Apr 14 20:04:03 prd-ubuntu20-04-docker-8c-8g-44954 passwd[778]: password for 'ubuntu' changed by 'root' Apr 14 20:04:03 prd-ubuntu20-04-docker-8c-8g-44954 systemd-logind[833]: New seat seat0. Apr 14 20:04:03 prd-ubuntu20-04-docker-8c-8g-44954 systemd-logind[833]: Watching system buttons on /dev/input/event0 (Power Button) Apr 14 20:04:03 prd-ubuntu20-04-docker-8c-8g-44954 systemd-logind[833]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Apr 14 20:04:03 prd-ubuntu20-04-docker-8c-8g-44954 sshd[883]: Server listening on 0.0.0.0 port 22. Apr 14 20:04:03 prd-ubuntu20-04-docker-8c-8g-44954 sshd[883]: Server listening on :: port 22. Apr 14 20:04:03 prd-ubuntu20-04-docker-8c-8g-44954 sshd[941]: error: kex_exchange_identification: Connection closed by remote host Apr 14 20:04:04 prd-ubuntu20-04-docker-8c-8g-44954 sshd[1038]: Invalid user jenkins from 10.30.120.5 port 38458 Apr 14 20:04:05 prd-ubuntu20-04-docker-8c-8g-44954 sshd[1038]: Received disconnect from 10.30.120.5 port 38458:11: Closed due to user request. [preauth] Apr 14 20:04:05 prd-ubuntu20-04-docker-8c-8g-44954 sshd[1038]: Disconnected from invalid user jenkins 10.30.120.5 port 38458 [preauth] Apr 14 20:04:07 prd-ubuntu20-04-docker-8c-8g-44954 sshd[1048]: Invalid user jenkins from 10.30.120.5 port 38460 Apr 14 20:04:07 prd-ubuntu20-04-docker-8c-8g-44954 sshd[1048]: Received disconnect from 10.30.120.5 port 38460:11: Closed due to user request. [preauth] Apr 14 20:04:07 prd-ubuntu20-04-docker-8c-8g-44954 sshd[1048]: Disconnected from invalid user jenkins 10.30.120.5 port 38460 [preauth] Apr 14 20:04:09 prd-ubuntu20-04-docker-8c-8g-44954 sshd[1056]: Invalid user jenkins from 10.30.120.5 port 38462 Apr 14 20:04:09 prd-ubuntu20-04-docker-8c-8g-44954 sshd[1056]: Received disconnect from 10.30.120.5 port 38462:11: Closed due to user request. [preauth] Apr 14 20:04:09 prd-ubuntu20-04-docker-8c-8g-44954 sshd[1056]: Disconnected from invalid user jenkins 10.30.120.5 port 38462 [preauth] Apr 14 20:04:11 prd-ubuntu20-04-docker-8c-8g-44954 sshd[1059]: Invalid user jenkins from 10.30.120.5 port 38464 Apr 14 20:04:11 prd-ubuntu20-04-docker-8c-8g-44954 sshd[1059]: Received disconnect from 10.30.120.5 port 38464:11: Closed due to user request. [preauth] Apr 14 20:04:11 prd-ubuntu20-04-docker-8c-8g-44954 sshd[1059]: Disconnected from invalid user jenkins 10.30.120.5 port 38464 [preauth] Apr 14 20:04:13 prd-ubuntu20-04-docker-8c-8g-44954 sshd[1061]: Invalid user jenkins from 10.30.120.5 port 38468 Apr 14 20:04:13 prd-ubuntu20-04-docker-8c-8g-44954 sshd[1061]: Received disconnect from 10.30.120.5 port 38468:11: Closed due to user request. [preauth] Apr 14 20:04:13 prd-ubuntu20-04-docker-8c-8g-44954 sshd[1061]: Disconnected from invalid user jenkins 10.30.120.5 port 38468 [preauth] Apr 14 20:04:15 prd-ubuntu20-04-docker-8c-8g-44954 sshd[1063]: Invalid user jenkins from 10.30.120.5 port 38470 Apr 14 20:04:15 prd-ubuntu20-04-docker-8c-8g-44954 sshd[1063]: Received disconnect from 10.30.120.5 port 38470:11: Closed due to user request. [preauth] Apr 14 20:04:15 prd-ubuntu20-04-docker-8c-8g-44954 sshd[1063]: Disconnected from invalid user jenkins 10.30.120.5 port 38470 [preauth] Apr 14 20:04:17 prd-ubuntu20-04-docker-8c-8g-44954 sshd[1065]: Invalid user jenkins from 10.30.120.5 port 38472 Apr 14 20:04:17 prd-ubuntu20-04-docker-8c-8g-44954 sshd[1065]: Received disconnect from 10.30.120.5 port 38472:11: Closed due to user request. [preauth] Apr 14 20:04:17 prd-ubuntu20-04-docker-8c-8g-44954 sshd[1065]: Disconnected from invalid user jenkins 10.30.120.5 port 38472 [preauth] Apr 14 20:04:19 prd-ubuntu20-04-docker-8c-8g-44954 sshd[1067]: Invalid user jenkins from 10.30.120.5 port 38474 Apr 14 20:04:20 prd-ubuntu20-04-docker-8c-8g-44954 sshd[1067]: Received disconnect from 10.30.120.5 port 38474:11: Closed due to user request. [preauth] Apr 14 20:04:20 prd-ubuntu20-04-docker-8c-8g-44954 sshd[1067]: Disconnected from invalid user jenkins 10.30.120.5 port 38474 [preauth] Apr 14 20:04:22 prd-ubuntu20-04-docker-8c-8g-44954 sshd[1230]: Invalid user jenkins from 10.30.120.5 port 38476 Apr 14 20:04:22 prd-ubuntu20-04-docker-8c-8g-44954 sshd[1230]: Received disconnect from 10.30.120.5 port 38476:11: Closed due to user request. [preauth] Apr 14 20:04:22 prd-ubuntu20-04-docker-8c-8g-44954 sshd[1230]: Disconnected from invalid user jenkins 10.30.120.5 port 38476 [preauth] Apr 14 20:04:24 prd-ubuntu20-04-docker-8c-8g-44954 sshd[1273]: Invalid user jenkins from 10.30.120.5 port 38478 Apr 14 20:04:24 prd-ubuntu20-04-docker-8c-8g-44954 sshd[1273]: Received disconnect from 10.30.120.5 port 38478:11: Closed due to user request. [preauth] Apr 14 20:04:24 prd-ubuntu20-04-docker-8c-8g-44954 sshd[1273]: Disconnected from invalid user jenkins 10.30.120.5 port 38478 [preauth] Apr 14 20:04:26 prd-ubuntu20-04-docker-8c-8g-44954 sshd[1275]: Invalid user jenkins from 10.30.120.5 port 38486 Apr 14 20:04:26 prd-ubuntu20-04-docker-8c-8g-44954 sshd[1275]: Received disconnect from 10.30.120.5 port 38486:11: Closed due to user request. [preauth] Apr 14 20:04:26 prd-ubuntu20-04-docker-8c-8g-44954 sshd[1275]: Disconnected from invalid user jenkins 10.30.120.5 port 38486 [preauth] Apr 14 20:04:27 prd-ubuntu20-04-docker-8c-8g-44954 useradd[1296]: new group: name=jenkins, GID=1001 Apr 14 20:04:27 prd-ubuntu20-04-docker-8c-8g-44954 useradd[1296]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash, from=none Apr 14 20:04:27 prd-ubuntu20-04-docker-8c-8g-44954 usermod[1306]: add 'jenkins' to group 'docker' Apr 14 20:04:27 prd-ubuntu20-04-docker-8c-8g-44954 usermod[1306]: add 'jenkins' to shadow group 'docker' Apr 14 20:04:29 prd-ubuntu20-04-docker-8c-8g-44954 sshd[1343]: Accepted publickey for jenkins from 10.30.120.5 port 38490 ssh2: RSA SHA256:aPmPdMw/h9M56P/o8xjsZcdBWoRKGeie6FPOwnlsRmU Apr 14 20:04:29 prd-ubuntu20-04-docker-8c-8g-44954 sshd[1343]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Apr 14 20:04:29 prd-ubuntu20-04-docker-8c-8g-44954 systemd-logind[833]: New session 1 of user jenkins. Apr 14 20:04:29 prd-ubuntu20-04-docker-8c-8g-44954 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Apr 14 20:04:58 prd-ubuntu20-04-docker-8c-8g-44954 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/gexfoundry_device-mqtt-go_PR-739 ; USER=root ; COMMAND=/usr/bin/mv /tmp/ssh_known_hosts /etc/ssh/ssh_known_hosts Apr 14 20:04:58 prd-ubuntu20-04-docker-8c-8g-44954 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Apr 14 20:04:58 prd-ubuntu20-04-docker-8c-8g-44954 sudo: pam_unix(sudo:session): session closed for user root Apr 14 20:04:58 prd-ubuntu20-04-docker-8c-8g-44954 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/gexfoundry_device-mqtt-go_PR-739 ; USER=root ; COMMAND=/usr/bin/tee -a /etc/ssh/ssh_known_hosts Apr 14 20:04:58 prd-ubuntu20-04-docker-8c-8g-44954 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Apr 14 20:04:58 prd-ubuntu20-04-docker-8c-8g-44954 sudo: pam_unix(sudo:session): session closed for user root Apr 14 20:05:01 prd-ubuntu20-04-docker-8c-8g-44954 CRON[2053]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 14 20:05:01 prd-ubuntu20-04-docker-8c-8g-44954 CRON[2053]: pam_unix(cron:session): session closed for user root Apr 14 20:05:13 prd-ubuntu20-04-docker-8c-8g-44954 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/gexfoundry_device-mqtt-go_PR-739 ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins .semver Apr 14 20:05:13 prd-ubuntu20-04-docker-8c-8g-44954 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Apr 14 20:05:13 prd-ubuntu20-04-docker-8c-8g-44954 sudo: pam_unix(sudo:session): session closed for user root Apr 14 20:06:01 prd-ubuntu20-04-docker-8c-8g-44954 CRON[3563]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 14 20:06:01 prd-ubuntu20-04-docker-8c-8g-44954 CRON[3563]: pam_unix(cron:session): session closed for user root Apr 14 20:06:30 prd-ubuntu20-04-docker-8c-8g-44954 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/gexfoundry_device-mqtt-go_PR-739 ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins /w/workspace/gexfoundry_device-mqtt-go_PR-739/archives Apr 14 20:06:30 prd-ubuntu20-04-docker-8c-8g-44954 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Apr 14 20:06:30 prd-ubuntu20-04-docker-8c-8g-44954 sudo: pam_unix(sudo:session): session closed for user root