Mar 7 17:12:43 prd-ubuntu1804-docker-4c-4g-8358 passwd[947]: password for 'ubuntu' changed by 'root' Mar 7 17:12:43 prd-ubuntu1804-docker-4c-4g-8358 systemd-logind[988]: Watching system buttons on /dev/input/event0 (Power Button) Mar 7 17:12:43 prd-ubuntu1804-docker-4c-4g-8358 systemd-logind[988]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Mar 7 17:12:43 prd-ubuntu1804-docker-4c-4g-8358 systemd-logind[988]: New seat seat0. Mar 7 17:12:43 prd-ubuntu1804-docker-4c-4g-8358 sshd[1086]: Server listening on 0.0.0.0 port 22. Mar 7 17:12:43 prd-ubuntu1804-docker-4c-4g-8358 sshd[1086]: Server listening on :: port 22. Mar 7 17:12:46 prd-ubuntu1804-docker-4c-4g-8358 sshd[1423]: Did not receive identification string from 10.32.4.5 port 49808 Mar 7 17:12:51 prd-ubuntu1804-docker-4c-4g-8358 sshd[1484]: Invalid user jenkins from 10.32.4.5 port 49810 Mar 7 17:12:51 prd-ubuntu1804-docker-4c-4g-8358 sshd[1484]: Received disconnect from 10.32.4.5 port 49810:11: Closed due to user request. [preauth] Mar 7 17:12:51 prd-ubuntu1804-docker-4c-4g-8358 sshd[1484]: Disconnected from invalid user jenkins 10.32.4.5 port 49810 [preauth] Mar 7 17:12:53 prd-ubuntu1804-docker-4c-4g-8358 sshd[1488]: Invalid user jenkins from 10.32.4.5 port 49812 Mar 7 17:12:53 prd-ubuntu1804-docker-4c-4g-8358 sshd[1488]: Received disconnect from 10.32.4.5 port 49812:11: Closed due to user request. [preauth] Mar 7 17:12:53 prd-ubuntu1804-docker-4c-4g-8358 sshd[1488]: Disconnected from invalid user jenkins 10.32.4.5 port 49812 [preauth] Mar 7 17:12:56 prd-ubuntu1804-docker-4c-4g-8358 sshd[1490]: Invalid user jenkins from 10.32.4.5 port 49816 Mar 7 17:12:56 prd-ubuntu1804-docker-4c-4g-8358 sshd[1490]: Received disconnect from 10.32.4.5 port 49816:11: Closed due to user request. [preauth] Mar 7 17:12:56 prd-ubuntu1804-docker-4c-4g-8358 sshd[1490]: Disconnected from invalid user jenkins 10.32.4.5 port 49816 [preauth] Mar 7 17:12:58 prd-ubuntu1804-docker-4c-4g-8358 sshd[1492]: Invalid user jenkins from 10.32.4.5 port 49820 Mar 7 17:12:58 prd-ubuntu1804-docker-4c-4g-8358 sshd[1492]: Received disconnect from 10.32.4.5 port 49820:11: Closed due to user request. [preauth] Mar 7 17:12:58 prd-ubuntu1804-docker-4c-4g-8358 sshd[1492]: Disconnected from invalid user jenkins 10.32.4.5 port 49820 [preauth] Mar 7 17:13:00 prd-ubuntu1804-docker-4c-4g-8358 sshd[1494]: Invalid user jenkins from 10.32.4.5 port 49822 Mar 7 17:13:00 prd-ubuntu1804-docker-4c-4g-8358 sshd[1494]: Received disconnect from 10.32.4.5 port 49822:11: Closed due to user request. [preauth] Mar 7 17:13:00 prd-ubuntu1804-docker-4c-4g-8358 sshd[1494]: Disconnected from invalid user jenkins 10.32.4.5 port 49822 [preauth] Mar 7 17:13:01 prd-ubuntu1804-docker-4c-4g-8358 CRON[1498]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 7 17:13:01 prd-ubuntu1804-docker-4c-4g-8358 CRON[1498]: pam_unix(cron:session): session closed for user root Mar 7 17:13:02 prd-ubuntu1804-docker-4c-4g-8358 sshd[1504]: Invalid user jenkins from 10.32.4.5 port 49824 Mar 7 17:13:02 prd-ubuntu1804-docker-4c-4g-8358 sshd[1504]: Received disconnect from 10.32.4.5 port 49824:11: Closed due to user request. [preauth] Mar 7 17:13:02 prd-ubuntu1804-docker-4c-4g-8358 sshd[1504]: Disconnected from invalid user jenkins 10.32.4.5 port 49824 [preauth] Mar 7 17:13:04 prd-ubuntu1804-docker-4c-4g-8358 sshd[1506]: Invalid user jenkins from 10.32.4.5 port 49826 Mar 7 17:13:04 prd-ubuntu1804-docker-4c-4g-8358 sshd[1506]: Received disconnect from 10.32.4.5 port 49826:11: Closed due to user request. [preauth] Mar 7 17:13:04 prd-ubuntu1804-docker-4c-4g-8358 sshd[1506]: Disconnected from invalid user jenkins 10.32.4.5 port 49826 [preauth] Mar 7 17:13:07 prd-ubuntu1804-docker-4c-4g-8358 sshd[1688]: Invalid user jenkins from 10.32.4.5 port 49828 Mar 7 17:13:07 prd-ubuntu1804-docker-4c-4g-8358 sshd[1688]: Received disconnect from 10.32.4.5 port 49828:11: Closed due to user request. [preauth] Mar 7 17:13:07 prd-ubuntu1804-docker-4c-4g-8358 sshd[1688]: Disconnected from invalid user jenkins 10.32.4.5 port 49828 [preauth] Mar 7 17:13:09 prd-ubuntu1804-docker-4c-4g-8358 sshd[1748]: Invalid user jenkins from 10.32.4.5 port 49830 Mar 7 17:13:09 prd-ubuntu1804-docker-4c-4g-8358 sshd[1748]: Received disconnect from 10.32.4.5 port 49830:11: Closed due to user request. [preauth] Mar 7 17:13:09 prd-ubuntu1804-docker-4c-4g-8358 sshd[1748]: Disconnected from invalid user jenkins 10.32.4.5 port 49830 [preauth] Mar 7 17:13:11 prd-ubuntu1804-docker-4c-4g-8358 sshd[1781]: Invalid user jenkins from 10.32.4.5 port 49832 Mar 7 17:13:11 prd-ubuntu1804-docker-4c-4g-8358 sshd[1781]: Received disconnect from 10.32.4.5 port 49832:11: Closed due to user request. [preauth] Mar 7 17:13:11 prd-ubuntu1804-docker-4c-4g-8358 sshd[1781]: Disconnected from invalid user jenkins 10.32.4.5 port 49832 [preauth] Mar 7 17:13:13 prd-ubuntu1804-docker-4c-4g-8358 sshd[1785]: Invalid user jenkins from 10.32.4.5 port 49836 Mar 7 17:13:13 prd-ubuntu1804-docker-4c-4g-8358 sshd[1785]: Received disconnect from 10.32.4.5 port 49836:11: Closed due to user request. [preauth] Mar 7 17:13:13 prd-ubuntu1804-docker-4c-4g-8358 sshd[1785]: Disconnected from invalid user jenkins 10.32.4.5 port 49836 [preauth] Mar 7 17:13:15 prd-ubuntu1804-docker-4c-4g-8358 useradd[1813]: new group: name=jenkins, GID=1001 Mar 7 17:13:15 prd-ubuntu1804-docker-4c-4g-8358 useradd[1813]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash Mar 7 17:13:15 prd-ubuntu1804-docker-4c-4g-8358 usermod[1820]: add 'jenkins' to group 'docker' Mar 7 17:13:15 prd-ubuntu1804-docker-4c-4g-8358 usermod[1820]: add 'jenkins' to shadow group 'docker' Mar 7 17:13:15 prd-ubuntu1804-docker-4c-4g-8358 sshd[1854]: Accepted publickey for jenkins from 10.32.4.5 port 49838 ssh2: RSA SHA256:MwkAMVxCcf5mjE3h3rXSsWkdX5TtX0v/kuPsZexJ1qI Mar 7 17:13:15 prd-ubuntu1804-docker-4c-4g-8358 sshd[1854]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Mar 7 17:13:15 prd-ubuntu1804-docker-4c-4g-8358 systemd-logind[988]: New session 2 of user jenkins. Mar 7 17:13:15 prd-ubuntu1804-docker-4c-4g-8358 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Mar 7 17:14:02 prd-ubuntu1804-docker-4c-4g-8358 CRON[2381]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 7 17:14:02 prd-ubuntu1804-docker-4c-4g-8358 CRON[2381]: pam_unix(cron:session): session closed for user root Mar 7 17:15:01 prd-ubuntu1804-docker-4c-4g-8358 CRON[2412]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 7 17:15:01 prd-ubuntu1804-docker-4c-4g-8358 CRON[2412]: pam_unix(cron:session): session closed for user root Mar 7 17:16:01 prd-ubuntu1804-docker-4c-4g-8358 CRON[3722]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 7 17:16:01 prd-ubuntu1804-docker-4c-4g-8358 CRON[3722]: pam_unix(cron:session): session closed for user root Mar 7 17:17:01 prd-ubuntu1804-docker-4c-4g-8358 CRON[5881]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 7 17:17:01 prd-ubuntu1804-docker-4c-4g-8358 CRON[5882]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 7 17:17:01 prd-ubuntu1804-docker-4c-4g-8358 CRON[5881]: pam_unix(cron:session): session closed for user root Mar 7 17:17:01 prd-ubuntu1804-docker-4c-4g-8358 CRON[5882]: pam_unix(cron:session): session closed for user root Mar 7 17:18:01 prd-ubuntu1804-docker-4c-4g-8358 CRON[9610]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 7 17:18:01 prd-ubuntu1804-docker-4c-4g-8358 CRON[9610]: pam_unix(cron:session): session closed for user root Mar 7 17:19:01 prd-ubuntu1804-docker-4c-4g-8358 CRON[10906]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 7 17:19:01 prd-ubuntu1804-docker-4c-4g-8358 CRON[10906]: pam_unix(cron:session): session closed for user root Mar 7 17:20:01 prd-ubuntu1804-docker-4c-4g-8358 CRON[11525]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 7 17:20:01 prd-ubuntu1804-docker-4c-4g-8358 CRON[11525]: pam_unix(cron:session): session closed for user root Mar 7 17:21:01 prd-ubuntu1804-docker-4c-4g-8358 CRON[11531]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 7 17:21:01 prd-ubuntu1804-docker-4c-4g-8358 CRON[11531]: pam_unix(cron:session): session closed for user root Mar 7 17:22:01 prd-ubuntu1804-docker-4c-4g-8358 CRON[11534]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 7 17:22:01 prd-ubuntu1804-docker-4c-4g-8358 CRON[11534]: pam_unix(cron:session): session closed for user root Mar 7 17:23:01 prd-ubuntu1804-docker-4c-4g-8358 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/it-dev-bldr-ubuntu20-c-go-docker-merge-master ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp Mar 7 17:23:01 prd-ubuntu1804-docker-4c-4g-8358 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)