Mar 17 07:29:42 prd-ubuntu20-04-docker-8c-8g-7804 passwd[742]: password for 'ubuntu' changed by 'root' Mar 17 07:29:42 prd-ubuntu20-04-docker-8c-8g-7804 sshd[824]: Server listening on 0.0.0.0 port 22. Mar 17 07:29:42 prd-ubuntu20-04-docker-8c-8g-7804 sshd[824]: Server listening on :: port 22. Mar 17 07:29:42 prd-ubuntu20-04-docker-8c-8g-7804 systemd-logind[800]: Watching system buttons on /dev/input/event0 (Power Button) Mar 17 07:29:42 prd-ubuntu20-04-docker-8c-8g-7804 systemd-logind[800]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Mar 17 07:29:42 prd-ubuntu20-04-docker-8c-8g-7804 systemd-logind[800]: New seat seat0. Mar 17 07:29:43 prd-ubuntu20-04-docker-8c-8g-7804 sshd[914]: error: kex_exchange_identification: Connection closed by remote host Mar 17 07:29:51 prd-ubuntu20-04-docker-8c-8g-7804 sshd[1315]: Invalid user jenkins from 10.30.120.5 port 36978 Mar 17 07:29:51 prd-ubuntu20-04-docker-8c-8g-7804 sshd[1315]: Received disconnect from 10.30.120.5 port 36978:11: Closed due to user request. [preauth] Mar 17 07:29:51 prd-ubuntu20-04-docker-8c-8g-7804 sshd[1315]: Disconnected from invalid user jenkins 10.30.120.5 port 36978 [preauth] Mar 17 07:29:53 prd-ubuntu20-04-docker-8c-8g-7804 sshd[1379]: Invalid user jenkins from 10.30.120.5 port 36980 Mar 17 07:29:53 prd-ubuntu20-04-docker-8c-8g-7804 sshd[1379]: Received disconnect from 10.30.120.5 port 36980:11: Closed due to user request. [preauth] Mar 17 07:29:53 prd-ubuntu20-04-docker-8c-8g-7804 sshd[1379]: Disconnected from invalid user jenkins 10.30.120.5 port 36980 [preauth] Mar 17 07:29:54 prd-ubuntu20-04-docker-8c-8g-7804 systemd-logind[800]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Mar 17 07:29:54 prd-ubuntu20-04-docker-8c-8g-7804 systemd-logind[800]: Watching system buttons on /dev/input/event0 (Power Button) Mar 17 07:29:55 prd-ubuntu20-04-docker-8c-8g-7804 sshd[1570]: Invalid user jenkins from 10.30.120.5 port 36982 Mar 17 07:29:55 prd-ubuntu20-04-docker-8c-8g-7804 sshd[1570]: Received disconnect from 10.30.120.5 port 36982:11: Closed due to user request. [preauth] Mar 17 07:29:55 prd-ubuntu20-04-docker-8c-8g-7804 sshd[1570]: Disconnected from invalid user jenkins 10.30.120.5 port 36982 [preauth] Mar 17 07:29:57 prd-ubuntu20-04-docker-8c-8g-7804 sshd[1587]: Invalid user jenkins from 10.30.120.5 port 36984 Mar 17 07:29:57 prd-ubuntu20-04-docker-8c-8g-7804 sshd[1587]: Received disconnect from 10.30.120.5 port 36984:11: Closed due to user request. [preauth] Mar 17 07:29:57 prd-ubuntu20-04-docker-8c-8g-7804 sshd[1587]: Disconnected from invalid user jenkins 10.30.120.5 port 36984 [preauth] Mar 17 07:29:59 prd-ubuntu20-04-docker-8c-8g-7804 sshd[1590]: Invalid user jenkins from 10.30.120.5 port 36986 Mar 17 07:29:59 prd-ubuntu20-04-docker-8c-8g-7804 sshd[1590]: Received disconnect from 10.30.120.5 port 36986:11: Closed due to user request. [preauth] Mar 17 07:29:59 prd-ubuntu20-04-docker-8c-8g-7804 sshd[1590]: Disconnected from invalid user jenkins 10.30.120.5 port 36986 [preauth] Mar 17 07:30:02 prd-ubuntu20-04-docker-8c-8g-7804 CRON[1848]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 17 07:30:02 prd-ubuntu20-04-docker-8c-8g-7804 CRON[1848]: pam_unix(cron:session): session closed for user root Mar 17 07:30:02 prd-ubuntu20-04-docker-8c-8g-7804 sshd[1879]: Invalid user jenkins from 10.30.120.5 port 37004 Mar 17 07:30:02 prd-ubuntu20-04-docker-8c-8g-7804 sshd[1879]: Received disconnect from 10.30.120.5 port 37004:11: Closed due to user request. [preauth] Mar 17 07:30:02 prd-ubuntu20-04-docker-8c-8g-7804 sshd[1879]: Disconnected from invalid user jenkins 10.30.120.5 port 37004 [preauth] Mar 17 07:30:04 prd-ubuntu20-04-docker-8c-8g-7804 sshd[2110]: Invalid user jenkins from 10.30.120.5 port 37006 Mar 17 07:30:04 prd-ubuntu20-04-docker-8c-8g-7804 sshd[2110]: Received disconnect from 10.30.120.5 port 37006:11: Closed due to user request. [preauth] Mar 17 07:30:04 prd-ubuntu20-04-docker-8c-8g-7804 sshd[2110]: Disconnected from invalid user jenkins 10.30.120.5 port 37006 [preauth] Mar 17 07:30:06 prd-ubuntu20-04-docker-8c-8g-7804 sshd[2145]: Invalid user jenkins from 10.30.120.5 port 37008 Mar 17 07:30:06 prd-ubuntu20-04-docker-8c-8g-7804 sshd[2145]: Received disconnect from 10.30.120.5 port 37008:11: Closed due to user request. [preauth] Mar 17 07:30:06 prd-ubuntu20-04-docker-8c-8g-7804 sshd[2145]: Disconnected from invalid user jenkins 10.30.120.5 port 37008 [preauth] Mar 17 07:30:07 prd-ubuntu20-04-docker-8c-8g-7804 useradd[2237]: new group: name=jenkins, GID=1001 Mar 17 07:30:07 prd-ubuntu20-04-docker-8c-8g-7804 useradd[2237]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash, from=none Mar 17 07:30:07 prd-ubuntu20-04-docker-8c-8g-7804 usermod[2249]: add 'jenkins' to group 'docker' Mar 17 07:30:07 prd-ubuntu20-04-docker-8c-8g-7804 usermod[2249]: add 'jenkins' to shadow group 'docker' Mar 17 07:30:09 prd-ubuntu20-04-docker-8c-8g-7804 sshd[2418]: Accepted publickey for jenkins from 10.30.120.5 port 37010 ssh2: RSA SHA256:aPmPdMw/h9M56P/o8xjsZcdBWoRKGeie6FPOwnlsRmU Mar 17 07:30:09 prd-ubuntu20-04-docker-8c-8g-7804 sshd[2418]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Mar 17 07:30:09 prd-ubuntu20-04-docker-8c-8g-7804 systemd-logind[800]: New session 2 of user jenkins. Mar 17 07:30:09 prd-ubuntu20-04-docker-8c-8g-7804 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Mar 17 07:30:27 prd-ubuntu20-04-docker-8c-8g-7804 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/gexfoundry_device-rest-go_PR-160 ; USER=root ; COMMAND=/usr/bin/mv /tmp/ssh_known_hosts /etc/ssh/ssh_known_hosts Mar 17 07:30:27 prd-ubuntu20-04-docker-8c-8g-7804 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Mar 17 07:30:27 prd-ubuntu20-04-docker-8c-8g-7804 sudo: pam_unix(sudo:session): session closed for user root Mar 17 07:30:27 prd-ubuntu20-04-docker-8c-8g-7804 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/gexfoundry_device-rest-go_PR-160 ; USER=root ; COMMAND=/usr/bin/tee -a /etc/ssh/ssh_known_hosts Mar 17 07:30:27 prd-ubuntu20-04-docker-8c-8g-7804 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Mar 17 07:30:27 prd-ubuntu20-04-docker-8c-8g-7804 sudo: pam_unix(sudo:session): session closed for user root Mar 17 07:30:35 prd-ubuntu20-04-docker-8c-8g-7804 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/gexfoundry_device-rest-go_PR-160 ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins .semver Mar 17 07:30:35 prd-ubuntu20-04-docker-8c-8g-7804 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Mar 17 07:30:35 prd-ubuntu20-04-docker-8c-8g-7804 sudo: pam_unix(sudo:session): session closed for user root Mar 17 07:31:01 prd-ubuntu20-04-docker-8c-8g-7804 CRON[4679]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 17 07:31:01 prd-ubuntu20-04-docker-8c-8g-7804 CRON[4679]: pam_unix(cron:session): session closed for user root Mar 17 07:31:29 prd-ubuntu20-04-docker-8c-8g-7804 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/gexfoundry_device-rest-go_PR-160 ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins . Mar 17 07:31:29 prd-ubuntu20-04-docker-8c-8g-7804 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Mar 17 07:31:29 prd-ubuntu20-04-docker-8c-8g-7804 sudo: pam_unix(sudo:session): session closed for user root Mar 17 07:31:31 prd-ubuntu20-04-docker-8c-8g-7804 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/gexfoundry_device-rest-go_PR-160 ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins . Mar 17 07:31:31 prd-ubuntu20-04-docker-8c-8g-7804 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Mar 17 07:31:31 prd-ubuntu20-04-docker-8c-8g-7804 sudo: pam_unix(sudo:session): session closed for user root Mar 17 07:32:01 prd-ubuntu20-04-docker-8c-8g-7804 CRON[12511]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 17 07:32:01 prd-ubuntu20-04-docker-8c-8g-7804 CRON[12511]: pam_unix(cron:session): session closed for user root Mar 17 07:33:01 prd-ubuntu20-04-docker-8c-8g-7804 CRON[12514]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 17 07:33:01 prd-ubuntu20-04-docker-8c-8g-7804 CRON[12514]: pam_unix(cron:session): session closed for user root Mar 17 07:34:01 prd-ubuntu20-04-docker-8c-8g-7804 CRON[12519]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 17 07:34:01 prd-ubuntu20-04-docker-8c-8g-7804 CRON[12519]: pam_unix(cron:session): session closed for user root Mar 17 07:35:01 prd-ubuntu20-04-docker-8c-8g-7804 CRON[12533]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 17 07:35:01 prd-ubuntu20-04-docker-8c-8g-7804 CRON[12533]: pam_unix(cron:session): session closed for user root Mar 17 07:36:01 prd-ubuntu20-04-docker-8c-8g-7804 CRON[12537]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 17 07:36:01 prd-ubuntu20-04-docker-8c-8g-7804 CRON[12537]: pam_unix(cron:session): session closed for user root Mar 17 07:37:01 prd-ubuntu20-04-docker-8c-8g-7804 CRON[12540]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 17 07:37:01 prd-ubuntu20-04-docker-8c-8g-7804 CRON[12540]: pam_unix(cron:session): session closed for user root Mar 17 07:38:01 prd-ubuntu20-04-docker-8c-8g-7804 CRON[12544]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 17 07:38:01 prd-ubuntu20-04-docker-8c-8g-7804 CRON[12544]: pam_unix(cron:session): session closed for user root Mar 17 07:39:01 prd-ubuntu20-04-docker-8c-8g-7804 CRON[12551]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 17 07:39:01 prd-ubuntu20-04-docker-8c-8g-7804 CRON[12551]: pam_unix(cron:session): session closed for user root Mar 17 07:40:01 prd-ubuntu20-04-docker-8c-8g-7804 CRON[12557]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 17 07:40:01 prd-ubuntu20-04-docker-8c-8g-7804 CRON[12557]: pam_unix(cron:session): session closed for user root Mar 17 07:40:22 prd-ubuntu20-04-docker-8c-8g-7804 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/gexfoundry_device-rest-go_PR-160 ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins /w/workspace/gexfoundry_device-rest-go_PR-160/archives Mar 17 07:40:22 prd-ubuntu20-04-docker-8c-8g-7804 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Mar 17 07:40:22 prd-ubuntu20-04-docker-8c-8g-7804 sudo: pam_unix(sudo:session): session closed for user root