Sep 7 16:15:00 prd-ubuntu20-04-docker-8c-8g-28635 passwd[744]: password for 'ubuntu' changed by 'root' Sep 7 16:15:00 prd-ubuntu20-04-docker-8c-8g-28635 systemd-logind[799]: Watching system buttons on /dev/input/event0 (Power Button) Sep 7 16:15:00 prd-ubuntu20-04-docker-8c-8g-28635 systemd-logind[799]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Sep 7 16:15:00 prd-ubuntu20-04-docker-8c-8g-28635 systemd-logind[799]: New seat seat0. Sep 7 16:15:00 prd-ubuntu20-04-docker-8c-8g-28635 sshd[824]: Server listening on 0.0.0.0 port 22. Sep 7 16:15:00 prd-ubuntu20-04-docker-8c-8g-28635 sshd[824]: Server listening on :: port 22. Sep 7 16:15:01 prd-ubuntu20-04-docker-8c-8g-28635 sshd[911]: error: kex_exchange_identification: Connection closed by remote host Sep 7 16:15:09 prd-ubuntu20-04-docker-8c-8g-28635 sshd[1230]: Invalid user jenkins from 10.30.120.5 port 33798 Sep 7 16:15:09 prd-ubuntu20-04-docker-8c-8g-28635 sshd[1230]: Received disconnect from 10.30.120.5 port 33798:11: Closed due to user request. [preauth] Sep 7 16:15:09 prd-ubuntu20-04-docker-8c-8g-28635 sshd[1230]: Disconnected from invalid user jenkins 10.30.120.5 port 33798 [preauth] Sep 7 16:15:10 prd-ubuntu20-04-docker-8c-8g-28635 systemd-logind[799]: Watching system buttons on /dev/input/event0 (Power Button) Sep 7 16:15:10 prd-ubuntu20-04-docker-8c-8g-28635 systemd-logind[799]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Sep 7 16:15:11 prd-ubuntu20-04-docker-8c-8g-28635 sshd[1438]: Invalid user jenkins from 10.30.120.5 port 33800 Sep 7 16:15:11 prd-ubuntu20-04-docker-8c-8g-28635 sshd[1438]: Received disconnect from 10.30.120.5 port 33800:11: Closed due to user request. [preauth] Sep 7 16:15:11 prd-ubuntu20-04-docker-8c-8g-28635 sshd[1438]: Disconnected from invalid user jenkins 10.30.120.5 port 33800 [preauth] Sep 7 16:15:13 prd-ubuntu20-04-docker-8c-8g-28635 sshd[1598]: Invalid user jenkins from 10.30.120.5 port 33802 Sep 7 16:15:14 prd-ubuntu20-04-docker-8c-8g-28635 sshd[1598]: Received disconnect from 10.30.120.5 port 33802:11: Closed due to user request. [preauth] Sep 7 16:15:14 prd-ubuntu20-04-docker-8c-8g-28635 sshd[1598]: Disconnected from invalid user jenkins 10.30.120.5 port 33802 [preauth] Sep 7 16:15:16 prd-ubuntu20-04-docker-8c-8g-28635 sshd[1600]: Invalid user jenkins from 10.30.120.5 port 33804 Sep 7 16:15:16 prd-ubuntu20-04-docker-8c-8g-28635 sshd[1600]: Received disconnect from 10.30.120.5 port 33804:11: Closed due to user request. [preauth] Sep 7 16:15:16 prd-ubuntu20-04-docker-8c-8g-28635 sshd[1600]: Disconnected from invalid user jenkins 10.30.120.5 port 33804 [preauth] Sep 7 16:15:18 prd-ubuntu20-04-docker-8c-8g-28635 sshd[1603]: Invalid user jenkins from 10.30.120.5 port 33806 Sep 7 16:15:18 prd-ubuntu20-04-docker-8c-8g-28635 sshd[1603]: Received disconnect from 10.30.120.5 port 33806:11: Closed due to user request. [preauth] Sep 7 16:15:18 prd-ubuntu20-04-docker-8c-8g-28635 sshd[1603]: Disconnected from invalid user jenkins 10.30.120.5 port 33806 [preauth] Sep 7 16:15:21 prd-ubuntu20-04-docker-8c-8g-28635 sshd[1917]: Invalid user jenkins from 10.30.120.5 port 33808 Sep 7 16:15:21 prd-ubuntu20-04-docker-8c-8g-28635 sshd[1917]: Received disconnect from 10.30.120.5 port 33808:11: Closed due to user request. [preauth] Sep 7 16:15:21 prd-ubuntu20-04-docker-8c-8g-28635 sshd[1917]: Disconnected from invalid user jenkins 10.30.120.5 port 33808 [preauth] Sep 7 16:15:23 prd-ubuntu20-04-docker-8c-8g-28635 sshd[2107]: Invalid user jenkins from 10.30.120.5 port 33810 Sep 7 16:15:23 prd-ubuntu20-04-docker-8c-8g-28635 sshd[2107]: Received disconnect from 10.30.120.5 port 33810:11: Closed due to user request. [preauth] Sep 7 16:15:23 prd-ubuntu20-04-docker-8c-8g-28635 sshd[2107]: Disconnected from invalid user jenkins 10.30.120.5 port 33810 [preauth] Sep 7 16:15:25 prd-ubuntu20-04-docker-8c-8g-28635 sshd[2154]: Invalid user jenkins from 10.30.120.5 port 33814 Sep 7 16:15:25 prd-ubuntu20-04-docker-8c-8g-28635 sshd[2154]: Received disconnect from 10.30.120.5 port 33814:11: Closed due to user request. [preauth] Sep 7 16:15:25 prd-ubuntu20-04-docker-8c-8g-28635 sshd[2154]: Disconnected from invalid user jenkins 10.30.120.5 port 33814 [preauth] Sep 7 16:15:27 prd-ubuntu20-04-docker-8c-8g-28635 sshd[2156]: Invalid user jenkins from 10.30.120.5 port 33816 Sep 7 16:15:27 prd-ubuntu20-04-docker-8c-8g-28635 sshd[2156]: Received disconnect from 10.30.120.5 port 33816:11: Closed due to user request. [preauth] Sep 7 16:15:27 prd-ubuntu20-04-docker-8c-8g-28635 sshd[2156]: Disconnected from invalid user jenkins 10.30.120.5 port 33816 [preauth] Sep 7 16:15:29 prd-ubuntu20-04-docker-8c-8g-28635 useradd[2335]: new group: name=jenkins, GID=1001 Sep 7 16:15:29 prd-ubuntu20-04-docker-8c-8g-28635 useradd[2335]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash, from=none Sep 7 16:15:29 prd-ubuntu20-04-docker-8c-8g-28635 usermod[2345]: add 'jenkins' to group 'docker' Sep 7 16:15:29 prd-ubuntu20-04-docker-8c-8g-28635 usermod[2345]: add 'jenkins' to shadow group 'docker' Sep 7 16:15:30 prd-ubuntu20-04-docker-8c-8g-28635 sshd[2358]: Accepted publickey for jenkins from 10.30.120.5 port 33818 ssh2: RSA SHA256:aPmPdMw/h9M56P/o8xjsZcdBWoRKGeie6FPOwnlsRmU Sep 7 16:15:30 prd-ubuntu20-04-docker-8c-8g-28635 sshd[2358]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Sep 7 16:15:30 prd-ubuntu20-04-docker-8c-8g-28635 systemd-logind[799]: New session 1 of user jenkins. Sep 7 16:15:30 prd-ubuntu20-04-docker-8c-8g-28635 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Sep 7 16:15:49 prd-ubuntu20-04-docker-8c-8g-28635 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/ry_app-service-configurable_main ; USER=root ; COMMAND=/usr/bin/mv /tmp/ssh_known_hosts /etc/ssh/ssh_known_hosts Sep 7 16:15:49 prd-ubuntu20-04-docker-8c-8g-28635 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Sep 7 16:15:49 prd-ubuntu20-04-docker-8c-8g-28635 sudo: pam_unix(sudo:session): session closed for user root Sep 7 16:15:49 prd-ubuntu20-04-docker-8c-8g-28635 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/ry_app-service-configurable_main ; USER=root ; COMMAND=/usr/bin/tee -a /etc/ssh/ssh_known_hosts Sep 7 16:15:49 prd-ubuntu20-04-docker-8c-8g-28635 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Sep 7 16:15:49 prd-ubuntu20-04-docker-8c-8g-28635 sudo: pam_unix(sudo:session): session closed for user root Sep 7 16:16:02 prd-ubuntu20-04-docker-8c-8g-28635 CRON[3756]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 7 16:16:02 prd-ubuntu20-04-docker-8c-8g-28635 CRON[3756]: pam_unix(cron:session): session closed for user root Sep 7 16:16:02 prd-ubuntu20-04-docker-8c-8g-28635 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/ry_app-service-configurable_main ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins .semver Sep 7 16:16:02 prd-ubuntu20-04-docker-8c-8g-28635 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Sep 7 16:16:02 prd-ubuntu20-04-docker-8c-8g-28635 sudo: pam_unix(sudo:session): session closed for user root Sep 7 16:17:01 prd-ubuntu20-04-docker-8c-8g-28635 CRON[11646]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 7 16:17:01 prd-ubuntu20-04-docker-8c-8g-28635 CRON[11647]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 7 16:17:01 prd-ubuntu20-04-docker-8c-8g-28635 CRON[11646]: pam_unix(cron:session): session closed for user root Sep 7 16:17:01 prd-ubuntu20-04-docker-8c-8g-28635 CRON[11647]: pam_unix(cron:session): session closed for user root Sep 7 16:17:05 prd-ubuntu20-04-docker-8c-8g-28635 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/ry_app-service-configurable_main ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins . Sep 7 16:17:05 prd-ubuntu20-04-docker-8c-8g-28635 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Sep 7 16:17:05 prd-ubuntu20-04-docker-8c-8g-28635 sudo: pam_unix(sudo:session): session closed for user root Sep 7 16:17:05 prd-ubuntu20-04-docker-8c-8g-28635 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/ry_app-service-configurable_main ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins . Sep 7 16:17:05 prd-ubuntu20-04-docker-8c-8g-28635 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Sep 7 16:17:05 prd-ubuntu20-04-docker-8c-8g-28635 sudo: pam_unix(sudo:session): session closed for user root Sep 7 16:18:01 prd-ubuntu20-04-docker-8c-8g-28635 CRON[17886]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 7 16:18:01 prd-ubuntu20-04-docker-8c-8g-28635 CRON[17886]: pam_unix(cron:session): session closed for user root Sep 7 16:19:01 prd-ubuntu20-04-docker-8c-8g-28635 CRON[17890]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 7 16:19:01 prd-ubuntu20-04-docker-8c-8g-28635 CRON[17890]: pam_unix(cron:session): session closed for user root Sep 7 16:20:01 prd-ubuntu20-04-docker-8c-8g-28635 CRON[17897]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 7 16:20:01 prd-ubuntu20-04-docker-8c-8g-28635 CRON[17897]: pam_unix(cron:session): session closed for user root Sep 7 16:21:01 prd-ubuntu20-04-docker-8c-8g-28635 CRON[17910]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 7 16:21:01 prd-ubuntu20-04-docker-8c-8g-28635 CRON[17910]: pam_unix(cron:session): session closed for user root Sep 7 16:22:01 prd-ubuntu20-04-docker-8c-8g-28635 CRON[17914]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 7 16:22:01 prd-ubuntu20-04-docker-8c-8g-28635 CRON[17914]: pam_unix(cron:session): session closed for user root Sep 7 16:23:01 prd-ubuntu20-04-docker-8c-8g-28635 CRON[17917]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 7 16:23:01 prd-ubuntu20-04-docker-8c-8g-28635 CRON[17917]: pam_unix(cron:session): session closed for user root Sep 7 16:24:01 prd-ubuntu20-04-docker-8c-8g-28635 CRON[17921]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 7 16:24:01 prd-ubuntu20-04-docker-8c-8g-28635 CRON[17921]: pam_unix(cron:session): session closed for user root Sep 7 16:25:01 prd-ubuntu20-04-docker-8c-8g-28635 CRON[17924]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 7 16:25:01 prd-ubuntu20-04-docker-8c-8g-28635 CRON[17924]: pam_unix(cron:session): session closed for user root Sep 7 16:26:01 prd-ubuntu20-04-docker-8c-8g-28635 CRON[19097]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 7 16:26:01 prd-ubuntu20-04-docker-8c-8g-28635 CRON[19097]: pam_unix(cron:session): session closed for user root Sep 7 16:26:28 prd-ubuntu20-04-docker-8c-8g-28635 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/ry_app-service-configurable_main ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins /w/workspace/ry_app-service-configurable_main/archives Sep 7 16:26:28 prd-ubuntu20-04-docker-8c-8g-28635 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Sep 7 16:26:28 prd-ubuntu20-04-docker-8c-8g-28635 sudo: pam_unix(sudo:session): session closed for user root