May 28 02:12:09 prd-ubuntu20-04-docker-2c-8g-2370 passwd[674]: password for 'ubuntu' changed by 'root' May 28 02:12:09 prd-ubuntu20-04-docker-2c-8g-2370 sshd[742]: Server listening on 0.0.0.0 port 22. May 28 02:12:09 prd-ubuntu20-04-docker-2c-8g-2370 sshd[742]: Server listening on :: port 22. May 28 02:12:09 prd-ubuntu20-04-docker-2c-8g-2370 systemd-logind[719]: New seat seat0. May 28 02:12:10 prd-ubuntu20-04-docker-2c-8g-2370 systemd-logind[719]: Watching system buttons on /dev/input/event0 (Power Button) May 28 02:12:10 prd-ubuntu20-04-docker-2c-8g-2370 systemd-logind[719]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) May 28 02:12:12 prd-ubuntu20-04-docker-2c-8g-2370 sshd[908]: error: kex_exchange_identification: read: Connection reset by peer May 28 02:12:22 prd-ubuntu20-04-docker-2c-8g-2370 sshd[915]: Invalid user jenkins from 10.30.120.5 port 38792 May 28 02:12:22 prd-ubuntu20-04-docker-2c-8g-2370 sshd[915]: Received disconnect from 10.30.120.5 port 38792:11: Closed due to user request. [preauth] May 28 02:12:22 prd-ubuntu20-04-docker-2c-8g-2370 sshd[915]: Disconnected from invalid user jenkins 10.30.120.5 port 38792 [preauth] May 28 02:12:24 prd-ubuntu20-04-docker-2c-8g-2370 sshd[918]: Invalid user jenkins from 10.30.120.5 port 38814 May 28 02:12:24 prd-ubuntu20-04-docker-2c-8g-2370 sshd[918]: Received disconnect from 10.30.120.5 port 38814:11: Closed due to user request. [preauth] May 28 02:12:24 prd-ubuntu20-04-docker-2c-8g-2370 sshd[918]: Disconnected from invalid user jenkins 10.30.120.5 port 38814 [preauth] May 28 02:12:26 prd-ubuntu20-04-docker-2c-8g-2370 sshd[933]: Invalid user jenkins from 10.30.120.5 port 38826 May 28 02:12:26 prd-ubuntu20-04-docker-2c-8g-2370 sshd[933]: Received disconnect from 10.30.120.5 port 38826:11: Closed due to user request. [preauth] May 28 02:12:26 prd-ubuntu20-04-docker-2c-8g-2370 sshd[933]: Disconnected from invalid user jenkins 10.30.120.5 port 38826 [preauth] May 28 02:12:28 prd-ubuntu20-04-docker-2c-8g-2370 sshd[1116]: Invalid user jenkins from 10.30.120.5 port 38836 May 28 02:12:28 prd-ubuntu20-04-docker-2c-8g-2370 sshd[1116]: Received disconnect from 10.30.120.5 port 38836:11: Closed due to user request. [preauth] May 28 02:12:28 prd-ubuntu20-04-docker-2c-8g-2370 sshd[1116]: Disconnected from invalid user jenkins 10.30.120.5 port 38836 [preauth] May 28 02:12:30 prd-ubuntu20-04-docker-2c-8g-2370 sshd[1152]: Invalid user jenkins from 10.30.120.5 port 38850 May 28 02:12:30 prd-ubuntu20-04-docker-2c-8g-2370 sshd[1152]: Received disconnect from 10.30.120.5 port 38850:11: Closed due to user request. [preauth] May 28 02:12:30 prd-ubuntu20-04-docker-2c-8g-2370 sshd[1152]: Disconnected from invalid user jenkins 10.30.120.5 port 38850 [preauth] May 28 02:12:33 prd-ubuntu20-04-docker-2c-8g-2370 sshd[1154]: Invalid user jenkins from 10.30.120.5 port 38876 May 28 02:12:33 prd-ubuntu20-04-docker-2c-8g-2370 sshd[1154]: Received disconnect from 10.30.120.5 port 38876:11: Closed due to user request. [preauth] May 28 02:12:33 prd-ubuntu20-04-docker-2c-8g-2370 sshd[1154]: Disconnected from invalid user jenkins 10.30.120.5 port 38876 [preauth] May 28 02:12:35 prd-ubuntu20-04-docker-2c-8g-2370 sshd[1180]: Invalid user jenkins from 10.30.120.5 port 38896 May 28 02:12:35 prd-ubuntu20-04-docker-2c-8g-2370 sshd[1180]: Received disconnect from 10.30.120.5 port 38896:11: Closed due to user request. [preauth] May 28 02:12:35 prd-ubuntu20-04-docker-2c-8g-2370 sshd[1180]: Disconnected from invalid user jenkins 10.30.120.5 port 38896 [preauth] May 28 02:12:35 prd-ubuntu20-04-docker-2c-8g-2370 useradd[1193]: new group: name=jenkins, GID=1001 May 28 02:12:35 prd-ubuntu20-04-docker-2c-8g-2370 useradd[1193]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash, from=none May 28 02:12:35 prd-ubuntu20-04-docker-2c-8g-2370 usermod[1203]: add 'jenkins' to group 'docker' May 28 02:12:35 prd-ubuntu20-04-docker-2c-8g-2370 usermod[1203]: add 'jenkins' to shadow group 'docker' May 28 02:12:37 prd-ubuntu20-04-docker-2c-8g-2370 sshd[1240]: Accepted publickey for jenkins from 10.30.120.5 port 38908 ssh2: RSA SHA256:aPmPdMw/h9M56P/o8xjsZcdBWoRKGeie6FPOwnlsRmU May 28 02:12:37 prd-ubuntu20-04-docker-2c-8g-2370 sshd[1240]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) May 28 02:12:37 prd-ubuntu20-04-docker-2c-8g-2370 systemd-logind[719]: New session 1 of user jenkins. May 28 02:12:37 prd-ubuntu20-04-docker-2c-8g-2370 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) May 28 02:13:01 prd-ubuntu20-04-docker-2c-8g-2370 CRON[1983]: pam_unix(cron:session): session opened for user root by (uid=0) May 28 02:13:01 prd-ubuntu20-04-docker-2c-8g-2370 CRON[1983]: pam_unix(cron:session): session closed for user root May 28 02:14:01 prd-ubuntu20-04-docker-2c-8g-2370 CRON[1997]: pam_unix(cron:session): session opened for user root by (uid=0) May 28 02:14:01 prd-ubuntu20-04-docker-2c-8g-2370 CRON[1997]: pam_unix(cron:session): session closed for user root May 28 02:15:01 prd-ubuntu20-04-docker-2c-8g-2370 CRON[2290]: pam_unix(cron:session): session opened for user root by (uid=0) May 28 02:15:01 prd-ubuntu20-04-docker-2c-8g-2370 CRON[2290]: pam_unix(cron:session): session closed for user root May 28 02:16:01 prd-ubuntu20-04-docker-2c-8g-2370 CRON[2293]: pam_unix(cron:session): session opened for user root by (uid=0) May 28 02:16:01 prd-ubuntu20-04-docker-2c-8g-2370 CRON[2293]: pam_unix(cron:session): session closed for user root May 28 02:17:01 prd-ubuntu20-04-docker-2c-8g-2370 CRON[2298]: pam_unix(cron:session): session opened for user root by (uid=0) May 28 02:17:01 prd-ubuntu20-04-docker-2c-8g-2370 CRON[2297]: pam_unix(cron:session): session opened for user root by (uid=0) May 28 02:17:01 prd-ubuntu20-04-docker-2c-8g-2370 CRON[2297]: pam_unix(cron:session): session closed for user root May 28 02:17:01 prd-ubuntu20-04-docker-2c-8g-2370 CRON[2298]: pam_unix(cron:session): session closed for user root May 28 02:17:19 prd-ubuntu20-04-docker-2c-8g-2370 systemd-logind[719]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) May 28 02:17:19 prd-ubuntu20-04-docker-2c-8g-2370 systemd-logind[719]: Watching system buttons on /dev/input/event0 (Power Button) May 28 02:18:01 prd-ubuntu20-04-docker-2c-8g-2370 CRON[3270]: pam_unix(cron:session): session opened for user root by (uid=0) May 28 02:18:01 prd-ubuntu20-04-docker-2c-8g-2370 CRON[3270]: pam_unix(cron:session): session closed for user root May 28 02:19:01 prd-ubuntu20-04-docker-2c-8g-2370 CRON[3334]: pam_unix(cron:session): session opened for user root by (uid=0) May 28 02:19:01 prd-ubuntu20-04-docker-2c-8g-2370 CRON[3334]: pam_unix(cron:session): session closed for user root May 28 02:20:01 prd-ubuntu20-04-docker-2c-8g-2370 CRON[3337]: pam_unix(cron:session): session opened for user root by (uid=0) May 28 02:20:01 prd-ubuntu20-04-docker-2c-8g-2370 CRON[3337]: pam_unix(cron:session): session closed for user root May 28 02:21:01 prd-ubuntu20-04-docker-2c-8g-2370 CRON[3368]: pam_unix(cron:session): session opened for user root by (uid=0) May 28 02:21:01 prd-ubuntu20-04-docker-2c-8g-2370 CRON[3368]: pam_unix(cron:session): session closed for user root May 28 02:22:01 prd-ubuntu20-04-docker-2c-8g-2370 CRON[3425]: pam_unix(cron:session): session opened for user root by (uid=0) May 28 02:22:01 prd-ubuntu20-04-docker-2c-8g-2370 CRON[3425]: pam_unix(cron:session): session closed for user root May 28 02:23:01 prd-ubuntu20-04-docker-2c-8g-2370 CRON[3472]: pam_unix(cron:session): session opened for user root by (uid=0) May 28 02:23:01 prd-ubuntu20-04-docker-2c-8g-2370 CRON[3472]: pam_unix(cron:session): session closed for user root May 28 02:24:01 prd-ubuntu20-04-docker-2c-8g-2370 CRON[3510]: pam_unix(cron:session): session opened for user root by (uid=0) May 28 02:24:01 prd-ubuntu20-04-docker-2c-8g-2370 CRON[3510]: pam_unix(cron:session): session closed for user root May 28 02:25:01 prd-ubuntu20-04-docker-2c-8g-2370 CRON[3584]: pam_unix(cron:session): session opened for user root by (uid=0) May 28 02:25:01 prd-ubuntu20-04-docker-2c-8g-2370 CRON[3584]: pam_unix(cron:session): session closed for user root May 28 02:26:01 prd-ubuntu20-04-docker-2c-8g-2370 CRON[3629]: pam_unix(cron:session): session opened for user root by (uid=0) May 28 02:26:01 prd-ubuntu20-04-docker-2c-8g-2370 CRON[3629]: pam_unix(cron:session): session closed for user root May 28 02:27:01 prd-ubuntu20-04-docker-2c-8g-2370 CRON[3690]: pam_unix(cron:session): session opened for user root by (uid=0) May 28 02:27:01 prd-ubuntu20-04-docker-2c-8g-2370 CRON[3690]: pam_unix(cron:session): session closed for user root May 28 02:28:01 prd-ubuntu20-04-docker-2c-8g-2370 CRON[3733]: pam_unix(cron:session): session opened for user root by (uid=0) May 28 02:28:01 prd-ubuntu20-04-docker-2c-8g-2370 CRON[3733]: pam_unix(cron:session): session closed for user root May 28 02:29:01 prd-ubuntu20-04-docker-2c-8g-2370 CRON[3867]: pam_unix(cron:session): session opened for user root by (uid=0) May 28 02:29:01 prd-ubuntu20-04-docker-2c-8g-2370 CRON[3867]: pam_unix(cron:session): session closed for user root May 28 02:30:01 prd-ubuntu20-04-docker-2c-8g-2370 CRON[3870]: pam_unix(cron:session): session opened for user root by (uid=0) May 28 02:30:01 prd-ubuntu20-04-docker-2c-8g-2370 CRON[3870]: pam_unix(cron:session): session closed for user root May 28 02:31:01 prd-ubuntu20-04-docker-2c-8g-2370 CRON[3874]: pam_unix(cron:session): session opened for user root by (uid=0) May 28 02:31:01 prd-ubuntu20-04-docker-2c-8g-2370 CRON[3874]: pam_unix(cron:session): session closed for user root May 28 02:32:01 prd-ubuntu20-04-docker-2c-8g-2370 CRON[3884]: pam_unix(cron:session): session opened for user root by (uid=0) May 28 02:32:01 prd-ubuntu20-04-docker-2c-8g-2370 CRON[3884]: pam_unix(cron:session): session closed for user root May 28 02:33:01 prd-ubuntu20-04-docker-2c-8g-2370 CRON[3890]: pam_unix(cron:session): session opened for user root by (uid=0) May 28 02:33:01 prd-ubuntu20-04-docker-2c-8g-2370 CRON[3890]: pam_unix(cron:session): session closed for user root May 28 02:34:01 prd-ubuntu20-04-docker-2c-8g-2370 CRON[3894]: pam_unix(cron:session): session opened for user root by (uid=0) May 28 02:34:01 prd-ubuntu20-04-docker-2c-8g-2370 CRON[3894]: pam_unix(cron:session): session closed for user root May 28 02:35:01 prd-ubuntu20-04-docker-2c-8g-2370 CRON[3908]: pam_unix(cron:session): session opened for user root by (uid=0) May 28 02:35:02 prd-ubuntu20-04-docker-2c-8g-2370 CRON[3908]: pam_unix(cron:session): session closed for user root May 28 02:36:02 prd-ubuntu20-04-docker-2c-8g-2370 CRON[3913]: pam_unix(cron:session): session opened for user root by (uid=0) May 28 02:36:02 prd-ubuntu20-04-docker-2c-8g-2370 CRON[3913]: pam_unix(cron:session): session closed for user root May 28 02:37:01 prd-ubuntu20-04-docker-2c-8g-2370 CRON[3917]: pam_unix(cron:session): session opened for user root by (uid=0) May 28 02:37:01 prd-ubuntu20-04-docker-2c-8g-2370 CRON[3917]: pam_unix(cron:session): session closed for user root May 28 02:38:01 prd-ubuntu20-04-docker-2c-8g-2370 CRON[3921]: pam_unix(cron:session): session opened for user root by (uid=0) May 28 02:38:01 prd-ubuntu20-04-docker-2c-8g-2370 CRON[3921]: pam_unix(cron:session): session closed for user root May 28 02:39:01 prd-ubuntu20-04-docker-2c-8g-2370 CRON[3934]: pam_unix(cron:session): session opened for user root by (uid=0) May 28 02:39:01 prd-ubuntu20-04-docker-2c-8g-2370 CRON[3934]: pam_unix(cron:session): session closed for user root May 28 02:40:01 prd-ubuntu20-04-docker-2c-8g-2370 CRON[3937]: pam_unix(cron:session): session opened for user root by (uid=0) May 28 02:40:01 prd-ubuntu20-04-docker-2c-8g-2370 CRON[3937]: pam_unix(cron:session): session closed for user root May 28 02:41:01 prd-ubuntu20-04-docker-2c-8g-2370 CRON[3941]: pam_unix(cron:session): session opened for user root by (uid=0) May 28 02:41:01 prd-ubuntu20-04-docker-2c-8g-2370 CRON[3941]: pam_unix(cron:session): session closed for user root May 28 02:42:01 prd-ubuntu20-04-docker-2c-8g-2370 CRON[4106]: pam_unix(cron:session): session opened for user root by (uid=0) May 28 02:42:01 prd-ubuntu20-04-docker-2c-8g-2370 CRON[4106]: pam_unix(cron:session): session closed for user root May 28 02:43:01 prd-ubuntu20-04-docker-2c-8g-2370 CRON[4181]: pam_unix(cron:session): session opened for user root by (uid=0) May 28 02:43:01 prd-ubuntu20-04-docker-2c-8g-2370 CRON[4181]: pam_unix(cron:session): session closed for user root May 28 02:44:01 prd-ubuntu20-04-docker-2c-8g-2370 CRON[4185]: pam_unix(cron:session): session opened for user root by (uid=0) May 28 02:44:01 prd-ubuntu20-04-docker-2c-8g-2370 CRON[4185]: pam_unix(cron:session): session closed for user root May 28 02:45:01 prd-ubuntu20-04-docker-2c-8g-2370 CRON[4282]: pam_unix(cron:session): session opened for user root by (uid=0) May 28 02:45:01 prd-ubuntu20-04-docker-2c-8g-2370 CRON[4282]: pam_unix(cron:session): session closed for user root May 28 02:46:01 prd-ubuntu20-04-docker-2c-8g-2370 CRON[4388]: pam_unix(cron:session): session opened for user root by (uid=0) May 28 02:46:01 prd-ubuntu20-04-docker-2c-8g-2370 CRON[4388]: pam_unix(cron:session): session closed for user root May 28 02:47:01 prd-ubuntu20-04-docker-2c-8g-2370 CRON[4410]: pam_unix(cron:session): session opened for user root by (uid=0) May 28 02:47:01 prd-ubuntu20-04-docker-2c-8g-2370 CRON[4410]: pam_unix(cron:session): session closed for user root May 28 02:48:01 prd-ubuntu20-04-docker-2c-8g-2370 CRON[4414]: pam_unix(cron:session): session opened for user root by (uid=0) May 28 02:48:01 prd-ubuntu20-04-docker-2c-8g-2370 CRON[4414]: pam_unix(cron:session): session closed for user root May 28 02:49:01 prd-ubuntu20-04-docker-2c-8g-2370 CRON[4418]: pam_unix(cron:session): session opened for user root by (uid=0) May 28 02:49:01 prd-ubuntu20-04-docker-2c-8g-2370 CRON[4418]: pam_unix(cron:session): session closed for user root May 28 02:50:01 prd-ubuntu20-04-docker-2c-8g-2370 CRON[4422]: pam_unix(cron:session): session opened for user root by (uid=0) May 28 02:50:01 prd-ubuntu20-04-docker-2c-8g-2370 CRON[4422]: pam_unix(cron:session): session closed for user root May 28 02:51:01 prd-ubuntu20-04-docker-2c-8g-2370 CRON[4426]: pam_unix(cron:session): session opened for user root by (uid=0) May 28 02:51:01 prd-ubuntu20-04-docker-2c-8g-2370 CRON[4426]: pam_unix(cron:session): session closed for user root May 28 02:52:01 prd-ubuntu20-04-docker-2c-8g-2370 CRON[4429]: pam_unix(cron:session): session opened for user root by (uid=0) May 28 02:52:01 prd-ubuntu20-04-docker-2c-8g-2370 CRON[4429]: pam_unix(cron:session): session closed for user root May 28 02:53:01 prd-ubuntu20-04-docker-2c-8g-2370 CRON[4922]: pam_unix(cron:session): session opened for user root by (uid=0) May 28 02:53:01 prd-ubuntu20-04-docker-2c-8g-2370 CRON[4922]: pam_unix(cron:session): session closed for user root May 28 02:53:03 prd-ubuntu20-04-docker-2c-8g-2370 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/ci-management-packer-merge-ubuntu-20.04-docker ; USER=root ; COMMAND=/usr/bin/cp /var/log/auth.log /tmp May 28 02:53:03 prd-ubuntu20-04-docker-2c-8g-2370 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)