Jun 4 06:02:47 prd-ubuntu1804-docker-4c-4g-2563 passwd[921]: password for 'ubuntu' changed by 'root' Jun 4 06:02:47 prd-ubuntu1804-docker-4c-4g-2563 systemd-logind[1047]: Watching system buttons on /dev/input/event0 (Power Button) Jun 4 06:02:47 prd-ubuntu1804-docker-4c-4g-2563 systemd-logind[1047]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Jun 4 06:02:47 prd-ubuntu1804-docker-4c-4g-2563 systemd-logind[1047]: New seat seat0. Jun 4 06:02:48 prd-ubuntu1804-docker-4c-4g-2563 sshd[1227]: Server listening on 0.0.0.0 port 22. Jun 4 06:02:48 prd-ubuntu1804-docker-4c-4g-2563 sshd[1227]: Server listening on :: port 22. Jun 4 06:02:50 prd-ubuntu1804-docker-4c-4g-2563 sshd[1441]: Did not receive identification string from 10.32.4.5 port 38432 Jun 4 06:02:53 prd-ubuntu1804-docker-4c-4g-2563 sshd[1492]: Invalid user jenkins from 10.32.4.5 port 38434 Jun 4 06:02:53 prd-ubuntu1804-docker-4c-4g-2563 sshd[1492]: Received disconnect from 10.32.4.5 port 38434:11: Closed due to user request. [preauth] Jun 4 06:02:53 prd-ubuntu1804-docker-4c-4g-2563 sshd[1492]: Disconnected from invalid user jenkins 10.32.4.5 port 38434 [preauth] Jun 4 06:02:55 prd-ubuntu1804-docker-4c-4g-2563 sshd[1506]: Invalid user jenkins from 10.32.4.5 port 38436 Jun 4 06:02:55 prd-ubuntu1804-docker-4c-4g-2563 sshd[1506]: Received disconnect from 10.32.4.5 port 38436:11: Closed due to user request. [preauth] Jun 4 06:02:55 prd-ubuntu1804-docker-4c-4g-2563 sshd[1506]: Disconnected from invalid user jenkins 10.32.4.5 port 38436 [preauth] Jun 4 06:02:57 prd-ubuntu1804-docker-4c-4g-2563 sshd[1523]: Invalid user jenkins from 10.32.4.5 port 38438 Jun 4 06:02:57 prd-ubuntu1804-docker-4c-4g-2563 sshd[1523]: Received disconnect from 10.32.4.5 port 38438:11: Closed due to user request. [preauth] Jun 4 06:02:57 prd-ubuntu1804-docker-4c-4g-2563 sshd[1523]: Disconnected from invalid user jenkins 10.32.4.5 port 38438 [preauth] Jun 4 06:02:59 prd-ubuntu1804-docker-4c-4g-2563 sshd[1525]: Invalid user jenkins from 10.32.4.5 port 38440 Jun 4 06:02:59 prd-ubuntu1804-docker-4c-4g-2563 sshd[1525]: Received disconnect from 10.32.4.5 port 38440:11: Closed due to user request. [preauth] Jun 4 06:02:59 prd-ubuntu1804-docker-4c-4g-2563 sshd[1525]: Disconnected from invalid user jenkins 10.32.4.5 port 38440 [preauth] Jun 4 06:03:01 prd-ubuntu1804-docker-4c-4g-2563 sshd[1527]: Invalid user jenkins from 10.32.4.5 port 38444 Jun 4 06:03:01 prd-ubuntu1804-docker-4c-4g-2563 CRON[1529]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 4 06:03:01 prd-ubuntu1804-docker-4c-4g-2563 sshd[1527]: Received disconnect from 10.32.4.5 port 38444:11: Closed due to user request. [preauth] Jun 4 06:03:01 prd-ubuntu1804-docker-4c-4g-2563 CRON[1529]: pam_unix(cron:session): session closed for user root Jun 4 06:03:01 prd-ubuntu1804-docker-4c-4g-2563 sshd[1527]: Disconnected from invalid user jenkins 10.32.4.5 port 38444 [preauth] Jun 4 06:03:03 prd-ubuntu1804-docker-4c-4g-2563 sshd[1538]: Invalid user jenkins from 10.32.4.5 port 38454 Jun 4 06:03:03 prd-ubuntu1804-docker-4c-4g-2563 sshd[1538]: Received disconnect from 10.32.4.5 port 38454:11: Closed due to user request. [preauth] Jun 4 06:03:03 prd-ubuntu1804-docker-4c-4g-2563 sshd[1538]: Disconnected from invalid user jenkins 10.32.4.5 port 38454 [preauth] Jun 4 06:03:05 prd-ubuntu1804-docker-4c-4g-2563 sshd[1540]: Invalid user jenkins from 10.32.4.5 port 38460 Jun 4 06:03:05 prd-ubuntu1804-docker-4c-4g-2563 sshd[1540]: Received disconnect from 10.32.4.5 port 38460:11: Closed due to user request. [preauth] Jun 4 06:03:05 prd-ubuntu1804-docker-4c-4g-2563 sshd[1540]: Disconnected from invalid user jenkins 10.32.4.5 port 38460 [preauth] Jun 4 06:03:08 prd-ubuntu1804-docker-4c-4g-2563 sshd[1542]: Invalid user jenkins from 10.32.4.5 port 38466 Jun 4 06:03:08 prd-ubuntu1804-docker-4c-4g-2563 sshd[1542]: Received disconnect from 10.32.4.5 port 38466:11: Closed due to user request. [preauth] Jun 4 06:03:08 prd-ubuntu1804-docker-4c-4g-2563 sshd[1542]: Disconnected from invalid user jenkins 10.32.4.5 port 38466 [preauth] Jun 4 06:03:10 prd-ubuntu1804-docker-4c-4g-2563 sshd[1568]: Invalid user jenkins from 10.32.4.5 port 38472 Jun 4 06:03:10 prd-ubuntu1804-docker-4c-4g-2563 sshd[1568]: Received disconnect from 10.32.4.5 port 38472:11: Closed due to user request. [preauth] Jun 4 06:03:10 prd-ubuntu1804-docker-4c-4g-2563 sshd[1568]: Disconnected from invalid user jenkins 10.32.4.5 port 38472 [preauth] Jun 4 06:03:12 prd-ubuntu1804-docker-4c-4g-2563 sshd[1779]: Invalid user jenkins from 10.32.4.5 port 38478 Jun 4 06:03:13 prd-ubuntu1804-docker-4c-4g-2563 sshd[1779]: Received disconnect from 10.32.4.5 port 38478:11: Closed due to user request. [preauth] Jun 4 06:03:13 prd-ubuntu1804-docker-4c-4g-2563 sshd[1779]: Disconnected from invalid user jenkins 10.32.4.5 port 38478 [preauth] Jun 4 06:03:15 prd-ubuntu1804-docker-4c-4g-2563 sshd[1805]: Invalid user jenkins from 10.32.4.5 port 38482 Jun 4 06:03:15 prd-ubuntu1804-docker-4c-4g-2563 sshd[1805]: Received disconnect from 10.32.4.5 port 38482:11: Closed due to user request. [preauth] Jun 4 06:03:15 prd-ubuntu1804-docker-4c-4g-2563 sshd[1805]: Disconnected from invalid user jenkins 10.32.4.5 port 38482 [preauth] Jun 4 06:03:17 prd-ubuntu1804-docker-4c-4g-2563 sshd[1823]: Invalid user jenkins from 10.32.4.5 port 38490 Jun 4 06:03:17 prd-ubuntu1804-docker-4c-4g-2563 sshd[1823]: Received disconnect from 10.32.4.5 port 38490:11: Closed due to user request. [preauth] Jun 4 06:03:17 prd-ubuntu1804-docker-4c-4g-2563 sshd[1823]: Disconnected from invalid user jenkins 10.32.4.5 port 38490 [preauth] Jun 4 06:03:19 prd-ubuntu1804-docker-4c-4g-2563 sshd[1827]: Invalid user jenkins from 10.32.4.5 port 38500 Jun 4 06:03:19 prd-ubuntu1804-docker-4c-4g-2563 sshd[1827]: Received disconnect from 10.32.4.5 port 38500:11: Closed due to user request. [preauth] Jun 4 06:03:19 prd-ubuntu1804-docker-4c-4g-2563 sshd[1827]: Disconnected from invalid user jenkins 10.32.4.5 port 38500 [preauth] Jun 4 06:03:19 prd-ubuntu1804-docker-4c-4g-2563 useradd[1834]: new group: name=jenkins, GID=1001 Jun 4 06:03:19 prd-ubuntu1804-docker-4c-4g-2563 useradd[1834]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash Jun 4 06:03:19 prd-ubuntu1804-docker-4c-4g-2563 usermod[1843]: add 'jenkins' to group 'docker' Jun 4 06:03:19 prd-ubuntu1804-docker-4c-4g-2563 usermod[1843]: add 'jenkins' to shadow group 'docker' Jun 4 06:03:21 prd-ubuntu1804-docker-4c-4g-2563 sshd[1897]: Accepted publickey for jenkins from 10.32.4.5 port 38502 ssh2: RSA SHA256:MwkAMVxCcf5mjE3h3rXSsWkdX5TtX0v/kuPsZexJ1qI Jun 4 06:03:21 prd-ubuntu1804-docker-4c-4g-2563 sshd[1897]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Jun 4 06:03:21 prd-ubuntu1804-docker-4c-4g-2563 systemd-logind[1047]: New session 2 of user jenkins. Jun 4 06:03:21 prd-ubuntu1804-docker-4c-4g-2563 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Jun 4 06:04:02 prd-ubuntu1804-docker-4c-4g-2563 CRON[2402]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 4 06:04:02 prd-ubuntu1804-docker-4c-4g-2563 CRON[2402]: pam_unix(cron:session): session closed for user root Jun 4 06:05:01 prd-ubuntu1804-docker-4c-4g-2563 CRON[2452]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 4 06:05:01 prd-ubuntu1804-docker-4c-4g-2563 CRON[2452]: pam_unix(cron:session): session closed for user root Jun 4 06:06:01 prd-ubuntu1804-docker-4c-4g-2563 CRON[3155]: pam_unix(cron:session): session opened for user root by (uid=0) Jun 4 06:06:01 prd-ubuntu1804-docker-4c-4g-2563 CRON[3155]: pam_unix(cron:session): session closed for user root Jun 4 06:06:23 prd-ubuntu1804-docker-4c-4g-2563 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/it-test-ric-robot-docker-merge-master ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp Jun 4 06:06:23 prd-ubuntu1804-docker-4c-4g-2563 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)