Jan 29 06:59:50 prd-ubuntu2004-docker-8c-8g-6187 passwd[758]: password for 'ubuntu' changed by 'root' Jan 29 06:59:50 prd-ubuntu2004-docker-8c-8g-6187 sshd[836]: Server listening on 0.0.0.0 port 22. Jan 29 06:59:50 prd-ubuntu2004-docker-8c-8g-6187 sshd[836]: Server listening on :: port 22. Jan 29 06:59:50 prd-ubuntu2004-docker-8c-8g-6187 systemd-logind[826]: New seat seat0. Jan 29 06:59:50 prd-ubuntu2004-docker-8c-8g-6187 systemd-logind[826]: Watching system buttons on /dev/input/event0 (Power Button) Jan 29 06:59:50 prd-ubuntu2004-docker-8c-8g-6187 systemd-logind[826]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Jan 29 06:59:54 prd-ubuntu2004-docker-8c-8g-6187 sshd[2323]: error: kex_exchange_identification: Connection closed by remote host Jan 29 07:00:00 prd-ubuntu2004-docker-8c-8g-6187 sshd[3926]: Invalid user jenkins from 10.30.168.15 port 58872 Jan 29 07:00:00 prd-ubuntu2004-docker-8c-8g-6187 sshd[3926]: Received disconnect from 10.30.168.15 port 58872:11: Closed due to user request. [preauth] Jan 29 07:00:00 prd-ubuntu2004-docker-8c-8g-6187 sshd[3926]: Disconnected from invalid user jenkins 10.30.168.15 port 58872 [preauth] Jan 29 07:00:01 prd-ubuntu2004-docker-8c-8g-6187 CRON[4265]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 29 07:00:01 prd-ubuntu2004-docker-8c-8g-6187 CRON[4265]: pam_unix(cron:session): session closed for user root Jan 29 07:00:03 prd-ubuntu2004-docker-8c-8g-6187 sshd[4766]: Invalid user jenkins from 10.30.168.15 port 58884 Jan 29 07:00:03 prd-ubuntu2004-docker-8c-8g-6187 sshd[4766]: Received disconnect from 10.30.168.15 port 58884:11: Closed due to user request. [preauth] Jan 29 07:00:03 prd-ubuntu2004-docker-8c-8g-6187 sshd[4766]: Disconnected from invalid user jenkins 10.30.168.15 port 58884 [preauth] Jan 29 07:00:06 prd-ubuntu2004-docker-8c-8g-6187 sshd[5628]: Invalid user jenkins from 10.30.168.15 port 58886 Jan 29 07:00:06 prd-ubuntu2004-docker-8c-8g-6187 sshd[5628]: Received disconnect from 10.30.168.15 port 58886:11: Closed due to user request. [preauth] Jan 29 07:00:06 prd-ubuntu2004-docker-8c-8g-6187 sshd[5628]: Disconnected from invalid user jenkins 10.30.168.15 port 58886 [preauth] Jan 29 07:00:08 prd-ubuntu2004-docker-8c-8g-6187 sshd[6693]: Invalid user jenkins from 10.30.168.15 port 58890 Jan 29 07:00:09 prd-ubuntu2004-docker-8c-8g-6187 sshd[6693]: Received disconnect from 10.30.168.15 port 58890:11: Closed due to user request. [preauth] Jan 29 07:00:09 prd-ubuntu2004-docker-8c-8g-6187 sshd[6693]: Disconnected from invalid user jenkins 10.30.168.15 port 58890 [preauth] Jan 29 07:00:11 prd-ubuntu2004-docker-8c-8g-6187 sshd[7674]: Invalid user jenkins from 10.30.168.15 port 58892 Jan 29 07:00:11 prd-ubuntu2004-docker-8c-8g-6187 sshd[7674]: Received disconnect from 10.30.168.15 port 58892:11: Closed due to user request. [preauth] Jan 29 07:00:11 prd-ubuntu2004-docker-8c-8g-6187 sshd[7674]: Disconnected from invalid user jenkins 10.30.168.15 port 58892 [preauth] Jan 29 07:00:14 prd-ubuntu2004-docker-8c-8g-6187 sshd[8437]: Invalid user jenkins from 10.30.168.15 port 58894 Jan 29 07:00:14 prd-ubuntu2004-docker-8c-8g-6187 sshd[8437]: Received disconnect from 10.30.168.15 port 58894:11: Closed due to user request. [preauth] Jan 29 07:00:14 prd-ubuntu2004-docker-8c-8g-6187 sshd[8437]: Disconnected from invalid user jenkins 10.30.168.15 port 58894 [preauth] Jan 29 07:00:14 prd-ubuntu2004-docker-8c-8g-6187 useradd[8634]: new group: name=jenkins, GID=1001 Jan 29 07:00:14 prd-ubuntu2004-docker-8c-8g-6187 useradd[8634]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash, from=none Jan 29 07:00:14 prd-ubuntu2004-docker-8c-8g-6187 usermod[8667]: add 'jenkins' to group 'docker' Jan 29 07:00:14 prd-ubuntu2004-docker-8c-8g-6187 usermod[8667]: add 'jenkins' to shadow group 'docker' Jan 29 07:00:17 prd-ubuntu2004-docker-8c-8g-6187 sshd[9377]: Accepted publickey for jenkins from 10.30.168.15 port 58896 ssh2: RSA SHA256:BBsm4mRgG5V0fGum4Y1Rmy/vs16stdRVhwvexlLUhUs Jan 29 07:00:17 prd-ubuntu2004-docker-8c-8g-6187 sshd[9377]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Jan 29 07:00:17 prd-ubuntu2004-docker-8c-8g-6187 systemd-logind[826]: New session 2 of user jenkins. Jan 29 07:00:17 prd-ubuntu2004-docker-8c-8g-6187 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Jan 29 07:00:39 prd-ubuntu2004-docker-8c-8g-6187 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/distribution-merge-managed-titanium ; USER=root ; COMMAND=/usr/bin/update-alternatives --install /usr/bin/java java /usr/lib/jvm/java-21-openjdk-amd64/bin/java 1 Jan 29 07:00:39 prd-ubuntu2004-docker-8c-8g-6187 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Jan 29 07:00:39 prd-ubuntu2004-docker-8c-8g-6187 sudo: pam_unix(sudo:session): session closed for user root Jan 29 07:00:39 prd-ubuntu2004-docker-8c-8g-6187 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/distribution-merge-managed-titanium ; USER=root ; COMMAND=/usr/bin/update-alternatives --install /usr/bin/javac javac /usr/lib/jvm/java-21-openjdk-amd64/bin/javac 1 Jan 29 07:00:39 prd-ubuntu2004-docker-8c-8g-6187 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Jan 29 07:00:39 prd-ubuntu2004-docker-8c-8g-6187 sudo: pam_unix(sudo:session): session closed for user root Jan 29 07:00:39 prd-ubuntu2004-docker-8c-8g-6187 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/distribution-merge-managed-titanium ; USER=root ; COMMAND=/usr/bin/update-alternatives --install /usr/lib/jvm/java-openjdk java_sdk_openjdk /usr/lib/jvm/java-21-openjdk-amd64 1 Jan 29 07:00:39 prd-ubuntu2004-docker-8c-8g-6187 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Jan 29 07:00:39 prd-ubuntu2004-docker-8c-8g-6187 sudo: pam_unix(sudo:session): session closed for user root Jan 29 07:00:39 prd-ubuntu2004-docker-8c-8g-6187 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/distribution-merge-managed-titanium ; USER=root ; COMMAND=/usr/bin/update-alternatives --set java /usr/lib/jvm/java-21-openjdk-amd64/bin/java Jan 29 07:00:39 prd-ubuntu2004-docker-8c-8g-6187 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Jan 29 07:00:39 prd-ubuntu2004-docker-8c-8g-6187 sudo: pam_unix(sudo:session): session closed for user root Jan 29 07:00:39 prd-ubuntu2004-docker-8c-8g-6187 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/distribution-merge-managed-titanium ; USER=root ; COMMAND=/usr/bin/update-alternatives --set javac /usr/lib/jvm/java-21-openjdk-amd64/bin/javac Jan 29 07:00:39 prd-ubuntu2004-docker-8c-8g-6187 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Jan 29 07:00:39 prd-ubuntu2004-docker-8c-8g-6187 sudo: pam_unix(sudo:session): session closed for user root Jan 29 07:00:39 prd-ubuntu2004-docker-8c-8g-6187 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/distribution-merge-managed-titanium ; USER=root ; COMMAND=/usr/bin/update-alternatives --set java_sdk_openjdk /usr/lib/jvm/java-21-openjdk-amd64 Jan 29 07:00:39 prd-ubuntu2004-docker-8c-8g-6187 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Jan 29 07:00:39 prd-ubuntu2004-docker-8c-8g-6187 sudo: pam_unix(sudo:session): session closed for user root Jan 29 07:01:02 prd-ubuntu2004-docker-8c-8g-6187 CRON[21848]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 29 07:01:02 prd-ubuntu2004-docker-8c-8g-6187 CRON[21848]: pam_unix(cron:session): session closed for user root Jan 29 07:02:01 prd-ubuntu2004-docker-8c-8g-6187 CRON[28478]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 29 07:02:01 prd-ubuntu2004-docker-8c-8g-6187 CRON[28478]: pam_unix(cron:session): session closed for user root Jan 29 07:03:01 prd-ubuntu2004-docker-8c-8g-6187 CRON[30165]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 29 07:03:01 prd-ubuntu2004-docker-8c-8g-6187 CRON[30165]: pam_unix(cron:session): session closed for user root Jan 29 07:04:01 prd-ubuntu2004-docker-8c-8g-6187 CRON[31683]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 29 07:04:01 prd-ubuntu2004-docker-8c-8g-6187 CRON[31683]: pam_unix(cron:session): session closed for user root Jan 29 07:05:01 prd-ubuntu2004-docker-8c-8g-6187 CRON[31970]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 29 07:05:01 prd-ubuntu2004-docker-8c-8g-6187 CRON[31970]: pam_unix(cron:session): session closed for user root Jan 29 07:06:01 prd-ubuntu2004-docker-8c-8g-6187 CRON[32983]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 29 07:06:01 prd-ubuntu2004-docker-8c-8g-6187 CRON[32983]: pam_unix(cron:session): session closed for user root Jan 29 07:07:01 prd-ubuntu2004-docker-8c-8g-6187 CRON[33102]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 29 07:07:01 prd-ubuntu2004-docker-8c-8g-6187 CRON[33102]: pam_unix(cron:session): session closed for user root Jan 29 07:08:01 prd-ubuntu2004-docker-8c-8g-6187 CRON[33154]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 29 07:08:01 prd-ubuntu2004-docker-8c-8g-6187 CRON[33154]: pam_unix(cron:session): session closed for user root Jan 29 07:09:01 prd-ubuntu2004-docker-8c-8g-6187 CRON[39727]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 29 07:09:01 prd-ubuntu2004-docker-8c-8g-6187 CRON[39727]: pam_unix(cron:session): session closed for user root Jan 29 07:09:52 prd-ubuntu2004-docker-8c-8g-6187 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/distribution-merge-managed-titanium ; USER=root ; COMMAND=/usr/bin/cp /var/log/auth.log /tmp Jan 29 07:09:52 prd-ubuntu2004-docker-8c-8g-6187 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)