Dec 18 04:24:44 prd-ubuntu2004-docker-8c-8g-3838 passwd[753]: password for 'ubuntu' changed by 'root'
Dec 18 04:24:44 prd-ubuntu2004-docker-8c-8g-3838 systemd-logind[811]: New seat seat0.
Dec 18 04:24:44 prd-ubuntu2004-docker-8c-8g-3838 systemd-logind[811]: Watching system buttons on /dev/input/event0 (Power Button)
Dec 18 04:24:44 prd-ubuntu2004-docker-8c-8g-3838 systemd-logind[811]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard)
Dec 18 04:24:44 prd-ubuntu2004-docker-8c-8g-3838 sshd[868]: Server listening on 0.0.0.0 port 22.
Dec 18 04:24:44 prd-ubuntu2004-docker-8c-8g-3838 sshd[868]: Server listening on :: port 22.
Dec 18 04:24:48 prd-ubuntu2004-docker-8c-8g-3838 sshd[2278]: error: kex_exchange_identification: Connection closed by remote host
Dec 18 04:24:54 prd-ubuntu2004-docker-8c-8g-3838 sshd[3804]: Invalid user jenkins from 10.30.168.15 port 37220
Dec 18 04:24:54 prd-ubuntu2004-docker-8c-8g-3838 sshd[3804]: Received disconnect from 10.30.168.15 port 37220:11: Closed due to user request. [preauth]
Dec 18 04:24:54 prd-ubuntu2004-docker-8c-8g-3838 sshd[3804]: Disconnected from invalid user jenkins 10.30.168.15 port 37220 [preauth]
Dec 18 04:24:57 prd-ubuntu2004-docker-8c-8g-3838 sshd[4649]: Invalid user jenkins from 10.30.168.15 port 37222
Dec 18 04:24:57 prd-ubuntu2004-docker-8c-8g-3838 sshd[4649]: Received disconnect from 10.30.168.15 port 37222:11: Closed due to user request. [preauth]
Dec 18 04:24:57 prd-ubuntu2004-docker-8c-8g-3838 sshd[4649]: Disconnected from invalid user jenkins 10.30.168.15 port 37222 [preauth]
Dec 18 04:25:00 prd-ubuntu2004-docker-8c-8g-3838 sshd[5524]: Invalid user jenkins from 10.30.168.15 port 37226
Dec 18 04:25:00 prd-ubuntu2004-docker-8c-8g-3838 sshd[5524]: Received disconnect from 10.30.168.15 port 37226:11: Closed due to user request. [preauth]
Dec 18 04:25:00 prd-ubuntu2004-docker-8c-8g-3838 sshd[5524]: Disconnected from invalid user jenkins 10.30.168.15 port 37226 [preauth]
Dec 18 04:25:01 prd-ubuntu2004-docker-8c-8g-3838 CRON[5972]: pam_unix(cron:session): session opened for user root by (uid=0)
Dec 18 04:25:01 prd-ubuntu2004-docker-8c-8g-3838 CRON[5972]: pam_unix(cron:session): session closed for user root
Dec 18 04:25:03 prd-ubuntu2004-docker-8c-8g-3838 sshd[6549]: Invalid user jenkins from 10.30.168.15 port 37234
Dec 18 04:25:03 prd-ubuntu2004-docker-8c-8g-3838 sshd[6549]: Received disconnect from 10.30.168.15 port 37234:11: Closed due to user request. [preauth]
Dec 18 04:25:03 prd-ubuntu2004-docker-8c-8g-3838 sshd[6549]: Disconnected from invalid user jenkins 10.30.168.15 port 37234 [preauth]
Dec 18 04:25:06 prd-ubuntu2004-docker-8c-8g-3838 sshd[7531]: Invalid user jenkins from 10.30.168.15 port 37236
Dec 18 04:25:06 prd-ubuntu2004-docker-8c-8g-3838 sshd[7531]: Received disconnect from 10.30.168.15 port 37236:11: Closed due to user request. [preauth]
Dec 18 04:25:06 prd-ubuntu2004-docker-8c-8g-3838 sshd[7531]: Disconnected from invalid user jenkins 10.30.168.15 port 37236 [preauth]
Dec 18 04:25:09 prd-ubuntu2004-docker-8c-8g-3838 sshd[8384]: Invalid user jenkins from 10.30.168.15 port 37244
Dec 18 04:25:09 prd-ubuntu2004-docker-8c-8g-3838 sshd[8384]: Received disconnect from 10.30.168.15 port 37244:11: Closed due to user request. [preauth]
Dec 18 04:25:09 prd-ubuntu2004-docker-8c-8g-3838 sshd[8384]: Disconnected from invalid user jenkins 10.30.168.15 port 37244 [preauth]
Dec 18 04:25:10 prd-ubuntu2004-docker-8c-8g-3838 useradd[8817]: new group: name=jenkins, GID=1001
Dec 18 04:25:10 prd-ubuntu2004-docker-8c-8g-3838 useradd[8817]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash, from=none
Dec 18 04:25:10 prd-ubuntu2004-docker-8c-8g-3838 usermod[8847]: add 'jenkins' to group 'docker'
Dec 18 04:25:10 prd-ubuntu2004-docker-8c-8g-3838 usermod[8847]: add 'jenkins' to shadow group 'docker'
Dec 18 04:25:11 prd-ubuntu2004-docker-8c-8g-3838 sshd[9301]: Accepted publickey for jenkins from 10.30.168.15 port 37246 ssh2: RSA SHA256:BBsm4mRgG5V0fGum4Y1Rmy/vs16stdRVhwvexlLUhUs
Dec 18 04:25:11 prd-ubuntu2004-docker-8c-8g-3838 sshd[9301]: pam_unix(sshd:session): session opened for user jenkins by (uid=0)
Dec 18 04:25:11 prd-ubuntu2004-docker-8c-8g-3838 systemd-logind[811]: New session 2 of user jenkins.
Dec 18 04:25:11 prd-ubuntu2004-docker-8c-8g-3838 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0)
Dec 18 04:25:34 prd-ubuntu2004-docker-8c-8g-3838 sudo:  jenkins : TTY=unknown ; PWD=/w/workspace/distribution-merge-managed-titanium ; USER=root ; COMMAND=/usr/bin/update-alternatives --install /usr/bin/java java /usr/lib/jvm/java-21-openjdk-amd64/bin/java 1
Dec 18 04:25:34 prd-ubuntu2004-docker-8c-8g-3838 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Dec 18 04:25:34 prd-ubuntu2004-docker-8c-8g-3838 sudo: pam_unix(sudo:session): session closed for user root
Dec 18 04:25:34 prd-ubuntu2004-docker-8c-8g-3838 sudo:  jenkins : TTY=unknown ; PWD=/w/workspace/distribution-merge-managed-titanium ; USER=root ; COMMAND=/usr/bin/update-alternatives --install /usr/bin/javac javac /usr/lib/jvm/java-21-openjdk-amd64/bin/javac 1
Dec 18 04:25:34 prd-ubuntu2004-docker-8c-8g-3838 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Dec 18 04:25:34 prd-ubuntu2004-docker-8c-8g-3838 sudo: pam_unix(sudo:session): session closed for user root
Dec 18 04:25:34 prd-ubuntu2004-docker-8c-8g-3838 sudo:  jenkins : TTY=unknown ; PWD=/w/workspace/distribution-merge-managed-titanium ; USER=root ; COMMAND=/usr/bin/update-alternatives --install /usr/lib/jvm/java-openjdk java_sdk_openjdk /usr/lib/jvm/java-21-openjdk-amd64 1
Dec 18 04:25:34 prd-ubuntu2004-docker-8c-8g-3838 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Dec 18 04:25:34 prd-ubuntu2004-docker-8c-8g-3838 sudo: pam_unix(sudo:session): session closed for user root
Dec 18 04:25:34 prd-ubuntu2004-docker-8c-8g-3838 sudo:  jenkins : TTY=unknown ; PWD=/w/workspace/distribution-merge-managed-titanium ; USER=root ; COMMAND=/usr/bin/update-alternatives --set java /usr/lib/jvm/java-21-openjdk-amd64/bin/java
Dec 18 04:25:34 prd-ubuntu2004-docker-8c-8g-3838 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Dec 18 04:25:34 prd-ubuntu2004-docker-8c-8g-3838 sudo: pam_unix(sudo:session): session closed for user root
Dec 18 04:25:34 prd-ubuntu2004-docker-8c-8g-3838 sudo:  jenkins : TTY=unknown ; PWD=/w/workspace/distribution-merge-managed-titanium ; USER=root ; COMMAND=/usr/bin/update-alternatives --set javac /usr/lib/jvm/java-21-openjdk-amd64/bin/javac
Dec 18 04:25:34 prd-ubuntu2004-docker-8c-8g-3838 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Dec 18 04:25:34 prd-ubuntu2004-docker-8c-8g-3838 sudo: pam_unix(sudo:session): session closed for user root
Dec 18 04:25:34 prd-ubuntu2004-docker-8c-8g-3838 sudo:  jenkins : TTY=unknown ; PWD=/w/workspace/distribution-merge-managed-titanium ; USER=root ; COMMAND=/usr/bin/update-alternatives --set java_sdk_openjdk /usr/lib/jvm/java-21-openjdk-amd64
Dec 18 04:25:34 prd-ubuntu2004-docker-8c-8g-3838 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Dec 18 04:25:34 prd-ubuntu2004-docker-8c-8g-3838 sudo: pam_unix(sudo:session): session closed for user root
Dec 18 04:26:02 prd-ubuntu2004-docker-8c-8g-3838 CRON[23104]: pam_unix(cron:session): session opened for user root by (uid=0)
Dec 18 04:26:02 prd-ubuntu2004-docker-8c-8g-3838 CRON[23104]: pam_unix(cron:session): session closed for user root
Dec 18 04:27:01 prd-ubuntu2004-docker-8c-8g-3838 CRON[28417]: pam_unix(cron:session): session opened for user root by (uid=0)
Dec 18 04:27:02 prd-ubuntu2004-docker-8c-8g-3838 CRON[28417]: pam_unix(cron:session): session closed for user root
Dec 18 04:28:02 prd-ubuntu2004-docker-8c-8g-3838 CRON[29582]: pam_unix(cron:session): session opened for user root by (uid=0)
Dec 18 04:28:02 prd-ubuntu2004-docker-8c-8g-3838 CRON[29582]: pam_unix(cron:session): session closed for user root
Dec 18 04:29:01 prd-ubuntu2004-docker-8c-8g-3838 CRON[31252]: pam_unix(cron:session): session opened for user root by (uid=0)
Dec 18 04:29:01 prd-ubuntu2004-docker-8c-8g-3838 CRON[31252]: pam_unix(cron:session): session closed for user root
Dec 18 04:30:01 prd-ubuntu2004-docker-8c-8g-3838 CRON[32304]: pam_unix(cron:session): session opened for user root by (uid=0)
Dec 18 04:30:01 prd-ubuntu2004-docker-8c-8g-3838 CRON[32304]: pam_unix(cron:session): session closed for user root
Dec 18 04:31:01 prd-ubuntu2004-docker-8c-8g-3838 CRON[32897]: pam_unix(cron:session): session opened for user root by (uid=0)
Dec 18 04:31:01 prd-ubuntu2004-docker-8c-8g-3838 CRON[32897]: pam_unix(cron:session): session closed for user root
Dec 18 04:32:01 prd-ubuntu2004-docker-8c-8g-3838 CRON[32999]: pam_unix(cron:session): session opened for user root by (uid=0)
Dec 18 04:32:01 prd-ubuntu2004-docker-8c-8g-3838 CRON[32999]: pam_unix(cron:session): session closed for user root
Dec 18 04:33:01 prd-ubuntu2004-docker-8c-8g-3838 CRON[33050]: pam_unix(cron:session): session opened for user root by (uid=0)
Dec 18 04:33:01 prd-ubuntu2004-docker-8c-8g-3838 CRON[33050]: pam_unix(cron:session): session closed for user root
Dec 18 04:34:01 prd-ubuntu2004-docker-8c-8g-3838 CRON[39391]: pam_unix(cron:session): session opened for user root by (uid=0)
Dec 18 04:34:01 prd-ubuntu2004-docker-8c-8g-3838 CRON[39391]: pam_unix(cron:session): session closed for user root
Dec 18 04:35:01 prd-ubuntu2004-docker-8c-8g-3838 CRON[39826]: pam_unix(cron:session): session opened for user root by (uid=0)
Dec 18 04:35:01 prd-ubuntu2004-docker-8c-8g-3838 CRON[39826]: pam_unix(cron:session): session closed for user root
Dec 18 04:35:29 prd-ubuntu2004-docker-8c-8g-3838 sudo:  jenkins : TTY=unknown ; PWD=/w/workspace/distribution-merge-managed-titanium ; USER=root ; COMMAND=/usr/bin/cp /var/log/auth.log /tmp
Dec 18 04:35:29 prd-ubuntu2004-docker-8c-8g-3838 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)