Nov 19 00:57:36 prd-ubuntu2004-docker-4c-4g-8534 passwd[710]: password for 'ubuntu' changed by 'root' Nov 19 00:57:36 prd-ubuntu2004-docker-4c-4g-8534 systemd-logind[757]: New seat seat0. Nov 19 00:57:36 prd-ubuntu2004-docker-4c-4g-8534 systemd-logind[757]: Watching system buttons on /dev/input/event0 (Power Button) Nov 19 00:57:36 prd-ubuntu2004-docker-4c-4g-8534 systemd-logind[757]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Nov 19 00:57:36 prd-ubuntu2004-docker-4c-4g-8534 sshd[805]: Server listening on 0.0.0.0 port 22. Nov 19 00:57:36 prd-ubuntu2004-docker-4c-4g-8534 sshd[805]: Server listening on :: port 22. Nov 19 00:57:37 prd-ubuntu2004-docker-4c-4g-8534 sshd[1104]: error: kex_exchange_identification: Connection closed by remote host Nov 19 00:57:43 prd-ubuntu2004-docker-4c-4g-8534 sshd[2254]: Invalid user jenkins from 10.30.168.15 port 60328 Nov 19 00:57:43 prd-ubuntu2004-docker-4c-4g-8534 sshd[2254]: Received disconnect from 10.30.168.15 port 60328:11: Closed due to user request. [preauth] Nov 19 00:57:43 prd-ubuntu2004-docker-4c-4g-8534 sshd[2254]: Disconnected from invalid user jenkins 10.30.168.15 port 60328 [preauth] Nov 19 00:57:46 prd-ubuntu2004-docker-4c-4g-8534 sshd[2953]: Invalid user jenkins from 10.30.168.15 port 60348 Nov 19 00:57:46 prd-ubuntu2004-docker-4c-4g-8534 sshd[2953]: Received disconnect from 10.30.168.15 port 60348:11: Closed due to user request. [preauth] Nov 19 00:57:46 prd-ubuntu2004-docker-4c-4g-8534 sshd[2953]: Disconnected from invalid user jenkins 10.30.168.15 port 60348 [preauth] Nov 19 00:57:49 prd-ubuntu2004-docker-4c-4g-8534 sshd[3833]: Invalid user jenkins from 10.30.168.15 port 60358 Nov 19 00:57:50 prd-ubuntu2004-docker-4c-4g-8534 sshd[3833]: Received disconnect from 10.30.168.15 port 60358:11: Closed due to user request. [preauth] Nov 19 00:57:50 prd-ubuntu2004-docker-4c-4g-8534 sshd[3833]: Disconnected from invalid user jenkins 10.30.168.15 port 60358 [preauth] Nov 19 00:57:54 prd-ubuntu2004-docker-4c-4g-8534 sshd[4820]: Invalid user jenkins from 10.30.168.15 port 60370 Nov 19 00:57:54 prd-ubuntu2004-docker-4c-4g-8534 sshd[4820]: Received disconnect from 10.30.168.15 port 60370:11: Closed due to user request. [preauth] Nov 19 00:57:54 prd-ubuntu2004-docker-4c-4g-8534 sshd[4820]: Disconnected from invalid user jenkins 10.30.168.15 port 60370 [preauth] Nov 19 00:57:58 prd-ubuntu2004-docker-4c-4g-8534 sshd[5898]: Invalid user jenkins from 10.30.168.15 port 60384 Nov 19 00:57:58 prd-ubuntu2004-docker-4c-4g-8534 sshd[5898]: Received disconnect from 10.30.168.15 port 60384:11: Closed due to user request. [preauth] Nov 19 00:57:58 prd-ubuntu2004-docker-4c-4g-8534 sshd[5898]: Disconnected from invalid user jenkins 10.30.168.15 port 60384 [preauth] Nov 19 00:58:00 prd-ubuntu2004-docker-4c-4g-8534 CRON[7308]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 19 00:58:00 prd-ubuntu2004-docker-4c-4g-8534 CRON[7308]: pam_unix(cron:session): session closed for user root Nov 19 00:58:00 prd-ubuntu2004-docker-4c-4g-8534 sshd[7315]: Invalid user jenkins from 10.30.168.15 port 60394 Nov 19 00:58:00 prd-ubuntu2004-docker-4c-4g-8534 sshd[7315]: Received disconnect from 10.30.168.15 port 60394:11: Closed due to user request. [preauth] Nov 19 00:58:00 prd-ubuntu2004-docker-4c-4g-8534 sshd[7315]: Disconnected from invalid user jenkins 10.30.168.15 port 60394 [preauth] Nov 19 00:58:04 prd-ubuntu2004-docker-4c-4g-8534 sshd[8447]: Invalid user jenkins from 10.30.168.15 port 60406 Nov 19 00:58:04 prd-ubuntu2004-docker-4c-4g-8534 sshd[8447]: Received disconnect from 10.30.168.15 port 60406:11: Closed due to user request. [preauth] Nov 19 00:58:04 prd-ubuntu2004-docker-4c-4g-8534 sshd[8447]: Disconnected from invalid user jenkins 10.30.168.15 port 60406 [preauth] Nov 19 00:58:07 prd-ubuntu2004-docker-4c-4g-8534 sshd[9206]: Invalid user jenkins from 10.30.168.15 port 60412 Nov 19 00:58:07 prd-ubuntu2004-docker-4c-4g-8534 sshd[9206]: Received disconnect from 10.30.168.15 port 60412:11: Closed due to user request. [preauth] Nov 19 00:58:07 prd-ubuntu2004-docker-4c-4g-8534 sshd[9206]: Disconnected from invalid user jenkins 10.30.168.15 port 60412 [preauth] Nov 19 00:58:09 prd-ubuntu2004-docker-4c-4g-8534 useradd[9812]: new group: name=jenkins, GID=1001 Nov 19 00:58:09 prd-ubuntu2004-docker-4c-4g-8534 useradd[9812]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash, from=none Nov 19 00:58:09 prd-ubuntu2004-docker-4c-4g-8534 usermod[9878]: add 'jenkins' to group 'docker' Nov 19 00:58:09 prd-ubuntu2004-docker-4c-4g-8534 usermod[9878]: add 'jenkins' to shadow group 'docker' Nov 19 00:58:11 prd-ubuntu2004-docker-4c-4g-8534 sshd[10161]: Accepted publickey for jenkins from 10.30.168.15 port 60430 ssh2: RSA SHA256:BBsm4mRgG5V0fGum4Y1Rmy/vs16stdRVhwvexlLUhUs Nov 19 00:58:11 prd-ubuntu2004-docker-4c-4g-8534 sshd[10161]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Nov 19 00:58:11 prd-ubuntu2004-docker-4c-4g-8534 systemd-logind[757]: New session 2 of user jenkins. Nov 19 00:58:11 prd-ubuntu2004-docker-4c-4g-8534 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Nov 19 00:58:21 prd-ubuntu2004-docker-4c-4g-8534 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/distribution-csit-managed-scandium ; USER=root ; COMMAND=/usr/bin/update-alternatives --install /usr/bin/java java /usr/lib/jvm/java-21-openjdk-amd64/bin/java 1 Nov 19 00:58:21 prd-ubuntu2004-docker-4c-4g-8534 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Nov 19 00:58:21 prd-ubuntu2004-docker-4c-4g-8534 sudo: pam_unix(sudo:session): session closed for user root Nov 19 00:58:21 prd-ubuntu2004-docker-4c-4g-8534 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/distribution-csit-managed-scandium ; USER=root ; COMMAND=/usr/bin/update-alternatives --install /usr/bin/javac javac /usr/lib/jvm/java-21-openjdk-amd64/bin/javac 1 Nov 19 00:58:21 prd-ubuntu2004-docker-4c-4g-8534 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Nov 19 00:58:21 prd-ubuntu2004-docker-4c-4g-8534 sudo: pam_unix(sudo:session): session closed for user root Nov 19 00:58:21 prd-ubuntu2004-docker-4c-4g-8534 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/distribution-csit-managed-scandium ; USER=root ; COMMAND=/usr/bin/update-alternatives --install /usr/lib/jvm/java-openjdk java_sdk_openjdk /usr/lib/jvm/java-21-openjdk-amd64 1 Nov 19 00:58:21 prd-ubuntu2004-docker-4c-4g-8534 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Nov 19 00:58:21 prd-ubuntu2004-docker-4c-4g-8534 sudo: pam_unix(sudo:session): session closed for user root Nov 19 00:58:21 prd-ubuntu2004-docker-4c-4g-8534 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/distribution-csit-managed-scandium ; USER=root ; COMMAND=/usr/bin/update-alternatives --set java /usr/lib/jvm/java-21-openjdk-amd64/bin/java Nov 19 00:58:21 prd-ubuntu2004-docker-4c-4g-8534 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Nov 19 00:58:21 prd-ubuntu2004-docker-4c-4g-8534 sudo: pam_unix(sudo:session): session closed for user root Nov 19 00:58:21 prd-ubuntu2004-docker-4c-4g-8534 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/distribution-csit-managed-scandium ; USER=root ; COMMAND=/usr/bin/update-alternatives --set javac /usr/lib/jvm/java-21-openjdk-amd64/bin/javac Nov 19 00:58:21 prd-ubuntu2004-docker-4c-4g-8534 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Nov 19 00:58:21 prd-ubuntu2004-docker-4c-4g-8534 sudo: pam_unix(sudo:session): session closed for user root Nov 19 00:58:21 prd-ubuntu2004-docker-4c-4g-8534 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/distribution-csit-managed-scandium ; USER=root ; COMMAND=/usr/bin/update-alternatives --set java_sdk_openjdk /usr/lib/jvm/java-21-openjdk-amd64 Nov 19 00:58:21 prd-ubuntu2004-docker-4c-4g-8534 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Nov 19 00:58:22 prd-ubuntu2004-docker-4c-4g-8534 sudo: pam_unix(sudo:session): session closed for user root Nov 19 00:59:01 prd-ubuntu2004-docker-4c-4g-8534 CRON[23000]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 19 00:59:01 prd-ubuntu2004-docker-4c-4g-8534 CRON[23000]: pam_unix(cron:session): session closed for user root Nov 19 01:00:01 prd-ubuntu2004-docker-4c-4g-8534 CRON[29343]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 19 01:00:01 prd-ubuntu2004-docker-4c-4g-8534 CRON[29343]: pam_unix(cron:session): session closed for user root Nov 19 01:00:34 prd-ubuntu2004-docker-4c-4g-8534 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/distribution-csit-managed-scandium ; USER=root ; COMMAND=/usr/bin/cp /var/log/auth.log /tmp Nov 19 01:00:34 prd-ubuntu2004-docker-4c-4g-8534 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)