Sep 13 07:11:07 prd-ubuntu2004-docker-4c-4g-21663 passwd[708]: password for 'ubuntu' changed by 'root' Sep 13 07:11:07 prd-ubuntu2004-docker-4c-4g-21663 systemd-logind[752]: New seat seat0. Sep 13 07:11:07 prd-ubuntu2004-docker-4c-4g-21663 systemd-logind[752]: Watching system buttons on /dev/input/event0 (Power Button) Sep 13 07:11:07 prd-ubuntu2004-docker-4c-4g-21663 systemd-logind[752]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Sep 13 07:11:07 prd-ubuntu2004-docker-4c-4g-21663 sshd[807]: Server listening on 0.0.0.0 port 22. Sep 13 07:11:07 prd-ubuntu2004-docker-4c-4g-21663 sshd[807]: Server listening on :: port 22. Sep 13 07:11:11 prd-ubuntu2004-docker-4c-4g-21663 sshd[2347]: error: kex_exchange_identification: Connection closed by remote host Sep 13 07:11:19 prd-ubuntu2004-docker-4c-4g-21663 sshd[4908]: Invalid user jenkins from 10.30.168.15 port 43332 Sep 13 07:11:19 prd-ubuntu2004-docker-4c-4g-21663 sshd[4908]: Received disconnect from 10.30.168.15 port 43332:11: Closed due to user request. [preauth] Sep 13 07:11:19 prd-ubuntu2004-docker-4c-4g-21663 sshd[4908]: Disconnected from invalid user jenkins 10.30.168.15 port 43332 [preauth] Sep 13 07:11:22 prd-ubuntu2004-docker-4c-4g-21663 sshd[6018]: Invalid user jenkins from 10.30.168.15 port 43346 Sep 13 07:11:22 prd-ubuntu2004-docker-4c-4g-21663 sshd[6018]: Received disconnect from 10.30.168.15 port 43346:11: Closed due to user request. [preauth] Sep 13 07:11:22 prd-ubuntu2004-docker-4c-4g-21663 sshd[6018]: Disconnected from invalid user jenkins 10.30.168.15 port 43346 [preauth] Sep 13 07:11:25 prd-ubuntu2004-docker-4c-4g-21663 sshd[7049]: Invalid user jenkins from 10.30.168.15 port 43354 Sep 13 07:11:25 prd-ubuntu2004-docker-4c-4g-21663 sshd[7049]: Received disconnect from 10.30.168.15 port 43354:11: Closed due to user request. [preauth] Sep 13 07:11:25 prd-ubuntu2004-docker-4c-4g-21663 sshd[7049]: Disconnected from invalid user jenkins 10.30.168.15 port 43354 [preauth] Sep 13 07:11:28 prd-ubuntu2004-docker-4c-4g-21663 sshd[8344]: Invalid user jenkins from 10.30.168.15 port 43366 Sep 13 07:11:28 prd-ubuntu2004-docker-4c-4g-21663 sshd[8344]: Received disconnect from 10.30.168.15 port 43366:11: Closed due to user request. [preauth] Sep 13 07:11:28 prd-ubuntu2004-docker-4c-4g-21663 sshd[8344]: Disconnected from invalid user jenkins 10.30.168.15 port 43366 [preauth] Sep 13 07:11:31 prd-ubuntu2004-docker-4c-4g-21663 sshd[9478]: Invalid user jenkins from 10.30.168.15 port 43376 Sep 13 07:11:31 prd-ubuntu2004-docker-4c-4g-21663 sshd[9478]: Received disconnect from 10.30.168.15 port 43376:11: Closed due to user request. [preauth] Sep 13 07:11:31 prd-ubuntu2004-docker-4c-4g-21663 sshd[9478]: Disconnected from invalid user jenkins 10.30.168.15 port 43376 [preauth] Sep 13 07:11:32 prd-ubuntu2004-docker-4c-4g-21663 useradd[10118]: new group: name=jenkins, GID=1001 Sep 13 07:11:32 prd-ubuntu2004-docker-4c-4g-21663 useradd[10118]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash, from=none Sep 13 07:11:32 prd-ubuntu2004-docker-4c-4g-21663 usermod[10152]: add 'jenkins' to group 'docker' Sep 13 07:11:32 prd-ubuntu2004-docker-4c-4g-21663 usermod[10152]: add 'jenkins' to shadow group 'docker' Sep 13 07:11:34 prd-ubuntu2004-docker-4c-4g-21663 sshd[10478]: Accepted publickey for jenkins from 10.30.168.15 port 43378 ssh2: RSA SHA256:BBsm4mRgG5V0fGum4Y1Rmy/vs16stdRVhwvexlLUhUs Sep 13 07:11:34 prd-ubuntu2004-docker-4c-4g-21663 sshd[10478]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Sep 13 07:11:34 prd-ubuntu2004-docker-4c-4g-21663 systemd-logind[752]: New session 1 of user jenkins. Sep 13 07:11:34 prd-ubuntu2004-docker-4c-4g-21663 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Sep 13 07:12:01 prd-ubuntu2004-docker-4c-4g-21663 CRON[20655]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 13 07:12:01 prd-ubuntu2004-docker-4c-4g-21663 CRON[20655]: pam_unix(cron:session): session closed for user root Sep 13 07:13:01 prd-ubuntu2004-docker-4c-4g-21663 CRON[28659]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 13 07:13:01 prd-ubuntu2004-docker-4c-4g-21663 CRON[28659]: pam_unix(cron:session): session closed for user root Sep 13 07:13:16 prd-ubuntu2004-docker-4c-4g-21663 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/docs-rtd-merge-titanium ; USER=root ; COMMAND=/usr/bin/cp /var/log/auth.log /tmp Sep 13 07:13:16 prd-ubuntu2004-docker-4c-4g-21663 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)