Jun 2 04:49:53 prd-ubuntu20-04-docker-8c-8g-2629 passwd[751]: password for 'ubuntu' changed by 'root' Jun 2 04:49:53 prd-ubuntu20-04-docker-8c-8g-2629 systemd-logind[811]: New seat seat0. Jun 2 04:49:53 prd-ubuntu20-04-docker-8c-8g-2629 sshd[854]: Server listening on 0.0.0.0 port 22. Jun 2 04:49:53 prd-ubuntu20-04-docker-8c-8g-2629 systemd-logind[811]: Watching system buttons on /dev/input/event0 (Power Button) Jun 2 04:49:53 prd-ubuntu20-04-docker-8c-8g-2629 sshd[854]: Server listening on :: port 22. Jun 2 04:49:53 prd-ubuntu20-04-docker-8c-8g-2629 systemd-logind[811]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Jun 2 04:50:07 prd-ubuntu20-04-docker-8c-8g-2629 sshd[963]: error: kex_exchange_identification: Connection closed by remote host Jun 2 04:50:07 prd-ubuntu20-04-docker-8c-8g-2629 sshd[976]: Invalid user jenkins from 10.30.120.5 port 47466 Jun 2 04:50:07 prd-ubuntu20-04-docker-8c-8g-2629 CRON[975]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 2 04:50:07 prd-ubuntu20-04-docker-8c-8g-2629 CRON[975]: pam_unix(cron:session): session closed for user root Jun 2 04:50:07 prd-ubuntu20-04-docker-8c-8g-2629 sshd[976]: Received disconnect from 10.30.120.5 port 47466:11: Closed due to user request. [preauth] Jun 2 04:50:07 prd-ubuntu20-04-docker-8c-8g-2629 sshd[976]: Disconnected from invalid user jenkins 10.30.120.5 port 47466 [preauth] Jun 2 04:50:09 prd-ubuntu20-04-docker-8c-8g-2629 sshd[1066]: Invalid user jenkins from 10.30.120.5 port 47474 Jun 2 04:50:09 prd-ubuntu20-04-docker-8c-8g-2629 sshd[1066]: Received disconnect from 10.30.120.5 port 47474:11: Closed due to user request. [preauth] Jun 2 04:50:09 prd-ubuntu20-04-docker-8c-8g-2629 sshd[1066]: Disconnected from invalid user jenkins 10.30.120.5 port 47474 [preauth] Jun 2 04:50:11 prd-ubuntu20-04-docker-8c-8g-2629 sshd[1069]: Invalid user jenkins from 10.30.120.5 port 47476 Jun 2 04:50:11 prd-ubuntu20-04-docker-8c-8g-2629 sshd[1069]: Received disconnect from 10.30.120.5 port 47476:11: Closed due to user request. [preauth] Jun 2 04:50:11 prd-ubuntu20-04-docker-8c-8g-2629 sshd[1069]: Disconnected from invalid user jenkins 10.30.120.5 port 47476 [preauth] Jun 2 04:50:13 prd-ubuntu20-04-docker-8c-8g-2629 sshd[1071]: Invalid user jenkins from 10.30.120.5 port 47480 Jun 2 04:50:13 prd-ubuntu20-04-docker-8c-8g-2629 sshd[1071]: Received disconnect from 10.30.120.5 port 47480:11: Closed due to user request. [preauth] Jun 2 04:50:13 prd-ubuntu20-04-docker-8c-8g-2629 sshd[1071]: Disconnected from invalid user jenkins 10.30.120.5 port 47480 [preauth] Jun 2 04:50:15 prd-ubuntu20-04-docker-8c-8g-2629 sshd[1073]: Invalid user jenkins from 10.30.120.5 port 47482 Jun 2 04:50:16 prd-ubuntu20-04-docker-8c-8g-2629 sshd[1073]: Received disconnect from 10.30.120.5 port 47482:11: Closed due to user request. [preauth] Jun 2 04:50:16 prd-ubuntu20-04-docker-8c-8g-2629 sshd[1073]: Disconnected from invalid user jenkins 10.30.120.5 port 47482 [preauth] Jun 2 04:50:18 prd-ubuntu20-04-docker-8c-8g-2629 sshd[1085]: Invalid user jenkins from 10.30.120.5 port 47484 Jun 2 04:50:18 prd-ubuntu20-04-docker-8c-8g-2629 sshd[1085]: Received disconnect from 10.30.120.5 port 47484:11: Closed due to user request. [preauth] Jun 2 04:50:18 prd-ubuntu20-04-docker-8c-8g-2629 sshd[1085]: Disconnected from invalid user jenkins 10.30.120.5 port 47484 [preauth] Jun 2 04:50:20 prd-ubuntu20-04-docker-8c-8g-2629 sshd[1087]: Invalid user jenkins from 10.30.120.5 port 47486 Jun 2 04:50:20 prd-ubuntu20-04-docker-8c-8g-2629 sshd[1087]: Received disconnect from 10.30.120.5 port 47486:11: Closed due to user request. [preauth] Jun 2 04:50:20 prd-ubuntu20-04-docker-8c-8g-2629 sshd[1087]: Disconnected from invalid user jenkins 10.30.120.5 port 47486 [preauth] Jun 2 04:50:22 prd-ubuntu20-04-docker-8c-8g-2629 sshd[1090]: Invalid user jenkins from 10.30.120.5 port 47488 Jun 2 04:50:22 prd-ubuntu20-04-docker-8c-8g-2629 sshd[1090]: Received disconnect from 10.30.120.5 port 47488:11: Closed due to user request. [preauth] Jun 2 04:50:22 prd-ubuntu20-04-docker-8c-8g-2629 sshd[1090]: Disconnected from invalid user jenkins 10.30.120.5 port 47488 [preauth] Jun 2 04:50:24 prd-ubuntu20-04-docker-8c-8g-2629 sshd[1103]: Invalid user jenkins from 10.30.120.5 port 47490 Jun 2 04:50:24 prd-ubuntu20-04-docker-8c-8g-2629 sshd[1103]: Received disconnect from 10.30.120.5 port 47490:11: Closed due to user request. [preauth] Jun 2 04:50:24 prd-ubuntu20-04-docker-8c-8g-2629 sshd[1103]: Disconnected from invalid user jenkins 10.30.120.5 port 47490 [preauth] Jun 2 04:50:26 prd-ubuntu20-04-docker-8c-8g-2629 sshd[1299]: Invalid user jenkins from 10.30.120.5 port 47492 Jun 2 04:50:26 prd-ubuntu20-04-docker-8c-8g-2629 sshd[1299]: Received disconnect from 10.30.120.5 port 47492:11: Closed due to user request. [preauth] Jun 2 04:50:26 prd-ubuntu20-04-docker-8c-8g-2629 sshd[1299]: Disconnected from invalid user jenkins 10.30.120.5 port 47492 [preauth] Jun 2 04:50:28 prd-ubuntu20-04-docker-8c-8g-2629 sshd[1305]: Invalid user jenkins from 10.30.120.5 port 47496 Jun 2 04:50:28 prd-ubuntu20-04-docker-8c-8g-2629 sshd[1305]: Received disconnect from 10.30.120.5 port 47496:11: Closed due to user request. [preauth] Jun 2 04:50:28 prd-ubuntu20-04-docker-8c-8g-2629 sshd[1305]: Disconnected from invalid user jenkins 10.30.120.5 port 47496 [preauth] Jun 2 04:50:30 prd-ubuntu20-04-docker-8c-8g-2629 sshd[1321]: Invalid user jenkins from 10.30.120.5 port 47500 Jun 2 04:50:30 prd-ubuntu20-04-docker-8c-8g-2629 sshd[1321]: Received disconnect from 10.30.120.5 port 47500:11: Closed due to user request. [preauth] Jun 2 04:50:30 prd-ubuntu20-04-docker-8c-8g-2629 sshd[1321]: Disconnected from invalid user jenkins 10.30.120.5 port 47500 [preauth] Jun 2 04:50:31 prd-ubuntu20-04-docker-8c-8g-2629 useradd[1328]: new group: name=jenkins, GID=1001 Jun 2 04:50:31 prd-ubuntu20-04-docker-8c-8g-2629 useradd[1328]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash, from=none Jun 2 04:50:31 prd-ubuntu20-04-docker-8c-8g-2629 usermod[1338]: add 'jenkins' to group 'docker' Jun 2 04:50:31 prd-ubuntu20-04-docker-8c-8g-2629 usermod[1338]: add 'jenkins' to shadow group 'docker' Jun 2 04:50:33 prd-ubuntu20-04-docker-8c-8g-2629 sshd[1375]: Accepted publickey for jenkins from 10.30.120.5 port 47508 ssh2: RSA SHA256:aPmPdMw/h9M56P/o8xjsZcdBWoRKGeie6FPOwnlsRmU Jun 2 04:50:33 prd-ubuntu20-04-docker-8c-8g-2629 sshd[1375]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Jun 2 04:50:33 prd-ubuntu20-04-docker-8c-8g-2629 systemd-logind[811]: New session 2 of user jenkins. Jun 2 04:50:33 prd-ubuntu20-04-docker-8c-8g-2629 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Jun 2 04:50:53 prd-ubuntu20-04-docker-8c-8g-2629 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/gexfoundry_device-sdk-go_PR-1722 ; USER=root ; COMMAND=/usr/bin/mv /tmp/ssh_known_hosts /etc/ssh/ssh_known_hosts Jun 2 04:50:53 prd-ubuntu20-04-docker-8c-8g-2629 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Jun 2 04:50:53 prd-ubuntu20-04-docker-8c-8g-2629 sudo: pam_unix(sudo:session): session closed for user root Jun 2 04:50:53 prd-ubuntu20-04-docker-8c-8g-2629 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/gexfoundry_device-sdk-go_PR-1722 ; USER=root ; COMMAND=/usr/bin/tee -a /etc/ssh/ssh_known_hosts Jun 2 04:50:53 prd-ubuntu20-04-docker-8c-8g-2629 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Jun 2 04:50:53 prd-ubuntu20-04-docker-8c-8g-2629 sudo: pam_unix(sudo:session): session closed for user root Jun 2 04:51:01 prd-ubuntu20-04-docker-8c-8g-2629 CRON[2275]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 2 04:51:01 prd-ubuntu20-04-docker-8c-8g-2629 CRON[2275]: pam_unix(cron:session): session closed for user root Jun 2 04:51:09 prd-ubuntu20-04-docker-8c-8g-2629 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/gexfoundry_device-sdk-go_PR-1722 ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins .semver Jun 2 04:51:09 prd-ubuntu20-04-docker-8c-8g-2629 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Jun 2 04:51:09 prd-ubuntu20-04-docker-8c-8g-2629 sudo: pam_unix(sudo:session): session closed for user root Jun 2 04:52:01 prd-ubuntu20-04-docker-8c-8g-2629 CRON[3705]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 2 04:52:01 prd-ubuntu20-04-docker-8c-8g-2629 CRON[3705]: pam_unix(cron:session): session closed for user root Jun 2 04:53:01 prd-ubuntu20-04-docker-8c-8g-2629 CRON[15594]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 2 04:53:01 prd-ubuntu20-04-docker-8c-8g-2629 CRON[15594]: pam_unix(cron:session): session closed for user root Jun 2 04:53:33 prd-ubuntu20-04-docker-8c-8g-2629 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/gexfoundry_device-sdk-go_PR-1722 ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins . Jun 2 04:53:33 prd-ubuntu20-04-docker-8c-8g-2629 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Jun 2 04:53:33 prd-ubuntu20-04-docker-8c-8g-2629 sudo: pam_unix(sudo:session): session closed for user root Jun 2 04:53:34 prd-ubuntu20-04-docker-8c-8g-2629 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/gexfoundry_device-sdk-go_PR-1722 ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins . Jun 2 04:53:34 prd-ubuntu20-04-docker-8c-8g-2629 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Jun 2 04:53:34 prd-ubuntu20-04-docker-8c-8g-2629 sudo: pam_unix(sudo:session): session closed for user root Jun 2 04:54:01 prd-ubuntu20-04-docker-8c-8g-2629 CRON[28946]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 2 04:54:01 prd-ubuntu20-04-docker-8c-8g-2629 CRON[28946]: pam_unix(cron:session): session closed for user root Jun 2 04:54:25 prd-ubuntu20-04-docker-8c-8g-2629 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/gexfoundry_device-sdk-go_PR-1722 ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins /w/workspace/gexfoundry_device-sdk-go_PR-1722/archives Jun 2 04:54:25 prd-ubuntu20-04-docker-8c-8g-2629 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Jun 2 04:54:25 prd-ubuntu20-04-docker-8c-8g-2629 sudo: pam_unix(sudo:session): session closed for user root