Aug 22 15:28:49 prd-ubuntu1804-docker-4c-4g-1683 passwd[951]: password for 'ubuntu' changed by 'root' Aug 22 15:28:49 prd-ubuntu1804-docker-4c-4g-1683 systemd-logind[979]: Watching system buttons on /dev/input/event0 (Power Button) Aug 22 15:28:49 prd-ubuntu1804-docker-4c-4g-1683 systemd-logind[979]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Aug 22 15:28:49 prd-ubuntu1804-docker-4c-4g-1683 systemd-logind[979]: New seat seat0. Aug 22 15:28:49 prd-ubuntu1804-docker-4c-4g-1683 sshd[1085]: Server listening on 0.0.0.0 port 22. Aug 22 15:28:49 prd-ubuntu1804-docker-4c-4g-1683 sshd[1085]: Server listening on :: port 22. Aug 22 15:28:52 prd-ubuntu1804-docker-4c-4g-1683 sshd[1375]: Did not receive identification string from 10.32.4.5 port 37734 Aug 22 15:28:56 prd-ubuntu1804-docker-4c-4g-1683 sshd[1422]: Invalid user jenkins from 10.32.4.5 port 37738 Aug 22 15:28:56 prd-ubuntu1804-docker-4c-4g-1683 sshd[1422]: Received disconnect from 10.32.4.5 port 37738:11: Closed due to user request. [preauth] Aug 22 15:28:56 prd-ubuntu1804-docker-4c-4g-1683 sshd[1422]: Disconnected from invalid user jenkins 10.32.4.5 port 37738 [preauth] Aug 22 15:28:58 prd-ubuntu1804-docker-4c-4g-1683 sshd[1440]: Invalid user jenkins from 10.32.4.5 port 37740 Aug 22 15:28:58 prd-ubuntu1804-docker-4c-4g-1683 sshd[1440]: Received disconnect from 10.32.4.5 port 37740:11: Closed due to user request. [preauth] Aug 22 15:28:58 prd-ubuntu1804-docker-4c-4g-1683 sshd[1440]: Disconnected from invalid user jenkins 10.32.4.5 port 37740 [preauth] Aug 22 15:29:00 prd-ubuntu1804-docker-4c-4g-1683 sshd[1442]: Invalid user jenkins from 10.32.4.5 port 37748 Aug 22 15:29:00 prd-ubuntu1804-docker-4c-4g-1683 sshd[1442]: Received disconnect from 10.32.4.5 port 37748:11: Closed due to user request. [preauth] Aug 22 15:29:00 prd-ubuntu1804-docker-4c-4g-1683 sshd[1442]: Disconnected from invalid user jenkins 10.32.4.5 port 37748 [preauth] Aug 22 15:29:01 prd-ubuntu1804-docker-4c-4g-1683 CRON[1445]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 22 15:29:01 prd-ubuntu1804-docker-4c-4g-1683 CRON[1445]: pam_unix(cron:session): session closed for user root Aug 22 15:29:02 prd-ubuntu1804-docker-4c-4g-1683 sshd[1453]: Invalid user jenkins from 10.32.4.5 port 37750 Aug 22 15:29:02 prd-ubuntu1804-docker-4c-4g-1683 sshd[1453]: Received disconnect from 10.32.4.5 port 37750:11: Closed due to user request. [preauth] Aug 22 15:29:02 prd-ubuntu1804-docker-4c-4g-1683 sshd[1453]: Disconnected from invalid user jenkins 10.32.4.5 port 37750 [preauth] Aug 22 15:29:05 prd-ubuntu1804-docker-4c-4g-1683 sshd[1455]: Invalid user jenkins from 10.32.4.5 port 37752 Aug 22 15:29:05 prd-ubuntu1804-docker-4c-4g-1683 sshd[1455]: Received disconnect from 10.32.4.5 port 37752:11: Closed due to user request. [preauth] Aug 22 15:29:05 prd-ubuntu1804-docker-4c-4g-1683 sshd[1455]: Disconnected from invalid user jenkins 10.32.4.5 port 37752 [preauth] Aug 22 15:29:07 prd-ubuntu1804-docker-4c-4g-1683 sshd[1457]: Invalid user jenkins from 10.32.4.5 port 37754 Aug 22 15:29:07 prd-ubuntu1804-docker-4c-4g-1683 sshd[1457]: Received disconnect from 10.32.4.5 port 37754:11: Closed due to user request. [preauth] Aug 22 15:29:07 prd-ubuntu1804-docker-4c-4g-1683 sshd[1457]: Disconnected from invalid user jenkins 10.32.4.5 port 37754 [preauth] Aug 22 15:29:09 prd-ubuntu1804-docker-4c-4g-1683 sshd[1459]: Invalid user jenkins from 10.32.4.5 port 37758 Aug 22 15:29:09 prd-ubuntu1804-docker-4c-4g-1683 sshd[1459]: Received disconnect from 10.32.4.5 port 37758:11: Closed due to user request. [preauth] Aug 22 15:29:09 prd-ubuntu1804-docker-4c-4g-1683 sshd[1459]: Disconnected from invalid user jenkins 10.32.4.5 port 37758 [preauth] Aug 22 15:29:11 prd-ubuntu1804-docker-4c-4g-1683 sshd[1480]: Invalid user jenkins from 10.32.4.5 port 37760 Aug 22 15:29:11 prd-ubuntu1804-docker-4c-4g-1683 sshd[1480]: Received disconnect from 10.32.4.5 port 37760:11: Closed due to user request. [preauth] Aug 22 15:29:11 prd-ubuntu1804-docker-4c-4g-1683 sshd[1480]: Disconnected from invalid user jenkins 10.32.4.5 port 37760 [preauth] Aug 22 15:29:13 prd-ubuntu1804-docker-4c-4g-1683 sshd[1683]: Invalid user jenkins from 10.32.4.5 port 37762 Aug 22 15:29:13 prd-ubuntu1804-docker-4c-4g-1683 sshd[1683]: Received disconnect from 10.32.4.5 port 37762:11: Closed due to user request. [preauth] Aug 22 15:29:13 prd-ubuntu1804-docker-4c-4g-1683 sshd[1683]: Disconnected from invalid user jenkins 10.32.4.5 port 37762 [preauth] Aug 22 15:29:15 prd-ubuntu1804-docker-4c-4g-1683 sshd[1725]: Invalid user jenkins from 10.32.4.5 port 37764 Aug 22 15:29:15 prd-ubuntu1804-docker-4c-4g-1683 sshd[1725]: Received disconnect from 10.32.4.5 port 37764:11: Closed due to user request. [preauth] Aug 22 15:29:15 prd-ubuntu1804-docker-4c-4g-1683 sshd[1725]: Disconnected from invalid user jenkins 10.32.4.5 port 37764 [preauth] Aug 22 15:29:17 prd-ubuntu1804-docker-4c-4g-1683 sshd[1743]: Invalid user jenkins from 10.32.4.5 port 37766 Aug 22 15:29:17 prd-ubuntu1804-docker-4c-4g-1683 sshd[1743]: Received disconnect from 10.32.4.5 port 37766:11: Closed due to user request. [preauth] Aug 22 15:29:17 prd-ubuntu1804-docker-4c-4g-1683 sshd[1743]: Disconnected from invalid user jenkins 10.32.4.5 port 37766 [preauth] Aug 22 15:29:19 prd-ubuntu1804-docker-4c-4g-1683 sshd[1753]: Invalid user jenkins from 10.32.4.5 port 37768 Aug 22 15:29:19 prd-ubuntu1804-docker-4c-4g-1683 sshd[1753]: Received disconnect from 10.32.4.5 port 37768:11: Closed due to user request. [preauth] Aug 22 15:29:19 prd-ubuntu1804-docker-4c-4g-1683 sshd[1753]: Disconnected from invalid user jenkins 10.32.4.5 port 37768 [preauth] Aug 22 15:29:20 prd-ubuntu1804-docker-4c-4g-1683 useradd[1763]: new group: name=jenkins, GID=1001 Aug 22 15:29:20 prd-ubuntu1804-docker-4c-4g-1683 useradd[1763]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash Aug 22 15:29:20 prd-ubuntu1804-docker-4c-4g-1683 usermod[1770]: add 'jenkins' to group 'docker' Aug 22 15:29:20 prd-ubuntu1804-docker-4c-4g-1683 usermod[1770]: add 'jenkins' to shadow group 'docker' Aug 22 15:29:21 prd-ubuntu1804-docker-4c-4g-1683 sshd[1822]: Accepted publickey for jenkins from 10.32.4.5 port 37770 ssh2: RSA SHA256:MwkAMVxCcf5mjE3h3rXSsWkdX5TtX0v/kuPsZexJ1qI Aug 22 15:29:21 prd-ubuntu1804-docker-4c-4g-1683 sshd[1822]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Aug 22 15:29:22 prd-ubuntu1804-docker-4c-4g-1683 systemd-logind[979]: New session 2 of user jenkins. Aug 22 15:29:22 prd-ubuntu1804-docker-4c-4g-1683 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Aug 22 15:30:01 prd-ubuntu1804-docker-4c-4g-1683 CRON[2342]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 22 15:30:01 prd-ubuntu1804-docker-4c-4g-1683 CRON[2342]: pam_unix(cron:session): session closed for user root Aug 22 15:31:01 prd-ubuntu1804-docker-4c-4g-1683 CRON[2400]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 22 15:31:01 prd-ubuntu1804-docker-4c-4g-1683 CRON[2400]: pam_unix(cron:session): session closed for user root Aug 22 15:32:01 prd-ubuntu1804-docker-4c-4g-1683 CRON[3369]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 22 15:32:01 prd-ubuntu1804-docker-4c-4g-1683 CRON[3369]: pam_unix(cron:session): session closed for user root Aug 22 15:33:01 prd-ubuntu1804-docker-4c-4g-1683 CRON[4597]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 22 15:33:01 prd-ubuntu1804-docker-4c-4g-1683 CRON[4597]: pam_unix(cron:session): session closed for user root Aug 22 15:33:44 prd-ubuntu1804-docker-4c-4g-1683 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/it-test-nanobot-docker-merge-master ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp