Feb 22 14:33:09 prd-ubuntu20-04-docker-8c-8g-1513 passwd[750]: password for 'ubuntu' changed by 'root' Feb 22 14:33:09 prd-ubuntu20-04-docker-8c-8g-1513 systemd-logind[815]: New seat seat0. Feb 22 14:33:09 prd-ubuntu20-04-docker-8c-8g-1513 systemd-logind[815]: Watching system buttons on /dev/input/event0 (Power Button) Feb 22 14:33:09 prd-ubuntu20-04-docker-8c-8g-1513 systemd-logind[815]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Feb 22 14:33:09 prd-ubuntu20-04-docker-8c-8g-1513 sshd[851]: Server listening on 0.0.0.0 port 22. Feb 22 14:33:09 prd-ubuntu20-04-docker-8c-8g-1513 sshd[851]: Server listening on :: port 22. Feb 22 14:33:14 prd-ubuntu20-04-docker-8c-8g-1513 sshd[994]: error: kex_exchange_identification: Connection closed by remote host Feb 22 14:33:15 prd-ubuntu20-04-docker-8c-8g-1513 sshd[995]: Invalid user jenkins from 10.30.120.5 port 39054 Feb 22 14:33:16 prd-ubuntu20-04-docker-8c-8g-1513 sshd[995]: Received disconnect from 10.30.120.5 port 39054:11: Closed due to user request. [preauth] Feb 22 14:33:16 prd-ubuntu20-04-docker-8c-8g-1513 sshd[995]: Disconnected from invalid user jenkins 10.30.120.5 port 39054 [preauth] Feb 22 14:33:17 prd-ubuntu20-04-docker-8c-8g-1513 sshd[1008]: Invalid user jenkins from 10.30.120.5 port 39070 Feb 22 14:33:17 prd-ubuntu20-04-docker-8c-8g-1513 sshd[1008]: Received disconnect from 10.30.120.5 port 39070:11: Closed due to user request. [preauth] Feb 22 14:33:17 prd-ubuntu20-04-docker-8c-8g-1513 sshd[1008]: Disconnected from invalid user jenkins 10.30.120.5 port 39070 [preauth] Feb 22 14:33:19 prd-ubuntu20-04-docker-8c-8g-1513 sshd[1010]: Invalid user jenkins from 10.30.120.5 port 39076 Feb 22 14:33:19 prd-ubuntu20-04-docker-8c-8g-1513 sshd[1010]: Received disconnect from 10.30.120.5 port 39076:11: Closed due to user request. [preauth] Feb 22 14:33:19 prd-ubuntu20-04-docker-8c-8g-1513 sshd[1010]: Disconnected from invalid user jenkins 10.30.120.5 port 39076 [preauth] Feb 22 14:33:21 prd-ubuntu20-04-docker-8c-8g-1513 sshd[1041]: Invalid user jenkins from 10.30.120.5 port 39088 Feb 22 14:33:21 prd-ubuntu20-04-docker-8c-8g-1513 sshd[1041]: Received disconnect from 10.30.120.5 port 39088:11: Closed due to user request. [preauth] Feb 22 14:33:21 prd-ubuntu20-04-docker-8c-8g-1513 sshd[1041]: Disconnected from invalid user jenkins 10.30.120.5 port 39088 [preauth] Feb 22 14:33:23 prd-ubuntu20-04-docker-8c-8g-1513 sshd[1051]: Invalid user jenkins from 10.30.120.5 port 39098 Feb 22 14:33:23 prd-ubuntu20-04-docker-8c-8g-1513 sshd[1051]: Received disconnect from 10.30.120.5 port 39098:11: Closed due to user request. [preauth] Feb 22 14:33:23 prd-ubuntu20-04-docker-8c-8g-1513 sshd[1051]: Disconnected from invalid user jenkins 10.30.120.5 port 39098 [preauth] Feb 22 14:33:25 prd-ubuntu20-04-docker-8c-8g-1513 sshd[1053]: Invalid user jenkins from 10.30.120.5 port 39102 Feb 22 14:33:25 prd-ubuntu20-04-docker-8c-8g-1513 sshd[1053]: Received disconnect from 10.30.120.5 port 39102:11: Closed due to user request. [preauth] Feb 22 14:33:25 prd-ubuntu20-04-docker-8c-8g-1513 sshd[1053]: Disconnected from invalid user jenkins 10.30.120.5 port 39102 [preauth] Feb 22 14:33:27 prd-ubuntu20-04-docker-8c-8g-1513 sshd[1055]: Invalid user jenkins from 10.30.120.5 port 39104 Feb 22 14:33:27 prd-ubuntu20-04-docker-8c-8g-1513 sshd[1055]: Received disconnect from 10.30.120.5 port 39104:11: Closed due to user request. [preauth] Feb 22 14:33:27 prd-ubuntu20-04-docker-8c-8g-1513 sshd[1055]: Disconnected from invalid user jenkins 10.30.120.5 port 39104 [preauth] Feb 22 14:33:30 prd-ubuntu20-04-docker-8c-8g-1513 sshd[1057]: Invalid user jenkins from 10.30.120.5 port 39112 Feb 22 14:33:30 prd-ubuntu20-04-docker-8c-8g-1513 sshd[1057]: Received disconnect from 10.30.120.5 port 39112:11: Closed due to user request. [preauth] Feb 22 14:33:30 prd-ubuntu20-04-docker-8c-8g-1513 sshd[1057]: Disconnected from invalid user jenkins 10.30.120.5 port 39112 [preauth] Feb 22 14:33:32 prd-ubuntu20-04-docker-8c-8g-1513 sshd[1059]: Invalid user jenkins from 10.30.120.5 port 39114 Feb 22 14:33:32 prd-ubuntu20-04-docker-8c-8g-1513 sshd[1059]: Received disconnect from 10.30.120.5 port 39114:11: Closed due to user request. [preauth] Feb 22 14:33:32 prd-ubuntu20-04-docker-8c-8g-1513 sshd[1059]: Disconnected from invalid user jenkins 10.30.120.5 port 39114 [preauth] Feb 22 14:33:34 prd-ubuntu20-04-docker-8c-8g-1513 sshd[1071]: Invalid user jenkins from 10.30.120.5 port 39116 Feb 22 14:33:34 prd-ubuntu20-04-docker-8c-8g-1513 sshd[1071]: Received disconnect from 10.30.120.5 port 39116:11: Closed due to user request. [preauth] Feb 22 14:33:34 prd-ubuntu20-04-docker-8c-8g-1513 sshd[1071]: Disconnected from invalid user jenkins 10.30.120.5 port 39116 [preauth] Feb 22 14:33:36 prd-ubuntu20-04-docker-8c-8g-1513 sshd[1073]: Invalid user jenkins from 10.30.120.5 port 39122 Feb 22 14:33:36 prd-ubuntu20-04-docker-8c-8g-1513 sshd[1073]: Received disconnect from 10.30.120.5 port 39122:11: Closed due to user request. [preauth] Feb 22 14:33:36 prd-ubuntu20-04-docker-8c-8g-1513 sshd[1073]: Disconnected from invalid user jenkins 10.30.120.5 port 39122 [preauth] Feb 22 14:33:38 prd-ubuntu20-04-docker-8c-8g-1513 sshd[1233]: Invalid user jenkins from 10.30.120.5 port 39124 Feb 22 14:33:38 prd-ubuntu20-04-docker-8c-8g-1513 sshd[1233]: Received disconnect from 10.30.120.5 port 39124:11: Closed due to user request. [preauth] Feb 22 14:33:38 prd-ubuntu20-04-docker-8c-8g-1513 sshd[1233]: Disconnected from invalid user jenkins 10.30.120.5 port 39124 [preauth] Feb 22 14:33:40 prd-ubuntu20-04-docker-8c-8g-1513 sshd[1286]: Invalid user jenkins from 10.30.120.5 port 39126 Feb 22 14:33:40 prd-ubuntu20-04-docker-8c-8g-1513 sshd[1286]: Received disconnect from 10.30.120.5 port 39126:11: Closed due to user request. [preauth] Feb 22 14:33:40 prd-ubuntu20-04-docker-8c-8g-1513 sshd[1286]: Disconnected from invalid user jenkins 10.30.120.5 port 39126 [preauth] Feb 22 14:33:42 prd-ubuntu20-04-docker-8c-8g-1513 sshd[1291]: Invalid user jenkins from 10.30.120.5 port 39130 Feb 22 14:33:42 prd-ubuntu20-04-docker-8c-8g-1513 sshd[1291]: Received disconnect from 10.30.120.5 port 39130:11: Closed due to user request. [preauth] Feb 22 14:33:42 prd-ubuntu20-04-docker-8c-8g-1513 sshd[1291]: Disconnected from invalid user jenkins 10.30.120.5 port 39130 [preauth] Feb 22 14:33:44 prd-ubuntu20-04-docker-8c-8g-1513 useradd[1312]: new group: name=jenkins, GID=1001 Feb 22 14:33:44 prd-ubuntu20-04-docker-8c-8g-1513 useradd[1312]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash, from=none Feb 22 14:33:44 prd-ubuntu20-04-docker-8c-8g-1513 usermod[1322]: add 'jenkins' to group 'docker' Feb 22 14:33:44 prd-ubuntu20-04-docker-8c-8g-1513 usermod[1322]: add 'jenkins' to shadow group 'docker' Feb 22 14:33:44 prd-ubuntu20-04-docker-8c-8g-1513 sshd[1335]: Accepted publickey for jenkins from 10.30.120.5 port 39136 ssh2: RSA SHA256:aPmPdMw/h9M56P/o8xjsZcdBWoRKGeie6FPOwnlsRmU Feb 22 14:33:44 prd-ubuntu20-04-docker-8c-8g-1513 sshd[1335]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Feb 22 14:33:44 prd-ubuntu20-04-docker-8c-8g-1513 systemd-logind[815]: New session 1 of user jenkins. Feb 22 14:33:45 prd-ubuntu20-04-docker-8c-8g-1513 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Feb 22 14:34:01 prd-ubuntu20-04-docker-8c-8g-1513 CRON[1948]: pam_unix(cron:session): session opened for user root by (uid=0) Feb 22 14:34:01 prd-ubuntu20-04-docker-8c-8g-1513 CRON[1948]: pam_unix(cron:session): session closed for user root Feb 22 14:34:01 prd-ubuntu20-04-docker-8c-8g-1513 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/ry_app-service-configurable_main ; USER=root ; COMMAND=/usr/bin/mv /tmp/ssh_known_hosts /etc/ssh/ssh_known_hosts Feb 22 14:34:01 prd-ubuntu20-04-docker-8c-8g-1513 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Feb 22 14:34:01 prd-ubuntu20-04-docker-8c-8g-1513 sudo: pam_unix(sudo:session): session closed for user root Feb 22 14:34:01 prd-ubuntu20-04-docker-8c-8g-1513 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/ry_app-service-configurable_main ; USER=root ; COMMAND=/usr/bin/tee -a /etc/ssh/ssh_known_hosts Feb 22 14:34:02 prd-ubuntu20-04-docker-8c-8g-1513 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Feb 22 14:34:02 prd-ubuntu20-04-docker-8c-8g-1513 sudo: pam_unix(sudo:session): session closed for user root Feb 22 14:34:16 prd-ubuntu20-04-docker-8c-8g-1513 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/ry_app-service-configurable_main ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins .semver Feb 22 14:34:16 prd-ubuntu20-04-docker-8c-8g-1513 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Feb 22 14:34:16 prd-ubuntu20-04-docker-8c-8g-1513 sudo: pam_unix(sudo:session): session closed for user root Feb 22 14:35:01 prd-ubuntu20-04-docker-8c-8g-1513 CRON[3513]: pam_unix(cron:session): session opened for user root by (uid=0) Feb 22 14:35:01 prd-ubuntu20-04-docker-8c-8g-1513 CRON[3513]: pam_unix(cron:session): session closed for user root Feb 22 14:35:51 prd-ubuntu20-04-docker-8c-8g-1513 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/ry_app-service-configurable_main ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins . Feb 22 14:35:51 prd-ubuntu20-04-docker-8c-8g-1513 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Feb 22 14:35:51 prd-ubuntu20-04-docker-8c-8g-1513 sudo: pam_unix(sudo:session): session closed for user root Feb 22 14:35:52 prd-ubuntu20-04-docker-8c-8g-1513 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/ry_app-service-configurable_main ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins . Feb 22 14:35:52 prd-ubuntu20-04-docker-8c-8g-1513 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Feb 22 14:35:52 prd-ubuntu20-04-docker-8c-8g-1513 sudo: pam_unix(sudo:session): session closed for user root Feb 22 14:36:01 prd-ubuntu20-04-docker-8c-8g-1513 CRON[18021]: pam_unix(cron:session): session opened for user root by (uid=0) Feb 22 14:36:01 prd-ubuntu20-04-docker-8c-8g-1513 CRON[18021]: pam_unix(cron:session): session closed for user root Feb 22 14:37:01 prd-ubuntu20-04-docker-8c-8g-1513 CRON[20996]: pam_unix(cron:session): session opened for user root by (uid=0) Feb 22 14:37:01 prd-ubuntu20-04-docker-8c-8g-1513 CRON[20996]: pam_unix(cron:session): session closed for user root Feb 22 14:38:01 prd-ubuntu20-04-docker-8c-8g-1513 CRON[21000]: pam_unix(cron:session): session opened for user root by (uid=0) Feb 22 14:38:01 prd-ubuntu20-04-docker-8c-8g-1513 CRON[21000]: pam_unix(cron:session): session closed for user root Feb 22 14:38:30 prd-ubuntu20-04-docker-8c-8g-1513 systemd-logind[815]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Feb 22 14:38:30 prd-ubuntu20-04-docker-8c-8g-1513 systemd-logind[815]: Watching system buttons on /dev/input/event0 (Power Button) Feb 22 14:39:01 prd-ubuntu20-04-docker-8c-8g-1513 CRON[22263]: pam_unix(cron:session): session opened for user root by (uid=0) Feb 22 14:39:01 prd-ubuntu20-04-docker-8c-8g-1513 CRON[22263]: pam_unix(cron:session): session closed for user root Feb 22 14:40:01 prd-ubuntu20-04-docker-8c-8g-1513 CRON[22332]: pam_unix(cron:session): session opened for user root by (uid=0) Feb 22 14:40:01 prd-ubuntu20-04-docker-8c-8g-1513 CRON[22332]: pam_unix(cron:session): session closed for user root Feb 22 14:41:01 prd-ubuntu20-04-docker-8c-8g-1513 CRON[22335]: pam_unix(cron:session): session opened for user root by (uid=0) Feb 22 14:41:01 prd-ubuntu20-04-docker-8c-8g-1513 CRON[22335]: pam_unix(cron:session): session closed for user root Feb 22 14:42:01 prd-ubuntu20-04-docker-8c-8g-1513 CRON[22339]: pam_unix(cron:session): session opened for user root by (uid=0) Feb 22 14:42:01 prd-ubuntu20-04-docker-8c-8g-1513 CRON[22339]: pam_unix(cron:session): session closed for user root Feb 22 14:43:01 prd-ubuntu20-04-docker-8c-8g-1513 CRON[22342]: pam_unix(cron:session): session opened for user root by (uid=0) Feb 22 14:43:01 prd-ubuntu20-04-docker-8c-8g-1513 CRON[22342]: pam_unix(cron:session): session closed for user root Feb 22 14:44:01 prd-ubuntu20-04-docker-8c-8g-1513 CRON[22351]: pam_unix(cron:session): session opened for user root by (uid=0) Feb 22 14:44:01 prd-ubuntu20-04-docker-8c-8g-1513 CRON[22351]: pam_unix(cron:session): session closed for user root Feb 22 14:45:01 prd-ubuntu20-04-docker-8c-8g-1513 CRON[22354]: pam_unix(cron:session): session opened for user root by (uid=0) Feb 22 14:45:01 prd-ubuntu20-04-docker-8c-8g-1513 CRON[22354]: pam_unix(cron:session): session closed for user root Feb 22 14:46:01 prd-ubuntu20-04-docker-8c-8g-1513 CRON[22383]: pam_unix(cron:session): session opened for user root by (uid=0) Feb 22 14:46:01 prd-ubuntu20-04-docker-8c-8g-1513 CRON[22383]: pam_unix(cron:session): session closed for user root Feb 22 14:47:01 prd-ubuntu20-04-docker-8c-8g-1513 CRON[22386]: pam_unix(cron:session): session opened for user root by (uid=0) Feb 22 14:47:01 prd-ubuntu20-04-docker-8c-8g-1513 CRON[22386]: pam_unix(cron:session): session closed for user root Feb 22 14:48:01 prd-ubuntu20-04-docker-8c-8g-1513 CRON[23253]: pam_unix(cron:session): session opened for user root by (uid=0) Feb 22 14:48:01 prd-ubuntu20-04-docker-8c-8g-1513 CRON[23253]: pam_unix(cron:session): session closed for user root Feb 22 14:48:44 prd-ubuntu20-04-docker-8c-8g-1513 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/ry_app-service-configurable_main ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins /w/workspace/ry_app-service-configurable_main/archives Feb 22 14:48:44 prd-ubuntu20-04-docker-8c-8g-1513 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Feb 22 14:48:44 prd-ubuntu20-04-docker-8c-8g-1513 sudo: pam_unix(sudo:session): session closed for user root