Apr 14 11:31:51 prd-ubuntu1804-docker-4c-4g-515 passwd[936]: password for 'ubuntu' changed by 'root' Apr 14 11:31:51 prd-ubuntu1804-docker-4c-4g-515 systemd-logind[1013]: Watching system buttons on /dev/input/event0 (Power Button) Apr 14 11:31:51 prd-ubuntu1804-docker-4c-4g-515 systemd-logind[1013]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Apr 14 11:31:51 prd-ubuntu1804-docker-4c-4g-515 systemd-logind[1013]: New seat seat0. Apr 14 11:31:52 prd-ubuntu1804-docker-4c-4g-515 sshd[1321]: Server listening on 0.0.0.0 port 22. Apr 14 11:31:52 prd-ubuntu1804-docker-4c-4g-515 sshd[1321]: Server listening on :: port 22. Apr 14 11:31:55 prd-ubuntu1804-docker-4c-4g-515 sshd[1551]: Did not receive identification string from 10.32.4.5 port 55284 Apr 14 11:31:57 prd-ubuntu1804-docker-4c-4g-515 sshd[1584]: Invalid user jenkins from 10.32.4.5 port 55288 Apr 14 11:31:57 prd-ubuntu1804-docker-4c-4g-515 sshd[1584]: Received disconnect from 10.32.4.5 port 55288:11: Closed due to user request. [preauth] Apr 14 11:31:57 prd-ubuntu1804-docker-4c-4g-515 sshd[1584]: Disconnected from invalid user jenkins 10.32.4.5 port 55288 [preauth] Apr 14 11:31:59 prd-ubuntu1804-docker-4c-4g-515 sshd[1602]: Invalid user jenkins from 10.32.4.5 port 55290 Apr 14 11:32:00 prd-ubuntu1804-docker-4c-4g-515 sshd[1602]: Received disconnect from 10.32.4.5 port 55290:11: Closed due to user request. [preauth] Apr 14 11:32:00 prd-ubuntu1804-docker-4c-4g-515 sshd[1602]: Disconnected from invalid user jenkins 10.32.4.5 port 55290 [preauth] Apr 14 11:32:01 prd-ubuntu1804-docker-4c-4g-515 CRON[1604]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 14 11:32:01 prd-ubuntu1804-docker-4c-4g-515 CRON[1604]: pam_unix(cron:session): session closed for user root Apr 14 11:32:02 prd-ubuntu1804-docker-4c-4g-515 sshd[1612]: Invalid user jenkins from 10.32.4.5 port 55292 Apr 14 11:32:02 prd-ubuntu1804-docker-4c-4g-515 sshd[1612]: Received disconnect from 10.32.4.5 port 55292:11: Closed due to user request. [preauth] Apr 14 11:32:02 prd-ubuntu1804-docker-4c-4g-515 sshd[1612]: Disconnected from invalid user jenkins 10.32.4.5 port 55292 [preauth] Apr 14 11:32:04 prd-ubuntu1804-docker-4c-4g-515 sshd[1614]: Invalid user jenkins from 10.32.4.5 port 55294 Apr 14 11:32:04 prd-ubuntu1804-docker-4c-4g-515 sshd[1614]: Received disconnect from 10.32.4.5 port 55294:11: Closed due to user request. [preauth] Apr 14 11:32:04 prd-ubuntu1804-docker-4c-4g-515 sshd[1614]: Disconnected from invalid user jenkins 10.32.4.5 port 55294 [preauth] Apr 14 11:32:06 prd-ubuntu1804-docker-4c-4g-515 sshd[1616]: Invalid user jenkins from 10.32.4.5 port 55296 Apr 14 11:32:06 prd-ubuntu1804-docker-4c-4g-515 sshd[1616]: Received disconnect from 10.32.4.5 port 55296:11: Closed due to user request. [preauth] Apr 14 11:32:06 prd-ubuntu1804-docker-4c-4g-515 sshd[1616]: Disconnected from invalid user jenkins 10.32.4.5 port 55296 [preauth] Apr 14 11:32:08 prd-ubuntu1804-docker-4c-4g-515 sshd[1618]: Invalid user jenkins from 10.32.4.5 port 55298 Apr 14 11:32:08 prd-ubuntu1804-docker-4c-4g-515 sshd[1618]: Received disconnect from 10.32.4.5 port 55298:11: Closed due to user request. [preauth] Apr 14 11:32:08 prd-ubuntu1804-docker-4c-4g-515 sshd[1618]: Disconnected from invalid user jenkins 10.32.4.5 port 55298 [preauth] Apr 14 11:32:10 prd-ubuntu1804-docker-4c-4g-515 sshd[1620]: Invalid user jenkins from 10.32.4.5 port 55300 Apr 14 11:32:10 prd-ubuntu1804-docker-4c-4g-515 sshd[1620]: Received disconnect from 10.32.4.5 port 55300:11: Closed due to user request. [preauth] Apr 14 11:32:10 prd-ubuntu1804-docker-4c-4g-515 sshd[1620]: Disconnected from invalid user jenkins 10.32.4.5 port 55300 [preauth] Apr 14 11:32:12 prd-ubuntu1804-docker-4c-4g-515 sshd[1622]: Invalid user jenkins from 10.32.4.5 port 55304 Apr 14 11:32:12 prd-ubuntu1804-docker-4c-4g-515 sshd[1622]: Received disconnect from 10.32.4.5 port 55304:11: Closed due to user request. [preauth] Apr 14 11:32:12 prd-ubuntu1804-docker-4c-4g-515 sshd[1622]: Disconnected from invalid user jenkins 10.32.4.5 port 55304 [preauth] Apr 14 11:32:14 prd-ubuntu1804-docker-4c-4g-515 sshd[1787]: Invalid user jenkins from 10.32.4.5 port 55306 Apr 14 11:32:14 prd-ubuntu1804-docker-4c-4g-515 sshd[1787]: Received disconnect from 10.32.4.5 port 55306:11: Closed due to user request. [preauth] Apr 14 11:32:14 prd-ubuntu1804-docker-4c-4g-515 sshd[1787]: Disconnected from invalid user jenkins 10.32.4.5 port 55306 [preauth] Apr 14 11:32:16 prd-ubuntu1804-docker-4c-4g-515 sshd[1867]: Invalid user jenkins from 10.32.4.5 port 55308 Apr 14 11:32:16 prd-ubuntu1804-docker-4c-4g-515 sshd[1867]: Received disconnect from 10.32.4.5 port 55308:11: Closed due to user request. [preauth] Apr 14 11:32:16 prd-ubuntu1804-docker-4c-4g-515 sshd[1867]: Disconnected from invalid user jenkins 10.32.4.5 port 55308 [preauth] Apr 14 11:32:18 prd-ubuntu1804-docker-4c-4g-515 sshd[1901]: Invalid user jenkins from 10.32.4.5 port 55310 Apr 14 11:32:19 prd-ubuntu1804-docker-4c-4g-515 sshd[1901]: Received disconnect from 10.32.4.5 port 55310:11: Closed due to user request. [preauth] Apr 14 11:32:19 prd-ubuntu1804-docker-4c-4g-515 sshd[1901]: Disconnected from invalid user jenkins 10.32.4.5 port 55310 [preauth] Apr 14 11:32:21 prd-ubuntu1804-docker-4c-4g-515 sshd[1905]: Invalid user jenkins from 10.32.4.5 port 55312 Apr 14 11:32:21 prd-ubuntu1804-docker-4c-4g-515 sshd[1905]: Received disconnect from 10.32.4.5 port 55312:11: Closed due to user request. [preauth] Apr 14 11:32:21 prd-ubuntu1804-docker-4c-4g-515 sshd[1905]: Disconnected from invalid user jenkins 10.32.4.5 port 55312 [preauth] Apr 14 11:32:21 prd-ubuntu1804-docker-4c-4g-515 useradd[1912]: new group: name=jenkins, GID=1001 Apr 14 11:32:21 prd-ubuntu1804-docker-4c-4g-515 useradd[1912]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash Apr 14 11:32:21 prd-ubuntu1804-docker-4c-4g-515 usermod[1919]: add 'jenkins' to group 'docker' Apr 14 11:32:21 prd-ubuntu1804-docker-4c-4g-515 usermod[1919]: add 'jenkins' to shadow group 'docker' Apr 14 11:32:23 prd-ubuntu1804-docker-4c-4g-515 sshd[1964]: Accepted publickey for jenkins from 10.32.4.5 port 55314 ssh2: RSA SHA256:MwkAMVxCcf5mjE3h3rXSsWkdX5TtX0v/kuPsZexJ1qI Apr 14 11:32:23 prd-ubuntu1804-docker-4c-4g-515 sshd[1964]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Apr 14 11:32:23 prd-ubuntu1804-docker-4c-4g-515 systemd-logind[1013]: New session 2 of user jenkins. Apr 14 11:32:23 prd-ubuntu1804-docker-4c-4g-515 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Apr 14 11:33:01 prd-ubuntu1804-docker-4c-4g-515 CRON[2491]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 14 11:33:01 prd-ubuntu1804-docker-4c-4g-515 CRON[2491]: pam_unix(cron:session): session closed for user root Apr 14 11:34:01 prd-ubuntu1804-docker-4c-4g-515 CRON[2533]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 14 11:34:01 prd-ubuntu1804-docker-4c-4g-515 CRON[2533]: pam_unix(cron:session): session closed for user root Apr 14 11:35:01 prd-ubuntu1804-docker-4c-4g-515 CRON[3947]: pam_unix(cron:session): session opened for user root by (uid=0) Apr 14 11:35:01 prd-ubuntu1804-docker-4c-4g-515 CRON[3947]: pam_unix(cron:session): session closed for user root Apr 14 11:35:42 prd-ubuntu1804-docker-4c-4g-515 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/nonrtric-plt-dmaapmediatorproducer-docker-merge-i-release ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp Apr 14 11:35:42 prd-ubuntu1804-docker-4c-4g-515 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)