Nov 1 12:14:03 prd-ubuntu20-04-docker-8c-8g-24328 passwd[753]: password for 'ubuntu' changed by 'root' Nov 1 12:14:03 prd-ubuntu20-04-docker-8c-8g-24328 sshd[832]: Server listening on 0.0.0.0 port 22. Nov 1 12:14:03 prd-ubuntu20-04-docker-8c-8g-24328 sshd[832]: Server listening on :: port 22. Nov 1 12:14:03 prd-ubuntu20-04-docker-8c-8g-24328 systemd-logind[806]: New seat seat0. Nov 1 12:14:03 prd-ubuntu20-04-docker-8c-8g-24328 systemd-logind[806]: Watching system buttons on /dev/input/event0 (Power Button) Nov 1 12:14:03 prd-ubuntu20-04-docker-8c-8g-24328 systemd-logind[806]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Nov 1 12:14:05 prd-ubuntu20-04-docker-8c-8g-24328 sshd[1026]: error: kex_exchange_identification: Connection closed by remote host Nov 1 12:14:13 prd-ubuntu20-04-docker-8c-8g-24328 sshd[1035]: Invalid user jenkins from 10.30.120.5 port 34844 Nov 1 12:14:13 prd-ubuntu20-04-docker-8c-8g-24328 sshd[1035]: Received disconnect from 10.30.120.5 port 34844:11: Closed due to user request. [preauth] Nov 1 12:14:13 prd-ubuntu20-04-docker-8c-8g-24328 sshd[1035]: Disconnected from invalid user jenkins 10.30.120.5 port 34844 [preauth] Nov 1 12:14:15 prd-ubuntu20-04-docker-8c-8g-24328 sshd[1038]: Invalid user jenkins from 10.30.120.5 port 34846 Nov 1 12:14:15 prd-ubuntu20-04-docker-8c-8g-24328 sshd[1038]: Received disconnect from 10.30.120.5 port 34846:11: Closed due to user request. [preauth] Nov 1 12:14:15 prd-ubuntu20-04-docker-8c-8g-24328 sshd[1038]: Disconnected from invalid user jenkins 10.30.120.5 port 34846 [preauth] Nov 1 12:14:17 prd-ubuntu20-04-docker-8c-8g-24328 sshd[1040]: Invalid user jenkins from 10.30.120.5 port 34848 Nov 1 12:14:17 prd-ubuntu20-04-docker-8c-8g-24328 sshd[1040]: Received disconnect from 10.30.120.5 port 34848:11: Closed due to user request. [preauth] Nov 1 12:14:17 prd-ubuntu20-04-docker-8c-8g-24328 sshd[1040]: Disconnected from invalid user jenkins 10.30.120.5 port 34848 [preauth] Nov 1 12:14:19 prd-ubuntu20-04-docker-8c-8g-24328 sshd[1042]: Invalid user jenkins from 10.30.120.5 port 34852 Nov 1 12:14:19 prd-ubuntu20-04-docker-8c-8g-24328 sshd[1042]: Received disconnect from 10.30.120.5 port 34852:11: Closed due to user request. [preauth] Nov 1 12:14:19 prd-ubuntu20-04-docker-8c-8g-24328 sshd[1042]: Disconnected from invalid user jenkins 10.30.120.5 port 34852 [preauth] Nov 1 12:14:23 prd-ubuntu20-04-docker-8c-8g-24328 sshd[1219]: Invalid user jenkins from 10.30.120.5 port 34854 Nov 1 12:14:23 prd-ubuntu20-04-docker-8c-8g-24328 sshd[1219]: Received disconnect from 10.30.120.5 port 34854:11: Closed due to user request. [preauth] Nov 1 12:14:23 prd-ubuntu20-04-docker-8c-8g-24328 sshd[1219]: Disconnected from invalid user jenkins 10.30.120.5 port 34854 [preauth] Nov 1 12:14:25 prd-ubuntu20-04-docker-8c-8g-24328 sshd[1260]: Invalid user jenkins from 10.30.120.5 port 34858 Nov 1 12:14:25 prd-ubuntu20-04-docker-8c-8g-24328 sshd[1260]: Received disconnect from 10.30.120.5 port 34858:11: Closed due to user request. [preauth] Nov 1 12:14:25 prd-ubuntu20-04-docker-8c-8g-24328 sshd[1260]: Disconnected from invalid user jenkins 10.30.120.5 port 34858 [preauth] Nov 1 12:14:28 prd-ubuntu20-04-docker-8c-8g-24328 sshd[1270]: Invalid user jenkins from 10.30.120.5 port 34860 Nov 1 12:14:28 prd-ubuntu20-04-docker-8c-8g-24328 sshd[1270]: Received disconnect from 10.30.120.5 port 34860:11: Closed due to user request. [preauth] Nov 1 12:14:28 prd-ubuntu20-04-docker-8c-8g-24328 sshd[1270]: Disconnected from invalid user jenkins 10.30.120.5 port 34860 [preauth] Nov 1 12:14:28 prd-ubuntu20-04-docker-8c-8g-24328 useradd[1292]: new group: name=jenkins, GID=1001 Nov 1 12:14:28 prd-ubuntu20-04-docker-8c-8g-24328 useradd[1292]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash, from=none Nov 1 12:14:28 prd-ubuntu20-04-docker-8c-8g-24328 usermod[1302]: add 'jenkins' to group 'docker' Nov 1 12:14:28 prd-ubuntu20-04-docker-8c-8g-24328 usermod[1302]: add 'jenkins' to shadow group 'docker' Nov 1 12:14:30 prd-ubuntu20-04-docker-8c-8g-24328 sshd[1339]: Accepted publickey for jenkins from 10.30.120.5 port 34862 ssh2: RSA SHA256:aPmPdMw/h9M56P/o8xjsZcdBWoRKGeie6FPOwnlsRmU Nov 1 12:14:30 prd-ubuntu20-04-docker-8c-8g-24328 sshd[1339]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Nov 1 12:14:30 prd-ubuntu20-04-docker-8c-8g-24328 systemd-logind[806]: New session 1 of user jenkins. Nov 1 12:14:30 prd-ubuntu20-04-docker-8c-8g-24328 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Nov 1 12:14:52 prd-ubuntu20-04-docker-8c-8g-24328 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/_app-service-configurable_PR-686 ; USER=root ; COMMAND=/usr/bin/mv /tmp/ssh_known_hosts /etc/ssh/ssh_known_hosts Nov 1 12:14:52 prd-ubuntu20-04-docker-8c-8g-24328 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Nov 1 12:14:52 prd-ubuntu20-04-docker-8c-8g-24328 sudo: pam_unix(sudo:session): session closed for user root Nov 1 12:14:52 prd-ubuntu20-04-docker-8c-8g-24328 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/_app-service-configurable_PR-686 ; USER=root ; COMMAND=/usr/bin/tee -a /etc/ssh/ssh_known_hosts Nov 1 12:14:52 prd-ubuntu20-04-docker-8c-8g-24328 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Nov 1 12:14:52 prd-ubuntu20-04-docker-8c-8g-24328 sudo: pam_unix(sudo:session): session closed for user root Nov 1 12:15:03 prd-ubuntu20-04-docker-8c-8g-24328 CRON[2632]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 1 12:15:03 prd-ubuntu20-04-docker-8c-8g-24328 CRON[2632]: pam_unix(cron:session): session closed for user root Nov 1 12:15:06 prd-ubuntu20-04-docker-8c-8g-24328 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/_app-service-configurable_PR-686 ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins .semver Nov 1 12:15:06 prd-ubuntu20-04-docker-8c-8g-24328 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Nov 1 12:15:06 prd-ubuntu20-04-docker-8c-8g-24328 sudo: pam_unix(sudo:session): session closed for user root Nov 1 12:16:01 prd-ubuntu20-04-docker-8c-8g-24328 CRON[3536]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 1 12:16:01 prd-ubuntu20-04-docker-8c-8g-24328 CRON[3536]: pam_unix(cron:session): session closed for user root Nov 1 12:17:01 prd-ubuntu20-04-docker-8c-8g-24328 CRON[17357]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 1 12:17:01 prd-ubuntu20-04-docker-8c-8g-24328 CRON[17358]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 1 12:17:01 prd-ubuntu20-04-docker-8c-8g-24328 CRON[17358]: pam_unix(cron:session): session closed for user root Nov 1 12:17:01 prd-ubuntu20-04-docker-8c-8g-24328 CRON[17357]: pam_unix(cron:session): session closed for user root Nov 1 12:17:33 prd-ubuntu20-04-docker-8c-8g-24328 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/_app-service-configurable_PR-686 ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins . Nov 1 12:17:33 prd-ubuntu20-04-docker-8c-8g-24328 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Nov 1 12:17:33 prd-ubuntu20-04-docker-8c-8g-24328 sudo: pam_unix(sudo:session): session closed for user root Nov 1 12:17:34 prd-ubuntu20-04-docker-8c-8g-24328 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/_app-service-configurable_PR-686 ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins . Nov 1 12:17:34 prd-ubuntu20-04-docker-8c-8g-24328 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Nov 1 12:17:34 prd-ubuntu20-04-docker-8c-8g-24328 sudo: pam_unix(sudo:session): session closed for user root Nov 1 12:18:01 prd-ubuntu20-04-docker-8c-8g-24328 CRON[28027]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 1 12:18:01 prd-ubuntu20-04-docker-8c-8g-24328 CRON[28027]: pam_unix(cron:session): session closed for user root Nov 1 12:19:01 prd-ubuntu20-04-docker-8c-8g-24328 CRON[29054]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 1 12:19:01 prd-ubuntu20-04-docker-8c-8g-24328 CRON[29054]: pam_unix(cron:session): session closed for user root Nov 1 12:19:13 prd-ubuntu20-04-docker-8c-8g-24328 systemd-logind[806]: Watching system buttons on /dev/input/event0 (Power Button) Nov 1 12:19:13 prd-ubuntu20-04-docker-8c-8g-24328 systemd-logind[806]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Nov 1 12:20:01 prd-ubuntu20-04-docker-8c-8g-24328 CRON[30173]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 1 12:20:01 prd-ubuntu20-04-docker-8c-8g-24328 CRON[30173]: pam_unix(cron:session): session closed for user root Nov 1 12:21:01 prd-ubuntu20-04-docker-8c-8g-24328 CRON[30244]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 1 12:21:01 prd-ubuntu20-04-docker-8c-8g-24328 CRON[30244]: pam_unix(cron:session): session closed for user root Nov 1 12:22:01 prd-ubuntu20-04-docker-8c-8g-24328 CRON[30247]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 1 12:22:01 prd-ubuntu20-04-docker-8c-8g-24328 CRON[30247]: pam_unix(cron:session): session closed for user root Nov 1 12:23:01 prd-ubuntu20-04-docker-8c-8g-24328 CRON[30251]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 1 12:23:01 prd-ubuntu20-04-docker-8c-8g-24328 CRON[30251]: pam_unix(cron:session): session closed for user root Nov 1 12:24:01 prd-ubuntu20-04-docker-8c-8g-24328 CRON[30254]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 1 12:24:01 prd-ubuntu20-04-docker-8c-8g-24328 CRON[30254]: pam_unix(cron:session): session closed for user root Nov 1 12:25:01 prd-ubuntu20-04-docker-8c-8g-24328 CRON[30262]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 1 12:25:01 prd-ubuntu20-04-docker-8c-8g-24328 CRON[30262]: pam_unix(cron:session): session closed for user root Nov 1 12:26:01 prd-ubuntu20-04-docker-8c-8g-24328 CRON[30265]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 1 12:26:01 prd-ubuntu20-04-docker-8c-8g-24328 CRON[30265]: pam_unix(cron:session): session closed for user root Nov 1 12:27:01 prd-ubuntu20-04-docker-8c-8g-24328 CRON[30269]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 1 12:27:01 prd-ubuntu20-04-docker-8c-8g-24328 CRON[30269]: pam_unix(cron:session): session closed for user root Nov 1 12:28:01 prd-ubuntu20-04-docker-8c-8g-24328 CRON[30272]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 1 12:28:01 prd-ubuntu20-04-docker-8c-8g-24328 CRON[30272]: pam_unix(cron:session): session closed for user root Nov 1 12:29:01 prd-ubuntu20-04-docker-8c-8g-24328 CRON[30276]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 1 12:29:01 prd-ubuntu20-04-docker-8c-8g-24328 CRON[30276]: pam_unix(cron:session): session closed for user root Nov 1 12:30:01 prd-ubuntu20-04-docker-8c-8g-24328 CRON[30300]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 1 12:30:01 prd-ubuntu20-04-docker-8c-8g-24328 CRON[30300]: pam_unix(cron:session): session closed for user root Nov 1 12:31:01 prd-ubuntu20-04-docker-8c-8g-24328 CRON[30304]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 1 12:31:01 prd-ubuntu20-04-docker-8c-8g-24328 CRON[30304]: pam_unix(cron:session): session closed for user root Nov 1 12:32:01 prd-ubuntu20-04-docker-8c-8g-24328 CRON[30307]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 1 12:32:01 prd-ubuntu20-04-docker-8c-8g-24328 CRON[30307]: pam_unix(cron:session): session closed for user root Nov 1 12:33:01 prd-ubuntu20-04-docker-8c-8g-24328 CRON[30312]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 1 12:33:01 prd-ubuntu20-04-docker-8c-8g-24328 CRON[30312]: pam_unix(cron:session): session closed for user root Nov 1 12:33:56 prd-ubuntu20-04-docker-8c-8g-24328 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/_app-service-configurable_PR-686 ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins /w/workspace/_app-service-configurable_PR-686/archives Nov 1 12:33:56 prd-ubuntu20-04-docker-8c-8g-24328 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Nov 1 12:33:56 prd-ubuntu20-04-docker-8c-8g-24328 sudo: pam_unix(sudo:session): session closed for user root