Nov 1 02:43:52 prd-ubuntu1804-docker-4c-4g-7857 passwd[937]: password for 'ubuntu' changed by 'root' Nov 1 02:43:52 prd-ubuntu1804-docker-4c-4g-7857 systemd-logind[996]: Watching system buttons on /dev/input/event0 (Power Button) Nov 1 02:43:52 prd-ubuntu1804-docker-4c-4g-7857 systemd-logind[996]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Nov 1 02:43:52 prd-ubuntu1804-docker-4c-4g-7857 systemd-logind[996]: New seat seat0. Nov 1 02:43:52 prd-ubuntu1804-docker-4c-4g-7857 sshd[1099]: Server listening on 0.0.0.0 port 22. Nov 1 02:43:52 prd-ubuntu1804-docker-4c-4g-7857 sshd[1099]: Server listening on :: port 22. Nov 1 02:43:54 prd-ubuntu1804-docker-4c-4g-7857 sshd[1257]: Did not receive identification string from 10.32.4.5 port 51992 Nov 1 02:43:56 prd-ubuntu1804-docker-4c-4g-7857 sshd[1397]: Invalid user jenkins from 10.32.4.5 port 51994 Nov 1 02:43:56 prd-ubuntu1804-docker-4c-4g-7857 sshd[1397]: Received disconnect from 10.32.4.5 port 51994:11: Closed due to user request. [preauth] Nov 1 02:43:56 prd-ubuntu1804-docker-4c-4g-7857 sshd[1397]: Disconnected from invalid user jenkins 10.32.4.5 port 51994 [preauth] Nov 1 02:43:58 prd-ubuntu1804-docker-4c-4g-7857 sshd[1428]: Invalid user jenkins from 10.32.4.5 port 51996 Nov 1 02:43:58 prd-ubuntu1804-docker-4c-4g-7857 sshd[1428]: Received disconnect from 10.32.4.5 port 51996:11: Closed due to user request. [preauth] Nov 1 02:43:58 prd-ubuntu1804-docker-4c-4g-7857 sshd[1428]: Disconnected from invalid user jenkins 10.32.4.5 port 51996 [preauth] Nov 1 02:44:00 prd-ubuntu1804-docker-4c-4g-7857 sshd[1443]: Invalid user jenkins from 10.32.4.5 port 52006 Nov 1 02:44:00 prd-ubuntu1804-docker-4c-4g-7857 sshd[1443]: Received disconnect from 10.32.4.5 port 52006:11: Closed due to user request. [preauth] Nov 1 02:44:00 prd-ubuntu1804-docker-4c-4g-7857 sshd[1443]: Disconnected from invalid user jenkins 10.32.4.5 port 52006 [preauth] Nov 1 02:44:01 prd-ubuntu1804-docker-4c-4g-7857 CRON[1445]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 1 02:44:01 prd-ubuntu1804-docker-4c-4g-7857 CRON[1445]: pam_unix(cron:session): session closed for user root Nov 1 02:44:03 prd-ubuntu1804-docker-4c-4g-7857 sshd[1453]: Invalid user jenkins from 10.32.4.5 port 52008 Nov 1 02:44:03 prd-ubuntu1804-docker-4c-4g-7857 sshd[1453]: Received disconnect from 10.32.4.5 port 52008:11: Closed due to user request. [preauth] Nov 1 02:44:03 prd-ubuntu1804-docker-4c-4g-7857 sshd[1453]: Disconnected from invalid user jenkins 10.32.4.5 port 52008 [preauth] Nov 1 02:44:05 prd-ubuntu1804-docker-4c-4g-7857 sshd[1455]: Invalid user jenkins from 10.32.4.5 port 52010 Nov 1 02:44:05 prd-ubuntu1804-docker-4c-4g-7857 sshd[1455]: Received disconnect from 10.32.4.5 port 52010:11: Closed due to user request. [preauth] Nov 1 02:44:05 prd-ubuntu1804-docker-4c-4g-7857 sshd[1455]: Disconnected from invalid user jenkins 10.32.4.5 port 52010 [preauth] Nov 1 02:44:07 prd-ubuntu1804-docker-4c-4g-7857 sshd[1457]: Invalid user jenkins from 10.32.4.5 port 52012 Nov 1 02:44:07 prd-ubuntu1804-docker-4c-4g-7857 sshd[1457]: Received disconnect from 10.32.4.5 port 52012:11: Closed due to user request. [preauth] Nov 1 02:44:07 prd-ubuntu1804-docker-4c-4g-7857 sshd[1457]: Disconnected from invalid user jenkins 10.32.4.5 port 52012 [preauth] Nov 1 02:44:09 prd-ubuntu1804-docker-4c-4g-7857 sshd[1459]: Invalid user jenkins from 10.32.4.5 port 52016 Nov 1 02:44:09 prd-ubuntu1804-docker-4c-4g-7857 sshd[1459]: Received disconnect from 10.32.4.5 port 52016:11: Closed due to user request. [preauth] Nov 1 02:44:09 prd-ubuntu1804-docker-4c-4g-7857 sshd[1459]: Disconnected from invalid user jenkins 10.32.4.5 port 52016 [preauth] Nov 1 02:44:11 prd-ubuntu1804-docker-4c-4g-7857 sshd[1461]: Invalid user jenkins from 10.32.4.5 port 52018 Nov 1 02:44:11 prd-ubuntu1804-docker-4c-4g-7857 sshd[1461]: Received disconnect from 10.32.4.5 port 52018:11: Closed due to user request. [preauth] Nov 1 02:44:11 prd-ubuntu1804-docker-4c-4g-7857 sshd[1461]: Disconnected from invalid user jenkins 10.32.4.5 port 52018 [preauth] Nov 1 02:44:13 prd-ubuntu1804-docker-4c-4g-7857 sshd[1463]: Invalid user jenkins from 10.32.4.5 port 52020 Nov 1 02:44:13 prd-ubuntu1804-docker-4c-4g-7857 sshd[1463]: Received disconnect from 10.32.4.5 port 52020:11: Closed due to user request. [preauth] Nov 1 02:44:13 prd-ubuntu1804-docker-4c-4g-7857 sshd[1463]: Disconnected from invalid user jenkins 10.32.4.5 port 52020 [preauth] Nov 1 02:44:15 prd-ubuntu1804-docker-4c-4g-7857 sshd[1630]: Invalid user jenkins from 10.32.4.5 port 52022 Nov 1 02:44:15 prd-ubuntu1804-docker-4c-4g-7857 sshd[1630]: Received disconnect from 10.32.4.5 port 52022:11: Closed due to user request. [preauth] Nov 1 02:44:15 prd-ubuntu1804-docker-4c-4g-7857 sshd[1630]: Disconnected from invalid user jenkins 10.32.4.5 port 52022 [preauth] Nov 1 02:44:18 prd-ubuntu1804-docker-4c-4g-7857 sshd[1700]: Invalid user jenkins from 10.32.4.5 port 52024 Nov 1 02:44:18 prd-ubuntu1804-docker-4c-4g-7857 sshd[1700]: Received disconnect from 10.32.4.5 port 52024:11: Closed due to user request. [preauth] Nov 1 02:44:18 prd-ubuntu1804-docker-4c-4g-7857 sshd[1700]: Disconnected from invalid user jenkins 10.32.4.5 port 52024 [preauth] Nov 1 02:44:20 prd-ubuntu1804-docker-4c-4g-7857 sshd[1737]: Invalid user jenkins from 10.32.4.5 port 52026 Nov 1 02:44:20 prd-ubuntu1804-docker-4c-4g-7857 sshd[1737]: Received disconnect from 10.32.4.5 port 52026:11: Closed due to user request. [preauth] Nov 1 02:44:20 prd-ubuntu1804-docker-4c-4g-7857 sshd[1737]: Disconnected from invalid user jenkins 10.32.4.5 port 52026 [preauth] Nov 1 02:44:22 prd-ubuntu1804-docker-4c-4g-7857 sshd[1741]: Invalid user jenkins from 10.32.4.5 port 52028 Nov 1 02:44:22 prd-ubuntu1804-docker-4c-4g-7857 sshd[1741]: Received disconnect from 10.32.4.5 port 52028:11: Closed due to user request. [preauth] Nov 1 02:44:22 prd-ubuntu1804-docker-4c-4g-7857 sshd[1741]: Disconnected from invalid user jenkins 10.32.4.5 port 52028 [preauth] Nov 1 02:44:24 prd-ubuntu1804-docker-4c-4g-7857 useradd[1770]: new group: name=jenkins, GID=1001 Nov 1 02:44:24 prd-ubuntu1804-docker-4c-4g-7857 useradd[1770]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash Nov 1 02:44:24 prd-ubuntu1804-docker-4c-4g-7857 usermod[1777]: add 'jenkins' to group 'docker' Nov 1 02:44:24 prd-ubuntu1804-docker-4c-4g-7857 usermod[1777]: add 'jenkins' to shadow group 'docker' Nov 1 02:44:24 prd-ubuntu1804-docker-4c-4g-7857 sshd[1790]: Accepted publickey for jenkins from 10.32.4.5 port 52032 ssh2: RSA SHA256:MwkAMVxCcf5mjE3h3rXSsWkdX5TtX0v/kuPsZexJ1qI Nov 1 02:44:24 prd-ubuntu1804-docker-4c-4g-7857 sshd[1790]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Nov 1 02:44:24 prd-ubuntu1804-docker-4c-4g-7857 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Nov 1 02:44:24 prd-ubuntu1804-docker-4c-4g-7857 systemd-logind[996]: New session 2 of user jenkins. Nov 1 02:45:01 prd-ubuntu1804-docker-4c-4g-7857 CRON[2329]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 1 02:45:01 prd-ubuntu1804-docker-4c-4g-7857 CRON[2329]: pam_unix(cron:session): session closed for user root Nov 1 02:46:01 prd-ubuntu1804-docker-4c-4g-7857 CRON[2381]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 1 02:46:01 prd-ubuntu1804-docker-4c-4g-7857 CRON[2381]: pam_unix(cron:session): session closed for user root Nov 1 02:47:01 prd-ubuntu1804-docker-4c-4g-7857 CRON[3492]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 1 02:47:01 prd-ubuntu1804-docker-4c-4g-7857 CRON[3492]: pam_unix(cron:session): session closed for user root Nov 1 02:48:01 prd-ubuntu1804-docker-4c-4g-7857 CRON[7611]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 1 02:48:01 prd-ubuntu1804-docker-4c-4g-7857 CRON[7611]: pam_unix(cron:session): session closed for user root Nov 1 02:49:01 prd-ubuntu1804-docker-4c-4g-7857 CRON[8701]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 1 02:49:01 prd-ubuntu1804-docker-4c-4g-7857 CRON[8701]: pam_unix(cron:session): session closed for user root Nov 1 02:50:01 prd-ubuntu1804-docker-4c-4g-7857 CRON[9884]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 1 02:50:01 prd-ubuntu1804-docker-4c-4g-7857 CRON[9884]: pam_unix(cron:session): session closed for user root Nov 1 02:50:29 prd-ubuntu1804-docker-4c-4g-7857 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/it-dev-bldr-ubuntu18-c-go-docker-merge-master ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp Nov 1 02:50:29 prd-ubuntu1804-docker-4c-4g-7857 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)