Sep 22 14:37:33 prd-ubuntu1804-docker-4c-4g-5734 passwd[948]: password for 'ubuntu' changed by 'root' Sep 22 14:37:33 prd-ubuntu1804-docker-4c-4g-5734 systemd-logind[1024]: Watching system buttons on /dev/input/event0 (Power Button) Sep 22 14:37:33 prd-ubuntu1804-docker-4c-4g-5734 systemd-logind[1024]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Sep 22 14:37:33 prd-ubuntu1804-docker-4c-4g-5734 systemd-logind[1024]: New seat seat0. Sep 22 14:37:33 prd-ubuntu1804-docker-4c-4g-5734 sshd[1115]: Server listening on 0.0.0.0 port 22. Sep 22 14:37:33 prd-ubuntu1804-docker-4c-4g-5734 sshd[1115]: Server listening on :: port 22. Sep 22 14:37:37 prd-ubuntu1804-docker-4c-4g-5734 sshd[1517]: Did not receive identification string from 10.32.4.5 port 58724 Sep 22 14:37:40 prd-ubuntu1804-docker-4c-4g-5734 sshd[1577]: Invalid user jenkins from 10.32.4.5 port 58728 Sep 22 14:37:40 prd-ubuntu1804-docker-4c-4g-5734 sshd[1577]: Received disconnect from 10.32.4.5 port 58728:11: Closed due to user request. [preauth] Sep 22 14:37:40 prd-ubuntu1804-docker-4c-4g-5734 sshd[1577]: Disconnected from invalid user jenkins 10.32.4.5 port 58728 [preauth] Sep 22 14:37:43 prd-ubuntu1804-docker-4c-4g-5734 sshd[1581]: Invalid user jenkins from 10.32.4.5 port 58730 Sep 22 14:37:43 prd-ubuntu1804-docker-4c-4g-5734 sshd[1581]: Received disconnect from 10.32.4.5 port 58730:11: Closed due to user request. [preauth] Sep 22 14:37:43 prd-ubuntu1804-docker-4c-4g-5734 sshd[1581]: Disconnected from invalid user jenkins 10.32.4.5 port 58730 [preauth] Sep 22 14:37:45 prd-ubuntu1804-docker-4c-4g-5734 sshd[1583]: Invalid user jenkins from 10.32.4.5 port 58738 Sep 22 14:37:45 prd-ubuntu1804-docker-4c-4g-5734 sshd[1583]: Received disconnect from 10.32.4.5 port 58738:11: Closed due to user request. [preauth] Sep 22 14:37:45 prd-ubuntu1804-docker-4c-4g-5734 sshd[1583]: Disconnected from invalid user jenkins 10.32.4.5 port 58738 [preauth] Sep 22 14:37:47 prd-ubuntu1804-docker-4c-4g-5734 sshd[1585]: Invalid user jenkins from 10.32.4.5 port 58740 Sep 22 14:37:47 prd-ubuntu1804-docker-4c-4g-5734 sshd[1585]: Received disconnect from 10.32.4.5 port 58740:11: Closed due to user request. [preauth] Sep 22 14:37:47 prd-ubuntu1804-docker-4c-4g-5734 sshd[1585]: Disconnected from invalid user jenkins 10.32.4.5 port 58740 [preauth] Sep 22 14:37:49 prd-ubuntu1804-docker-4c-4g-5734 sshd[1587]: Invalid user jenkins from 10.32.4.5 port 58742 Sep 22 14:37:49 prd-ubuntu1804-docker-4c-4g-5734 sshd[1587]: Received disconnect from 10.32.4.5 port 58742:11: Closed due to user request. [preauth] Sep 22 14:37:49 prd-ubuntu1804-docker-4c-4g-5734 sshd[1587]: Disconnected from invalid user jenkins 10.32.4.5 port 58742 [preauth] Sep 22 14:37:51 prd-ubuntu1804-docker-4c-4g-5734 sshd[1589]: Invalid user jenkins from 10.32.4.5 port 58744 Sep 22 14:37:51 prd-ubuntu1804-docker-4c-4g-5734 sshd[1589]: Received disconnect from 10.32.4.5 port 58744:11: Closed due to user request. [preauth] Sep 22 14:37:51 prd-ubuntu1804-docker-4c-4g-5734 sshd[1589]: Disconnected from invalid user jenkins 10.32.4.5 port 58744 [preauth] Sep 22 14:37:53 prd-ubuntu1804-docker-4c-4g-5734 sshd[1591]: Invalid user jenkins from 10.32.4.5 port 58748 Sep 22 14:37:53 prd-ubuntu1804-docker-4c-4g-5734 sshd[1591]: Received disconnect from 10.32.4.5 port 58748:11: Closed due to user request. [preauth] Sep 22 14:37:53 prd-ubuntu1804-docker-4c-4g-5734 sshd[1591]: Disconnected from invalid user jenkins 10.32.4.5 port 58748 [preauth] Sep 22 14:37:55 prd-ubuntu1804-docker-4c-4g-5734 sshd[1734]: Invalid user jenkins from 10.32.4.5 port 58752 Sep 22 14:37:55 prd-ubuntu1804-docker-4c-4g-5734 sshd[1734]: Received disconnect from 10.32.4.5 port 58752:11: Closed due to user request. [preauth] Sep 22 14:37:55 prd-ubuntu1804-docker-4c-4g-5734 sshd[1734]: Disconnected from invalid user jenkins 10.32.4.5 port 58752 [preauth] Sep 22 14:37:57 prd-ubuntu1804-docker-4c-4g-5734 sshd[1850]: Invalid user jenkins from 10.32.4.5 port 58754 Sep 22 14:37:57 prd-ubuntu1804-docker-4c-4g-5734 sshd[1850]: Received disconnect from 10.32.4.5 port 58754:11: Closed due to user request. [preauth] Sep 22 14:37:57 prd-ubuntu1804-docker-4c-4g-5734 sshd[1850]: Disconnected from invalid user jenkins 10.32.4.5 port 58754 [preauth] Sep 22 14:38:00 prd-ubuntu1804-docker-4c-4g-5734 sshd[1869]: Invalid user jenkins from 10.32.4.5 port 58756 Sep 22 14:38:00 prd-ubuntu1804-docker-4c-4g-5734 sshd[1869]: Received disconnect from 10.32.4.5 port 58756:11: Closed due to user request. [preauth] Sep 22 14:38:00 prd-ubuntu1804-docker-4c-4g-5734 sshd[1869]: Disconnected from invalid user jenkins 10.32.4.5 port 58756 [preauth] Sep 22 14:38:01 prd-ubuntu1804-docker-4c-4g-5734 useradd[1887]: new group: name=jenkins, GID=1001 Sep 22 14:38:01 prd-ubuntu1804-docker-4c-4g-5734 useradd[1887]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash Sep 22 14:38:01 prd-ubuntu1804-docker-4c-4g-5734 usermod[1894]: add 'jenkins' to group 'docker' Sep 22 14:38:01 prd-ubuntu1804-docker-4c-4g-5734 usermod[1894]: add 'jenkins' to shadow group 'docker' Sep 22 14:38:01 prd-ubuntu1804-docker-4c-4g-5734 CRON[1928]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 22 14:38:01 prd-ubuntu1804-docker-4c-4g-5734 CRON[1928]: pam_unix(cron:session): session closed for user root Sep 22 14:38:02 prd-ubuntu1804-docker-4c-4g-5734 sshd[1938]: Accepted publickey for jenkins from 10.32.4.5 port 58758 ssh2: RSA SHA256:MwkAMVxCcf5mjE3h3rXSsWkdX5TtX0v/kuPsZexJ1qI Sep 22 14:38:02 prd-ubuntu1804-docker-4c-4g-5734 sshd[1938]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Sep 22 14:38:02 prd-ubuntu1804-docker-4c-4g-5734 systemd-logind[1024]: New session 2 of user jenkins. Sep 22 14:38:02 prd-ubuntu1804-docker-4c-4g-5734 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Sep 22 14:39:01 prd-ubuntu1804-docker-4c-4g-5734 CRON[2685]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 22 14:39:01 prd-ubuntu1804-docker-4c-4g-5734 CRON[2685]: pam_unix(cron:session): session closed for user root Sep 22 14:40:01 prd-ubuntu1804-docker-4c-4g-5734 CRON[4153]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 22 14:40:01 prd-ubuntu1804-docker-4c-4g-5734 CRON[4153]: pam_unix(cron:session): session closed for user root Sep 22 14:40:20 prd-ubuntu1804-docker-4c-4g-5734 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/nonrtric-plt-dmaapmediatorproducer-docker-merge-g-release ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp Sep 22 14:40:20 prd-ubuntu1804-docker-4c-4g-5734 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)