Nov 20 15:07:53 prd-ubuntu20-04-docker-8c-8g-27104 passwd[755]: password for 'ubuntu' changed by 'root' Nov 20 15:07:54 prd-ubuntu20-04-docker-8c-8g-27104 systemd-logind[813]: New seat seat0. Nov 20 15:07:54 prd-ubuntu20-04-docker-8c-8g-27104 sshd[858]: Server listening on 0.0.0.0 port 22. Nov 20 15:07:54 prd-ubuntu20-04-docker-8c-8g-27104 sshd[858]: Server listening on :: port 22. Nov 20 15:07:54 prd-ubuntu20-04-docker-8c-8g-27104 systemd-logind[813]: Watching system buttons on /dev/input/event0 (Power Button) Nov 20 15:07:54 prd-ubuntu20-04-docker-8c-8g-27104 systemd-logind[813]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Nov 20 15:07:56 prd-ubuntu20-04-docker-8c-8g-27104 sshd[1023]: error: kex_exchange_identification: Connection closed by remote host Nov 20 15:08:01 prd-ubuntu20-04-docker-8c-8g-27104 CRON[1031]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 20 15:08:01 prd-ubuntu20-04-docker-8c-8g-27104 CRON[1031]: pam_unix(cron:session): session closed for user root Nov 20 15:08:04 prd-ubuntu20-04-docker-8c-8g-27104 sshd[1034]: Invalid user jenkins from 10.30.120.5 port 41574 Nov 20 15:08:04 prd-ubuntu20-04-docker-8c-8g-27104 sshd[1034]: Received disconnect from 10.30.120.5 port 41574:11: Closed due to user request. [preauth] Nov 20 15:08:04 prd-ubuntu20-04-docker-8c-8g-27104 sshd[1034]: Disconnected from invalid user jenkins 10.30.120.5 port 41574 [preauth] Nov 20 15:08:06 prd-ubuntu20-04-docker-8c-8g-27104 sshd[1036]: Invalid user jenkins from 10.30.120.5 port 41576 Nov 20 15:08:06 prd-ubuntu20-04-docker-8c-8g-27104 sshd[1036]: Received disconnect from 10.30.120.5 port 41576:11: Closed due to user request. [preauth] Nov 20 15:08:06 prd-ubuntu20-04-docker-8c-8g-27104 sshd[1036]: Disconnected from invalid user jenkins 10.30.120.5 port 41576 [preauth] Nov 20 15:08:08 prd-ubuntu20-04-docker-8c-8g-27104 sshd[1038]: Invalid user jenkins from 10.30.120.5 port 41580 Nov 20 15:08:09 prd-ubuntu20-04-docker-8c-8g-27104 sshd[1038]: Received disconnect from 10.30.120.5 port 41580:11: Closed due to user request. [preauth] Nov 20 15:08:09 prd-ubuntu20-04-docker-8c-8g-27104 sshd[1038]: Disconnected from invalid user jenkins 10.30.120.5 port 41580 [preauth] Nov 20 15:08:11 prd-ubuntu20-04-docker-8c-8g-27104 sshd[1052]: Invalid user jenkins from 10.30.120.5 port 41582 Nov 20 15:08:11 prd-ubuntu20-04-docker-8c-8g-27104 sshd[1052]: Received disconnect from 10.30.120.5 port 41582:11: Closed due to user request. [preauth] Nov 20 15:08:11 prd-ubuntu20-04-docker-8c-8g-27104 sshd[1052]: Disconnected from invalid user jenkins 10.30.120.5 port 41582 [preauth] Nov 20 15:08:13 prd-ubuntu20-04-docker-8c-8g-27104 sshd[1215]: Invalid user jenkins from 10.30.120.5 port 41590 Nov 20 15:08:13 prd-ubuntu20-04-docker-8c-8g-27104 sshd[1215]: Received disconnect from 10.30.120.5 port 41590:11: Closed due to user request. [preauth] Nov 20 15:08:13 prd-ubuntu20-04-docker-8c-8g-27104 sshd[1215]: Disconnected from invalid user jenkins 10.30.120.5 port 41590 [preauth] Nov 20 15:08:15 prd-ubuntu20-04-docker-8c-8g-27104 sshd[1252]: Invalid user jenkins from 10.30.120.5 port 41592 Nov 20 15:08:15 prd-ubuntu20-04-docker-8c-8g-27104 sshd[1252]: Received disconnect from 10.30.120.5 port 41592:11: Closed due to user request. [preauth] Nov 20 15:08:15 prd-ubuntu20-04-docker-8c-8g-27104 sshd[1252]: Disconnected from invalid user jenkins 10.30.120.5 port 41592 [preauth] Nov 20 15:08:17 prd-ubuntu20-04-docker-8c-8g-27104 useradd[1284]: new group: name=jenkins, GID=1001 Nov 20 15:08:17 prd-ubuntu20-04-docker-8c-8g-27104 useradd[1284]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash, from=none Nov 20 15:08:17 prd-ubuntu20-04-docker-8c-8g-27104 sshd[1282]: Invalid user jenkins from 10.30.120.5 port 41594 Nov 20 15:08:18 prd-ubuntu20-04-docker-8c-8g-27104 usermod[1294]: add 'jenkins' to group 'docker' Nov 20 15:08:18 prd-ubuntu20-04-docker-8c-8g-27104 usermod[1294]: add 'jenkins' to shadow group 'docker' Nov 20 15:08:18 prd-ubuntu20-04-docker-8c-8g-27104 sshd[1282]: Received disconnect from 10.30.120.5 port 41594:11: Closed due to user request. [preauth] Nov 20 15:08:18 prd-ubuntu20-04-docker-8c-8g-27104 sshd[1282]: Disconnected from invalid user jenkins 10.30.120.5 port 41594 [preauth] Nov 20 15:08:20 prd-ubuntu20-04-docker-8c-8g-27104 sshd[1331]: Accepted publickey for jenkins from 10.30.120.5 port 41596 ssh2: RSA SHA256:aPmPdMw/h9M56P/o8xjsZcdBWoRKGeie6FPOwnlsRmU Nov 20 15:08:20 prd-ubuntu20-04-docker-8c-8g-27104 sshd[1331]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Nov 20 15:08:20 prd-ubuntu20-04-docker-8c-8g-27104 systemd-logind[813]: New session 2 of user jenkins. Nov 20 15:08:20 prd-ubuntu20-04-docker-8c-8g-27104 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Nov 20 15:08:38 prd-ubuntu20-04-docker-8c-8g-27104 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/oundry_go-mod-configuration_main ; USER=root ; COMMAND=/usr/bin/mv /tmp/ssh_known_hosts /etc/ssh/ssh_known_hosts Nov 20 15:08:38 prd-ubuntu20-04-docker-8c-8g-27104 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Nov 20 15:08:38 prd-ubuntu20-04-docker-8c-8g-27104 sudo: pam_unix(sudo:session): session closed for user root Nov 20 15:08:38 prd-ubuntu20-04-docker-8c-8g-27104 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/oundry_go-mod-configuration_main ; USER=root ; COMMAND=/usr/bin/tee -a /etc/ssh/ssh_known_hosts Nov 20 15:08:38 prd-ubuntu20-04-docker-8c-8g-27104 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Nov 20 15:08:38 prd-ubuntu20-04-docker-8c-8g-27104 sudo: pam_unix(sudo:session): session closed for user root Nov 20 15:08:52 prd-ubuntu20-04-docker-8c-8g-27104 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/oundry_go-mod-configuration_main ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins .semver Nov 20 15:08:52 prd-ubuntu20-04-docker-8c-8g-27104 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Nov 20 15:08:52 prd-ubuntu20-04-docker-8c-8g-27104 sudo: pam_unix(sudo:session): session closed for user root Nov 20 15:09:02 prd-ubuntu20-04-docker-8c-8g-27104 CRON[2724]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 20 15:09:02 prd-ubuntu20-04-docker-8c-8g-27104 CRON[2724]: pam_unix(cron:session): session closed for user root Nov 20 15:09:31 prd-ubuntu20-04-docker-8c-8g-27104 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/oundry_go-mod-configuration_main ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins . Nov 20 15:09:31 prd-ubuntu20-04-docker-8c-8g-27104 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Nov 20 15:09:31 prd-ubuntu20-04-docker-8c-8g-27104 sudo: pam_unix(sudo:session): session closed for user root Nov 20 15:10:01 prd-ubuntu20-04-docker-8c-8g-27104 CRON[8764]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 20 15:10:01 prd-ubuntu20-04-docker-8c-8g-27104 CRON[8764]: pam_unix(cron:session): session closed for user root Nov 20 15:11:01 prd-ubuntu20-04-docker-8c-8g-27104 CRON[8770]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 20 15:11:01 prd-ubuntu20-04-docker-8c-8g-27104 CRON[8770]: pam_unix(cron:session): session closed for user root Nov 20 15:12:01 prd-ubuntu20-04-docker-8c-8g-27104 CRON[8774]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 20 15:12:01 prd-ubuntu20-04-docker-8c-8g-27104 CRON[8774]: pam_unix(cron:session): session closed for user root Nov 20 15:13:01 prd-ubuntu20-04-docker-8c-8g-27104 CRON[8956]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 20 15:13:01 prd-ubuntu20-04-docker-8c-8g-27104 CRON[8956]: pam_unix(cron:session): session closed for user root Nov 20 15:13:02 prd-ubuntu20-04-docker-8c-8g-27104 systemd-logind[813]: Watching system buttons on /dev/input/event0 (Power Button) Nov 20 15:13:02 prd-ubuntu20-04-docker-8c-8g-27104 systemd-logind[813]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Nov 20 15:14:01 prd-ubuntu20-04-docker-8c-8g-27104 CRON[10032]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 20 15:14:01 prd-ubuntu20-04-docker-8c-8g-27104 CRON[10032]: pam_unix(cron:session): session closed for user root Nov 20 15:15:01 prd-ubuntu20-04-docker-8c-8g-27104 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/oundry_go-mod-configuration_main ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins /w/workspace/oundry_go-mod-configuration_main/archives Nov 20 15:15:01 prd-ubuntu20-04-docker-8c-8g-27104 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Nov 20 15:15:01 prd-ubuntu20-04-docker-8c-8g-27104 sudo: pam_unix(sudo:session): session closed for user root Nov 20 15:15:01 prd-ubuntu20-04-docker-8c-8g-27104 CRON[12635]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 20 15:15:01 prd-ubuntu20-04-docker-8c-8g-27104 CRON[12635]: pam_unix(cron:session): session closed for user root