Apr 11 01:53:07 prd-ubuntu20-04-docker-8c-8g-44740 passwd[769]: password for 'ubuntu' changed by 'root' Apr 11 01:53:07 prd-ubuntu20-04-docker-8c-8g-44740 systemd-logind[844]: New seat seat0. Apr 11 01:53:07 prd-ubuntu20-04-docker-8c-8g-44740 systemd-logind[844]: Watching system buttons on /dev/input/event0 (Power Button) Apr 11 01:53:07 prd-ubuntu20-04-docker-8c-8g-44740 systemd-logind[844]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Apr 11 01:53:07 prd-ubuntu20-04-docker-8c-8g-44740 sshd[871]: Server listening on 0.0.0.0 port 22. Apr 11 01:53:07 prd-ubuntu20-04-docker-8c-8g-44740 sshd[871]: Server listening on :: port 22. Apr 11 01:53:11 prd-ubuntu20-04-docker-8c-8g-44740 sshd[1061]: error: kex_exchange_identification: Connection closed by remote host Apr 11 01:53:15 prd-ubuntu20-04-docker-8c-8g-44740 sshd[1068]: Invalid user jenkins from 10.30.120.5 port 45116 Apr 11 01:53:15 prd-ubuntu20-04-docker-8c-8g-44740 sshd[1068]: Received disconnect from 10.30.120.5 port 45116:11: Closed due to user request. [preauth] Apr 11 01:53:15 prd-ubuntu20-04-docker-8c-8g-44740 sshd[1068]: Disconnected from invalid user jenkins 10.30.120.5 port 45116 [preauth] Apr 11 01:53:17 prd-ubuntu20-04-docker-8c-8g-44740 sshd[1070]: Invalid user jenkins from 10.30.120.5 port 45118 Apr 11 01:53:17 prd-ubuntu20-04-docker-8c-8g-44740 sshd[1070]: Received disconnect from 10.30.120.5 port 45118:11: Closed due to user request. [preauth] Apr 11 01:53:17 prd-ubuntu20-04-docker-8c-8g-44740 sshd[1070]: Disconnected from invalid user jenkins 10.30.120.5 port 45118 [preauth] Apr 11 01:53:19 prd-ubuntu20-04-docker-8c-8g-44740 sshd[1072]: Invalid user jenkins from 10.30.120.5 port 45120 Apr 11 01:53:19 prd-ubuntu20-04-docker-8c-8g-44740 sshd[1072]: Received disconnect from 10.30.120.5 port 45120:11: Closed due to user request. [preauth] Apr 11 01:53:19 prd-ubuntu20-04-docker-8c-8g-44740 sshd[1072]: Disconnected from invalid user jenkins 10.30.120.5 port 45120 [preauth] Apr 11 01:53:21 prd-ubuntu20-04-docker-8c-8g-44740 sshd[1074]: Invalid user jenkins from 10.30.120.5 port 45124 Apr 11 01:53:21 prd-ubuntu20-04-docker-8c-8g-44740 sshd[1074]: Received disconnect from 10.30.120.5 port 45124:11: Closed due to user request. [preauth] Apr 11 01:53:21 prd-ubuntu20-04-docker-8c-8g-44740 sshd[1074]: Disconnected from invalid user jenkins 10.30.120.5 port 45124 [preauth] Apr 11 01:53:23 prd-ubuntu20-04-docker-8c-8g-44740 sshd[1076]: Invalid user jenkins from 10.30.120.5 port 45126 Apr 11 01:53:23 prd-ubuntu20-04-docker-8c-8g-44740 sshd[1076]: Received disconnect from 10.30.120.5 port 45126:11: Closed due to user request. [preauth] Apr 11 01:53:23 prd-ubuntu20-04-docker-8c-8g-44740 sshd[1076]: Disconnected from invalid user jenkins 10.30.120.5 port 45126 [preauth] Apr 11 01:53:25 prd-ubuntu20-04-docker-8c-8g-44740 sshd[1078]: Invalid user jenkins from 10.30.120.5 port 45128 Apr 11 01:53:25 prd-ubuntu20-04-docker-8c-8g-44740 sshd[1078]: Received disconnect from 10.30.120.5 port 45128:11: Closed due to user request. [preauth] Apr 11 01:53:25 prd-ubuntu20-04-docker-8c-8g-44740 sshd[1078]: Disconnected from invalid user jenkins 10.30.120.5 port 45128 [preauth] Apr 11 01:53:28 prd-ubuntu20-04-docker-8c-8g-44740 sshd[1256]: Invalid user jenkins from 10.30.120.5 port 45130 Apr 11 01:53:28 prd-ubuntu20-04-docker-8c-8g-44740 sshd[1256]: Received disconnect from 10.30.120.5 port 45130:11: Closed due to user request. [preauth] Apr 11 01:53:28 prd-ubuntu20-04-docker-8c-8g-44740 sshd[1256]: Disconnected from invalid user jenkins 10.30.120.5 port 45130 [preauth] Apr 11 01:53:30 prd-ubuntu20-04-docker-8c-8g-44740 sshd[1296]: Invalid user jenkins from 10.30.120.5 port 45132 Apr 11 01:53:30 prd-ubuntu20-04-docker-8c-8g-44740 sshd[1296]: Received disconnect from 10.30.120.5 port 45132:11: Closed due to user request. [preauth] Apr 11 01:53:30 prd-ubuntu20-04-docker-8c-8g-44740 sshd[1296]: Disconnected from invalid user jenkins 10.30.120.5 port 45132 [preauth] Apr 11 01:53:32 prd-ubuntu20-04-docker-8c-8g-44740 sshd[1298]: Invalid user jenkins from 10.30.120.5 port 45134 Apr 11 01:53:32 prd-ubuntu20-04-docker-8c-8g-44740 sshd[1298]: Received disconnect from 10.30.120.5 port 45134:11: Closed due to user request. [preauth] Apr 11 01:53:32 prd-ubuntu20-04-docker-8c-8g-44740 sshd[1298]: Disconnected from invalid user jenkins 10.30.120.5 port 45134 [preauth] Apr 11 01:53:34 prd-ubuntu20-04-docker-8c-8g-44740 sshd[1300]: Invalid user jenkins from 10.30.120.5 port 45136 Apr 11 01:53:34 prd-ubuntu20-04-docker-8c-8g-44740 sshd[1300]: Received disconnect from 10.30.120.5 port 45136:11: Closed due to user request. [preauth] Apr 11 01:53:34 prd-ubuntu20-04-docker-8c-8g-44740 sshd[1300]: Disconnected from invalid user jenkins 10.30.120.5 port 45136 [preauth] Apr 11 01:53:35 prd-ubuntu20-04-docker-8c-8g-44740 useradd[1321]: new group: name=jenkins, GID=1001 Apr 11 01:53:35 prd-ubuntu20-04-docker-8c-8g-44740 useradd[1321]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash, from=none Apr 11 01:53:35 prd-ubuntu20-04-docker-8c-8g-44740 usermod[1331]: add 'jenkins' to group 'docker' Apr 11 01:53:35 prd-ubuntu20-04-docker-8c-8g-44740 usermod[1331]: add 'jenkins' to shadow group 'docker' Apr 11 01:53:36 prd-ubuntu20-04-docker-8c-8g-44740 sshd[1368]: Accepted publickey for jenkins from 10.30.120.5 port 45146 ssh2: RSA SHA256:aPmPdMw/h9M56P/o8xjsZcdBWoRKGeie6FPOwnlsRmU Apr 11 01:53:36 prd-ubuntu20-04-docker-8c-8g-44740 sshd[1368]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Apr 11 01:53:36 prd-ubuntu20-04-docker-8c-8g-44740 systemd-logind[844]: New session 1 of user jenkins. Apr 11 01:53:36 prd-ubuntu20-04-docker-8c-8g-44740 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Apr 11 01:53:58 prd-ubuntu20-04-docker-8c-8g-44740 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/gexfoundry_sample-service_PR-165 ; USER=root ; COMMAND=/usr/bin/mv /tmp/ssh_known_hosts /etc/ssh/ssh_known_hosts Apr 11 01:53:58 prd-ubuntu20-04-docker-8c-8g-44740 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Apr 11 01:53:58 prd-ubuntu20-04-docker-8c-8g-44740 sudo: pam_unix(sudo:session): session closed for user root Apr 11 01:53:58 prd-ubuntu20-04-docker-8c-8g-44740 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/gexfoundry_sample-service_PR-165 ; USER=root ; COMMAND=/usr/bin/tee -a /etc/ssh/ssh_known_hosts Apr 11 01:53:58 prd-ubuntu20-04-docker-8c-8g-44740 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Apr 11 01:53:58 prd-ubuntu20-04-docker-8c-8g-44740 sudo: pam_unix(sudo:session): session closed for user root Apr 11 01:54:03 prd-ubuntu20-04-docker-8c-8g-44740 CRON[2179]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 11 01:54:03 prd-ubuntu20-04-docker-8c-8g-44740 CRON[2179]: pam_unix(cron:session): session closed for user root Apr 11 01:54:10 prd-ubuntu20-04-docker-8c-8g-44740 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/gexfoundry_sample-service_PR-165 ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins .semver Apr 11 01:54:10 prd-ubuntu20-04-docker-8c-8g-44740 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Apr 11 01:54:10 prd-ubuntu20-04-docker-8c-8g-44740 sudo: pam_unix(sudo:session): session closed for user root Apr 11 01:55:01 prd-ubuntu20-04-docker-8c-8g-44740 CRON[2823]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 11 01:55:01 prd-ubuntu20-04-docker-8c-8g-44740 CRON[2823]: pam_unix(cron:session): session closed for user root Apr 11 01:56:01 prd-ubuntu20-04-docker-8c-8g-44740 CRON[3037]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 11 01:56:01 prd-ubuntu20-04-docker-8c-8g-44740 CRON[3037]: pam_unix(cron:session): session closed for user root