Jun 23 16:44:43 prd-ubuntu20-04-docker-8c-8g-15463 passwd[739]: password for 'ubuntu' changed by 'root' Jun 23 16:44:43 prd-ubuntu20-04-docker-8c-8g-15463 sshd[815]: Server listening on 0.0.0.0 port 22. Jun 23 16:44:43 prd-ubuntu20-04-docker-8c-8g-15463 sshd[815]: Server listening on :: port 22. Jun 23 16:44:43 prd-ubuntu20-04-docker-8c-8g-15463 systemd-logind[800]: Watching system buttons on /dev/input/event0 (Power Button) Jun 23 16:44:43 prd-ubuntu20-04-docker-8c-8g-15463 systemd-logind[800]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Jun 23 16:44:43 prd-ubuntu20-04-docker-8c-8g-15463 systemd-logind[800]: New seat seat0. Jun 23 16:44:44 prd-ubuntu20-04-docker-8c-8g-15463 sshd[928]: error: kex_exchange_identification: Connection closed by remote host Jun 23 16:44:50 prd-ubuntu20-04-docker-8c-8g-15463 sshd[1195]: Invalid user jenkins from 10.30.120.5 port 43386 Jun 23 16:44:50 prd-ubuntu20-04-docker-8c-8g-15463 sshd[1195]: Received disconnect from 10.30.120.5 port 43386:11: Closed due to user request. [preauth] Jun 23 16:44:50 prd-ubuntu20-04-docker-8c-8g-15463 sshd[1195]: Disconnected from invalid user jenkins 10.30.120.5 port 43386 [preauth] Jun 23 16:44:52 prd-ubuntu20-04-docker-8c-8g-15463 sshd[1352]: Invalid user jenkins from 10.30.120.5 port 43388 Jun 23 16:44:52 prd-ubuntu20-04-docker-8c-8g-15463 sshd[1352]: Received disconnect from 10.30.120.5 port 43388:11: Closed due to user request. [preauth] Jun 23 16:44:52 prd-ubuntu20-04-docker-8c-8g-15463 sshd[1352]: Disconnected from invalid user jenkins 10.30.120.5 port 43388 [preauth] Jun 23 16:44:54 prd-ubuntu20-04-docker-8c-8g-15463 systemd-logind[800]: Watching system buttons on /dev/input/event0 (Power Button) Jun 23 16:44:54 prd-ubuntu20-04-docker-8c-8g-15463 sshd[1562]: Invalid user jenkins from 10.30.120.5 port 43390 Jun 23 16:44:54 prd-ubuntu20-04-docker-8c-8g-15463 systemd-logind[800]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Jun 23 16:44:54 prd-ubuntu20-04-docker-8c-8g-15463 sshd[1562]: Received disconnect from 10.30.120.5 port 43390:11: Closed due to user request. [preauth] Jun 23 16:44:54 prd-ubuntu20-04-docker-8c-8g-15463 sshd[1562]: Disconnected from invalid user jenkins 10.30.120.5 port 43390 [preauth] Jun 23 16:44:56 prd-ubuntu20-04-docker-8c-8g-15463 sshd[1600]: Invalid user jenkins from 10.30.120.5 port 43392 Jun 23 16:44:56 prd-ubuntu20-04-docker-8c-8g-15463 sshd[1600]: Received disconnect from 10.30.120.5 port 43392:11: Closed due to user request. [preauth] Jun 23 16:44:56 prd-ubuntu20-04-docker-8c-8g-15463 sshd[1600]: Disconnected from invalid user jenkins 10.30.120.5 port 43392 [preauth] Jun 23 16:44:58 prd-ubuntu20-04-docker-8c-8g-15463 sshd[1602]: Invalid user jenkins from 10.30.120.5 port 43394 Jun 23 16:44:58 prd-ubuntu20-04-docker-8c-8g-15463 sshd[1602]: Received disconnect from 10.30.120.5 port 43394:11: Closed due to user request. [preauth] Jun 23 16:44:58 prd-ubuntu20-04-docker-8c-8g-15463 sshd[1602]: Disconnected from invalid user jenkins 10.30.120.5 port 43394 [preauth] Jun 23 16:45:00 prd-ubuntu20-04-docker-8c-8g-15463 sshd[1611]: Invalid user jenkins from 10.30.120.5 port 43396 Jun 23 16:45:00 prd-ubuntu20-04-docker-8c-8g-15463 sshd[1611]: Received disconnect from 10.30.120.5 port 43396:11: Closed due to user request. [preauth] Jun 23 16:45:00 prd-ubuntu20-04-docker-8c-8g-15463 sshd[1611]: Disconnected from invalid user jenkins 10.30.120.5 port 43396 [preauth] Jun 23 16:45:01 prd-ubuntu20-04-docker-8c-8g-15463 CRON[1856]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 23 16:45:01 prd-ubuntu20-04-docker-8c-8g-15463 CRON[1856]: pam_unix(cron:session): session closed for user root Jun 23 16:45:03 prd-ubuntu20-04-docker-8c-8g-15463 sshd[2009]: Invalid user jenkins from 10.30.120.5 port 43406 Jun 23 16:45:03 prd-ubuntu20-04-docker-8c-8g-15463 sshd[2009]: Received disconnect from 10.30.120.5 port 43406:11: Closed due to user request. [preauth] Jun 23 16:45:03 prd-ubuntu20-04-docker-8c-8g-15463 sshd[2009]: Disconnected from invalid user jenkins 10.30.120.5 port 43406 [preauth] Jun 23 16:45:05 prd-ubuntu20-04-docker-8c-8g-15463 sshd[2186]: Invalid user jenkins from 10.30.120.5 port 43414 Jun 23 16:45:06 prd-ubuntu20-04-docker-8c-8g-15463 sshd[2186]: Received disconnect from 10.30.120.5 port 43414:11: Closed due to user request. [preauth] Jun 23 16:45:06 prd-ubuntu20-04-docker-8c-8g-15463 sshd[2186]: Disconnected from invalid user jenkins 10.30.120.5 port 43414 [preauth] Jun 23 16:45:06 prd-ubuntu20-04-docker-8c-8g-15463 useradd[2321]: new group: name=jenkins, GID=1001 Jun 23 16:45:06 prd-ubuntu20-04-docker-8c-8g-15463 useradd[2321]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash, from=none Jun 23 16:45:06 prd-ubuntu20-04-docker-8c-8g-15463 usermod[2331]: add 'jenkins' to group 'docker' Jun 23 16:45:06 prd-ubuntu20-04-docker-8c-8g-15463 usermod[2331]: add 'jenkins' to shadow group 'docker' Jun 23 16:45:08 prd-ubuntu20-04-docker-8c-8g-15463 sshd[2368]: Accepted publickey for jenkins from 10.30.120.5 port 43416 ssh2: RSA SHA256:aPmPdMw/h9M56P/o8xjsZcdBWoRKGeie6FPOwnlsRmU Jun 23 16:45:08 prd-ubuntu20-04-docker-8c-8g-15463 sshd[2368]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Jun 23 16:45:08 prd-ubuntu20-04-docker-8c-8g-15463 systemd-logind[800]: New session 2 of user jenkins. Jun 23 16:45:08 prd-ubuntu20-04-docker-8c-8g-15463 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Jun 23 16:45:26 prd-ubuntu20-04-docker-8c-8g-15463 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/ry_app-service-configurable_main ; USER=root ; COMMAND=/usr/bin/mv /tmp/ssh_known_hosts /etc/ssh/ssh_known_hosts Jun 23 16:45:26 prd-ubuntu20-04-docker-8c-8g-15463 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Jun 23 16:45:26 prd-ubuntu20-04-docker-8c-8g-15463 sudo: pam_unix(sudo:session): session closed for user root Jun 23 16:45:26 prd-ubuntu20-04-docker-8c-8g-15463 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/ry_app-service-configurable_main ; USER=root ; COMMAND=/usr/bin/tee -a /etc/ssh/ssh_known_hosts Jun 23 16:45:26 prd-ubuntu20-04-docker-8c-8g-15463 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Jun 23 16:45:26 prd-ubuntu20-04-docker-8c-8g-15463 sudo: pam_unix(sudo:session): session closed for user root Jun 23 16:45:39 prd-ubuntu20-04-docker-8c-8g-15463 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/ry_app-service-configurable_main ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins .semver Jun 23 16:45:39 prd-ubuntu20-04-docker-8c-8g-15463 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Jun 23 16:45:39 prd-ubuntu20-04-docker-8c-8g-15463 sudo: pam_unix(sudo:session): session closed for user root Jun 23 16:46:01 prd-ubuntu20-04-docker-8c-8g-15463 CRON[4567]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 23 16:46:01 prd-ubuntu20-04-docker-8c-8g-15463 CRON[4567]: pam_unix(cron:session): session closed for user root Jun 23 16:46:37 prd-ubuntu20-04-docker-8c-8g-15463 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/ry_app-service-configurable_main ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins . Jun 23 16:46:37 prd-ubuntu20-04-docker-8c-8g-15463 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Jun 23 16:46:37 prd-ubuntu20-04-docker-8c-8g-15463 sudo: pam_unix(sudo:session): session closed for user root Jun 23 16:46:37 prd-ubuntu20-04-docker-8c-8g-15463 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/ry_app-service-configurable_main ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins . Jun 23 16:46:37 prd-ubuntu20-04-docker-8c-8g-15463 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Jun 23 16:46:37 prd-ubuntu20-04-docker-8c-8g-15463 sudo: pam_unix(sudo:session): session closed for user root Jun 23 16:47:01 prd-ubuntu20-04-docker-8c-8g-15463 CRON[16124]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 23 16:47:01 prd-ubuntu20-04-docker-8c-8g-15463 CRON[16124]: pam_unix(cron:session): session closed for user root Jun 23 16:48:01 prd-ubuntu20-04-docker-8c-8g-15463 CRON[17258]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 23 16:48:01 prd-ubuntu20-04-docker-8c-8g-15463 CRON[17258]: pam_unix(cron:session): session closed for user root Jun 23 16:49:01 prd-ubuntu20-04-docker-8c-8g-15463 CRON[17269]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 23 16:49:01 prd-ubuntu20-04-docker-8c-8g-15463 CRON[17269]: pam_unix(cron:session): session closed for user root Jun 23 16:50:01 prd-ubuntu20-04-docker-8c-8g-15463 CRON[17279]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 23 16:50:01 prd-ubuntu20-04-docker-8c-8g-15463 CRON[17279]: pam_unix(cron:session): session closed for user root Jun 23 16:51:01 prd-ubuntu20-04-docker-8c-8g-15463 CRON[17283]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 23 16:51:01 prd-ubuntu20-04-docker-8c-8g-15463 CRON[17283]: pam_unix(cron:session): session closed for user root Jun 23 16:52:01 prd-ubuntu20-04-docker-8c-8g-15463 CRON[17286]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 23 16:52:01 prd-ubuntu20-04-docker-8c-8g-15463 CRON[17286]: pam_unix(cron:session): session closed for user root Jun 23 16:53:01 prd-ubuntu20-04-docker-8c-8g-15463 CRON[17290]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 23 16:53:01 prd-ubuntu20-04-docker-8c-8g-15463 CRON[17290]: pam_unix(cron:session): session closed for user root Jun 23 16:54:01 prd-ubuntu20-04-docker-8c-8g-15463 CRON[17298]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 23 16:54:01 prd-ubuntu20-04-docker-8c-8g-15463 CRON[17298]: pam_unix(cron:session): session closed for user root Jun 23 16:55:01 prd-ubuntu20-04-docker-8c-8g-15463 CRON[17304]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 23 16:55:01 prd-ubuntu20-04-docker-8c-8g-15463 CRON[17304]: pam_unix(cron:session): session closed for user root Jun 23 16:56:01 prd-ubuntu20-04-docker-8c-8g-15463 CRON[17308]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 23 16:56:01 prd-ubuntu20-04-docker-8c-8g-15463 CRON[17308]: pam_unix(cron:session): session closed for user root Jun 23 16:57:01 prd-ubuntu20-04-docker-8c-8g-15463 CRON[17312]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 23 16:57:01 prd-ubuntu20-04-docker-8c-8g-15463 CRON[17312]: pam_unix(cron:session): session closed for user root Jun 23 16:57:57 prd-ubuntu20-04-docker-8c-8g-15463 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/ry_app-service-configurable_main ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins /w/workspace/ry_app-service-configurable_main/archives Jun 23 16:57:57 prd-ubuntu20-04-docker-8c-8g-15463 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Jun 23 16:57:57 prd-ubuntu20-04-docker-8c-8g-15463 sudo: pam_unix(sudo:session): session closed for user root Jun 23 16:58:01 prd-ubuntu20-04-docker-8c-8g-15463 CRON[20137]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 23 16:58:01 prd-ubuntu20-04-docker-8c-8g-15463 CRON[20137]: pam_unix(cron:session): session closed for user root