Aug 8 15:31:29 prd-ubuntu1804-docker-4c-4g-464 passwd[924]: password for 'ubuntu' changed by 'root' Aug 8 15:31:29 prd-ubuntu1804-docker-4c-4g-464 systemd-logind[999]: Watching system buttons on /dev/input/event0 (Power Button) Aug 8 15:31:29 prd-ubuntu1804-docker-4c-4g-464 systemd-logind[999]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Aug 8 15:31:29 prd-ubuntu1804-docker-4c-4g-464 systemd-logind[999]: New seat seat0. Aug 8 15:31:29 prd-ubuntu1804-docker-4c-4g-464 sshd[1166]: Server listening on 0.0.0.0 port 22. Aug 8 15:31:29 prd-ubuntu1804-docker-4c-4g-464 sshd[1166]: Server listening on :: port 22. Aug 8 15:31:31 prd-ubuntu1804-docker-4c-4g-464 sshd[1382]: Did not receive identification string from 10.32.4.5 port 60866 Aug 8 15:31:36 prd-ubuntu1804-docker-4c-4g-464 sshd[1457]: Invalid user jenkins from 10.32.4.5 port 60868 Aug 8 15:31:36 prd-ubuntu1804-docker-4c-4g-464 sshd[1457]: Received disconnect from 10.32.4.5 port 60868:11: Closed due to user request. [preauth] Aug 8 15:31:36 prd-ubuntu1804-docker-4c-4g-464 sshd[1457]: Disconnected from invalid user jenkins 10.32.4.5 port 60868 [preauth] Aug 8 15:31:38 prd-ubuntu1804-docker-4c-4g-464 sshd[1467]: Invalid user jenkins from 10.32.4.5 port 60872 Aug 8 15:31:38 prd-ubuntu1804-docker-4c-4g-464 sshd[1467]: Received disconnect from 10.32.4.5 port 60872:11: Closed due to user request. [preauth] Aug 8 15:31:38 prd-ubuntu1804-docker-4c-4g-464 sshd[1467]: Disconnected from invalid user jenkins 10.32.4.5 port 60872 [preauth] Aug 8 15:31:40 prd-ubuntu1804-docker-4c-4g-464 sshd[1469]: Invalid user jenkins from 10.32.4.5 port 60874 Aug 8 15:31:40 prd-ubuntu1804-docker-4c-4g-464 sshd[1469]: Received disconnect from 10.32.4.5 port 60874:11: Closed due to user request. [preauth] Aug 8 15:31:40 prd-ubuntu1804-docker-4c-4g-464 sshd[1469]: Disconnected from invalid user jenkins 10.32.4.5 port 60874 [preauth] Aug 8 15:31:43 prd-ubuntu1804-docker-4c-4g-464 sshd[1471]: Invalid user jenkins from 10.32.4.5 port 60876 Aug 8 15:31:43 prd-ubuntu1804-docker-4c-4g-464 sshd[1471]: Received disconnect from 10.32.4.5 port 60876:11: Closed due to user request. [preauth] Aug 8 15:31:43 prd-ubuntu1804-docker-4c-4g-464 sshd[1471]: Disconnected from invalid user jenkins 10.32.4.5 port 60876 [preauth] Aug 8 15:31:45 prd-ubuntu1804-docker-4c-4g-464 sshd[1473]: Invalid user jenkins from 10.32.4.5 port 60878 Aug 8 15:31:45 prd-ubuntu1804-docker-4c-4g-464 sshd[1473]: Received disconnect from 10.32.4.5 port 60878:11: Closed due to user request. [preauth] Aug 8 15:31:45 prd-ubuntu1804-docker-4c-4g-464 sshd[1473]: Disconnected from invalid user jenkins 10.32.4.5 port 60878 [preauth] Aug 8 15:31:47 prd-ubuntu1804-docker-4c-4g-464 sshd[1475]: Invalid user jenkins from 10.32.4.5 port 60880 Aug 8 15:31:47 prd-ubuntu1804-docker-4c-4g-464 sshd[1475]: Received disconnect from 10.32.4.5 port 60880:11: Closed due to user request. [preauth] Aug 8 15:31:47 prd-ubuntu1804-docker-4c-4g-464 sshd[1475]: Disconnected from invalid user jenkins 10.32.4.5 port 60880 [preauth] Aug 8 15:31:49 prd-ubuntu1804-docker-4c-4g-464 sshd[1477]: Invalid user jenkins from 10.32.4.5 port 60882 Aug 8 15:31:49 prd-ubuntu1804-docker-4c-4g-464 sshd[1477]: Received disconnect from 10.32.4.5 port 60882:11: Closed due to user request. [preauth] Aug 8 15:31:49 prd-ubuntu1804-docker-4c-4g-464 sshd[1477]: Disconnected from invalid user jenkins 10.32.4.5 port 60882 [preauth] Aug 8 15:31:51 prd-ubuntu1804-docker-4c-4g-464 sshd[1515]: Invalid user jenkins from 10.32.4.5 port 60884 Aug 8 15:31:51 prd-ubuntu1804-docker-4c-4g-464 sshd[1515]: Received disconnect from 10.32.4.5 port 60884:11: Closed due to user request. [preauth] Aug 8 15:31:51 prd-ubuntu1804-docker-4c-4g-464 sshd[1515]: Disconnected from invalid user jenkins 10.32.4.5 port 60884 [preauth] Aug 8 15:31:53 prd-ubuntu1804-docker-4c-4g-464 sshd[1719]: Invalid user jenkins from 10.32.4.5 port 60888 Aug 8 15:31:53 prd-ubuntu1804-docker-4c-4g-464 sshd[1719]: Received disconnect from 10.32.4.5 port 60888:11: Closed due to user request. [preauth] Aug 8 15:31:53 prd-ubuntu1804-docker-4c-4g-464 sshd[1719]: Disconnected from invalid user jenkins 10.32.4.5 port 60888 [preauth] Aug 8 15:31:55 prd-ubuntu1804-docker-4c-4g-464 sshd[1759]: Invalid user jenkins from 10.32.4.5 port 60890 Aug 8 15:31:55 prd-ubuntu1804-docker-4c-4g-464 sshd[1759]: Received disconnect from 10.32.4.5 port 60890:11: Closed due to user request. [preauth] Aug 8 15:31:55 prd-ubuntu1804-docker-4c-4g-464 sshd[1759]: Disconnected from invalid user jenkins 10.32.4.5 port 60890 [preauth] Aug 8 15:31:58 prd-ubuntu1804-docker-4c-4g-464 sshd[1763]: Invalid user jenkins from 10.32.4.5 port 60892 Aug 8 15:31:58 prd-ubuntu1804-docker-4c-4g-464 sshd[1763]: Received disconnect from 10.32.4.5 port 60892:11: Closed due to user request. [preauth] Aug 8 15:31:58 prd-ubuntu1804-docker-4c-4g-464 sshd[1763]: Disconnected from invalid user jenkins 10.32.4.5 port 60892 [preauth] Aug 8 15:32:00 prd-ubuntu1804-docker-4c-4g-464 useradd[1787]: new group: name=jenkins, GID=1001 Aug 8 15:32:00 prd-ubuntu1804-docker-4c-4g-464 useradd[1787]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash Aug 8 15:32:00 prd-ubuntu1804-docker-4c-4g-464 usermod[1794]: add 'jenkins' to group 'docker' Aug 8 15:32:00 prd-ubuntu1804-docker-4c-4g-464 usermod[1794]: add 'jenkins' to shadow group 'docker' Aug 8 15:32:00 prd-ubuntu1804-docker-4c-4g-464 sshd[1795]: Accepted publickey for jenkins from 10.32.4.5 port 60900 ssh2: RSA SHA256:MwkAMVxCcf5mjE3h3rXSsWkdX5TtX0v/kuPsZexJ1qI Aug 8 15:32:00 prd-ubuntu1804-docker-4c-4g-464 sshd[1795]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Aug 8 15:32:00 prd-ubuntu1804-docker-4c-4g-464 systemd-logind[999]: New session 1 of user jenkins. Aug 8 15:32:00 prd-ubuntu1804-docker-4c-4g-464 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Aug 8 15:32:01 prd-ubuntu1804-docker-4c-4g-464 CRON[1969]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 8 15:32:01 prd-ubuntu1804-docker-4c-4g-464 CRON[1969]: pam_unix(cron:session): session closed for user root Aug 8 15:33:01 prd-ubuntu1804-docker-4c-4g-464 CRON[2397]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 8 15:33:01 prd-ubuntu1804-docker-4c-4g-464 CRON[2397]: pam_unix(cron:session): session closed for user root Aug 8 15:34:01 prd-ubuntu1804-docker-4c-4g-464 CRON[2713]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 8 15:34:01 prd-ubuntu1804-docker-4c-4g-464 CRON[2713]: pam_unix(cron:session): session closed for user root Aug 8 15:35:01 prd-ubuntu1804-docker-4c-4g-464 CRON[3579]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 8 15:35:01 prd-ubuntu1804-docker-4c-4g-464 CRON[3579]: pam_unix(cron:session): session closed for user root Aug 8 15:36:01 prd-ubuntu1804-docker-4c-4g-464 CRON[4646]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 8 15:36:01 prd-ubuntu1804-docker-4c-4g-464 CRON[4646]: pam_unix(cron:session): session closed for user root Aug 8 15:36:39 prd-ubuntu1804-docker-4c-4g-464 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/it-test-nanobot-docker-merge-master ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp