Dec 20 03:22:26 prd-ubuntu2004-docker-4c-4g-4275 passwd[713]: password for 'ubuntu' changed by 'root' Dec 20 03:22:26 prd-ubuntu2004-docker-4c-4g-4275 systemd-logind[761]: New seat seat0. Dec 20 03:22:26 prd-ubuntu2004-docker-4c-4g-4275 systemd-logind[761]: Watching system buttons on /dev/input/event0 (Power Button) Dec 20 03:22:26 prd-ubuntu2004-docker-4c-4g-4275 systemd-logind[761]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Dec 20 03:22:26 prd-ubuntu2004-docker-4c-4g-4275 sshd[809]: Server listening on 0.0.0.0 port 22. Dec 20 03:22:26 prd-ubuntu2004-docker-4c-4g-4275 sshd[809]: Server listening on :: port 22. Dec 20 03:22:29 prd-ubuntu2004-docker-4c-4g-4275 sshd[1423]: error: kex_exchange_identification: Connection closed by remote host Dec 20 03:22:35 prd-ubuntu2004-docker-4c-4g-4275 sshd[3414]: Invalid user jenkins from 10.30.168.15 port 49068 Dec 20 03:22:35 prd-ubuntu2004-docker-4c-4g-4275 sshd[3414]: Received disconnect from 10.30.168.15 port 49068:11: Closed due to user request. [preauth] Dec 20 03:22:35 prd-ubuntu2004-docker-4c-4g-4275 sshd[3414]: Disconnected from invalid user jenkins 10.30.168.15 port 49068 [preauth] Dec 20 03:22:38 prd-ubuntu2004-docker-4c-4g-4275 sshd[4439]: Invalid user jenkins from 10.30.168.15 port 49076 Dec 20 03:22:38 prd-ubuntu2004-docker-4c-4g-4275 sshd[4439]: Received disconnect from 10.30.168.15 port 49076:11: Closed due to user request. [preauth] Dec 20 03:22:38 prd-ubuntu2004-docker-4c-4g-4275 sshd[4439]: Disconnected from invalid user jenkins 10.30.168.15 port 49076 [preauth] Dec 20 03:22:41 prd-ubuntu2004-docker-4c-4g-4275 sshd[5261]: Invalid user jenkins from 10.30.168.15 port 49078 Dec 20 03:22:41 prd-ubuntu2004-docker-4c-4g-4275 sshd[5261]: Received disconnect from 10.30.168.15 port 49078:11: Closed due to user request. [preauth] Dec 20 03:22:41 prd-ubuntu2004-docker-4c-4g-4275 sshd[5261]: Disconnected from invalid user jenkins 10.30.168.15 port 49078 [preauth] Dec 20 03:22:44 prd-ubuntu2004-docker-4c-4g-4275 sshd[6134]: Invalid user jenkins from 10.30.168.15 port 49082 Dec 20 03:22:44 prd-ubuntu2004-docker-4c-4g-4275 sshd[6134]: Received disconnect from 10.30.168.15 port 49082:11: Closed due to user request. [preauth] Dec 20 03:22:44 prd-ubuntu2004-docker-4c-4g-4275 sshd[6134]: Disconnected from invalid user jenkins 10.30.168.15 port 49082 [preauth] Dec 20 03:22:47 prd-ubuntu2004-docker-4c-4g-4275 sshd[7328]: Invalid user jenkins from 10.30.168.15 port 49086 Dec 20 03:22:47 prd-ubuntu2004-docker-4c-4g-4275 sshd[7328]: Received disconnect from 10.30.168.15 port 49086:11: Closed due to user request. [preauth] Dec 20 03:22:47 prd-ubuntu2004-docker-4c-4g-4275 sshd[7328]: Disconnected from invalid user jenkins 10.30.168.15 port 49086 [preauth] Dec 20 03:22:49 prd-ubuntu2004-docker-4c-4g-4275 sshd[8323]: Invalid user jenkins from 10.30.168.15 port 49088 Dec 20 03:22:50 prd-ubuntu2004-docker-4c-4g-4275 sshd[8323]: Received disconnect from 10.30.168.15 port 49088:11: Closed due to user request. [preauth] Dec 20 03:22:50 prd-ubuntu2004-docker-4c-4g-4275 sshd[8323]: Disconnected from invalid user jenkins 10.30.168.15 port 49088 [preauth] Dec 20 03:22:52 prd-ubuntu2004-docker-4c-4g-4275 sshd[9099]: Invalid user jenkins from 10.30.168.15 port 49096 Dec 20 03:22:52 prd-ubuntu2004-docker-4c-4g-4275 sshd[9099]: Received disconnect from 10.30.168.15 port 49096:11: Closed due to user request. [preauth] Dec 20 03:22:52 prd-ubuntu2004-docker-4c-4g-4275 sshd[9099]: Disconnected from invalid user jenkins 10.30.168.15 port 49096 [preauth] Dec 20 03:22:55 prd-ubuntu2004-docker-4c-4g-4275 sshd[9409]: Invalid user jenkins from 10.30.168.15 port 49100 Dec 20 03:22:55 prd-ubuntu2004-docker-4c-4g-4275 sshd[9409]: Received disconnect from 10.30.168.15 port 49100:11: Closed due to user request. [preauth] Dec 20 03:22:55 prd-ubuntu2004-docker-4c-4g-4275 sshd[9409]: Disconnected from invalid user jenkins 10.30.168.15 port 49100 [preauth] Dec 20 03:22:56 prd-ubuntu2004-docker-4c-4g-4275 useradd[9806]: new group: name=jenkins, GID=1001 Dec 20 03:22:56 prd-ubuntu2004-docker-4c-4g-4275 useradd[9806]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash, from=none Dec 20 03:22:56 prd-ubuntu2004-docker-4c-4g-4275 usermod[9840]: add 'jenkins' to group 'docker' Dec 20 03:22:56 prd-ubuntu2004-docker-4c-4g-4275 usermod[9840]: add 'jenkins' to shadow group 'docker' Dec 20 03:22:58 prd-ubuntu2004-docker-4c-4g-4275 sshd[10374]: Accepted publickey for jenkins from 10.30.168.15 port 49104 ssh2: RSA SHA256:BBsm4mRgG5V0fGum4Y1Rmy/vs16stdRVhwvexlLUhUs Dec 20 03:22:58 prd-ubuntu2004-docker-4c-4g-4275 sshd[10374]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Dec 20 03:22:58 prd-ubuntu2004-docker-4c-4g-4275 systemd-logind[761]: New session 1 of user jenkins. Dec 20 03:22:58 prd-ubuntu2004-docker-4c-4g-4275 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Dec 20 03:23:01 prd-ubuntu2004-docker-4c-4g-4275 CRON[11662]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 03:23:01 prd-ubuntu2004-docker-4c-4g-4275 CRON[11662]: pam_unix(cron:session): session closed for user root Dec 20 03:24:01 prd-ubuntu2004-docker-4c-4g-4275 CRON[28367]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 03:24:01 prd-ubuntu2004-docker-4c-4g-4275 CRON[28367]: pam_unix(cron:session): session closed for user root Dec 20 03:24:12 prd-ubuntu2004-docker-4c-4g-4275 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/aaa-maven-merge-0.20.x ; USER=root ; COMMAND=/usr/bin/update-alternatives --install /usr/bin/java java /usr/lib/jvm/java-21-openjdk-amd64/bin/java 1 Dec 20 03:24:12 prd-ubuntu2004-docker-4c-4g-4275 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Dec 20 03:24:12 prd-ubuntu2004-docker-4c-4g-4275 sudo: pam_unix(sudo:session): session closed for user root Dec 20 03:24:12 prd-ubuntu2004-docker-4c-4g-4275 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/aaa-maven-merge-0.20.x ; USER=root ; COMMAND=/usr/bin/update-alternatives --install /usr/bin/javac javac /usr/lib/jvm/java-21-openjdk-amd64/bin/javac 1 Dec 20 03:24:12 prd-ubuntu2004-docker-4c-4g-4275 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Dec 20 03:24:12 prd-ubuntu2004-docker-4c-4g-4275 sudo: pam_unix(sudo:session): session closed for user root Dec 20 03:24:12 prd-ubuntu2004-docker-4c-4g-4275 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/aaa-maven-merge-0.20.x ; USER=root ; COMMAND=/usr/bin/update-alternatives --install /usr/lib/jvm/java-openjdk java_sdk_openjdk /usr/lib/jvm/java-21-openjdk-amd64 1 Dec 20 03:24:12 prd-ubuntu2004-docker-4c-4g-4275 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Dec 20 03:24:12 prd-ubuntu2004-docker-4c-4g-4275 sudo: pam_unix(sudo:session): session closed for user root Dec 20 03:24:12 prd-ubuntu2004-docker-4c-4g-4275 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/aaa-maven-merge-0.20.x ; USER=root ; COMMAND=/usr/bin/update-alternatives --set java /usr/lib/jvm/java-21-openjdk-amd64/bin/java Dec 20 03:24:12 prd-ubuntu2004-docker-4c-4g-4275 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Dec 20 03:24:12 prd-ubuntu2004-docker-4c-4g-4275 sudo: pam_unix(sudo:session): session closed for user root Dec 20 03:24:12 prd-ubuntu2004-docker-4c-4g-4275 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/aaa-maven-merge-0.20.x ; USER=root ; COMMAND=/usr/bin/update-alternatives --set javac /usr/lib/jvm/java-21-openjdk-amd64/bin/javac Dec 20 03:24:12 prd-ubuntu2004-docker-4c-4g-4275 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Dec 20 03:24:12 prd-ubuntu2004-docker-4c-4g-4275 sudo: pam_unix(sudo:session): session closed for user root Dec 20 03:24:12 prd-ubuntu2004-docker-4c-4g-4275 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/aaa-maven-merge-0.20.x ; USER=root ; COMMAND=/usr/bin/update-alternatives --set java_sdk_openjdk /usr/lib/jvm/java-21-openjdk-amd64 Dec 20 03:24:12 prd-ubuntu2004-docker-4c-4g-4275 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Dec 20 03:24:12 prd-ubuntu2004-docker-4c-4g-4275 sudo: pam_unix(sudo:session): session closed for user root Dec 20 03:25:01 prd-ubuntu2004-docker-4c-4g-4275 CRON[28494]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 03:25:01 prd-ubuntu2004-docker-4c-4g-4275 CRON[28494]: pam_unix(cron:session): session closed for user root Dec 20 03:26:01 prd-ubuntu2004-docker-4c-4g-4275 CRON[29148]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 03:26:01 prd-ubuntu2004-docker-4c-4g-4275 CRON[29148]: pam_unix(cron:session): session closed for user root Dec 20 03:27:01 prd-ubuntu2004-docker-4c-4g-4275 CRON[30006]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 03:27:01 prd-ubuntu2004-docker-4c-4g-4275 CRON[30006]: pam_unix(cron:session): session closed for user root Dec 20 03:28:01 prd-ubuntu2004-docker-4c-4g-4275 CRON[31440]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 03:28:01 prd-ubuntu2004-docker-4c-4g-4275 CRON[31440]: pam_unix(cron:session): session closed for user root Dec 20 03:29:01 prd-ubuntu2004-docker-4c-4g-4275 CRON[32328]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 03:29:01 prd-ubuntu2004-docker-4c-4g-4275 CRON[32328]: pam_unix(cron:session): session closed for user root Dec 20 03:30:01 prd-ubuntu2004-docker-4c-4g-4275 CRON[33324]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 03:30:01 prd-ubuntu2004-docker-4c-4g-4275 CRON[33324]: pam_unix(cron:session): session closed for user root Dec 20 03:31:01 prd-ubuntu2004-docker-4c-4g-4275 CRON[34333]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 03:31:01 prd-ubuntu2004-docker-4c-4g-4275 CRON[34333]: pam_unix(cron:session): session closed for user root Dec 20 03:32:01 prd-ubuntu2004-docker-4c-4g-4275 CRON[34894]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 03:32:01 prd-ubuntu2004-docker-4c-4g-4275 CRON[34894]: pam_unix(cron:session): session closed for user root Dec 20 03:32:42 prd-ubuntu2004-docker-4c-4g-4275 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/aaa-maven-merge-0.20.x ; USER=root ; COMMAND=/usr/bin/cp /var/log/auth.log /tmp Dec 20 03:32:42 prd-ubuntu2004-docker-4c-4g-4275 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)