Jan 4 02:43:20 prd-ubuntu2004-docker-8c-8g-7378 passwd[758]: password for 'ubuntu' changed by 'root' Jan 4 02:43:20 prd-ubuntu2004-docker-8c-8g-7378 systemd-logind[831]: New seat seat0. Jan 4 02:43:20 prd-ubuntu2004-docker-8c-8g-7378 systemd-logind[831]: Watching system buttons on /dev/input/event0 (Power Button) Jan 4 02:43:20 prd-ubuntu2004-docker-8c-8g-7378 systemd-logind[831]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Jan 4 02:43:20 prd-ubuntu2004-docker-8c-8g-7378 sshd[870]: Server listening on 0.0.0.0 port 22. Jan 4 02:43:20 prd-ubuntu2004-docker-8c-8g-7378 sshd[870]: Server listening on :: port 22. Jan 4 02:43:20 prd-ubuntu2004-docker-8c-8g-7378 sshd[1066]: error: kex_exchange_identification: Connection closed by remote host Jan 4 02:43:25 prd-ubuntu2004-docker-8c-8g-7378 sshd[2016]: Invalid user jenkins from 10.30.168.15 port 39098 Jan 4 02:43:25 prd-ubuntu2004-docker-8c-8g-7378 sshd[2016]: Received disconnect from 10.30.168.15 port 39098:11: Closed due to user request. [preauth] Jan 4 02:43:25 prd-ubuntu2004-docker-8c-8g-7378 sshd[2016]: Disconnected from invalid user jenkins 10.30.168.15 port 39098 [preauth] Jan 4 02:43:28 prd-ubuntu2004-docker-8c-8g-7378 sshd[2522]: Invalid user jenkins from 10.30.168.15 port 39100 Jan 4 02:43:28 prd-ubuntu2004-docker-8c-8g-7378 sshd[2522]: Received disconnect from 10.30.168.15 port 39100:11: Closed due to user request. [preauth] Jan 4 02:43:28 prd-ubuntu2004-docker-8c-8g-7378 sshd[2522]: Disconnected from invalid user jenkins 10.30.168.15 port 39100 [preauth] Jan 4 02:43:31 prd-ubuntu2004-docker-8c-8g-7378 sshd[3380]: Invalid user jenkins from 10.30.168.15 port 39104 Jan 4 02:43:31 prd-ubuntu2004-docker-8c-8g-7378 sshd[3380]: Received disconnect from 10.30.168.15 port 39104:11: Closed due to user request. [preauth] Jan 4 02:43:31 prd-ubuntu2004-docker-8c-8g-7378 sshd[3380]: Disconnected from invalid user jenkins 10.30.168.15 port 39104 [preauth] Jan 4 02:43:34 prd-ubuntu2004-docker-8c-8g-7378 sshd[4217]: Invalid user jenkins from 10.30.168.15 port 39108 Jan 4 02:43:34 prd-ubuntu2004-docker-8c-8g-7378 sshd[4217]: Received disconnect from 10.30.168.15 port 39108:11: Closed due to user request. [preauth] Jan 4 02:43:34 prd-ubuntu2004-docker-8c-8g-7378 sshd[4217]: Disconnected from invalid user jenkins 10.30.168.15 port 39108 [preauth] Jan 4 02:43:37 prd-ubuntu2004-docker-8c-8g-7378 sshd[4890]: Invalid user jenkins from 10.30.168.15 port 39110 Jan 4 02:43:37 prd-ubuntu2004-docker-8c-8g-7378 sshd[4890]: Received disconnect from 10.30.168.15 port 39110:11: Closed due to user request. [preauth] Jan 4 02:43:37 prd-ubuntu2004-docker-8c-8g-7378 sshd[4890]: Disconnected from invalid user jenkins 10.30.168.15 port 39110 [preauth] Jan 4 02:43:40 prd-ubuntu2004-docker-8c-8g-7378 sshd[5426]: Invalid user jenkins from 10.30.168.15 port 39112 Jan 4 02:43:40 prd-ubuntu2004-docker-8c-8g-7378 sshd[5426]: Received disconnect from 10.30.168.15 port 39112:11: Closed due to user request. [preauth] Jan 4 02:43:40 prd-ubuntu2004-docker-8c-8g-7378 sshd[5426]: Disconnected from invalid user jenkins 10.30.168.15 port 39112 [preauth] Jan 4 02:43:43 prd-ubuntu2004-docker-8c-8g-7378 sshd[5816]: Invalid user jenkins from 10.30.168.15 port 39114 Jan 4 02:43:43 prd-ubuntu2004-docker-8c-8g-7378 sshd[5816]: Received disconnect from 10.30.168.15 port 39114:11: Closed due to user request. [preauth] Jan 4 02:43:43 prd-ubuntu2004-docker-8c-8g-7378 sshd[5816]: Disconnected from invalid user jenkins 10.30.168.15 port 39114 [preauth] Jan 4 02:43:46 prd-ubuntu2004-docker-8c-8g-7378 sshd[6453]: Invalid user jenkins from 10.30.168.15 port 39126 Jan 4 02:43:46 prd-ubuntu2004-docker-8c-8g-7378 sshd[6453]: Received disconnect from 10.30.168.15 port 39126:11: Closed due to user request. [preauth] Jan 4 02:43:46 prd-ubuntu2004-docker-8c-8g-7378 sshd[6453]: Disconnected from invalid user jenkins 10.30.168.15 port 39126 [preauth] Jan 4 02:43:49 prd-ubuntu2004-docker-8c-8g-7378 sshd[6925]: Invalid user jenkins from 10.30.168.15 port 39128 Jan 4 02:43:49 prd-ubuntu2004-docker-8c-8g-7378 sshd[6925]: Received disconnect from 10.30.168.15 port 39128:11: Closed due to user request. [preauth] Jan 4 02:43:49 prd-ubuntu2004-docker-8c-8g-7378 sshd[6925]: Disconnected from invalid user jenkins 10.30.168.15 port 39128 [preauth] Jan 4 02:43:52 prd-ubuntu2004-docker-8c-8g-7378 sshd[7414]: Invalid user jenkins from 10.30.168.15 port 39130 Jan 4 02:43:52 prd-ubuntu2004-docker-8c-8g-7378 sshd[7414]: Received disconnect from 10.30.168.15 port 39130:11: Closed due to user request. [preauth] Jan 4 02:43:52 prd-ubuntu2004-docker-8c-8g-7378 sshd[7414]: Disconnected from invalid user jenkins 10.30.168.15 port 39130 [preauth] Jan 4 02:43:55 prd-ubuntu2004-docker-8c-8g-7378 sshd[8030]: Invalid user jenkins from 10.30.168.15 port 39134 Jan 4 02:43:55 prd-ubuntu2004-docker-8c-8g-7378 sshd[8030]: Received disconnect from 10.30.168.15 port 39134:11: Closed due to user request. [preauth] Jan 4 02:43:55 prd-ubuntu2004-docker-8c-8g-7378 sshd[8030]: Disconnected from invalid user jenkins 10.30.168.15 port 39134 [preauth] Jan 4 02:43:58 prd-ubuntu2004-docker-8c-8g-7378 sshd[8457]: Invalid user jenkins from 10.30.168.15 port 39136 Jan 4 02:43:58 prd-ubuntu2004-docker-8c-8g-7378 sshd[8457]: Received disconnect from 10.30.168.15 port 39136:11: Closed due to user request. [preauth] Jan 4 02:43:58 prd-ubuntu2004-docker-8c-8g-7378 sshd[8457]: Disconnected from invalid user jenkins 10.30.168.15 port 39136 [preauth] Jan 4 02:44:01 prd-ubuntu2004-docker-8c-8g-7378 sshd[8959]: Invalid user jenkins from 10.30.168.15 port 39140 Jan 4 02:44:03 prd-ubuntu2004-docker-8c-8g-7378 CRON[8973]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 4 02:44:03 prd-ubuntu2004-docker-8c-8g-7378 CRON[8973]: pam_unix(cron:session): session closed for user root Jan 4 02:44:05 prd-ubuntu2004-docker-8c-8g-7378 sshd[8959]: Received disconnect from 10.30.168.15 port 39140:11: Closed due to user request. [preauth] Jan 4 02:44:05 prd-ubuntu2004-docker-8c-8g-7378 sshd[8959]: Disconnected from invalid user jenkins 10.30.168.15 port 39140 [preauth] Jan 4 02:44:07 prd-ubuntu2004-docker-8c-8g-7378 useradd[9611]: new group: name=jenkins, GID=1001 Jan 4 02:44:07 prd-ubuntu2004-docker-8c-8g-7378 useradd[9611]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash, from=none Jan 4 02:44:08 prd-ubuntu2004-docker-8c-8g-7378 usermod[9771]: add 'jenkins' to group 'docker' Jan 4 02:44:08 prd-ubuntu2004-docker-8c-8g-7378 usermod[9771]: add 'jenkins' to shadow group 'docker' Jan 4 02:44:08 prd-ubuntu2004-docker-8c-8g-7378 sshd[9706]: Received disconnect from 10.30.168.15 port 39144:11: Closed due to user request. [preauth] Jan 4 02:44:08 prd-ubuntu2004-docker-8c-8g-7378 sshd[9706]: Disconnected from authenticating user jenkins 10.30.168.15 port 39144 [preauth] Jan 4 02:44:11 prd-ubuntu2004-docker-8c-8g-7378 sshd[10326]: Accepted publickey for jenkins from 10.30.168.15 port 39146 ssh2: RSA SHA256:BBsm4mRgG5V0fGum4Y1Rmy/vs16stdRVhwvexlLUhUs Jan 4 02:44:11 prd-ubuntu2004-docker-8c-8g-7378 sshd[10326]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Jan 4 02:44:11 prd-ubuntu2004-docker-8c-8g-7378 systemd-logind[831]: New session 2 of user jenkins. Jan 4 02:44:11 prd-ubuntu2004-docker-8c-8g-7378 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Jan 4 02:44:39 prd-ubuntu2004-docker-8c-8g-7378 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/distribution-merge-managed-calcium ; USER=root ; COMMAND=/usr/bin/update-alternatives --install /usr/bin/java java /usr/lib/jvm/java-17-openjdk-amd64/bin/java 1 Jan 4 02:44:39 prd-ubuntu2004-docker-8c-8g-7378 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Jan 4 02:44:39 prd-ubuntu2004-docker-8c-8g-7378 sudo: pam_unix(sudo:session): session closed for user root Jan 4 02:44:39 prd-ubuntu2004-docker-8c-8g-7378 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/distribution-merge-managed-calcium ; USER=root ; COMMAND=/usr/bin/update-alternatives --install /usr/bin/javac javac /usr/lib/jvm/java-17-openjdk-amd64/bin/javac 1 Jan 4 02:44:39 prd-ubuntu2004-docker-8c-8g-7378 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Jan 4 02:44:40 prd-ubuntu2004-docker-8c-8g-7378 sudo: pam_unix(sudo:session): session closed for user root Jan 4 02:44:40 prd-ubuntu2004-docker-8c-8g-7378 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/distribution-merge-managed-calcium ; USER=root ; COMMAND=/usr/bin/update-alternatives --install /usr/lib/jvm/java-openjdk java_sdk_openjdk /usr/lib/jvm/java-17-openjdk-amd64 1 Jan 4 02:44:40 prd-ubuntu2004-docker-8c-8g-7378 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Jan 4 02:44:40 prd-ubuntu2004-docker-8c-8g-7378 sudo: pam_unix(sudo:session): session closed for user root Jan 4 02:44:40 prd-ubuntu2004-docker-8c-8g-7378 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/distribution-merge-managed-calcium ; USER=root ; COMMAND=/usr/bin/update-alternatives --set java /usr/lib/jvm/java-17-openjdk-amd64/bin/java Jan 4 02:44:40 prd-ubuntu2004-docker-8c-8g-7378 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Jan 4 02:44:40 prd-ubuntu2004-docker-8c-8g-7378 sudo: pam_unix(sudo:session): session closed for user root Jan 4 02:44:40 prd-ubuntu2004-docker-8c-8g-7378 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/distribution-merge-managed-calcium ; USER=root ; COMMAND=/usr/bin/update-alternatives --set javac /usr/lib/jvm/java-17-openjdk-amd64/bin/javac Jan 4 02:44:40 prd-ubuntu2004-docker-8c-8g-7378 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Jan 4 02:44:40 prd-ubuntu2004-docker-8c-8g-7378 sudo: pam_unix(sudo:session): session closed for user root Jan 4 02:44:40 prd-ubuntu2004-docker-8c-8g-7378 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/distribution-merge-managed-calcium ; USER=root ; COMMAND=/usr/bin/update-alternatives --set java_sdk_openjdk /usr/lib/jvm/java-17-openjdk-amd64 Jan 4 02:44:40 prd-ubuntu2004-docker-8c-8g-7378 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Jan 4 02:44:40 prd-ubuntu2004-docker-8c-8g-7378 sudo: pam_unix(sudo:session): session closed for user root Jan 4 02:45:01 prd-ubuntu2004-docker-8c-8g-7378 CRON[20517]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 4 02:45:01 prd-ubuntu2004-docker-8c-8g-7378 CRON[20517]: pam_unix(cron:session): session closed for user root Jan 4 02:46:01 prd-ubuntu2004-docker-8c-8g-7378 CRON[28443]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 4 02:46:01 prd-ubuntu2004-docker-8c-8g-7378 CRON[28443]: pam_unix(cron:session): session closed for user root Jan 4 02:47:01 prd-ubuntu2004-docker-8c-8g-7378 CRON[28812]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 4 02:47:01 prd-ubuntu2004-docker-8c-8g-7378 CRON[28812]: pam_unix(cron:session): session closed for user root Jan 4 02:48:01 prd-ubuntu2004-docker-8c-8g-7378 CRON[30294]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 4 02:48:01 prd-ubuntu2004-docker-8c-8g-7378 CRON[30294]: pam_unix(cron:session): session closed for user root Jan 4 02:49:01 prd-ubuntu2004-docker-8c-8g-7378 CRON[32734]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 4 02:49:01 prd-ubuntu2004-docker-8c-8g-7378 CRON[32734]: pam_unix(cron:session): session closed for user root Jan 4 02:50:01 prd-ubuntu2004-docker-8c-8g-7378 CRON[32871]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 4 02:50:01 prd-ubuntu2004-docker-8c-8g-7378 CRON[32871]: pam_unix(cron:session): session closed for user root Jan 4 02:51:01 prd-ubuntu2004-docker-8c-8g-7378 CRON[32883]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 4 02:51:01 prd-ubuntu2004-docker-8c-8g-7378 CRON[32883]: pam_unix(cron:session): session closed for user root Jan 4 02:52:01 prd-ubuntu2004-docker-8c-8g-7378 CRON[32962]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 4 02:52:01 prd-ubuntu2004-docker-8c-8g-7378 CRON[32962]: pam_unix(cron:session): session closed for user root Jan 4 02:53:01 prd-ubuntu2004-docker-8c-8g-7378 CRON[33018]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 4 02:53:01 prd-ubuntu2004-docker-8c-8g-7378 CRON[33018]: pam_unix(cron:session): session closed for user root Jan 4 02:54:01 prd-ubuntu2004-docker-8c-8g-7378 CRON[39643]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 4 02:54:01 prd-ubuntu2004-docker-8c-8g-7378 CRON[39643]: pam_unix(cron:session): session closed for user root Jan 4 02:55:01 prd-ubuntu2004-docker-8c-8g-7378 CRON[40097]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 4 02:55:01 prd-ubuntu2004-docker-8c-8g-7378 CRON[40097]: pam_unix(cron:session): session closed for user root Jan 4 02:55:11 prd-ubuntu2004-docker-8c-8g-7378 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/distribution-merge-managed-calcium ; USER=root ; COMMAND=/usr/bin/cp /var/log/auth.log /tmp Jan 4 02:55:11 prd-ubuntu2004-docker-8c-8g-7378 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)