Jun 22 17:12:32 prd-ubuntu1804-docker-4c-4g-4214 passwd[941]: password for 'ubuntu' changed by 'root' Jun 22 17:12:32 prd-ubuntu1804-docker-4c-4g-4214 systemd-logind[1013]: Watching system buttons on /dev/input/event0 (Power Button) Jun 22 17:12:32 prd-ubuntu1804-docker-4c-4g-4214 systemd-logind[1013]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Jun 22 17:12:32 prd-ubuntu1804-docker-4c-4g-4214 systemd-logind[1013]: New seat seat0. Jun 22 17:12:32 prd-ubuntu1804-docker-4c-4g-4214 sshd[1119]: Server listening on 0.0.0.0 port 22. Jun 22 17:12:32 prd-ubuntu1804-docker-4c-4g-4214 sshd[1119]: Server listening on :: port 22. Jun 22 17:12:37 prd-ubuntu1804-docker-4c-4g-4214 sshd[1418]: Did not receive identification string from 10.32.4.5 port 53146 Jun 22 17:12:41 prd-ubuntu1804-docker-4c-4g-4214 sshd[1477]: Invalid user jenkins from 10.32.4.5 port 53148 Jun 22 17:12:41 prd-ubuntu1804-docker-4c-4g-4214 sshd[1477]: Received disconnect from 10.32.4.5 port 53148:11: Closed due to user request. [preauth] Jun 22 17:12:41 prd-ubuntu1804-docker-4c-4g-4214 sshd[1477]: Disconnected from invalid user jenkins 10.32.4.5 port 53148 [preauth] Jun 22 17:12:43 prd-ubuntu1804-docker-4c-4g-4214 sshd[1481]: Invalid user jenkins from 10.32.4.5 port 53150 Jun 22 17:12:43 prd-ubuntu1804-docker-4c-4g-4214 sshd[1481]: Received disconnect from 10.32.4.5 port 53150:11: Closed due to user request. [preauth] Jun 22 17:12:43 prd-ubuntu1804-docker-4c-4g-4214 sshd[1481]: Disconnected from invalid user jenkins 10.32.4.5 port 53150 [preauth] Jun 22 17:12:45 prd-ubuntu1804-docker-4c-4g-4214 sshd[1483]: Invalid user jenkins from 10.32.4.5 port 53154 Jun 22 17:12:45 prd-ubuntu1804-docker-4c-4g-4214 sshd[1483]: Received disconnect from 10.32.4.5 port 53154:11: Closed due to user request. [preauth] Jun 22 17:12:45 prd-ubuntu1804-docker-4c-4g-4214 sshd[1483]: Disconnected from invalid user jenkins 10.32.4.5 port 53154 [preauth] Jun 22 17:12:47 prd-ubuntu1804-docker-4c-4g-4214 sshd[1485]: Invalid user jenkins from 10.32.4.5 port 53156 Jun 22 17:12:47 prd-ubuntu1804-docker-4c-4g-4214 sshd[1485]: Received disconnect from 10.32.4.5 port 53156:11: Closed due to user request. [preauth] Jun 22 17:12:47 prd-ubuntu1804-docker-4c-4g-4214 sshd[1485]: Disconnected from invalid user jenkins 10.32.4.5 port 53156 [preauth] Jun 22 17:12:50 prd-ubuntu1804-docker-4c-4g-4214 sshd[1487]: Invalid user jenkins from 10.32.4.5 port 53158 Jun 22 17:12:50 prd-ubuntu1804-docker-4c-4g-4214 sshd[1487]: Received disconnect from 10.32.4.5 port 53158:11: Closed due to user request. [preauth] Jun 22 17:12:50 prd-ubuntu1804-docker-4c-4g-4214 sshd[1487]: Disconnected from invalid user jenkins 10.32.4.5 port 53158 [preauth] Jun 22 17:12:52 prd-ubuntu1804-docker-4c-4g-4214 sshd[1489]: Invalid user jenkins from 10.32.4.5 port 53166 Jun 22 17:12:52 prd-ubuntu1804-docker-4c-4g-4214 sshd[1489]: Received disconnect from 10.32.4.5 port 53166:11: Closed due to user request. [preauth] Jun 22 17:12:52 prd-ubuntu1804-docker-4c-4g-4214 sshd[1489]: Disconnected from invalid user jenkins 10.32.4.5 port 53166 [preauth] Jun 22 17:12:54 prd-ubuntu1804-docker-4c-4g-4214 sshd[1501]: Invalid user jenkins from 10.32.4.5 port 53168 Jun 22 17:12:54 prd-ubuntu1804-docker-4c-4g-4214 sshd[1501]: Received disconnect from 10.32.4.5 port 53168:11: Closed due to user request. [preauth] Jun 22 17:12:54 prd-ubuntu1804-docker-4c-4g-4214 sshd[1501]: Disconnected from invalid user jenkins 10.32.4.5 port 53168 [preauth] Jun 22 17:12:56 prd-ubuntu1804-docker-4c-4g-4214 sshd[1727]: Invalid user jenkins from 10.32.4.5 port 53170 Jun 22 17:12:56 prd-ubuntu1804-docker-4c-4g-4214 sshd[1727]: Received disconnect from 10.32.4.5 port 53170:11: Closed due to user request. [preauth] Jun 22 17:12:56 prd-ubuntu1804-docker-4c-4g-4214 sshd[1727]: Disconnected from invalid user jenkins 10.32.4.5 port 53170 [preauth] Jun 22 17:12:58 prd-ubuntu1804-docker-4c-4g-4214 sshd[1768]: Invalid user jenkins from 10.32.4.5 port 53178 Jun 22 17:12:58 prd-ubuntu1804-docker-4c-4g-4214 sshd[1768]: Received disconnect from 10.32.4.5 port 53178:11: Closed due to user request. [preauth] Jun 22 17:12:58 prd-ubuntu1804-docker-4c-4g-4214 sshd[1768]: Disconnected from invalid user jenkins 10.32.4.5 port 53178 [preauth] Jun 22 17:13:00 prd-ubuntu1804-docker-4c-4g-4214 sshd[1772]: Invalid user jenkins from 10.32.4.5 port 53182 Jun 22 17:13:00 prd-ubuntu1804-docker-4c-4g-4214 sshd[1772]: Received disconnect from 10.32.4.5 port 53182:11: Closed due to user request. [preauth] Jun 22 17:13:00 prd-ubuntu1804-docker-4c-4g-4214 sshd[1772]: Disconnected from invalid user jenkins 10.32.4.5 port 53182 [preauth] Jun 22 17:13:01 prd-ubuntu1804-docker-4c-4g-4214 CRON[1786]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 22 17:13:01 prd-ubuntu1804-docker-4c-4g-4214 CRON[1786]: pam_unix(cron:session): session closed for user root Jun 22 17:13:01 prd-ubuntu1804-docker-4c-4g-4214 useradd[1798]: new group: name=jenkins, GID=1001 Jun 22 17:13:01 prd-ubuntu1804-docker-4c-4g-4214 useradd[1798]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash Jun 22 17:13:01 prd-ubuntu1804-docker-4c-4g-4214 usermod[1805]: add 'jenkins' to group 'docker' Jun 22 17:13:01 prd-ubuntu1804-docker-4c-4g-4214 usermod[1805]: add 'jenkins' to shadow group 'docker' Jun 22 17:13:02 prd-ubuntu1804-docker-4c-4g-4214 sshd[1839]: Accepted publickey for jenkins from 10.32.4.5 port 53184 ssh2: RSA SHA256:MwkAMVxCcf5mjE3h3rXSsWkdX5TtX0v/kuPsZexJ1qI Jun 22 17:13:02 prd-ubuntu1804-docker-4c-4g-4214 sshd[1839]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Jun 22 17:13:02 prd-ubuntu1804-docker-4c-4g-4214 systemd-logind[1013]: New session 2 of user jenkins. Jun 22 17:13:02 prd-ubuntu1804-docker-4c-4g-4214 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Jun 22 17:14:01 prd-ubuntu1804-docker-4c-4g-4214 CRON[2588]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 22 17:14:01 prd-ubuntu1804-docker-4c-4g-4214 CRON[2588]: pam_unix(cron:session): session closed for user root Jun 22 17:15:01 prd-ubuntu1804-docker-4c-4g-4214 CRON[4384]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 22 17:15:01 prd-ubuntu1804-docker-4c-4g-4214 CRON[4384]: pam_unix(cron:session): session closed for user root Jun 22 17:16:01 prd-ubuntu1804-docker-4c-4g-4214 CRON[6329]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 22 17:16:01 prd-ubuntu1804-docker-4c-4g-4214 CRON[6329]: pam_unix(cron:session): session closed for user root Jun 22 17:17:01 prd-ubuntu1804-docker-4c-4g-4214 CRON[10823]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 22 17:17:01 prd-ubuntu1804-docker-4c-4g-4214 CRON[10824]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 22 17:17:01 prd-ubuntu1804-docker-4c-4g-4214 CRON[10823]: pam_unix(cron:session): session closed for user root Jun 22 17:17:01 prd-ubuntu1804-docker-4c-4g-4214 CRON[10824]: pam_unix(cron:session): session closed for user root Jun 22 17:18:01 prd-ubuntu1804-docker-4c-4g-4214 CRON[11455]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 22 17:18:01 prd-ubuntu1804-docker-4c-4g-4214 CRON[11455]: pam_unix(cron:session): session closed for user root Jun 22 17:19:01 prd-ubuntu1804-docker-4c-4g-4214 CRON[11480]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 22 17:19:01 prd-ubuntu1804-docker-4c-4g-4214 CRON[11480]: pam_unix(cron:session): session closed for user root Jun 22 17:20:01 prd-ubuntu1804-docker-4c-4g-4214 CRON[11487]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 22 17:20:01 prd-ubuntu1804-docker-4c-4g-4214 CRON[11487]: pam_unix(cron:session): session closed for user root Jun 22 17:21:01 prd-ubuntu1804-docker-4c-4g-4214 CRON[11491]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 22 17:21:01 prd-ubuntu1804-docker-4c-4g-4214 CRON[11491]: pam_unix(cron:session): session closed for user root Jun 22 17:22:01 prd-ubuntu1804-docker-4c-4g-4214 CRON[11494]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 22 17:22:01 prd-ubuntu1804-docker-4c-4g-4214 CRON[11494]: pam_unix(cron:session): session closed for user root Jun 22 17:22:47 prd-ubuntu1804-docker-4c-4g-4214 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/it-dev-bldr-ubuntu20-c-go-docker-merge-master ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp Jun 22 17:22:47 prd-ubuntu1804-docker-4c-4g-4214 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)