Dec 7 08:22:36 prd-ubuntu1804-docker-4c-4g-12334 passwd[921]: password for 'ubuntu' changed by 'root' Dec 7 08:22:36 prd-ubuntu1804-docker-4c-4g-12334 systemd-logind[997]: Watching system buttons on /dev/input/event0 (Power Button) Dec 7 08:22:36 prd-ubuntu1804-docker-4c-4g-12334 systemd-logind[997]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Dec 7 08:22:36 prd-ubuntu1804-docker-4c-4g-12334 systemd-logind[997]: New seat seat0. Dec 7 08:22:36 prd-ubuntu1804-docker-4c-4g-12334 sshd[1060]: Server listening on 0.0.0.0 port 22. Dec 7 08:22:36 prd-ubuntu1804-docker-4c-4g-12334 sshd[1060]: Server listening on :: port 22. Dec 7 08:22:36 prd-ubuntu1804-docker-4c-4g-12334 sshd[1173]: Did not receive identification string from 10.32.4.5 port 43484 Dec 7 08:22:40 prd-ubuntu1804-docker-4c-4g-12334 sshd[1400]: Invalid user jenkins from 10.32.4.5 port 43490 Dec 7 08:22:40 prd-ubuntu1804-docker-4c-4g-12334 sshd[1400]: Received disconnect from 10.32.4.5 port 43490:11: Closed due to user request. [preauth] Dec 7 08:22:40 prd-ubuntu1804-docker-4c-4g-12334 sshd[1400]: Disconnected from invalid user jenkins 10.32.4.5 port 43490 [preauth] Dec 7 08:22:42 prd-ubuntu1804-docker-4c-4g-12334 sshd[1431]: Invalid user jenkins from 10.32.4.5 port 43492 Dec 7 08:22:42 prd-ubuntu1804-docker-4c-4g-12334 sshd[1431]: Received disconnect from 10.32.4.5 port 43492:11: Closed due to user request. [preauth] Dec 7 08:22:42 prd-ubuntu1804-docker-4c-4g-12334 sshd[1431]: Disconnected from invalid user jenkins 10.32.4.5 port 43492 [preauth] Dec 7 08:22:44 prd-ubuntu1804-docker-4c-4g-12334 sshd[1452]: Invalid user jenkins from 10.32.4.5 port 43500 Dec 7 08:22:44 prd-ubuntu1804-docker-4c-4g-12334 sshd[1452]: Received disconnect from 10.32.4.5 port 43500:11: Closed due to user request. [preauth] Dec 7 08:22:44 prd-ubuntu1804-docker-4c-4g-12334 sshd[1452]: Disconnected from invalid user jenkins 10.32.4.5 port 43500 [preauth] Dec 7 08:22:46 prd-ubuntu1804-docker-4c-4g-12334 sshd[1454]: Invalid user jenkins from 10.32.4.5 port 43502 Dec 7 08:22:46 prd-ubuntu1804-docker-4c-4g-12334 sshd[1454]: Received disconnect from 10.32.4.5 port 43502:11: Closed due to user request. [preauth] Dec 7 08:22:46 prd-ubuntu1804-docker-4c-4g-12334 sshd[1454]: Disconnected from invalid user jenkins 10.32.4.5 port 43502 [preauth] Dec 7 08:22:48 prd-ubuntu1804-docker-4c-4g-12334 sshd[1456]: Invalid user jenkins from 10.32.4.5 port 43504 Dec 7 08:22:48 prd-ubuntu1804-docker-4c-4g-12334 sshd[1456]: Received disconnect from 10.32.4.5 port 43504:11: Closed due to user request. [preauth] Dec 7 08:22:48 prd-ubuntu1804-docker-4c-4g-12334 sshd[1456]: Disconnected from invalid user jenkins 10.32.4.5 port 43504 [preauth] Dec 7 08:22:50 prd-ubuntu1804-docker-4c-4g-12334 sshd[1458]: Invalid user jenkins from 10.32.4.5 port 43510 Dec 7 08:22:50 prd-ubuntu1804-docker-4c-4g-12334 sshd[1458]: Received disconnect from 10.32.4.5 port 43510:11: Closed due to user request. [preauth] Dec 7 08:22:50 prd-ubuntu1804-docker-4c-4g-12334 sshd[1458]: Disconnected from invalid user jenkins 10.32.4.5 port 43510 [preauth] Dec 7 08:22:52 prd-ubuntu1804-docker-4c-4g-12334 sshd[1460]: Invalid user jenkins from 10.32.4.5 port 43520 Dec 7 08:22:52 prd-ubuntu1804-docker-4c-4g-12334 sshd[1460]: Received disconnect from 10.32.4.5 port 43520:11: Closed due to user request. [preauth] Dec 7 08:22:52 prd-ubuntu1804-docker-4c-4g-12334 sshd[1460]: Disconnected from invalid user jenkins 10.32.4.5 port 43520 [preauth] Dec 7 08:22:54 prd-ubuntu1804-docker-4c-4g-12334 sshd[1462]: Invalid user jenkins from 10.32.4.5 port 43526 Dec 7 08:22:55 prd-ubuntu1804-docker-4c-4g-12334 sshd[1462]: Received disconnect from 10.32.4.5 port 43526:11: Closed due to user request. [preauth] Dec 7 08:22:55 prd-ubuntu1804-docker-4c-4g-12334 sshd[1462]: Disconnected from invalid user jenkins 10.32.4.5 port 43526 [preauth] Dec 7 08:22:57 prd-ubuntu1804-docker-4c-4g-12334 sshd[1464]: Invalid user jenkins from 10.32.4.5 port 43530 Dec 7 08:22:57 prd-ubuntu1804-docker-4c-4g-12334 sshd[1464]: Received disconnect from 10.32.4.5 port 43530:11: Closed due to user request. [preauth] Dec 7 08:22:57 prd-ubuntu1804-docker-4c-4g-12334 sshd[1464]: Disconnected from invalid user jenkins 10.32.4.5 port 43530 [preauth] Dec 7 08:23:00 prd-ubuntu1804-docker-4c-4g-12334 sshd[1629]: Invalid user jenkins from 10.32.4.5 port 43536 Dec 7 08:23:00 prd-ubuntu1804-docker-4c-4g-12334 sshd[1629]: Received disconnect from 10.32.4.5 port 43536:11: Closed due to user request. [preauth] Dec 7 08:23:00 prd-ubuntu1804-docker-4c-4g-12334 sshd[1629]: Disconnected from invalid user jenkins 10.32.4.5 port 43536 [preauth] Dec 7 08:23:02 prd-ubuntu1804-docker-4c-4g-12334 sshd[1724]: Invalid user jenkins from 10.32.4.5 port 43540 Dec 7 08:23:02 prd-ubuntu1804-docker-4c-4g-12334 sshd[1724]: Received disconnect from 10.32.4.5 port 43540:11: Closed due to user request. [preauth] Dec 7 08:23:02 prd-ubuntu1804-docker-4c-4g-12334 sshd[1724]: Disconnected from invalid user jenkins 10.32.4.5 port 43540 [preauth] Dec 7 08:23:02 prd-ubuntu1804-docker-4c-4g-12334 CRON[1727]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 7 08:23:02 prd-ubuntu1804-docker-4c-4g-12334 CRON[1727]: pam_unix(cron:session): session closed for user root Dec 7 08:23:04 prd-ubuntu1804-docker-4c-4g-12334 sshd[1751]: Invalid user jenkins from 10.32.4.5 port 43548 Dec 7 08:23:04 prd-ubuntu1804-docker-4c-4g-12334 sshd[1751]: Received disconnect from 10.32.4.5 port 43548:11: Closed due to user request. [preauth] Dec 7 08:23:04 prd-ubuntu1804-docker-4c-4g-12334 sshd[1751]: Disconnected from invalid user jenkins 10.32.4.5 port 43548 [preauth] Dec 7 08:23:05 prd-ubuntu1804-docker-4c-4g-12334 useradd[1769]: new group: name=jenkins, GID=1001 Dec 7 08:23:05 prd-ubuntu1804-docker-4c-4g-12334 useradd[1769]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash Dec 7 08:23:06 prd-ubuntu1804-docker-4c-4g-12334 usermod[1776]: add 'jenkins' to group 'docker' Dec 7 08:23:06 prd-ubuntu1804-docker-4c-4g-12334 usermod[1776]: add 'jenkins' to shadow group 'docker' Dec 7 08:23:06 prd-ubuntu1804-docker-4c-4g-12334 sshd[1810]: Accepted publickey for jenkins from 10.32.4.5 port 43554 ssh2: RSA SHA256:MwkAMVxCcf5mjE3h3rXSsWkdX5TtX0v/kuPsZexJ1qI Dec 7 08:23:06 prd-ubuntu1804-docker-4c-4g-12334 sshd[1810]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Dec 7 08:23:06 prd-ubuntu1804-docker-4c-4g-12334 systemd-logind[997]: New session 2 of user jenkins. Dec 7 08:23:06 prd-ubuntu1804-docker-4c-4g-12334 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Dec 7 08:24:01 prd-ubuntu1804-docker-4c-4g-12334 CRON[2540]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 7 08:24:01 prd-ubuntu1804-docker-4c-4g-12334 CRON[2540]: pam_unix(cron:session): session closed for user root Dec 7 08:25:01 prd-ubuntu1804-docker-4c-4g-12334 CRON[7666]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 7 08:25:01 prd-ubuntu1804-docker-4c-4g-12334 CRON[7666]: pam_unix(cron:session): session closed for user root Dec 7 08:25:17 prd-ubuntu1804-docker-4c-4g-12334 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/it-dev-bldr-alpine3-mdclog-docker-merge-master ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp Dec 7 08:25:17 prd-ubuntu1804-docker-4c-4g-12334 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)