Apr 7 21:33:36 prd-ubuntu1804-docker-4c-4g-4533 passwd[914]: password for 'ubuntu' changed by 'root' Apr 7 21:33:36 prd-ubuntu1804-docker-4c-4g-4533 systemd-logind[970]: Watching system buttons on /dev/input/event0 (Power Button) Apr 7 21:33:36 prd-ubuntu1804-docker-4c-4g-4533 systemd-logind[970]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Apr 7 21:33:36 prd-ubuntu1804-docker-4c-4g-4533 systemd-logind[970]: New seat seat0. Apr 7 21:33:37 prd-ubuntu1804-docker-4c-4g-4533 sshd[1122]: Server listening on 0.0.0.0 port 22. Apr 7 21:33:37 prd-ubuntu1804-docker-4c-4g-4533 sshd[1122]: Server listening on :: port 22. Apr 7 21:33:40 prd-ubuntu1804-docker-4c-4g-4533 sshd[1432]: Did not receive identification string from 10.32.4.5 port 37988 Apr 7 21:33:43 prd-ubuntu1804-docker-4c-4g-4533 sshd[1471]: Invalid user jenkins from 10.32.4.5 port 37996 Apr 7 21:33:43 prd-ubuntu1804-docker-4c-4g-4533 sshd[1471]: Received disconnect from 10.32.4.5 port 37996:11: Closed due to user request. [preauth] Apr 7 21:33:43 prd-ubuntu1804-docker-4c-4g-4533 sshd[1471]: Disconnected from invalid user jenkins 10.32.4.5 port 37996 [preauth] Apr 7 21:33:45 prd-ubuntu1804-docker-4c-4g-4533 sshd[1491]: Invalid user jenkins from 10.32.4.5 port 37998 Apr 7 21:33:45 prd-ubuntu1804-docker-4c-4g-4533 sshd[1491]: Received disconnect from 10.32.4.5 port 37998:11: Closed due to user request. [preauth] Apr 7 21:33:45 prd-ubuntu1804-docker-4c-4g-4533 sshd[1491]: Disconnected from invalid user jenkins 10.32.4.5 port 37998 [preauth] Apr 7 21:33:47 prd-ubuntu1804-docker-4c-4g-4533 sshd[1493]: Invalid user jenkins from 10.32.4.5 port 38000 Apr 7 21:33:47 prd-ubuntu1804-docker-4c-4g-4533 sshd[1493]: Received disconnect from 10.32.4.5 port 38000:11: Closed due to user request. [preauth] Apr 7 21:33:47 prd-ubuntu1804-docker-4c-4g-4533 sshd[1493]: Disconnected from invalid user jenkins 10.32.4.5 port 38000 [preauth] Apr 7 21:33:49 prd-ubuntu1804-docker-4c-4g-4533 sshd[1495]: Invalid user jenkins from 10.32.4.5 port 38004 Apr 7 21:33:49 prd-ubuntu1804-docker-4c-4g-4533 sshd[1495]: Received disconnect from 10.32.4.5 port 38004:11: Closed due to user request. [preauth] Apr 7 21:33:49 prd-ubuntu1804-docker-4c-4g-4533 sshd[1495]: Disconnected from invalid user jenkins 10.32.4.5 port 38004 [preauth] Apr 7 21:33:51 prd-ubuntu1804-docker-4c-4g-4533 sshd[1497]: Invalid user jenkins from 10.32.4.5 port 38006 Apr 7 21:33:51 prd-ubuntu1804-docker-4c-4g-4533 sshd[1497]: Received disconnect from 10.32.4.5 port 38006:11: Closed due to user request. [preauth] Apr 7 21:33:51 prd-ubuntu1804-docker-4c-4g-4533 sshd[1497]: Disconnected from invalid user jenkins 10.32.4.5 port 38006 [preauth] Apr 7 21:33:53 prd-ubuntu1804-docker-4c-4g-4533 sshd[1499]: Invalid user jenkins from 10.32.4.5 port 38008 Apr 7 21:33:53 prd-ubuntu1804-docker-4c-4g-4533 sshd[1499]: Received disconnect from 10.32.4.5 port 38008:11: Closed due to user request. [preauth] Apr 7 21:33:53 prd-ubuntu1804-docker-4c-4g-4533 sshd[1499]: Disconnected from invalid user jenkins 10.32.4.5 port 38008 [preauth] Apr 7 21:33:55 prd-ubuntu1804-docker-4c-4g-4533 sshd[1501]: Invalid user jenkins from 10.32.4.5 port 38010 Apr 7 21:33:55 prd-ubuntu1804-docker-4c-4g-4533 sshd[1501]: Received disconnect from 10.32.4.5 port 38010:11: Closed due to user request. [preauth] Apr 7 21:33:55 prd-ubuntu1804-docker-4c-4g-4533 sshd[1501]: Disconnected from invalid user jenkins 10.32.4.5 port 38010 [preauth] Apr 7 21:33:57 prd-ubuntu1804-docker-4c-4g-4533 sshd[1503]: Invalid user jenkins from 10.32.4.5 port 38012 Apr 7 21:33:58 prd-ubuntu1804-docker-4c-4g-4533 sshd[1503]: Received disconnect from 10.32.4.5 port 38012:11: Closed due to user request. [preauth] Apr 7 21:33:58 prd-ubuntu1804-docker-4c-4g-4533 sshd[1503]: Disconnected from invalid user jenkins 10.32.4.5 port 38012 [preauth] Apr 7 21:34:00 prd-ubuntu1804-docker-4c-4g-4533 sshd[1670]: Invalid user jenkins from 10.32.4.5 port 38014 Apr 7 21:34:00 prd-ubuntu1804-docker-4c-4g-4533 sshd[1670]: Received disconnect from 10.32.4.5 port 38014:11: Closed due to user request. [preauth] Apr 7 21:34:00 prd-ubuntu1804-docker-4c-4g-4533 sshd[1670]: Disconnected from invalid user jenkins 10.32.4.5 port 38014 [preauth] Apr 7 21:34:01 prd-ubuntu1804-docker-4c-4g-4533 CRON[1762]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 7 21:34:01 prd-ubuntu1804-docker-4c-4g-4533 CRON[1762]: pam_unix(cron:session): session closed for user root Apr 7 21:34:02 prd-ubuntu1804-docker-4c-4g-4533 sshd[1787]: Invalid user jenkins from 10.32.4.5 port 38016 Apr 7 21:34:02 prd-ubuntu1804-docker-4c-4g-4533 sshd[1787]: Received disconnect from 10.32.4.5 port 38016:11: Closed due to user request. [preauth] Apr 7 21:34:02 prd-ubuntu1804-docker-4c-4g-4533 sshd[1787]: Disconnected from invalid user jenkins 10.32.4.5 port 38016 [preauth] Apr 7 21:34:04 prd-ubuntu1804-docker-4c-4g-4533 sshd[1805]: Invalid user jenkins from 10.32.4.5 port 38020 Apr 7 21:34:04 prd-ubuntu1804-docker-4c-4g-4533 sshd[1805]: Received disconnect from 10.32.4.5 port 38020:11: Closed due to user request. [preauth] Apr 7 21:34:04 prd-ubuntu1804-docker-4c-4g-4533 sshd[1805]: Disconnected from invalid user jenkins 10.32.4.5 port 38020 [preauth] Apr 7 21:34:05 prd-ubuntu1804-docker-4c-4g-4533 useradd[1823]: new group: name=jenkins, GID=1001 Apr 7 21:34:05 prd-ubuntu1804-docker-4c-4g-4533 useradd[1823]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash Apr 7 21:34:05 prd-ubuntu1804-docker-4c-4g-4533 usermod[1830]: add 'jenkins' to group 'docker' Apr 7 21:34:05 prd-ubuntu1804-docker-4c-4g-4533 usermod[1830]: add 'jenkins' to shadow group 'docker' Apr 7 21:34:06 prd-ubuntu1804-docker-4c-4g-4533 sshd[1864]: Accepted publickey for jenkins from 10.32.4.5 port 38022 ssh2: RSA SHA256:MwkAMVxCcf5mjE3h3rXSsWkdX5TtX0v/kuPsZexJ1qI Apr 7 21:34:06 prd-ubuntu1804-docker-4c-4g-4533 sshd[1864]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Apr 7 21:34:06 prd-ubuntu1804-docker-4c-4g-4533 systemd-logind[970]: New session 2 of user jenkins. Apr 7 21:34:06 prd-ubuntu1804-docker-4c-4g-4533 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Apr 7 21:35:01 prd-ubuntu1804-docker-4c-4g-4533 CRON[2428]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 7 21:35:01 prd-ubuntu1804-docker-4c-4g-4533 CRON[2428]: pam_unix(cron:session): session closed for user root Apr 7 21:36:01 prd-ubuntu1804-docker-4c-4g-4533 CRON[5231]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 7 21:36:01 prd-ubuntu1804-docker-4c-4g-4533 CRON[5231]: pam_unix(cron:session): session closed for user root Apr 7 21:37:01 prd-ubuntu1804-docker-4c-4g-4533 CRON[5237]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 7 21:37:01 prd-ubuntu1804-docker-4c-4g-4533 CRON[5237]: pam_unix(cron:session): session closed for user root Apr 7 21:38:01 prd-ubuntu1804-docker-4c-4g-4533 CRON[5249]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 7 21:38:01 prd-ubuntu1804-docker-4c-4g-4533 CRON[5249]: pam_unix(cron:session): session closed for user root Apr 7 21:39:01 prd-ubuntu1804-docker-4c-4g-4533 CRON[5577]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 7 21:39:01 prd-ubuntu1804-docker-4c-4g-4533 CRON[5577]: pam_unix(cron:session): session closed for user root Apr 7 21:40:01 prd-ubuntu1804-docker-4c-4g-4533 CRON[5792]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 7 21:40:01 prd-ubuntu1804-docker-4c-4g-4533 CRON[5792]: pam_unix(cron:session): session closed for user root Apr 7 21:40:20 prd-ubuntu1804-docker-4c-4g-4533 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/it-otf-camunda-docker-merge-master ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp Apr 7 21:40:20 prd-ubuntu1804-docker-4c-4g-4533 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)