Nov 6 06:02:49 prd-ubuntu1804-docker-4c-4g-8300 passwd[933]: password for 'ubuntu' changed by 'root' Nov 6 06:02:49 prd-ubuntu1804-docker-4c-4g-8300 systemd-logind[967]: Watching system buttons on /dev/input/event0 (Power Button) Nov 6 06:02:49 prd-ubuntu1804-docker-4c-4g-8300 systemd-logind[967]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Nov 6 06:02:49 prd-ubuntu1804-docker-4c-4g-8300 systemd-logind[967]: New seat seat0. Nov 6 06:02:50 prd-ubuntu1804-docker-4c-4g-8300 sshd[1292]: Server listening on 0.0.0.0 port 22. Nov 6 06:02:50 prd-ubuntu1804-docker-4c-4g-8300 sshd[1292]: Server listening on :: port 22. Nov 6 06:02:51 prd-ubuntu1804-docker-4c-4g-8300 sshd[1405]: Did not receive identification string from 10.32.4.5 port 46766 Nov 6 06:02:56 prd-ubuntu1804-docker-4c-4g-8300 sshd[1555]: Invalid user jenkins from 10.32.4.5 port 46770 Nov 6 06:02:56 prd-ubuntu1804-docker-4c-4g-8300 sshd[1555]: Received disconnect from 10.32.4.5 port 46770:11: Closed due to user request. [preauth] Nov 6 06:02:56 prd-ubuntu1804-docker-4c-4g-8300 sshd[1555]: Disconnected from invalid user jenkins 10.32.4.5 port 46770 [preauth] Nov 6 06:02:58 prd-ubuntu1804-docker-4c-4g-8300 sshd[1573]: Invalid user jenkins from 10.32.4.5 port 46772 Nov 6 06:02:58 prd-ubuntu1804-docker-4c-4g-8300 sshd[1573]: Received disconnect from 10.32.4.5 port 46772:11: Closed due to user request. [preauth] Nov 6 06:02:58 prd-ubuntu1804-docker-4c-4g-8300 sshd[1573]: Disconnected from invalid user jenkins 10.32.4.5 port 46772 [preauth] Nov 6 06:03:00 prd-ubuntu1804-docker-4c-4g-8300 sshd[1575]: Invalid user jenkins from 10.32.4.5 port 46780 Nov 6 06:03:00 prd-ubuntu1804-docker-4c-4g-8300 sshd[1575]: Received disconnect from 10.32.4.5 port 46780:11: Closed due to user request. [preauth] Nov 6 06:03:00 prd-ubuntu1804-docker-4c-4g-8300 sshd[1575]: Disconnected from invalid user jenkins 10.32.4.5 port 46780 [preauth] Nov 6 06:03:01 prd-ubuntu1804-docker-4c-4g-8300 CRON[1577]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 6 06:03:01 prd-ubuntu1804-docker-4c-4g-8300 CRON[1577]: pam_unix(cron:session): session closed for user root Nov 6 06:03:02 prd-ubuntu1804-docker-4c-4g-8300 sshd[1586]: Invalid user jenkins from 10.32.4.5 port 46784 Nov 6 06:03:02 prd-ubuntu1804-docker-4c-4g-8300 sshd[1586]: Received disconnect from 10.32.4.5 port 46784:11: Closed due to user request. [preauth] Nov 6 06:03:02 prd-ubuntu1804-docker-4c-4g-8300 sshd[1586]: Disconnected from invalid user jenkins 10.32.4.5 port 46784 [preauth] Nov 6 06:03:04 prd-ubuntu1804-docker-4c-4g-8300 sshd[1588]: Invalid user jenkins from 10.32.4.5 port 46786 Nov 6 06:03:04 prd-ubuntu1804-docker-4c-4g-8300 sshd[1588]: Received disconnect from 10.32.4.5 port 46786:11: Closed due to user request. [preauth] Nov 6 06:03:04 prd-ubuntu1804-docker-4c-4g-8300 sshd[1588]: Disconnected from invalid user jenkins 10.32.4.5 port 46786 [preauth] Nov 6 06:03:06 prd-ubuntu1804-docker-4c-4g-8300 sshd[1590]: Invalid user jenkins from 10.32.4.5 port 46794 Nov 6 06:03:06 prd-ubuntu1804-docker-4c-4g-8300 sshd[1590]: Received disconnect from 10.32.4.5 port 46794:11: Closed due to user request. [preauth] Nov 6 06:03:06 prd-ubuntu1804-docker-4c-4g-8300 sshd[1590]: Disconnected from invalid user jenkins 10.32.4.5 port 46794 [preauth] Nov 6 06:03:08 prd-ubuntu1804-docker-4c-4g-8300 sshd[1592]: Invalid user jenkins from 10.32.4.5 port 46802 Nov 6 06:03:08 prd-ubuntu1804-docker-4c-4g-8300 sshd[1592]: Received disconnect from 10.32.4.5 port 46802:11: Closed due to user request. [preauth] Nov 6 06:03:08 prd-ubuntu1804-docker-4c-4g-8300 sshd[1592]: Disconnected from invalid user jenkins 10.32.4.5 port 46802 [preauth] Nov 6 06:03:11 prd-ubuntu1804-docker-4c-4g-8300 sshd[1600]: Invalid user jenkins from 10.32.4.5 port 46806 Nov 6 06:03:11 prd-ubuntu1804-docker-4c-4g-8300 sshd[1600]: Received disconnect from 10.32.4.5 port 46806:11: Closed due to user request. [preauth] Nov 6 06:03:11 prd-ubuntu1804-docker-4c-4g-8300 sshd[1600]: Disconnected from invalid user jenkins 10.32.4.5 port 46806 [preauth] Nov 6 06:03:13 prd-ubuntu1804-docker-4c-4g-8300 sshd[1796]: Invalid user jenkins from 10.32.4.5 port 46812 Nov 6 06:03:13 prd-ubuntu1804-docker-4c-4g-8300 sshd[1796]: Received disconnect from 10.32.4.5 port 46812:11: Closed due to user request. [preauth] Nov 6 06:03:13 prd-ubuntu1804-docker-4c-4g-8300 sshd[1796]: Disconnected from invalid user jenkins 10.32.4.5 port 46812 [preauth] Nov 6 06:03:15 prd-ubuntu1804-docker-4c-4g-8300 sshd[1850]: Invalid user jenkins from 10.32.4.5 port 46818 Nov 6 06:03:15 prd-ubuntu1804-docker-4c-4g-8300 sshd[1850]: Received disconnect from 10.32.4.5 port 46818:11: Closed due to user request. [preauth] Nov 6 06:03:15 prd-ubuntu1804-docker-4c-4g-8300 sshd[1850]: Disconnected from invalid user jenkins 10.32.4.5 port 46818 [preauth] Nov 6 06:03:17 prd-ubuntu1804-docker-4c-4g-8300 sshd[1868]: Invalid user jenkins from 10.32.4.5 port 46822 Nov 6 06:03:18 prd-ubuntu1804-docker-4c-4g-8300 sshd[1868]: Received disconnect from 10.32.4.5 port 46822:11: Closed due to user request. [preauth] Nov 6 06:03:18 prd-ubuntu1804-docker-4c-4g-8300 sshd[1868]: Disconnected from invalid user jenkins 10.32.4.5 port 46822 [preauth] Nov 6 06:03:20 prd-ubuntu1804-docker-4c-4g-8300 sshd[1872]: Invalid user jenkins from 10.32.4.5 port 46828 Nov 6 06:03:20 prd-ubuntu1804-docker-4c-4g-8300 sshd[1872]: Received disconnect from 10.32.4.5 port 46828:11: Closed due to user request. [preauth] Nov 6 06:03:20 prd-ubuntu1804-docker-4c-4g-8300 sshd[1872]: Disconnected from invalid user jenkins 10.32.4.5 port 46828 [preauth] Nov 6 06:03:21 prd-ubuntu1804-docker-4c-4g-8300 useradd[1898]: new group: name=jenkins, GID=1001 Nov 6 06:03:21 prd-ubuntu1804-docker-4c-4g-8300 useradd[1898]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash Nov 6 06:03:21 prd-ubuntu1804-docker-4c-4g-8300 usermod[1906]: add 'jenkins' to group 'docker' Nov 6 06:03:21 prd-ubuntu1804-docker-4c-4g-8300 usermod[1906]: add 'jenkins' to shadow group 'docker' Nov 6 06:03:22 prd-ubuntu1804-docker-4c-4g-8300 sshd[1947]: Accepted publickey for jenkins from 10.32.4.5 port 46834 ssh2: RSA SHA256:MwkAMVxCcf5mjE3h3rXSsWkdX5TtX0v/kuPsZexJ1qI Nov 6 06:03:22 prd-ubuntu1804-docker-4c-4g-8300 sshd[1947]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Nov 6 06:03:22 prd-ubuntu1804-docker-4c-4g-8300 systemd-logind[967]: New session 2 of user jenkins. Nov 6 06:03:22 prd-ubuntu1804-docker-4c-4g-8300 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Nov 6 06:04:02 prd-ubuntu1804-docker-4c-4g-8300 CRON[2467]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 6 06:04:02 prd-ubuntu1804-docker-4c-4g-8300 CRON[2467]: pam_unix(cron:session): session closed for user root Nov 6 06:05:01 prd-ubuntu1804-docker-4c-4g-8300 CRON[2513]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 6 06:05:01 prd-ubuntu1804-docker-4c-4g-8300 CRON[2513]: pam_unix(cron:session): session closed for user root Nov 6 06:06:01 prd-ubuntu1804-docker-4c-4g-8300 CRON[3478]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 6 06:06:01 prd-ubuntu1804-docker-4c-4g-8300 CRON[3478]: pam_unix(cron:session): session closed for user root Nov 6 06:06:17 prd-ubuntu1804-docker-4c-4g-8300 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/it-test-ric-robot-docker-merge-master ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp Nov 6 06:06:17 prd-ubuntu1804-docker-4c-4g-8300 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)