May 20 20:26:35 prd-ubuntu20-04-docker-8c-8g-64222 passwd[737]: password for 'ubuntu' changed by 'root' May 20 20:26:35 prd-ubuntu20-04-docker-8c-8g-64222 sshd[829]: Server listening on 0.0.0.0 port 22. May 20 20:26:35 prd-ubuntu20-04-docker-8c-8g-64222 sshd[829]: Server listening on :: port 22. May 20 20:26:35 prd-ubuntu20-04-docker-8c-8g-64222 systemd-logind[798]: Watching system buttons on /dev/input/event0 (Power Button) May 20 20:26:35 prd-ubuntu20-04-docker-8c-8g-64222 systemd-logind[798]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) May 20 20:26:35 prd-ubuntu20-04-docker-8c-8g-64222 systemd-logind[798]: New seat seat0. May 20 20:26:35 prd-ubuntu20-04-docker-8c-8g-64222 sshd[845]: error: kex_exchange_identification: Connection closed by remote host May 20 20:26:41 prd-ubuntu20-04-docker-8c-8g-64222 sshd[1037]: Invalid user jenkins from 10.30.120.5 port 34784 May 20 20:26:41 prd-ubuntu20-04-docker-8c-8g-64222 sshd[1037]: Received disconnect from 10.30.120.5 port 34784:11: Closed due to user request. [preauth] May 20 20:26:41 prd-ubuntu20-04-docker-8c-8g-64222 sshd[1037]: Disconnected from invalid user jenkins 10.30.120.5 port 34784 [preauth] May 20 20:26:43 prd-ubuntu20-04-docker-8c-8g-64222 sshd[1193]: Invalid user jenkins from 10.30.120.5 port 34786 May 20 20:26:43 prd-ubuntu20-04-docker-8c-8g-64222 sshd[1193]: Received disconnect from 10.30.120.5 port 34786:11: Closed due to user request. [preauth] May 20 20:26:43 prd-ubuntu20-04-docker-8c-8g-64222 sshd[1193]: Disconnected from invalid user jenkins 10.30.120.5 port 34786 [preauth] May 20 20:26:45 prd-ubuntu20-04-docker-8c-8g-64222 sshd[1197]: Invalid user jenkins from 10.30.120.5 port 34788 May 20 20:26:45 prd-ubuntu20-04-docker-8c-8g-64222 sshd[1197]: Received disconnect from 10.30.120.5 port 34788:11: Closed due to user request. [preauth] May 20 20:26:45 prd-ubuntu20-04-docker-8c-8g-64222 sshd[1197]: Disconnected from invalid user jenkins 10.30.120.5 port 34788 [preauth] May 20 20:26:47 prd-ubuntu20-04-docker-8c-8g-64222 sshd[1384]: Invalid user jenkins from 10.30.120.5 port 34790 May 20 20:26:48 prd-ubuntu20-04-docker-8c-8g-64222 sshd[1384]: Received disconnect from 10.30.120.5 port 34790:11: Closed due to user request. [preauth] May 20 20:26:48 prd-ubuntu20-04-docker-8c-8g-64222 sshd[1384]: Disconnected from invalid user jenkins 10.30.120.5 port 34790 [preauth] May 20 20:26:49 prd-ubuntu20-04-docker-8c-8g-64222 systemd-logind[798]: Watching system buttons on /dev/input/event0 (Power Button) May 20 20:26:49 prd-ubuntu20-04-docker-8c-8g-64222 systemd-logind[798]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) May 20 20:26:50 prd-ubuntu20-04-docker-8c-8g-64222 sshd[1572]: Invalid user jenkins from 10.30.120.5 port 34792 May 20 20:26:50 prd-ubuntu20-04-docker-8c-8g-64222 sshd[1572]: Received disconnect from 10.30.120.5 port 34792:11: Closed due to user request. [preauth] May 20 20:26:50 prd-ubuntu20-04-docker-8c-8g-64222 sshd[1572]: Disconnected from invalid user jenkins 10.30.120.5 port 34792 [preauth] May 20 20:26:52 prd-ubuntu20-04-docker-8c-8g-64222 sshd[1591]: Invalid user jenkins from 10.30.120.5 port 34800 May 20 20:26:52 prd-ubuntu20-04-docker-8c-8g-64222 sshd[1591]: Received disconnect from 10.30.120.5 port 34800:11: Closed due to user request. [preauth] May 20 20:26:52 prd-ubuntu20-04-docker-8c-8g-64222 sshd[1591]: Disconnected from invalid user jenkins 10.30.120.5 port 34800 [preauth] May 20 20:26:54 prd-ubuntu20-04-docker-8c-8g-64222 sshd[1596]: Invalid user jenkins from 10.30.120.5 port 34802 May 20 20:26:54 prd-ubuntu20-04-docker-8c-8g-64222 sshd[1596]: Received disconnect from 10.30.120.5 port 34802:11: Closed due to user request. [preauth] May 20 20:26:54 prd-ubuntu20-04-docker-8c-8g-64222 sshd[1596]: Disconnected from invalid user jenkins 10.30.120.5 port 34802 [preauth] May 20 20:26:56 prd-ubuntu20-04-docker-8c-8g-64222 sshd[1776]: Invalid user jenkins from 10.30.120.5 port 34804 May 20 20:26:56 prd-ubuntu20-04-docker-8c-8g-64222 sshd[1776]: Received disconnect from 10.30.120.5 port 34804:11: Closed due to user request. [preauth] May 20 20:26:56 prd-ubuntu20-04-docker-8c-8g-64222 sshd[1776]: Disconnected from invalid user jenkins 10.30.120.5 port 34804 [preauth] May 20 20:26:58 prd-ubuntu20-04-docker-8c-8g-64222 sshd[1942]: Invalid user jenkins from 10.30.120.5 port 34806 May 20 20:26:58 prd-ubuntu20-04-docker-8c-8g-64222 sshd[1942]: Received disconnect from 10.30.120.5 port 34806:11: Closed due to user request. [preauth] May 20 20:26:58 prd-ubuntu20-04-docker-8c-8g-64222 sshd[1942]: Disconnected from invalid user jenkins 10.30.120.5 port 34806 [preauth] May 20 20:27:00 prd-ubuntu20-04-docker-8c-8g-64222 useradd[1997]: new group: name=jenkins, GID=1001 May 20 20:27:00 prd-ubuntu20-04-docker-8c-8g-64222 useradd[1997]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash, from=none May 20 20:27:01 prd-ubuntu20-04-docker-8c-8g-64222 usermod[2021]: add 'jenkins' to group 'docker' May 20 20:27:01 prd-ubuntu20-04-docker-8c-8g-64222 usermod[2021]: add 'jenkins' to shadow group 'docker' May 20 20:27:01 prd-ubuntu20-04-docker-8c-8g-64222 sshd[2011]: Received disconnect from 10.30.120.5 port 34808:11: Closed due to user request. [preauth] May 20 20:27:01 prd-ubuntu20-04-docker-8c-8g-64222 sshd[2011]: Disconnected from authenticating user jenkins 10.30.120.5 port 34808 [preauth] May 20 20:27:01 prd-ubuntu20-04-docker-8c-8g-64222 CRON[2104]: pam_unix(cron:session): session opened for user root by (uid=0) May 20 20:27:01 prd-ubuntu20-04-docker-8c-8g-64222 CRON[2104]: pam_unix(cron:session): session closed for user root May 20 20:27:03 prd-ubuntu20-04-docker-8c-8g-64222 sshd[2197]: Accepted publickey for jenkins from 10.30.120.5 port 34810 ssh2: RSA SHA256:aPmPdMw/h9M56P/o8xjsZcdBWoRKGeie6FPOwnlsRmU May 20 20:27:03 prd-ubuntu20-04-docker-8c-8g-64222 sshd[2197]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) May 20 20:27:03 prd-ubuntu20-04-docker-8c-8g-64222 systemd-logind[798]: New session 2 of user jenkins. May 20 20:27:03 prd-ubuntu20-04-docker-8c-8g-64222 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) May 20 20:27:22 prd-ubuntu20-04-docker-8c-8g-64222 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/oundry_device-onvif-camera_PR-65 ; USER=root ; COMMAND=/usr/bin/mv /tmp/ssh_known_hosts /etc/ssh/ssh_known_hosts May 20 20:27:22 prd-ubuntu20-04-docker-8c-8g-64222 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) May 20 20:27:22 prd-ubuntu20-04-docker-8c-8g-64222 sudo: pam_unix(sudo:session): session closed for user root May 20 20:27:22 prd-ubuntu20-04-docker-8c-8g-64222 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/oundry_device-onvif-camera_PR-65 ; USER=root ; COMMAND=/usr/bin/tee -a /etc/ssh/ssh_known_hosts May 20 20:27:22 prd-ubuntu20-04-docker-8c-8g-64222 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) May 20 20:27:22 prd-ubuntu20-04-docker-8c-8g-64222 sudo: pam_unix(sudo:session): session closed for user root May 20 20:27:35 prd-ubuntu20-04-docker-8c-8g-64222 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/oundry_device-onvif-camera_PR-65 ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins .semver May 20 20:27:35 prd-ubuntu20-04-docker-8c-8g-64222 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) May 20 20:27:35 prd-ubuntu20-04-docker-8c-8g-64222 sudo: pam_unix(sudo:session): session closed for user root May 20 20:28:01 prd-ubuntu20-04-docker-8c-8g-64222 CRON[6325]: pam_unix(cron:session): session opened for user root by (uid=0) May 20 20:28:01 prd-ubuntu20-04-docker-8c-8g-64222 CRON[6325]: pam_unix(cron:session): session closed for user root May 20 20:28:23 prd-ubuntu20-04-docker-8c-8g-64222 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/oundry_device-onvif-camera_PR-65 ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins . May 20 20:28:23 prd-ubuntu20-04-docker-8c-8g-64222 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) May 20 20:28:23 prd-ubuntu20-04-docker-8c-8g-64222 sudo: pam_unix(sudo:session): session closed for user root May 20 20:28:24 prd-ubuntu20-04-docker-8c-8g-64222 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/oundry_device-onvif-camera_PR-65 ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins . May 20 20:28:24 prd-ubuntu20-04-docker-8c-8g-64222 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) May 20 20:28:24 prd-ubuntu20-04-docker-8c-8g-64222 sudo: pam_unix(sudo:session): session closed for user root May 20 20:29:01 prd-ubuntu20-04-docker-8c-8g-64222 CRON[17076]: pam_unix(cron:session): session opened for user root by (uid=0) May 20 20:29:01 prd-ubuntu20-04-docker-8c-8g-64222 CRON[17076]: pam_unix(cron:session): session closed for user root May 20 20:30:01 prd-ubuntu20-04-docker-8c-8g-64222 CRON[17622]: pam_unix(cron:session): session opened for user root by (uid=0) May 20 20:30:01 prd-ubuntu20-04-docker-8c-8g-64222 CRON[17622]: pam_unix(cron:session): session closed for user root May 20 20:31:01 prd-ubuntu20-04-docker-8c-8g-64222 CRON[17628]: pam_unix(cron:session): session opened for user root by (uid=0) May 20 20:31:01 prd-ubuntu20-04-docker-8c-8g-64222 CRON[17628]: pam_unix(cron:session): session closed for user root May 20 20:32:01 prd-ubuntu20-04-docker-8c-8g-64222 CRON[17633]: pam_unix(cron:session): session opened for user root by (uid=0) May 20 20:32:01 prd-ubuntu20-04-docker-8c-8g-64222 CRON[17633]: pam_unix(cron:session): session closed for user root May 20 20:33:01 prd-ubuntu20-04-docker-8c-8g-64222 CRON[17643]: pam_unix(cron:session): session opened for user root by (uid=0) May 20 20:33:01 prd-ubuntu20-04-docker-8c-8g-64222 CRON[17643]: pam_unix(cron:session): session closed for user root May 20 20:34:01 prd-ubuntu20-04-docker-8c-8g-64222 CRON[17646]: pam_unix(cron:session): session opened for user root by (uid=0) May 20 20:34:01 prd-ubuntu20-04-docker-8c-8g-64222 CRON[17646]: pam_unix(cron:session): session closed for user root May 20 20:35:01 prd-ubuntu20-04-docker-8c-8g-64222 CRON[17650]: pam_unix(cron:session): session opened for user root by (uid=0) May 20 20:35:01 prd-ubuntu20-04-docker-8c-8g-64222 CRON[17650]: pam_unix(cron:session): session closed for user root May 20 20:36:01 prd-ubuntu20-04-docker-8c-8g-64222 CRON[17653]: pam_unix(cron:session): session opened for user root by (uid=0) May 20 20:36:01 prd-ubuntu20-04-docker-8c-8g-64222 CRON[17653]: pam_unix(cron:session): session closed for user root May 20 20:36:20 prd-ubuntu20-04-docker-8c-8g-64222 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/oundry_device-onvif-camera_PR-65 ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins /w/workspace/oundry_device-onvif-camera_PR-65/archives May 20 20:36:20 prd-ubuntu20-04-docker-8c-8g-64222 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) May 20 20:36:20 prd-ubuntu20-04-docker-8c-8g-64222 sudo: pam_unix(sudo:session): session closed for user root