspace/gexfoundry_device-mqtt-go_PR-643/archives Nov 7 01:31:40 prd-ubuntu20-04-docker-8c-8g-16785 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Nov 7 01:31:40 prd-ubuntu20-04-docker-8c-8g-16785 sudo: pam_unix(sudo:session): session closed for user root