Jul 3 12:44:35 prd-ubuntu1804-docker-4c-4g-5630 passwd[954]: password for 'ubuntu' changed by 'root' Jul 3 12:44:35 prd-ubuntu1804-docker-4c-4g-5630 systemd-logind[1086]: Watching system buttons on /dev/input/event0 (Power Button) Jul 3 12:44:35 prd-ubuntu1804-docker-4c-4g-5630 systemd-logind[1086]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Jul 3 12:44:35 prd-ubuntu1804-docker-4c-4g-5630 systemd-logind[1086]: New seat seat0. Jul 3 12:44:35 prd-ubuntu1804-docker-4c-4g-5630 sshd[1298]: Server listening on 0.0.0.0 port 22. Jul 3 12:44:35 prd-ubuntu1804-docker-4c-4g-5630 sshd[1298]: Server listening on :: port 22. Jul 3 12:44:38 prd-ubuntu1804-docker-4c-4g-5630 sshd[1512]: Did not receive identification string from 10.32.4.5 port 35570 Jul 3 12:44:41 prd-ubuntu1804-docker-4c-4g-5630 sshd[1550]: Invalid user jenkins from 10.32.4.5 port 35572 Jul 3 12:44:41 prd-ubuntu1804-docker-4c-4g-5630 sshd[1550]: Received disconnect from 10.32.4.5 port 35572:11: Closed due to user request. [preauth] Jul 3 12:44:41 prd-ubuntu1804-docker-4c-4g-5630 sshd[1550]: Disconnected from invalid user jenkins 10.32.4.5 port 35572 [preauth] Jul 3 12:44:43 prd-ubuntu1804-docker-4c-4g-5630 sshd[1572]: Invalid user jenkins from 10.32.4.5 port 35574 Jul 3 12:44:43 prd-ubuntu1804-docker-4c-4g-5630 sshd[1572]: Received disconnect from 10.32.4.5 port 35574:11: Closed due to user request. [preauth] Jul 3 12:44:43 prd-ubuntu1804-docker-4c-4g-5630 sshd[1572]: Disconnected from invalid user jenkins 10.32.4.5 port 35574 [preauth] Jul 3 12:44:45 prd-ubuntu1804-docker-4c-4g-5630 sshd[1574]: Invalid user jenkins from 10.32.4.5 port 35578 Jul 3 12:44:45 prd-ubuntu1804-docker-4c-4g-5630 sshd[1574]: Received disconnect from 10.32.4.5 port 35578:11: Closed due to user request. [preauth] Jul 3 12:44:45 prd-ubuntu1804-docker-4c-4g-5630 sshd[1574]: Disconnected from invalid user jenkins 10.32.4.5 port 35578 [preauth] Jul 3 12:44:47 prd-ubuntu1804-docker-4c-4g-5630 sshd[1576]: Invalid user jenkins from 10.32.4.5 port 35582 Jul 3 12:44:47 prd-ubuntu1804-docker-4c-4g-5630 sshd[1576]: Received disconnect from 10.32.4.5 port 35582:11: Closed due to user request. [preauth] Jul 3 12:44:47 prd-ubuntu1804-docker-4c-4g-5630 sshd[1576]: Disconnected from invalid user jenkins 10.32.4.5 port 35582 [preauth] Jul 3 12:44:49 prd-ubuntu1804-docker-4c-4g-5630 sshd[1578]: Invalid user jenkins from 10.32.4.5 port 35584 Jul 3 12:44:49 prd-ubuntu1804-docker-4c-4g-5630 sshd[1578]: Received disconnect from 10.32.4.5 port 35584:11: Closed due to user request. [preauth] Jul 3 12:44:49 prd-ubuntu1804-docker-4c-4g-5630 sshd[1578]: Disconnected from invalid user jenkins 10.32.4.5 port 35584 [preauth] Jul 3 12:44:51 prd-ubuntu1804-docker-4c-4g-5630 sshd[1580]: Invalid user jenkins from 10.32.4.5 port 35592 Jul 3 12:44:51 prd-ubuntu1804-docker-4c-4g-5630 sshd[1580]: Received disconnect from 10.32.4.5 port 35592:11: Closed due to user request. [preauth] Jul 3 12:44:51 prd-ubuntu1804-docker-4c-4g-5630 sshd[1580]: Disconnected from invalid user jenkins 10.32.4.5 port 35592 [preauth] Jul 3 12:44:53 prd-ubuntu1804-docker-4c-4g-5630 sshd[1582]: Invalid user jenkins from 10.32.4.5 port 35594 Jul 3 12:44:54 prd-ubuntu1804-docker-4c-4g-5630 sshd[1582]: Received disconnect from 10.32.4.5 port 35594:11: Closed due to user request. [preauth] Jul 3 12:44:54 prd-ubuntu1804-docker-4c-4g-5630 sshd[1582]: Disconnected from invalid user jenkins 10.32.4.5 port 35594 [preauth] Jul 3 12:44:56 prd-ubuntu1804-docker-4c-4g-5630 sshd[1584]: Invalid user jenkins from 10.32.4.5 port 35596 Jul 3 12:44:56 prd-ubuntu1804-docker-4c-4g-5630 sshd[1584]: Received disconnect from 10.32.4.5 port 35596:11: Closed due to user request. [preauth] Jul 3 12:44:56 prd-ubuntu1804-docker-4c-4g-5630 sshd[1584]: Disconnected from invalid user jenkins 10.32.4.5 port 35596 [preauth] Jul 3 12:44:58 prd-ubuntu1804-docker-4c-4g-5630 sshd[1762]: Invalid user jenkins from 10.32.4.5 port 35598 Jul 3 12:44:58 prd-ubuntu1804-docker-4c-4g-5630 sshd[1762]: Received disconnect from 10.32.4.5 port 35598:11: Closed due to user request. [preauth] Jul 3 12:44:58 prd-ubuntu1804-docker-4c-4g-5630 sshd[1762]: Disconnected from invalid user jenkins 10.32.4.5 port 35598 [preauth] Jul 3 12:45:00 prd-ubuntu1804-docker-4c-4g-5630 sshd[1865]: Invalid user jenkins from 10.32.4.5 port 35602 Jul 3 12:45:00 prd-ubuntu1804-docker-4c-4g-5630 sshd[1865]: Received disconnect from 10.32.4.5 port 35602:11: Closed due to user request. [preauth] Jul 3 12:45:00 prd-ubuntu1804-docker-4c-4g-5630 sshd[1865]: Disconnected from invalid user jenkins 10.32.4.5 port 35602 [preauth] Jul 3 12:45:01 prd-ubuntu1804-docker-4c-4g-5630 CRON[1883]: pam_unix(cron:session): session opened for user root by (uid=0) Jul 3 12:45:01 prd-ubuntu1804-docker-4c-4g-5630 CRON[1883]: pam_unix(cron:session): session closed for user root Jul 3 12:45:02 prd-ubuntu1804-docker-4c-4g-5630 sshd[1893]: Invalid user jenkins from 10.32.4.5 port 35642 Jul 3 12:45:02 prd-ubuntu1804-docker-4c-4g-5630 sshd[1893]: Received disconnect from 10.32.4.5 port 35642:11: Closed due to user request. [preauth] Jul 3 12:45:02 prd-ubuntu1804-docker-4c-4g-5630 sshd[1893]: Disconnected from invalid user jenkins 10.32.4.5 port 35642 [preauth] Jul 3 12:45:03 prd-ubuntu1804-docker-4c-4g-5630 useradd[1911]: new group: name=jenkins, GID=1001 Jul 3 12:45:03 prd-ubuntu1804-docker-4c-4g-5630 useradd[1911]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash Jul 3 12:45:03 prd-ubuntu1804-docker-4c-4g-5630 usermod[1918]: add 'jenkins' to group 'docker' Jul 3 12:45:03 prd-ubuntu1804-docker-4c-4g-5630 usermod[1918]: add 'jenkins' to shadow group 'docker' Jul 3 12:45:04 prd-ubuntu1804-docker-4c-4g-5630 sshd[1952]: Accepted publickey for jenkins from 10.32.4.5 port 35648 ssh2: RSA SHA256:MwkAMVxCcf5mjE3h3rXSsWkdX5TtX0v/kuPsZexJ1qI Jul 3 12:45:04 prd-ubuntu1804-docker-4c-4g-5630 sshd[1952]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Jul 3 12:45:04 prd-ubuntu1804-docker-4c-4g-5630 systemd-logind[1086]: New session 2 of user jenkins. Jul 3 12:45:04 prd-ubuntu1804-docker-4c-4g-5630 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Jul 3 12:45:16 prd-ubuntu1804-docker-4c-4g-5630 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/com-log-autotools-sonarqube ; USER=root ; COMMAND=/usr/bin/apt-get update Jul 3 12:45:16 prd-ubuntu1804-docker-4c-4g-5630 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Jul 3 12:45:26 prd-ubuntu1804-docker-4c-4g-5630 sudo: pam_unix(sudo:session): session closed for user root Jul 3 12:45:26 prd-ubuntu1804-docker-4c-4g-5630 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/com-log-autotools-sonarqube ; USER=root ; COMMAND=/usr/bin/apt-get -q -y install autoconf-archive libjsoncpp-dev rpm valgrind Jul 3 12:45:26 prd-ubuntu1804-docker-4c-4g-5630 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Jul 3 12:45:42 prd-ubuntu1804-docker-4c-4g-5630 sudo: pam_unix(sudo:session): session closed for user root Jul 3 12:45:53 prd-ubuntu1804-docker-4c-4g-5630 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/com-log-autotools-sonarqube ; USER=root ; COMMAND=/bin/mv build-wrapper-linux-x86 /opt/build-wrapper Jul 3 12:45:53 prd-ubuntu1804-docker-4c-4g-5630 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Jul 3 12:45:53 prd-ubuntu1804-docker-4c-4g-5630 sudo: pam_unix(sudo:session): session closed for user root Jul 3 12:46:01 prd-ubuntu1804-docker-4c-4g-5630 CRON[8145]: pam_unix(cron:session): session opened for user root by (uid=0) Jul 3 12:46:01 prd-ubuntu1804-docker-4c-4g-5630 CRON[8145]: pam_unix(cron:session): session closed for user root Jul 3 12:47:01 prd-ubuntu1804-docker-4c-4g-5630 CRON[13069]: pam_unix(cron:session): session opened for user root by (uid=0) Jul 3 12:47:01 prd-ubuntu1804-docker-4c-4g-5630 CRON[13069]: pam_unix(cron:session): session closed for user root Jul 3 12:47:39 prd-ubuntu1804-docker-4c-4g-5630 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/com-log-autotools-sonarqube ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp Jul 3 12:47:39 prd-ubuntu1804-docker-4c-4g-5630 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)