Mar 7 09:54:44 prd-ubuntu1804-docker-4c-4g-8310 passwd[914]: password for 'ubuntu' changed by 'root' Mar 7 09:54:44 prd-ubuntu1804-docker-4c-4g-8310 systemd-logind[986]: Watching system buttons on /dev/input/event0 (Power Button) Mar 7 09:54:44 prd-ubuntu1804-docker-4c-4g-8310 systemd-logind[986]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Mar 7 09:54:44 prd-ubuntu1804-docker-4c-4g-8310 systemd-logind[986]: New seat seat0. Mar 7 09:54:44 prd-ubuntu1804-docker-4c-4g-8310 sshd[1219]: Server listening on 0.0.0.0 port 22. Mar 7 09:54:44 prd-ubuntu1804-docker-4c-4g-8310 sshd[1219]: Server listening on :: port 22. Mar 7 09:54:46 prd-ubuntu1804-docker-4c-4g-8310 sshd[1393]: Did not receive identification string from 10.32.4.5 port 33776 Mar 7 09:54:52 prd-ubuntu1804-docker-4c-4g-8310 sshd[1494]: Invalid user jenkins from 10.32.4.5 port 33778 Mar 7 09:54:52 prd-ubuntu1804-docker-4c-4g-8310 sshd[1494]: Received disconnect from 10.32.4.5 port 33778:11: Closed due to user request. [preauth] Mar 7 09:54:52 prd-ubuntu1804-docker-4c-4g-8310 sshd[1494]: Disconnected from invalid user jenkins 10.32.4.5 port 33778 [preauth] Mar 7 09:54:54 prd-ubuntu1804-docker-4c-4g-8310 sshd[1498]: Invalid user jenkins from 10.32.4.5 port 33782 Mar 7 09:54:54 prd-ubuntu1804-docker-4c-4g-8310 sshd[1498]: Received disconnect from 10.32.4.5 port 33782:11: Closed due to user request. [preauth] Mar 7 09:54:54 prd-ubuntu1804-docker-4c-4g-8310 sshd[1498]: Disconnected from invalid user jenkins 10.32.4.5 port 33782 [preauth] Mar 7 09:54:56 prd-ubuntu1804-docker-4c-4g-8310 sshd[1500]: Invalid user jenkins from 10.32.4.5 port 33786 Mar 7 09:54:56 prd-ubuntu1804-docker-4c-4g-8310 sshd[1500]: Received disconnect from 10.32.4.5 port 33786:11: Closed due to user request. [preauth] Mar 7 09:54:56 prd-ubuntu1804-docker-4c-4g-8310 sshd[1500]: Disconnected from invalid user jenkins 10.32.4.5 port 33786 [preauth] Mar 7 09:54:58 prd-ubuntu1804-docker-4c-4g-8310 sshd[1502]: Invalid user jenkins from 10.32.4.5 port 33788 Mar 7 09:54:58 prd-ubuntu1804-docker-4c-4g-8310 sshd[1502]: Received disconnect from 10.32.4.5 port 33788:11: Closed due to user request. [preauth] Mar 7 09:54:58 prd-ubuntu1804-docker-4c-4g-8310 sshd[1502]: Disconnected from invalid user jenkins 10.32.4.5 port 33788 [preauth] Mar 7 09:55:00 prd-ubuntu1804-docker-4c-4g-8310 sshd[1504]: Invalid user jenkins from 10.32.4.5 port 33790 Mar 7 09:55:01 prd-ubuntu1804-docker-4c-4g-8310 sshd[1504]: Received disconnect from 10.32.4.5 port 33790:11: Closed due to user request. [preauth] Mar 7 09:55:01 prd-ubuntu1804-docker-4c-4g-8310 sshd[1504]: Disconnected from invalid user jenkins 10.32.4.5 port 33790 [preauth] Mar 7 09:55:01 prd-ubuntu1804-docker-4c-4g-8310 CRON[1506]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 7 09:55:01 prd-ubuntu1804-docker-4c-4g-8310 CRON[1506]: pam_unix(cron:session): session closed for user root Mar 7 09:55:03 prd-ubuntu1804-docker-4c-4g-8310 sshd[1515]: Invalid user jenkins from 10.32.4.5 port 33798 Mar 7 09:55:03 prd-ubuntu1804-docker-4c-4g-8310 sshd[1515]: Received disconnect from 10.32.4.5 port 33798:11: Closed due to user request. [preauth] Mar 7 09:55:03 prd-ubuntu1804-docker-4c-4g-8310 sshd[1515]: Disconnected from invalid user jenkins 10.32.4.5 port 33798 [preauth] Mar 7 09:55:05 prd-ubuntu1804-docker-4c-4g-8310 sshd[1517]: Invalid user jenkins from 10.32.4.5 port 33800 Mar 7 09:55:05 prd-ubuntu1804-docker-4c-4g-8310 sshd[1517]: Received disconnect from 10.32.4.5 port 33800:11: Closed due to user request. [preauth] Mar 7 09:55:05 prd-ubuntu1804-docker-4c-4g-8310 sshd[1517]: Disconnected from invalid user jenkins 10.32.4.5 port 33800 [preauth] Mar 7 09:55:07 prd-ubuntu1804-docker-4c-4g-8310 sshd[1647]: Invalid user jenkins from 10.32.4.5 port 33802 Mar 7 09:55:07 prd-ubuntu1804-docker-4c-4g-8310 sshd[1647]: Received disconnect from 10.32.4.5 port 33802:11: Closed due to user request. [preauth] Mar 7 09:55:07 prd-ubuntu1804-docker-4c-4g-8310 sshd[1647]: Disconnected from invalid user jenkins 10.32.4.5 port 33802 [preauth] Mar 7 09:55:09 prd-ubuntu1804-docker-4c-4g-8310 sshd[1758]: Invalid user jenkins from 10.32.4.5 port 33804 Mar 7 09:55:09 prd-ubuntu1804-docker-4c-4g-8310 sshd[1758]: Received disconnect from 10.32.4.5 port 33804:11: Closed due to user request. [preauth] Mar 7 09:55:09 prd-ubuntu1804-docker-4c-4g-8310 sshd[1758]: Disconnected from invalid user jenkins 10.32.4.5 port 33804 [preauth] Mar 7 09:55:11 prd-ubuntu1804-docker-4c-4g-8310 sshd[1795]: Invalid user jenkins from 10.32.4.5 port 33806 Mar 7 09:55:11 prd-ubuntu1804-docker-4c-4g-8310 sshd[1795]: Received disconnect from 10.32.4.5 port 33806:11: Closed due to user request. [preauth] Mar 7 09:55:11 prd-ubuntu1804-docker-4c-4g-8310 sshd[1795]: Disconnected from invalid user jenkins 10.32.4.5 port 33806 [preauth] Mar 7 09:55:13 prd-ubuntu1804-docker-4c-4g-8310 sshd[1799]: Invalid user jenkins from 10.32.4.5 port 33810 Mar 7 09:55:13 prd-ubuntu1804-docker-4c-4g-8310 sshd[1799]: Received disconnect from 10.32.4.5 port 33810:11: Closed due to user request. [preauth] Mar 7 09:55:13 prd-ubuntu1804-docker-4c-4g-8310 sshd[1799]: Disconnected from invalid user jenkins 10.32.4.5 port 33810 [preauth] Mar 7 09:55:15 prd-ubuntu1804-docker-4c-4g-8310 useradd[1825]: new group: name=jenkins, GID=1001 Mar 7 09:55:15 prd-ubuntu1804-docker-4c-4g-8310 useradd[1825]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash Mar 7 09:55:15 prd-ubuntu1804-docker-4c-4g-8310 usermod[1832]: add 'jenkins' to group 'docker' Mar 7 09:55:15 prd-ubuntu1804-docker-4c-4g-8310 usermod[1832]: add 'jenkins' to shadow group 'docker' Mar 7 09:55:15 prd-ubuntu1804-docker-4c-4g-8310 sshd[1843]: Received disconnect from 10.32.4.5 port 33812:11: Closed due to user request. [preauth] Mar 7 09:55:15 prd-ubuntu1804-docker-4c-4g-8310 sshd[1843]: Disconnected from authenticating user jenkins 10.32.4.5 port 33812 [preauth] Mar 7 09:55:18 prd-ubuntu1804-docker-4c-4g-8310 sshd[1880]: Accepted publickey for jenkins from 10.32.4.5 port 33814 ssh2: RSA SHA256:MwkAMVxCcf5mjE3h3rXSsWkdX5TtX0v/kuPsZexJ1qI Mar 7 09:55:18 prd-ubuntu1804-docker-4c-4g-8310 sshd[1880]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Mar 7 09:55:18 prd-ubuntu1804-docker-4c-4g-8310 systemd-logind[986]: New session 2 of user jenkins. Mar 7 09:55:18 prd-ubuntu1804-docker-4c-4g-8310 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Mar 7 09:56:01 prd-ubuntu1804-docker-4c-4g-8310 CRON[2635]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 7 09:56:01 prd-ubuntu1804-docker-4c-4g-8310 CRON[2635]: pam_unix(cron:session): session closed for user root Mar 7 09:57:01 prd-ubuntu1804-docker-4c-4g-8310 CRON[2676]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 7 09:57:01 prd-ubuntu1804-docker-4c-4g-8310 CRON[2676]: pam_unix(cron:session): session closed for user root Mar 7 09:58:01 prd-ubuntu1804-docker-4c-4g-8310 CRON[4630]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 7 09:58:02 prd-ubuntu1804-docker-4c-4g-8310 CRON[4630]: pam_unix(cron:session): session closed for user root Mar 7 09:59:02 prd-ubuntu1804-docker-4c-4g-8310 CRON[8473]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 7 09:59:02 prd-ubuntu1804-docker-4c-4g-8310 CRON[8473]: pam_unix(cron:session): session closed for user root Mar 7 10:00:00 prd-ubuntu1804-docker-4c-4g-8310 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/ci-management-bldr-ubuntu16-c-go-docker-merge-master ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp