Nov 11 07:52:19 prd-ubuntu2004-docker-4c-4g-6447 passwd[717]: password for 'ubuntu' changed by 'root' Nov 11 07:52:19 prd-ubuntu2004-docker-4c-4g-6447 sshd[815]: Server listening on 0.0.0.0 port 22. Nov 11 07:52:19 prd-ubuntu2004-docker-4c-4g-6447 sshd[815]: Server listening on :: port 22. Nov 11 07:52:19 prd-ubuntu2004-docker-4c-4g-6447 systemd-logind[765]: New seat seat0. Nov 11 07:52:19 prd-ubuntu2004-docker-4c-4g-6447 systemd-logind[765]: Watching system buttons on /dev/input/event0 (Power Button) Nov 11 07:52:19 prd-ubuntu2004-docker-4c-4g-6447 systemd-logind[765]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Nov 11 07:52:23 prd-ubuntu2004-docker-4c-4g-6447 sshd[2226]: error: kex_exchange_identification: Connection closed by remote host Nov 11 07:52:29 prd-ubuntu2004-docker-4c-4g-6447 sshd[4032]: Invalid user jenkins from 10.30.168.15 port 60176 Nov 11 07:52:29 prd-ubuntu2004-docker-4c-4g-6447 sshd[4032]: Received disconnect from 10.30.168.15 port 60176:11: Closed due to user request. [preauth] Nov 11 07:52:29 prd-ubuntu2004-docker-4c-4g-6447 sshd[4032]: Disconnected from invalid user jenkins 10.30.168.15 port 60176 [preauth] Nov 11 07:52:32 prd-ubuntu2004-docker-4c-4g-6447 sshd[4941]: Invalid user jenkins from 10.30.168.15 port 60178 Nov 11 07:52:32 prd-ubuntu2004-docker-4c-4g-6447 sshd[4941]: Received disconnect from 10.30.168.15 port 60178:11: Closed due to user request. [preauth] Nov 11 07:52:32 prd-ubuntu2004-docker-4c-4g-6447 sshd[4941]: Disconnected from invalid user jenkins 10.30.168.15 port 60178 [preauth] Nov 11 07:52:35 prd-ubuntu2004-docker-4c-4g-6447 sshd[5802]: Invalid user jenkins from 10.30.168.15 port 60186 Nov 11 07:52:35 prd-ubuntu2004-docker-4c-4g-6447 sshd[5802]: Received disconnect from 10.30.168.15 port 60186:11: Closed due to user request. [preauth] Nov 11 07:52:35 prd-ubuntu2004-docker-4c-4g-6447 sshd[5802]: Disconnected from invalid user jenkins 10.30.168.15 port 60186 [preauth] Nov 11 07:52:38 prd-ubuntu2004-docker-4c-4g-6447 sshd[6853]: Invalid user jenkins from 10.30.168.15 port 60190 Nov 11 07:52:38 prd-ubuntu2004-docker-4c-4g-6447 sshd[6853]: Received disconnect from 10.30.168.15 port 60190:11: Closed due to user request. [preauth] Nov 11 07:52:38 prd-ubuntu2004-docker-4c-4g-6447 sshd[6853]: Disconnected from invalid user jenkins 10.30.168.15 port 60190 [preauth] Nov 11 07:52:41 prd-ubuntu2004-docker-4c-4g-6447 sshd[8016]: Invalid user jenkins from 10.30.168.15 port 60198 Nov 11 07:52:41 prd-ubuntu2004-docker-4c-4g-6447 sshd[8016]: Received disconnect from 10.30.168.15 port 60198:11: Closed due to user request. [preauth] Nov 11 07:52:41 prd-ubuntu2004-docker-4c-4g-6447 sshd[8016]: Disconnected from invalid user jenkins 10.30.168.15 port 60198 [preauth] Nov 11 07:52:44 prd-ubuntu2004-docker-4c-4g-6447 sshd[9006]: Invalid user jenkins from 10.30.168.15 port 60206 Nov 11 07:52:44 prd-ubuntu2004-docker-4c-4g-6447 sshd[9006]: Received disconnect from 10.30.168.15 port 60206:11: Closed due to user request. [preauth] Nov 11 07:52:44 prd-ubuntu2004-docker-4c-4g-6447 sshd[9006]: Disconnected from invalid user jenkins 10.30.168.15 port 60206 [preauth] Nov 11 07:52:45 prd-ubuntu2004-docker-4c-4g-6447 useradd[9558]: new group: name=jenkins, GID=1001 Nov 11 07:52:45 prd-ubuntu2004-docker-4c-4g-6447 useradd[9558]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash, from=none Nov 11 07:52:45 prd-ubuntu2004-docker-4c-4g-6447 usermod[9595]: add 'jenkins' to group 'docker' Nov 11 07:52:45 prd-ubuntu2004-docker-4c-4g-6447 usermod[9595]: add 'jenkins' to shadow group 'docker' Nov 11 07:52:47 prd-ubuntu2004-docker-4c-4g-6447 sshd[9974]: Accepted publickey for jenkins from 10.30.168.15 port 60212 ssh2: RSA SHA256:BBsm4mRgG5V0fGum4Y1Rmy/vs16stdRVhwvexlLUhUs Nov 11 07:52:47 prd-ubuntu2004-docker-4c-4g-6447 sshd[9974]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Nov 11 07:52:47 prd-ubuntu2004-docker-4c-4g-6447 systemd-logind[765]: New session 1 of user jenkins. Nov 11 07:52:47 prd-ubuntu2004-docker-4c-4g-6447 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Nov 11 07:53:02 prd-ubuntu2004-docker-4c-4g-6447 CRON[15051]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 11 07:53:02 prd-ubuntu2004-docker-4c-4g-6447 CRON[15051]: pam_unix(cron:session): session closed for user root Nov 11 07:54:01 prd-ubuntu2004-docker-4c-4g-6447 CRON[28674]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 11 07:54:01 prd-ubuntu2004-docker-4c-4g-6447 CRON[28674]: pam_unix(cron:session): session closed for user root Nov 11 07:54:18 prd-ubuntu2004-docker-4c-4g-6447 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/docs-rtd-merge-titanium ; USER=root ; COMMAND=/usr/bin/cp /var/log/auth.log /tmp Nov 11 07:54:18 prd-ubuntu2004-docker-4c-4g-6447 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)