Jul 4 08:40:33 prd-ubuntu1804-docker-4c-4g-5709 passwd[927]: password for 'ubuntu' changed by 'root' Jul 4 08:40:34 prd-ubuntu1804-docker-4c-4g-5709 systemd-logind[1022]: Watching system buttons on /dev/input/event0 (Power Button) Jul 4 08:40:34 prd-ubuntu1804-docker-4c-4g-5709 systemd-logind[1022]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Jul 4 08:40:34 prd-ubuntu1804-docker-4c-4g-5709 systemd-logind[1022]: New seat seat0. Jul 4 08:40:34 prd-ubuntu1804-docker-4c-4g-5709 sshd[1272]: Server listening on 0.0.0.0 port 22. Jul 4 08:40:34 prd-ubuntu1804-docker-4c-4g-5709 sshd[1272]: Server listening on :: port 22. Jul 4 08:40:37 prd-ubuntu1804-docker-4c-4g-5709 sshd[1493]: Did not receive identification string from 10.32.4.5 port 53044 Jul 4 08:40:40 prd-ubuntu1804-docker-4c-4g-5709 sshd[1545]: Invalid user jenkins from 10.32.4.5 port 53046 Jul 4 08:40:40 prd-ubuntu1804-docker-4c-4g-5709 sshd[1545]: Received disconnect from 10.32.4.5 port 53046:11: Closed due to user request. [preauth] Jul 4 08:40:40 prd-ubuntu1804-docker-4c-4g-5709 sshd[1545]: Disconnected from invalid user jenkins 10.32.4.5 port 53046 [preauth] Jul 4 08:40:42 prd-ubuntu1804-docker-4c-4g-5709 sshd[1564]: Invalid user jenkins from 10.32.4.5 port 53048 Jul 4 08:40:42 prd-ubuntu1804-docker-4c-4g-5709 sshd[1564]: Received disconnect from 10.32.4.5 port 53048:11: Closed due to user request. [preauth] Jul 4 08:40:42 prd-ubuntu1804-docker-4c-4g-5709 sshd[1564]: Disconnected from invalid user jenkins 10.32.4.5 port 53048 [preauth] Jul 4 08:40:44 prd-ubuntu1804-docker-4c-4g-5709 sshd[1566]: Invalid user jenkins from 10.32.4.5 port 53052 Jul 4 08:40:44 prd-ubuntu1804-docker-4c-4g-5709 sshd[1566]: Received disconnect from 10.32.4.5 port 53052:11: Closed due to user request. [preauth] Jul 4 08:40:44 prd-ubuntu1804-docker-4c-4g-5709 sshd[1566]: Disconnected from invalid user jenkins 10.32.4.5 port 53052 [preauth] Jul 4 08:40:46 prd-ubuntu1804-docker-4c-4g-5709 sshd[1568]: Invalid user jenkins from 10.32.4.5 port 53054 Jul 4 08:40:46 prd-ubuntu1804-docker-4c-4g-5709 sshd[1568]: Received disconnect from 10.32.4.5 port 53054:11: Closed due to user request. [preauth] Jul 4 08:40:46 prd-ubuntu1804-docker-4c-4g-5709 sshd[1568]: Disconnected from invalid user jenkins 10.32.4.5 port 53054 [preauth] Jul 4 08:40:48 prd-ubuntu1804-docker-4c-4g-5709 sshd[1570]: Invalid user jenkins from 10.32.4.5 port 53056 Jul 4 08:40:48 prd-ubuntu1804-docker-4c-4g-5709 sshd[1570]: Received disconnect from 10.32.4.5 port 53056:11: Closed due to user request. [preauth] Jul 4 08:40:48 prd-ubuntu1804-docker-4c-4g-5709 sshd[1570]: Disconnected from invalid user jenkins 10.32.4.5 port 53056 [preauth] Jul 4 08:40:50 prd-ubuntu1804-docker-4c-4g-5709 sshd[1572]: Invalid user jenkins from 10.32.4.5 port 53064 Jul 4 08:40:50 prd-ubuntu1804-docker-4c-4g-5709 sshd[1572]: Received disconnect from 10.32.4.5 port 53064:11: Closed due to user request. [preauth] Jul 4 08:40:50 prd-ubuntu1804-docker-4c-4g-5709 sshd[1572]: Disconnected from invalid user jenkins 10.32.4.5 port 53064 [preauth] Jul 4 08:40:52 prd-ubuntu1804-docker-4c-4g-5709 sshd[1574]: Invalid user jenkins from 10.32.4.5 port 53068 Jul 4 08:40:53 prd-ubuntu1804-docker-4c-4g-5709 sshd[1574]: Received disconnect from 10.32.4.5 port 53068:11: Closed due to user request. [preauth] Jul 4 08:40:53 prd-ubuntu1804-docker-4c-4g-5709 sshd[1574]: Disconnected from invalid user jenkins 10.32.4.5 port 53068 [preauth] Jul 4 08:40:55 prd-ubuntu1804-docker-4c-4g-5709 sshd[1576]: Invalid user jenkins from 10.32.4.5 port 53070 Jul 4 08:40:55 prd-ubuntu1804-docker-4c-4g-5709 sshd[1576]: Received disconnect from 10.32.4.5 port 53070:11: Closed due to user request. [preauth] Jul 4 08:40:55 prd-ubuntu1804-docker-4c-4g-5709 sshd[1576]: Disconnected from invalid user jenkins 10.32.4.5 port 53070 [preauth] Jul 4 08:40:58 prd-ubuntu1804-docker-4c-4g-5709 sshd[1758]: Invalid user jenkins from 10.32.4.5 port 53072 Jul 4 08:40:58 prd-ubuntu1804-docker-4c-4g-5709 sshd[1758]: Received disconnect from 10.32.4.5 port 53072:11: Closed due to user request. [preauth] Jul 4 08:40:58 prd-ubuntu1804-docker-4c-4g-5709 sshd[1758]: Disconnected from invalid user jenkins 10.32.4.5 port 53072 [preauth] Jul 4 08:41:00 prd-ubuntu1804-docker-4c-4g-5709 sshd[1837]: Invalid user jenkins from 10.32.4.5 port 53076 Jul 4 08:41:00 prd-ubuntu1804-docker-4c-4g-5709 sshd[1837]: Received disconnect from 10.32.4.5 port 53076:11: Closed due to user request. [preauth] Jul 4 08:41:00 prd-ubuntu1804-docker-4c-4g-5709 sshd[1837]: Disconnected from invalid user jenkins 10.32.4.5 port 53076 [preauth] Jul 4 08:41:02 prd-ubuntu1804-docker-4c-4g-5709 sshd[1855]: Invalid user jenkins from 10.32.4.5 port 53078 Jul 4 08:41:02 prd-ubuntu1804-docker-4c-4g-5709 sshd[1855]: Received disconnect from 10.32.4.5 port 53078:11: Closed due to user request. [preauth] Jul 4 08:41:02 prd-ubuntu1804-docker-4c-4g-5709 sshd[1855]: Disconnected from invalid user jenkins 10.32.4.5 port 53078 [preauth] Jul 4 08:41:02 prd-ubuntu1804-docker-4c-4g-5709 CRON[1859]: pam_unix(cron:session): session opened for user root by (uid=0) Jul 4 08:41:03 prd-ubuntu1804-docker-4c-4g-5709 CRON[1859]: pam_unix(cron:session): session closed for user root Jul 4 08:41:04 prd-ubuntu1804-docker-4c-4g-5709 useradd[1882]: new group: name=jenkins, GID=1001 Jul 4 08:41:04 prd-ubuntu1804-docker-4c-4g-5709 useradd[1882]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash Jul 4 08:41:04 prd-ubuntu1804-docker-4c-4g-5709 usermod[1889]: add 'jenkins' to group 'docker' Jul 4 08:41:04 prd-ubuntu1804-docker-4c-4g-5709 usermod[1889]: add 'jenkins' to shadow group 'docker' Jul 4 08:41:04 prd-ubuntu1804-docker-4c-4g-5709 sshd[1932]: Accepted publickey for jenkins from 10.32.4.5 port 53080 ssh2: RSA SHA256:MwkAMVxCcf5mjE3h3rXSsWkdX5TtX0v/kuPsZexJ1qI Jul 4 08:41:04 prd-ubuntu1804-docker-4c-4g-5709 sshd[1932]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Jul 4 08:41:04 prd-ubuntu1804-docker-4c-4g-5709 systemd-logind[1022]: New session 2 of user jenkins. Jul 4 08:41:04 prd-ubuntu1804-docker-4c-4g-5709 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Jul 4 08:42:01 prd-ubuntu1804-docker-4c-4g-5709 CRON[2682]: pam_unix(cron:session): session opened for user root by (uid=0) Jul 4 08:42:01 prd-ubuntu1804-docker-4c-4g-5709 CRON[2682]: pam_unix(cron:session): session closed for user root Jul 4 08:43:01 prd-ubuntu1804-docker-4c-4g-5709 CRON[3648]: pam_unix(cron:session): session opened for user root by (uid=0) Jul 4 08:43:01 prd-ubuntu1804-docker-4c-4g-5709 CRON[3648]: pam_unix(cron:session): session closed for user root Jul 4 08:43:06 prd-ubuntu1804-docker-4c-4g-5709 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/it-otf-a1-policy-manager-vth-docker-merge-master ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp Jul 4 08:43:06 prd-ubuntu1804-docker-4c-4g-5709 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)