Apr 16 23:09:20 prd-ubuntu20-04-docker-8c-8g-7 passwd[786]: password for 'ubuntu' changed by 'root' Apr 16 23:09:20 prd-ubuntu20-04-docker-8c-8g-7 sshd[874]: Server listening on 0.0.0.0 port 22. Apr 16 23:09:20 prd-ubuntu20-04-docker-8c-8g-7 sshd[874]: Server listening on :: port 22. Apr 16 23:09:37 prd-ubuntu20-04-docker-8c-8g-7 sshd[878]: error: kex_exchange_identification: Connection closed by remote host Apr 16 23:09:37 prd-ubuntu20-04-docker-8c-8g-7 sshd[888]: Invalid user jenkins from 10.30.120.5 port 34048 Apr 16 23:09:37 prd-ubuntu20-04-docker-8c-8g-7 systemd-logind[853]: New seat seat0. Apr 16 23:09:37 prd-ubuntu20-04-docker-8c-8g-7 systemd-logind[853]: Watching system buttons on /dev/input/event0 (Power Button) Apr 16 23:09:37 prd-ubuntu20-04-docker-8c-8g-7 systemd-logind[853]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Apr 16 23:09:37 prd-ubuntu20-04-docker-8c-8g-7 sshd[888]: Received disconnect from 10.30.120.5 port 34048:11: Closed due to user request. [preauth] Apr 16 23:09:37 prd-ubuntu20-04-docker-8c-8g-7 sshd[888]: Disconnected from invalid user jenkins 10.30.120.5 port 34048 [preauth] Apr 16 23:09:40 prd-ubuntu20-04-docker-8c-8g-7 sshd[1089]: Invalid user jenkins from 10.30.120.5 port 34060 Apr 16 23:09:40 prd-ubuntu20-04-docker-8c-8g-7 sshd[1089]: Received disconnect from 10.30.120.5 port 34060:11: Closed due to user request. [preauth] Apr 16 23:09:40 prd-ubuntu20-04-docker-8c-8g-7 sshd[1089]: Disconnected from invalid user jenkins 10.30.120.5 port 34060 [preauth] Apr 16 23:09:42 prd-ubuntu20-04-docker-8c-8g-7 sshd[1109]: Invalid user jenkins from 10.30.120.5 port 34064 Apr 16 23:09:42 prd-ubuntu20-04-docker-8c-8g-7 sshd[1109]: Received disconnect from 10.30.120.5 port 34064:11: Closed due to user request. [preauth] Apr 16 23:09:42 prd-ubuntu20-04-docker-8c-8g-7 sshd[1109]: Disconnected from invalid user jenkins 10.30.120.5 port 34064 [preauth] Apr 16 23:09:44 prd-ubuntu20-04-docker-8c-8g-7 sshd[1111]: Invalid user jenkins from 10.30.120.5 port 34068 Apr 16 23:09:44 prd-ubuntu20-04-docker-8c-8g-7 sshd[1111]: Received disconnect from 10.30.120.5 port 34068:11: Closed due to user request. [preauth] Apr 16 23:09:44 prd-ubuntu20-04-docker-8c-8g-7 sshd[1111]: Disconnected from invalid user jenkins 10.30.120.5 port 34068 [preauth] Apr 16 23:09:46 prd-ubuntu20-04-docker-8c-8g-7 sshd[1113]: Invalid user jenkins from 10.30.120.5 port 34070 Apr 16 23:09:46 prd-ubuntu20-04-docker-8c-8g-7 sshd[1113]: Received disconnect from 10.30.120.5 port 34070:11: Closed due to user request. [preauth] Apr 16 23:09:46 prd-ubuntu20-04-docker-8c-8g-7 sshd[1113]: Disconnected from invalid user jenkins 10.30.120.5 port 34070 [preauth] Apr 16 23:09:48 prd-ubuntu20-04-docker-8c-8g-7 sshd[1115]: Invalid user jenkins from 10.30.120.5 port 34072 Apr 16 23:09:48 prd-ubuntu20-04-docker-8c-8g-7 sshd[1115]: Received disconnect from 10.30.120.5 port 34072:11: Closed due to user request. [preauth] Apr 16 23:09:48 prd-ubuntu20-04-docker-8c-8g-7 sshd[1115]: Disconnected from invalid user jenkins 10.30.120.5 port 34072 [preauth] Apr 16 23:09:51 prd-ubuntu20-04-docker-8c-8g-7 sshd[1118]: Invalid user jenkins from 10.30.120.5 port 34074 Apr 16 23:09:51 prd-ubuntu20-04-docker-8c-8g-7 sshd[1118]: Received disconnect from 10.30.120.5 port 34074:11: Closed due to user request. [preauth] Apr 16 23:09:51 prd-ubuntu20-04-docker-8c-8g-7 sshd[1118]: Disconnected from invalid user jenkins 10.30.120.5 port 34074 [preauth] Apr 16 23:09:53 prd-ubuntu20-04-docker-8c-8g-7 sshd[1120]: Invalid user jenkins from 10.30.120.5 port 34082 Apr 16 23:09:53 prd-ubuntu20-04-docker-8c-8g-7 sshd[1120]: Received disconnect from 10.30.120.5 port 34082:11: Closed due to user request. [preauth] Apr 16 23:09:53 prd-ubuntu20-04-docker-8c-8g-7 sshd[1120]: Disconnected from invalid user jenkins 10.30.120.5 port 34082 [preauth] Apr 16 23:09:55 prd-ubuntu20-04-docker-8c-8g-7 sshd[1122]: Invalid user jenkins from 10.30.120.5 port 34086 Apr 16 23:09:55 prd-ubuntu20-04-docker-8c-8g-7 sshd[1122]: Received disconnect from 10.30.120.5 port 34086:11: Closed due to user request. [preauth] Apr 16 23:09:55 prd-ubuntu20-04-docker-8c-8g-7 sshd[1122]: Disconnected from invalid user jenkins 10.30.120.5 port 34086 [preauth] Apr 16 23:09:57 prd-ubuntu20-04-docker-8c-8g-7 sshd[1257]: Invalid user jenkins from 10.30.120.5 port 34092 Apr 16 23:09:58 prd-ubuntu20-04-docker-8c-8g-7 sshd[1257]: Received disconnect from 10.30.120.5 port 34092:11: Closed due to user request. [preauth] Apr 16 23:09:58 prd-ubuntu20-04-docker-8c-8g-7 sshd[1257]: Disconnected from invalid user jenkins 10.30.120.5 port 34092 [preauth] Apr 16 23:10:00 prd-ubuntu20-04-docker-8c-8g-7 sshd[1329]: Invalid user jenkins from 10.30.120.5 port 34094 Apr 16 23:10:00 prd-ubuntu20-04-docker-8c-8g-7 sshd[1329]: Received disconnect from 10.30.120.5 port 34094:11: Closed due to user request. [preauth] Apr 16 23:10:00 prd-ubuntu20-04-docker-8c-8g-7 sshd[1329]: Disconnected from invalid user jenkins 10.30.120.5 port 34094 [preauth] Apr 16 23:10:02 prd-ubuntu20-04-docker-8c-8g-7 sshd[1333]: Invalid user jenkins from 10.30.120.5 port 34100 Apr 16 23:10:02 prd-ubuntu20-04-docker-8c-8g-7 sshd[1333]: Received disconnect from 10.30.120.5 port 34100:11: Closed due to user request. [preauth] Apr 16 23:10:02 prd-ubuntu20-04-docker-8c-8g-7 sshd[1333]: Disconnected from invalid user jenkins 10.30.120.5 port 34100 [preauth] Apr 16 23:10:02 prd-ubuntu20-04-docker-8c-8g-7 CRON[1335]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 16 23:10:02 prd-ubuntu20-04-docker-8c-8g-7 CRON[1335]: pam_unix(cron:session): session closed for user root Apr 16 23:10:04 prd-ubuntu20-04-docker-8c-8g-7 sshd[1344]: Invalid user jenkins from 10.30.120.5 port 34104 Apr 16 23:10:04 prd-ubuntu20-04-docker-8c-8g-7 sshd[1344]: Received disconnect from 10.30.120.5 port 34104:11: Closed due to user request. [preauth] Apr 16 23:10:04 prd-ubuntu20-04-docker-8c-8g-7 sshd[1344]: Disconnected from invalid user jenkins 10.30.120.5 port 34104 [preauth] Apr 16 23:10:06 prd-ubuntu20-04-docker-8c-8g-7 sshd[1346]: Invalid user jenkins from 10.30.120.5 port 34108 Apr 16 23:10:06 prd-ubuntu20-04-docker-8c-8g-7 sshd[1346]: Received disconnect from 10.30.120.5 port 34108:11: Closed due to user request. [preauth] Apr 16 23:10:06 prd-ubuntu20-04-docker-8c-8g-7 sshd[1346]: Disconnected from invalid user jenkins 10.30.120.5 port 34108 [preauth] Apr 16 23:10:08 prd-ubuntu20-04-docker-8c-8g-7 sshd[1348]: Invalid user jenkins from 10.30.120.5 port 34116 Apr 16 23:10:08 prd-ubuntu20-04-docker-8c-8g-7 sshd[1348]: Received disconnect from 10.30.120.5 port 34116:11: Closed due to user request. [preauth] Apr 16 23:10:08 prd-ubuntu20-04-docker-8c-8g-7 sshd[1348]: Disconnected from invalid user jenkins 10.30.120.5 port 34116 [preauth] Apr 16 23:10:09 prd-ubuntu20-04-docker-8c-8g-7 useradd[1384]: new group: name=jenkins, GID=1001 Apr 16 23:10:09 prd-ubuntu20-04-docker-8c-8g-7 useradd[1384]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash, from=none Apr 16 23:10:09 prd-ubuntu20-04-docker-8c-8g-7 usermod[1394]: add 'jenkins' to group 'docker' Apr 16 23:10:09 prd-ubuntu20-04-docker-8c-8g-7 usermod[1394]: add 'jenkins' to shadow group 'docker' Apr 16 23:10:10 prd-ubuntu20-04-docker-8c-8g-7 sshd[1431]: Accepted publickey for jenkins from 10.30.120.5 port 34120 ssh2: RSA SHA256:aPmPdMw/h9M56P/o8xjsZcdBWoRKGeie6FPOwnlsRmU Apr 16 23:10:10 prd-ubuntu20-04-docker-8c-8g-7 sshd[1431]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Apr 16 23:10:10 prd-ubuntu20-04-docker-8c-8g-7 systemd-logind[853]: New session 2 of user jenkins. Apr 16 23:10:10 prd-ubuntu20-04-docker-8c-8g-7 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Apr 16 23:10:34 prd-ubuntu20-04-docker-8c-8g-7 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/_app-service-configurable_PR-725 ; USER=root ; COMMAND=/usr/bin/mv /tmp/ssh_known_hosts /etc/ssh/ssh_known_hosts Apr 16 23:10:34 prd-ubuntu20-04-docker-8c-8g-7 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Apr 16 23:10:34 prd-ubuntu20-04-docker-8c-8g-7 sudo: pam_unix(sudo:session): session closed for user root Apr 16 23:10:34 prd-ubuntu20-04-docker-8c-8g-7 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/_app-service-configurable_PR-725 ; USER=root ; COMMAND=/usr/bin/tee -a /etc/ssh/ssh_known_hosts Apr 16 23:10:34 prd-ubuntu20-04-docker-8c-8g-7 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Apr 16 23:10:34 prd-ubuntu20-04-docker-8c-8g-7 sudo: pam_unix(sudo:session): session closed for user root Apr 16 23:10:49 prd-ubuntu20-04-docker-8c-8g-7 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/_app-service-configurable_PR-725 ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins .semver Apr 16 23:10:49 prd-ubuntu20-04-docker-8c-8g-7 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Apr 16 23:10:49 prd-ubuntu20-04-docker-8c-8g-7 sudo: pam_unix(sudo:session): session closed for user root Apr 16 23:11:01 prd-ubuntu20-04-docker-8c-8g-7 CRON[3241]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 16 23:11:01 prd-ubuntu20-04-docker-8c-8g-7 CRON[3241]: pam_unix(cron:session): session closed for user root Apr 16 23:12:01 prd-ubuntu20-04-docker-8c-8g-7 CRON[4366]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 16 23:12:01 prd-ubuntu20-04-docker-8c-8g-7 CRON[4366]: pam_unix(cron:session): session closed for user root Apr 16 23:12:18 prd-ubuntu20-04-docker-8c-8g-7 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/_app-service-configurable_PR-725 ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins /w/workspace/_app-service-configurable_PR-725/archives Apr 16 23:12:18 prd-ubuntu20-04-docker-8c-8g-7 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Apr 16 23:12:18 prd-ubuntu20-04-docker-8c-8g-7 sudo: pam_unix(sudo:session): session closed for user root