Jan 5 18:57:12 prd-ubuntu20-04-docker-8c-8g-1209 passwd[749]: password for 'ubuntu' changed by 'root' Jan 5 18:57:12 prd-ubuntu20-04-docker-8c-8g-1209 systemd-logind[813]: New seat seat0. Jan 5 18:57:12 prd-ubuntu20-04-docker-8c-8g-1209 systemd-logind[813]: Watching system buttons on /dev/input/event0 (Power Button) Jan 5 18:57:12 prd-ubuntu20-04-docker-8c-8g-1209 systemd-logind[813]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Jan 5 18:57:12 prd-ubuntu20-04-docker-8c-8g-1209 sshd[846]: Server listening on 0.0.0.0 port 22. Jan 5 18:57:12 prd-ubuntu20-04-docker-8c-8g-1209 sshd[846]: Server listening on :: port 22. Jan 5 18:57:12 prd-ubuntu20-04-docker-8c-8g-1209 sshd[965]: error: kex_exchange_identification: Connection closed by remote host Jan 5 18:57:19 prd-ubuntu20-04-docker-8c-8g-1209 sshd[1034]: Invalid user jenkins from 10.30.120.5 port 60282 Jan 5 18:57:19 prd-ubuntu20-04-docker-8c-8g-1209 sshd[1034]: Received disconnect from 10.30.120.5 port 60282:11: Closed due to user request. [preauth] Jan 5 18:57:19 prd-ubuntu20-04-docker-8c-8g-1209 sshd[1034]: Disconnected from invalid user jenkins 10.30.120.5 port 60282 [preauth] Jan 5 18:57:21 prd-ubuntu20-04-docker-8c-8g-1209 sshd[1036]: Invalid user jenkins from 10.30.120.5 port 60284 Jan 5 18:57:21 prd-ubuntu20-04-docker-8c-8g-1209 sshd[1036]: Received disconnect from 10.30.120.5 port 60284:11: Closed due to user request. [preauth] Jan 5 18:57:21 prd-ubuntu20-04-docker-8c-8g-1209 sshd[1036]: Disconnected from invalid user jenkins 10.30.120.5 port 60284 [preauth] Jan 5 18:57:23 prd-ubuntu20-04-docker-8c-8g-1209 sshd[1038]: Invalid user jenkins from 10.30.120.5 port 60286 Jan 5 18:57:23 prd-ubuntu20-04-docker-8c-8g-1209 sshd[1038]: Received disconnect from 10.30.120.5 port 60286:11: Closed due to user request. [preauth] Jan 5 18:57:23 prd-ubuntu20-04-docker-8c-8g-1209 sshd[1038]: Disconnected from invalid user jenkins 10.30.120.5 port 60286 [preauth] Jan 5 18:57:26 prd-ubuntu20-04-docker-8c-8g-1209 sshd[1040]: Invalid user jenkins from 10.30.120.5 port 60288 Jan 5 18:57:26 prd-ubuntu20-04-docker-8c-8g-1209 sshd[1040]: Received disconnect from 10.30.120.5 port 60288:11: Closed due to user request. [preauth] Jan 5 18:57:26 prd-ubuntu20-04-docker-8c-8g-1209 sshd[1040]: Disconnected from invalid user jenkins 10.30.120.5 port 60288 [preauth] Jan 5 18:57:28 prd-ubuntu20-04-docker-8c-8g-1209 sshd[1058]: Invalid user jenkins from 10.30.120.5 port 60290 Jan 5 18:57:28 prd-ubuntu20-04-docker-8c-8g-1209 sshd[1058]: Received disconnect from 10.30.120.5 port 60290:11: Closed due to user request. [preauth] Jan 5 18:57:28 prd-ubuntu20-04-docker-8c-8g-1209 sshd[1058]: Disconnected from invalid user jenkins 10.30.120.5 port 60290 [preauth] Jan 5 18:57:30 prd-ubuntu20-04-docker-8c-8g-1209 sshd[1063]: Invalid user jenkins from 10.30.120.5 port 60292 Jan 5 18:57:30 prd-ubuntu20-04-docker-8c-8g-1209 sshd[1063]: Received disconnect from 10.30.120.5 port 60292:11: Closed due to user request. [preauth] Jan 5 18:57:30 prd-ubuntu20-04-docker-8c-8g-1209 sshd[1063]: Disconnected from invalid user jenkins 10.30.120.5 port 60292 [preauth] Jan 5 18:57:32 prd-ubuntu20-04-docker-8c-8g-1209 sshd[1224]: Invalid user jenkins from 10.30.120.5 port 60296 Jan 5 18:57:32 prd-ubuntu20-04-docker-8c-8g-1209 sshd[1224]: Received disconnect from 10.30.120.5 port 60296:11: Closed due to user request. [preauth] Jan 5 18:57:32 prd-ubuntu20-04-docker-8c-8g-1209 sshd[1224]: Disconnected from invalid user jenkins 10.30.120.5 port 60296 [preauth] Jan 5 18:57:35 prd-ubuntu20-04-docker-8c-8g-1209 sshd[1261]: Invalid user jenkins from 10.30.120.5 port 60298 Jan 5 18:57:35 prd-ubuntu20-04-docker-8c-8g-1209 sshd[1261]: Received disconnect from 10.30.120.5 port 60298:11: Closed due to user request. [preauth] Jan 5 18:57:35 prd-ubuntu20-04-docker-8c-8g-1209 sshd[1261]: Disconnected from invalid user jenkins 10.30.120.5 port 60298 [preauth] Jan 5 18:57:37 prd-ubuntu20-04-docker-8c-8g-1209 sshd[1272]: Invalid user jenkins from 10.30.120.5 port 60300 Jan 5 18:57:37 prd-ubuntu20-04-docker-8c-8g-1209 sshd[1272]: Received disconnect from 10.30.120.5 port 60300:11: Closed due to user request. [preauth] Jan 5 18:57:37 prd-ubuntu20-04-docker-8c-8g-1209 sshd[1272]: Disconnected from invalid user jenkins 10.30.120.5 port 60300 [preauth] Jan 5 18:57:39 prd-ubuntu20-04-docker-8c-8g-1209 sshd[1274]: Invalid user jenkins from 10.30.120.5 port 60308 Jan 5 18:57:39 prd-ubuntu20-04-docker-8c-8g-1209 sshd[1274]: Received disconnect from 10.30.120.5 port 60308:11: Closed due to user request. [preauth] Jan 5 18:57:39 prd-ubuntu20-04-docker-8c-8g-1209 sshd[1274]: Disconnected from invalid user jenkins 10.30.120.5 port 60308 [preauth] Jan 5 18:57:41 prd-ubuntu20-04-docker-8c-8g-1209 useradd[1296]: new group: name=jenkins, GID=1001 Jan 5 18:57:41 prd-ubuntu20-04-docker-8c-8g-1209 useradd[1296]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash, from=none Jan 5 18:57:41 prd-ubuntu20-04-docker-8c-8g-1209 sshd[1295]: Received disconnect from 10.30.120.5 port 60310:11: Closed due to user request. [preauth] Jan 5 18:57:41 prd-ubuntu20-04-docker-8c-8g-1209 sshd[1295]: Disconnected from authenticating user jenkins 10.30.120.5 port 60310 [preauth] Jan 5 18:57:41 prd-ubuntu20-04-docker-8c-8g-1209 usermod[1307]: add 'jenkins' to group 'docker' Jan 5 18:57:41 prd-ubuntu20-04-docker-8c-8g-1209 usermod[1307]: add 'jenkins' to shadow group 'docker' Jan 5 18:57:43 prd-ubuntu20-04-docker-8c-8g-1209 sshd[1357]: Accepted publickey for jenkins from 10.30.120.5 port 60312 ssh2: RSA SHA256:aPmPdMw/h9M56P/o8xjsZcdBWoRKGeie6FPOwnlsRmU Jan 5 18:57:43 prd-ubuntu20-04-docker-8c-8g-1209 sshd[1357]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Jan 5 18:57:43 prd-ubuntu20-04-docker-8c-8g-1209 systemd-logind[813]: New session 1 of user jenkins. Jan 5 18:57:43 prd-ubuntu20-04-docker-8c-8g-1209 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Jan 5 18:57:58 prd-ubuntu20-04-docker-8c-8g-1209 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/xfoundry_go-mod-bootstrap_PR-404 ; USER=root ; COMMAND=/usr/bin/mv /tmp/ssh_known_hosts /etc/ssh/ssh_known_hosts Jan 5 18:57:58 prd-ubuntu20-04-docker-8c-8g-1209 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Jan 5 18:57:58 prd-ubuntu20-04-docker-8c-8g-1209 sudo: pam_unix(sudo:session): session closed for user root Jan 5 18:57:58 prd-ubuntu20-04-docker-8c-8g-1209 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/xfoundry_go-mod-bootstrap_PR-404 ; USER=root ; COMMAND=/usr/bin/tee -a /etc/ssh/ssh_known_hosts Jan 5 18:57:58 prd-ubuntu20-04-docker-8c-8g-1209 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Jan 5 18:57:58 prd-ubuntu20-04-docker-8c-8g-1209 sudo: pam_unix(sudo:session): session closed for user root Jan 5 18:58:01 prd-ubuntu20-04-docker-8c-8g-1209 CRON[1888]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 5 18:58:01 prd-ubuntu20-04-docker-8c-8g-1209 CRON[1888]: pam_unix(cron:session): session closed for user root Jan 5 18:58:11 prd-ubuntu20-04-docker-8c-8g-1209 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/xfoundry_go-mod-bootstrap_PR-404 ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins .semver Jan 5 18:58:11 prd-ubuntu20-04-docker-8c-8g-1209 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Jan 5 18:58:11 prd-ubuntu20-04-docker-8c-8g-1209 sudo: pam_unix(sudo:session): session closed for user root Jan 5 18:59:01 prd-ubuntu20-04-docker-8c-8g-1209 CRON[10718]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 5 18:59:01 prd-ubuntu20-04-docker-8c-8g-1209 CRON[10718]: pam_unix(cron:session): session closed for user root Jan 5 18:59:05 prd-ubuntu20-04-docker-8c-8g-1209 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/xfoundry_go-mod-bootstrap_PR-404 ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins . Jan 5 18:59:05 prd-ubuntu20-04-docker-8c-8g-1209 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Jan 5 18:59:05 prd-ubuntu20-04-docker-8c-8g-1209 sudo: pam_unix(sudo:session): session closed for user root Jan 5 19:00:01 prd-ubuntu20-04-docker-8c-8g-1209 CRON[11186]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 5 19:00:01 prd-ubuntu20-04-docker-8c-8g-1209 CRON[11186]: pam_unix(cron:session): session closed for user root Jan 5 19:01:01 prd-ubuntu20-04-docker-8c-8g-1209 CRON[11191]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 5 19:01:01 prd-ubuntu20-04-docker-8c-8g-1209 CRON[11191]: pam_unix(cron:session): session closed for user root Jan 5 19:02:01 prd-ubuntu20-04-docker-8c-8g-1209 CRON[11195]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 5 19:02:01 prd-ubuntu20-04-docker-8c-8g-1209 CRON[11195]: pam_unix(cron:session): session closed for user root Jan 5 19:02:21 prd-ubuntu20-04-docker-8c-8g-1209 systemd-logind[813]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Jan 5 19:02:21 prd-ubuntu20-04-docker-8c-8g-1209 systemd-logind[813]: Watching system buttons on /dev/input/event0 (Power Button) Jan 5 19:03:01 prd-ubuntu20-04-docker-8c-8g-1209 CRON[12402]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 5 19:03:01 prd-ubuntu20-04-docker-8c-8g-1209 CRON[12402]: pam_unix(cron:session): session closed for user root Jan 5 19:03:43 prd-ubuntu20-04-docker-8c-8g-1209 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/xfoundry_go-mod-bootstrap_PR-404 ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins /w/workspace/xfoundry_go-mod-bootstrap_PR-404/archives Jan 5 19:03:43 prd-ubuntu20-04-docker-8c-8g-1209 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Jan 5 19:03:43 prd-ubuntu20-04-docker-8c-8g-1209 sudo: pam_unix(sudo:session): session closed for user root