Apr 17 15:13:53 prd-ubuntu1804-docker-4c-4g-744 passwd[933]: password for 'ubuntu' changed by 'root' Apr 17 15:13:53 prd-ubuntu1804-docker-4c-4g-744 systemd-logind[986]: Watching system buttons on /dev/input/event0 (Power Button) Apr 17 15:13:53 prd-ubuntu1804-docker-4c-4g-744 systemd-logind[986]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Apr 17 15:13:53 prd-ubuntu1804-docker-4c-4g-744 systemd-logind[986]: New seat seat0. Apr 17 15:13:53 prd-ubuntu1804-docker-4c-4g-744 sshd[1279]: Server listening on 0.0.0.0 port 22. Apr 17 15:13:53 prd-ubuntu1804-docker-4c-4g-744 sshd[1279]: Server listening on :: port 22. Apr 17 15:13:54 prd-ubuntu1804-docker-4c-4g-744 sshd[1317]: Did not receive identification string from 10.32.4.5 port 60168 Apr 17 15:13:57 prd-ubuntu1804-docker-4c-4g-744 sshd[1534]: Invalid user jenkins from 10.32.4.5 port 60172 Apr 17 15:13:57 prd-ubuntu1804-docker-4c-4g-744 sshd[1534]: Received disconnect from 10.32.4.5 port 60172:11: Closed due to user request. [preauth] Apr 17 15:13:57 prd-ubuntu1804-docker-4c-4g-744 sshd[1534]: Disconnected from invalid user jenkins 10.32.4.5 port 60172 [preauth] Apr 17 15:13:59 prd-ubuntu1804-docker-4c-4g-744 sshd[1567]: Invalid user jenkins from 10.32.4.5 port 60174 Apr 17 15:13:59 prd-ubuntu1804-docker-4c-4g-744 sshd[1567]: Received disconnect from 10.32.4.5 port 60174:11: Closed due to user request. [preauth] Apr 17 15:13:59 prd-ubuntu1804-docker-4c-4g-744 sshd[1567]: Disconnected from invalid user jenkins 10.32.4.5 port 60174 [preauth] Apr 17 15:14:01 prd-ubuntu1804-docker-4c-4g-744 CRON[1582]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 17 15:14:01 prd-ubuntu1804-docker-4c-4g-744 CRON[1582]: pam_unix(cron:session): session closed for user root Apr 17 15:14:01 prd-ubuntu1804-docker-4c-4g-744 sshd[1590]: Invalid user jenkins from 10.32.4.5 port 60176 Apr 17 15:14:01 prd-ubuntu1804-docker-4c-4g-744 sshd[1590]: Received disconnect from 10.32.4.5 port 60176:11: Closed due to user request. [preauth] Apr 17 15:14:01 prd-ubuntu1804-docker-4c-4g-744 sshd[1590]: Disconnected from invalid user jenkins 10.32.4.5 port 60176 [preauth] Apr 17 15:14:03 prd-ubuntu1804-docker-4c-4g-744 sshd[1592]: Invalid user jenkins from 10.32.4.5 port 60178 Apr 17 15:14:03 prd-ubuntu1804-docker-4c-4g-744 sshd[1592]: Received disconnect from 10.32.4.5 port 60178:11: Closed due to user request. [preauth] Apr 17 15:14:03 prd-ubuntu1804-docker-4c-4g-744 sshd[1592]: Disconnected from invalid user jenkins 10.32.4.5 port 60178 [preauth] Apr 17 15:14:05 prd-ubuntu1804-docker-4c-4g-744 sshd[1594]: Invalid user jenkins from 10.32.4.5 port 60180 Apr 17 15:14:05 prd-ubuntu1804-docker-4c-4g-744 sshd[1594]: Received disconnect from 10.32.4.5 port 60180:11: Closed due to user request. [preauth] Apr 17 15:14:05 prd-ubuntu1804-docker-4c-4g-744 sshd[1594]: Disconnected from invalid user jenkins 10.32.4.5 port 60180 [preauth] Apr 17 15:14:08 prd-ubuntu1804-docker-4c-4g-744 sshd[1596]: Invalid user jenkins from 10.32.4.5 port 60182 Apr 17 15:14:08 prd-ubuntu1804-docker-4c-4g-744 sshd[1596]: Received disconnect from 10.32.4.5 port 60182:11: Closed due to user request. [preauth] Apr 17 15:14:08 prd-ubuntu1804-docker-4c-4g-744 sshd[1596]: Disconnected from invalid user jenkins 10.32.4.5 port 60182 [preauth] Apr 17 15:14:10 prd-ubuntu1804-docker-4c-4g-744 sshd[1598]: Invalid user jenkins from 10.32.4.5 port 60184 Apr 17 15:14:10 prd-ubuntu1804-docker-4c-4g-744 sshd[1598]: Received disconnect from 10.32.4.5 port 60184:11: Closed due to user request. [preauth] Apr 17 15:14:10 prd-ubuntu1804-docker-4c-4g-744 sshd[1598]: Disconnected from invalid user jenkins 10.32.4.5 port 60184 [preauth] Apr 17 15:14:12 prd-ubuntu1804-docker-4c-4g-744 sshd[1600]: Invalid user jenkins from 10.32.4.5 port 60188 Apr 17 15:14:12 prd-ubuntu1804-docker-4c-4g-744 sshd[1600]: Received disconnect from 10.32.4.5 port 60188:11: Closed due to user request. [preauth] Apr 17 15:14:12 prd-ubuntu1804-docker-4c-4g-744 sshd[1600]: Disconnected from invalid user jenkins 10.32.4.5 port 60188 [preauth] Apr 17 15:14:14 prd-ubuntu1804-docker-4c-4g-744 sshd[1602]: Invalid user jenkins from 10.32.4.5 port 60190 Apr 17 15:14:14 prd-ubuntu1804-docker-4c-4g-744 sshd[1602]: Received disconnect from 10.32.4.5 port 60190:11: Closed due to user request. [preauth] Apr 17 15:14:14 prd-ubuntu1804-docker-4c-4g-744 sshd[1602]: Disconnected from invalid user jenkins 10.32.4.5 port 60190 [preauth] Apr 17 15:14:16 prd-ubuntu1804-docker-4c-4g-744 sshd[1768]: Invalid user jenkins from 10.32.4.5 port 60194 Apr 17 15:14:16 prd-ubuntu1804-docker-4c-4g-744 sshd[1768]: Received disconnect from 10.32.4.5 port 60194:11: Closed due to user request. [preauth] Apr 17 15:14:16 prd-ubuntu1804-docker-4c-4g-744 sshd[1768]: Disconnected from invalid user jenkins 10.32.4.5 port 60194 [preauth] Apr 17 15:14:18 prd-ubuntu1804-docker-4c-4g-744 sshd[1844]: Invalid user jenkins from 10.32.4.5 port 60196 Apr 17 15:14:18 prd-ubuntu1804-docker-4c-4g-744 sshd[1844]: Received disconnect from 10.32.4.5 port 60196:11: Closed due to user request. [preauth] Apr 17 15:14:18 prd-ubuntu1804-docker-4c-4g-744 sshd[1844]: Disconnected from invalid user jenkins 10.32.4.5 port 60196 [preauth] Apr 17 15:14:20 prd-ubuntu1804-docker-4c-4g-744 sshd[1881]: Invalid user jenkins from 10.32.4.5 port 60198 Apr 17 15:14:20 prd-ubuntu1804-docker-4c-4g-744 sshd[1881]: Received disconnect from 10.32.4.5 port 60198:11: Closed due to user request. [preauth] Apr 17 15:14:20 prd-ubuntu1804-docker-4c-4g-744 sshd[1881]: Disconnected from invalid user jenkins 10.32.4.5 port 60198 [preauth] Apr 17 15:14:23 prd-ubuntu1804-docker-4c-4g-744 sshd[1885]: Invalid user jenkins from 10.32.4.5 port 60200 Apr 17 15:14:23 prd-ubuntu1804-docker-4c-4g-744 sshd[1885]: Received disconnect from 10.32.4.5 port 60200:11: Closed due to user request. [preauth] Apr 17 15:14:23 prd-ubuntu1804-docker-4c-4g-744 sshd[1885]: Disconnected from invalid user jenkins 10.32.4.5 port 60200 [preauth] Apr 17 15:14:23 prd-ubuntu1804-docker-4c-4g-744 useradd[1892]: new group: name=jenkins, GID=1001 Apr 17 15:14:23 prd-ubuntu1804-docker-4c-4g-744 useradd[1892]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash Apr 17 15:14:23 prd-ubuntu1804-docker-4c-4g-744 usermod[1899]: add 'jenkins' to group 'docker' Apr 17 15:14:23 prd-ubuntu1804-docker-4c-4g-744 usermod[1899]: add 'jenkins' to shadow group 'docker' Apr 17 15:14:25 prd-ubuntu1804-docker-4c-4g-744 sshd[1942]: Accepted publickey for jenkins from 10.32.4.5 port 60204 ssh2: RSA SHA256:MwkAMVxCcf5mjE3h3rXSsWkdX5TtX0v/kuPsZexJ1qI Apr 17 15:14:25 prd-ubuntu1804-docker-4c-4g-744 sshd[1942]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Apr 17 15:14:25 prd-ubuntu1804-docker-4c-4g-744 systemd-logind[986]: New session 2 of user jenkins. Apr 17 15:14:25 prd-ubuntu1804-docker-4c-4g-744 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Apr 17 15:15:01 prd-ubuntu1804-docker-4c-4g-744 CRON[2453]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 17 15:15:01 prd-ubuntu1804-docker-4c-4g-744 CRON[2453]: pam_unix(cron:session): session closed for user root Apr 17 15:16:01 prd-ubuntu1804-docker-4c-4g-744 CRON[2505]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 17 15:16:01 prd-ubuntu1804-docker-4c-4g-744 CRON[2505]: pam_unix(cron:session): session closed for user root Apr 17 15:17:01 prd-ubuntu1804-docker-4c-4g-744 CRON[3103]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 17 15:17:01 prd-ubuntu1804-docker-4c-4g-744 CRON[3104]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 17 15:17:01 prd-ubuntu1804-docker-4c-4g-744 CRON[3104]: pam_unix(cron:session): session closed for user root Apr 17 15:17:01 prd-ubuntu1804-docker-4c-4g-744 CRON[3103]: pam_unix(cron:session): session closed for user root Apr 17 15:17:46 prd-ubuntu1804-docker-4c-4g-744 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/it-otf-a1-sdnc-vth-docker-merge-master ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp Apr 17 15:17:46 prd-ubuntu1804-docker-4c-4g-744 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)