Nov 2 05:59:19 prd-ubuntu20-04-docker-8c-8g-16354 passwd[751]: password for 'ubuntu' changed by 'root' Nov 2 05:59:19 prd-ubuntu20-04-docker-8c-8g-16354 systemd-logind[813]: New seat seat0. Nov 2 05:59:19 prd-ubuntu20-04-docker-8c-8g-16354 systemd-logind[813]: Watching system buttons on /dev/input/event0 (Power Button) Nov 2 05:59:19 prd-ubuntu20-04-docker-8c-8g-16354 systemd-logind[813]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Nov 2 05:59:19 prd-ubuntu20-04-docker-8c-8g-16354 sshd[861]: Server listening on 0.0.0.0 port 22. Nov 2 05:59:19 prd-ubuntu20-04-docker-8c-8g-16354 sshd[861]: Server listening on :: port 22. Nov 2 05:59:21 prd-ubuntu20-04-docker-8c-8g-16354 sshd[1018]: error: kex_exchange_identification: Connection closed by remote host Nov 2 05:59:23 prd-ubuntu20-04-docker-8c-8g-16354 sshd[1023]: Invalid user jenkins from 10.30.120.5 port 51800 Nov 2 05:59:23 prd-ubuntu20-04-docker-8c-8g-16354 sshd[1023]: Received disconnect from 10.30.120.5 port 51800:11: Closed due to user request. [preauth] Nov 2 05:59:23 prd-ubuntu20-04-docker-8c-8g-16354 sshd[1023]: Disconnected from invalid user jenkins 10.30.120.5 port 51800 [preauth] Nov 2 05:59:25 prd-ubuntu20-04-docker-8c-8g-16354 sshd[1032]: Invalid user jenkins from 10.30.120.5 port 51802 Nov 2 05:59:25 prd-ubuntu20-04-docker-8c-8g-16354 sshd[1032]: Received disconnect from 10.30.120.5 port 51802:11: Closed due to user request. [preauth] Nov 2 05:59:25 prd-ubuntu20-04-docker-8c-8g-16354 sshd[1032]: Disconnected from invalid user jenkins 10.30.120.5 port 51802 [preauth] Nov 2 05:59:27 prd-ubuntu20-04-docker-8c-8g-16354 sshd[1034]: Invalid user jenkins from 10.30.120.5 port 51804 Nov 2 05:59:27 prd-ubuntu20-04-docker-8c-8g-16354 sshd[1034]: Received disconnect from 10.30.120.5 port 51804:11: Closed due to user request. [preauth] Nov 2 05:59:27 prd-ubuntu20-04-docker-8c-8g-16354 sshd[1034]: Disconnected from invalid user jenkins 10.30.120.5 port 51804 [preauth] Nov 2 05:59:29 prd-ubuntu20-04-docker-8c-8g-16354 sshd[1036]: Invalid user jenkins from 10.30.120.5 port 51808 Nov 2 05:59:30 prd-ubuntu20-04-docker-8c-8g-16354 sshd[1036]: Received disconnect from 10.30.120.5 port 51808:11: Closed due to user request. [preauth] Nov 2 05:59:30 prd-ubuntu20-04-docker-8c-8g-16354 sshd[1036]: Disconnected from invalid user jenkins 10.30.120.5 port 51808 [preauth] Nov 2 05:59:32 prd-ubuntu20-04-docker-8c-8g-16354 sshd[1038]: Invalid user jenkins from 10.30.120.5 port 51810 Nov 2 05:59:32 prd-ubuntu20-04-docker-8c-8g-16354 sshd[1038]: Received disconnect from 10.30.120.5 port 51810:11: Closed due to user request. [preauth] Nov 2 05:59:32 prd-ubuntu20-04-docker-8c-8g-16354 sshd[1038]: Disconnected from invalid user jenkins 10.30.120.5 port 51810 [preauth] Nov 2 05:59:34 prd-ubuntu20-04-docker-8c-8g-16354 sshd[1040]: Invalid user jenkins from 10.30.120.5 port 51812 Nov 2 05:59:34 prd-ubuntu20-04-docker-8c-8g-16354 sshd[1040]: Received disconnect from 10.30.120.5 port 51812:11: Closed due to user request. [preauth] Nov 2 05:59:34 prd-ubuntu20-04-docker-8c-8g-16354 sshd[1040]: Disconnected from invalid user jenkins 10.30.120.5 port 51812 [preauth] Nov 2 05:59:36 prd-ubuntu20-04-docker-8c-8g-16354 sshd[1042]: Invalid user jenkins from 10.30.120.5 port 51814 Nov 2 05:59:36 prd-ubuntu20-04-docker-8c-8g-16354 sshd[1042]: Received disconnect from 10.30.120.5 port 51814:11: Closed due to user request. [preauth] Nov 2 05:59:36 prd-ubuntu20-04-docker-8c-8g-16354 sshd[1042]: Disconnected from invalid user jenkins 10.30.120.5 port 51814 [preauth] Nov 2 05:59:39 prd-ubuntu20-04-docker-8c-8g-16354 sshd[1164]: Invalid user jenkins from 10.30.120.5 port 51816 Nov 2 05:59:39 prd-ubuntu20-04-docker-8c-8g-16354 sshd[1164]: Received disconnect from 10.30.120.5 port 51816:11: Closed due to user request. [preauth] Nov 2 05:59:39 prd-ubuntu20-04-docker-8c-8g-16354 sshd[1164]: Disconnected from invalid user jenkins 10.30.120.5 port 51816 [preauth] Nov 2 05:59:41 prd-ubuntu20-04-docker-8c-8g-16354 sshd[1219]: Invalid user jenkins from 10.30.120.5 port 51818 Nov 2 05:59:41 prd-ubuntu20-04-docker-8c-8g-16354 sshd[1219]: Received disconnect from 10.30.120.5 port 51818:11: Closed due to user request. [preauth] Nov 2 05:59:41 prd-ubuntu20-04-docker-8c-8g-16354 sshd[1219]: Disconnected from invalid user jenkins 10.30.120.5 port 51818 [preauth] Nov 2 05:59:43 prd-ubuntu20-04-docker-8c-8g-16354 sshd[1257]: Invalid user jenkins from 10.30.120.5 port 51820 Nov 2 05:59:43 prd-ubuntu20-04-docker-8c-8g-16354 sshd[1257]: Received disconnect from 10.30.120.5 port 51820:11: Closed due to user request. [preauth] Nov 2 05:59:43 prd-ubuntu20-04-docker-8c-8g-16354 sshd[1257]: Disconnected from invalid user jenkins 10.30.120.5 port 51820 [preauth] Nov 2 05:59:45 prd-ubuntu20-04-docker-8c-8g-16354 sshd[1260]: Invalid user jenkins from 10.30.120.5 port 51824 Nov 2 05:59:45 prd-ubuntu20-04-docker-8c-8g-16354 sshd[1260]: Received disconnect from 10.30.120.5 port 51824:11: Closed due to user request. [preauth] Nov 2 05:59:45 prd-ubuntu20-04-docker-8c-8g-16354 sshd[1260]: Disconnected from invalid user jenkins 10.30.120.5 port 51824 [preauth] Nov 2 05:59:47 prd-ubuntu20-04-docker-8c-8g-16354 sshd[1262]: Invalid user jenkins from 10.30.120.5 port 51826 Nov 2 05:59:48 prd-ubuntu20-04-docker-8c-8g-16354 sshd[1262]: Received disconnect from 10.30.120.5 port 51826:11: Closed due to user request. [preauth] Nov 2 05:59:48 prd-ubuntu20-04-docker-8c-8g-16354 sshd[1262]: Disconnected from invalid user jenkins 10.30.120.5 port 51826 [preauth] Nov 2 05:59:51 prd-ubuntu20-04-docker-8c-8g-16354 sshd[1276]: Invalid user jenkins from 10.30.120.5 port 51828 Nov 2 05:59:51 prd-ubuntu20-04-docker-8c-8g-16354 sshd[1276]: Received disconnect from 10.30.120.5 port 51828:11: Closed due to user request. [preauth] Nov 2 05:59:51 prd-ubuntu20-04-docker-8c-8g-16354 sshd[1276]: Disconnected from invalid user jenkins 10.30.120.5 port 51828 [preauth] Nov 2 05:59:53 prd-ubuntu20-04-docker-8c-8g-16354 sshd[1278]: Invalid user jenkins from 10.30.120.5 port 51836 Nov 2 05:59:54 prd-ubuntu20-04-docker-8c-8g-16354 sshd[1278]: Received disconnect from 10.30.120.5 port 51836:11: Closed due to user request. [preauth] Nov 2 05:59:54 prd-ubuntu20-04-docker-8c-8g-16354 sshd[1278]: Disconnected from invalid user jenkins 10.30.120.5 port 51836 [preauth] Nov 2 05:59:55 prd-ubuntu20-04-docker-8c-8g-16354 useradd[1305]: new group: name=jenkins, GID=1001 Nov 2 05:59:55 prd-ubuntu20-04-docker-8c-8g-16354 useradd[1305]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash, from=none Nov 2 05:59:55 prd-ubuntu20-04-docker-8c-8g-16354 sshd[1307]: Received disconnect from 10.30.120.5 port 51838:11: Closed due to user request. [preauth] Nov 2 05:59:55 prd-ubuntu20-04-docker-8c-8g-16354 sshd[1307]: Disconnected from authenticating user jenkins 10.30.120.5 port 51838 [preauth] Nov 2 05:59:55 prd-ubuntu20-04-docker-8c-8g-16354 usermod[1317]: add 'jenkins' to group 'docker' Nov 2 05:59:55 prd-ubuntu20-04-docker-8c-8g-16354 usermod[1317]: add 'jenkins' to shadow group 'docker' Nov 2 05:59:57 prd-ubuntu20-04-docker-8c-8g-16354 sshd[1354]: Accepted publickey for jenkins from 10.30.120.5 port 51840 ssh2: RSA SHA256:aPmPdMw/h9M56P/o8xjsZcdBWoRKGeie6FPOwnlsRmU Nov 2 05:59:57 prd-ubuntu20-04-docker-8c-8g-16354 sshd[1354]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Nov 2 05:59:57 prd-ubuntu20-04-docker-8c-8g-16354 systemd-logind[813]: New session 1 of user jenkins. Nov 2 05:59:57 prd-ubuntu20-04-docker-8c-8g-16354 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Nov 2 06:00:02 prd-ubuntu20-04-docker-8c-8g-16354 CRON[1563]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 2 06:00:02 prd-ubuntu20-04-docker-8c-8g-16354 CRON[1563]: pam_unix(cron:session): session closed for user root Nov 2 06:00:13 prd-ubuntu20-04-docker-8c-8g-16354 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/gexfoundry_go-mod-secrets_PR-233 ; USER=root ; COMMAND=/usr/bin/mv /tmp/ssh_known_hosts /etc/ssh/ssh_known_hosts Nov 2 06:00:13 prd-ubuntu20-04-docker-8c-8g-16354 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Nov 2 06:00:13 prd-ubuntu20-04-docker-8c-8g-16354 sudo: pam_unix(sudo:session): session closed for user root Nov 2 06:00:13 prd-ubuntu20-04-docker-8c-8g-16354 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/gexfoundry_go-mod-secrets_PR-233 ; USER=root ; COMMAND=/usr/bin/tee -a /etc/ssh/ssh_known_hosts Nov 2 06:00:13 prd-ubuntu20-04-docker-8c-8g-16354 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Nov 2 06:00:13 prd-ubuntu20-04-docker-8c-8g-16354 sudo: pam_unix(sudo:session): session closed for user root Nov 2 06:00:36 prd-ubuntu20-04-docker-8c-8g-16354 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/gexfoundry_go-mod-secrets_PR-233 ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins .semver Nov 2 06:00:37 prd-ubuntu20-04-docker-8c-8g-16354 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Nov 2 06:00:37 prd-ubuntu20-04-docker-8c-8g-16354 sudo: pam_unix(sudo:session): session closed for user root Nov 2 06:01:01 prd-ubuntu20-04-docker-8c-8g-16354 CRON[3608]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 2 06:01:01 prd-ubuntu20-04-docker-8c-8g-16354 CRON[3608]: pam_unix(cron:session): session closed for user root Nov 2 06:01:51 prd-ubuntu20-04-docker-8c-8g-16354 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/gexfoundry_go-mod-secrets_PR-233 ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins . Nov 2 06:01:51 prd-ubuntu20-04-docker-8c-8g-16354 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Nov 2 06:01:51 prd-ubuntu20-04-docker-8c-8g-16354 sudo: pam_unix(sudo:session): session closed for user root Nov 2 06:02:01 prd-ubuntu20-04-docker-8c-8g-16354 CRON[13323]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 2 06:02:01 prd-ubuntu20-04-docker-8c-8g-16354 CRON[13323]: pam_unix(cron:session): session closed for user root Nov 2 06:03:01 prd-ubuntu20-04-docker-8c-8g-16354 CRON[13577]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 2 06:03:01 prd-ubuntu20-04-docker-8c-8g-16354 CRON[13577]: pam_unix(cron:session): session closed for user root Nov 2 06:04:01 prd-ubuntu20-04-docker-8c-8g-16354 CRON[13583]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 2 06:04:01 prd-ubuntu20-04-docker-8c-8g-16354 CRON[13583]: pam_unix(cron:session): session closed for user root Nov 2 06:04:30 prd-ubuntu20-04-docker-8c-8g-16354 systemd-logind[813]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Nov 2 06:04:30 prd-ubuntu20-04-docker-8c-8g-16354 systemd-logind[813]: Watching system buttons on /dev/input/event0 (Power Button) Nov 2 06:05:01 prd-ubuntu20-04-docker-8c-8g-16354 CRON[14676]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 2 06:05:01 prd-ubuntu20-04-docker-8c-8g-16354 CRON[14676]: pam_unix(cron:session): session closed for user root Nov 2 06:06:01 prd-ubuntu20-04-docker-8c-8g-16354 CRON[14736]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 2 06:06:01 prd-ubuntu20-04-docker-8c-8g-16354 CRON[14736]: pam_unix(cron:session): session closed for user root Nov 2 06:07:01 prd-ubuntu20-04-docker-8c-8g-16354 CRON[14739]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 2 06:07:01 prd-ubuntu20-04-docker-8c-8g-16354 CRON[14739]: pam_unix(cron:session): session closed for user root Nov 2 06:08:01 prd-ubuntu20-04-docker-8c-8g-16354 CRON[14743]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 2 06:08:01 prd-ubuntu20-04-docker-8c-8g-16354 CRON[14743]: pam_unix(cron:session): session closed for user root Nov 2 06:08:23 prd-ubuntu20-04-docker-8c-8g-16354 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/gexfoundry_go-mod-secrets_PR-233 ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins /w/workspace/gexfoundry_go-mod-secrets_PR-233/archives Nov 2 06:08:23 prd-ubuntu20-04-docker-8c-8g-16354 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Nov 2 06:08:23 prd-ubuntu20-04-docker-8c-8g-16354 sudo: pam_unix(sudo:session): session closed for user root