Mar 20 13:28:13 prd-ubuntu20-04-docker-8c-8g-3789 passwd[762]: password for 'ubuntu' changed by 'root' Mar 20 13:28:13 prd-ubuntu20-04-docker-8c-8g-3789 systemd-logind[836]: New seat seat0. Mar 20 13:28:13 prd-ubuntu20-04-docker-8c-8g-3789 systemd-logind[836]: Watching system buttons on /dev/input/event0 (Power Button) Mar 20 13:28:13 prd-ubuntu20-04-docker-8c-8g-3789 systemd-logind[836]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Mar 20 13:28:13 prd-ubuntu20-04-docker-8c-8g-3789 sshd[876]: Server listening on 0.0.0.0 port 22. Mar 20 13:28:13 prd-ubuntu20-04-docker-8c-8g-3789 sshd[876]: Server listening on :: port 22. Mar 20 13:28:15 prd-ubuntu20-04-docker-8c-8g-3789 sshd[1026]: error: kex_exchange_identification: Connection closed by remote host Mar 20 13:28:22 prd-ubuntu20-04-docker-8c-8g-3789 sshd[1056]: Invalid user jenkins from 10.30.120.5 port 53894 Mar 20 13:28:22 prd-ubuntu20-04-docker-8c-8g-3789 sshd[1056]: Received disconnect from 10.30.120.5 port 53894:11: Closed due to user request. [preauth] Mar 20 13:28:22 prd-ubuntu20-04-docker-8c-8g-3789 sshd[1056]: Disconnected from invalid user jenkins 10.30.120.5 port 53894 [preauth] Mar 20 13:28:24 prd-ubuntu20-04-docker-8c-8g-3789 sshd[1058]: Invalid user jenkins from 10.30.120.5 port 53896 Mar 20 13:28:24 prd-ubuntu20-04-docker-8c-8g-3789 sshd[1058]: Received disconnect from 10.30.120.5 port 53896:11: Closed due to user request. [preauth] Mar 20 13:28:24 prd-ubuntu20-04-docker-8c-8g-3789 sshd[1058]: Disconnected from invalid user jenkins 10.30.120.5 port 53896 [preauth] Mar 20 13:28:26 prd-ubuntu20-04-docker-8c-8g-3789 sshd[1060]: Invalid user jenkins from 10.30.120.5 port 53900 Mar 20 13:28:26 prd-ubuntu20-04-docker-8c-8g-3789 sshd[1060]: Received disconnect from 10.30.120.5 port 53900:11: Closed due to user request. [preauth] Mar 20 13:28:26 prd-ubuntu20-04-docker-8c-8g-3789 sshd[1060]: Disconnected from invalid user jenkins 10.30.120.5 port 53900 [preauth] Mar 20 13:28:28 prd-ubuntu20-04-docker-8c-8g-3789 sshd[1062]: Invalid user jenkins from 10.30.120.5 port 53902 Mar 20 13:28:28 prd-ubuntu20-04-docker-8c-8g-3789 sshd[1062]: Received disconnect from 10.30.120.5 port 53902:11: Closed due to user request. [preauth] Mar 20 13:28:28 prd-ubuntu20-04-docker-8c-8g-3789 sshd[1062]: Disconnected from invalid user jenkins 10.30.120.5 port 53902 [preauth] Mar 20 13:28:30 prd-ubuntu20-04-docker-8c-8g-3789 sshd[1064]: Invalid user jenkins from 10.30.120.5 port 53904 Mar 20 13:28:30 prd-ubuntu20-04-docker-8c-8g-3789 sshd[1064]: Received disconnect from 10.30.120.5 port 53904:11: Closed due to user request. [preauth] Mar 20 13:28:30 prd-ubuntu20-04-docker-8c-8g-3789 sshd[1064]: Disconnected from invalid user jenkins 10.30.120.5 port 53904 [preauth] Mar 20 13:28:32 prd-ubuntu20-04-docker-8c-8g-3789 sshd[1123]: Invalid user jenkins from 10.30.120.5 port 53906 Mar 20 13:28:33 prd-ubuntu20-04-docker-8c-8g-3789 sshd[1123]: Received disconnect from 10.30.120.5 port 53906:11: Closed due to user request. [preauth] Mar 20 13:28:33 prd-ubuntu20-04-docker-8c-8g-3789 sshd[1123]: Disconnected from invalid user jenkins 10.30.120.5 port 53906 [preauth] Mar 20 13:28:36 prd-ubuntu20-04-docker-8c-8g-3789 sshd[1383]: Invalid user jenkins from 10.30.120.5 port 53908 Mar 20 13:28:36 prd-ubuntu20-04-docker-8c-8g-3789 sshd[1383]: Received disconnect from 10.30.120.5 port 53908:11: Closed due to user request. [preauth] Mar 20 13:28:36 prd-ubuntu20-04-docker-8c-8g-3789 sshd[1383]: Disconnected from invalid user jenkins 10.30.120.5 port 53908 [preauth] Mar 20 13:28:38 prd-ubuntu20-04-docker-8c-8g-3789 sshd[1389]: Invalid user jenkins from 10.30.120.5 port 53910 Mar 20 13:28:38 prd-ubuntu20-04-docker-8c-8g-3789 sshd[1389]: Received disconnect from 10.30.120.5 port 53910:11: Closed due to user request. [preauth] Mar 20 13:28:38 prd-ubuntu20-04-docker-8c-8g-3789 sshd[1389]: Disconnected from invalid user jenkins 10.30.120.5 port 53910 [preauth] Mar 20 13:28:40 prd-ubuntu20-04-docker-8c-8g-3789 sshd[1391]: Invalid user jenkins from 10.30.120.5 port 53912 Mar 20 13:28:40 prd-ubuntu20-04-docker-8c-8g-3789 sshd[1391]: Received disconnect from 10.30.120.5 port 53912:11: Closed due to user request. [preauth] Mar 20 13:28:40 prd-ubuntu20-04-docker-8c-8g-3789 sshd[1391]: Disconnected from invalid user jenkins 10.30.120.5 port 53912 [preauth] Mar 20 13:28:41 prd-ubuntu20-04-docker-8c-8g-3789 useradd[1398]: new group: name=jenkins, GID=1001 Mar 20 13:28:41 prd-ubuntu20-04-docker-8c-8g-3789 useradd[1398]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash, from=none Mar 20 13:28:41 prd-ubuntu20-04-docker-8c-8g-3789 usermod[1408]: add 'jenkins' to group 'docker' Mar 20 13:28:41 prd-ubuntu20-04-docker-8c-8g-3789 usermod[1408]: add 'jenkins' to shadow group 'docker' Mar 20 13:28:42 prd-ubuntu20-04-docker-8c-8g-3789 sshd[1443]: Accepted publickey for jenkins from 10.30.120.5 port 53916 ssh2: RSA SHA256:aPmPdMw/h9M56P/o8xjsZcdBWoRKGeie6FPOwnlsRmU Mar 20 13:28:42 prd-ubuntu20-04-docker-8c-8g-3789 sshd[1443]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Mar 20 13:28:42 prd-ubuntu20-04-docker-8c-8g-3789 systemd-logind[836]: New session 1 of user jenkins. Mar 20 13:28:42 prd-ubuntu20-04-docker-8c-8g-3789 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Mar 20 13:29:01 prd-ubuntu20-04-docker-8c-8g-3789 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/ry_app-service-configurable_main ; USER=root ; COMMAND=/usr/bin/mv /tmp/ssh_known_hosts /etc/ssh/ssh_known_hosts Mar 20 13:29:01 prd-ubuntu20-04-docker-8c-8g-3789 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Mar 20 13:29:01 prd-ubuntu20-04-docker-8c-8g-3789 sudo: pam_unix(sudo:session): session closed for user root Mar 20 13:29:01 prd-ubuntu20-04-docker-8c-8g-3789 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/ry_app-service-configurable_main ; USER=root ; COMMAND=/usr/bin/tee -a /etc/ssh/ssh_known_hosts Mar 20 13:29:01 prd-ubuntu20-04-docker-8c-8g-3789 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Mar 20 13:29:01 prd-ubuntu20-04-docker-8c-8g-3789 sudo: pam_unix(sudo:session): session closed for user root Mar 20 13:29:02 prd-ubuntu20-04-docker-8c-8g-3789 CRON[2037]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 20 13:29:02 prd-ubuntu20-04-docker-8c-8g-3789 CRON[2037]: pam_unix(cron:session): session closed for user root Mar 20 13:29:17 prd-ubuntu20-04-docker-8c-8g-3789 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/ry_app-service-configurable_main ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins .semver Mar 20 13:29:17 prd-ubuntu20-04-docker-8c-8g-3789 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Mar 20 13:29:17 prd-ubuntu20-04-docker-8c-8g-3789 sudo: pam_unix(sudo:session): session closed for user root Mar 20 13:30:01 prd-ubuntu20-04-docker-8c-8g-3789 CRON[4251]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 20 13:30:01 prd-ubuntu20-04-docker-8c-8g-3789 CRON[4251]: pam_unix(cron:session): session closed for user root Mar 20 13:31:01 prd-ubuntu20-04-docker-8c-8g-3789 CRON[18374]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 20 13:31:01 prd-ubuntu20-04-docker-8c-8g-3789 CRON[18374]: pam_unix(cron:session): session closed for user root Mar 20 13:31:11 prd-ubuntu20-04-docker-8c-8g-3789 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/ry_app-service-configurable_main ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins . Mar 20 13:31:11 prd-ubuntu20-04-docker-8c-8g-3789 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Mar 20 13:31:11 prd-ubuntu20-04-docker-8c-8g-3789 sudo: pam_unix(sudo:session): session closed for user root Mar 20 13:31:15 prd-ubuntu20-04-docker-8c-8g-3789 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/ry_app-service-configurable_main ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins . Mar 20 13:31:15 prd-ubuntu20-04-docker-8c-8g-3789 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Mar 20 13:31:15 prd-ubuntu20-04-docker-8c-8g-3789 sudo: pam_unix(sudo:session): session closed for user root Mar 20 13:32:01 prd-ubuntu20-04-docker-8c-8g-3789 CRON[29260]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 20 13:32:01 prd-ubuntu20-04-docker-8c-8g-3789 CRON[29260]: pam_unix(cron:session): session closed for user root Mar 20 13:33:01 prd-ubuntu20-04-docker-8c-8g-3789 CRON[29264]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 20 13:33:01 prd-ubuntu20-04-docker-8c-8g-3789 CRON[29264]: pam_unix(cron:session): session closed for user root Mar 20 13:34:01 prd-ubuntu20-04-docker-8c-8g-3789 CRON[29784]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 20 13:34:01 prd-ubuntu20-04-docker-8c-8g-3789 CRON[29784]: pam_unix(cron:session): session closed for user root Mar 20 13:35:01 prd-ubuntu20-04-docker-8c-8g-3789 CRON[30151]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 20 13:35:01 prd-ubuntu20-04-docker-8c-8g-3789 CRON[30151]: pam_unix(cron:session): session closed for user root Mar 20 13:36:01 prd-ubuntu20-04-docker-8c-8g-3789 CRON[30154]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 20 13:36:01 prd-ubuntu20-04-docker-8c-8g-3789 CRON[30154]: pam_unix(cron:session): session closed for user root Mar 20 13:37:01 prd-ubuntu20-04-docker-8c-8g-3789 CRON[30158]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 20 13:37:01 prd-ubuntu20-04-docker-8c-8g-3789 CRON[30158]: pam_unix(cron:session): session closed for user root Mar 20 13:38:01 prd-ubuntu20-04-docker-8c-8g-3789 CRON[30161]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 20 13:38:01 prd-ubuntu20-04-docker-8c-8g-3789 CRON[30161]: pam_unix(cron:session): session closed for user root Mar 20 13:39:01 prd-ubuntu20-04-docker-8c-8g-3789 CRON[30170]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 20 13:39:01 prd-ubuntu20-04-docker-8c-8g-3789 CRON[30170]: pam_unix(cron:session): session closed for user root Mar 20 13:40:01 prd-ubuntu20-04-docker-8c-8g-3789 CRON[30173]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 20 13:40:01 prd-ubuntu20-04-docker-8c-8g-3789 CRON[30173]: pam_unix(cron:session): session closed for user root Mar 20 13:41:01 prd-ubuntu20-04-docker-8c-8g-3789 CRON[30177]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 20 13:41:01 prd-ubuntu20-04-docker-8c-8g-3789 CRON[30177]: pam_unix(cron:session): session closed for user root Mar 20 13:42:01 prd-ubuntu20-04-docker-8c-8g-3789 CRON[30180]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 20 13:42:01 prd-ubuntu20-04-docker-8c-8g-3789 CRON[30180]: pam_unix(cron:session): session closed for user root Mar 20 13:43:01 prd-ubuntu20-04-docker-8c-8g-3789 CRON[30184]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 20 13:43:01 prd-ubuntu20-04-docker-8c-8g-3789 CRON[30184]: pam_unix(cron:session): session closed for user root Mar 20 13:44:01 prd-ubuntu20-04-docker-8c-8g-3789 CRON[30209]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 20 13:44:01 prd-ubuntu20-04-docker-8c-8g-3789 CRON[30209]: pam_unix(cron:session): session closed for user root Mar 20 13:45:01 prd-ubuntu20-04-docker-8c-8g-3789 CRON[30213]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 20 13:45:01 prd-ubuntu20-04-docker-8c-8g-3789 CRON[30213]: pam_unix(cron:session): session closed for user root Mar 20 13:46:01 prd-ubuntu20-04-docker-8c-8g-3789 CRON[30216]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 20 13:46:01 prd-ubuntu20-04-docker-8c-8g-3789 CRON[30216]: pam_unix(cron:session): session closed for user root Mar 20 13:47:01 prd-ubuntu20-04-docker-8c-8g-3789 CRON[30220]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 20 13:47:01 prd-ubuntu20-04-docker-8c-8g-3789 CRON[30220]: pam_unix(cron:session): session closed for user root Mar 20 13:48:01 prd-ubuntu20-04-docker-8c-8g-3789 CRON[30223]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 20 13:48:01 prd-ubuntu20-04-docker-8c-8g-3789 CRON[30223]: pam_unix(cron:session): session closed for user root Mar 20 13:49:01 prd-ubuntu20-04-docker-8c-8g-3789 CRON[30712]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 20 13:49:01 prd-ubuntu20-04-docker-8c-8g-3789 CRON[30712]: pam_unix(cron:session): session closed for user root Mar 20 13:49:43 prd-ubuntu20-04-docker-8c-8g-3789 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/ry_app-service-configurable_main ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins /w/workspace/ry_app-service-configurable_main/archives Mar 20 13:49:43 prd-ubuntu20-04-docker-8c-8g-3789 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Mar 20 13:49:43 prd-ubuntu20-04-docker-8c-8g-3789 sudo: pam_unix(sudo:session): session closed for user root