Jul 5 16:27:49 prd-ubuntu1804-docker-4c-4g-5021 passwd[961]: password for 'ubuntu' changed by 'root' Jul 5 16:27:49 prd-ubuntu1804-docker-4c-4g-5021 systemd-logind[1091]: Watching system buttons on /dev/input/event0 (Power Button) Jul 5 16:27:49 prd-ubuntu1804-docker-4c-4g-5021 systemd-logind[1091]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Jul 5 16:27:49 prd-ubuntu1804-docker-4c-4g-5021 systemd-logind[1091]: New seat seat0. Jul 5 16:27:49 prd-ubuntu1804-docker-4c-4g-5021 sshd[1302]: Server listening on 0.0.0.0 port 22. Jul 5 16:27:49 prd-ubuntu1804-docker-4c-4g-5021 sshd[1302]: Server listening on :: port 22. Jul 5 16:27:49 prd-ubuntu1804-docker-4c-4g-5021 sshd[1305]: Did not receive identification string from 10.32.4.5 port 44480 Jul 5 16:27:55 prd-ubuntu1804-docker-4c-4g-5021 sshd[1572]: Invalid user jenkins from 10.32.4.5 port 44504 Jul 5 16:27:55 prd-ubuntu1804-docker-4c-4g-5021 sshd[1572]: Received disconnect from 10.32.4.5 port 44504:11: Closed due to user request. [preauth] Jul 5 16:27:55 prd-ubuntu1804-docker-4c-4g-5021 sshd[1572]: Disconnected from invalid user jenkins 10.32.4.5 port 44504 [preauth] Jul 5 16:27:57 prd-ubuntu1804-docker-4c-4g-5021 sshd[1582]: Invalid user jenkins from 10.32.4.5 port 44506 Jul 5 16:27:58 prd-ubuntu1804-docker-4c-4g-5021 sshd[1582]: Received disconnect from 10.32.4.5 port 44506:11: Closed due to user request. [preauth] Jul 5 16:27:58 prd-ubuntu1804-docker-4c-4g-5021 sshd[1582]: Disconnected from invalid user jenkins 10.32.4.5 port 44506 [preauth] Jul 5 16:28:00 prd-ubuntu1804-docker-4c-4g-5021 sshd[1584]: Invalid user jenkins from 10.32.4.5 port 44508 Jul 5 16:28:00 prd-ubuntu1804-docker-4c-4g-5021 sshd[1584]: Received disconnect from 10.32.4.5 port 44508:11: Closed due to user request. [preauth] Jul 5 16:28:00 prd-ubuntu1804-docker-4c-4g-5021 sshd[1584]: Disconnected from invalid user jenkins 10.32.4.5 port 44508 [preauth] Jul 5 16:28:01 prd-ubuntu1804-docker-4c-4g-5021 CRON[1587]: pam_unix(cron:session): session opened for user root by (uid=0) Jul 5 16:28:01 prd-ubuntu1804-docker-4c-4g-5021 CRON[1587]: pam_unix(cron:session): session closed for user root Jul 5 16:28:02 prd-ubuntu1804-docker-4c-4g-5021 sshd[1594]: Invalid user jenkins from 10.32.4.5 port 44510 Jul 5 16:28:02 prd-ubuntu1804-docker-4c-4g-5021 sshd[1594]: Received disconnect from 10.32.4.5 port 44510:11: Closed due to user request. [preauth] Jul 5 16:28:02 prd-ubuntu1804-docker-4c-4g-5021 sshd[1594]: Disconnected from invalid user jenkins 10.32.4.5 port 44510 [preauth] Jul 5 16:28:04 prd-ubuntu1804-docker-4c-4g-5021 sshd[1596]: Invalid user jenkins from 10.32.4.5 port 44514 Jul 5 16:28:04 prd-ubuntu1804-docker-4c-4g-5021 sshd[1596]: Received disconnect from 10.32.4.5 port 44514:11: Closed due to user request. [preauth] Jul 5 16:28:04 prd-ubuntu1804-docker-4c-4g-5021 sshd[1596]: Disconnected from invalid user jenkins 10.32.4.5 port 44514 [preauth] Jul 5 16:28:06 prd-ubuntu1804-docker-4c-4g-5021 sshd[1598]: Invalid user jenkins from 10.32.4.5 port 44516 Jul 5 16:28:06 prd-ubuntu1804-docker-4c-4g-5021 sshd[1598]: Received disconnect from 10.32.4.5 port 44516:11: Closed due to user request. [preauth] Jul 5 16:28:06 prd-ubuntu1804-docker-4c-4g-5021 sshd[1598]: Disconnected from invalid user jenkins 10.32.4.5 port 44516 [preauth] Jul 5 16:28:08 prd-ubuntu1804-docker-4c-4g-5021 sshd[1600]: Invalid user jenkins from 10.32.4.5 port 44518 Jul 5 16:28:08 prd-ubuntu1804-docker-4c-4g-5021 sshd[1600]: Received disconnect from 10.32.4.5 port 44518:11: Closed due to user request. [preauth] Jul 5 16:28:08 prd-ubuntu1804-docker-4c-4g-5021 sshd[1600]: Disconnected from invalid user jenkins 10.32.4.5 port 44518 [preauth] Jul 5 16:28:10 prd-ubuntu1804-docker-4c-4g-5021 sshd[1617]: Invalid user jenkins from 10.32.4.5 port 44520 Jul 5 16:28:10 prd-ubuntu1804-docker-4c-4g-5021 sshd[1617]: Received disconnect from 10.32.4.5 port 44520:11: Closed due to user request. [preauth] Jul 5 16:28:10 prd-ubuntu1804-docker-4c-4g-5021 sshd[1617]: Disconnected from invalid user jenkins 10.32.4.5 port 44520 [preauth] Jul 5 16:28:12 prd-ubuntu1804-docker-4c-4g-5021 sshd[1825]: Invalid user jenkins from 10.32.4.5 port 44528 Jul 5 16:28:13 prd-ubuntu1804-docker-4c-4g-5021 sshd[1825]: Received disconnect from 10.32.4.5 port 44528:11: Closed due to user request. [preauth] Jul 5 16:28:13 prd-ubuntu1804-docker-4c-4g-5021 sshd[1825]: Disconnected from invalid user jenkins 10.32.4.5 port 44528 [preauth] Jul 5 16:28:15 prd-ubuntu1804-docker-4c-4g-5021 sshd[1862]: Invalid user jenkins from 10.32.4.5 port 44530 Jul 5 16:28:15 prd-ubuntu1804-docker-4c-4g-5021 sshd[1862]: Received disconnect from 10.32.4.5 port 44530:11: Closed due to user request. [preauth] Jul 5 16:28:15 prd-ubuntu1804-docker-4c-4g-5021 sshd[1862]: Disconnected from invalid user jenkins 10.32.4.5 port 44530 [preauth] Jul 5 16:28:17 prd-ubuntu1804-docker-4c-4g-5021 sshd[1880]: Invalid user jenkins from 10.32.4.5 port 44534 Jul 5 16:28:17 prd-ubuntu1804-docker-4c-4g-5021 sshd[1880]: Received disconnect from 10.32.4.5 port 44534:11: Closed due to user request. [preauth] Jul 5 16:28:17 prd-ubuntu1804-docker-4c-4g-5021 sshd[1880]: Disconnected from invalid user jenkins 10.32.4.5 port 44534 [preauth] Jul 5 16:28:19 prd-ubuntu1804-docker-4c-4g-5021 sshd[1884]: Invalid user jenkins from 10.32.4.5 port 44538 Jul 5 16:28:19 prd-ubuntu1804-docker-4c-4g-5021 sshd[1884]: Received disconnect from 10.32.4.5 port 44538:11: Closed due to user request. [preauth] Jul 5 16:28:19 prd-ubuntu1804-docker-4c-4g-5021 sshd[1884]: Disconnected from invalid user jenkins 10.32.4.5 port 44538 [preauth] Jul 5 16:28:20 prd-ubuntu1804-docker-4c-4g-5021 useradd[1914]: new group: name=jenkins, GID=1001 Jul 5 16:28:20 prd-ubuntu1804-docker-4c-4g-5021 useradd[1914]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash Jul 5 16:28:20 prd-ubuntu1804-docker-4c-4g-5021 usermod[1923]: add 'jenkins' to group 'docker' Jul 5 16:28:20 prd-ubuntu1804-docker-4c-4g-5021 usermod[1923]: add 'jenkins' to shadow group 'docker' Jul 5 16:28:21 prd-ubuntu1804-docker-4c-4g-5021 sshd[1968]: Accepted publickey for jenkins from 10.32.4.5 port 44540 ssh2: RSA SHA256:MwkAMVxCcf5mjE3h3rXSsWkdX5TtX0v/kuPsZexJ1qI Jul 5 16:28:21 prd-ubuntu1804-docker-4c-4g-5021 sshd[1968]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Jul 5 16:28:21 prd-ubuntu1804-docker-4c-4g-5021 systemd-logind[1091]: New session 2 of user jenkins. Jul 5 16:28:21 prd-ubuntu1804-docker-4c-4g-5021 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Jul 5 16:29:01 prd-ubuntu1804-docker-4c-4g-5021 CRON[2482]: pam_unix(cron:session): session opened for user root by (uid=0) Jul 5 16:29:01 prd-ubuntu1804-docker-4c-4g-5021 CRON[2482]: pam_unix(cron:session): session closed for user root Jul 5 16:30:01 prd-ubuntu1804-docker-4c-4g-5021 CRON[2529]: pam_unix(cron:session): session opened for user root by (uid=0) Jul 5 16:30:01 prd-ubuntu1804-docker-4c-4g-5021 CRON[2529]: pam_unix(cron:session): session closed for user root Jul 5 16:31:01 prd-ubuntu1804-docker-4c-4g-5021 CRON[3332]: pam_unix(cron:session): session opened for user root by (uid=0) Jul 5 16:31:01 prd-ubuntu1804-docker-4c-4g-5021 CRON[3332]: pam_unix(cron:session): session closed for user root Jul 5 16:31:52 prd-ubuntu1804-docker-4c-4g-5021 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/it-dev-bldr-alpine3-go-docker-merge-master ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp Jul 5 16:31:52 prd-ubuntu1804-docker-4c-4g-5021 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)