Sep 20 17:21:51 prd-ubuntu1804-docker-4c-4g-4212 passwd[969]: password for 'ubuntu' changed by 'root' Sep 20 17:21:51 prd-ubuntu1804-docker-4c-4g-4212 systemd-logind[1060]: Watching system buttons on /dev/input/event0 (Power Button) Sep 20 17:21:51 prd-ubuntu1804-docker-4c-4g-4212 systemd-logind[1060]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Sep 20 17:21:51 prd-ubuntu1804-docker-4c-4g-4212 systemd-logind[1060]: New seat seat0. Sep 20 17:21:51 prd-ubuntu1804-docker-4c-4g-4212 sshd[1137]: Server listening on 0.0.0.0 port 22. Sep 20 17:21:51 prd-ubuntu1804-docker-4c-4g-4212 sshd[1137]: Server listening on :: port 22. Sep 20 17:21:51 prd-ubuntu1804-docker-4c-4g-4212 sshd[1287]: Did not receive identification string from 10.32.4.5 port 37738 Sep 20 17:21:56 prd-ubuntu1804-docker-4c-4g-4212 sshd[1514]: Invalid user jenkins from 10.32.4.5 port 37742 Sep 20 17:21:56 prd-ubuntu1804-docker-4c-4g-4212 sshd[1514]: Received disconnect from 10.32.4.5 port 37742:11: Closed due to user request. [preauth] Sep 20 17:21:56 prd-ubuntu1804-docker-4c-4g-4212 sshd[1514]: Disconnected from invalid user jenkins 10.32.4.5 port 37742 [preauth] Sep 20 17:21:58 prd-ubuntu1804-docker-4c-4g-4212 sshd[1524]: Invalid user jenkins from 10.32.4.5 port 37744 Sep 20 17:21:58 prd-ubuntu1804-docker-4c-4g-4212 sshd[1524]: Received disconnect from 10.32.4.5 port 37744:11: Closed due to user request. [preauth] Sep 20 17:21:58 prd-ubuntu1804-docker-4c-4g-4212 sshd[1524]: Disconnected from invalid user jenkins 10.32.4.5 port 37744 [preauth] Sep 20 17:22:00 prd-ubuntu1804-docker-4c-4g-4212 sshd[1532]: Invalid user jenkins from 10.32.4.5 port 37754 Sep 20 17:22:00 prd-ubuntu1804-docker-4c-4g-4212 sshd[1532]: Received disconnect from 10.32.4.5 port 37754:11: Closed due to user request. [preauth] Sep 20 17:22:00 prd-ubuntu1804-docker-4c-4g-4212 sshd[1532]: Disconnected from invalid user jenkins 10.32.4.5 port 37754 [preauth] Sep 20 17:22:01 prd-ubuntu1804-docker-4c-4g-4212 CRON[1534]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 20 17:22:01 prd-ubuntu1804-docker-4c-4g-4212 CRON[1534]: pam_unix(cron:session): session closed for user root Sep 20 17:22:02 prd-ubuntu1804-docker-4c-4g-4212 sshd[1542]: Invalid user jenkins from 10.32.4.5 port 37756 Sep 20 17:22:02 prd-ubuntu1804-docker-4c-4g-4212 sshd[1542]: Received disconnect from 10.32.4.5 port 37756:11: Closed due to user request. [preauth] Sep 20 17:22:02 prd-ubuntu1804-docker-4c-4g-4212 sshd[1542]: Disconnected from invalid user jenkins 10.32.4.5 port 37756 [preauth] Sep 20 17:22:04 prd-ubuntu1804-docker-4c-4g-4212 sshd[1544]: Invalid user jenkins from 10.32.4.5 port 37758 Sep 20 17:22:04 prd-ubuntu1804-docker-4c-4g-4212 sshd[1544]: Received disconnect from 10.32.4.5 port 37758:11: Closed due to user request. [preauth] Sep 20 17:22:04 prd-ubuntu1804-docker-4c-4g-4212 sshd[1544]: Disconnected from invalid user jenkins 10.32.4.5 port 37758 [preauth] Sep 20 17:22:06 prd-ubuntu1804-docker-4c-4g-4212 sshd[1546]: Invalid user jenkins from 10.32.4.5 port 37760 Sep 20 17:22:07 prd-ubuntu1804-docker-4c-4g-4212 sshd[1546]: Received disconnect from 10.32.4.5 port 37760:11: Closed due to user request. [preauth] Sep 20 17:22:07 prd-ubuntu1804-docker-4c-4g-4212 sshd[1546]: Disconnected from invalid user jenkins 10.32.4.5 port 37760 [preauth] Sep 20 17:22:09 prd-ubuntu1804-docker-4c-4g-4212 sshd[1548]: Invalid user jenkins from 10.32.4.5 port 37764 Sep 20 17:22:09 prd-ubuntu1804-docker-4c-4g-4212 sshd[1548]: Received disconnect from 10.32.4.5 port 37764:11: Closed due to user request. [preauth] Sep 20 17:22:09 prd-ubuntu1804-docker-4c-4g-4212 sshd[1548]: Disconnected from invalid user jenkins 10.32.4.5 port 37764 [preauth] Sep 20 17:22:11 prd-ubuntu1804-docker-4c-4g-4212 sshd[1550]: Invalid user jenkins from 10.32.4.5 port 37766 Sep 20 17:22:11 prd-ubuntu1804-docker-4c-4g-4212 sshd[1550]: Received disconnect from 10.32.4.5 port 37766:11: Closed due to user request. [preauth] Sep 20 17:22:11 prd-ubuntu1804-docker-4c-4g-4212 sshd[1550]: Disconnected from invalid user jenkins 10.32.4.5 port 37766 [preauth] Sep 20 17:22:13 prd-ubuntu1804-docker-4c-4g-4212 sshd[1648]: Invalid user jenkins from 10.32.4.5 port 37768 Sep 20 17:22:13 prd-ubuntu1804-docker-4c-4g-4212 sshd[1648]: Received disconnect from 10.32.4.5 port 37768:11: Closed due to user request. [preauth] Sep 20 17:22:13 prd-ubuntu1804-docker-4c-4g-4212 sshd[1648]: Disconnected from invalid user jenkins 10.32.4.5 port 37768 [preauth] Sep 20 17:22:15 prd-ubuntu1804-docker-4c-4g-4212 sshd[1819]: Invalid user jenkins from 10.32.4.5 port 37770 Sep 20 17:22:15 prd-ubuntu1804-docker-4c-4g-4212 sshd[1819]: Received disconnect from 10.32.4.5 port 37770:11: Closed due to user request. [preauth] Sep 20 17:22:15 prd-ubuntu1804-docker-4c-4g-4212 sshd[1819]: Disconnected from invalid user jenkins 10.32.4.5 port 37770 [preauth] Sep 20 17:22:17 prd-ubuntu1804-docker-4c-4g-4212 sshd[1847]: Invalid user jenkins from 10.32.4.5 port 37772 Sep 20 17:22:17 prd-ubuntu1804-docker-4c-4g-4212 sshd[1847]: Received disconnect from 10.32.4.5 port 37772:11: Closed due to user request. [preauth] Sep 20 17:22:17 prd-ubuntu1804-docker-4c-4g-4212 sshd[1847]: Disconnected from invalid user jenkins 10.32.4.5 port 37772 [preauth] Sep 20 17:22:20 prd-ubuntu1804-docker-4c-4g-4212 sshd[1865]: Invalid user jenkins from 10.32.4.5 port 37774 Sep 20 17:22:20 prd-ubuntu1804-docker-4c-4g-4212 sshd[1865]: Received disconnect from 10.32.4.5 port 37774:11: Closed due to user request. [preauth] Sep 20 17:22:20 prd-ubuntu1804-docker-4c-4g-4212 sshd[1865]: Disconnected from invalid user jenkins 10.32.4.5 port 37774 [preauth] Sep 20 17:22:22 prd-ubuntu1804-docker-4c-4g-4212 sshd[1878]: Invalid user jenkins from 10.32.4.5 port 37776 Sep 20 17:22:22 prd-ubuntu1804-docker-4c-4g-4212 sshd[1878]: Received disconnect from 10.32.4.5 port 37776:11: Closed due to user request. [preauth] Sep 20 17:22:22 prd-ubuntu1804-docker-4c-4g-4212 sshd[1878]: Disconnected from invalid user jenkins 10.32.4.5 port 37776 [preauth] Sep 20 17:22:23 prd-ubuntu1804-docker-4c-4g-4212 useradd[1904]: new group: name=jenkins, GID=1001 Sep 20 17:22:23 prd-ubuntu1804-docker-4c-4g-4212 useradd[1904]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash Sep 20 17:22:23 prd-ubuntu1804-docker-4c-4g-4212 usermod[1911]: add 'jenkins' to group 'docker' Sep 20 17:22:23 prd-ubuntu1804-docker-4c-4g-4212 usermod[1911]: add 'jenkins' to shadow group 'docker' Sep 20 17:22:24 prd-ubuntu1804-docker-4c-4g-4212 sshd[1945]: Accepted publickey for jenkins from 10.32.4.5 port 37780 ssh2: RSA SHA256:MwkAMVxCcf5mjE3h3rXSsWkdX5TtX0v/kuPsZexJ1qI Sep 20 17:22:24 prd-ubuntu1804-docker-4c-4g-4212 sshd[1945]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Sep 20 17:22:24 prd-ubuntu1804-docker-4c-4g-4212 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Sep 20 17:22:24 prd-ubuntu1804-docker-4c-4g-4212 systemd-logind[1060]: New session 2 of user jenkins. Sep 20 17:23:01 prd-ubuntu1804-docker-4c-4g-4212 CRON[2440]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 20 17:23:01 prd-ubuntu1804-docker-4c-4g-4212 CRON[2440]: pam_unix(cron:session): session closed for user root Sep 20 17:24:01 prd-ubuntu1804-docker-4c-4g-4212 CRON[2492]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 20 17:24:01 prd-ubuntu1804-docker-4c-4g-4212 CRON[2492]: pam_unix(cron:session): session closed for user root Sep 20 17:25:01 prd-ubuntu1804-docker-4c-4g-4212 CRON[2974]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 20 17:25:01 prd-ubuntu1804-docker-4c-4g-4212 CRON[2974]: pam_unix(cron:session): session closed for user root Sep 20 17:26:01 prd-ubuntu1804-docker-4c-4g-4212 CRON[4084]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 20 17:26:01 prd-ubuntu1804-docker-4c-4g-4212 CRON[4084]: pam_unix(cron:session): session closed for user root Sep 20 17:26:17 prd-ubuntu1804-docker-4c-4g-4212 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/nonrtric-plt-dmaapmediatorproducer-docker-merge-h-release ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp Sep 20 17:26:17 prd-ubuntu1804-docker-4c-4g-4212 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)