Dec 6 04:51:49 prd-ubuntu1804-docker-4c-4g-11049 passwd[951]: password for 'ubuntu' changed by 'root' Dec 6 04:51:49 prd-ubuntu1804-docker-4c-4g-11049 systemd-logind[1008]: Watching system buttons on /dev/input/event0 (Power Button) Dec 6 04:51:49 prd-ubuntu1804-docker-4c-4g-11049 systemd-logind[1008]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Dec 6 04:51:49 prd-ubuntu1804-docker-4c-4g-11049 systemd-logind[1008]: New seat seat0. Dec 6 04:51:49 prd-ubuntu1804-docker-4c-4g-11049 sshd[1262]: Server listening on 0.0.0.0 port 22. Dec 6 04:51:49 prd-ubuntu1804-docker-4c-4g-11049 sshd[1262]: Server listening on :: port 22. Dec 6 04:51:51 prd-ubuntu1804-docker-4c-4g-11049 sshd[1340]: Did not receive identification string from 10.32.4.5 port 32786 Dec 6 04:51:56 prd-ubuntu1804-docker-4c-4g-11049 sshd[1506]: Invalid user jenkins from 10.32.4.5 port 32790 Dec 6 04:51:56 prd-ubuntu1804-docker-4c-4g-11049 sshd[1506]: Received disconnect from 10.32.4.5 port 32790:11: Closed due to user request. [preauth] Dec 6 04:51:56 prd-ubuntu1804-docker-4c-4g-11049 sshd[1506]: Disconnected from invalid user jenkins 10.32.4.5 port 32790 [preauth] Dec 6 04:51:58 prd-ubuntu1804-docker-4c-4g-11049 sshd[1524]: Invalid user jenkins from 10.32.4.5 port 32792 Dec 6 04:51:58 prd-ubuntu1804-docker-4c-4g-11049 sshd[1524]: Received disconnect from 10.32.4.5 port 32792:11: Closed due to user request. [preauth] Dec 6 04:51:58 prd-ubuntu1804-docker-4c-4g-11049 sshd[1524]: Disconnected from invalid user jenkins 10.32.4.5 port 32792 [preauth] Dec 6 04:52:00 prd-ubuntu1804-docker-4c-4g-11049 sshd[1526]: Invalid user jenkins from 10.32.4.5 port 32800 Dec 6 04:52:00 prd-ubuntu1804-docker-4c-4g-11049 sshd[1526]: Received disconnect from 10.32.4.5 port 32800:11: Closed due to user request. [preauth] Dec 6 04:52:00 prd-ubuntu1804-docker-4c-4g-11049 sshd[1526]: Disconnected from invalid user jenkins 10.32.4.5 port 32800 [preauth] Dec 6 04:52:01 prd-ubuntu1804-docker-4c-4g-11049 CRON[1529]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 6 04:52:01 prd-ubuntu1804-docker-4c-4g-11049 CRON[1529]: pam_unix(cron:session): session closed for user root Dec 6 04:52:02 prd-ubuntu1804-docker-4c-4g-11049 sshd[1536]: Invalid user jenkins from 10.32.4.5 port 32802 Dec 6 04:52:02 prd-ubuntu1804-docker-4c-4g-11049 sshd[1536]: Received disconnect from 10.32.4.5 port 32802:11: Closed due to user request. [preauth] Dec 6 04:52:02 prd-ubuntu1804-docker-4c-4g-11049 sshd[1536]: Disconnected from invalid user jenkins 10.32.4.5 port 32802 [preauth] Dec 6 04:52:04 prd-ubuntu1804-docker-4c-4g-11049 sshd[1538]: Invalid user jenkins from 10.32.4.5 port 32804 Dec 6 04:52:04 prd-ubuntu1804-docker-4c-4g-11049 sshd[1538]: Received disconnect from 10.32.4.5 port 32804:11: Closed due to user request. [preauth] Dec 6 04:52:04 prd-ubuntu1804-docker-4c-4g-11049 sshd[1538]: Disconnected from invalid user jenkins 10.32.4.5 port 32804 [preauth] Dec 6 04:52:06 prd-ubuntu1804-docker-4c-4g-11049 sshd[1540]: Invalid user jenkins from 10.32.4.5 port 32806 Dec 6 04:52:06 prd-ubuntu1804-docker-4c-4g-11049 sshd[1540]: Received disconnect from 10.32.4.5 port 32806:11: Closed due to user request. [preauth] Dec 6 04:52:06 prd-ubuntu1804-docker-4c-4g-11049 sshd[1540]: Disconnected from invalid user jenkins 10.32.4.5 port 32806 [preauth] Dec 6 04:52:08 prd-ubuntu1804-docker-4c-4g-11049 sshd[1542]: Invalid user jenkins from 10.32.4.5 port 32810 Dec 6 04:52:08 prd-ubuntu1804-docker-4c-4g-11049 sshd[1542]: Received disconnect from 10.32.4.5 port 32810:11: Closed due to user request. [preauth] Dec 6 04:52:08 prd-ubuntu1804-docker-4c-4g-11049 sshd[1542]: Disconnected from invalid user jenkins 10.32.4.5 port 32810 [preauth] Dec 6 04:52:10 prd-ubuntu1804-docker-4c-4g-11049 sshd[1552]: Invalid user jenkins from 10.32.4.5 port 32812 Dec 6 04:52:10 prd-ubuntu1804-docker-4c-4g-11049 sshd[1552]: Received disconnect from 10.32.4.5 port 32812:11: Closed due to user request. [preauth] Dec 6 04:52:10 prd-ubuntu1804-docker-4c-4g-11049 sshd[1552]: Disconnected from invalid user jenkins 10.32.4.5 port 32812 [preauth] Dec 6 04:52:13 prd-ubuntu1804-docker-4c-4g-11049 sshd[1782]: Invalid user jenkins from 10.32.4.5 port 32814 Dec 6 04:52:13 prd-ubuntu1804-docker-4c-4g-11049 sshd[1782]: Received disconnect from 10.32.4.5 port 32814:11: Closed due to user request. [preauth] Dec 6 04:52:13 prd-ubuntu1804-docker-4c-4g-11049 sshd[1782]: Disconnected from invalid user jenkins 10.32.4.5 port 32814 [preauth] Dec 6 04:52:15 prd-ubuntu1804-docker-4c-4g-11049 sshd[1820]: Invalid user jenkins from 10.32.4.5 port 32816 Dec 6 04:52:15 prd-ubuntu1804-docker-4c-4g-11049 sshd[1820]: Received disconnect from 10.32.4.5 port 32816:11: Closed due to user request. [preauth] Dec 6 04:52:15 prd-ubuntu1804-docker-4c-4g-11049 sshd[1820]: Disconnected from invalid user jenkins 10.32.4.5 port 32816 [preauth] Dec 6 04:52:17 prd-ubuntu1804-docker-4c-4g-11049 sshd[1827]: Invalid user jenkins from 10.32.4.5 port 32818 Dec 6 04:52:17 prd-ubuntu1804-docker-4c-4g-11049 sshd[1827]: Received disconnect from 10.32.4.5 port 32818:11: Closed due to user request. [preauth] Dec 6 04:52:17 prd-ubuntu1804-docker-4c-4g-11049 sshd[1827]: Disconnected from invalid user jenkins 10.32.4.5 port 32818 [preauth] Dec 6 04:52:19 prd-ubuntu1804-docker-4c-4g-11049 useradd[1843]: new group: name=jenkins, GID=1001 Dec 6 04:52:19 prd-ubuntu1804-docker-4c-4g-11049 useradd[1843]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash Dec 6 04:52:19 prd-ubuntu1804-docker-4c-4g-11049 usermod[1850]: add 'jenkins' to group 'docker' Dec 6 04:52:19 prd-ubuntu1804-docker-4c-4g-11049 usermod[1850]: add 'jenkins' to shadow group 'docker' Dec 6 04:52:19 prd-ubuntu1804-docker-4c-4g-11049 sshd[1861]: Accepted publickey for jenkins from 10.32.4.5 port 32820 ssh2: RSA SHA256:MwkAMVxCcf5mjE3h3rXSsWkdX5TtX0v/kuPsZexJ1qI Dec 6 04:52:19 prd-ubuntu1804-docker-4c-4g-11049 sshd[1861]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Dec 6 04:52:19 prd-ubuntu1804-docker-4c-4g-11049 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Dec 6 04:52:19 prd-ubuntu1804-docker-4c-4g-11049 systemd-logind[1008]: New session 2 of user jenkins. Dec 6 04:53:01 prd-ubuntu1804-docker-4c-4g-11049 CRON[2422]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 6 04:53:01 prd-ubuntu1804-docker-4c-4g-11049 CRON[2422]: pam_unix(cron:session): session closed for user root Dec 6 04:54:01 prd-ubuntu1804-docker-4c-4g-11049 CRON[2468]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 6 04:54:01 prd-ubuntu1804-docker-4c-4g-11049 CRON[2468]: pam_unix(cron:session): session closed for user root Dec 6 04:55:01 prd-ubuntu1804-docker-4c-4g-11049 CRON[3002]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 6 04:55:01 prd-ubuntu1804-docker-4c-4g-11049 CRON[3002]: pam_unix(cron:session): session closed for user root Dec 6 04:56:01 prd-ubuntu1804-docker-4c-4g-11049 CRON[3371]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 6 04:56:01 prd-ubuntu1804-docker-4c-4g-11049 CRON[3371]: pam_unix(cron:session): session closed for user root Dec 6 04:56:15 prd-ubuntu1804-docker-4c-4g-11049 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/it-dev-bldr-alpine3-docker-merge-master ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp Dec 6 04:56:15 prd-ubuntu1804-docker-4c-4g-11049 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)