Dec 1 14:02:24 prd-ubuntu2004-docker-2c-2g-11930 passwd[683]: password for 'ubuntu' changed by 'root' Dec 1 14:02:24 prd-ubuntu2004-docker-2c-2g-11930 systemd-logind[727]: New seat seat0. Dec 1 14:02:24 prd-ubuntu2004-docker-2c-2g-11930 systemd-logind[727]: Watching system buttons on /dev/input/event0 (Power Button) Dec 1 14:02:24 prd-ubuntu2004-docker-2c-2g-11930 systemd-logind[727]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Dec 1 14:02:24 prd-ubuntu2004-docker-2c-2g-11930 sshd[765]: Server listening on 0.0.0.0 port 22. Dec 1 14:02:24 prd-ubuntu2004-docker-2c-2g-11930 sshd[765]: Server listening on :: port 22. Dec 1 14:02:24 prd-ubuntu2004-docker-2c-2g-11930 sshd[883]: error: kex_exchange_identification: Connection closed by remote host Dec 1 14:02:30 prd-ubuntu2004-docker-2c-2g-11930 sshd[2785]: Invalid user jenkins from 10.30.168.15 port 34164 Dec 1 14:02:30 prd-ubuntu2004-docker-2c-2g-11930 sshd[2785]: Received disconnect from 10.30.168.15 port 34164:11: Closed due to user request. [preauth] Dec 1 14:02:30 prd-ubuntu2004-docker-2c-2g-11930 sshd[2785]: Disconnected from invalid user jenkins 10.30.168.15 port 34164 [preauth] Dec 1 14:02:33 prd-ubuntu2004-docker-2c-2g-11930 sshd[4148]: Invalid user jenkins from 10.30.168.15 port 34166 Dec 1 14:02:33 prd-ubuntu2004-docker-2c-2g-11930 sshd[4148]: Received disconnect from 10.30.168.15 port 34166:11: Closed due to user request. [preauth] Dec 1 14:02:33 prd-ubuntu2004-docker-2c-2g-11930 sshd[4148]: Disconnected from invalid user jenkins 10.30.168.15 port 34166 [preauth] Dec 1 14:02:36 prd-ubuntu2004-docker-2c-2g-11930 sshd[5350]: Invalid user jenkins from 10.30.168.15 port 34168 Dec 1 14:02:36 prd-ubuntu2004-docker-2c-2g-11930 sshd[5350]: Received disconnect from 10.30.168.15 port 34168:11: Closed due to user request. [preauth] Dec 1 14:02:36 prd-ubuntu2004-docker-2c-2g-11930 sshd[5350]: Disconnected from invalid user jenkins 10.30.168.15 port 34168 [preauth] Dec 1 14:02:39 prd-ubuntu2004-docker-2c-2g-11930 sshd[6644]: Invalid user jenkins from 10.30.168.15 port 34170 Dec 1 14:02:39 prd-ubuntu2004-docker-2c-2g-11930 sshd[6644]: Received disconnect from 10.30.168.15 port 34170:11: Closed due to user request. [preauth] Dec 1 14:02:39 prd-ubuntu2004-docker-2c-2g-11930 sshd[6644]: Disconnected from invalid user jenkins 10.30.168.15 port 34170 [preauth] Dec 1 14:02:41 prd-ubuntu2004-docker-2c-2g-11930 sshd[8006]: Invalid user jenkins from 10.30.168.15 port 34174 Dec 1 14:02:41 prd-ubuntu2004-docker-2c-2g-11930 sshd[8006]: Received disconnect from 10.30.168.15 port 34174:11: Closed due to user request. [preauth] Dec 1 14:02:41 prd-ubuntu2004-docker-2c-2g-11930 sshd[8006]: Disconnected from invalid user jenkins 10.30.168.15 port 34174 [preauth] Dec 1 14:02:45 prd-ubuntu2004-docker-2c-2g-11930 sshd[9422]: Invalid user jenkins from 10.30.168.15 port 34178 Dec 1 14:02:45 prd-ubuntu2004-docker-2c-2g-11930 sshd[9422]: Received disconnect from 10.30.168.15 port 34178:11: Closed due to user request. [preauth] Dec 1 14:02:45 prd-ubuntu2004-docker-2c-2g-11930 sshd[9422]: Disconnected from invalid user jenkins 10.30.168.15 port 34178 [preauth] Dec 1 14:02:48 prd-ubuntu2004-docker-2c-2g-11930 sshd[10843]: Invalid user jenkins from 10.30.168.15 port 34186 Dec 1 14:02:48 prd-ubuntu2004-docker-2c-2g-11930 sshd[10843]: Received disconnect from 10.30.168.15 port 34186:11: Closed due to user request. [preauth] Dec 1 14:02:48 prd-ubuntu2004-docker-2c-2g-11930 sshd[10843]: Disconnected from invalid user jenkins 10.30.168.15 port 34186 [preauth] Dec 1 14:02:50 prd-ubuntu2004-docker-2c-2g-11930 sshd[11957]: Invalid user jenkins from 10.30.168.15 port 34190 Dec 1 14:02:51 prd-ubuntu2004-docker-2c-2g-11930 sshd[11957]: Received disconnect from 10.30.168.15 port 34190:11: Closed due to user request. [preauth] Dec 1 14:02:51 prd-ubuntu2004-docker-2c-2g-11930 sshd[11957]: Disconnected from invalid user jenkins 10.30.168.15 port 34190 [preauth] Dec 1 14:02:53 prd-ubuntu2004-docker-2c-2g-11930 sshd[12649]: Invalid user jenkins from 10.30.168.15 port 34192 Dec 1 14:02:53 prd-ubuntu2004-docker-2c-2g-11930 sshd[12649]: Received disconnect from 10.30.168.15 port 34192:11: Closed due to user request. [preauth] Dec 1 14:02:53 prd-ubuntu2004-docker-2c-2g-11930 sshd[12649]: Disconnected from invalid user jenkins 10.30.168.15 port 34192 [preauth] Dec 1 14:02:54 prd-ubuntu2004-docker-2c-2g-11930 useradd[13059]: new group: name=jenkins, GID=1001 Dec 1 14:02:54 prd-ubuntu2004-docker-2c-2g-11930 useradd[13059]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash, from=none Dec 1 14:02:54 prd-ubuntu2004-docker-2c-2g-11930 usermod[13092]: add 'jenkins' to group 'docker' Dec 1 14:02:54 prd-ubuntu2004-docker-2c-2g-11930 usermod[13092]: add 'jenkins' to shadow group 'docker' Dec 1 14:02:56 prd-ubuntu2004-docker-2c-2g-11930 sshd[13755]: Accepted publickey for jenkins from 10.30.168.15 port 34194 ssh2: RSA SHA256:BBsm4mRgG5V0fGum4Y1Rmy/vs16stdRVhwvexlLUhUs Dec 1 14:02:56 prd-ubuntu2004-docker-2c-2g-11930 sshd[13755]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Dec 1 14:02:56 prd-ubuntu2004-docker-2c-2g-11930 systemd-logind[727]: New session 1 of user jenkins. Dec 1 14:02:56 prd-ubuntu2004-docker-2c-2g-11930 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Dec 1 14:03:02 prd-ubuntu2004-docker-2c-2g-11930 CRON[16010]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 1 14:03:02 prd-ubuntu2004-docker-2c-2g-11930 CRON[16010]: pam_unix(cron:session): session closed for user root Dec 1 14:04:01 prd-ubuntu2004-docker-2c-2g-11930 CRON[28493]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 1 14:04:01 prd-ubuntu2004-docker-2c-2g-11930 CRON[28493]: pam_unix(cron:session): session closed for user root Dec 1 14:05:01 prd-ubuntu2004-docker-2c-2g-11930 CRON[28717]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 1 14:05:01 prd-ubuntu2004-docker-2c-2g-11930 CRON[28717]: pam_unix(cron:session): session closed for user root Dec 1 14:06:01 prd-ubuntu2004-docker-2c-2g-11930 CRON[28783]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 1 14:06:01 prd-ubuntu2004-docker-2c-2g-11930 CRON[28783]: pam_unix(cron:session): session closed for user root Dec 1 14:07:01 prd-ubuntu2004-docker-2c-2g-11930 CRON[28787]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 1 14:07:01 prd-ubuntu2004-docker-2c-2g-11930 CRON[28787]: pam_unix(cron:session): session closed for user root Dec 1 14:07:36 prd-ubuntu2004-docker-2c-2g-11930 systemd-logind[727]: Watching system buttons on /dev/input/event0 (Power Button) Dec 1 14:07:36 prd-ubuntu2004-docker-2c-2g-11930 systemd-logind[727]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Dec 1 14:08:01 prd-ubuntu2004-docker-2c-2g-11930 CRON[29768]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 1 14:08:01 prd-ubuntu2004-docker-2c-2g-11930 CRON[29768]: pam_unix(cron:session): session closed for user root Dec 1 14:09:01 prd-ubuntu2004-docker-2c-2g-11930 CRON[29843]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 1 14:09:01 prd-ubuntu2004-docker-2c-2g-11930 CRON[29843]: pam_unix(cron:session): session closed for user root Dec 1 14:10:01 prd-ubuntu2004-docker-2c-2g-11930 CRON[29846]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 1 14:10:01 prd-ubuntu2004-docker-2c-2g-11930 CRON[29846]: pam_unix(cron:session): session closed for user root Dec 1 14:11:01 prd-ubuntu2004-docker-2c-2g-11930 CRON[29876]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 1 14:11:01 prd-ubuntu2004-docker-2c-2g-11930 CRON[29876]: pam_unix(cron:session): session closed for user root Dec 1 14:12:01 prd-ubuntu2004-docker-2c-2g-11930 CRON[29949]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 1 14:12:01 prd-ubuntu2004-docker-2c-2g-11930 CRON[29949]: pam_unix(cron:session): session closed for user root Dec 1 14:13:01 prd-ubuntu2004-docker-2c-2g-11930 CRON[29987]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 1 14:13:01 prd-ubuntu2004-docker-2c-2g-11930 CRON[29987]: pam_unix(cron:session): session closed for user root Dec 1 14:14:01 prd-ubuntu2004-docker-2c-2g-11930 CRON[30067]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 1 14:14:01 prd-ubuntu2004-docker-2c-2g-11930 CRON[30067]: pam_unix(cron:session): session closed for user root Dec 1 14:15:01 prd-ubuntu2004-docker-2c-2g-11930 CRON[30134]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 1 14:15:01 prd-ubuntu2004-docker-2c-2g-11930 CRON[30134]: pam_unix(cron:session): session closed for user root Dec 1 14:16:01 prd-ubuntu2004-docker-2c-2g-11930 CRON[30195]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 1 14:16:01 prd-ubuntu2004-docker-2c-2g-11930 CRON[30195]: pam_unix(cron:session): session closed for user root Dec 1 14:17:01 prd-ubuntu2004-docker-2c-2g-11930 CRON[30293]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 1 14:17:01 prd-ubuntu2004-docker-2c-2g-11930 CRON[30292]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 1 14:17:01 prd-ubuntu2004-docker-2c-2g-11930 CRON[30292]: pam_unix(cron:session): session closed for user root Dec 1 14:17:01 prd-ubuntu2004-docker-2c-2g-11930 CRON[30293]: pam_unix(cron:session): session closed for user root Dec 1 14:18:01 prd-ubuntu2004-docker-2c-2g-11930 CRON[30352]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 1 14:18:01 prd-ubuntu2004-docker-2c-2g-11930 CRON[30352]: pam_unix(cron:session): session closed for user root Dec 1 14:19:01 prd-ubuntu2004-docker-2c-2g-11930 CRON[30357]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 1 14:19:01 prd-ubuntu2004-docker-2c-2g-11930 CRON[30357]: pam_unix(cron:session): session closed for user root Dec 1 14:20:01 prd-ubuntu2004-docker-2c-2g-11930 CRON[30367]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 1 14:20:01 prd-ubuntu2004-docker-2c-2g-11930 CRON[30367]: pam_unix(cron:session): session closed for user root Dec 1 14:21:01 prd-ubuntu2004-docker-2c-2g-11930 CRON[30380]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 1 14:21:01 prd-ubuntu2004-docker-2c-2g-11930 CRON[30380]: pam_unix(cron:session): session closed for user root Dec 1 14:22:01 prd-ubuntu2004-docker-2c-2g-11930 CRON[30383]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 1 14:22:01 prd-ubuntu2004-docker-2c-2g-11930 CRON[30383]: pam_unix(cron:session): session closed for user root Dec 1 14:23:01 prd-ubuntu2004-docker-2c-2g-11930 CRON[30397]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 1 14:23:01 prd-ubuntu2004-docker-2c-2g-11930 CRON[30397]: pam_unix(cron:session): session closed for user root Dec 1 14:24:01 prd-ubuntu2004-docker-2c-2g-11930 CRON[30401]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 1 14:24:01 prd-ubuntu2004-docker-2c-2g-11930 CRON[30401]: pam_unix(cron:session): session closed for user root Dec 1 14:25:01 prd-ubuntu2004-docker-2c-2g-11930 CRON[30611]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 1 14:25:01 prd-ubuntu2004-docker-2c-2g-11930 CRON[30611]: pam_unix(cron:session): session closed for user root Dec 1 14:26:01 prd-ubuntu2004-docker-2c-2g-11930 CRON[30639]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 1 14:26:01 prd-ubuntu2004-docker-2c-2g-11930 CRON[30639]: pam_unix(cron:session): session closed for user root Dec 1 14:27:01 prd-ubuntu2004-docker-2c-2g-11930 CRON[30821]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 1 14:27:01 prd-ubuntu2004-docker-2c-2g-11930 CRON[30821]: pam_unix(cron:session): session closed for user root Dec 1 14:28:01 prd-ubuntu2004-docker-2c-2g-11930 CRON[31159]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 1 14:28:01 prd-ubuntu2004-docker-2c-2g-11930 CRON[31159]: pam_unix(cron:session): session closed for user root Dec 1 14:29:01 prd-ubuntu2004-docker-2c-2g-11930 CRON[31539]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 1 14:29:01 prd-ubuntu2004-docker-2c-2g-11930 CRON[31539]: pam_unix(cron:session): session closed for user root Dec 1 14:29:04 prd-ubuntu2004-docker-2c-2g-11930 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/builder-packer-merge-ubuntu-18.04-helm ; USER=root ; COMMAND=/usr/bin/cp /var/log/auth.log /tmp Dec 1 14:29:04 prd-ubuntu2004-docker-2c-2g-11930 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)