Oct 3 06:17:15 prd-ubuntu20-04-docker-8c-8g-13216 passwd[756]: password for 'ubuntu' changed by 'root' Oct 3 06:17:15 prd-ubuntu20-04-docker-8c-8g-13216 systemd-logind[825]: New seat seat0. Oct 3 06:17:15 prd-ubuntu20-04-docker-8c-8g-13216 systemd-logind[825]: Watching system buttons on /dev/input/event0 (Power Button) Oct 3 06:17:15 prd-ubuntu20-04-docker-8c-8g-13216 systemd-logind[825]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Oct 3 06:17:15 prd-ubuntu20-04-docker-8c-8g-13216 sshd[871]: Server listening on 0.0.0.0 port 22. Oct 3 06:17:15 prd-ubuntu20-04-docker-8c-8g-13216 sshd[871]: Server listening on :: port 22. Oct 3 06:17:18 prd-ubuntu20-04-docker-8c-8g-13216 sshd[1035]: error: kex_exchange_identification: Connection closed by remote host Oct 3 06:17:24 prd-ubuntu20-04-docker-8c-8g-13216 sshd[1043]: Invalid user jenkins from 10.30.120.5 port 55188 Oct 3 06:17:24 prd-ubuntu20-04-docker-8c-8g-13216 sshd[1043]: Received disconnect from 10.30.120.5 port 55188:11: Closed due to user request. [preauth] Oct 3 06:17:24 prd-ubuntu20-04-docker-8c-8g-13216 sshd[1043]: Disconnected from invalid user jenkins 10.30.120.5 port 55188 [preauth] Oct 3 06:17:26 prd-ubuntu20-04-docker-8c-8g-13216 sshd[1045]: Invalid user jenkins from 10.30.120.5 port 55194 Oct 3 06:17:26 prd-ubuntu20-04-docker-8c-8g-13216 sshd[1045]: Received disconnect from 10.30.120.5 port 55194:11: Closed due to user request. [preauth] Oct 3 06:17:26 prd-ubuntu20-04-docker-8c-8g-13216 sshd[1045]: Disconnected from invalid user jenkins 10.30.120.5 port 55194 [preauth] Oct 3 06:17:28 prd-ubuntu20-04-docker-8c-8g-13216 sshd[1047]: Invalid user jenkins from 10.30.120.5 port 55202 Oct 3 06:17:28 prd-ubuntu20-04-docker-8c-8g-13216 sshd[1047]: Received disconnect from 10.30.120.5 port 55202:11: Closed due to user request. [preauth] Oct 3 06:17:28 prd-ubuntu20-04-docker-8c-8g-13216 sshd[1047]: Disconnected from invalid user jenkins 10.30.120.5 port 55202 [preauth] Oct 3 06:17:30 prd-ubuntu20-04-docker-8c-8g-13216 sshd[1049]: Invalid user jenkins from 10.30.120.5 port 55206 Oct 3 06:17:30 prd-ubuntu20-04-docker-8c-8g-13216 sshd[1049]: Received disconnect from 10.30.120.5 port 55206:11: Closed due to user request. [preauth] Oct 3 06:17:30 prd-ubuntu20-04-docker-8c-8g-13216 sshd[1049]: Disconnected from invalid user jenkins 10.30.120.5 port 55206 [preauth] Oct 3 06:17:32 prd-ubuntu20-04-docker-8c-8g-13216 sshd[1051]: Invalid user jenkins from 10.30.120.5 port 55212 Oct 3 06:17:32 prd-ubuntu20-04-docker-8c-8g-13216 sshd[1051]: Received disconnect from 10.30.120.5 port 55212:11: Closed due to user request. [preauth] Oct 3 06:17:32 prd-ubuntu20-04-docker-8c-8g-13216 sshd[1051]: Disconnected from invalid user jenkins 10.30.120.5 port 55212 [preauth] Oct 3 06:17:35 prd-ubuntu20-04-docker-8c-8g-13216 sshd[1213]: Invalid user jenkins from 10.30.120.5 port 55220 Oct 3 06:17:35 prd-ubuntu20-04-docker-8c-8g-13216 sshd[1213]: Received disconnect from 10.30.120.5 port 55220:11: Closed due to user request. [preauth] Oct 3 06:17:35 prd-ubuntu20-04-docker-8c-8g-13216 sshd[1213]: Disconnected from invalid user jenkins 10.30.120.5 port 55220 [preauth] Oct 3 06:17:38 prd-ubuntu20-04-docker-8c-8g-13216 sshd[1245]: Invalid user jenkins from 10.30.120.5 port 55224 Oct 3 06:17:38 prd-ubuntu20-04-docker-8c-8g-13216 sshd[1245]: Received disconnect from 10.30.120.5 port 55224:11: Closed due to user request. [preauth] Oct 3 06:17:38 prd-ubuntu20-04-docker-8c-8g-13216 sshd[1245]: Disconnected from invalid user jenkins 10.30.120.5 port 55224 [preauth] Oct 3 06:17:40 prd-ubuntu20-04-docker-8c-8g-13216 sshd[1263]: Invalid user jenkins from 10.30.120.5 port 55230 Oct 3 06:17:40 prd-ubuntu20-04-docker-8c-8g-13216 sshd[1263]: Received disconnect from 10.30.120.5 port 55230:11: Closed due to user request. [preauth] Oct 3 06:17:40 prd-ubuntu20-04-docker-8c-8g-13216 sshd[1263]: Disconnected from invalid user jenkins 10.30.120.5 port 55230 [preauth] Oct 3 06:17:42 prd-ubuntu20-04-docker-8c-8g-13216 sshd[1271]: Invalid user jenkins from 10.30.120.5 port 55238 Oct 3 06:17:42 prd-ubuntu20-04-docker-8c-8g-13216 sshd[1271]: Received disconnect from 10.30.120.5 port 55238:11: Closed due to user request. [preauth] Oct 3 06:17:42 prd-ubuntu20-04-docker-8c-8g-13216 sshd[1271]: Disconnected from invalid user jenkins 10.30.120.5 port 55238 [preauth] Oct 3 06:17:43 prd-ubuntu20-04-docker-8c-8g-13216 useradd[1292]: new group: name=jenkins, GID=1001 Oct 3 06:17:43 prd-ubuntu20-04-docker-8c-8g-13216 useradd[1292]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash, from=none Oct 3 06:17:43 prd-ubuntu20-04-docker-8c-8g-13216 usermod[1302]: add 'jenkins' to group 'docker' Oct 3 06:17:43 prd-ubuntu20-04-docker-8c-8g-13216 usermod[1302]: add 'jenkins' to shadow group 'docker' Oct 3 06:17:44 prd-ubuntu20-04-docker-8c-8g-13216 sshd[1339]: Accepted publickey for jenkins from 10.30.120.5 port 55240 ssh2: RSA SHA256:aPmPdMw/h9M56P/o8xjsZcdBWoRKGeie6FPOwnlsRmU Oct 3 06:17:44 prd-ubuntu20-04-docker-8c-8g-13216 sshd[1339]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Oct 3 06:17:44 prd-ubuntu20-04-docker-8c-8g-13216 systemd-logind[825]: New session 1 of user jenkins. Oct 3 06:17:44 prd-ubuntu20-04-docker-8c-8g-13216 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Oct 3 06:18:02 prd-ubuntu20-04-docker-8c-8g-13216 CRON[1746]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 3 06:18:02 prd-ubuntu20-04-docker-8c-8g-13216 CRON[1746]: pam_unix(cron:session): session closed for user root Oct 3 06:18:03 prd-ubuntu20-04-docker-8c-8g-13216 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/gexfoundry_go-mod-secrets_PR-279 ; USER=root ; COMMAND=/usr/bin/mv /tmp/ssh_known_hosts /etc/ssh/ssh_known_hosts Oct 3 06:18:03 prd-ubuntu20-04-docker-8c-8g-13216 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Oct 3 06:18:03 prd-ubuntu20-04-docker-8c-8g-13216 sudo: pam_unix(sudo:session): session closed for user root Oct 3 06:18:03 prd-ubuntu20-04-docker-8c-8g-13216 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/gexfoundry_go-mod-secrets_PR-279 ; USER=root ; COMMAND=/usr/bin/tee -a /etc/ssh/ssh_known_hosts Oct 3 06:18:03 prd-ubuntu20-04-docker-8c-8g-13216 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Oct 3 06:18:03 prd-ubuntu20-04-docker-8c-8g-13216 sudo: pam_unix(sudo:session): session closed for user root Oct 3 06:18:19 prd-ubuntu20-04-docker-8c-8g-13216 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/gexfoundry_go-mod-secrets_PR-279 ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins .semver Oct 3 06:18:19 prd-ubuntu20-04-docker-8c-8g-13216 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Oct 3 06:18:19 prd-ubuntu20-04-docker-8c-8g-13216 sudo: pam_unix(sudo:session): session closed for user root Oct 3 06:19:01 prd-ubuntu20-04-docker-8c-8g-13216 CRON[8266]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 3 06:19:01 prd-ubuntu20-04-docker-8c-8g-13216 CRON[8266]: pam_unix(cron:session): session closed for user root Oct 3 06:19:29 prd-ubuntu20-04-docker-8c-8g-13216 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/gexfoundry_go-mod-secrets_PR-279 ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins . Oct 3 06:19:29 prd-ubuntu20-04-docker-8c-8g-13216 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Oct 3 06:19:29 prd-ubuntu20-04-docker-8c-8g-13216 sudo: pam_unix(sudo:session): session closed for user root Oct 3 06:20:01 prd-ubuntu20-04-docker-8c-8g-13216 CRON[13307]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 3 06:20:01 prd-ubuntu20-04-docker-8c-8g-13216 CRON[13307]: pam_unix(cron:session): session closed for user root Oct 3 06:21:01 prd-ubuntu20-04-docker-8c-8g-13216 CRON[13311]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 3 06:21:01 prd-ubuntu20-04-docker-8c-8g-13216 CRON[13311]: pam_unix(cron:session): session closed for user root Oct 3 06:22:01 prd-ubuntu20-04-docker-8c-8g-13216 CRON[13315]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 3 06:22:01 prd-ubuntu20-04-docker-8c-8g-13216 CRON[13315]: pam_unix(cron:session): session closed for user root Oct 3 06:22:26 prd-ubuntu20-04-docker-8c-8g-13216 systemd-logind[825]: Watching system buttons on /dev/input/event0 (Power Button) Oct 3 06:22:26 prd-ubuntu20-04-docker-8c-8g-13216 systemd-logind[825]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Oct 3 06:23:01 prd-ubuntu20-04-docker-8c-8g-13216 CRON[14601]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 3 06:23:01 prd-ubuntu20-04-docker-8c-8g-13216 CRON[14601]: pam_unix(cron:session): session closed for user root Oct 3 06:24:01 prd-ubuntu20-04-docker-8c-8g-13216 CRON[14649]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 3 06:24:01 prd-ubuntu20-04-docker-8c-8g-13216 CRON[14649]: pam_unix(cron:session): session closed for user root Oct 3 06:25:01 prd-ubuntu20-04-docker-8c-8g-13216 CRON[14652]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 3 06:25:01 prd-ubuntu20-04-docker-8c-8g-13216 CRON[14653]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 3 06:25:01 prd-ubuntu20-04-docker-8c-8g-13216 CRON[14653]: pam_unix(cron:session): session closed for user root Oct 3 06:25:02 prd-ubuntu20-04-docker-8c-8g-13216 CRON[14652]: pam_unix(cron:session): session closed for user root Oct 3 06:26:01 prd-ubuntu20-04-docker-8c-8g-13216 CRON[14714]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 3 06:26:01 prd-ubuntu20-04-docker-8c-8g-13216 CRON[14714]: pam_unix(cron:session): session closed for user root Oct 3 06:27:01 prd-ubuntu20-04-docker-8c-8g-13216 CRON[14717]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 3 06:27:01 prd-ubuntu20-04-docker-8c-8g-13216 CRON[14717]: pam_unix(cron:session): session closed for user root Oct 3 06:28:01 prd-ubuntu20-04-docker-8c-8g-13216 CRON[14725]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 3 06:28:01 prd-ubuntu20-04-docker-8c-8g-13216 CRON[14725]: pam_unix(cron:session): session closed for user root Oct 3 06:29:01 prd-ubuntu20-04-docker-8c-8g-13216 CRON[14728]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 3 06:29:01 prd-ubuntu20-04-docker-8c-8g-13216 CRON[14728]: pam_unix(cron:session): session closed for user root Oct 3 06:30:01 prd-ubuntu20-04-docker-8c-8g-13216 CRON[14735]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 3 06:30:01 prd-ubuntu20-04-docker-8c-8g-13216 CRON[14735]: pam_unix(cron:session): session closed for user root Oct 3 06:31:01 prd-ubuntu20-04-docker-8c-8g-13216 CRON[14738]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 3 06:31:01 prd-ubuntu20-04-docker-8c-8g-13216 CRON[14738]: pam_unix(cron:session): session closed for user root Oct 3 06:32:01 prd-ubuntu20-04-docker-8c-8g-13216 CRON[14742]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 3 06:32:01 prd-ubuntu20-04-docker-8c-8g-13216 CRON[14742]: pam_unix(cron:session): session closed for user root Oct 3 06:33:01 prd-ubuntu20-04-docker-8c-8g-13216 CRON[14765]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 3 06:33:01 prd-ubuntu20-04-docker-8c-8g-13216 CRON[14765]: pam_unix(cron:session): session closed for user root Oct 3 06:34:01 prd-ubuntu20-04-docker-8c-8g-13216 CRON[14769]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 3 06:34:01 prd-ubuntu20-04-docker-8c-8g-13216 CRON[14769]: pam_unix(cron:session): session closed for user root Oct 3 06:35:01 prd-ubuntu20-04-docker-8c-8g-13216 CRON[14775]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 3 06:35:01 prd-ubuntu20-04-docker-8c-8g-13216 CRON[14775]: pam_unix(cron:session): session closed for user root Oct 3 06:36:01 prd-ubuntu20-04-docker-8c-8g-13216 CRON[14779]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 3 06:36:01 prd-ubuntu20-04-docker-8c-8g-13216 CRON[14779]: pam_unix(cron:session): session closed for user root Oct 3 06:37:01 prd-ubuntu20-04-docker-8c-8g-13216 CRON[14782]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 3 06:37:01 prd-ubuntu20-04-docker-8c-8g-13216 CRON[14782]: pam_unix(cron:session): session closed for user root Oct 3 06:38:01 prd-ubuntu20-04-docker-8c-8g-13216 CRON[14789]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 3 06:38:01 prd-ubuntu20-04-docker-8c-8g-13216 CRON[14789]: pam_unix(cron:session): session closed for user root Oct 3 06:39:01 prd-ubuntu20-04-docker-8c-8g-13216 CRON[14792]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 3 06:39:01 prd-ubuntu20-04-docker-8c-8g-13216 CRON[14792]: pam_unix(cron:session): session closed for user root Oct 3 06:40:01 prd-ubuntu20-04-docker-8c-8g-13216 CRON[14796]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 3 06:40:01 prd-ubuntu20-04-docker-8c-8g-13216 CRON[14796]: pam_unix(cron:session): session closed for user root Oct 3 06:41:01 prd-ubuntu20-04-docker-8c-8g-13216 CRON[14800]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 3 06:41:01 prd-ubuntu20-04-docker-8c-8g-13216 CRON[14800]: pam_unix(cron:session): session closed for user root Oct 3 06:42:01 prd-ubuntu20-04-docker-8c-8g-13216 CRON[14804]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 3 06:42:01 prd-ubuntu20-04-docker-8c-8g-13216 CRON[14804]: pam_unix(cron:session): session closed for user root Oct 3 06:43:01 prd-ubuntu20-04-docker-8c-8g-13216 CRON[14809]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 3 06:43:01 prd-ubuntu20-04-docker-8c-8g-13216 CRON[14809]: pam_unix(cron:session): session closed for user root Oct 3 06:44:01 prd-ubuntu20-04-docker-8c-8g-13216 CRON[14813]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 3 06:44:01 prd-ubuntu20-04-docker-8c-8g-13216 CRON[14813]: pam_unix(cron:session): session closed for user root Oct 3 06:45:01 prd-ubuntu20-04-docker-8c-8g-13216 CRON[14816]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 3 06:45:01 prd-ubuntu20-04-docker-8c-8g-13216 CRON[14816]: pam_unix(cron:session): session closed for user root Oct 3 06:46:01 prd-ubuntu20-04-docker-8c-8g-13216 CRON[14820]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 3 06:46:01 prd-ubuntu20-04-docker-8c-8g-13216 CRON[14820]: pam_unix(cron:session): session closed for user root Oct 3 06:47:01 prd-ubuntu20-04-docker-8c-8g-13216 CRON[14829]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 3 06:47:01 prd-ubuntu20-04-docker-8c-8g-13216 CRON[14829]: pam_unix(cron:session): session closed for user root Oct 3 06:48:01 prd-ubuntu20-04-docker-8c-8g-13216 CRON[14835]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 3 06:48:01 prd-ubuntu20-04-docker-8c-8g-13216 CRON[14835]: pam_unix(cron:session): session closed for user root Oct 3 06:49:01 prd-ubuntu20-04-docker-8c-8g-13216 CRON[14839]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 3 06:49:01 prd-ubuntu20-04-docker-8c-8g-13216 CRON[14839]: pam_unix(cron:session): session closed for user root Oct 3 06:50:01 prd-ubuntu20-04-docker-8c-8g-13216 CRON[14844]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 3 06:50:01 prd-ubuntu20-04-docker-8c-8g-13216 CRON[14844]: pam_unix(cron:session): session closed for user root Oct 3 06:51:01 prd-ubuntu20-04-docker-8c-8g-13216 CRON[14847]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 3 06:51:01 prd-ubuntu20-04-docker-8c-8g-13216 CRON[14847]: pam_unix(cron:session): session closed for user root Oct 3 06:52:01 prd-ubuntu20-04-docker-8c-8g-13216 CRON[14851]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 3 06:52:01 prd-ubuntu20-04-docker-8c-8g-13216 CRON[14851]: pam_unix(cron:session): session closed for user root Oct 3 06:52:47 prd-ubuntu20-04-docker-8c-8g-13216 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/gexfoundry_go-mod-secrets_PR-279 ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins /w/workspace/gexfoundry_go-mod-secrets_PR-279/archives Oct 3 06:52:47 prd-ubuntu20-04-docker-8c-8g-13216 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Oct 3 06:52:47 prd-ubuntu20-04-docker-8c-8g-13216 sudo: pam_unix(sudo:session): session closed for user root