Jul 4 09:54:45 prd-ubuntu1804-docker-4c-4g-4965 passwd[954]: password for 'ubuntu' changed by 'root' Jul 4 09:54:45 prd-ubuntu1804-docker-4c-4g-4965 systemd-logind[1084]: Watching system buttons on /dev/input/event0 (Power Button) Jul 4 09:54:45 prd-ubuntu1804-docker-4c-4g-4965 systemd-logind[1084]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Jul 4 09:54:45 prd-ubuntu1804-docker-4c-4g-4965 systemd-logind[1084]: New seat seat0. Jul 4 09:54:45 prd-ubuntu1804-docker-4c-4g-4965 sshd[1303]: Server listening on 0.0.0.0 port 22. Jul 4 09:54:45 prd-ubuntu1804-docker-4c-4g-4965 sshd[1303]: Server listening on :: port 22. Jul 4 09:54:47 prd-ubuntu1804-docker-4c-4g-4965 sshd[1494]: Did not receive identification string from 10.32.4.5 port 54686 Jul 4 09:54:53 prd-ubuntu1804-docker-4c-4g-4965 sshd[1566]: Invalid user jenkins from 10.32.4.5 port 54688 Jul 4 09:54:53 prd-ubuntu1804-docker-4c-4g-4965 sshd[1566]: Received disconnect from 10.32.4.5 port 54688:11: Closed due to user request. [preauth] Jul 4 09:54:53 prd-ubuntu1804-docker-4c-4g-4965 sshd[1566]: Disconnected from invalid user jenkins 10.32.4.5 port 54688 [preauth] Jul 4 09:54:55 prd-ubuntu1804-docker-4c-4g-4965 sshd[1570]: Invalid user jenkins from 10.32.4.5 port 54690 Jul 4 09:54:55 prd-ubuntu1804-docker-4c-4g-4965 sshd[1570]: Received disconnect from 10.32.4.5 port 54690:11: Closed due to user request. [preauth] Jul 4 09:54:55 prd-ubuntu1804-docker-4c-4g-4965 sshd[1570]: Disconnected from invalid user jenkins 10.32.4.5 port 54690 [preauth] Jul 4 09:54:57 prd-ubuntu1804-docker-4c-4g-4965 sshd[1572]: Invalid user jenkins from 10.32.4.5 port 54692 Jul 4 09:54:57 prd-ubuntu1804-docker-4c-4g-4965 sshd[1572]: Received disconnect from 10.32.4.5 port 54692:11: Closed due to user request. [preauth] Jul 4 09:54:57 prd-ubuntu1804-docker-4c-4g-4965 sshd[1572]: Disconnected from invalid user jenkins 10.32.4.5 port 54692 [preauth] Jul 4 09:54:59 prd-ubuntu1804-docker-4c-4g-4965 sshd[1574]: Invalid user jenkins from 10.32.4.5 port 54694 Jul 4 09:54:59 prd-ubuntu1804-docker-4c-4g-4965 sshd[1574]: Received disconnect from 10.32.4.5 port 54694:11: Closed due to user request. [preauth] Jul 4 09:54:59 prd-ubuntu1804-docker-4c-4g-4965 sshd[1574]: Disconnected from invalid user jenkins 10.32.4.5 port 54694 [preauth] Jul 4 09:55:01 prd-ubuntu1804-docker-4c-4g-4965 CRON[1577]: pam_unix(cron:session): session opened for user root by (uid=0) Jul 4 09:55:01 prd-ubuntu1804-docker-4c-4g-4965 CRON[1577]: pam_unix(cron:session): session closed for user root Jul 4 09:55:01 prd-ubuntu1804-docker-4c-4g-4965 sshd[1584]: Invalid user jenkins from 10.32.4.5 port 54700 Jul 4 09:55:01 prd-ubuntu1804-docker-4c-4g-4965 sshd[1584]: Received disconnect from 10.32.4.5 port 54700:11: Closed due to user request. [preauth] Jul 4 09:55:01 prd-ubuntu1804-docker-4c-4g-4965 sshd[1584]: Disconnected from invalid user jenkins 10.32.4.5 port 54700 [preauth] Jul 4 09:55:03 prd-ubuntu1804-docker-4c-4g-4965 sshd[1586]: Invalid user jenkins from 10.32.4.5 port 54706 Jul 4 09:55:03 prd-ubuntu1804-docker-4c-4g-4965 sshd[1586]: Received disconnect from 10.32.4.5 port 54706:11: Closed due to user request. [preauth] Jul 4 09:55:03 prd-ubuntu1804-docker-4c-4g-4965 sshd[1586]: Disconnected from invalid user jenkins 10.32.4.5 port 54706 [preauth] Jul 4 09:55:05 prd-ubuntu1804-docker-4c-4g-4965 sshd[1588]: Invalid user jenkins from 10.32.4.5 port 54708 Jul 4 09:55:06 prd-ubuntu1804-docker-4c-4g-4965 sshd[1588]: Received disconnect from 10.32.4.5 port 54708:11: Closed due to user request. [preauth] Jul 4 09:55:06 prd-ubuntu1804-docker-4c-4g-4965 sshd[1588]: Disconnected from invalid user jenkins 10.32.4.5 port 54708 [preauth] Jul 4 09:55:08 prd-ubuntu1804-docker-4c-4g-4965 sshd[1801]: Invalid user jenkins from 10.32.4.5 port 54710 Jul 4 09:55:08 prd-ubuntu1804-docker-4c-4g-4965 sshd[1801]: Received disconnect from 10.32.4.5 port 54710:11: Closed due to user request. [preauth] Jul 4 09:55:08 prd-ubuntu1804-docker-4c-4g-4965 sshd[1801]: Disconnected from invalid user jenkins 10.32.4.5 port 54710 [preauth] Jul 4 09:55:10 prd-ubuntu1804-docker-4c-4g-4965 sshd[1849]: Invalid user jenkins from 10.32.4.5 port 54712 Jul 4 09:55:10 prd-ubuntu1804-docker-4c-4g-4965 sshd[1849]: Received disconnect from 10.32.4.5 port 54712:11: Closed due to user request. [preauth] Jul 4 09:55:10 prd-ubuntu1804-docker-4c-4g-4965 sshd[1849]: Disconnected from invalid user jenkins 10.32.4.5 port 54712 [preauth] Jul 4 09:55:12 prd-ubuntu1804-docker-4c-4g-4965 sshd[1867]: Invalid user jenkins from 10.32.4.5 port 54714 Jul 4 09:55:12 prd-ubuntu1804-docker-4c-4g-4965 sshd[1867]: Received disconnect from 10.32.4.5 port 54714:11: Closed due to user request. [preauth] Jul 4 09:55:12 prd-ubuntu1804-docker-4c-4g-4965 sshd[1867]: Disconnected from invalid user jenkins 10.32.4.5 port 54714 [preauth] Jul 4 09:55:14 prd-ubuntu1804-docker-4c-4g-4965 sshd[1871]: Invalid user jenkins from 10.32.4.5 port 54716 Jul 4 09:55:15 prd-ubuntu1804-docker-4c-4g-4965 sshd[1871]: Received disconnect from 10.32.4.5 port 54716:11: Closed due to user request. [preauth] Jul 4 09:55:15 prd-ubuntu1804-docker-4c-4g-4965 sshd[1871]: Disconnected from invalid user jenkins 10.32.4.5 port 54716 [preauth] Jul 4 09:55:15 prd-ubuntu1804-docker-4c-4g-4965 useradd[1878]: new group: name=jenkins, GID=1001 Jul 4 09:55:15 prd-ubuntu1804-docker-4c-4g-4965 useradd[1878]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash Jul 4 09:55:15 prd-ubuntu1804-docker-4c-4g-4965 usermod[1885]: add 'jenkins' to group 'docker' Jul 4 09:55:15 prd-ubuntu1804-docker-4c-4g-4965 usermod[1885]: add 'jenkins' to shadow group 'docker' Jul 4 09:55:17 prd-ubuntu1804-docker-4c-4g-4965 sshd[1929]: Accepted publickey for jenkins from 10.32.4.5 port 54720 ssh2: RSA SHA256:MwkAMVxCcf5mjE3h3rXSsWkdX5TtX0v/kuPsZexJ1qI Jul 4 09:55:17 prd-ubuntu1804-docker-4c-4g-4965 sshd[1929]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Jul 4 09:55:17 prd-ubuntu1804-docker-4c-4g-4965 systemd-logind[1084]: New session 2 of user jenkins. Jul 4 09:55:17 prd-ubuntu1804-docker-4c-4g-4965 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Jul 4 09:56:01 prd-ubuntu1804-docker-4c-4g-4965 CRON[2704]: pam_unix(cron:session): session opened for user root by (uid=0) Jul 4 09:56:01 prd-ubuntu1804-docker-4c-4g-4965 CRON[2704]: pam_unix(cron:session): session closed for user root Jul 4 09:57:01 prd-ubuntu1804-docker-4c-4g-4965 CRON[2751]: pam_unix(cron:session): session opened for user root by (uid=0) Jul 4 09:57:01 prd-ubuntu1804-docker-4c-4g-4965 CRON[2751]: pam_unix(cron:session): session closed for user root Jul 4 09:58:01 prd-ubuntu1804-docker-4c-4g-4965 CRON[3726]: pam_unix(cron:session): session opened for user root by (uid=0) Jul 4 09:58:01 prd-ubuntu1804-docker-4c-4g-4965 CRON[3726]: pam_unix(cron:session): session closed for user root Jul 4 09:59:01 prd-ubuntu1804-docker-4c-4g-4965 CRON[8362]: pam_unix(cron:session): session opened for user root by (uid=0) Jul 4 09:59:01 prd-ubuntu1804-docker-4c-4g-4965 CRON[8362]: pam_unix(cron:session): session closed for user root Jul 4 10:00:01 prd-ubuntu1804-docker-4c-4g-4965 CRON[9606]: pam_unix(cron:session): session opened for user root by (uid=0) Jul 4 10:00:01 prd-ubuntu1804-docker-4c-4g-4965 CRON[9606]: pam_unix(cron:session): session closed for user root Jul 4 10:00:16 prd-ubuntu1804-docker-4c-4g-4965 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/ci-management-bldr-ubuntu16-c-go-docker-merge-master ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp Jul 4 10:00:16 prd-ubuntu1804-docker-4c-4g-4965 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)