Mar 2 14:37:43 prd-ubuntu1804-docker-4c-4g-1633 passwd[936]: password for 'ubuntu' changed by 'root' Mar 2 14:37:43 prd-ubuntu1804-docker-4c-4g-1633 systemd-logind[983]: Watching system buttons on /dev/input/event0 (Power Button) Mar 2 14:37:43 prd-ubuntu1804-docker-4c-4g-1633 systemd-logind[983]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Mar 2 14:37:43 prd-ubuntu1804-docker-4c-4g-1633 systemd-logind[983]: New seat seat0. Mar 2 14:37:43 prd-ubuntu1804-docker-4c-4g-1633 sshd[1209]: Server listening on 0.0.0.0 port 22. Mar 2 14:37:43 prd-ubuntu1804-docker-4c-4g-1633 sshd[1209]: Server listening on :: port 22. Mar 2 14:37:49 prd-ubuntu1804-docker-4c-4g-1633 sshd[1454]: Did not receive identification string from 10.32.4.5 port 36160 Mar 2 14:37:53 prd-ubuntu1804-docker-4c-4g-1633 sshd[1479]: Invalid user jenkins from 10.32.4.5 port 36162 Mar 2 14:37:53 prd-ubuntu1804-docker-4c-4g-1633 sshd[1479]: Received disconnect from 10.32.4.5 port 36162:11: Closed due to user request. [preauth] Mar 2 14:37:53 prd-ubuntu1804-docker-4c-4g-1633 sshd[1479]: Disconnected from invalid user jenkins 10.32.4.5 port 36162 [preauth] Mar 2 14:37:55 prd-ubuntu1804-docker-4c-4g-1633 sshd[1483]: Invalid user jenkins from 10.32.4.5 port 36164 Mar 2 14:37:55 prd-ubuntu1804-docker-4c-4g-1633 sshd[1483]: Received disconnect from 10.32.4.5 port 36164:11: Closed due to user request. [preauth] Mar 2 14:37:55 prd-ubuntu1804-docker-4c-4g-1633 sshd[1483]: Disconnected from invalid user jenkins 10.32.4.5 port 36164 [preauth] Mar 2 14:37:57 prd-ubuntu1804-docker-4c-4g-1633 sshd[1485]: Invalid user jenkins from 10.32.4.5 port 36166 Mar 2 14:37:57 prd-ubuntu1804-docker-4c-4g-1633 sshd[1485]: Received disconnect from 10.32.4.5 port 36166:11: Closed due to user request. [preauth] Mar 2 14:37:57 prd-ubuntu1804-docker-4c-4g-1633 sshd[1485]: Disconnected from invalid user jenkins 10.32.4.5 port 36166 [preauth] Mar 2 14:37:59 prd-ubuntu1804-docker-4c-4g-1633 sshd[1487]: Invalid user jenkins from 10.32.4.5 port 36168 Mar 2 14:37:59 prd-ubuntu1804-docker-4c-4g-1633 sshd[1487]: Received disconnect from 10.32.4.5 port 36168:11: Closed due to user request. [preauth] Mar 2 14:37:59 prd-ubuntu1804-docker-4c-4g-1633 sshd[1487]: Disconnected from invalid user jenkins 10.32.4.5 port 36168 [preauth] Mar 2 14:38:01 prd-ubuntu1804-docker-4c-4g-1633 CRON[1492]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 2 14:38:01 prd-ubuntu1804-docker-4c-4g-1633 CRON[1492]: pam_unix(cron:session): session closed for user root Mar 2 14:38:01 prd-ubuntu1804-docker-4c-4g-1633 sshd[1489]: Invalid user jenkins from 10.32.4.5 port 36192 Mar 2 14:38:01 prd-ubuntu1804-docker-4c-4g-1633 sshd[1489]: Received disconnect from 10.32.4.5 port 36192:11: Closed due to user request. [preauth] Mar 2 14:38:01 prd-ubuntu1804-docker-4c-4g-1633 sshd[1489]: Disconnected from invalid user jenkins 10.32.4.5 port 36192 [preauth] Mar 2 14:38:03 prd-ubuntu1804-docker-4c-4g-1633 sshd[1499]: Invalid user jenkins from 10.32.4.5 port 36194 Mar 2 14:38:03 prd-ubuntu1804-docker-4c-4g-1633 sshd[1499]: Received disconnect from 10.32.4.5 port 36194:11: Closed due to user request. [preauth] Mar 2 14:38:03 prd-ubuntu1804-docker-4c-4g-1633 sshd[1499]: Disconnected from invalid user jenkins 10.32.4.5 port 36194 [preauth] Mar 2 14:38:05 prd-ubuntu1804-docker-4c-4g-1633 sshd[1577]: Invalid user jenkins from 10.32.4.5 port 36198 Mar 2 14:38:05 prd-ubuntu1804-docker-4c-4g-1633 sshd[1577]: Received disconnect from 10.32.4.5 port 36198:11: Closed due to user request. [preauth] Mar 2 14:38:05 prd-ubuntu1804-docker-4c-4g-1633 sshd[1577]: Disconnected from invalid user jenkins 10.32.4.5 port 36198 [preauth] Mar 2 14:38:07 prd-ubuntu1804-docker-4c-4g-1633 sshd[1745]: Invalid user jenkins from 10.32.4.5 port 36200 Mar 2 14:38:08 prd-ubuntu1804-docker-4c-4g-1633 sshd[1745]: Received disconnect from 10.32.4.5 port 36200:11: Closed due to user request. [preauth] Mar 2 14:38:08 prd-ubuntu1804-docker-4c-4g-1633 sshd[1745]: Disconnected from invalid user jenkins 10.32.4.5 port 36200 [preauth] Mar 2 14:38:10 prd-ubuntu1804-docker-4c-4g-1633 sshd[1782]: Invalid user jenkins from 10.32.4.5 port 36202 Mar 2 14:38:10 prd-ubuntu1804-docker-4c-4g-1633 sshd[1782]: Received disconnect from 10.32.4.5 port 36202:11: Closed due to user request. [preauth] Mar 2 14:38:10 prd-ubuntu1804-docker-4c-4g-1633 sshd[1782]: Disconnected from invalid user jenkins 10.32.4.5 port 36202 [preauth] Mar 2 14:38:12 prd-ubuntu1804-docker-4c-4g-1633 useradd[1800]: new group: name=jenkins, GID=1001 Mar 2 14:38:12 prd-ubuntu1804-docker-4c-4g-1633 useradd[1800]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash Mar 2 14:38:12 prd-ubuntu1804-docker-4c-4g-1633 usermod[1807]: add 'jenkins' to group 'docker' Mar 2 14:38:12 prd-ubuntu1804-docker-4c-4g-1633 usermod[1807]: add 'jenkins' to shadow group 'docker' Mar 2 14:38:12 prd-ubuntu1804-docker-4c-4g-1633 sshd[1823]: Accepted publickey for jenkins from 10.32.4.5 port 36210 ssh2: RSA SHA256:MwkAMVxCcf5mjE3h3rXSsWkdX5TtX0v/kuPsZexJ1qI Mar 2 14:38:12 prd-ubuntu1804-docker-4c-4g-1633 sshd[1823]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Mar 2 14:38:12 prd-ubuntu1804-docker-4c-4g-1633 systemd-logind[983]: New session 2 of user jenkins. Mar 2 14:38:12 prd-ubuntu1804-docker-4c-4g-1633 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Mar 2 14:39:01 prd-ubuntu1804-docker-4c-4g-1633 CRON[2404]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 2 14:39:01 prd-ubuntu1804-docker-4c-4g-1633 CRON[2404]: pam_unix(cron:session): session closed for user root Mar 2 14:40:01 prd-ubuntu1804-docker-4c-4g-1633 CRON[3850]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 2 14:40:01 prd-ubuntu1804-docker-4c-4g-1633 CRON[3850]: pam_unix(cron:session): session closed for user root Mar 2 14:40:22 prd-ubuntu1804-docker-4c-4g-1633 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/nonrtric-plt-dmaapmediatorproducer-docker-merge-g-release ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp Mar 2 14:40:22 prd-ubuntu1804-docker-4c-4g-1633 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)