Aug 31 00:41:51 prd-ubuntu20-04-docker-8c-8g-24153 passwd[736]: password for 'ubuntu' changed by 'root'
Aug 31 00:41:51 prd-ubuntu20-04-docker-8c-8g-24153 systemd-logind[787]: Watching system buttons on /dev/input/event0 (Power Button)
Aug 31 00:41:51 prd-ubuntu20-04-docker-8c-8g-24153 systemd-logind[787]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard)
Aug 31 00:41:51 prd-ubuntu20-04-docker-8c-8g-24153 systemd-logind[787]: New seat seat0.
Aug 31 00:41:52 prd-ubuntu20-04-docker-8c-8g-24153 sshd[831]: Server listening on 0.0.0.0 port 22.
Aug 31 00:41:52 prd-ubuntu20-04-docker-8c-8g-24153 sshd[831]: Server listening on :: port 22.
Aug 31 00:41:52 prd-ubuntu20-04-docker-8c-8g-24153 sshd[885]: error: kex_exchange_identification: Connection closed by remote host
Aug 31 00:42:00 prd-ubuntu20-04-docker-8c-8g-24153 sshd[1332]: Invalid user jenkins from 10.30.120.5 port 53060
Aug 31 00:42:00 prd-ubuntu20-04-docker-8c-8g-24153 sshd[1332]: Received disconnect from 10.30.120.5 port 53060:11: Closed due to user request. [preauth]
Aug 31 00:42:00 prd-ubuntu20-04-docker-8c-8g-24153 sshd[1332]: Disconnected from invalid user jenkins 10.30.120.5 port 53060 [preauth]
Aug 31 00:42:01 prd-ubuntu20-04-docker-8c-8g-24153 CRON[1381]: pam_unix(cron:session): session opened for user root by (uid=0)
Aug 31 00:42:01 prd-ubuntu20-04-docker-8c-8g-24153 CRON[1381]: pam_unix(cron:session): session closed for user root
Aug 31 00:42:02 prd-ubuntu20-04-docker-8c-8g-24153 sshd[1397]: Invalid user jenkins from 10.30.120.5 port 53078
Aug 31 00:42:02 prd-ubuntu20-04-docker-8c-8g-24153 sshd[1397]: Received disconnect from 10.30.120.5 port 53078:11: Closed due to user request. [preauth]
Aug 31 00:42:02 prd-ubuntu20-04-docker-8c-8g-24153 sshd[1397]: Disconnected from invalid user jenkins 10.30.120.5 port 53078 [preauth]
Aug 31 00:42:03 prd-ubuntu20-04-docker-8c-8g-24153 systemd-logind[787]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard)
Aug 31 00:42:03 prd-ubuntu20-04-docker-8c-8g-24153 systemd-logind[787]: Watching system buttons on /dev/input/event0 (Power Button)
Aug 31 00:42:04 prd-ubuntu20-04-docker-8c-8g-24153 sshd[1601]: Invalid user jenkins from 10.30.120.5 port 53088
Aug 31 00:42:04 prd-ubuntu20-04-docker-8c-8g-24153 sshd[1601]: Received disconnect from 10.30.120.5 port 53088:11: Closed due to user request. [preauth]
Aug 31 00:42:04 prd-ubuntu20-04-docker-8c-8g-24153 sshd[1601]: Disconnected from invalid user jenkins 10.30.120.5 port 53088 [preauth]
Aug 31 00:42:06 prd-ubuntu20-04-docker-8c-8g-24153 sshd[1608]: Invalid user jenkins from 10.30.120.5 port 53098
Aug 31 00:42:06 prd-ubuntu20-04-docker-8c-8g-24153 sshd[1608]: Received disconnect from 10.30.120.5 port 53098:11: Closed due to user request. [preauth]
Aug 31 00:42:06 prd-ubuntu20-04-docker-8c-8g-24153 sshd[1608]: Disconnected from invalid user jenkins 10.30.120.5 port 53098 [preauth]
Aug 31 00:42:08 prd-ubuntu20-04-docker-8c-8g-24153 sshd[1610]: Invalid user jenkins from 10.30.120.5 port 53110
Aug 31 00:42:09 prd-ubuntu20-04-docker-8c-8g-24153 sshd[1610]: Received disconnect from 10.30.120.5 port 53110:11: Closed due to user request. [preauth]
Aug 31 00:42:09 prd-ubuntu20-04-docker-8c-8g-24153 sshd[1610]: Disconnected from invalid user jenkins 10.30.120.5 port 53110 [preauth]
Aug 31 00:42:11 prd-ubuntu20-04-docker-8c-8g-24153 sshd[1905]: Invalid user jenkins from 10.30.120.5 port 53118
Aug 31 00:42:11 prd-ubuntu20-04-docker-8c-8g-24153 sshd[1905]: Received disconnect from 10.30.120.5 port 53118:11: Closed due to user request. [preauth]
Aug 31 00:42:11 prd-ubuntu20-04-docker-8c-8g-24153 sshd[1905]: Disconnected from invalid user jenkins 10.30.120.5 port 53118 [preauth]
Aug 31 00:42:13 prd-ubuntu20-04-docker-8c-8g-24153 sshd[2046]: Invalid user jenkins from 10.30.120.5 port 53124
Aug 31 00:42:13 prd-ubuntu20-04-docker-8c-8g-24153 sshd[2046]: Received disconnect from 10.30.120.5 port 53124:11: Closed due to user request. [preauth]
Aug 31 00:42:13 prd-ubuntu20-04-docker-8c-8g-24153 sshd[2046]: Disconnected from invalid user jenkins 10.30.120.5 port 53124 [preauth]
Aug 31 00:42:15 prd-ubuntu20-04-docker-8c-8g-24153 sshd[2061]: Invalid user jenkins from 10.30.120.5 port 53130
Aug 31 00:42:15 prd-ubuntu20-04-docker-8c-8g-24153 sshd[2061]: Received disconnect from 10.30.120.5 port 53130:11: Closed due to user request. [preauth]
Aug 31 00:42:15 prd-ubuntu20-04-docker-8c-8g-24153 sshd[2061]: Disconnected from invalid user jenkins 10.30.120.5 port 53130 [preauth]
Aug 31 00:42:17 prd-ubuntu20-04-docker-8c-8g-24153 useradd[2135]: new group: name=jenkins, GID=1001
Aug 31 00:42:17 prd-ubuntu20-04-docker-8c-8g-24153 useradd[2135]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash, from=none
Aug 31 00:42:17 prd-ubuntu20-04-docker-8c-8g-24153 usermod[2145]: add 'jenkins' to group 'docker'
Aug 31 00:42:17 prd-ubuntu20-04-docker-8c-8g-24153 usermod[2145]: add 'jenkins' to shadow group 'docker'
Aug 31 00:42:17 prd-ubuntu20-04-docker-8c-8g-24153 sshd[2163]: Received disconnect from 10.30.120.5 port 53138:11: Closed due to user request. [preauth]
Aug 31 00:42:17 prd-ubuntu20-04-docker-8c-8g-24153 sshd[2163]: Disconnected from authenticating user jenkins 10.30.120.5 port 53138 [preauth]
Aug 31 00:42:19 prd-ubuntu20-04-docker-8c-8g-24153 sshd[2389]: Accepted publickey for jenkins from 10.30.120.5 port 53188 ssh2: RSA SHA256:aPmPdMw/h9M56P/o8xjsZcdBWoRKGeie6FPOwnlsRmU
Aug 31 00:42:19 prd-ubuntu20-04-docker-8c-8g-24153 sshd[2389]: pam_unix(sshd:session): session opened for user jenkins by (uid=0)
Aug 31 00:42:19 prd-ubuntu20-04-docker-8c-8g-24153 systemd-logind[787]: New session 2 of user jenkins.
Aug 31 00:42:19 prd-ubuntu20-04-docker-8c-8g-24153 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0)
Aug 31 00:42:40 prd-ubuntu20-04-docker-8c-8g-24153 sudo:  jenkins : TTY=unknown ; PWD=/w/workspace/_app-service-configurable_PR-463 ; USER=root ; COMMAND=/usr/bin/mv /tmp/ssh_known_hosts /etc/ssh/ssh_known_hosts
Aug 31 00:42:40 prd-ubuntu20-04-docker-8c-8g-24153 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Aug 31 00:42:40 prd-ubuntu20-04-docker-8c-8g-24153 sudo: pam_unix(sudo:session): session closed for user root
Aug 31 00:42:40 prd-ubuntu20-04-docker-8c-8g-24153 sudo:  jenkins : TTY=unknown ; PWD=/w/workspace/_app-service-configurable_PR-463 ; USER=root ; COMMAND=/usr/bin/tee -a /etc/ssh/ssh_known_hosts
Aug 31 00:42:40 prd-ubuntu20-04-docker-8c-8g-24153 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Aug 31 00:42:40 prd-ubuntu20-04-docker-8c-8g-24153 sudo: pam_unix(sudo:session): session closed for user root
Aug 31 00:42:54 prd-ubuntu20-04-docker-8c-8g-24153 sudo:  jenkins : TTY=unknown ; PWD=/w/workspace/_app-service-configurable_PR-463 ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins .semver
Aug 31 00:42:54 prd-ubuntu20-04-docker-8c-8g-24153 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Aug 31 00:42:54 prd-ubuntu20-04-docker-8c-8g-24153 sudo: pam_unix(sudo:session): session closed for user root
Aug 31 00:43:01 prd-ubuntu20-04-docker-8c-8g-24153 CRON[4148]: pam_unix(cron:session): session opened for user root by (uid=0)
Aug 31 00:43:01 prd-ubuntu20-04-docker-8c-8g-24153 CRON[4148]: pam_unix(cron:session): session closed for user root
Aug 31 00:44:01 prd-ubuntu20-04-docker-8c-8g-24153 sudo:  jenkins : TTY=unknown ; PWD=/w/workspace/_app-service-configurable_PR-463 ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins .
Aug 31 00:44:01 prd-ubuntu20-04-docker-8c-8g-24153 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Aug 31 00:44:01 prd-ubuntu20-04-docker-8c-8g-24153 sudo: pam_unix(sudo:session): session closed for user root
Aug 31 00:44:01 prd-ubuntu20-04-docker-8c-8g-24153 CRON[12422]: pam_unix(cron:session): session opened for user root by (uid=0)
Aug 31 00:44:01 prd-ubuntu20-04-docker-8c-8g-24153 CRON[12422]: pam_unix(cron:session): session closed for user root
Aug 31 00:44:02 prd-ubuntu20-04-docker-8c-8g-24153 sudo:  jenkins : TTY=unknown ; PWD=/w/workspace/_app-service-configurable_PR-463 ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins .
Aug 31 00:44:02 prd-ubuntu20-04-docker-8c-8g-24153 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Aug 31 00:44:02 prd-ubuntu20-04-docker-8c-8g-24153 sudo: pam_unix(sudo:session): session closed for user root
Aug 31 00:45:01 prd-ubuntu20-04-docker-8c-8g-24153 CRON[17477]: pam_unix(cron:session): session opened for user root by (uid=0)
Aug 31 00:45:01 prd-ubuntu20-04-docker-8c-8g-24153 CRON[17477]: pam_unix(cron:session): session closed for user root
Aug 31 00:46:01 prd-ubuntu20-04-docker-8c-8g-24153 CRON[17484]: pam_unix(cron:session): session opened for user root by (uid=0)
Aug 31 00:46:01 prd-ubuntu20-04-docker-8c-8g-24153 CRON[17484]: pam_unix(cron:session): session closed for user root
Aug 31 00:47:01 prd-ubuntu20-04-docker-8c-8g-24153 CRON[17490]: pam_unix(cron:session): session opened for user root by (uid=0)
Aug 31 00:47:01 prd-ubuntu20-04-docker-8c-8g-24153 CRON[17490]: pam_unix(cron:session): session closed for user root
Aug 31 00:48:01 prd-ubuntu20-04-docker-8c-8g-24153 CRON[17495]: pam_unix(cron:session): session opened for user root by (uid=0)
Aug 31 00:48:02 prd-ubuntu20-04-docker-8c-8g-24153 CRON[17495]: pam_unix(cron:session): session closed for user root
Aug 31 00:49:02 prd-ubuntu20-04-docker-8c-8g-24153 CRON[17499]: pam_unix(cron:session): session opened for user root by (uid=0)
Aug 31 00:49:02 prd-ubuntu20-04-docker-8c-8g-24153 CRON[17499]: pam_unix(cron:session): session closed for user root
Aug 31 00:50:01 prd-ubuntu20-04-docker-8c-8g-24153 CRON[17503]: pam_unix(cron:session): session opened for user root by (uid=0)
Aug 31 00:50:01 prd-ubuntu20-04-docker-8c-8g-24153 CRON[17503]: pam_unix(cron:session): session closed for user root
Aug 31 00:51:01 prd-ubuntu20-04-docker-8c-8g-24153 CRON[17507]: pam_unix(cron:session): session opened for user root by (uid=0)
Aug 31 00:51:01 prd-ubuntu20-04-docker-8c-8g-24153 CRON[17507]: pam_unix(cron:session): session closed for user root
Aug 31 00:52:01 prd-ubuntu20-04-docker-8c-8g-24153 CRON[17512]: pam_unix(cron:session): session opened for user root by (uid=0)
Aug 31 00:52:01 prd-ubuntu20-04-docker-8c-8g-24153 CRON[17512]: pam_unix(cron:session): session closed for user root
Aug 31 00:53:01 prd-ubuntu20-04-docker-8c-8g-24153 CRON[17524]: pam_unix(cron:session): session opened for user root by (uid=0)
Aug 31 00:53:01 prd-ubuntu20-04-docker-8c-8g-24153 CRON[17524]: pam_unix(cron:session): session closed for user root
Aug 31 00:53:40 prd-ubuntu20-04-docker-8c-8g-24153 sudo:  jenkins : TTY=unknown ; PWD=/w/workspace/_app-service-configurable_PR-463 ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins /w/workspace/_app-service-configurable_PR-463/archives
Aug 31 00:53:40 prd-ubuntu20-04-docker-8c-8g-24153 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Aug 31 00:53:40 prd-ubuntu20-04-docker-8c-8g-24153 sudo: pam_unix(sudo:session): session closed for user root